{"type": "bundle", "id": "bundle--2fd63e32-1a95-4c19-af65-acb43494c77f", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "name": "James Brine", "identity_class": "individual", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "location", "spec_version": "2.1", "id": "location--30e6aca8-070a-47e7-9a89-cfc275e55917", "name": "DigitalOcean Toronto", "latitude": 43.6547, "longitude": -79.3623, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "CA"}, {"type": "location", "spec_version": "2.1", "id": "location--a150a196-e463-431c-b48a-ba9fd834315f", "name": "Reverse Proxy (Perth)", "latitude": -31.9505, "longitude": 115.8605, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--6edb891b-13d3-4d00-8840-255c12c36fc3", "name": "Vultr Melbourne", "latitude": -37.8136, "longitude": 144.9631, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2", "name": "Vultr Tokyo", "latitude": 35.6762, "longitude": 139.6503, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "JP"}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--41a91cad-34de-4c15-a211-cba98b76ea68", "name": "Cloudflare Global Edge", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--af2a79dc-f5c6-4490-b4ad-fca24da30758", "name": "DigitalOcean Toronto", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c4b1f814-8796-490c-ae23-1e6fbc5aad5d", "relationship_type": "located-at", "source_ref": "infrastructure--af2a79dc-f5c6-4490-b4ad-fca24da30758", "target_ref": "location--30e6aca8-070a-47e7-9a89-cfc275e55917", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--1a043d64-b6f0-4bdf-88bb-b3a5b8d1218e", "name": "OpenCLAW Dashboard Decoy", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--283a3413-9ac5-4319-ae75-ab7c969c3203", "name": "Reverse Proxy (Perth)", "infrastructure_types": ["firewall"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--597632e3-cdc1-4017-9476-4b07c756fbc8", "relationship_type": "located-at", "source_ref": "infrastructure--283a3413-9ac5-4319-ae75-ab7c969c3203", "target_ref": "location--a150a196-e463-431c-b48a-ba9fd834315f", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--dd89cfb5-841d-4d47-9939-932b270319cd", "name": "Vultr Melbourne", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b0fb412f-1a3a-4540-9e5d-ec749a75bd16", "relationship_type": "located-at", "source_ref": "infrastructure--dd89cfb5-841d-4d47-9939-932b270319cd", "target_ref": "location--6edb891b-13d3-4d00-8840-255c12c36fc3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--54248e06-00a0-4fbd-8d07-5e75b1e38491", "name": "Vultr Tokyo", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae56fc39-15d6-4317-a061-a8ab049cd338", "relationship_type": "located-at", "source_ref": "infrastructure--54248e06-00a0-4fbd-8d07-5e75b1e38491", "target_ref": "location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--6725651c-52bf-40f7-bf2a-10fe38562d4a", "name": "CVE-2002-1149", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--d96c63a7-fed3-4abf-8334-a600fc9571df", "name": "CVE-2019-0193", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0193", "external_id": "CVE-2019-0193"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--a9662e46-4e5c-492e-8f0c-d8a68b711852", "name": "CVE-2019-5418", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--cf0a3d8b-5957-4e13-907d-8b0816ebde95", "name": "CVE-2021-21985", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21985", "external_id": "CVE-2021-21985"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--45ea53f5-26e6-43b4-97c4-33add5bebbf6", "name": "CVE-2021-22005", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22005", "external_id": "CVE-2021-22005"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--d3d48e11-98c1-4f64-b1db-624611a10a69", "name": "CVE-2021-26855", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--b3bad351-28c5-4f35-ba75-f7a777173900", "name": "CVE-2021-34473", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34473", "external_id": "CVE-2021-34473"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--501b7c00-c25e-4982-b0bc-0bcf23f7f8f0", "name": "CVE-2022-22274", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--09e8004f-6e38-483e-978e-fb0f092cda87", "name": "CVE-2022-22947", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--8399d8a5-0d5c-4353-8f5d-9a5c90460c8d", "name": "CVE-2023-0656", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--4ce13f05-f038-43d9-ad03-f2a70de257be", "name": "CVE-2023-1389", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--5e475c1d-71d0-43e0-9f8b-68c3071ac97e", "name": "Network Service Scanning", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1046/", "external_id": "T1046"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--9f6bd0dd-9d9b-4eea-b75b-9f1c56fe33c8", "name": "Exploit Public-Facing Application", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1190/", "external_id": "T1190"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--d867a213-be6c-4d69-afb6-caeecab59af3", "name": "Credentials in Files", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1552/001/", "external_id": "T1552.001"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--8a8bb6e4-b7c8-4514-9164-c7db99614575", "name": "Cloud Instance Metadata API", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1552/005/", "external_id": "T1552.005"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2080be-d991-430a-a1f8-f848ad78071c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.189.82.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31305f69-a2e5-4956-a42e-c8e2b39494ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.21.174.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4bf741-4671-4565-97e5-8914c570c5f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d6b61b-72ad-4773-95d8-33f926a7d268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.30.190.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caaeb2b4-f869-43a0-b746-3d556069a194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.34.65.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38bec5bf-27ec-4dc9-82b3-c7cdd102442a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.36.66.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--979f06cb-1026-4e6b-9d82-f8ca4ae1c548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.54.62.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0133f3a-d5fd-4d28-a4cf-f5e858078c64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.65.158.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7d9571-1eb7-42d4-b0e5-0c855cada229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.83.125.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd096f0-d1f7-4448-9b6e-864639c65ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.26.102.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5f5ee8-d4c2-40d3-bab4-951cfd07e47d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.153.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf5f26d-c104-49e8-b460-d626b0f1f867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.191.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2423073-56e4-4941-a490-5d5781feb0cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f21eaf3-c402-40b5-8b37-d45b7127db06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae8d9d2-dbab-4ba5-8a86-9c1c70420c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--962e7b25-f1ab-4b79-b289-d8e283fcaa9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e607cb-1d26-40af-b05a-fd640579ab78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d6a2be5-9d1c-4951-8473-93a9b2e9f5c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5960b0d0-2749-4103-b092-61af81b05126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c8bb78-4d09-4fd7-9b81-68ec28bde967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b65fd3a-941d-4aea-80b9-02222c962f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaeadfeb-5203-47af-a8b6-3e3f9023eab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7559966f-fe4a-434f-8a3c-5edf3abf64b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87394484-0a14-4e60-beb2-a71ebf3d9142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a14d9e1-5b74-45aa-a3a1-5c38a97c331c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ec7524-cf21-4ac7-9d44-db9cc73469d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2f47fd-52b0-46ea-b8e1-f9c9ba5514fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e1a0866-727b-412e-840c-b47b016cde74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7ffa7a-7048-4949-b8e4-6563d3f50f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ff54fe-bd9f-462f-a0ee-2660d795d5b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce53387e-d36a-4445-ad1a-6ca1422ba250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972f7621-d5f5-46b2-985b-37e8a4e3db8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7003c01-c513-4117-a346-915cf06f3c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd4d7a8-b4a0-4651-a549-bdc07e857187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f7ee51-3cc5-4901-83a7-4f50408308ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.117.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7498776d-0106-4581-8bb6-7bd1c93d5bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.17.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa92c22-3040-497f-b335-ff2e7b8edbad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.51.6.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecbcff35-e91a-441d-a1be-b278b4658a67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.54.213.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05186a7-498e-45df-aed7-049f46df74c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.55.74.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9969642-58ac-4263-af4c-d8a5d00966b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.59.195.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74471a3-bf82-43cc-a032-cbfee5ff37bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.59.196.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84251e81-8ff4-4272-89d8-6b3804e409c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.132.250.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01cbe03e-ddd3-42fb-8342-396e86a1f993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.17.87.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c18a422-3ceb-4557-afaa-de04cd256957", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.249.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af431532-a483-464e-92ed-7666c09bbfc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.49.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b266b74-4828-4b61-b5dd-e814e9f8a3c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7707710c-2913-43a0-bc40-d8aa66b5c128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a4be2c6-f6c4-4cce-8829-70de874ed46d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6bbe111-60fa-4052-b6c4-2745f59b78e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d3f51c-976b-4689-a604-da2740193483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3bf36a4-3912-443d-8d7a-8ba12a6ad572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5c095b-6b3e-4d6f-beaa-ff64646f232a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca93e152-bb12-459b-85ce-7adfaa2d5bd4", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.110.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef0f698-32e9-4bc9-84dd-5b84229ced9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.110.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe01844-f598-46fb-b2d9-ede74badac79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.112.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e27c4d9-f8b6-4bf0-981b-259e97c976ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.119.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e57e66e-8166-4ff4-a9b6-1acb6c0c926e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.121.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4552d1ec-a4eb-4956-83d4-896725dc4e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.123.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d090de-3c06-4dc5-88d8-faf8a5c805d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6158db68-2210-495b-a1c4-361e09d8c4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--861e3ba9-4522-4997-ae90-ac1948a6aca1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--873b79b0-6013-4d69-95bc-1f0788d453a6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.25.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a235fa-8687-495e-a2f5-4434d7f7c608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.71.37.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca97691-940f-4462-9d10-a0323e5b4895", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.213.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7264e03b-a5c4-40c1-9040-2610aa8c0787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.234.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af587685-d0a6-43f5-83d7-bd1f98f6050a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.158.7.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2167b37-9e5f-438f-b0e9-d138781617f9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.164.172.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb3a9f0-9090-4dc2-9eaa-9aae654202a9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.204.199.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac4c8d02-b83f-4540-9ef9-c39a5afb25e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.219.210.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fbb6de8-0a79-4ad4-8e33-1abda88fd6e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--553f5690-1aae-40a9-9918-a2d1518439af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--958dd2d1-a92e-451c-913b-cf47f27d6e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44bc7621-29c2-4a82-881d-41f944eef455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa2f0796-8190-4e53-aec1-332eabdc1507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ce3ac5-b16a-4afa-a7a1-301535400601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--639ab49f-9034-4d2d-b0b5-6c23b44bbab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.161.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f01a9fdf-9d2f-4721-94cc-757ecb20efd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.161.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--538eeecb-1ad8-4601-a2aa-a030e8cca938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.223.174.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac1ae7f-5786-478a-9732-4d9a6391483a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.31.226.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d23f2e66-3b71-4764-9b27-aff77bde42bf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.98.81.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd4e171c-7ea4-450d-b3e0-b54267745a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.210.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6198a40-6030-4214-834e-07ade1beabd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.104.121.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8361a9ff-2b4c-4f03-b173-ff8af91c5f1f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.112.226.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3399f831-3eb0-4aa3-9703-93694a48af0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.118.29.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de87f5a-78a1-45c8-85a5-c13ec336e2f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.118.29.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d68cf4f-6d6a-446a-803c-e7476fafd0be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.122.221.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a98bcf82-66bc-40d8-b80a-ac2b962f3bac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.127.4.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8943de5d-baf9-4869-9107-90ee6a318455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.130.209.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d6449a-ffae-4061-87b8-9e70ff7af567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.139.45.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de209b9d-dd8a-43b2-9a53-bc4e7d0f453e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db38467b-4e0a-4719-9b10-8cff4ab840aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67cd2e20-ed52-425b-9f39-57eb3fe61e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.143.10.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b783e183-80fb-4bcb-a526-b2c920845858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.170.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a335e2-2bc4-4be9-aa43-515f2b696433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b61d505-f9f3-496f-ae88-a01bcd97d8b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.15.222.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d10b340e-72e8-46b1-a97e-0dcb7f6cc483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.152.101.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cdbfa58-32dd-4793-b3c8-ce7ed76748b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.152.239.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--646a362b-0a9e-45bc-b9d3-83b76930e395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.68.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--935aab5d-0444-4055-9159-1185c29b7fee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.160.213.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e59c363-bd8f-47ed-abf1-8a652fbda5c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.161.207.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ba4f54-f84f-4273-9dca-5458373a8527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.163.36.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c369436-285e-4c9a-a4be-3c39bfcfc28a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.78.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d738fd-edf1-41c0-8be1-5d16f29ec159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.227.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fbac7ba-28a9-4478-96e2-733d2c63c51e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.7.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c50846-9212-4450-8608-3a6b12d73869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.20.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daa8f094-4b66-4908-b0b9-4cb44aa27d2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.179.190.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a01796-6e56-4ee0-ad61-aab22226dcdc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.18.35.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeacaa58-9a05-48e2-be68-f3926bfb7ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.184.238.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--140ce233-8c19-40e0-95c3-bc924bb6238c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.189.119.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea77b173-8012-4ffc-9fa7-5ec320ca6bf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.194.175.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--020ae1e5-35e4-48a3-9925-fb3b84c95735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b7dc00-97e6-46f5-afb1-f6bb16b734fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6bcf9e9-2edd-4c94-808c-ef1d2e1b51e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37984574-ac0f-4301-a723-ade594440922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b433529-f14b-41a6-8f22-3b53c1ea8365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b61fef-022e-4649-adf6-09d77aebac01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b1ba0e8-101b-47e3-8832-d1e4738bf3f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.58.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b58672-7049-4d45-8307-ff62f6108085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.59.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--401d601c-20c7-4832-a23d-e2b73680bc7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.75.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2466a354-d1db-4032-95fb-287594fd82dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.207.183.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54bbf692-5ee0-416c-bba8-8487a954d0bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.215.223.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a5b31f-ef0e-4f3b-a515-743221f15142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.217.191.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab83b60e-7d53-40f2-a874-fd80915ad750", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.230.220.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eaa4b6a-15a7-4e88-9dfd-e455360c0f6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea43e19-6ef8-4f2d-9cfe-c4fdd2711979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dac07f3-b505-4650-8a5b-78f0e8059781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5757b26e-fb78-4539-989c-6b1b53254440", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.236.77.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938dc461-741f-47df-85ac-fc339cc10b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.240.197.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c7a867-81e6-4daa-8c63-d92a08be962e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.244.172.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--288bf80f-5674-4b0d-a642-24f2fff4d5f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.244.189.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f409bd6-1cca-47a3-a6c0-6d1b3fe6ee83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.249.70.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98a220a-4cbc-40a4-acb9-ba978e5b26e0", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.26.82.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a858cc10-b0e5-490c-9563-71f63255b463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c15fa695-d1f8-47d2-8503-3f425fcc4c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a99a87b-d8d9-472e-a281-5d3b02e8a6bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a55d4c-dcfb-45fc-8f52-048e7b7f0c06", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.59.161.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa16d935-07fe-4458-9732-69bf5faa7f3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.63.24.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--833efa65-14da-4208-b0f2-fa279d93edfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.73.119.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084e6f2f-b25c-44fe-aab4-07f275ac868a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.101.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e5184a-f8b0-4eea-854f-903ab60c65a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.175.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ee7335-0c50-4ef8-8822-b8a1936ecc68", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.78.2.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--341348ef-0980-4bfa-851b-590e1392c83e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776aa21f-98e1-49f4-9888-c1b1066c9222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f5cca6-e616-4a2b-ad21-e153d997940f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1ca906-fc2b-449e-b2a4-3beca51db095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11dc0fe1-dfd3-4fda-8228-f037220d6026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b24592-4558-4415-a0a8-49048d5ef1db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8da6a806-2f6a-4e40-b20a-c9624f06c3c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f6ce2e6-75f8-4aeb-afe1-1d37b40d3585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57104359-6ad8-4e37-93f8-f0b151f8cba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba97617-5091-4eb6-8f4b-ca82910bf801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63607a5-28b5-4762-b637-d7e15013b7ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c81e10c-e3a1-458b-8b4c-c1ad2df8b1ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7675b65-60d7-4469-a647-c2a8b8878f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c34d125-d7a7-42a6-9dce-2099d32405d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e50290-d5a9-4f74-83bb-29d39d1b1dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4905e6e2-59e2-4725-be99-a466cf225027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e2c904-7f5c-44ed-a96a-19b105b71124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2047d87e-117a-4bba-ad24-b2bde09d73aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623d22eb-2fdb-4329-80af-1d5d28228335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bedb05c0-2434-4eed-885f-919b11da104b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6edc71a-3616-4981-aa35-94f7155f4f5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ecafc0a-65c3-41f5-87e5-a7e80eb210dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd45008-b4ec-4802-9124-4039e1d044d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2910b65f-5638-492b-8014-1a0e1d5aed81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f368ee6-672e-4c57-8bd4-c1ae3729013d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b847792-de61-4664-b66b-9b3d1d3ad956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048d3add-1591-47ab-8340-b4da58cd8ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f35650-7768-4d77-9a23-eedd1fc071a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ee041b-42ed-4e7e-9ccc-02a31ba2ad0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d22a12-a552-435c-a54f-3973a37aa8fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e77735-51bf-43b7-b8f5-c72c1131b079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004e981c-55fa-455e-a738-ad6c844cc538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d4a92d-6e33-47a6-83e2-c385d27676fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--591adc08-7f59-4002-a46d-1f5129781f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8db17a-03ae-4075-a588-ce2edf5dcdd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c803919-ee95-4ad9-adab-1607def78d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d97a383-78fe-408d-bdd8-6bfa54754c70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3da19f0-e266-4a27-b2a4-967cdfc1daa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46fbe13d-eed0-46b5-8948-645cb3d58581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba372989-eb1a-4528-9eef-60f93f26ae5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6884bed-cc21-4b5a-9710-d8e4d3703c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe505427-3cc1-4878-831a-7a0748b81988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fba9406-e3da-4777-a64e-3c949a9413e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca53ec3-0d23-49d7-b0fe-dd5f9b97e8fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367fa2f5-cde4-4736-b421-33c6bc24cd2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26581a6c-2ab2-4dfc-9974-89242cdba5b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61a955d-d2b3-4445-a3c8-375fe46c74c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7804fba1-2fb8-459c-94fe-43aacdac31e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8077424-c65c-473d-88e4-5b89033dc6c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8150b49-cad0-4cb3-88c4-db54ec6a311e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3e3b60e-c42f-49a8-a2f4-00e7de49b2d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59472540-ff96-43d1-a710-3daf3f7b8b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad0bd9d-0ed6-4d3f-91b0-a6327c0403c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8017c788-fce8-4b0b-bbbd-e1bc3d044a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1d96c4-217d-4a32-af49-8f323aa4fc21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9df71f-f23b-4056-858b-1f386b879a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f32da1-37b8-4cfd-85d0-6069d5fa17da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7acc9136-4305-468a-bb4e-4f9a5f10bbcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f834e1f-e6e8-4e4f-b6cd-6e164655a752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db09b66d-8044-4968-bd7e-9f6b54de08cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c54c290b-9979-4f5d-bb11-0227d6810111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01aafe6c-ce64-4467-b291-4aa3ebaabc87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c2a25ec-d66e-4f57-bc70-b6819bace672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb9bbd9-ffd1-41c6-8882-937c05751fe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05ef99d-ffff-43a1-9d68-27cffe50744e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--413d2cfb-be3d-402e-a8ce-10a92aa4f49c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bd3283e-0127-4e1c-9617-292098f832e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae39fccc-78e3-460f-85be-bc009a6d5537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c503ec81-6303-49c8-bae9-d5f46ba2889b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ffa4ba-47be-4bf8-bdc7-76ba16fcdba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fac692e-58c9-4ebf-ad49-b6e7f56d604d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5753c4-cfee-4651-a76b-25428473970e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6e2a2e-5ec3-4bad-ac6a-76878298d201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75998ad-bd7c-48ca-97a0-4ec88853a72d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b464193-ee30-41e7-b6de-551a93ad3f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d78e7f3-1219-4a58-ae84-db14d2503231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e2ea0b8-7173-4969-9f1f-990b01a007f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4af84a2-4263-40ba-9a56-938c5fd55418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21306c71-fa3a-4ef5-8321-89bd8c2f49b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c372eb-cddd-4eab-8a39-04f40c3c639f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba983e4-ec65-41f7-81b5-cb84ce32cf9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78022608-aa4c-408a-a43f-0d4f89d78a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d57a986-c539-462c-9f8a-3edcaaf437a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26793cb5-e1cc-4a0f-a868-cf292990bb7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b21513-b4de-46b0-b5dc-91a88785bc55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d6016ed-a237-4072-a647-a2f7afb8fc04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd08115-4e13-481f-a9ca-0627f0026c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2dc258-aed2-4790-af82-24ee66d4ab3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569de5fa-3010-4215-9615-e290589a42d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248a96b2-59ee-4a62-9b44-d764ac987d76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc7b07a-d15d-4a12-977d-fb1b6c8f58f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b15be666-5717-4f8b-8e49-50a39baa8534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0305471a-631f-4c81-89ee-5e39ceec95cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1b7df0-c9b8-4211-9c00-b7791cf19666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0456d68-86b5-469d-8a8b-aadf1057ab73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56c1c733-998e-41f3-8d29-41befece8cfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c811ef6-a374-4c7e-b0c0-aa094b13f7dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59ec07ca-591f-4028-858e-70aa52c26544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a39f5f-d03d-4494-8d99-2dd36e720f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e22707e5-8200-4e9e-8f00-9fda1c7542f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dd5be98-9e25-4a88-82e7-89f09d0074c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e3aba0-2827-4105-908d-0f55667f99c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4bd5b0f-41f5-4a4a-ab09-ee5a358190d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bad43e5-0346-4938-900e-34b483d10f6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1eba1e6-e284-4b45-acdd-38e00040b82f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42935147-100e-4494-ba6b-83ddd8ecaa0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3d51ba-f18b-4850-8bec-4a02ec1edda9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06bc516-a0b0-47b6-b717-58bd49c82594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--601471c4-f12c-4b45-af59-03921768c70c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4035b803-1a0e-412e-a595-9394587f55af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5655faf5-4492-4431-b89a-34d6162f214f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3e34876-070f-484f-a11c-8f357c6de213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c25e15d-d645-42a6-bef6-9c53014236b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e07951a-66e5-41ed-9249-e1a18dd3984d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e680e3-a114-4350-bada-7b47b4019bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bba8633-3f36-4f37-8dcd-c8657686293c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef56e33c-2d9a-4cc4-9129-1641f109f8d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a0efed5-db9a-481f-ac16-1d67e2c4a7a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26ede0c7-e143-406f-aeca-2f5a5a25fdf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7776b8dd-835c-49e2-a984-31d410cefe52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560fc8a1-8ec8-489b-b7d0-8e4569b4f162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae5a380-00dc-42aa-a965-bbae5089cf83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062799bf-075f-4335-8300-dc6b060ca0c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a874756-5053-47b9-9b4b-2599d09386ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3a4079e-c416-4e27-a918-333610591358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df483e19-94a2-4447-a065-4e5e96298196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a309ff-2203-4571-9a9f-bdea5fb22d18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c447825-44cf-42a0-9f3e-82bf6d8f9df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb7552c-1ada-4d0a-8bae-af81e91bde70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5342c53-880d-4c45-87d7-522747301eba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33bf4e15-1c4a-433e-aea9-b0dd102017cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2922cda9-008e-458d-a1a6-8d7c9b2ae657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edfb8efe-0ea0-41f7-a416-05b263acb775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc267a2-3bc3-473d-89e9-31118dcd5192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f4b8ae2-c0a5-4899-a6ca-82f84a907ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c3e96e-8ade-4b01-a878-2422b206b24b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62164c48-6fa0-4911-b03c-e63b6042a2a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe1dd5d-ca41-44c9-b173-e849faf962f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8cccf53-4be2-4d1f-b758-ee402314d8a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b462b4a-7479-4f90-a0f3-72e0a4c6dff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e0854a-f7c3-4d40-beef-5cea8c1055ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea8d8de-6866-4af2-b797-995321010dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9f17fa-697d-4e4d-8998-68ba35cbdaf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe064c29-243c-4789-bad8-af8902f4ed43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30d1408-edb5-44bd-95fe-d296ab162669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b808bcff-4abd-402f-92e2-6e70afec92d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee87e1c-3828-4140-bdaf-8801a99e6f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e3e685-a984-46f6-9d2b-9f2f85d9361d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bb6ff10-7fe1-4607-a5aa-f43cb30a5048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8ef6d2-f595-48e6-89c6-83e312406f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c09c95-9478-4458-b35e-c3bf3b38bbfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6938deb-d61e-4e19-bb1c-d42592366285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b75106d-806d-42c4-b95e-241016b77893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53861b79-8c4b-4748-ac04-ad0d222c20aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f54d544-c613-4931-bee2-92afc88888d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd236b6-9b93-4b06-a399-68d99b284f80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77900c5e-fa73-4f1a-9f96-4ec6b4b6c5e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbac78b1-1a1f-492d-96a9-f848071958e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b055ed-c92e-4979-a4cb-2e36309ccedb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3b4d7a-3a87-4efb-b979-1711ea302770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49596efd-13ac-4bd2-80be-d4ec289d359a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ffeca9c-b58b-4100-81d9-4cee9ab0e382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82337eb6-2649-48c6-9494-db8504398e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a42765b-6700-444e-81ed-609211175e7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5457450-9671-45e8-bcff-eb5a78343d73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3486b25a-b452-409b-b28e-b6097dd0b233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583c5798-a7f4-4a2d-b811-cb633df32730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3111bc-2188-4668-9f4f-fefd60c98652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6085722-489f-4ffd-8b52-ce903960bf2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--292eac95-d0fb-45f8-ab0d-31556c1e94a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a416bda0-5d9e-49e3-afc5-b783413dd695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--620fbb29-bd20-47f2-984b-439a832f7ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16425652-6b5b-41af-b2d0-a1545ba2acf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea4c425-2dfd-4e61-924c-1fff943975fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f339ee-c49c-4331-a613-1ceee1bd8d18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3268dd0-face-487e-849a-9c7f8e439cad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34061ac7-9fd5-42df-b731-aaa6b1fb5723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24623afa-3634-4b1a-8637-20c15dca8754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb22ce9b-a5e0-45e9-9ffc-c5fa8bc4674c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c16c020-f7ee-4043-8401-d85b4b2f258e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff026910-9363-484d-a539-a4920e85dda5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4a453a-c5ba-48d7-9353-26929a3b9652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df39805-3de7-4d66-8979-a01730d922ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b92228a4-c9cf-425a-9ddd-d988f9f95cae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1fb3729-c41f-47dd-a443-aea807e158da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac08e5a-8f8f-4d82-a1d1-8c9e460bfaf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f0baaa4-0589-4cb3-90aa-0c1d739fdaf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae3e6bf2-3621-4cb6-ae35-01b67041c820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8df73c3-ce85-4ca9-82c3-903ee434d7bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b9382a-2d7a-4b5b-8937-b812795f5011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c0b605-6a29-43c6-880b-8fbf79ea2ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c03843c-3db1-4525-9ec5-c261ab0b4886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7971a5b-bb7a-495e-848e-045b918f74c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--454f275f-1db2-407f-aa2a-518c83dac479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298ed623-7e50-440e-bd78-995f1ad7174c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--837f6a9f-140d-45ce-a5e2-7b48ee11c3c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c323af7-7fc0-43bf-a51d-441ec0e6054b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd49c88f-decc-4422-a587-f294783d2bfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b20c39-5c0a-441e-86e2-803c35517992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a950975d-6e81-4b97-b96a-00b1ce7a6ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e537dee0-0d99-4940-a5be-f5e7a9e6144f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37518ac9-011f-4517-a57d-161677cfcd48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdfc54bc-7a9d-4631-8cb2-dc2e73a6958f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bfbc65a-54a8-4ffe-8ae1-dd9c5b389576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1c255f-aa87-4c82-9525-a3b5ce2cb830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6721893-b1d6-43cb-99d7-ceb2f9af8379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218087de-ac98-433f-89e8-6764de750d63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53aa3912-72dd-432f-9f61-8f5f78c1d661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ecd8457-3323-4185-98ad-c03b389b1910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9770179b-7d09-4b55-a12d-88b3b1bef30d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fba4afd1-764b-4422-b80b-4e9ffa00d313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b2d9dc-acc2-4253-bcc9-147c3698eafa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b860b09-9818-455b-bfca-9cf0787ef397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b7f336-c53d-46eb-b84c-8d581aa3be40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6f870c-7fe6-4247-a818-3f3aaabc59ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05b4299-1173-44a7-86a5-4f5505f1d387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4386b2e2-5289-4d23-9feb-356126a99fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0fd4525-d4f5-4bd2-811d-1b518c485e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a0092dd-05bc-44a5-b6fa-74f85b1d8ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc3f5cc7-ea7a-4374-abdb-336a9f456e08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--887bbedb-a716-45be-9d20-b78d4c4375a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f18916f7-9030-4a10-8e51-1396cdfd8729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d4803c-50c4-4b1f-bccb-3fb80acb70e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8924241-2963-4fd9-9fa4-f4061537cf48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d809fe9-75a8-4c68-92fb-338335376109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07fad533-5d49-4ac4-b349-bd78681cc1ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d535d45f-545e-47bf-a7b4-a4fa2f89ef27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cef577f-43ac-480e-9227-d0a689865286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--430aebe6-6b28-4147-881c-f41fdb09db8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d87feb1-275d-4c45-a8f7-ea8a3b2485f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69fa8c9-d810-4d22-8663-e25c1e64a309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8471fc67-6208-458c-87ad-d17933b71f23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea4bdc9-f270-4524-998e-e40819bab217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808361f8-9891-4cb3-b7fc-2762ba03c24e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228466f3-cf8b-4cab-b155-bd00d56d47cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3f5324-932d-48f5-95a8-4eb42cc778be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a7a2548-979c-4d28-90ee-be75bb0c45f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d18d0f-fc48-4f67-8ade-2e415e12ea44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1da9c6-4c96-43a7-8b2c-6daf2ce86e8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6618430-7f5c-442d-b9b9-75d45bb844ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c225a35-7de3-4c94-865a-2532ceb6d7b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fba753b2-acf8-43cd-afc4-11aa53324a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4bad65-fb9f-4ffd-8134-d4b40be8b989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5644d2b-79df-48d0-acf0-c2213b30aa93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628e8c87-eaa8-498e-b5c5-b83c94f23617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a43d1e3d-7cb1-43d6-9faa-8d6093aab8b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab4ff71-26aa-4655-a763-1cc03caf8c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2abbda1f-70d5-4633-a571-265ee5523373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ccc21b-6204-46d2-9c05-c63e1c7cb9e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef31de4-5155-43a2-a522-bf21c6c53411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3339f879-6769-47d7-8549-eefb8760b6bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a4aa27-53ac-4618-901c-b0cc7aabfaa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--134ea17e-ab69-4f36-a0a2-fdf9f9221efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca4692b-9fa0-457e-bf9e-86f6d3c56591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315256b1-79e4-4d74-a473-6b159dffb1de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a3f927-e704-401c-bbc6-5fd06f2b0ff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2995b64b-a216-488a-8c19-d28e2e44021e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8c945d0-9a73-4c76-8eb6-095b59ce785a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f75d0e-4caf-46da-8f87-5b6d87344d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f962eb10-2895-421a-980b-c065872b0278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842492fa-36ce-48aa-bbf0-c32236f79aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b61f3806-4d98-4cc8-941b-bbb4de9c1ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa4bb1a-0bf3-416e-a253-3d2a68fa3494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5551fcb-90b9-45d6-876c-0df0aa6fe563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef99dce-cb3d-4665-9daf-8db2b6a1ccc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7744ab2b-55d7-475c-82fe-be75273796e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fda3237-f429-4921-8882-042de226abd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b4926f-76fa-44a1-a9bc-5cc8a7ab8a0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c9e5d1-816b-40d1-b993-1416e8077624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52622650-5189-435f-8e05-dfa971ae9fff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2f8f0b6-4031-4f1e-bb86-f0d5feedad2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b76b07c-e4fd-4612-a52e-27aa60bc3610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f40de2-ea5d-4108-b824-da0b39994b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d285ae-525d-4cbc-b77d-96ea825a4616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac73385-c641-46f4-9199-58c8ccb86295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ec8336-dc77-4dd4-be2d-9fd3e65c5166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b69dc465-e44f-4aa9-8925-7e543d1c85ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--653c346e-8158-42e4-9473-fd5197fe6878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d8e659-252d-4168-8221-faad15fd4576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e97046-1644-4eb6-b4b7-5af2083ac638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--872f5936-debf-4dc8-a57e-ca0c61022741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dea02dd-0b87-4d98-a143-f103fb4e9a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--178a604c-6a82-430b-8cfd-d8ec7c367e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a955ae-36f3-43b1-9de6-1643c1659518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b785d6-fdcf-4737-97d1-912b55975d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba10e3a1-3176-4c6e-b4ca-243e3a41a2cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcae5949-9e8c-4bfb-b281-1e300ad77b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93e0edfb-9d4f-47f6-a9bd-b55497348792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e4ee2a-f635-4913-8868-a4b7c9dc535c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e6fea0d-3fd9-468e-8a5b-a2a6e91c0ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--695fa136-c8a7-45fd-915b-604b3fde7926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c07310d-d88e-489d-ab6a-f8d8edb8d6dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6374f6f2-547e-478d-8c35-e3cc67f252db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdfd0fec-b7a5-4836-b4d4-fc7304c3761e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d786a5-f5bb-46f1-96db-cd3abf02db44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab2aa75-c0c4-46c5-8cc4-5f70b95782c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f7d9f9-f62b-44a6-921f-639b1b610328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5bbc55-ac68-441a-9df4-f4169015f9ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6dfec3f-5141-45c8-b744-d15be627b063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482025d4-6ee4-41f7-8d34-077f11393a8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4818ea30-5df6-4992-8b38-516af800e2d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a28cc6b8-9b2b-4d56-9d34-200ae16f46bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909a86e1-eed2-4900-9f38-7cdffcfd3e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4641d80-b58c-4d0c-89d3-8fd1623afb43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1ecbc6-82f1-410e-97cf-b6dd9f8ad0a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31b96af1-8663-48f1-bb0b-0f66650dfc92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d19ec9c2-b17c-4b9e-8738-3c8477d7f4b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80dacbe3-c562-4af0-9023-03c569f41566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7700c5-dfe1-4290-a333-04365eb8aeef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a07dbe7-e02e-45c8-ad6a-331f86dc1359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff55bc17-81f1-47c2-ab39-423d5143be41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6465d63-57f2-480b-bb66-9804d500e8b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--098ce017-0f13-4c62-a9cf-8432784cc058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ccdba0-a08a-47a3-9c87-46a322f1927c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0b16a02-238c-4f96-99ee-b373207cf9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b062e4-d66c-4a18-a08d-b077f84cce4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7087f7fd-01e4-4acb-a076-de9831184b38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a7f323-78cd-4981-bbfb-385fd56ba39c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--389415d4-99bf-41c2-a7d8-9827051486d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc079f8d-e840-4787-a44c-0da19740dba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d50183-fdc0-4b64-ac4f-d5a29015aec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a92c4086-0ced-405a-8f28-2d26d31bc4e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c94ecce2-1778-4229-b144-6838d03a4f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32b0bb2-4f27-4d4b-ab67-99e5895bd35c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9857cbe1-b8d7-4bdb-8164-9caf70d098bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a303c76-f069-490e-9d32-baa7d9d239d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe470953-0524-422c-8f6a-10fbfec9c8be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea638f40-e24c-416a-93fd-df055fef61e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9512e51-f8db-407b-af95-1766998db8a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a684678-02f2-4102-8712-481a6b40133f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd7fb3e-ecad-4179-9c84-1a2323e25d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391e27b3-b75b-4dfa-b121-2a56bc2f15d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6232824b-4fd5-4476-83ca-6dc006a3c2e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae77240-af89-4a50-a27e-f646581e2b89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e212c34-4987-4c0d-b6b2-3ec250950696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205901e3-d1ea-4348-9ef9-409276c03766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03aa809c-7491-4548-873e-b6fcfb9f61ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddff7684-00f8-4e79-89cd-63e83ba8bab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed87325-05b5-45a8-89a1-4a245dbbde77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--158d2002-06d0-4a4a-a717-82ea4f58ffea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc632a6-9e72-4dcf-9ba1-862cd8f4a372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f12e5c7-2bf0-4a45-a2c0-98f96bfe87a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e3a8eb1-a2fa-4532-85cf-dc0bd59141d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72517c5-0260-4aca-b4cb-d5c19696a420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--731ec7d7-8710-4f25-80b1-f183c46f3ac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95ee237-545f-4fce-ac45-c45dc37d75c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d7df47-135b-40da-8bde-cd13fc88fc45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc2fb45-757d-408a-bae8-439bbead766f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff086c1-b600-4c0d-986a-6ee29b288c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb0f9df-7621-49b8-8063-4d90c715bd3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0931afd4-368b-4bac-8a3c-722e1e8f5307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d454a4-2dd9-489a-9b72-8c0f427c1a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb3c349-8aac-4391-9f0b-703a6461eeaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d2bb1a-bcf6-4988-83fe-924e96634d34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--affb9708-5f2e-447a-afbd-87a69f4b4fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c12a005-5916-4cbb-978e-8bb4f3158231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01974231-49f3-4644-ae00-76cc34ec7ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4206f22a-7f8e-4908-af53-4d07e1b7afd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab03f32-6cb8-401f-8161-d0fe5bccb8a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163b3927-b6de-4e36-8775-641fe154f489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8627617f-e2d7-4067-8870-35b88de30da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf0d1cc-ce7f-4ba1-8b2a-45d2e1817360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09239924-adb8-4a30-b4ad-25528cbdaeb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70a0513-2a4e-4b90-a19f-920c2507fe1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34069a54-21f1-45c9-b4a5-fd44e66dccba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc073473-97e9-4ffb-82f9-3651e0673ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1172e399-e10d-4a1c-a3ee-ca0cffdc7def", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ebcdd9-b266-48cb-995e-7c6c7503cec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f42742e-dfa5-4e65-a04f-562801fa0eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef3e4234-6a69-4278-b475-528d1cdae2d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0188db-f8b6-4c3a-9c4a-c0b062ab4ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb15cadf-4fb7-4c3e-9333-79f42b7f8623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df8e548c-11c4-45bb-9d8f-f4a47850eea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe95aa89-3ff1-4adc-a350-adef7c1da559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4519ff7f-e5e6-463b-8a82-5615e62d87d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca008686-0fd8-4da3-8a2f-ea1fa6cb33fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f041c4-923f-45e7-826d-fe8203d7bf07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--743d7546-241a-4983-8ae1-8bfa6bc3a329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afbcc7d3-17f0-4e90-9897-f25b7d1f20ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3792f72-8a23-4805-8877-93e8ccaa9078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb4feb2-eb19-40b1-94fb-5b872ff24059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65938267-84a8-44f9-93ab-f4abeaeee10a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9bd821-3d0e-40d2-8d49-40117fb65b18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de02224-8b19-494d-8098-c33500306871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c85c751-5716-4d64-8c83-bc6d03d23ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810bf7a0-e0cf-435f-92a4-769cf75966be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe72d76-13ae-4c96-9bf5-98a20affa797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5ec268-3d67-43d8-8f92-1fc9262ec4c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c035dc7-6d05-4816-9a3d-8d626c30cf76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3714627e-9ac2-482d-89ff-58a8423ff4ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e3410f-f74f-4d26-a8e5-21c24d82f820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31d8fc9-be52-4dd7-8e49-1c39f0c22e93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e900ffe9-8eb1-4fc6-9ba5-6afa32ff64dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c89e469b-f753-4651-8669-6e9e5666b8a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f668dcad-bdc0-4360-9d3e-0d058e2036aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d23ab278-c780-41b4-9703-00b25ebb3c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0097372-055c-45ec-a0f4-542bf7aebd32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--211de21f-b942-4c6b-9091-10c276de5ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ff4801-a840-4a6a-9336-ffc1795215aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f94a7e-769a-4ef1-a435-11f3274503dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc0472db-7797-4e08-9e3c-7705f778df5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff98a5f8-3fb9-4da7-bfdf-4e3968d47c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4889ee3e-bc19-446d-88dd-3e6fc43329a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--665524e3-2bcf-49fe-b768-fb888921efbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16139237-f301-4f6d-8f21-574de3c2a334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d7fc77-9bd8-49a4-b957-8644f8a9ec10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a6768d-5250-4603-9ebf-2f8bc1aeab97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73f72cd8-29e6-44b0-96c3-1a705f2e3c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ad269ed-1f18-4fbd-abe3-ff68255c2dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d03f83-7bf9-4f78-9e47-7e8137885086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33cf2491-c95c-4219-909d-83b9068686a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad9964e-a046-4ddb-8dcc-8453d4b53af6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--701a3c7a-51c6-42b5-bcec-2e83102b7c31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be480bb6-e922-4ae9-9b45-64d8995c75e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dacfa561-5fa0-47cd-8db9-ba633474fd42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6adaee7-72f1-4a21-8be5-cf41d284c629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05a4a67-9833-45a3-8aac-eed4bb10c716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199ef7f8-0156-4abe-932a-17f4dc849629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1def95-1868-477b-abe7-527c0034ac6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95851baf-7f75-4221-b3e8-accf9226eed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3594aa8-1462-4ac8-9345-09bf2e2577d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd359ed2-2879-4b63-8375-39468f40dda8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2363c1-3c35-49b0-833c-84a40bb9ef9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c901a1ee-f8f5-4249-9523-176631fb29f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c330d0-ebae-49a6-b127-37cede6cf67f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3312bf-36ed-40d6-9d33-68213c3d0b3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc252638-b57f-4f9a-9c65-d6712b6ff25c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fcd615b-b434-4548-af28-a22acf07ec1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fd6241b-9019-4c54-8a01-13230157af7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ab210a-829d-437e-aa10-590f880bb6d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3493d5a-9847-4cee-96da-fb9cb27577d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6335da40-5adb-4245-8438-887a45d7ab22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e9da41c-2ef5-4ecc-baa0-e0f1edb952a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78815221-2ede-4cf9-9a8a-ff9294f7e380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5759e7bb-33f4-4105-b33b-8b27c9c6d793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2c4512-c735-4c09-a140-1fef5db994a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a4ff638-b917-4e70-bfa9-c6fefe8fd098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca6b37e-0d3f-4d60-90fc-3a5900d9ee65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2817c591-eaa9-4cc0-bc08-a6fa6a001a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b65b8a-6268-422b-b4ec-dbe884d50ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ddf6984-1245-4af8-a3f3-5ac3dff8ed30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--701f7ae9-5a98-4eba-988c-d5d851846576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7ae64b-d473-436b-be84-b795b8bab1b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d799dedd-a515-43b6-883f-4cb6b8fa09d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2159146f-e616-4106-868b-104be4fa1eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--babd2b89-12f6-4bf0-82a9-2fa7116ab48c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff38e6bc-8aca-4b5d-a906-cdce118f76bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f44f925-8079-4923-a07b-c2af4d4ac578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb8ee1a-2525-45ee-876d-ef23251dea9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5eee5fa-1684-4b3e-a5d7-712b255acd2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b2ffe4e-5c66-4a2d-82bd-0f479153234e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ebe3f7-03bf-45b5-99a2-2fe7db04e96e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69cc73c-bec5-47c4-9453-72d338e98328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--533a2bed-f328-4b45-878e-1216e9aa63ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e62ea32-d8d9-4a4d-ab98-dbccd933d336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a91e7e7-ee66-4b56-83dc-09e87a10b99e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d0e53c-8107-470d-82a9-6e07a178b238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a223f0-e2f5-4219-b7be-e5e5da452c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a666ac6-1eaa-4c3e-ac36-82a53e19876e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5507a0bd-13ca-4e9b-9ce5-08cc69b008d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf132e50-2003-453f-ba85-c0a21049b008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beda11ea-f81a-4c10-8b05-08a0140fdf7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82f184ec-200b-4080-a98c-06b5866af138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9adfebd9-ea79-4053-8607-99592bd69664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ef2ece-3719-4dc0-81a5-0070eb7700d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a27ea054-5673-425c-8456-f0490948fabc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107eeae5-c6fb-44e1-8ee6-f25e95d0b0c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a998845-cb34-4b07-833d-8cd95f71698f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df0a5b3-0583-4e87-b047-8b3b2e66fcc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ebfe2a-c36f-4d57-bf28-363b1df3e650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a39ea914-436c-4c3a-bdc8-3e8c5300f545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbae7ec3-e075-44fb-89dd-07fc1432dd3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1c1678-df77-4282-bae6-6a6b7d64ae11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--553e199c-be57-4230-81df-111c6c55be3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d118bd4-0e71-4948-98be-14bad04b77fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30dc8dc3-6aa2-40f5-926f-cabf8f989ccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc206c2-903f-42c3-bef0-04197d0209bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de976f57-13b6-4abe-9f18-779de85ece2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b2386e-9a71-4b8b-974b-0079d65fd86a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854f796c-f759-43cf-8c9a-c207ab406c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbcac2a4-2edf-456e-8277-82d6409f4a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f59af24-27b2-4d7b-a207-8389b76afbbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--008e18e5-719b-4d69-927e-548f477ef700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6877a2-0ab7-44c5-a532-53d8cfc7065c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc7e9b8-ffdc-4da3-a808-b18922ca38bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7d8785-fe0a-41ba-8447-1f24cff35b51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ec82a4-6ac8-401d-a202-32280d640080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779c18ca-5a86-47be-9dae-85b4f98593c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30db9a42-d4b2-41ec-ad61-adfd8dcecd41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde9e3e7-4f33-47a5-921f-da1e8e0c4ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a9519d0-6e54-40a9-8e0e-ba73c959613a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--175655cc-3ac5-4da2-acd9-8d7479d8dd79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a345df-594f-4489-a96c-492715d1cbc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c367f53a-52fa-458c-b920-c4878cf786c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5464473-fd84-4c9e-ad0c-d0b8ad95d7e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516f8edf-b033-4d04-9e09-62a5eccbdd24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a03188-b0da-414e-85e3-a6f748c1affe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1284929a-3755-4a9b-846a-1f4bd8502fe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496a9e05-0635-49c2-b700-43b531c82451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8dd9904-de99-43a2-8313-1fca16d6031e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b00de4-7f43-4d51-9199-bce4acb8851b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a480027-561c-4340-88e4-f93c5a9368cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d6e747-c128-4c72-8227-04df35954f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0bc5fcb-efcd-4518-8fa0-5468fe41f9d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8c999f-3fd3-46a1-b30a-8db7296ca86e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c82d425e-59b5-4c32-a12d-c41771614023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e8aa165-c64d-4382-9cd6-6a9e5bed271e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--157e01d3-86ed-4396-ba0c-05ed926b1050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d517d83-6908-40a1-984e-6e140b765896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--536a6a88-d3cb-4694-ac5d-da9a3da37279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09cb3d0c-e9cf-4dd0-b157-9c428a847160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad792103-c274-4a6b-957d-b170bf66afe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd8c55f-78d8-4bcd-9dd3-ef65f48eed37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583daa14-39cc-4e7e-b1f4-3cd113b43581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87250fe9-3c10-45a4-b6cf-cae4ec8b0815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94415dc3-b52f-4b72-83e2-47b9e2daa237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38603469-01ab-48fa-aeeb-1c57eb3e5f56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb52369a-90a7-471d-a6c2-58e3bc822769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d408d81-64ad-4cc2-a885-06a90b1f13e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd42fb59-525e-4e42-b23b-61f7a915be76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac87e9d7-c681-47af-ae60-7c817040e2cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4322255c-5f16-4037-8b56-37e12564a45c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d12616a0-e1ae-4f79-823f-d2b27e5df8f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2924fe-ea25-4b37-94df-8b8bac8e51a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d07a7e4-edc1-4973-90a6-a1557d94f212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0626d1b4-8032-417e-9a0b-5097bb33b76d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9765b796-0eac-4a4c-a86c-9ef6e0ff56eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399f9664-7e13-4fba-bfd6-ee155ccd89bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c86abd05-7bd1-4588-ab8d-84edb9036e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c65057c6-f6a3-4eac-9940-2248eb0b7852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc40af27-d3a5-4180-a59b-8e05971f5b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda509de-07bd-498b-a251-3e1b3d4d0857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9133e77d-6440-474b-9a84-767b6bc323b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f8a7db8-954f-4263-ad87-0d25c8986818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7169f9a8-c1c8-46eb-be01-bee810cb8b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd283e5-1260-4f79-a2e8-08a787f09291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92191710-83ad-4a4e-92f2-8be387966ff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09d045b-197f-4d80-88b2-6768aeb7ff4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18eed7b8-b3b2-4278-a332-0ce2e5955fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd39951-6fdb-4379-84b1-d31017c4694c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a19054-c06f-47a1-a985-2d85c5edff45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f76fad8-7c2c-4a1e-9c0a-5fec3250850c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c1c9ba-0969-4815-8b02-198b72df619f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f09626f-2e76-420e-8b01-3e72f9ce48bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e17bc4-c251-4da3-8078-b0a7374b2d0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c03dc7-882d-40bc-b4c3-853e04427813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad6838b8-705a-4e66-87db-5d5f2cb44f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49a7ed04-758c-4359-820e-3ed4554a2e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d319e0-83a2-4435-8436-4549d4051ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b49ff14d-db38-47c3-ab68-f744047f979e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c68ce20-bd43-412a-a859-89fd1543f9aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f05e95e-2007-4630-9625-746fd8f9f5ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b2f300-a64f-451c-8874-d5652bea31b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89118b5-94f8-4031-b933-67a66a0fed4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e92cc3-2356-4552-a1c7-44450fa87c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5315b71-3cb6-4a09-bfe8-2572df182c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce3f30f-d211-437e-b4ee-f010a21679e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5628c33-8e7c-418c-a061-b4191ea3a9b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4693195-5420-4fcb-b7ff-d4da780367a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a7ebf9-23a0-4e2d-9d36-ed671f3c848c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90c9ea8-4dcf-4248-896f-eb80aadc5b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--786352d2-1f6e-4722-98e4-5ce16ff87c58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--461cdf90-21e8-4401-99cb-5d66df5efd91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d017fda-c4d1-4cb7-8386-9562900a64fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd7752f-5815-410e-8412-cb31c38f7d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e63635-0c06-4cb3-8d1d-fbc754fd7aa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c47fb4ab-563c-43b4-808c-2df702e3974f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4514ddbc-49c2-4361-8f13-95d6fba15cc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ba2eb7-7dc2-4499-a36e-ae73587d8d7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda3781c-09d7-4265-9af5-bbf9beeccddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a2aefdb-4c2a-4947-b8ac-37f2476c76ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ddeaeb-84b3-40a4-852f-9d27597c1610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01bda275-186f-4782-b837-30a8b8f0313d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43ead00e-b9d8-4c4f-9f13-8d6ef605246c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5534080b-1093-4348-93da-3fbdbb58a4d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eab4362-7fef-4d8a-81f7-c012d11a3b36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cff9c7a-ea72-4805-b480-68f19a819abc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1719f4e9-d55a-4cb4-b5e6-a75496239338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289449e4-a9ed-4e72-8805-af10e40499c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e802556-3c28-4e54-a33c-261f0dc0c998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea63afe5-737a-4b26-9e08-1bbb0bc51234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b587ef59-70a1-4855-9d10-0ba68b20f282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2bb335-eb5d-4d7c-b2c9-8c861b75aff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--962cde5e-9151-452c-b9bd-4d7bf5a8ffe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db70d23a-93e1-48c1-aab1-98161980ee4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57e3d21-eb1b-44be-88c0-0cc0fffadd64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0688682a-3c2e-48c4-84af-e322eef07431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb1d736-9347-45c1-9daf-13ae6b37aabe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e0152a-8208-4c50-8ab7-61d91be9a2ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6d587c-904e-4d3c-b326-5c93914565bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63bc417a-745f-4b28-9ddb-0b67a2637c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23fac85f-c84b-49c5-b9b2-a41b0f540f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--764a63f0-010d-469c-bd6a-1bec8501cba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcbae508-2730-483a-a5bb-96bb7e7434ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c1e3ec5-589c-4f78-9591-b9ca0d24bdee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb8e3dda-e2a9-4962-913a-a17b1fe4597a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65a80ff-6df5-4b43-b8d2-891e40463af6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4737e70-f9ce-42d9-8c54-259c353c7866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b12b562-8266-4c9b-ba50-2aa54c3d2960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b17404a7-3e8e-4864-b226-6fe791737df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b77a23a0-9f53-4cec-9e61-3ce8f19498c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0361fde-3229-42f0-95a0-e882460fe72e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c250c33-568d-43e7-9e82-f8f0b6580a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--005e51c4-da5c-4248-b34b-472645936905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4635069a-f9a5-43e0-94f6-840f2671eea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05cd70ff-95a6-404d-aaf7-7992562929a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c82263-007f-41ec-87e0-850a780fb01e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a904a5-8e34-4b6f-8738-6d32335e1234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3a88e8-1932-4bc2-8a6f-7a660e2ccd90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd80e92-d0a3-47f6-991d-54e94040599e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925af894-8c28-4858-b71f-de6c1415f420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb07e63b-fcaa-4352-93ca-0929a7e55cab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a03676-6c37-4459-b790-e8cbac86da30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--650c0259-8cdf-4a4b-92aa-de328502bf46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2cc286-ff09-4d48-a111-1ef06151c172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2fdba7f-f587-4fa7-b70c-8c850257d383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5350ec4-9e8d-4856-84c7-7f2ad5bd5669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839de70b-e6f0-4386-ba6a-b649985ea77e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc3f86b4-4abe-479c-b1c7-5e2bc9dba589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78dc5165-b8b0-41bc-b9d1-0006316f753c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4cafeea-519e-4b72-8daa-e68188a00269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b898f64-97f6-44c5-84bb-42fa6c7ab628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b0a17a-565b-4392-8b42-9ae1d864a537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11bbf285-59f4-4012-91f1-60eb9ecec1e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad5f602-6d80-4faf-9d45-8062a1dd9a32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f01948-5b7e-409a-8db7-89f66a16b0ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a68d0d-e2c1-4005-a589-393359a57cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d66b017-3148-4e04-92fa-a0b68ffd35b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b66925e-fb4c-4e70-a2ba-559e6b39e6da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a59c4169-cfa9-48b7-b4e8-ee25a1caae21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f2dee3f-d588-44e6-9abf-d0804e9e305a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--515ed15f-d929-43a9-971b-2410c746344e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3981c5e2-39ef-4d1f-9374-9023af41c690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c194ae-b84f-430e-9eae-833f94cdd59a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17feeeac-869a-452b-9a8f-9f940a855499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58ec844-114a-467b-925a-88d8a5d23654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e33dc0-7a36-48cf-90fd-f3756f961133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f85e14-aa62-4c37-9997-51e2903cc8a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d59274b-fa89-4a48-ab5c-b230ba5dd594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1cbcff-d8de-4f71-b30c-23448ebdbd90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55624ccd-e02b-4db5-9b49-2980415fa6a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d97878e-3a4c-44b1-aa9d-bfccaa668bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf78d277-d346-4800-9578-eb59cb8184cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caff4d72-9de2-4a5d-a259-23e8b8d103cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c74bde-0fb1-49f0-aa35-97d1bc1ab544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26183c7c-3936-4cc2-84ad-f32fdedcdcdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f4f542c-ec44-4136-9d07-6477db37f16b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36bed091-15de-425b-b61b-69813f9c858b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c51efd1-04f5-4513-b4c8-7d5b66ddaa51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d956969a-df6a-4d00-89da-4bb3bddb128a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e28bc98-7070-4819-92ab-dcca3a279a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45609d0-356e-4538-8e24-53a1e7ee2b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c660192e-3b9f-4bc5-a071-ec7f003e8550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c8a39d-63cf-40fc-b47b-492c784fc8ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1004ab63-a4e5-4b1b-83cb-f261e93547d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ee5232-f944-4e50-95d8-efbe0e706196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31059d6b-073c-40f3-b7aa-2cb9bcb1f47b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c1ceae4-b448-4463-a7e0-e83870589615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe190bcd-7405-4361-bea9-2d8dd95426e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f713622a-e4d3-46f0-a63d-6da6473dd232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a07450-bf80-4fbb-8391-7884de4c6669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0a054e-d5ad-4510-8bdf-04cf8b111c93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4428dda5-9917-4513-8852-edab88baf94c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--755f0026-d0cf-459f-a894-64d3048d20e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0389ae37-4c15-4c16-9869-b5ae98959bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6495f75d-da58-4942-a1e2-1a6b0b45127d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca9a52b-f924-4063-a80a-bbd196af76a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af68cc75-db34-4c48-a7e9-3a1df96a3f5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6b0b90e-c9b7-4df8-841c-aa6e47d20842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74523ea1-c02c-4db1-b00d-8fd544bf2006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89cc2ba9-feba-42a9-a0f4-913ef50bbf76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed32eff-74da-4472-afb9-99a7d5f9cba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c57d5bc-2cc1-4148-9c55-68544b751520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfeb22ca-849f-4c3e-ba48-e981aa7008aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf462cf-bb73-4494-b939-af2b7991d8d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ab2b6e-295d-4219-a5e2-4bf928fd4720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3241e9be-b469-41db-b8e7-2729fe03215e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0fbb19-f158-4b43-8399-30ec09f5c2ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d96883-0f3e-4f2d-9bbd-677d386c5627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70297a32-b2ee-4873-b3b8-f7b5fb7105c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f3cd088-fdba-4948-8b87-1159c44dbd3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--072d5d53-8826-4286-bc3d-0c3ed395e47b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca708cff-d873-4bb8-bc18-d8446570139e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bed009a-670c-4e4e-8c3e-8e6352af855d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32d8852b-f69e-4243-870c-da447a06e6fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--484a368b-a5c7-49dd-a48c-6921ce17fe26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f24b21f-3972-430f-8dce-9bf139aec2b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ad0f6f-caf7-4c95-8b2f-3b092939101e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd677d0f-1d07-48ce-9dc5-0a7b41186bf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd05a7b6-d4ce-4661-a4ca-0293e083a6bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf7da83-e59b-4de6-b5e3-83a66ad7e9e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e98f226-0252-4f5a-96ed-c8b7baed5d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0568fb7-d69a-4922-8ce8-7ba8ef780889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bfbe955-7d2b-4467-8a26-5d095c8e8284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee72387-522d-495c-8b43-ac5414d4d7d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f23d2f-79bf-4c28-9dd1-26c52c3e8bba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75371b32-10a6-4c52-998e-34cc4fd26376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54346fa5-d1bd-4b4d-b6ec-8e2f6fe6a1b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b78c6a2-0a49-4b67-8432-ac2281a77fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9952d884-1563-4f29-812e-9f98b3df248a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99cf997b-f9a3-4e6f-8a1c-977ecae21223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5976c5-56fb-49f9-ad8c-86f23544e4e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61add95e-2f5c-4900-95de-9f906e268579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f624d673-fc80-48aa-a28a-88830573018f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39520abf-d466-4518-9211-eebe495ab369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21119cd3-d85a-4758-8b3f-674a3fd5902d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c840cef0-76d7-42ce-8a84-b2712ca51eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3aefcf-32fc-45ce-bb48-245dfc85fa2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3591f7-61d4-4275-8c57-77bffe3ad54a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28564217-870c-42bd-a707-71ea710e2278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--418d0641-cc42-4eb9-aa57-2f506299a4f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c5eb32-19fb-40be-9de2-e36b40799fcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3177cb-742c-44be-97cd-37619d6d909a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e37237f2-56d0-4a63-a72f-9a5de149ae2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba0b7e5-0636-4592-bbac-5349e9b7399a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848c7c1d-186d-43b2-8b87-7d23649bd634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa241d39-0a09-4dd7-9554-9f11b8165d4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fdb0deb-7396-4390-a75b-9ed2f21baf9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f0a6d7a-5c51-4050-a5d5-6611f6d79a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd941e3-fd0d-4d56-9eea-930985a9df07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b879e92-30da-4c97-bff9-5c5d06b1e358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--739e735b-82ca-4fa1-a68e-ac72be8469a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb6627e-249f-479c-b422-944ba3d03df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a4a8880-2e5a-464f-ae04-c50d6189992b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c14d315b-1889-4a03-9305-6a912b9c0e42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adc81e4d-54f6-4ca3-b853-c79e747dc34d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ecdfce-02cd-491a-ba84-faf38e03b88c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d9e74e-2de4-4015-a24a-daa30c8173c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f1d1b0-9ab3-4921-8f79-642c1127f948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e44966b6-95e7-4fe8-8c27-0a8aff3f19b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd4517fa-eb05-4a0b-be6e-e576a6c0ea6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abfb968d-b5fa-4c27-8e74-374d289f6738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b450cf-314c-4714-b5aa-95a3eb07cf0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4b7462-1053-4fa1-bcb7-b101035bb338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa5a8ca-493a-4afe-9fd3-04cfc8156a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e41f824-a502-4cba-bfaa-c1bd95e96e39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597daca8-d41e-4774-8984-d600ebe544fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a1b96b2-60da-4e57-ae4d-0608b06a4662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba7d17a-da7e-4213-a6a8-aa333998df51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d7a39e-cb4f-4a02-9715-05b60729acc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--890ac250-ee0a-42d3-b7db-098651d6dabf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46993bd8-e63a-4f57-b2d5-1a481f634f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70dd8580-4c12-4748-b15e-5b0abd4d512a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b373220-fb56-4b79-a68e-d8bce072dea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b3ef77-0852-4a13-aec2-4913b9ed71fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b0690a-45bc-446e-a8c6-76e998fa129b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a859045f-f483-4154-afff-9640b9b9be2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3290af-92c5-4ca2-b406-452276d60024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c20ea101-92b9-413a-a5d1-bc07cfddb925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3d729d7-729d-412d-8489-57b4533e6458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--555b51a8-3a1c-4149-beeb-07f1c625fb12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1d47dc-3ae8-41a2-a1a4-700d01d957ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c25701-2df1-4f87-81ea-49136ea3f782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21e0533-3d9c-44d4-9868-6851758eb504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b206ef7-7fe4-4661-84a2-6cd5265da589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3521c2e-49e5-446b-ab50-adfd06d23a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405c71a4-718c-4147-a7b4-17d8bcbd3f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f86b5d9f-5246-4664-9b67-e7b0ecfadb13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d79d04e-56ee-4eb2-b3a8-9f03a5460a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c9dc195-17f8-4a14-87b8-02a25b81a160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a57e788-efcb-4cac-a391-5242dd465c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37141a51-6d1f-4f42-afe9-df4f0f4b4eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c021f84-0a49-4919-b89f-bf89eb4d54b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7636666-5d3c-4fc4-a49a-fcafc3425cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e6d7a7f-c9a2-4c23-8b3f-619c9bad317d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df6b458-1d28-434a-8237-8cda6141aace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d650e5-6766-4a4f-a4ac-e6018df2ef5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58bf1ccd-2111-4caf-a445-17c061602b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2b0131-8658-494f-a1c7-a977296bae0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f22a75-6df3-4111-9eab-828c75746846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59aa2c2e-d9d3-4c30-a5a5-f31165217fc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aef4a29-1070-446f-91e2-8d568df1e84c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248f1ed1-ecf5-48c9-9e3f-dd6b551a9050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ce84f3-4cc9-42b1-9e6f-a406ad9d16a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b20df73-20fe-4959-acff-5108be754b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec7a852-62e0-4cb6-a8a8-fbe3c5efd58f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c86f3275-1a49-4a6c-a1d6-2898b83393d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1e6f14-c49c-4c06-920a-ff7f0fc39a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3062364a-2046-4ac1-b164-afc6788298fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef34091-1612-4b9d-82a2-b5a57dd0c9af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ac9b94-01d7-4d98-9189-04062d065f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28bca044-adc2-4725-8c1c-11813ee18220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec57892-0e9e-48d1-bcb0-2bee3ebfe381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b07ff6b-c679-47ae-a14d-ba16dd5d028e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2791de4a-f0d3-4bea-98e9-bb16866e23d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5f765f-26d8-4b9b-a52c-f80663afc657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f9b3bf0-65a6-4383-a6cb-d497ef1b4bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77d255b-a98e-480a-9dac-55f43238e03d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--744739f0-641e-4a9b-b75b-70ad84b2de0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e171f8-6ee3-44b8-bead-cb6d62881bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--654cb5dd-5927-408c-9c58-bb939d0235da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed6967cb-ca29-4f34-8d14-f25da34ceb08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--492bc040-06d6-4661-9f85-09936d83cc89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bca0ec9-e043-4ff1-8005-e88f16014dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593d5ad6-cbfe-4cf3-92cf-7e82f93493c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--718d419b-82a6-40d2-9528-7579eaeb12f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4075524b-5df4-43ca-ac5c-6cd89d342043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df32e507-86e3-4def-9bc5-93c8ad7b362f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca18750-4c0b-4db4-b0b2-88820e0712da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cda6ea2a-fe45-44d0-909c-2e228fed7230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d402c59-b9c1-4c39-b452-5773b73b7a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4833e729-12dd-48a3-8ddf-c2d5db6d18da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c58deec-1aea-4260-a1ae-4b731996289c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a4a0f6-216a-4c44-aa90-fed480dceb89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6658180b-1bb0-4550-ba4b-38de33c84e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f527a6-72dd-480b-ad8e-76e99df6111c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f52dac4-71ec-4466-a278-ebe2bf8f429b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b300484-957a-4446-8538-de87f30ee09c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d841022d-2506-42ce-ba96-b4c0018d9326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c169fe1-9970-4efe-bbe3-beba72229bdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5ff56c-982e-4930-9945-7782eb226dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fdb423d-3fd7-481c-a484-5155dfd14315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6da3dfc-eb7c-46f2-a1e9-10f69576a531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500e5c4d-ec0e-4f52-bf8e-92f04190a8bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--095b8893-4246-46a4-87b8-cbaceb45dbbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f333a9-5adf-4d3d-9766-99f347578679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00deef9d-0378-4e38-a001-4c2dd82a8a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25cb4e7e-9418-430d-b069-505e9fa31514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9576d8c8-bdf0-4e15-8494-2c8d9afe44e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91522511-9ae8-46be-8565-bdf959c4968d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--494d2d70-05d0-429d-a7ca-e6c065908dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0895feaa-163b-4303-8bb1-e144a6401260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a75848-bf7b-4776-84c5-446bb1472f87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4faa9f-f326-44ef-a940-92770aec94b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc79550a-09cc-498b-be3e-b65e030a0b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c11a0f8c-2e40-4db3-917e-36013a5eb44d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662d8b81-c56c-4c94-a25c-cf05b166f28d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5e71bb-0378-4787-bd31-80549c1b3a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896c8033-4a58-4c3e-a844-bcb7754cbb53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42bb5e5e-efee-4cd5-a3ad-b7d27e3b2cfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6367af96-499d-4cdf-8745-71b751ede587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5faacd3-3ad8-4c75-9bdd-09556ed59988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e5db0b7-49c9-48f3-a035-7d2ff864c9c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--483dbc80-ba76-4636-b5b9-ac5d8a2c3790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169a98c5-b2c2-4725-9fa8-3f4a74c581eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5ca8c6-0dd6-4ed6-ba6f-d3a66de62c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b53d1cb-f2c4-415a-9ad0-568586ebbd7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be2d1fe-eeeb-4b46-ae3c-a7934011c3d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2729238d-c19d-4437-b883-73f8b6949c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a13c62b-ad0a-49aa-93c4-6820580e387f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93415de-0cf4-44d8-8a94-0d9fc0585687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c88dfe0-10f2-4965-9b44-5606ea42c335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d870b41-5190-4827-812c-88d046303783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647242a9-eab5-4580-94c4-e8ce0e0f6b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37cdbdac-a2e0-46e7-a547-4439bba39742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03659cc4-fce7-4be4-981f-dfbd099b424c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa1c46d-9819-4e1d-870c-b49e3004cf24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a1b7a48-9d54-4898-ac33-da8051274cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--955a3099-4982-485c-89e9-b1f3dd0da528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c6549f-987b-48a8-908c-a21a1caf07eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c459236-bc2f-4a85-af09-7c8ed759c3ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7292365c-0841-4b49-a608-c3e4d09a8c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46dbb26d-2bcb-4a9f-8afa-f03a8cf18178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05fa49fe-6df4-44b2-a807-cfcfac0f3f8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d118686-ea6a-463d-9608-268b99a42192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41109461-89c6-4006-b267-e89afe139289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d25efcd6-577a-4217-8e88-a9d963dcc721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae1ab1a-8266-4a6f-aa41-80f288762437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a6d7e26-02e6-4056-b2de-2a852df2b554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5627ccae-177d-4dc6-9443-c94be0ced403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80dec3cd-57d4-4140-8838-bc6daa88bac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c07e57d-cbc1-4919-9cc3-43b1417a7bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb839977-5081-44d3-b089-d7bb8dfdf9f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af44c25c-fad6-431a-a91c-7944b9435e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0fba574-176a-4421-91ce-580c60bd93da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12425d93-74b5-457c-a87a-fa57fb5b30c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733a1f52-7604-4b74-b765-1cdb2cf88471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da44bb4a-8460-4508-aa2d-a118526465ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e685926-7ad3-4359-b0f0-061461736e47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a76d47b9-b0ee-494b-b8fe-e635cd88a046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f66760-e3de-455a-b4f0-cba117182dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe14be5-a1b7-4b08-8279-922a88c754ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f32ab07-751c-4c83-b675-8f017811bcba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d00a291-3f19-4675-a762-2ef49c47d2a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ca9220-e0d7-46f6-9b86-b25ac459a611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9c8d1d-7578-4aa3-a3af-fe578ef1f954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b2942f-1469-4aed-a209-562e610ddf6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a42931b1-9b01-479b-b2ea-d2b100756dc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea06258b-7f52-4e88-8673-37dc4af15afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973f120e-aafd-49f4-8182-9296b507be76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e633d326-50d5-46ce-804c-2f2654c39043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6099bfee-9d2f-43c7-aa1f-aaaf698b4978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05a77d89-1be8-4841-bd16-2893649587aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e6dab7-6990-4fa0-9c10-b7c57a693075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ba6e4b-f61e-4ae3-ad15-fde7b029a96c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c874f2-d69f-401b-8321-5d3bafc00b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b5c5da0-227a-4124-be89-2a72b7698ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e53ad92-e99b-4ded-9426-a6107950485f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1802c1dc-c52b-4779-89fc-6aab18fed6de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d75191e-6445-4d86-8f07-0b2a1e901abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c6d7a3-255f-4076-9498-09cf319fb995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff812c3-1128-4677-b6f6-bace62779c64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17576e9b-76d7-4fb4-a166-77fd3bbbf690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d69c51-fad7-4e61-981c-7902726664ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c393a75-3a73-4bcf-bab1-925112b80a9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b7abb3-151b-4ab3-9c49-1ef5152610b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6214fdd4-05a3-4a1d-aab8-cc082df64a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d1db1a-498e-49dc-8483-78b30c3a3a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a988a4a-4f38-41cf-8a59-8f1739fd2544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc927065-da44-4b1b-b5d4-2d087cbfd5e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f5df05-95f2-4676-b446-4980039eaeb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06ca033-288a-4a4c-889f-e17f7f911fc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae970b0-726f-4140-8755-04e98d2d7eec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1310bfcc-ff60-4417-829f-52f69ce25784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa07b7d1-e8f6-448d-8eb7-db2f36bfb6fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81bbd6fc-3d6b-464a-a05f-2470cb3c48ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55aa8552-2d2e-4972-84a8-959308550059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f291a65d-c682-4ba4-ad0d-34b78943420f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1753be66-4c68-4ea5-8739-0c6577070917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198ec4c8-afed-433a-a8b9-97987c570ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec32b542-3475-4ed9-9d44-bc5ba1cc879f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c7b2c1-dc6e-4a31-bbb5-0ff1d4f4109a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1927d0f0-995e-4133-8073-b8a13f6ce7fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee67d5bf-8f17-4168-9ed7-aaeb112c1678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29642a8b-8203-433f-89f2-ce2b47c9f075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd25a37c-1c9b-4423-b9b3-c7a4883d0418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ebc59df-673a-4be0-a230-e8eeee520226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a55d80c5-cc99-4506-8f41-60cee2d87eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d590bd-d848-4520-a959-1ca3fa72e20e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6cc024a-6c34-4486-a17d-356fb2694096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b6e5c1-19bb-4414-81bc-f1d1d2f101d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa8e4b1-30cf-45b2-8ec2-96cd35ec1e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e76713e6-5d7b-448f-a505-185b6bc2cbcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbfe6e19-7a9b-4a07-8259-156af5eb1ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ce4454-df4b-43a8-8012-a3fabb42b350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f78114b5-4113-4c54-a9bc-039eccd307f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35342884-20f3-4f13-9eb9-c10b0128181c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--547f6b5a-26f8-437b-a163-b95c41892fe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d25d4f5f-7de9-4312-82c9-f87a0b5ac750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b609a3-7e21-4cf8-85cd-62bee778a761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f23ab8-e9c5-4e17-ad7f-6a4f6c1bbd20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b4515a-dc2a-4556-b71e-47d70224a169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f88526-38fb-4110-849c-45f0cb56a0ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44d6f711-aa0c-4957-ad89-5ebde8c00747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8157c9f-c1c3-411d-bd5b-d33d28060487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d2a52c-0a36-403a-9f7a-02fa189f5167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d933e24-319a-453d-ba76-41683d733122", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971ca60e-0987-40a6-983a-f238c94b0a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a94661-3891-4e9f-8d16-e296188bfd5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d6b70f2-d98c-4d0e-846a-2c46c180a52c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a90dcd-e43f-40d1-b2f7-1fe73e08e2dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a2a184e-7fc7-421d-b8b7-882bb42660c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5147a43-55cc-44a4-9a83-f016b9c6df59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567f8962-5217-42b9-9361-42a97959b2a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd50aeb-863f-4d85-8761-30a8cb98d6b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb10969-5da2-468b-a4a4-815a07ff2e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56cd3d63-0873-49f6-adf8-cda3e3bd3349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8635ddec-423d-4360-9006-2868799b67fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e04e553b-6afa-48c9-b9b4-345f536df765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e500946a-551d-4656-89d7-c5cc5b9cd0e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb0298eb-0827-42df-b3cc-af29babb7726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1daa1b4-e004-4702-8117-6d9c4e93397b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e296c442-9a34-4b62-809d-7e4ca22572e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e5606c3-5c77-487f-84f2-803fd6c9e062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f8392df-71e4-4ffa-b0f4-592790929f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d962364c-33e8-4e59-b8cc-edb9cb3794e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f495f1-5391-4bf6-8527-36b2c9d701eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27010230-aa6d-480e-8ab1-126a1cca7841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf85be75-2c9a-4600-8352-0852f807ba59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9720a4c2-3bb4-411e-a8eb-dc667128c016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be3a5eca-9a53-434d-9482-0fabedc03ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f450b476-06dc-47e5-ba41-ca331e78c830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19503666-64b6-4921-8ab2-617fabf6828d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ed79ab-645f-42e8-b5d1-54af76c5597f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--343e36d4-1f87-432f-8e23-0b32fe9b933d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd3d3a8-ce69-497b-b456-9784665b5a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302d2cbc-06bd-4b5f-b822-5a635f70ebd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f4603cc-8208-46ef-ae3b-a86b8ac6bc58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8e4667-6515-451f-bbe7-4124be401191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a00df825-c9dd-4e7a-8332-70a00eb76e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e53107-9247-4605-a0bf-b738c8507bc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af9d9b2d-b253-4f60-a1bd-19c12805c4e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b52a63-38ce-4ae8-9af0-90c52a952d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cafe3821-fab6-4296-aa88-e03b67d7f9e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2d6d02-93aa-4bc5-829e-6c9d45096abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b2993c7-12c6-4e51-a85e-eb117dbf63a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4863f09-90af-4d3d-a4ea-d5771291806c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b0310d-aa04-4f27-9038-6821e3a8d83f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f15e68a-98a8-49ee-9f5e-6b0621027140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2ea325-1031-4a24-a017-4a110db15b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac0c84b-0560-4254-9f8c-7bbcf8f3cb69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c2c840-609d-4c12-819c-1baf0e2a5aba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf8a130-b61d-498a-9454-6a2b17219026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e4014cf-2f0b-4f91-b129-fea366464e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--547574d8-4664-43e8-8b10-d7b811b8e102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c28089b4-daac-44c3-8f75-3760fdab8c25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e4c4c0-a21c-4343-86a2-0422335ed823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcead422-052d-4404-8e5b-82dc95528844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d0b300-728c-4831-bef5-dad768664c80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15232f3-e4df-451f-a973-395a475ac238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5b985a-3d55-4ae9-978e-207a24307ef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96993773-9527-46d7-9d1e-3118081bf1b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb31b583-b180-457d-8308-91ecc4e8b18e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c77b3a58-e45f-47da-9466-a4b0253dce54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f7a2b1f-7994-4490-83c5-b1dc5e3d2b15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcdbeec0-9cfb-40db-8694-5bdf3d80bcf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b718b73-742f-458d-93d6-fce9217d121d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d081171-4fe7-4a02-96ea-438ea8d0d84e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216ea31d-05dd-4856-a266-9ccb0db146d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de3b05a-7ac3-4398-ae21-ad83fccb4390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ed7323-4376-4278-aa5e-18adb7769290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26595e62-0298-404d-a94e-3ba95df47d4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c73f199-d9f5-4493-84b5-9e46c61e10d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ed9888-2921-4e40-ac79-7b49be2fce8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c532946b-3585-4818-8874-ea148cbcbaab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d87f95-c367-45b3-90ea-4fe469f6c36c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa0c710-6649-40b5-b348-d8d32413ae67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b740aedd-32d0-4350-9551-c4675fc3a0bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f16ff2a-3c28-4e17-8ca5-2fa74cc9673d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c046df-1231-4262-a7d4-399107696d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd68f37-b605-47f3-8c85-5bd6928662db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ef8236-3398-4d7d-b251-8b5649e12513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f359d2b-84b7-49bf-b34f-eef1a52e1e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4deeb601-3941-4c76-a78d-8152fd5a0423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ece812-f396-4015-af21-0be13ab4381c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241c5e4d-76eb-4eee-b6d4-02bce99fe177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562b948d-3368-4564-965e-07cda1f8124c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d513cb-15f6-4b5d-9660-4eb8bdab979a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9bec519-446f-4df7-af48-18febdb45133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81379f2e-d4c9-4ea5-a02f-84aa00f64ccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c769f928-759c-46e5-ad08-083d4c4052af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c21ac530-6e84-4929-90fb-2597667aea71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d7017d-bded-40de-beff-333bb39a2046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed28842c-2f9e-429f-9121-9bcd2e276b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.87.175.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f779dbf4-f98a-4d0d-99bf-21dc7ea933f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.88.232.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29250e2f-c066-4490-ba95-a62aa807458c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ddd0db7-e3eb-4f90-80e7-c5da19d5384a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee56566-31fc-4b71-b0d4-a52ba86b19c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13fcb002-34b0-4968-ae98-25259cb8e961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b11b37-f446-49b4-9450-a70c7b1dca0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee156418-26c9-4540-8e73-61653f7b1cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5057e2fd-541b-43cd-833d-f4da1fbb2596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7078e7-d35d-41e7-8e26-a799b5858de3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d1929ec-5312-45a2-84b5-497bae0408d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.205.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a4e4e5-620b-4cbd-a48e-c4140f3ab4be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.77.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcab2a27-2b80-4b12-83c0-0ede4654de30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.99.27.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f490d910-ee28-4fd4-a936-fd9850935451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.131.114.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840e7e10-37c8-439f-a4d6-8d8d04b39c06", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.131.163.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14745024-2a10-4cb5-8963-ab9bdb8d1e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d260f5-a17c-437c-887c-b67a5fa56ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d990d8b9-f7e3-4cf8-8b44-e1fa633c3b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a9583be-dfff-4bd1-8f99-94503ce2bfe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4603aced-8fb5-4ae4-9e12-d40c9d7f9057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d18cc92-14fb-4aa7-84c5-ca728a2d37df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c4e576-f771-4c46-b5f2-6e6491b94451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--678a98e5-28f5-4840-979e-d1f6a5d30bae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ccf822-3fe3-4108-8639-ebb46a740780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3512598b-1123-4937-9d8f-d781f40659cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d3456b-4000-4156-b5d9-b45b75533e96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8aab802-b53a-4d85-abd5-fe36f6704baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c8af57-5efe-4f88-bd61-91e567ba30e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1113e7-728a-42c2-88ea-47edfd26bd26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260cf6f9-8b55-4932-8ae9-649d86fe5849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e83ce5-3917-4d0b-96d5-9163bedda236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d6d85ef-749f-42b5-b28d-ef0951efffca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d95c92fe-17be-41b5-9315-a59f02583bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8181522-f55b-4f28-8df5-c6de57d8d1fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d975fda-4379-4d12-9140-8f816de253bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2531357-efe2-46e4-81fe-ae8d1d901841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67af4b0d-bdec-4fed-8673-39fd82031dd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce62c2d-39c5-4598-bddf-e601b323c064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22daec4f-cfe6-44d4-a2e1-85a33a2004ae", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4a29ab-0f45-4f3c-aad4-379db2401c35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d1cdad4-b021-43a8-be1a-a6358c1e8108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c2283c-3084-453d-a25a-b34122affc84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a4f6cb-725a-45ab-a095-c63311bf0ac5", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.40.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b82b93ef-7693-4a19-9eb1-512f8af85538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.167.24.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3337d5a8-ebfd-4e05-bcc5-f26f3e3e9cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.107.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b9412d-0616-4abe-b8ae-5b3157924af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.17.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae1640a-3f56-4b6e-a163-c90cf28809d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.53.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5677d918-6c55-45a1-b327-efcaf9505b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.74.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34512742-4fd0-46a9-adca-3caed6813b17", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.208.72.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6efa97a0-7bf3-4072-839a-834b142381a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.218.165.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797096fc-6c6a-48d9-bb30-2a9fb616e7d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.232.79.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd0fd64-f265-4a42-b563-7ca4db40e613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--280b5e8d-5568-42dc-bbb3-839ba3f771df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.94.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d7052c-837a-435e-9e74-9e5e1ab96592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.156.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1562873-8287-44f5-9fdb-52519852c655", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.238.110.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9692adcf-106b-44a5-8710-b4de5cf19874", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.238.222.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea16b7c-019a-4c15-b0f3-07491cbbdb56", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.247.160.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--534dbf84-674c-4ff3-803a-8c15794a6e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.160.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa28a85-d09a-4352-8d30-571e8b0f96dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.201.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb903742-b0e9-4436-bf86-d2d42e102df8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.225.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbbff6ee-3a0a-4b79-80a3-cfceaf48d378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5cf569c-2db2-4787-bd2f-1a9663f25676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e87767-e138-4601-8d6d-fb75f3948ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.205.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ff2a29-fd43-436c-a362-9c85c559427f", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.157.125.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02769ab6-5282-45c7-800f-a527ea552c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.159.155.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2caec35-0c91-4549-8f83-eaf3196033aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.117.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7824c601-0ff8-4a04-b15f-4486a766d9cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.128.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb62551-4b7b-4bc0-92fc-2d4cf9110c47", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.147.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aeb8dd0-e0f2-4891-929c-485ea4fdfb80", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.124.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e83dfe-dbd0-48b8-b4fc-813ec229c68f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.253.71.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5c47f4-9232-41ed-91bb-3de682bd5c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.4.161.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce955dd-aac2-46c1-9fc2-3f1ccff7cc52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.40.80.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f421f2-9638-4fea-a9df-dc5e7cee29bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.51.22.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a9fb640-2071-4a88-b1cb-a1d592479f85", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.52.216.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce49f06b-1736-42a8-aa4a-46393630ccad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.129.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb02feac-aa8e-4165-be5b-f621ed6f4623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.136.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aae59c2-cfbd-4f5a-affa-ea638e5bb5b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.139.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--340373df-46ef-4c11-82c3-5f7c97585eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.146.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a50ec1b-009e-4650-939a-33040e74516f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.172.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf25900-ce26-458d-8b99-0dc5ba7ef798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.174.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c92972-7ce0-4890-bcbe-fbf99ad89a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.174.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4765a99b-0c7d-4a58-86ee-ecf336257953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd833a5f-6331-427d-8fcb-8e06ea66da40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a6d5bce-eaf5-475b-8faa-386cbcc18ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1047b8c9-cb2c-45e9-aaf0-24772f23f0b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffca8679-de59-43a3-86b2-7b8d83d35303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7effbcbe-c833-4c57-9ef2-679b6a3d3076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebdf6128-66db-4bdb-80aa-11154a7a85ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae3d362-31d4-4425-adbe-9a03c6d291bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c08f302-3591-4ec4-a903-664bcda9a911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76531e63-3219-46e1-9076-751d406aa55d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88af5c21-edb8-481b-a0b7-1e03e9b816a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.112.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9005288-fa76-4617-8215-b7d91a1612c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c258b1f7-21c2-4017-9d6e-1382704c4069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c698dc-d4af-4a75-99b9-551c937449ef", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46ce97cb-db8e-4e0e-bcd4-a6e0b09e2528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6242ee31-fefa-4239-83d1-c272b1ac4c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8a0e9a-666c-4d67-a1a4-0c1acfade69d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.56.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d7d3fe-8ad8-4b57-9bc5-2e615d146456", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.167.181.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--962db4a2-5dca-437b-a16b-84292d8c5db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.175.239.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9406589e-c590-4374-b3e1-daf70c439021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.175.27.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50e5d322-f9e8-41c4-8cab-e676d782d571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.180.102.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d418b680-ffd2-4c4e-b742-b5f17a1ea405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.22.139.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b254dd65-673c-44b8-95cc-75de6b306722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.22.152.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0f8ea9-7f16-4adf-a8bc-f4c67e2eab42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.23.10.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af46f980-c9f4-465b-8bc3-1df8d1a4f3c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.165.147.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a83f3e42-3f3f-4c99-9ac1-41952de3e919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.172.72.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8bc21be-ffa1-4f76-bd3b-f39d45147967", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.178.17.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d438e5-d8f6-4125-a0b5-17882c303190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c2d026a-8191-4b8b-a1f1-f57099233b7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--488555d9-cef5-44e4-a349-ce2dba3b226d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b867ae-8f76-4043-8aa0-bb5a9537017c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190fe6a2-4c45-4366-a008-8d9cadc5638b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4af46c-11c7-441b-848d-fb50b5d03cad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c3ad98-fcc4-4ecd-9992-0ce77fd42f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8149e7a0-8669-4119-be9d-0de22bb66a7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a222b7-bd5a-4489-a7b3-8bef56352580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.237.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a3cc50-f474-4334-b592-1dad53408c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.238.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ecb7cf0-cac2-416f-a34e-a91783336450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.244.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0e3d1c-b30e-497a-a497-3314f9a847b8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.165.106.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27dc2ab2-59ea-4ebe-b7be-26f9a2b91c90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.197.253.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d48985-5df7-4837-8365-0874ceb77e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.199.106.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb68f38a-e7a5-44a6-9ddc-c83f53b590e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.180.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a87904f7-5840-4105-9b25-95f2b524601b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.207.88.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004b6f7d-e330-432e-884a-4d983340ce18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.24.151.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af871be-9c8e-428a-a998-6923af228b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.252.13.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149063ed-c5e7-40f8-95a0-732b49fcc1c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.254.211.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce4c590e-b1e3-4fb8-a91f-b6402ed42dd3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.82.241.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1da0e4-6696-4c20-b31c-79fc2965b949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.94.173.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86ec77d-b75e-4843-b226-dfae62f18ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.94.87.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f767d3-bb1b-4a7e-acc8-3c3215df606c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.77.165.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d2a5cc-1438-4d6a-8608-cfa93ca10588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.90.224.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee324a70-0a9f-411c-95b3-9c492131f068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.93.226.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210f4fc3-0a02-494d-9f77-164478c09275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.88.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99def90e-f1b0-4905-b585-ca055ec21e03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.89.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--862ec29c-1129-4401-9200-c1fadffc9700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.123.88.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--545fc1ad-c9b3-4dc3-8f62-d1a3b1cdef39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.162.159.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3158a861-c240-473f-b98f-75330f9583fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.176.182.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a75ff9d-ec42-479b-aca3-1fb870dcc4e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.176.23.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b339aca-2ed7-4481-8fad-c84a7b965140", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.231.1.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dbb4660-9998-4369-9084-9cba880addd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.240.112.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78fd366c-aa3e-40e8-a3f1-4dc94799720e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.242.13.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--770d8bf2-149a-4c19-b272-3b192009a203", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.248.235.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ba3088-d490-46c2-8b95-7ad637fad851", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.26.180.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a074320-b308-4680-9148-31eae5975f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.33.71.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61650b9-bb2c-4fac-a6ed-7b27b4616d41", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.92.151.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e2e86b-47d6-4c63-8711-f10107006a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.93.2.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d16b8f-fb23-4d2a-8926-fd56eb9d07dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.102.171.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc79b74d-00d7-42f7-95a5-0ffb1730b7c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.102.220.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aac0d13-b003-4315-8b45-6461baf3f90f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.129.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ef800b-f2df-4323-9063-37d01beb6492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.141.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c06cd6c-b11b-4008-a570-fdae4c9fa7d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.194.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4466e45d-d5bd-4b8f-990c-e0701e8a184b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.73.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5346d81-b7d8-4722-93c0-3a4f8d83acd2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.112.227.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0b6ad51-3175-4285-97c9-46078c66e242", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.118.213.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7526fc23-5c22-451d-b3d6-f0d628d26337", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.120.171.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--542209d9-3a18-4dba-92a0-bc2808f6a931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.124.58.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f9f7f0-3328-41d0-b4ca-f19310917474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.154.246.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a786bcb-4b02-434c-b8e3-365a5dc946f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.168.161.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc0a31a-2ee4-427a-a3ac-6fedd2b2c3ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.169.108.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73d8c58-1c6d-44d1-a173-01c8ea8ec525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.185.230.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d1be441-34d6-4af0-8b13-e8b0f1e3dfa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.240.144.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e50d17e-ddf2-4212-a089-64757a199bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.245.101.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0aa855-be14-4df2-8f41-6e495aadb670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.246.55.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f50446-08aa-4369-aec6-d35621fdd88d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.246.63.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a7d426-702f-481c-8cea-81b6debb503a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.247.20.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5046a35-a276-494e-a286-4ff08a5bbdc2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.32.244.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0c74d0-f0b3-4255-a56e-4d68ef5958c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.36.8.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c3f5948-3379-4f4b-9a8a-274ff0d1245f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.38.75.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc582cc0-8723-403f-8e81-f080639b4271", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.86.225.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--800e92f2-a815-40ce-9f05-35e29ad86814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.94.252.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7fbd96-7340-4c7b-9a4c-9319b3d373b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.120.152.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a81e5f36-45d4-48c7-84e9-dd9b0defae29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.140.176.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90853ea-836b-4142-937c-7cdcbeb0cd3e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.165.105.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18f7838e-e46a-4d05-a901-bdc1ff5aeb64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.221.46.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05be8b5a-8c0e-43cb-97c4-45dc080bb59b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.221.77.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9554a217-f36f-4bd4-acbd-b7db78e189d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.23.225.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3437b9d6-0eda-4dbd-9439-0051388439cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.253.60.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f15569-ea6a-4f88-baa0-ee6345f048d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.59.150.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f918f61-bfa0-4b72-966d-72f8829f6197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.80.102.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b411f6-6e33-4560-b7f5-639ad569e9cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.88.84.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a5203a-8f37-4708-9042-13582a062736", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.131.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e224181-5607-4ca2-a174-9b463daf1c1a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14dc9a94-b7a1-4bec-86f8-ed890057fe07", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d827f84-fdd0-4202-b565-8b7f89326237", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205c3aa6-3938-413f-9e92-8ae944ac4f29", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--033c4d2e-d359-49f6-b38c-6324d3541e8b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce658194-a594-453a-bb9b-8d698aba89dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b33121b-7770-4bd6-919d-fe5346d600ef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13169b36-028b-40be-b4d1-77ef0aff2c15", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--731b81ff-4af0-4c30-b07f-0e9236af2f97", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c76114-154a-4717-8fee-7d0fe5b7e900", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dbf6d1e-953d-4c6c-a9e5-309901882c92", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5833dee-5504-4658-b241-3f49db22dadc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a057e77-155d-4719-9bcd-d309b2a2ef1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.32.230.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae9404f1-666b-4c33-8203-7a8ef61f6564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.38.41.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a4127f-3bc2-4640-a408-4656160b6ca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.124.75.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f29ed8-0166-4067-b6fd-3fadf53dd781", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.135.30.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8c5570-7b60-43b4-8916-1e454e72f6a5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.160.67.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d63fa3e7-0e6c-4318-82d9-449d0b7bb523", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.175.137.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d9470cc-8ff2-457d-8dbe-1b7148478c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.179.102.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad89edf5-8ac2-4c26-b090-70640890943e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.166.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cef932e-16b3-47b4-8635-fbb0be9f2767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.244.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8ef566-2cf6-4ea1-8846-4d3c9b4c05ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.191.32.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00cbb940-7915-4ba3-97ed-873c98c964ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.197.176.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3f761f-9e16-453e-a12a-044314983f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.197.236.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82cb4011-78ce-448f-afa5-70071f9bc3b3", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.214.190.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d549d2cb-f6e3-44ff-9cd2-abe4071c88ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.29.34.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69090c8f-3984-4d59-b230-c08b2ef424ca", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.50.145.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97117c85-cc4f-450d-9e64-bc9248cdeba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.56.45.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c5f855-2a3d-4360-9405-7ccdc71a5d83", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.72.190.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d66bf004-ce10-4f9f-8e28-216a14de1f42", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.72.250.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6405523-bb30-4bc2-8b8a-2af295850174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.73.220.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b690ced-61a1-4d54-8c7f-1f1ab8ab27be", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.76.108.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--758b263b-4b9a-4e25-b9ad-c30fcb6cd26e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.77.242.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2dd6aaf-3ac3-487b-88e5-f916c32486ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.77.242.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1268399-3e17-46af-a5c0-d3882eb704b0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.79.112.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8819a92-5ee5-46d1-a83e-b774660c8900", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.79.237.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee7e68e-eb84-4494-92fc-a07a6eb2760d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.96.210.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38fa1234-1cd5-4c77-982c-af66a6a44d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.155.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f36a7114-6a54-4077-b923-fd86fa9ad0cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.111.251.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--024d8628-35be-4ce8-a03b-1c0300566085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.111.34.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe6587d0-1519-4918-b423-58b88b12712c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.168.104.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f251731-c52e-455f-9c2c-b0b33f33a025", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bfc1e1f-615c-48f6-a168-2e6111fda1c7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1500560-3765-423b-9e9f-e7e5ead11bb5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9394e7e7-56ca-4c15-a560-fc5c37cb408a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.207.127.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f660c3c2-895d-439b-bc80-1f7709e3a222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.207.27.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9208648-6a34-4549-b01f-6d9b370ab180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.47.152.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ac84eb-e419-4a4c-8c35-3475edc5d8eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.49.47.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df5fc44-aa32-4b48-a632-7b8c743ba64e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.54.117.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b099f1e-6f98-4bf5-a4d7-4433568ff08f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.66.204.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d142ac-3151-472d-b3d4-c292e8310eb9", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.76.167.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65132a3-a953-4b11-b5c2-124fc17aa67c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.1.25.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d7b345-fc07-4f04-8046-163caaef0bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.187.180.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad46ca1-adff-41c2-8a25-bc1c09d53e6f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.247.81.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96be15c8-7fcd-46dc-9c78-fec81202275d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.40.114.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48c5ee64-c299-4282-8550-bc93ab395e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.67.167.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76405183-1dea-43d2-a7a4-68f64bebe3f6", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.88.69.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1ede9d-5e9d-452e-9e40-bb2636ffa65f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.100.31.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b969cbe0-b721-4d5e-b2cd-04ac156f67ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.107.41.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--754dc543-670e-469e-ac50-c806c0792b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.123.1.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e7be31-1800-42c5-a120-520c73d08748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.179.158.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9105759d-dfdf-4705-84c6-543a1cf10990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.190.68.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d636c42-dd09-40f1-8863-f28bf556fe1b", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.124.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5782aa-5ef1-4e53-95f7-6ff1e8de1d26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c69e496-d237-4d08-a0c3-a66c8e44fc9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaef993b-e430-40ff-ac18-260a7162289a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.38.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7de2bc-1fc2-4580-ad85-9f55ad8a9cd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.39.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--397108b1-1651-46cc-a317-8e4da243e0d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--660027a3-9b4b-485a-acde-9049b5cbac83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a9c02bc-1601-4a8d-8a3f-7f0bbde3569c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e927f8-3217-4c3b-9185-838b05d81563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.45.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba865f0-1d15-4135-a118-545d71848b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc3acd8a-5dc6-47ff-9fcc-9acff3052e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349c4de6-c7ea-4310-817a-9edfa1f1f1a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e4c4da9-7421-48dd-b55b-37eca5f3b5e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b66cbd7f-a186-479a-9dd7-cec47cf69e75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f18aa4b1-11ca-4d95-9d19-d269e6c14e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c8d242-7b82-4a4e-91c6-5208444b20b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537366bc-5e3d-41ae-b18e-4c8ae7b63160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2ddb67-e5cd-4b3f-b25d-8d844ec3305f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf6875e-7c33-483c-9eb1-06f791311800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16bb6f76-c65b-4ff2-b47a-1421bb1d4b87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46033ca3-3c63-40f8-89b6-405e596763b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee7d6448-b4bc-4d30-9e62-fb567743122a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4539fb4-c01b-47fc-a0e1-2b1d459cfc88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a62e5fa7-5268-4d14-882f-b6465c2b1e2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817ed557-483c-4b57-99d5-1208005d3927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73361544-ad29-49d8-bb4a-4fff173a96ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e4f6ea-59f0-4757-a599-0b4f002beb06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d68820c-43af-400a-b066-c6ae6dc00635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.68.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41889182-a266-43eb-b8ea-ad11e57602bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8fe6e2b-d55e-4dc3-b980-22f77c40ce87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.72.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b379ec5-4eb0-4b2d-bb21-0b56f0dca608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c43fd606-dfd5-4928-96da-57fb06b18732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42023dc1-ef47-40c0-84c3-12cca02dda9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a95ff53-04d6-49cd-ba9e-d6ca728e0990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1874740-a8e9-4e91-949b-17ba3f635d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.238.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42bee68e-3624-4107-a43c-3cd6319e9c41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.248.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8faf11ce-ed68-474a-bcd9-3d18f91f5b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c99451-193f-4bfa-ae52-e0b39cb095fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a2d564-d53a-4bbf-9122-cc81138958e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a93f28-751b-45e2-b047-11b97af0a365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c8ac943-b025-4e12-bdd2-30870a0e89a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4f607d-13ad-4849-a650-8178c1792c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e825e02-b3af-497c-9211-eed7de35ae88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b991e4-9085-4669-b84a-7020298b309d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.120.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4a3467-144d-4a24-b09f-45dbe7a30939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.248.135.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bfefdd8-e2ca-4b3c-b974-496de339acd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.249.81.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb1bcc6-cbe3-45cf-b61f-b5cd7effce47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.250.66.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f9385d-820a-40cb-b0fa-fc28f261d44f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11ef2ee-9a1a-4738-8176-33e0b337f160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--518429f5-7e4d-49f3-b7c9-15b6c399865d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9998e8e1-275f-4de1-ba91-59f4c82ddb67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc125c5-ca7b-4497-9958-f7dde0e18fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.109.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d16c3c6-7650-4754-bfa8-22de7a1ff005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.111.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f36e20-12aa-420e-b472-9835341fc7fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.36.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a03de6-76e8-4b53-8116-aaf888804fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.68.101.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f87900f-8f74-4d80-b97d-d144296b6c27", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.10.180.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc0ff2d-80b6-4fe6-adbb-0f2705cfb606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.102.86.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e74f79eb-52c6-484e-b189-96c7c8c8e47b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.166.133.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6669010f-82f8-4dfc-a990-bcdb1db86491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.189.56.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f998b4-c543-4eec-bdba-33757d4f5907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.236.87.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd9f2fb-c34d-4699-8b3a-7541afad4931", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.249.100.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e23669-afb9-4a37-bf50-f309358d0fc5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.53.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7836bf3d-6b57-420c-90b0-5826cce1f83c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.59.124.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21238085-427c-4ac8-93ef-9add0b191a2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.6.54.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a7c5cdb-07bc-4473-abc7-01545c91a855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.92.233.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe14019-55e4-4b88-b3dd-e891ea969682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.98.12.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa88167-3019-4585-9881-e41f606c9e5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.98.97.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf890179-5c12-443c-91bf-9895c2062ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.99.165.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7025f7c4-a209-4989-a09b-c9dfaca60a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.99.84.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f16643-f3ed-47b1-95b5-22fbb9608191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '12.138.125.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9be3986-e359-4239-9127-38a696b754ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.133.60.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27610d5f-d52e-4613-8252-b1e5a18defdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.221.13.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43ebd0cd-fcbc-427c-bbc0-e14fb38c0eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.118.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff61fa75-c2f1-40ed-b9e9-ef5d2aa5e28e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.55.92.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--226c40f6-b736-437d-abf3-8da31b96c04f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.71.59.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db867d02-8eeb-4fcb-b994-52299ec8c40f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.134.8.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf488e7-7da9-498e-bcdb-76d64b93dc6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.137.29.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea706d5-0657-4dff-8782-266fcf895461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.167.156.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d68311ca-eb66-4958-92c1-5ff26f621b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.199.175.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c406e0a0-f089-4bee-be15-8ecd40837d34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.205.216.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dabca89-af5f-4039-b009-1c7d88772b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.21.196.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b930c7e-b882-4f47-817c-858f8653adcf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.227.152.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26372f5c-a1f3-4b05-ae18-d6e9af2b0532", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.228.250.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084494ed-d385-4d6c-979d-e4167ec20a00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.40.41.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1324a24e-08a5-4201-9334-6198b78e909e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.40.44.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a887f2-a1a8-4320-83e7-3626be14158b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.41.170.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eecfe51-b892-45ea-ac90-ea251b9f0a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.43.117.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5f44b5-3fba-4b91-a0ba-501d82b7de31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.43.178.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42e3df6-5a4e-4eec-8c0a-5049be85b018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.61.195.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b509849c-9076-46d6-9189-e70ff105bf1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.61.217.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1f8fa0-d5b0-42b6-95ba-0627b727c581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.63.173.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fe495cf-d1af-4d27-a173-29837ec2270f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.89.207.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b353cfd3-96e6-4cd9-acd3-d2da8ea7a7c3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.117.178.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13bed36f-2109-4224-ae71-c8e2a5910715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.117.46.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79294b79-6350-4549-900a-8bc03b3da3eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.191.127.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c9c64f-1fd3-4b94-9a0a-a5847c1753e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.194.9.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ddbe11-08c1-4206-a4c4-c6d28b3195fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.232.127.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62208122-4869-4aff-905f-f91e24c9ac31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.234.157.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91c329f9-6dfc-4b5f-82e9-6a0152fa7acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.240.157.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398c6a89-8e2a-4e32-abe0-c9f2eedb18fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.6.148.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816d4f6b-331b-499a-b4d2-bfd2f3ab277d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.8.151.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625b3641-b5a4-452a-9268-bc3646448818", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.97.209.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ae72fd-e7fd-416f-ad30-61c8b306966a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.97.214.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4986fc11-44cb-41b8-ae55-206d69062643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.132.190.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf0caae-6ce1-46cd-9eaf-c889485a88e5", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.138.18.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c20a968c-d8c4-4dfd-80c4-d0db0ea61297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.144.21.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aea0531-7ef6-4e55-9d2f-16522c75601a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.156.144.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749f8385-126f-489a-85eb-a58d5222959b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.233.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df4d11af-a3c1-4913-a287-b705433dea5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.235.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8577c74e-35b4-4ef0-9883-cea7136ee244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.165.85.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4dbbbf-bef4-4a58-9486-d64fff2660da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.169.84.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d55da0-4513-4bda-8370-a4b7ed7ada03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38b28414-bfae-491e-899e-e28d2147a876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.233.232.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e48710a5-52ae-431d-98fd-d6395929e69a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.235.21.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55d7976-7ff0-4a1a-a14e-0dc4682177ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.24.206.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9945d5ab-1477-45b9-9f40-af22050dc021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.241.184.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad1ca11-6e44-48c5-8103-a7db960d50f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.85.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5bb9fd-ce86-44be-a141-47cb7c121b4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.30.106.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--098b2a5f-8658-4efc-a6f8-b406c4c83442", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.49.41.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea40a1a-0bd5-410d-bc18-6d71617bda9b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.50.82.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc817207-17c3-419a-adac-064bf389571a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0e8686-b3e0-47d2-a3e2-c7fc4bf0b137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.205.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9a7171-577c-487b-8da5-1afb133aecfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b81a8296-5a51-405a-ac17-11f16dd6ff00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03fef043-79ea-46cd-a1c5-d2d10df88904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.209.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2a162f9-7deb-4f60-b2da-733a7f7e5a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.210.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff73f0d-bff5-47cd-bc5b-30b917ceee9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e3f5ed-9ccd-49d9-9da5-9f945d24e222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.122.139.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c7f9ce2-5b43-42ea-a132-4475d600a81f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.207.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95bfe26-daa9-41ca-a381-40ed731ca7ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.225.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6851121d-ffd3-4eea-9509-1d499221edef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.160.243.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0794b82-7c31-4f5c-9f2d-2d5ca1188fb2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.222.230.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f905aae0-3a6c-4569-84a1-4c7f781ab116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.236.76.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a92ffeb1-992a-434d-93ec-fa0c72a83313", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.239.12.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf71f53-b87d-4d59-8ffb-2129bc6014d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.29.247.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c125460-d969-42a0-9b9c-9893e4168fc6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.40.252.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b595d1b-73a7-4119-a1ad-eff8584c47f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.43.79.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--146f253a-912f-4d87-b1df-74152aec1d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.229.239.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a6ffc5c-1237-4851-bc6a-5c2b6df245f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.231.33.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc1b868-9397-4a2d-8e00-a1512d84f212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.25.117.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eed6220-136a-4ccc-941f-a04f083b6179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.42.127.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28bda4ad-8f5d-4d4b-a047-d819ad305b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.44.83.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da4f5bfd-9b16-4d31-9da6-55a6443dae14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.92.253.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a60fd81-25ab-4b60-a201-d4190702cbc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.94.109.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--576a9bcf-3d75-4347-b617-47c5ed818bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '127.0.0.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187cd8f4-216a-4ee7-8403-86e03fc23c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.34.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--213a1a8f-510a-472c-9187-9ecd0873fd48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.46.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb7d1a46-29d3-4a3d-bf5f-f478775d0fb9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.127.117.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24adf90-3e16-4228-8528-307526bdb735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.225.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba7d388-cc7f-4199-bcb7-f0bd2fcee226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.226.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28aec57-275e-45e0-b70c-89ecfc566db4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35640a0c-19fe-4b82-aa34-35b87a0b71f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.229.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a1ac940-7dce-4246-9abd-fbfe599bed75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.232.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f92b2a-ec55-4342-bd2e-ea700edba642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.233.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a7b273-b924-4b5c-8abf-73ce373b8710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4308193a-7967-4d36-bd25-7714fa6d92ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda64224-21f4-4177-8245-24e39a767df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e1a127-3f39-4166-a9b1-84a7f92ab169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07031135-5dd8-40a2-ac95-4d85b4a53056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.8.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c0b117-ee1a-417c-a82b-f5bc05980926", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.201.177.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ab29ab-0857-4469-b3bd-e61f1bd8f295", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.201.181.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab36002c-8475-41ec-9740-92195f2ef030", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.90.141.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32580c12-5e5d-47b9-8e71-456e6b4d24f5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.121.75.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f94f6d6-b550-4518-8c8e-ca7fa645c6e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.150.39.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d32ff61-df75-4d5e-a1b3-421e2755501b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.204.188.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96d59e1-77b6-4c29-b0c2-1ef1eeacf2fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.222.64.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d539b159-7fed-4ae2-8aa9-ce7c8265995f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.227.230.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfcec0c0-fc55-458c-956e-93f23b7c7659", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.28.84.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c060d2a-5717-411a-a09d-fb729d524bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.143.141.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e891cf-5977-43c6-a301-3ec78dea5e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.224.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef31cc29-8c04-47db-84f1-12f87052f2ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.231.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452edbc4-d6cf-4898-90cc-4b6bbd4bd59a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.56.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27612fc9-3f0e-4dec-a1d1-3e1872dbbb8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.73.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad87d6e2-3d75-459f-a2bb-240734c91b43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.219.1.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b91176ef-2497-47c6-af79-8e80595f8e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.220.113.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--085bf436-9ed7-4ffe-b260-e66968242b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.221.242.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ddbb454-2b45-46d5-9143-63f9fd347248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.221.67.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9459946e-5b3c-4835-9b85-1199f39b24df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.222.142.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fec8a5b-70a0-4855-8400-aff1bcc68a16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.60.62.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9426d4-e900-409c-8191-257ddcd086b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.106.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ea0107-eb2f-4bdc-81a9-6888180db9f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.114.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--020cfc94-6bb8-4b68-944a-91fbd5fc1972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.0.42.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeda8e8c-1a7d-4f40-846c-2fa85be10c77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb11bb5-2c3b-4412-bd63-2391febd5a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e750afd-17d6-4c2b-a8f4-e049b89c70b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e90684ab-b57c-438b-8794-e06d2ad33fba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a50af935-d9c7-4c1b-94af-948a6257c015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c92526-e7bd-4579-9d0d-7a051a9a7ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2713232-eaff-4dea-8096-605860224a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.182.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--388b149a-e302-49c4-9d94-437c11c6b427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.182.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63add85d-6aa1-4852-8611-531a8809c8eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f78cceee-e6fc-43cc-8d28-afe1c88d4d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.162.192.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58dcbf86-17d8-4469-9ad8-6e989802e3a5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.0.235.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80530cda-648d-4dd0-98d1-5a002145db99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.123.40.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35a173f-05ec-4f2a-80b6-7cde778b965f", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.148.22.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e25f855f-a153-420c-a4ee-dbfedcbecb87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.230.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb86a56-559d-46d7-b484-313bab162e08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.114.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a997891-a3d9-4505-a6d4-9f239a97533a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.93.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b12debc-9df2-4a74-b697-5ed031f34f8c", "name": "Malicious Host", "description": "Web exploits: aws-credentials, spring-boot-actuator. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '134.185.92.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--27e98b83-6912-4498-8f6f-2dc30708f95f", "relationship_type": "indicates", "source_ref": "indicator--9b12debc-9df2-4a74-b697-5ed031f34f8c", "target_ref": "attack-pattern--8a8bb6e4-b7c8-4514-9164-c7db99614575", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--749c4d1d-6910-443e-89eb-7f9ecd49f7ff", "relationship_type": "indicates", "source_ref": "indicator--9b12debc-9df2-4a74-b697-5ed031f34f8c", "target_ref": "attack-pattern--5e475c1d-71d0-43e0-9f8b-68c3071ac97e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--18054d0b-e69e-418b-a838-f0788e8986f9", "relationship_type": "indicates", "source_ref": "indicator--9b12debc-9df2-4a74-b697-5ed031f34f8c", "target_ref": "vulnerability--6725651c-52bf-40f7-bf2a-10fe38562d4a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--37cf8cad-079c-4dcc-8a6f-1ff702ea7369", "relationship_type": "indicates", "source_ref": "indicator--9b12debc-9df2-4a74-b697-5ed031f34f8c", "target_ref": "vulnerability--09e8004f-6e38-483e-978e-fb0f092cda87", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--185fea89-1fb1-4b32-95a4-f71df9e3339d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.149.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e1af4a-0f77-4948-b9a5-2436a7d7d525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.151.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9355bff1-f69e-4268-b699-5b8cb959ff42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.153.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6ffebc-e334-425a-b6cc-1c7e69db05e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.154.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79619e04-52aa-4cc1-8844-0fb13d7e2d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.159.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffaa838f-a3bc-4cbc-97c6-5f7ae032607e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.159.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42230f62-3ac2-4c27-bbcb-d96fea0e07e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.162.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac7b402-5ee1-404d-9a41-0ba69e61da0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.171.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0177faa9-66fd-4153-9fc6-2eec4d46bb07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.172.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c931bab-400b-42c2-9121-ebe1a09de2ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.173.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97442212-da29-40ac-a18b-a640bd11e52e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.203.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08310a10-b718-481a-9986-32b9de63b0ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.223.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f77a2d-8c27-4d45-b37e-8991500242d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.251.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c77c99e0-d330-49c0-88f9-41a811031682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.254.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c10b21b3-a103-444a-87aa-241d31b2acf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.63.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45211329-d0ab-40e5-b55c-2f1cf1544330", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.73.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--115c8b23-b1e9-4229-879f-12932fbc20c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.95.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45f4749-ed3e-4116-8d30-51a21faed646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.92.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9e51ec6-3e19-4ded-83de-6d844f16f53d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.92.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e10538ea-bc82-4c74-81ee-3afc479e13af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.136.70.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b291d1-fb3e-43c6-bdd8-d200400d7979", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.41.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3361e9e4-345d-4873-8b03-e426751e2ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.115.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b08d2f-8e3d-4316-80e0-bfcadb6b69d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.97.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96e8611-96cc-4d1e-b4a8-e5084541ad30", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.108.15.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d591c847-5507-4d2c-83dd-adcc220b436a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.109.216.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e27fd7b-9b57-4b96-b146-837ff2b5697f", "name": "Malicious Host", "description": "Web exploits: php-backup-grab, spring-boot-actuator. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '136.113.62.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--47c84f50-ff2a-42ea-a9b6-e6549739c1bc", "relationship_type": "indicates", "source_ref": "indicator--9e27fd7b-9b57-4b96-b146-837ff2b5697f", "target_ref": "attack-pattern--d867a213-be6c-4d69-afb6-caeecab59af3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3825849a-f162-42ae-921d-c1fa5ecb258c", "relationship_type": "indicates", "source_ref": "indicator--9e27fd7b-9b57-4b96-b146-837ff2b5697f", "target_ref": "attack-pattern--5e475c1d-71d0-43e0-9f8b-68c3071ac97e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--675999a1-0cc9-486c-9382-f59d2fed5ebb", "relationship_type": "indicates", "source_ref": "indicator--9e27fd7b-9b57-4b96-b146-837ff2b5697f", "target_ref": "vulnerability--09e8004f-6e38-483e-978e-fb0f092cda87", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5511e77c-118f-4c9b-b142-4d5aabf7606b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.67.133.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135b1093-212d-4af4-8945-1c315271fed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.131.232.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d9d258-7737-466c-8817-7771ccb379c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.112.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d143e3ad-f61f-436c-8ea4-ade484269dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.112.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c2b4c2-ab3c-4dde-8160-704419833b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.13.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df4e8939-07ad-4aa5-896d-4ca0228e9d73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.190.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab995363-927f-467d-b56c-7fed3176d0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.190.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd31d9a-3202-4111-9256-d9995517e328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.190.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea17478f-4bbc-4410-b57e-4182879225c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.32.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16feb7c4-d245-4dac-94f2-0f8613c3d92c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.85.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e9748f1-0df9-4948-8a2f-b28b3a8ea033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.95.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec297772-e1d7-4ee0-90ac-c72f43d6f8d9", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.59.230.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d61795-4b23-4593-ae33-2cd93eedaa0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.124.31.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32387496-7b6c-4b55-a57e-dfa91b15ded6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.16.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be40ab1e-7933-43f9-a8cd-b1721ef6bce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.179.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c6171d-dd00-4296-b6f1-d4585ae2b0d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.204.159.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181f5a6e-702f-4897-8669-01931edbf6bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.204.159.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c27518af-f469-4976-8b1c-f9d2699918c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.204.159.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41043b15-6061-4b82-b66b-99f685c8a79c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.204.159.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f74d5b-cee0-42bf-ade7-542aa6a03790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d09fccb-7e9b-4e78-bbf9-d567dc0c7d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b6107b7-8f4e-4ac6-9d4a-193fb7756476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd93b7c1-d5e0-4148-ba49-4ef34f946afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb46ae2b-288f-4a22-86d6-05514f6ee185", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7e8c2b6-5a4b-4af2-8be4-d6f19396470f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad2b489-f940-48e8-801b-a992a30c3d30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eef2468-9b91-4e1a-b329-e55749361576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.137.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a530eee-a955-4a33-ba2a-b9f89053b38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.156.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c1b7085-809d-43cf-8d5e-21c498ca3396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.75.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddaaf6b1-cf67-48c3-86cb-8fc91400b702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.84.72.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae987ad-d1e2-40ee-9472-4048315900f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.91.106.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6e28fa-5ed1-4b65-83c6-b17c279ee84f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.91.108.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c3a4a5-c882-4074-834b-24cf120d7977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.235.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b9d275-a3da-4825-9e55-32dc2fd6d4db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd8a638-10c4-44de-a532-4356f92288ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed3f7b7-504b-4e9f-8de1-6884fb8a02a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4117ec-8bc9-4fbf-84d8-728afe3d7411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd6289eb-c85e-4ecd-9fa6-6e5314a32bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73dfd035-315a-48fb-8185-ce865939bd3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.113.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4bda4cd-19a4-49a1-b27b-c5542140b7be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.117.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c39c3a-fde8-4723-8eec-b262cdbc127d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.66.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb712f55-94b7-4c37-8e62-a6a8c12a8fa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.70.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f11b43a-0065-42f7-ba8f-e6399c8c367e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.78.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8121556-58eb-40a5-9459-8bb8f6c2a79f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.189.179.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d4f886-295c-4bb1-aec6-c954ed61c042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.189.180.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc0c1367-5514-4fbc-9732-356d0a3e0e93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.196.10.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1cc022-ae5a-4f1a-8c03-6bbdec0c2c68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.227.100.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41cb5de0-26d6-4f76-947c-d4bc345df01f", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.28.240.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c50865f-ce0b-4d76-bc33-65da367fd00b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.170.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f97d007-58ee-47ff-89c6-4293a6efa23c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.42.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70beef87-031c-4392-b8cf-c60425bb046c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.94.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc3fdedf-b5b5-423b-b842-f525a69245d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.99.82.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be99eb98-f489-43fc-895b-5a648deade8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.159.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02275c78-2064-45e3-849c-db4c21df25f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.224.238.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272a828a-5304-4a04-bcb4-f10846fece47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.225.5.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e767f7d1-02f6-4250-a804-0e183e9c8e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.47.200.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64560741-a072-481e-911f-1a491a4554ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.54.135.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25252271-71ea-4f72-9964-7a29348ff45c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.245.222.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d9c0cc-1218-4dc3-bf16-9a810fcbbb23", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.246.124.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b9e925-aa25-4458-9b40-1c182fbe6f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.45.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1178b2e6-51e8-407c-9d79-34d65284d0a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.10.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1678257-0754-4e7f-8246-c03b6042185c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.167.167.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--002c43c5-4bb8-48c3-9c5e-e64edb23303f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.104.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a85d71-479e-4f87-a1c8-b0914f2e3b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.104.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f8b23de-653b-4133-9d06-eca61c2b40e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.104.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8fbd2ea-8740-48c1-8c11-f4ab61784e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.104.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b795d1-7c5f-4c05-86e5-ab11eb2dff35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.104.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26195e16-9bd5-4350-ab08-aefbc5946dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.104.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d445621a-b52a-4e43-8836-aef5680e6996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.106.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--387e8271-786f-4002-9e75-4a17e95e0c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.106.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d88ce91-b523-4321-a79a-1f97fa823038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.106.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a3eb5f-7b92-46c1-9399-3024f4f021e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.106.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--540a0b2a-221b-479f-a6de-eb599242b82e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.106.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440285ab-be12-4f79-b7cf-1016b77d6d8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.107.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04298a9a-e387-473e-9d80-4eee9fa01a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.107.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13029742-874a-451a-897a-f51139ee2c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.107.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ddad0f-38d1-4b6c-a8d1-2cd095ae6f87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.110.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b6a26e-732a-45b5-a45e-77baba88bc7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.110.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb16366-65e4-4a14-b09d-fad39073f4ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.110.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee603bdb-96b6-4ebf-82b1-89a4a7036436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.110.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b6f949-03c0-41b4-bcbd-21141228e231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.110.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac4f6be-a48c-4c59-bfb2-3cddb8a512a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.110.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff39e535-f80a-45cb-b92e-f5920e6ce323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.120.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf203c1-9df8-4528-8310-636f6c5160b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.120.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532d88d2-b97c-4ff0-a9cd-8afc238a001b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.120.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ff326e-0ffa-42a8-afae-434f5b61ca1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.120.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f5da00-6abd-4955-a6d7-5d161ef9d59c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.120.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59bda1d-6fe7-47c9-8546-81591da6960a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.126.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f41c81-ef85-4250-9202-edb2398bd4bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.126.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb6a3c3-3fa0-40f8-8210-5a16ca402a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.126.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc65c03-f012-4ab6-9939-24b22b4aad91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.126.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b94d3b81-6770-4730-b223-97d70bb50012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.126.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0890911f-a086-41bf-a632-088598f54f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.126.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbb88959-e020-4867-958d-28d447fa25e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.234.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f15fbaba-617a-4f81-b2b1-05dd93863ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.234.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3e9a4f1-d0f7-461f-9d74-1258168d5bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.234.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a8e6aa-035e-43f4-96ee-e0efb2ca7e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.234.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--744aa8d6-2549-492f-afbc-396a635b965b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.234.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06af5663-0e5a-47ac-9543-24c5a4bf9e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.234.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1de46edf-5349-4f3c-a114-ca487bcd6147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.236.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5863dc56-a565-4071-ac9c-d2642b7badbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.236.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87066363-b0b3-4030-9bfb-23b8c7190635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.236.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ffd5d9-bb27-4490-98bf-b8b1be0926a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.236.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b50da51-7a86-47c7-9aa0-c851602ab632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.236.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c87119-bb70-47ea-99f3-fcf8260abe52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.242.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0e6834-c882-4ce0-91d8-546b6919d07c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.242.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63153ac1-e37c-4f62-a04c-414d3ab94b15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.242.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e61874a-faa7-433b-989f-febc060b71bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.244.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1cc665-1aa3-483d-b599-28cd58cc9e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.244.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531f6aeb-ad6a-4f25-8407-c9949a2f3bbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.244.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dda3b43-a44b-48cd-925e-beed16ce9c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.246.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7721f7c7-d0a0-4f9a-9648-c3a08fbdf73e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.246.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c037d578-ce9d-4824-bf37-c881d0827cf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.246.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7006048a-b4ed-4905-aa7d-ce6e31b998f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.246.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6331dabb-9661-4393-ba67-7132884d0cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.246.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--768c92cb-4c6e-46f2-ae96-c43ca793c8f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.246.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0d8f4c-d207-482c-ace0-44a415cc678e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.81.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67fdc11d-e8c8-4942-b2cb-3aa20b0594ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.81.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03221e3-2434-4584-a3fe-774a97e270e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.82.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c09f6f-cd33-4d34-a9e1-90a25a386d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.82.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0b1b2e-9bae-453b-9108-7551863449a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.84.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37b16d77-dac0-4b9b-a52a-17b545acfc08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.84.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1027bf29-acdf-44b0-a25a-06857d909e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.84.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f36330-d4bf-404a-ab7f-2eee15ec65f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.84.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7144b0c4-6322-4485-a645-bef785854a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.86.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34c7cfd-fcf0-4fba-8944-dc9d1f933c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.86.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b0917cd-0deb-48d0-9520-8c5ea11e4d90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.86.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c24acc47-2458-4407-aabd-305fcce67f16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.86.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c28575bb-dadc-4518-bba6-a7541a9258c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.86.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02003fa0-e31b-4da3-9299-587091c74724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.99.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97830733-e137-46dc-bd83-480a4eb3135d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.99.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e259c58-a84f-4dd5-bac2-2be3b0d30ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.99.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ffdf0ef-3395-4eec-a586-b37a5431095c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.252.99.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cefcb21-3e54-4d29-a6be-8dbb23a10ab8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.44.220.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6087eaed-a986-47cf-b186-fc62b55d8d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.54.187.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f54767e-97bc-4a65-93ed-5e185811ba9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.91.102.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d88f43b-3337-4f99-8370-18d92aa05c93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.91.102.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2726bd-79f0-41f4-9a56-492b250935dd", "name": "Malicious Host", "description": "Web exploits: apache-solr-admin. CVEs: CVE-2019-0193. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.102.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0193", "external_id": "CVE-2019-0193"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b6ac18f6-5e65-4d42-91be-5da28a6887ed", "relationship_type": "indicates", "source_ref": "indicator--fe2726bd-79f0-41f4-9a56-492b250935dd", "target_ref": "attack-pattern--9f6bd0dd-9d9b-4eea-b75b-9f1c56fe33c8", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6b628dd-9593-4a68-846f-e1e376dc0d7c", "relationship_type": "indicates", "source_ref": "indicator--fe2726bd-79f0-41f4-9a56-492b250935dd", "target_ref": "vulnerability--d96c63a7-fed3-4abf-8334-a600fc9571df", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e778911-b93e-43ef-bbfb-c3fe20b23b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.104.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04138a33-7629-4fcf-989a-e3d4a215c90e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.104.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a8eccbb-78e8-43f5-b89f-e52c3e6cb882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.121.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c6b6f8-4b7b-434a-9f89-b75a198cd9ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.218.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858b24cf-e215-46dd-a12d-b84f0cd9b0df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.95.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae7c8d5-f37f-448b-b8a7-b0869d2fbd23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.106.73.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab55cd84-007c-4644-8bcd-0ddb8be8d62d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.239.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeaa453a-03a9-49d2-b207-930546f79fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.137.112.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9d5b62-3ad6-44eb-8557-1897dd1086c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.117.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49260478-5096-422d-aef2-22a2e9d2a6d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.150.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96daa2b-43e5-4d56-9116-5b79e2bec6a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.171.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb91e8d-ca97-4265-8485-719bf2428580", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.225.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8266eb8-67a9-4482-9ef8-825bab18ab8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.238.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fbda629-3c6a-4379-918e-1cfeed894985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.8.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ffef505-4085-4456-8d6a-720f89709270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.246.222.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53b31fd-004b-4d6e-b5d1-c5425517dd31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd8b38b-851c-4ac0-9bd0-62d3d27b582d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010e6dd2-f7c5-4630-971d-d9e5fd53b6b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a08352-3cc1-4727-80ba-9cde5ac44d2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--011a908b-56e2-48ce-ad26-c08a8bb60f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3bf548b-ba37-40de-b766-c42cc4940b8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e0fc4d3-fd08-40e3-a0b5-07155e5a7f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b549844-98d6-4138-aaa2-62e5f32007a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5bbfb56-58f5-40f8-8c64-84274b6b2145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c200c00-1b8d-46a1-a438-daacb3c939f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ae72e4-1eb7-40c3-ad77-b4ebcac90332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff09c3a-8eaf-49fa-852d-64949fef9506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--844d751d-301c-4c6f-8db4-5fb7635eacb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f258af4-90ed-4df5-a754-99b9f403a3e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5db694-84f4-4a1d-8ee4-afc99dfb1147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b602bc-1630-44d6-b452-3aefd746a241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96f47050-fef7-4cdc-bc37-b2c095ee43f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bbaca7c-fdc2-4690-9843-1bd1d63a0fe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9420ab8-5919-46f9-a897-ce946d986911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc399f47-fae2-46bd-b846-c760ab7d3bea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec0191c-8aa7-44ef-9f11-3dc2134610f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18548ead-2782-4688-9601-1bd0e3255e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.122.145.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb77c4c-e981-4ecd-a6ec-5b594a79d977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.124.192.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d51ebc-2168-422b-9236-421622861a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.198.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5160af72-1c55-4506-bcb1-619247051364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.225.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc5fda1-8193-4bde-9261-f92ca0e176b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.104.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0214bd42-14b1-4de6-ae1f-de1e35da71cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.115.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da082836-4b06-4357-8980-09db2802b6cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.84.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc25c90-0c68-45c7-9e28-02aefc102173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.84.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebaefccc-dd38-4a9c-b5d1-2a46aeb987a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.92.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fde1116-549d-4b8b-9752-2b55829757cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.24.159.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f46fae1-2d3a-48cb-a8f0-befc3b3658eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.31.184.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24a3f39-71f4-4ba0-8281-e69207086c1d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.48.109.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ef2b64-1e6f-4554-bab2-1b37a5209f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.6.131.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb4c5b0-6f68-4f9a-b262-84c96795261d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '145.223.134.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f45b96-d81e-4f80-8d89-bff9aa96d22d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '145.223.140.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f2b917-7f41-4d91-b1c4-10c24ed146e4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '145.241.121.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dac975c-6aaa-4a01-9bdc-68343a316640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f5b0671-254c-4646-bfe7-5aff2f3a8253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.134.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86b2f61-97db-4381-8ad6-ae95edefd87b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.145.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5e57c7-5442-4a8f-abd5-35af684e013d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.149.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ceb05e5-e6bf-40fa-be34-382d12bac6c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.153.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c215b06-5db7-4fbf-904c-d17ac0f1a282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.235.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73404316-582c-4a0b-8029-0afa369cc9db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.247.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8613cc-c657-4ac1-8ee4-f6a6519f1835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.48.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4793b6de-f084-49e4-94dc-5f6e82dad356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.56.54.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33baf3ee-88a7-4eb6-9081-b1469dc1c97a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.154.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87bd514d-a2ce-4e45-9f33-5e8b111492bc", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.160.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1bff05-53f0-4f78-9cab-843c6634b6d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b47fb843-a50c-485d-b648-b65cfab947f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b517f4cb-4d1c-435b-a070-79a1014ed621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6db08c-549c-4657-9cd5-c2a35979d0ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f1672b-186c-479f-9235-857938a8aa33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.12.193.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d840027e-4858-4fee-850f-da54ab7a6d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.135.78.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dab0b36-6d99-4fa3-894c-6a92280f7502", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.143.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9450ffa9-5421-4c61-b6c2-364c8a0afa3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.202.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--262285fd-98a6-44e7-80f3-2fe5070ba69d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.225.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40607264-ad10-455c-828f-556d9421a8ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.241.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac7d6857-d8b0-4960-aa89-aa3ee0f16da4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.247.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--033339a1-00ce-4007-9072-184e04654a46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c675997-8778-4041-a5ad-6e79184e16e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a10f31d-65c6-46df-99c6-f76c0c030f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9cd2113-cc0a-43cd-b134-3bcfe8782188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93aea0f8-d579-4779-85c9-6b8f3c1793e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c61059-26f0-4c70-9aea-7118873c6f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea050612-9503-4a23-9c5c-07c72899b813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a8e1c4-105c-488a-8355-577f8eb17eb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68bed126-2dbb-4bdf-bc83-90a7db64b9bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--624c13d6-7c65-44e3-ad8e-2b887eef7ba4", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36aa0f1b-0e60-42d2-86df-c36d4b797f6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee7ed58-3ba7-491d-a185-df1afbf053c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39835579-66dd-4311-824a-6db52d72d3ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709e2652-f124-48dd-a979-709953ee649d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37b59ac4-fe5c-4c8e-a620-ad81eec66130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b523750-bc9e-488c-8615-1f361825fa5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30490850-d3d8-475a-9a29-4c90f0e50f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36862cc-60eb-4976-98c0-ffbb65abac82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c1f41a-5445-4569-9b4a-cf9f0980398e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--044074cd-3732-4c15-a314-40d09c2d701a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bad332b-add1-49b6-9a56-ad227067f2e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e91797-a134-4f00-91ef-d895d515787a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--737bd8a2-8d2a-422f-b6ea-bc14917094f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abbb2c7d-03c1-4dca-bffc-fbbf1c73cd78", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--586d9c4a-9d21-449a-845d-b82aefad8e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7bf912c-64f5-45f2-8e63-ebdb7ed3f08e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ccbea8-58df-4061-a3f7-61018ff1781a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--735f3140-e5bb-48ba-b3c6-2e98b444a405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc080ed-fd16-4876-bc04-8ca2e5e654a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d471412-a45e-46ac-87ba-e8431a3ef474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a9c8ff-be7c-40cb-85c3-49798cd0ae3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e34e36-b24e-4b4c-abcb-04ce7700d982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d6951c-b21d-48de-bcc2-57c83d32920e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2a961c2-41df-432d-8aef-4b2060fd9ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b007dd-6ff5-4893-9202-784c42da7bfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052fd914-f051-48f8-b911-f77e8365fd0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8f71e3-2899-4caa-acc9-888291245253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d68fd14c-4107-46eb-abae-854cc64ec133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3fb1617-0927-4dff-b1cd-d662043c88bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--024341f0-884b-4d20-bf3f-3cc05061b5e0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a33926-cb16-4bec-bd3f-3edd0b79098b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2831fccf-192d-426d-ad73-acc0a8d96cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef9e471-d1b3-4920-bc11-98844eb44545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b24fa5a-2f20-419a-97a0-aa9935704d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a9352e-3865-4fc7-aad6-52e517debdcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c94e10-daa7-4cda-a292-1cc2b20dcdd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3450fde-1874-4737-a3e4-0437effa927a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15005282-94a8-40f0-8ddb-0752c72f28cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d0ff446-d52a-4e88-ad76-39d21b7b0901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b14aa82-c883-4d5b-8b7b-2f8d1436cd62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5042f642-7a4d-4731-9d6e-76fbf7a59218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf23656-662e-41bb-898a-a28fc0fdfbdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40eaced9-d076-40c9-bd15-a9fe8f526760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc8d3626-74b1-457d-81e3-e388c299c2da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b6c0a4-fbf6-404e-89a7-b408be3ab6c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52e7e30-b1e8-4682-a8fc-fd3caf03617e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b86936-b872-4d21-8ff8-2dbae9c4bd57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a39860-245e-4b35-a231-e72095489a26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b29770da-6b2a-412e-a95d-fb9522ac3bc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f37b65-2086-4505-9a5c-279aea5fd960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5fc904a-b237-4859-9c63-cf5246a1b7b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7292cc96-7da5-4e78-a329-768b280c5b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed7c4419-de63-47b1-9a06-d16fadcadbae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302d9e5c-345a-4538-b016-a1a9d516701e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60058903-a874-4603-815b-3a61101abf28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08207eea-d36d-4750-85e7-e364845066d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00d8f4b-bc09-4a58-bce7-94eec6384bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddaf20c0-89d3-419d-96df-c4f304c625f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9526c3a3-4afa-414e-949d-51449462f730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a833f3-73d4-4e09-8a01-1b12d828d2ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d66ebe-d27c-45cf-a241-e39c98b2ded9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4415a384-8b06-4265-a611-77c26a3cf736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4279f8b5-68b7-46b9-af6a-8f5f6f551187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec9bb61-d876-4a4d-8faa-cc4fe449ae90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33544155-763a-4b61-9c6a-b1d7df9de4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f8bd06f-c38a-4090-9042-fe8efd2a3092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8303def-996e-4f2d-beed-111e549fdfc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f4356c-ec41-4008-8978-c2825c4c9da1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc4ab4b8-0f9c-46fd-84ac-314f90f1fa38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835d83c4-ac37-422b-936b-17099cbcb9d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f77ae35-79aa-458b-8394-2688968ea875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e296ca0d-09b1-4493-b499-e11460cb2226", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9703c779-6836-465a-b243-8fef76912141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b834cd-8006-408a-af9e-337e032c23cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d153a6b-82ac-47e1-b307-245fd60fe370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee303e6-2961-477c-8c15-00404a1fd207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29889901-9c8f-4428-8aaa-149343814818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f06a467-7296-4a95-885c-e13a0f042fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb98495b-7b96-4c77-9fa8-1c67c75db36f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c317a16-4cd0-4692-aca9-608964ac9d6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c72679-243c-47ca-b290-c7c4f3a63b43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da85ab8-da98-4600-923e-f54f288b6c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35bb510b-2cca-42d5-9438-fa3f44969dd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec71bad7-5173-4c53-b403-264666f6e09b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1655cf0-978f-40c4-9413-2a5d24aecd39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b62498a2-e58d-46b6-8a89-fee177b727a9", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c3d672-c673-41d7-b7df-0b7d413492cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982b696c-ee30-44ff-94c0-9df8d7f47f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06af6305-cbfa-49bf-8b5c-66282d1f067e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--433c2f00-a5f0-496f-9b33-112e64167fa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b6ec643-14f4-448b-a7c0-f1ae627afcb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306d9327-5b45-4680-acf0-9458806de359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a86814-e4d2-46cf-9a76-fbe2cdcbff50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3e59a5b-a363-4901-badb-17c14b9724e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0037c8e3-8d4f-4130-ba9b-aa58d9ccba50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357bc532-ea58-4c20-81c4-6d22dad977b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3424daa-94ac-459f-acf1-429656ebcd4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165b0377-b225-42a0-93e3-5530cca0dc07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--070a4e76-1ce5-45d7-9516-cdda3754b397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f51af7a0-0c42-407a-9273-e57340ad25a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5d5fda-f297-4c45-af86-a027ac0d8c58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c94d4f-90cc-4d92-bc31-402fe8ae03b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4671f6-f2c2-46f0-80f7-1d5d51a4a387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c323ce7c-3a20-42e2-bd45-c70ca8111c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ebef8d-eb9d-450c-9ef2-c6e1ab541bde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3dca1c-078b-4dd5-8d7a-331a601b9017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c4e230-bb4a-4789-9f0f-ff1dea587ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97ac2c8e-a5ca-435d-9207-0948a1b960d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4bdd24d-0f75-4c74-ac08-739796f49aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b4549e-277e-405e-9da4-b69077903f21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da83bba8-2ae8-498d-91e6-f3250e2d2fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11cc006e-3e5c-40c1-9652-b33d2991ef06", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--618a7f65-2a10-48c1-86f2-81382c32055d", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef93edb5-70ba-429b-98db-33b69417105d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e283b19f-0e72-49fe-a67c-e4d11d6fe024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d97fd57a-530c-418c-b8ae-b4edae409f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eed2086-9d71-4342-ba0f-e076852731a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fbb13e6-139a-4262-ba18-27a669227151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ad3f88-2c0c-49c4-8857-b3afab2375f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af0e345-69dd-46a8-8607-6c3ee71d07a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d08c03-6d72-4644-9e7d-60d705372bde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bdcc072-59cc-4205-ab08-987249ea263a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b38ad8-a255-4942-83d6-8bf02317a3c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4505228e-d1aa-4075-8dbd-2a47704fcb99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b15deef3-60ca-43bb-8aed-081eb85f7f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4deda907-fe8b-470b-972f-770dd667ac24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31dc8c9-d2fc-48f9-aa25-208acbac36d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--035ac037-6c21-4be3-a3e1-3cf6015d7bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805d5b90-aa47-4efa-8445-b1152c2346fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400bfc5d-170b-4505-8626-fa33396469bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2028741-ff72-492e-af74-e3f607566cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1141f7-552b-4194-8916-29c834400b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5283c8-cba1-49da-8506-828a1b6b395d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d5ac7f0-3cd7-43b0-8163-498ce0b977e2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8358a4-a04e-41cb-ab78-017f0a9b2dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36875a0a-608f-4449-8f4d-8614e75cfd0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c40ee619-3418-4076-a857-d38b87e656da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40308e24-4b6d-4a17-8801-8e8799ab3c11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a964f6-cad7-4b4c-8c3f-2dcc5e4ffa7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f1b8e0-c2fa-4886-9610-106909bf4ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0feb2b9-e878-4463-8834-1bfa812683ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a59eea-26bc-49f1-8b89-78b57de534e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ac22e2-34fa-4422-b875-3510decef9e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f7d5ec-decf-48eb-9727-0625c8f7a7cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584e145a-f26f-4628-bbc2-36357ab82015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08b0608-16cd-416b-b180-cbb051c28bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf4fb56-a8ae-457e-be2d-ba2053abf2a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d4c296a-3263-4dae-bf56-ea902d10cf64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51faaa2e-b145-4949-be77-7e7e31f443c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--436eea2f-dc2e-4a11-9a05-49d5b50d0c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--886a668b-3c84-4372-825e-cb1a273540fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcfa3cfd-ed40-4f10-a1fa-8dfdafcd34ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbafe3ea-ae7b-49db-8593-5fe132c6dc9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b300b51b-8988-4c99-90df-a75ad4cee0ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95999f08-dba0-40a4-9347-3a548193171d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391913ef-4a6d-4cb8-bd03-f80b43048311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee835cb3-cf10-4cd9-bbbd-6fb4ef11766c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5c40e1-af9b-4fcd-a6b3-f1d94dcf7cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3ea852-0085-4b52-829d-4d78cc0edc4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08f18a5-4df0-4475-b790-8e28ad9882f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7dc041-aa8e-4887-be76-c759835516c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a404c47-bbc2-4ffb-94c6-067c3d7c8197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71c21b20-ccc1-4f63-9509-23b6fd9b6f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f25caa-4e7b-4ac9-91cc-838aed0acb42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eae141f-1a01-4a1f-9a6c-e1cacc0518d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5084f77-3aa5-4bb4-a86d-9704e86c99a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cabb147-f24c-4bc9-ab09-cc1bf80ded1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f26bf892-fc19-4bd2-a44f-8fb4113c6bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebbbabcb-8067-4c60-8824-3690bb4cf5dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452297d8-62ac-4447-a70e-3f9ed32a1177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f373b9c7-4080-41d2-b75d-e20f44753e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e73fec2-ca10-42d7-ba6c-21634034cde6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a26e4f-344c-422a-8a0f-7ce89f4e37d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3093bf31-249e-4e45-b7ef-b256df2ebfb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af661dfd-83a8-4a79-b4e9-4f35ee86cf63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12b9728-b552-480f-957e-1ae9fb7bc4f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2780b4-9ad6-449a-9fde-54b72b9821de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c39e2b-5548-46e1-9d92-ec5d74226d18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d56223-2bec-481f-9b31-bf6ccc7c4b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7eb801-b9a2-430e-b9f3-0bd552ed631b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6db1448-93be-44ac-8b4a-013e5324dccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50e6e3ad-7e80-4f1a-873f-ec351e8d9b43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e21e09-6e75-4761-a2fb-e307c3db4b20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b28b8849-7e12-4034-b855-7082655a3e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d7c2f9-b36a-42e0-9eac-f1de7014ced5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ff3850-eb27-4547-a62b-1a7fbe4bb5a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98853153-fb59-4d5b-8b40-cac42b709cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9500cf2-d4ac-4f31-bbd8-ca87bc4d7446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68626521-e6a7-44d8-ae32-9b8371f39d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c2bf6b-77cf-4c12-869c-c7240fab6223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc74c0bc-27a6-4014-b0f9-2694e083ee9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b948ffa8-dadd-419c-9429-da018a635ab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48eeb957-98e6-4858-8db9-e11febd42873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92cb3669-280e-4650-a4b5-97a0babff01e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdfeaff3-7eab-46f4-9906-65807e50b76b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9638c9f6-e8c2-4c28-a852-7c2a2257827b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03fdb59-268d-49c3-b7f4-071f826c37d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a7174e-4026-4ecb-9af4-bfecac2005ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--950aa9fe-9a3c-4e6b-a36e-b950e9184533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f6d1722-eef9-4641-b3ab-345354d10df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208145d8-6b3e-461c-b736-323e6d869224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb0f790-9e76-41eb-aaaf-38ef97b127d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6a837b-aa62-423a-8ecc-11108cbca306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a378e2-125a-49bf-9968-c6472a33dae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd8272c-3f99-4a11-a73c-060e7023a8b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235cfab9-e34c-42f7-832b-3006d953454c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b314c64-a749-45dc-8d47-e46a983b76f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa756984-5bdd-4baf-bac9-804afb0b4fee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dec5b65-5e07-478f-824e-f2631850b0e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb3cc186-2f4e-4de9-8e62-cef78c888ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0215796b-c8be-4b9c-abc7-4987170fda8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82cff1cd-7962-486d-90ba-04b453fd38a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ab76ec-fd9d-4ad0-a6de-36644acfd642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5de59d2c-8c68-4e77-9b77-2502784a4c3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408afffa-e0ec-468e-b649-1710fca3018c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8caaf93-db9b-4e87-9fcc-d001c8b19efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf77915-1944-475f-852c-197d038a7e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f68d885-fbfe-4904-ba40-653ae9446ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2410e893-9b51-46e1-a34d-53afe81aeba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b465e900-53e3-47ff-86c2-b0b167bffc3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8687e21d-533c-4e6d-b778-c7a23c2c742f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb13e3c6-b0c8-4565-84c6-e6c7a7211e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd176a8e-c341-40b9-a391-9e73de09a0a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a9cba1-de9e-4be8-9ba2-b416ea976de7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4259ea3-79f9-44fd-8082-cead9c5dcbaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21ee5bb-acad-402e-8cdb-d6573c7aec0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc23c47-1360-4284-9b1f-46ce5be565d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca9a9f8-96e3-4318-ab3f-398ac311d0d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28485764-c768-48ed-acd2-09df6ad3d7d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2387c6d6-3113-494c-9f65-30b93fbe34d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b62ac6f3-2009-4c01-81a7-fe2125a5f8f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cfa6b4e-963c-432e-9dda-21fb5f0b4897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11576e5a-d158-4746-99c7-45a95ddb905e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--666dd8d9-f339-48ad-bad6-2052b59e2a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da329b6-a46e-44e8-8cc5-7f180cf3d7d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d838ab9-b58b-4405-a7ef-304e134ba46d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c208c120-23c9-4985-89fd-2fbab4bc70ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e077968-1775-4643-bdf6-739e32d1bfe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b3c2ca-9598-4c20-ae8c-8884e38b130c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92b144a8-5c3c-47ad-927a-e26e4c803137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf32aea1-33c3-4ebc-862c-2b5cecb8553f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60cc689a-c4f1-4ff9-aa6f-03eade3ee33b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d9f145-b5cb-4963-b582-855857f88236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46deaf34-189a-4aae-b73f-9130f550137d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c8788e0-d5d5-40f6-a52c-a0ffaf5e6bea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e56190d-e7f3-477c-9d23-bfcb275ef06b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e723d7bd-5829-4e97-8859-139321c381a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc6071f-e9a3-4879-a6a2-0bcfbe5161d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c9b9e5e-cd14-4ee7-bec9-38ad61edc2f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb5b67f-c989-4219-bc04-225283c9654d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7385c375-7736-4508-974a-bf2ef9c360ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3985b6e-f25c-473b-a6d1-4eca2871f14a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a9ea21a-e1d3-4e92-aae0-f1a004098f20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5916d040-b92b-490c-adef-1ad1681d0d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb581e3-7524-4ae4-b27a-59b9d989c16f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923e078f-095a-4cd3-9e7e-5ab406a2537f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b21bff73-0a02-4b23-b29c-9fc6dc920501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8648cd52-7347-43fe-b142-427546a76dad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7736651-c0b4-4b93-96d0-3ecc861eaed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cfa7586-eeff-436b-9296-8670cd1b86ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eaff579-8d89-4db3-9e22-b1ea36ee203a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5581c1dc-350e-4a5a-91d1-9b51543a3514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a8385a-a85f-4610-be56-ef960bfdda20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.50.195.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f402078-cc9d-40fa-ab9f-76b668b3ed58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.78.3.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a591125-0461-4cc8-98f2-8b80b4ef6dc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.144.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d7fb51a-2422-4957-83a3-c231c3110a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc073094-01f9-427b-9499-c06e431300f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b94139d-a1c1-4a4a-bbd7-b7f848e05ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.204.110.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9aa3df0-6952-4a47-9a8a-87049b387612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.204.73.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--014dc1f5-5ea0-477f-984e-abe217cc914e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.204.77.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea2982b-10ef-48cc-8c3f-4d221a704004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.253.35.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c6fbf8-c47b-4ceb-a621-8a394482123c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.59.129.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ee13b9-1107-404c-8936-a3ce541e4d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.59.129.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e824327-c64b-49a3-bf50-10e7bd069592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.28.232.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ce73b6-45d9-43d7-9823-2413d2cf934f", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '149.88.19.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b6665fb-3a9e-4148-8a03-be3432f74c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.156.110.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99bdfa5b-94e1-4d67-bc43-de70422b1f84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.157.122.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93f5a84-7070-4dbc-b32d-2ae3c4fa1eca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.162.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32706951-ab15-4459-9d30-5680d34b5b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d6092d-744e-4aa0-9a23-94d2b535a101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7906b742-ecb3-4782-9315-947ff322a042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99c1c6a-2b2f-4358-9394-a1c026ccac2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e0e4cdb-f819-4c82-a085-7b87f1a5d9e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ca4b55-8060-49a8-bff7-9bdcdc2b5083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9deee8c-f52d-40cd-bc9f-87bd786cedb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47dd2209-3a6f-43e1-812b-713c312662d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc281a0-110f-405f-8abf-44b714f1a186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.46.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e005f82-a2e1-49c6-a777-b1386df944b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.230.76.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa874b3-d34a-4a6a-900e-2e0bb1862065", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b644c06-50d3-4c81-b08e-bf3c0eb91db5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba4b1a9-4830-4a90-82d1-0d65f8724a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.145.197.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f8b1f95-18c1-4e9e-b899-be321b77d4d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.65.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf6b449f-929d-49fc-852c-d6eef8bd310a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.65.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0d0cd98-411b-496e-ac17-40c720579592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc0f518-62e8-40cc-957d-6038a08bbb7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b67b5d7d-a823-4b05-818f-07c182694fd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c4a4aa-5481-4616-ad90-dda5ddb45c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--970a272e-52a2-46be-99ae-56cc87d23f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1bcb345-02db-4f68-aef5-517663189ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674304f0-fe7f-4b1c-ab73-47052f86d039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d063a0f-a183-42d6-9a64-eaaabe63d07e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1a610d-ba10-4783-bb5a-db23ad4ead2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96935c6c-42ab-4a72-9de5-c8d3ebd044ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d0b938-86c3-4483-84af-f0ce37136da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a21b46-dc47-43f3-a8d1-ca29d1ee223b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39110716-7f7e-4498-b964-23240a1e8153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e5be31b-41e1-4327-b461-7a746467935f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c9158e-8448-49b1-9d57-30eda527f9f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241d166e-ca47-439e-8a4f-409427ba7a4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2d5720-822a-4f4e-916b-20c5b05968fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a77da9-2228-4cb6-ba43-f42c28e0fb06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349e4b9b-3ce9-4f2e-9477-9d32cc12b277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90156863-5430-41fa-8f44-22d08321d895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a51f9a4-8619-43fe-bdbb-a86786b30f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.30.46.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e41fab60-5eeb-44a2-bcb9-fb97f2ef184c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.228.213.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5adc9f9d-60ef-4e3e-abcf-17c8df81b451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.231.107.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4463689-2e4a-4724-a9d9-e227777d25d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb5c3fc-357e-48cf-a134-4edf666748cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d8a21fc-df69-4ea8-9c7e-8dac2b9c9370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5408dbea-d685-4624-8ee6-d5ece3593b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a139500-c006-4c6c-a121-b11c00aaf29b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a408290-fd38-4092-98a9-0c3bf5dc5720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.133.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb774e5-7527-4d05-9b73-916da754920d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c879b146-ba33-4499-8734-f307a829d2a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7fa81d1-7d1a-450e-a115-cbe8bcc2d22f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9959bf-12d4-45b4-8a24-a0682d65fdbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b805e4-539b-44c2-88b3-32a18e374d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b82bc29b-580e-4ff6-82d3-9bce7959f596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b612f2-810f-4513-a726-5063df4c2835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.138.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bea53ed-7342-4d02-83fa-eac4ae3e79d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cdfa85d-6d45-4816-8c4e-56ee4dd97cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afbce668-7c6d-4106-ad26-93427f200cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aab8c54-c6e9-42c6-a08f-aee015877378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797c4fd9-5151-4835-9b13-894d901129eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9114226-004c-43a0-892e-dd4a11f45cbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ecfbc0e-a1e6-4c50-a447-ac7787c47feb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9204e5c3-59b1-4058-9bdc-c40b08c75740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c87101f-3d57-4c70-a3e7-e3cfb74ab41f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d76cee2-2632-4687-a0cb-5254b6851c80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--092d01e8-294a-4e06-9384-249257a42fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa018302-2e53-45ed-9258-e6c25948c9dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.147.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2237d27c-a98a-4fea-acfd-00d0f89b7852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842caeb5-7458-4f44-926f-776595adb8c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce2668d-fe66-4037-a594-411d13e34d88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--984bed33-69ca-459c-8eb7-2a9e3151effd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b045d6a-f07e-4628-a529-087d7e95bba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9965a3a8-5279-4a7d-8ab9-e04db43362de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93bc9476-c660-4d27-bf1f-b2b2850f1d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46b64040-e920-4076-b210-47114d273253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff972154-5770-488e-b8dc-66ea5ce67338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165e8bb1-184d-44bf-a114-761f10033e7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cca9827-549b-480b-a6c8-8739e69b2876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e9731d-72e5-4ed9-a2cc-ba21696a42ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32842133-6ca4-4971-9a8e-6d37e0f6588f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.168.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe471647-922d-4d01-9dac-58cd9d759215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720cf87f-1271-4c5c-a917-148690561bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.170.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c48224-0613-4c93-80b9-f5184b106d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.171.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a3307cd-ad22-4667-bb24-bc38133ba313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.176.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea93e0ef-4c8e-4de4-91fe-8014d8f0de8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.178.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9c1784-5557-4693-a160-4541072501bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--014c9118-63be-4c2a-ab5f-ba305ba0a014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.181.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c74ad132-f4e8-4e99-9a96-f75f483d963b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--192ef44f-103a-4405-80bc-1a7711ee8bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2832c207-ca39-4c65-9d50-084281024e38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928a4ca2-0af7-4786-96e0-57b1a801088d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8314e73d-608a-4e0e-a660-b32d49c9e4a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4c8a48-26b8-400f-b24c-f0d33df09ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b70860a-7c43-49ab-a3cf-c94531dad49a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.185.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49bde9e2-91e7-46da-8692-82180e04983a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.188.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a26edb5a-0747-4e14-889b-88b25eb83c02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b7c2d1-d78a-430c-91aa-63588531c2c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3b0cc0-85e6-4a4d-844d-d6c2d26cf22b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4988e6df-2ee9-431c-96d4-060343d9fd1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7bb306c-a8fd-4af0-a396-d9d79401c37a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--634e88ea-cee7-45db-802a-d9a107b37809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a48fd9a-bba5-4af5-b675-c6f5536adb81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f35b5b28-5540-4e66-aa84-2029209f7f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697f02d8-dae1-47a8-8627-923a3144d62a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae4c0c9-fb33-4dab-bbf6-aca4bdd89b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.203.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f16fbc9-bee5-4366-a5a5-f9936857a734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1298af58-8621-4829-bc54-19cac3b0d57c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2982f1a-aa20-4592-9326-f1fdcd926830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1860fcfa-bc64-48ea-b4ee-a8e960766307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d969e77e-908f-41ef-9332-13810e54d993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7816623-3652-4429-bbf8-97cdc3eef0d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c270bab9-1bb8-40e6-9a2e-9ffb603f4175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8838f827-4a1e-4ce7-a103-5a060dfc7cbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85dcdb9d-db8e-4707-8d0e-86a5a878bdb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb651010-e20d-441e-9b3e-e432d3176a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef7a54b-516d-4da5-864b-56e977f91d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b012530-513b-450c-a271-bd855835908f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22876bf9-1080-4478-af5d-ac627e7244e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d78fdd0-6512-496d-ae65-e7a54e692570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53e0f17-de99-4d19-ba63-4b48b7801eba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f829fb-2116-4749-9326-b8d13e92335a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c7005e-59e4-4ba6-8da4-0fffd32a5732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d86f276b-a70c-41b3-8fae-bb4695dccbba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298beac9-2ee2-4899-8043-1a3469426a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--803ea4c5-d3ce-4709-a071-da26aa8934e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd7ed8a-645f-4fa5-abdc-54522e63140d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500ed352-a08f-4484-9033-0c4d1b339dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47db7ecb-a8b1-48d7-b044-b7efe80ed182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e30d5a4-ea8c-4732-823e-c3ae69290998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d9cbb6-4ac5-446e-b60c-9dd223a96b15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.219.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e92d3c-8234-40d3-b6a6-bd83db832a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.223.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2830d41f-fd8a-4583-bff1-8864674d0e26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c176e090-420f-4eea-be1e-c2dc0f633792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583c5cb9-e195-48e3-ad5b-b4418010ce47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d641c1-f56b-4183-a2ef-b7898fa50bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd467bf1-bec4-458e-87e8-e5b22e74b48b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dc94b7d-e63e-4ff2-942f-f4249c621f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.228.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d48faee-e6de-4a20-afd0-610887a6b186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a291740e-2719-4313-b408-45a6e85ac5a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78da9b99-1a4f-4657-be19-b369bfcb7df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867a5484-a754-401c-8e7a-feda13ad23f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--540272fc-b865-4420-9004-ceea9361f802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb3ea2f-1e47-4b64-ae16-fe1fff16780f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636213cd-4e6b-4f68-a0f4-5c004185d0d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10729522-b445-467d-9f12-47b34d963c86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--193b12be-9fac-4b96-8905-8304ecaf7a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea7f924-bc3d-4228-8630-8d8438cbc516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d1c8d0-f763-4ae8-b49a-e88ba6fc07f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fdf6457-b86b-4bc5-9cf4-8b54bb17f18a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b84cead-71d4-434c-969d-fd5b4267fb17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.243.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e2ea166-3a84-402d-9421-40edecdec45d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba11413-13cf-440b-9524-094fbd46f8d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3aac7a7-005f-4deb-abc5-87a77a07b4fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--173f8e72-bc01-412c-8682-d13a687e4905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.249.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b489ff5-0588-409f-8616-b47fdc7d1dfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.251.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d3dbbf-e78e-49fc-a8cf-2f00c2386cd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.141.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f14944d2-c852-4b99-8491-29a28e379706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.212.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d427afe-1479-4b20-9f92-2e9c400863a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.191.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3726641d-fac8-4ed9-9488-b3bb483e5c82", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.249.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2661f5a6-c54b-4733-a6b3-828609009e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.3.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f0e6387-89b6-45db-958e-105661e08f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.67.40.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad33cb0a-1b67-4f19-a5c8-6289f2f65a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.70.144.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--258e1199-8034-471f-97f3-9560a8020572", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.1.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7277baf5-65b5-484b-b0d3-40055ccffcba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.41.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--664c45c1-671a-417c-963c-ef639e67714a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.8.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c9d21f-7f25-4e63-9580-52b11df0bb04", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.246.198.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc31db5-f0ca-49f0-a89b-e9645cd6d413", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.51.231.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a67d6ca-8e83-464e-8d43-2ee81c08dea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.66.209.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6265888-a385-49ef-bb4e-f3761a6490b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.12.240.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--746f1594-64fb-43b9-b891-945d277312ec", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.146.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce1ba0c-e21d-45d7-9fa2-4e2da4866756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.44.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a4a5b09-6571-4d7d-9276-a71ace121186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.44.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb31be10-b2a3-4c5e-b7a5-c9b52b175c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.44.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4433496b-4378-4b54-bb39-465a724e1ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.44.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05dbe49c-45f5-4f8b-a88e-d680dcaaf4b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.44.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e7c6a6-9a45-4863-a9a6-d982fee467c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.44.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007cbe46-1aca-4f66-8c1e-0b69d811d91f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.44.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f330939-aa62-49ee-908e-6a3c776936f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.44.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f7dee7-c210-40a7-8c61-6e7c64f7fba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.44.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e01ef99-276d-49a9-82f0-cdbfaf6b0153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.44.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2081877a-0285-4198-83fc-ae78db5d4803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.182.178.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--173c5a26-6bb2-4af4-b1c7-10e2858421be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.56.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8846b406-8ae0-4f73-8f3a-c5d580546608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f363860-f855-4f55-ac6a-d73dc9f7b093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.201.86.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff2d3407-61d9-47a5-ad1f-5cb3dc642e73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.219.116.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--341facd1-1f1a-4bf5-93ff-1fa7591d007f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.62.127.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a923f7-36c6-48da-98eb-6e1a988044ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.73.53.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d21365-3e01-4f98-9852-5affad8d6d40", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.196.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb4c4673-ab11-486c-b2b9-88398de138f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb451dd1-e370-45b9-bb9c-10439a9fa939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e76a765c-98e4-4edf-b491-a6fed3a96952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9996e579-d06a-4ef1-9459-3a46bf5462ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e201d7f4-7295-4441-9064-3ab3de9585ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc71d426-1110-4882-87b8-851665333b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3eeb8e4-0930-4d8f-83f8-a5efdbc44ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e7967c7-63f0-48af-b1b0-40ac3f740ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.92.23.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--876f3018-7723-41c0-bf5a-cbc9a8342bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.117.197.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1798ae9-3678-4281-80ef-65e21ec56749", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.2.215.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81dca7be-ed54-40f3-9845-98ac65f74fcf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.2.215.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c5cc7a-9b52-4619-8ce6-6bfa91e3dfb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.93.174.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--462c2668-49a4-49bc-8242-cb07caea770b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.207.191.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc33fcd1-b61c-459d-be9b-73bbf467a380", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.207.221.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--454a6bfa-724b-448b-a414-3adf534f98c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65545a5-4718-4d08-87c2-4a73655a055d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b63aed-8e49-4b10-ad33-e77060801eca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd3a11d-e37e-418a-93fa-5e2bb801eda0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b23fe4-ae8f-4c58-8dd4-f16b6884c206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5abd64a-7d97-473e-8540-4c377ced16c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61342971-6a0e-44c6-9195-194dc3a45acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--453d5141-55f1-4a6f-b87c-6dd061ca1388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.234.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--676390ce-d591-42c6-aa73-a8ac45bedbfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.232.100.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39c60b65-1bef-40ac-8439-96c372f47f84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.233.229.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce804815-fd66-46d8-9b97-244f1e122230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.234.32.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd82f441-c5bd-438f-bb1f-3f403b22fe01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.234.32.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60bb7c1d-6739-4d07-825a-c5eb8cc81a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.234.43.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f06a9e1-e2a9-4889-8e1a-a139b3f634a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.67.31.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02156d27-9343-422d-ad2f-33f04dbb15b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.45.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2c1dc6-c115-42cc-be05-77a2638fcfbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.20.144.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e17444ce-f33c-4f3b-923a-25f1f5874514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.180.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01354cba-0fb1-4417-9870-8a7849ec7313", "name": "Malicious Host", "description": "Web exploits: exchange-ecp-proxyshell, spring-boot-actuator. CVEs: CVE-2021-26855. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.19.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34473", "external_id": "CVE-2021-34473"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5c7dd814-fda6-44e6-8013-fde8184f046e", "relationship_type": "indicates", "source_ref": "indicator--01354cba-0fb1-4417-9870-8a7849ec7313", "target_ref": "attack-pattern--9f6bd0dd-9d9b-4eea-b75b-9f1c56fe33c8", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d8e4c39-fb61-49c8-8966-32d4da12c664", "relationship_type": "indicates", "source_ref": "indicator--01354cba-0fb1-4417-9870-8a7849ec7313", "target_ref": "attack-pattern--5e475c1d-71d0-43e0-9f8b-68c3071ac97e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d609631f-1a65-4fa4-9e7c-28d4385d32d9", "relationship_type": "indicates", "source_ref": "indicator--01354cba-0fb1-4417-9870-8a7849ec7313", "target_ref": "vulnerability--d3d48e11-98c1-4f64-b1db-624611a10a69", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b0362b99-6bce-451f-8a8c-932661eec368", "relationship_type": "indicates", "source_ref": "indicator--01354cba-0fb1-4417-9870-8a7849ec7313", "target_ref": "vulnerability--b3bad351-28c5-4f35-ba75-f7a777173900", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1c92943-8536-47b9-98d9-883983976cf6", "relationship_type": "indicates", "source_ref": "indicator--01354cba-0fb1-4417-9870-8a7849ec7313", "target_ref": "vulnerability--09e8004f-6e38-483e-978e-fb0f092cda87", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c1fd19-88bb-4979-b3eb-fb06dc46cc2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.221.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858aa624-8905-4fe0-a94a-4e9350751dd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.147.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfdad440-8550-42df-8c46-4e5fb2c8a3fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.222.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea341f04-54fe-4fa2-933a-3ddbd91884b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.85.208.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7eff1f9-b788-40fa-9b49-83d063b702ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.178.224.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92722f23-2226-408c-b45b-14b524e86171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.220.102.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e2410e-5de4-451d-b103-17ac65380440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.220.105.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b70e7a4e-c8a8-4b65-9bfa-2b0d584e59af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.220.86.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba04d9e7-5960-4ff0-8974-2dcb99e3fd5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--144b0bc5-7472-44df-96dd-494eb4ce26b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3692733b-1c4c-4bd2-b1ca-a0310061ebcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3fd198-824c-40b6-8f39-3bd53b2a8fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa4831af-e359-41c4-b6dd-5df0ea3f0dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5acaf268-a40b-4fe2-82ea-d8dfa362000d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521260f0-f685-4b78-b1d7-c228a9f8df70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf926b6-bbde-48d0-9652-ed2ea682d72c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c2dd415-ca55-45c3-a87b-afb780d48f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680c0cd0-6726-4076-8bf3-c8497fcbabc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--046d91d8-6cb3-45a9-a7ab-f342aba7f6ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efbf4ef5-da30-44d8-a1fa-64b8c2fd2497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b66f14c9-a170-4050-9708-f84c733f9657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b1b1335-4a14-4d0c-a773-b1777bd2ebdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae4ef2d-e212-419f-bf4a-bf51cfbe18e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a83a0a-890c-4c93-b05d-1e9bc066aba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9262578-4851-48c1-be4f-7f872bcd2947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c3a1b3-5f9e-4595-ac53-0668870af4bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c110c0-8e2d-4d45-81af-7286167e946d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d327fbb-dfe8-403e-9600-316fb094c968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79c6af8-d66e-46aa-8268-c4090b3c6d4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.187.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ced7e2-c150-44c6-a6f7-8a448eaf5401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.210.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec8f535-3ac0-4dd0-ac71-d3f0fcba23fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.195.79.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d029e1-c71e-4b45-867d-8a526e5478f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.113.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea1a56a-bea5-4794-a0cf-c79a4ca999ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.124.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca217827-0181-49d9-bcb6-96003f6b09b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.134.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5049ccc3-eed4-4f93-a911-5e07e4316129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.174.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1942bdde-d1e9-478c-af94-4bd9e836afcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.28.66.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed79a72f-9be4-4d5c-b86b-77dba9b18455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.194.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--428487f4-d160-4f36-80e9-159371a5465d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.233.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c528aa-cbeb-4909-9de4-e706eab8aece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.3.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b6ff41-6944-42da-b21d-d996644e0292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.92.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba87ee0a-ba77-4aef-aaa1-5b42f019d466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.94.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933b9978-8c4c-4ef8-b997-85d5b59cb511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.95.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14984807-34e4-4e1f-9652-7378506692f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.124.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--427c306b-b8ed-4271-ad28-99d3b97f0e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.97.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe7fbb1-6d8c-49ae-883e-2b8a70f59124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.176.125.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2966c341-b8aa-45e9-b8ed-37c1b28f70b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.176.125.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a50053b-926e-46f0-b8f1-2527f5729c4a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.5.0.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e02df12-4966-47d6-9509-11fa57e975d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.5.0.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--282d9ba9-3273-4846-b835-1cd6b79c32f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.5.0.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48471b2f-7a3c-471d-9c06-f5beb7f36598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.66.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b600ba5-8831-466b-ac52-6c5a9436801f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--986241ba-b981-4d94-94c8-f390ee200175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad8f2c3-4bbb-4110-817c-be1320244e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f799988-82cb-4e4c-9fe0-ec97a04f8475", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69cf18b9-7a4c-4d91-93cf-45c54f90d537", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c6a2d6-5c85-4f28-b3a5-422872c3a20b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28360489-874f-4de8-9270-8c030319ee1f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.176.83.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f29503a0-ba11-417f-8066-84bf45f572ca", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.187.229.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01f9e50-4d90-47bd-8128-c96cca7a4f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.105.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7760a5f7-2e43-4364-87c2-6578063f5a28", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '161.118.192.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebae84a-b137-4565-a118-fa4da61785df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.118.240.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7b4888-1057-4332-8cce-733ff9571c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.132.52.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ee2f2a-9626-4c18-836b-2371d1766c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.16.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65cb67a-c1c8-4cb1-b62a-f899fe5be788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.55.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ede593-6196-4ef9-b09c-8c563f7c341f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.81.121.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c2462e-7f42-43d3-94b0-fd20c55ef42b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.81.70.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e5ce2f-a57c-4aa4-a590-d5a48dee3198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.97.106.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36273801-4bde-4c09-8cc8-df0ff7859c70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.97.84.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea5bfafb-6f78-4c3a-a388-20505068f5fc", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.19.19.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2808d0bc-f4e5-4639-8cbb-ea769697ade5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d581b21c-420a-4497-98c2-08cba8ef4338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add0a5f8-c7a0-4313-91d4-ced8ed284423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ba13014-168f-4515-ba27-1c44b8b0433d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e31658-5bb6-4ea2-8364-ef2c32ae7357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6e026b-6cc1-4ada-930b-b57401fc8a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a87c6c97-02cb-44c7-af61-bef4c81f8505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f84d5a2-df53-4293-bec3-597ff16eeae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d291080e-354f-4e2a-86e6-adf0c3dbe178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b3c3a3-ffb5-4ed7-93a6-552e1a74e2f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c79157d6-808a-42ca-9827-52f4ae33e695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b59bbc4-275f-42ef-839a-eef5af6c354c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d79f54c-c074-43af-a1c9-75b8e5ed7e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46575fb3-80be-471f-be70-af707a920b43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf57c3e-baa4-4f09-93e7-e5a5c32eeac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f052d43-222a-4b17-8cf0-9a190c76dbff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b9c50b-5968-4189-b76b-4a8501f85a82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd3be32-e4e4-4292-a992-afc2f3114f90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d42feb0-0ead-4d04-9ed4-696f9ff3b7b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d54efce-c19f-498a-a5c4-594623aa2286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8198966d-1ee2-4404-a614-6228c49e67a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c6bc39-a53f-4d3f-861a-7cd0f9ec08b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8e9cc7-a4b8-4bad-a956-a560e1346aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb55a503-71ac-493c-bf66-b6af1aba0f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca420998-f275-4674-a152-e825a8f44bf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a52d16-c80d-4d67-a64a-3e8f84fce6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f347f50-465b-4ab7-80a8-d807691fedcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adef7bda-91e3-49fe-90cc-60d3cae1e6b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b599c27f-a72b-457b-b89e-9e68460c12ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f723a41-e306-46a0-aef8-3684c22d7812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3394d1d4-b6a9-4e61-8f82-bc2510450544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d083146-c8d2-4a7e-ac15-59d490b422f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725475f9-beb8-4c9d-b076-70e01e91d20c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e94718d-4a57-4fef-8488-4c6e7ce9fe74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c8008e6-3dc1-4db3-8bb1-73b64d2bc1ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64de8e43-4fb9-4203-a020-78cb1f1169b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81caf38-1de7-4ee3-acf9-cceaa5fa7b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065295e2-9166-4738-bed2-bea94776e90c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f372b27-e472-4205-8393-463ccc18adf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78594ad7-aff7-4327-83b0-1f6100ea5b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4de427bf-86db-42c0-b36a-952db9604153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d39f698-fea3-41a7-b627-7c2ed3ea5abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28178ae7-e112-4c86-907e-1fc39f3cacd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7956bccb-3654-4412-a929-927326916ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b96c858-8387-431f-a125-8a0dcf7abb73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f7cf9e3-b41e-40ca-a06a-21ec542c7a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71c14607-3d32-4801-931a-f07033c22ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e501861a-5ddd-430d-aaab-8bfec6058e54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f317b49c-f83b-4bf5-a10a-4aefdc9d3a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc659a8d-dbc9-40e5-8dd9-760a5fbf5d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef09994e-1ade-4a00-a5ce-7bcc904fa444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29b8ceb-be29-4f48-ad05-f3d0bab6d2c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abad78fe-ae05-4ee9-8dee-b13628bb733d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede015e6-2fef-4d60-b233-e6ce28d35229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339c63ce-4be4-4a6f-b8a2-138c8f29c73e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c184bec2-dc35-445f-b43c-9db628fe9af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5723075e-e92c-4145-87f3-169c86ff7e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8104645b-c163-4a7d-b9b8-e3c786011308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--753c0205-38b3-4697-89f5-ca10a3ec5fc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d0d429-06eb-4b0f-a7a9-bf99c683c2ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be5e3f38-a3d5-4267-b1e1-442ea9e2f4da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd3eaf7-4c98-4a12-821b-a1bd9d218c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a3caa7-cb6a-41be-a0f8-0bde078376f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b1cef1-f785-408f-82e1-c9b57278ae8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c88a3b-04c8-41af-8c46-8d7e04d8d5a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f24ec6e-1778-4824-ac27-948a5326e02d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0481d6b3-8521-485c-beea-2a2cb1116dbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a178686-0458-41f7-aa86-ea66c0811dfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f434ebed-8dad-46f2-86f2-d6c369dc4958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5527ba08-519d-4073-bc7e-d37b9387c38c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806e30ad-cce0-4c5e-b678-942963692fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1549c87-51a3-48d3-a22b-16668a48cfe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e78129-c128-4668-9b0d-5413a3f5b3d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a577cd-c635-4d3c-9040-742f826a4e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b065fdb-9d04-4b97-8a25-bbaab71ed186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff01328-e489-46af-a030-864eca62f656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c0a6b61-298f-49f3-914f-440dbb08f072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec88eb2-1bad-411a-994d-12588eaa1007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a7d7ebb-55fc-43bd-bc27-68c3780eec23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--604014ba-6c89-4463-b86b-9dca6087090e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f27aec-43f3-45fd-a710-08386cddd261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b6db7e-ac73-4779-b386-6fa9320179e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dd8d1fe-0a36-4738-b8a8-9a2b3f7dff88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adaf5a19-5161-4936-b572-d3dfdd7c4c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8f14da-ab89-47bb-afd6-c4160d6aebee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dfcbc88-c2f9-428d-9ce3-a94023b04825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c97a3b8a-49b8-417e-9167-8607afd522b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4dba3c4-1435-49e6-a163-4a7eabd961d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d872dd02-3122-4f16-8757-d7e10871264f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a53f059-1c20-4bf4-8199-66b33706cb3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4b079d-1955-46e5-b02a-84baecc32036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc970d0-0af0-4abf-a6f7-07bd72fcf0c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab633deb-cf74-4306-bdee-194be4697427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1ff0ac-5498-47d3-99c0-22fe291b6e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ffb7d9-f106-47db-8462-92af133c8103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a8922f-ef50-4c78-b50e-fd44d64aeaaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b8bca2-f7d3-43e3-a808-4bc07f6abc51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2262302b-c19d-44c6-b471-327799b9c69d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45549c8-e398-4064-a38c-d48c381df1b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1f8352-5d49-4781-abc5-0a5d6f107a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b27318-7fa1-40ce-a991-e64ba9a08b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa77b825-d293-494f-97c8-f7ea1bd6121c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ba7d67-de22-4e44-8a39-1f62d05e0d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb031cf-cff4-4495-9020-cee1090656cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a96f6d-18c0-4e00-8b7a-14896efbf670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24835755-3c1a-4800-9113-41814d44652f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725171ef-ca46-47bd-85fd-e73d2ff85444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dffaf62-1ab3-48f6-8cf3-5451a5575ee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a76bc03-3495-4f44-b380-f59fcd725b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c2aba1-a63e-4883-89ea-7f6ca9917cee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3696da0f-6aa1-4eda-a30a-3616f9af5293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92723fef-6357-4461-a3fa-5e939917234e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61b295c-da19-45ce-9529-78a1a66caef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9220099c-4240-4670-bbe7-2235b63bfd6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3cdc96e-9b24-484f-80a1-d0617bc037bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33bddd58-413d-4ca2-9b79-709edcee927c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c4c9e6-2282-42a1-8d48-85876591b749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f583afb-25fa-4edd-9ad9-2fc215b3b5cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb1ea6d-937c-4269-99ef-fa938edc42eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440e2d53-eba9-47bd-95cd-4504a118d822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--838c4bba-982c-42a2-852f-29baff8c4798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f00d93-d652-4874-bc49-35f4dfabdb47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dbcb1ce-a31e-490c-9898-5317aec90438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1670ee1-15ae-4623-bbba-069f51dd3cea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b44ec71-1b0c-4adb-920f-d27e82fb4e42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e4b695e-a526-4993-8aaf-3610e24fe871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7862b7ca-93d1-4519-a14e-1e87c3732433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfec0582-9815-4b8e-b831-ad0ccc3898a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--825b18ee-b888-44d7-bf46-fbe80afe321e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a7d361c-e03c-4dd3-8e77-4b76bcd17381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d540b64-b11f-49b8-bec7-ae9e2ff42ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ab9a48-5275-40ec-aab2-561a835e17f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40994c6e-96f4-49a2-a1e8-0f1f115d3c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f355759-d22d-434f-8225-2a4c44d9f45c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f108846-638e-4743-b8d7-5b43876c9e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c0d631-f0cc-40f2-8568-1964c2797fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2a2c9a-08f9-426a-ae40-03393e9b80ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac90095-a787-4be4-b734-d6db885acdcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--902f7d6a-575d-4e51-8b0e-a0fe1066ccda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9086b4-f6e5-4db7-b959-952e0793c021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2282b00-926a-4afd-9496-e03ee751997a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e2cd2d-a634-43d4-ac84-c7bee8defb62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1764fa-594e-4de3-8fdb-3910cec2cfd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5302c48a-4bd6-47c7-a989-732c03f27649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05612d48-9deb-4987-9f6f-2f39ff2620dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c55fe0cc-9884-4bfb-a6ce-159b102421a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--070f26ef-406c-418c-bc7e-04739d5d357e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d95742-c226-4881-b072-72cea0f4b644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d999af-dba4-4e5e-a9db-becf82f1dc17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d39d4e5d-7452-4740-84da-8bd40899c3d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77fff072-4548-4fec-b4e6-6fb02eeeac8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce1c3ab-c661-4c79-9cb0-f20e4e2604d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f43b82-e6f8-452d-b108-aaa085b844de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be8be7ed-35fa-4d26-8a03-14302304b84e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d709259b-e2e9-4d3a-953d-fa2a9bcfd763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1dcca36-e809-4021-8aed-1439b4d29915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7618181c-8521-435a-b486-05e7ac230021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab254127-bdc9-450b-b7e5-8d4c3fb7a56a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5b0dd4-139e-47d4-b4e0-64a94a27423b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9278ae50-7ec6-4be9-af45-670158690c25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d621d10-80ba-41a1-a167-4c18b190913c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32bc4134-06aa-4033-afdb-49629591871f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b3ae89-27b4-4985-85f5-530c2166eff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96fd8eeb-ee97-4b35-aac6-6c75763e090a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ec5113-fce5-449d-8fde-cac3908afe96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7251ad0e-ab6f-4927-b4c0-22865f6f3cb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934c148c-a88a-4ece-a952-5aecd6ea3803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3aad0e-908a-4f5d-9241-99e7ed7116cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ede996f-94f1-4ac2-8db0-60c27dae6c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec47f42-2131-4bf9-87a9-d477369ec614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9646b513-f153-49ac-a2a1-ecee6d41e587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7c5417-a2cc-41ac-ba3e-4a2a9b6df87d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef8a18c-4534-4394-a16a-2c303697d520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f6fb892-705e-4e36-b875-0a1d1fcd2032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5672d00b-6026-4998-948c-5f61b6467e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ece326-8941-4db0-814e-131fb07e3cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa79aa9-13cc-4d23-bed2-fe4ce8b10fb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e569ce7-9bdf-4bb7-85eb-703f87388157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8482ad-31f6-4ecf-a764-6dedc0d12c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9413eea-d272-41a2-a5f9-a5c33b93b7b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5cb2ed-530d-42d0-8d9d-734a01cbd992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab13fb59-e7f9-4e95-b622-59a486d12e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f882ab-e47c-4301-acbe-0646ae152558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--879f2306-a933-48cf-8ea8-96c38ebd5ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20023945-7915-4d34-a395-7584dc56421c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57befe1-5584-485c-be57-bf62f3d0bdc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3643e5f2-ff6c-4109-a45e-1256360b557c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec98be0e-3a8c-4666-9771-5643954178dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c2b7ae-5e00-4a1d-8437-078e193d0f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10fa4fd9-1eb5-4400-a29e-aab9081095ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc47d225-377b-43d0-817d-5a095ab7bf74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b575ffa1-bb39-49de-be30-f601c4723a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1a7b09-d9d9-4256-9e90-0f0805ddb4d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6638e54-7008-4ae4-b49b-7477420abd5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c7f6bc7-d79a-491b-994f-994d4e9710e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c481d5-859f-4c7b-b922-8b70260e796c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23163028-1788-415c-a001-d32488598569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae79ce3-a283-451e-a332-ecb82fc210eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b73b574e-edc2-43d5-9c1c-3a69090a8b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83d314d-84ed-4fa9-84e2-161c8828995b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8fa57c3-b4d5-4fa6-88e9-ad2357a42c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2569c756-1934-4f3d-8dd1-405028d1c7a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9303eef7-2750-4825-b049-1440fbcf2956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d132d7e-b5fe-4bed-a782-ff5fb6543452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c439a90-6dd0-49bf-b88c-67f85a4ad37b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be179200-df9f-4502-93ad-654298a7be25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1f5adc-0551-4ae4-b646-bac2cf05278c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56f7a111-da9b-4ce4-9973-cfa116616341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91b83a58-e701-4c02-83f4-6c4286cd2d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91b76ca0-99fa-4589-9316-a9935b4f9f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e339ced6-b56c-4a1d-bf1c-33777d4f02ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e92602-681d-4c8b-bc7f-851681a3e941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cee66f1-5519-47ed-b7bc-d532932b8ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85517047-d047-4af1-97a1-670957fd1255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63865369-6d8e-4b70-a5df-abb97fee52bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c16e6cd4-4800-4572-b73a-2d28198d82f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5303f6-5bb1-4174-adea-50e01c65a9dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06bb9bba-ad19-4704-88e5-7b6a312bfc58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be283ff-b842-47c7-a91a-b0471ecbed3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d097fe-654f-4e96-afca-f595f7647671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e4957aa-796a-4891-89e4-0215c3801715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17171d71-dbf0-4fc0-a89d-ab94135e95a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b19eb87b-4667-4a51-a312-217f8a9836c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfea7af0-6e13-4859-bc18-759cdcaec869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb8ab9a-0c0a-4277-8cba-04bc7c5441b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0f058d-06de-45c2-a805-67489864b2da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d2be06-16de-40ad-8f9b-b5ff400b7df9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dfa90dc-48e2-457d-ad71-ca414e816a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c11d84e5-5241-4bf6-a2cd-717d4788964b", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.217.103.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7425a9ed-fcb2-498b-8b79-f522655b3842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.83.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec1ad9ed-917c-4d2d-8fcc-599656b498c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.254.36.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--804d16be-b60e-48a0-ade2-fc46e3bd8f1e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.255.112.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b8eaec-d3bf-4e80-ae00-7bb478b86a5d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.219.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f692ad-2625-4e7b-9a09-e7dbaf3b5716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.192.135.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--092c080c-6577-48f2-bddb-a667aceaaf0b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.12.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78c11ad-c0d8-4d55-86d0-a7002f19f011", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.13.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc349a7-fe73-49e5-b73f-e39c147aba2f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73752150-e001-4eca-b413-acd5c8740083", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25004236-c693-4f51-ab02-f37ff9faa097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.3.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b9d34d4-3099-4c74-9d95-4dd706727375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.132.76.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae72c0c3-4ae0-4d1d-affd-409c6b5bd693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.52.24.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d34a6af9-9f69-4448-ae95-aabe37fe9d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.52.24.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b1a78a-729e-4ecb-babe-31aa51db2427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.52.24.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5a2d2a-b20b-4037-8fe1-1cf3b1770279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.141.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ab42d7-e700-493a-803f-a28d2d6fb29b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.176.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7297d491-147c-4cdc-88e7-ae7f3ee1769f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.182.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ca4299-4b04-4b4e-af61-cbed66ce645e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.202.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a9cb27-b0cb-42d8-8f33-b0b28e1cd3ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.202.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ae4c53-ff81-41d7-a34e-8687543795cf", "name": "Malicious Host", "description": "Web exploits: exchange-ecp-proxyshell, spring-boot-actuator. CVEs: CVE-2021-26855. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.208.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34473", "external_id": "CVE-2021-34473"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51a5eac7-7da1-45c3-830d-f77434789038", "relationship_type": "indicates", "source_ref": "indicator--d3ae4c53-ff81-41d7-a34e-8687543795cf", "target_ref": "attack-pattern--9f6bd0dd-9d9b-4eea-b75b-9f1c56fe33c8", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7afe3df4-162a-4408-abfb-db90ddf8bdd0", "relationship_type": "indicates", "source_ref": "indicator--d3ae4c53-ff81-41d7-a34e-8687543795cf", "target_ref": "attack-pattern--5e475c1d-71d0-43e0-9f8b-68c3071ac97e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--74b88ea2-6199-40da-9c5c-f8767a8b8fba", "relationship_type": "indicates", "source_ref": "indicator--d3ae4c53-ff81-41d7-a34e-8687543795cf", "target_ref": "vulnerability--d3d48e11-98c1-4f64-b1db-624611a10a69", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--013c35bb-b777-4057-b11d-95f2731906f3", "relationship_type": "indicates", "source_ref": "indicator--d3ae4c53-ff81-41d7-a34e-8687543795cf", "target_ref": "vulnerability--b3bad351-28c5-4f35-ba75-f7a777173900", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0eca1166-1e63-4bf1-887f-7e0ef9e1f078", "relationship_type": "indicates", "source_ref": "indicator--d3ae4c53-ff81-41d7-a34e-8687543795cf", "target_ref": "vulnerability--09e8004f-6e38-483e-978e-fb0f092cda87", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b9fe53-b53a-4076-8d32-70aa6a1acf19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.213.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--affc0efb-878f-4eb6-9391-699f73a02cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.217.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ebd4357-f419-42d7-87b1-f6d96ec2b131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.106.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51fd0e66-13ee-46c6-be81-9ae50213b029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.114.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea71904f-9ca3-426e-b57a-8d29d9bf2ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.133.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1effdb00-f263-4df3-9916-83e37e9cf603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.176.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc42524-84bc-4b1b-be92-e8d3449ad868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.82.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--266ea21a-b8af-4973-b3e4-f865ddcd57b5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.101.40.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af956f47-ed3c-47da-925a-75eb4018b533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.101.75.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--768c1cec-d589-4d17-914c-8bc3b449d9d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25cf8343-c201-49b9-ab0d-078cd370100e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b59114-259c-4159-8ba9-39949dd2d190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.104.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94565676-8e3f-4989-ae45-46f730facf66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673f0f37-6918-4743-b44e-7e619cba169a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df6337f-352f-4c9d-83fc-a2882b515b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41cd3703-857e-4621-9a85-40f19555d333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f92ae9f-c8d2-4f57-9765-dbf5ce5862c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.118.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4f4a76-398d-4d78-a8db-458dc83d43d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df0f4ec0-5faf-42ee-af40-5c489f43b6de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd2afac9-c843-45d5-8cf8-1b6a6df3f7e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e0a5f07-efce-4941-97fc-2a7739536f7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f1c5f4-02f5-4259-90ec-96d1e31faa96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc0709a-01ff-4648-9aa9-d6643a2b7b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b8f3ed-b90a-460c-94ee-7df682a4635f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc57ed5-db8d-4872-ae65-28e0c62f6f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f044267-7e75-4c9d-90d7-3ab2da5ae8d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73987b74-6515-4bf9-8d4d-bfe9c287b4cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf07f71-bfb4-4dec-8196-d4cc25726722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c489726-a6b7-46e3-8027-a8897b164ece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--340bfa47-4a4f-48b5-8863-5bbb0e3a15a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c606c5-9f36-43a1-8ccc-29bd18ee0963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37af10ce-837d-4a1b-9559-e3fe759543fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc3f7f2-ce78-4124-ab87-8a711a6de74d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6405ab4c-4cd7-4ff5-8630-a6108478967a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d045f3b-5c15-4dc5-8e91-1e85e32bc539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c7031b-26cc-4735-a65f-62e9386080b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04af4b6e-ceab-48f8-bb0a-07deab746a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7874feed-2391-416f-b9ed-0bd77eb6aaeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e791c5-0e95-4e17-9533-83f2cc35e8a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97da200c-f83e-47e5-9b61-ac2ca4ef87df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58033c88-76de-4e58-83d8-29f209824b32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b1603fd-cb8c-468e-9153-b1782e8a60d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d31047c-b733-4326-a80a-d3694c611a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c649834a-ebce-49f1-aa29-795f402f63df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe911677-dffd-41de-9d37-f9ba69196a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59cc6335-5e66-422e-9962-a7816e17b716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83bfe9cc-c615-4aeb-b3a4-ed5daa8944b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3944ef1f-a4e6-4afd-8a1f-2dd19e89283d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--459f2959-2062-4930-b912-10e2adfcb420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04be774-a1c5-402e-a1eb-13f5894c10f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11760a89-342f-4cdc-9d7f-808c113cd895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.176.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d6dfd6a-e33c-459c-bd6d-7ac43e600e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.179.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c489b2df-297d-4b78-9857-97570ab13397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5be6d5e-7491-49fc-a488-6f55766ce969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d15fe90-b9a0-4e93-af08-6635ef99c38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af109cf-4990-4305-8d8a-69d3558eb608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c85da2e0-0ed7-4ee8-b6f2-9632e24d63a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a2fd494-c8d2-40b1-be1d-37549d6e43a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b184fa-26f5-4ff3-bf47-b1ee281e9678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d77f64-9e14-4455-aadb-1dfe8ff1f680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.187.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b7cfea-cb3b-4343-a8a0-13840b908621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f37ef43-2cf3-4ea4-83d4-3a43a6d5aab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3f789a-8b2a-46e4-a3d6-80d8a83d4fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c22606-36dc-4634-8c7d-49c93f8a6950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--778cf0dc-4451-4ebf-8ea8-f407ade260e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8106c31-a673-4fbf-81ae-89187af31f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.221.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58375f7a-a7d9-4971-9b48-e2ecda77aac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.225.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd74f831-343c-4787-8723-845541186d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.23.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee02f298-c9c6-4b53-94be-c1d8de2bc96a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d75ad53-3e25-4b36-9879-6a787cf664c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cd86c3d-984e-4a90-94e1-7b1105bffd63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c3762be-ad9a-48c1-b1d9-ccdaaaab7115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5035fc80-6f39-4a9a-8b4f-fe620a83b415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f315c564-4cb8-4c06-a308-d882527b000e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f55af59-a7d5-48fa-b77f-4b8b4f8decd3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d1e2b3-d31d-452e-9122-288bc3d5877c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d46544de-c1fb-4424-b1b1-c48eb5f89c93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa141a29-44f8-4d6d-ba85-6deb4c41a350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da0b18f-b754-443a-82cc-3a4337db8024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e55e2b-8236-4fe1-b502-7fa1f9a38697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ff751a-b609-4b1d-94b0-7c6977741c10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ac6351-a3ec-4f47-8ebb-18e3d942bbe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb6ca7f-4871-4f21-a86a-8b69a4d61473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1011f1f-1378-4140-b2ba-f4ede8ebb2a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2cfa67d-6df7-4896-9632-6add8201e72a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.43.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27cf1a73-42f8-4277-b699-04ebcf3f7bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf5af21-c5bf-4815-822c-3e09ec246ae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d953a876-886e-4e0d-aa9e-2d7c3663c581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--277fd1a0-e3c2-446a-8456-045cac0bfc41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9fe194d-b6ff-4ee5-9d06-b2181f202980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd60456-0b73-4e58-a337-79cfc6c7eae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5924a80-178a-4fe2-a9aa-f05cb17a906c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a4cb947-4016-4e97-b518-75aab5d70723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.52.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96266a7-ecb6-42e3-97a5-3e07662e4ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.155.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca04bf61-3c3c-47f4-9dcd-2e49d49e25ad", "name": "Malicious Host", "description": "Web exploits: exchange-ecp-proxyshell, spring-boot-actuator. CVEs: CVE-2021-26855. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.34.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34473", "external_id": "CVE-2021-34473"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36ea53d2-6aba-4e54-a547-02eb64fb7487", "relationship_type": "indicates", "source_ref": "indicator--ca04bf61-3c3c-47f4-9dcd-2e49d49e25ad", "target_ref": "attack-pattern--9f6bd0dd-9d9b-4eea-b75b-9f1c56fe33c8", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0a1f946e-3ae8-44d6-9a85-015a159a58be", "relationship_type": "indicates", "source_ref": "indicator--ca04bf61-3c3c-47f4-9dcd-2e49d49e25ad", "target_ref": "attack-pattern--5e475c1d-71d0-43e0-9f8b-68c3071ac97e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33665947-2929-453a-8e2b-ea62a00f5d6f", "relationship_type": "indicates", "source_ref": "indicator--ca04bf61-3c3c-47f4-9dcd-2e49d49e25ad", "target_ref": "vulnerability--d3d48e11-98c1-4f64-b1db-624611a10a69", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe005b7e-2571-4ca8-a929-45285572bc84", "relationship_type": "indicates", "source_ref": "indicator--ca04bf61-3c3c-47f4-9dcd-2e49d49e25ad", "target_ref": "vulnerability--b3bad351-28c5-4f35-ba75-f7a777173900", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b08c675-7b65-46d0-9ec6-34a0f2d689b4", "relationship_type": "indicates", "source_ref": "indicator--ca04bf61-3c3c-47f4-9dcd-2e49d49e25ad", "target_ref": "vulnerability--09e8004f-6e38-483e-978e-fb0f092cda87", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b42257-c5ef-40ee-9754-4df9c53d0c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.41.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8b26cc-42e8-470b-9f53-299534edaf7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.60.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d256de04-be6b-4ae2-898e-c05ecaa4b3f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.69.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0147a10-ce07-4c66-864f-c67a0583edf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.104.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--887cda1c-c80e-4827-8073-d9a3438ae1a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.110.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d89465f-0b23-4acb-8f3e-0f99c3817ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.152.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a2f4be-5fa3-4645-9c02-edbe8633cf06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.172.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f177c24-bfcb-41cc-8325-25454bee8c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.188.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--379a5137-40b8-42af-9c49-dbb74ee77544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.205.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96298797-aa62-45e4-abf8-64886fa19e38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.148.201.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83adf0eb-9b70-4eae-9742-238e490be928", "name": "Malicious Host", "description": "Web exploits: exchange-ecp-proxyshell, spring-boot-actuator. CVEs: CVE-2021-26855. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.232.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34473", "external_id": "CVE-2021-34473"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99c89f56-8f90-453e-a5d5-1cdc1c1fad6f", "relationship_type": "indicates", "source_ref": "indicator--83adf0eb-9b70-4eae-9742-238e490be928", "target_ref": "attack-pattern--9f6bd0dd-9d9b-4eea-b75b-9f1c56fe33c8", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99bf6288-8d3e-4fd5-89eb-139b7983c331", "relationship_type": "indicates", "source_ref": "indicator--83adf0eb-9b70-4eae-9742-238e490be928", "target_ref": "attack-pattern--5e475c1d-71d0-43e0-9f8b-68c3071ac97e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--133b8219-4034-4def-9f97-507a32bc3a96", "relationship_type": "indicates", "source_ref": "indicator--83adf0eb-9b70-4eae-9742-238e490be928", "target_ref": "vulnerability--d3d48e11-98c1-4f64-b1db-624611a10a69", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76759d6c-bd93-43b8-b929-7f178653b35c", "relationship_type": "indicates", "source_ref": "indicator--83adf0eb-9b70-4eae-9742-238e490be928", "target_ref": "vulnerability--b3bad351-28c5-4f35-ba75-f7a777173900", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d82fe494-8ee8-4003-89ec-0b0502f99407", "relationship_type": "indicates", "source_ref": "indicator--83adf0eb-9b70-4eae-9742-238e490be928", "target_ref": "vulnerability--09e8004f-6e38-483e-978e-fb0f092cda87", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3be3249-215d-47b2-9c6f-e74d878e2828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.96.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed35a60-7c9b-490f-9c78-17edd8c9ff39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.99.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--601d70b8-aaf5-440c-881c-26b322e35234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.110.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f00c4966-845b-4c7b-95f3-ad088a974d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.142.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82bf62c6-4591-4c76-a554-2ba02b6cd226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.21.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d50f11-f5a9-4613-93d6-3860cce2de96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5755a3cb-4e00-4e0e-badd-f87e32a296e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f0404c8-c4e1-4596-8938-bd39f598b27f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--721f3424-6412-4b38-bc49-26b3863dbf70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40ab2274-ca43-4c10-a8fe-26748b5838d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c28e8df-3685-4f11-b3d8-fc273ec74c63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7470fcf5-d2ce-404a-8b98-74f4d0c582b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39209b52-fc70-40eb-bcd3-a991bba31079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98cf6ec-ad7e-4c2c-bf72-9c3b81089b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f58f6ae-22bb-4269-b913-bd47df5088d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39353e0e-5f07-4a04-8b98-a64867db819e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd06513-2f90-4e9d-865b-f1c4e06ed225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ebbd231-36a2-4407-af56-3525673d2ac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c02cac21-181b-4659-a6e7-2283ff466612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a260a00-49aa-40e6-b1f4-9521087418b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b50a5d6-f364-4912-af2a-d9c5d22dd3b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afaaa082-1359-458f-b13b-ac2d0a92ac62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7582b85-cac0-45e6-a79e-9718eace170e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f79f069-ea00-43ef-8b46-05cbd9777638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd63d6fb-f7aa-4012-b18e-26b9ecb8b8df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cedc0a6a-6b27-468d-bde0-f2b29e3af32f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b55be105-61b4-46ac-b709-185aaf08fd66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b0e3ff7-fa73-4b33-a5a8-99594920573b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5057d11d-1a1d-440f-be5a-2bbe9c8c918a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c67beb8-d34d-43f4-a94f-14f54362505c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495c3cb3-b742-4ddc-84fe-387f03f374bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d7eaf56-94da-4d09-84e3-9692f58dfbe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c78feb5-c162-4086-b3a6-ee658e1e98bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0683c6c4-a6df-4eed-b5c5-5a9d4540c3ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce71854-298f-4d03-b3a0-a97bd687c210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffdd6c69-a28b-469c-8af9-d5ecb1fe0452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a510aa-1bc0-4cae-aa6e-939c891af804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a312fd-1803-419c-b71c-7413276eb722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--705ad80c-305d-4a04-a9e1-0c162ac068fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55fcb3e3-41cb-499b-8e28-9002305455fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b48eb3-5926-4590-a5a2-b755bd2d7155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187d65b0-999b-426c-8498-18a70aaa0ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84dd91f-e177-44ab-9a5f-a60b642ecb70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca80f638-6e03-4a55-a84e-e1477826ba17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c4e4c6-4e42-4a81-8d0e-480503bfe567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59f121e-ee15-4be2-95f6-64a1ffd8c7bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--548ca02f-0d30-4dd7-ae91-5d9f5a45b4d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f195c327-5d7e-4ce3-9693-d548f94c4d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9bc2583-374d-426e-a19b-c340ff7a2b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be2cde0-d1ce-4838-8b0e-cbb6dc9bb6a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d978069-1b3d-4012-8c94-11d4cec90f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ff05d9-725b-4c89-8987-99152b3cf531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.241.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e857075e-b8e7-41e8-a928-94aa06c6f27d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.247.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4a0358-2a4a-4a24-a5d5-d8a8f64bce40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.43.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229e2189-1ff0-46a0-bcd0-c602cbab8488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.195.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29af063c-f064-40de-a669-3aab61d3895b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.146.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--955d1dda-17eb-4fdb-bb5d-33025a0a05ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.161.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66dead6a-2961-49a0-a7a5-737746a4e861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.168.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f9364a-0c00-4384-944a-80e6fd8a4019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.170.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0defdec7-4610-4d46-b66c-f93a7eb82254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.171.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1707fc8-a350-4d59-9e9f-78039f4ca2e1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.251.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402333d7-4315-4e7a-a966-9f0e6a8afefd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.65.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc5e07af-12ab-4f59-bf26-43aa9329323e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.76.20.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd500e0-d04f-407d-9b51-090220941dcb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.150.208.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b0a3e03-9b07-4972-be11-26edbb7f1232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.197.113.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b11c472-792f-4ba4-a46b-b7c28ee001d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.211.246.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc3a6f28-21be-4264-a45a-128f73a9873c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.40.142.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c8f686-c2d8-42f9-910e-04a0a414fe0a", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.40.142.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce1bf06-a907-40be-ad97-2521ca9bf645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.58.124.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34835685-2659-444d-af7f-7e6fd04f54d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.58.126.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5e5acc-5b13-4f8b-8474-6ee7306796ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.58.144.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f4a4b1-e174-4ca3-9112-2c581b15fbeb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.58.198.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5a83cb1-b406-4ceb-9d5a-e1a9067707c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.58.235.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e818870-2114-4ab4-88f3-1e16060c6ee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.100.178.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee19e656-6219-4b08-8a64-4c0c10f98599", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.180.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac47dc6-ea36-403a-9500-2148c9e9690e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.37.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9caf2bd-8a87-4b55-9ddd-27e61519c8a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a174ca8a-bcf4-4098-bfe9-5501510de13b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca012f62-d411-4a0e-bc68-7b5e998d6d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136e55c7-b227-4e31-8184-622f5c43cdae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ec640d-eada-4e9e-aeb3-5e4d14a83980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdcc2307-9995-427a-beea-950c968c5b2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56189c8f-d33f-425b-9d09-5286cc7f771a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c46e10-57a1-4bfe-84e6-cf4ddbdb46a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf95f0d-5bd6-4587-8656-9651162de4cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.203.134.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff44f69c-2cf4-4839-8737-2b58c1e7be35", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.77.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ca82e3-61ab-4f50-b327-cc847d473ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.39.184.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5029dd60-e0b3-43ec-ae0e-a54b286a75a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.131.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7815d86d-922a-4e2d-9cf5-4d92814cee4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.151.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ce0d88-1a4d-4752-aa84-5c1acab195b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.153.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab321c1f-58c6-4ccb-83b4-9a4b07704f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.161.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4001b132-b590-43d5-a72a-71b154c117e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.165.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e182ef33-b291-43ab-8457-7845d083da1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.166.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3caba01f-9a82-459a-af9c-61d27bf9c25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.173.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81b58956-3238-44d6-b71b-54411400cb29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.174.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5a46be2-c26e-47b2-81b1-31d247a08fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.174.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--618fdc53-cc3d-4455-997b-c8cf4304de21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.179.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d2dc67-c68d-4572-8bee-f36dd164c307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.180.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c60f5d-2023-465e-b767-b55ce36613c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.184.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaafe5b6-27ad-4200-9cd2-fd18c6b5335c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.191.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f8fa3a4-6129-4c88-87a3-badd07c022de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.212.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41798e48-b87f-4ee9-92d7-e900763f5789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.219.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a137ceb-aae8-46dd-8981-ad9d5175b125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.224.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c7debbe-000d-4eb8-a285-900f9dfe0ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.235.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f5a8aa-f54c-438e-8775-e1addef063b9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.83.0.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a952ae-1bfe-4ae5-990b-9eae76ad59dd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.84.134.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d970419b-9711-45a5-b205-64ad1213b7e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.104.81.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56442a89-c36c-4b60-8386-015b2628ec49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.104.83.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd47a51-982c-4f77-ba75-0f36c5e4bfab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.113.154.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--900b05d5-d44c-49a4-b787-4a0b4835464a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.113.188.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93de466-9f25-40de-80df-2e8ff96714c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.226.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108a3e38-d250-45fc-bdbe-4861d75ef969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.228.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3e84d7-f6d4-48c7-afc8-871be1f27d87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.230.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d615f7-b3cb-453f-8b5d-4ed67ae56058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.126.175.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2bd3579-3cb0-4c01-9ff1-eb3330eb75d2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.189.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0950ed78-0630-4f93-b0d4-be3c5464d40a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.232.191.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89abfaa9-8452-4ca5-9e49-bc8f680a3d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.233.91.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf0f754-0019-480c-9485-162135cc762a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.244.201.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf80f5d-c57b-4ed2-82de-e595e3d488fd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.247.180.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c709818-5a14-4459-8054-781adea7602e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.41.128.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c707b6-6ae1-4d3c-86f7-1c927a31d25b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.83.29.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b9e7df-dd39-42e2-9ae3-28d455762173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf53d9d-0adf-4ad5-9bb8-ec1f7cda8bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f92d5ad-6cfb-421f-b4da-a72e39ca708b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--102e61e5-6be7-46cc-a9d0-46e52cd615f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.100.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d75721-64eb-41e0-9e37-7706fcc7ac9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.105.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--450bf4b1-d272-4d08-9bb6-14f5ac144114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.17.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e46d466e-b62e-418f-90b7-1211532e9274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.19.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6da39f3-d2bc-4415-81f5-e7826af31449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c9a67e1-9c40-40ac-b86a-5aecf2088f4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea411791-36bb-4d09-8221-ffec79421068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.24.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--486df806-9329-4600-b244-816033e935ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.24.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea6aec09-e750-4f28-94ec-cc8e49011c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.38.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b35b5b-f7bc-4347-8b62-4040cbf184fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.5.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6618b60-7a08-4fea-8489-7c0712a1cab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64455ec8-d0b9-45d7-899a-185247208a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.208.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611d8d36-8141-4af9-809b-525902c22960", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f3971f-c52f-44b0-8b13-37cf9d3dddd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00a0ba2a-5098-48c7-bd70-789dbf4864f5", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209caf5f-1e25-4661-83f4-ee629ac3a8b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662d68f3-2fb1-4eaf-9958-5e36bf969963", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b7878a-6ac6-42e1-8e6b-77b6447b579d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.120.41.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b77736-476a-4f48-8257-03d21909493f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.120.41.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8144e81-a240-4f0e-b9fd-44ea081784bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.120.41.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2df9f8f-c1e7-4c0d-8b9a-4621f69158cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.120.41.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d6aa77-2976-4295-9245-348a2795d0c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.120.41.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--419a9a6b-5190-4d44-849a-e8ba5eceab8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.120.42.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d466958-c8d9-40ad-8973-d6745492a695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.120.45.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86276350-71bc-4e20-8856-e69f8af5320a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.120.45.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f0ca27-c95f-4bb7-a902-78325cc4224c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.120.45.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58dad14b-db9f-48bf-9a1d-165f1caecb6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.120.45.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbad4b2e-bce0-482c-b94f-2c954f0e215b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.120.45.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffd3ee38-f2f1-40a9-a4e3-2fbdf443d458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.120.45.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d25fda-a07e-44d0-a8b8-94e48092eb39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.120.48.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f52a08b1-62cb-4599-a80c-14193016c0df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.120.48.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed61f2b-57cb-4092-933f-b277aeb2b320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.120.48.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e48573-8945-406f-aa2b-65ce664b5860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.120.48.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da99dc68-1075-4caf-8416-7ea84d02193f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.120.50.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fee24a4-64f8-467a-b3f7-2a3d8893415a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.120.50.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99f2388-99e6-43b7-be74-5e778d2135ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.120.50.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f271e3-a18d-43f2-b686-d5f47ea2e59d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.120.50.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8a6f30-a235-4c15-84f6-88ee929bffda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.120.50.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcdffbbf-f54c-47a9-8564-e774112ff5e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.120.53.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a54c2d-750f-490b-9f4b-26a27b4379fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.120.53.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b246a9-a1d6-4f66-aaab-e91e4a2dc82a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.120.53.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d47a38fa-7017-406a-8001-ed8471776e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.120.53.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95beb5be-552a-4845-b011-3dc5e12399bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.121.241.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8f8abb-1a8c-4978-803b-a3d360758afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.121.241.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4803a44-686b-4a38-b85a-1dbfe3ca0d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.121.241.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c76609-5e5e-487a-b362-ec1ccfe05fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.169.234.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6c7e38-74e0-4461-8dea-ee4faec99812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.169.235.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19dc0c9c-636a-4f9b-8a1c-00cb1e522fd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.169.249.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c01043-94b2-494e-afd7-c480243f8ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.169.250.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7e3a2f8-8eab-49a5-94b3-c022c0af5dd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.164.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73421a6b-c17e-47cd-a2ad-6ecae9d5b557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.236.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4de31786-e443-4918-8130-db1cabbda5b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.201.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3475bddd-14f3-495c-b71d-bdb87eb101e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.201.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7519ab17-2e34-4346-8c1a-f17bfb39241b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.201.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5f1652-c651-4d72-8ad9-ccd456795472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.116.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a41dcf9-8562-478b-bbd8-c76aff0d48f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.126.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ceaf1b-aa69-4a3b-8b79-48ca0bef662a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.180.64.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6748644-a519-4846-8c10-cb9608a7c3ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.180.64.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9feda630-e694-4f4a-a4f1-7af1cf69a8e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.190.100.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d81e11c6-df53-4b82-8245-780f69f45b88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.190.117.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be4a6935-ebae-46a3-b579-6fa6db865a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.190.117.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--accbb401-c5c3-4ca3-8576-1a91037e5ccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.115.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db94989c-a90b-438e-8619-224bb9b852cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.121.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc51513-5009-48a3-a1cf-49c79bad14c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.121.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa4af7f-313a-4252-9ade-7ddaabf5e1a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.133.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1acc41e-0fa5-42d2-a212-517a4bc05848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.211.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1adf31de-4698-4926-9d83-e5cdde0426ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.211.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d193b608-e170-47e5-87df-0384eb930baa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.211.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8120d17f-ea08-4bc4-bbd6-599123f763c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.212.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ebfdd70-29e9-4023-b882-4c574454da06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.212.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5fd3a2d-c40e-47b9-af2c-dd2d4280ef73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.228.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a2153c1-1262-4f1b-93f3-306c46139a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.66.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61873d1e-e220-4bde-8b08-8e2ed424a1f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.15.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7367b17-b086-4314-9b93-0405b91dd413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.27.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9f2e29-297a-470d-808e-1360e799ee82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.3.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f1b0b94-20f0-41bc-8754-aa58598e7610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.8.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b4886f5-3bdd-4384-aed8-4726b8bda0fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.219.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b2de05-2d05-4855-af5d-93ed3788386c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.221.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca4c1a2-14df-4b98-8812-2203a485a712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62dc78d6-8f4a-42cf-9a95-765d96ffaed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1065f41d-5fab-4482-976e-39fba11454b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b5d007-c8bc-4017-b350-e00c7a20a66e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7084b74a-a3ad-41e1-9adb-04bfea6f42fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55aa52d3-2512-4b40-aaa5-4b6bbd25ea2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b72b211-aa44-4e8d-9429-ccc44f0471af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb93987f-ffb8-47b8-8d98-8163e44d4ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.21.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--454e9bf4-46a7-4dfc-9b54-4005678c6447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa2acbae-63a2-44e2-96ca-d5073fdce8cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb79ff1-5d1f-43f7-b56e-010905a9ee95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2105e537-724a-4bbe-ba19-ffb5cc7962d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce67f41-670f-4aea-930f-d23522ce0bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a937d597-8740-4289-89dc-6341ddc3c881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.221.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cd0e599-e228-4385-b545-bf3484bcfe5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.222.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff745e6-9de5-49b7-8832-b06ec5c07de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.222.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ca894b-6e29-47a5-bbc1-6a37fdfe1f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.222.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b46483fd-0971-445b-b337-6903aaa2d8a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9790e7ba-4a20-4663-8a65-06afb9ee53da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c43f861d-228e-4ea3-9e21-6f9f08a800ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1359d066-fdcd-4535-9c99-854453b72a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb30646-f4c3-4414-bea7-ced8b0f5b283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.102.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b74f99d-1874-4889-bc0e-cc3ac8bc43f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.102.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b1a381-9581-43ec-9951-9dc18cd5943f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.102.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe02e6a3-8746-48d7-8677-ff566bd10816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.102.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d044b44-8b67-40c4-a03a-47347a523ca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.103.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6502d744-59db-47df-842d-7e3b527d9eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.106.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28de5234-543c-40e4-b797-358b31dc1c11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b6a00f-7cdd-44e2-bea2-f17d6716db2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6191e277-2b09-4dab-88e6-695efe585ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e39a9b5-bf75-476d-8001-d597cfde8e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.112.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d5aa7b1-3add-4e97-9922-c9b951dcd050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.112.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5799b979-0d47-43f9-b4e5-f45b54d9853e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.112.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a824f285-4c98-4476-9774-db96d1c24d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.117.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--249fa953-88a6-41df-a292-9911facd18fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.123.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc54e8c-a036-4366-b385-593a04bef107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f603acf8-1acf-46bc-b8ae-56cb255cffd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--401b5887-a18e-4e00-9f81-f1ea6d75b38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01568bcf-fbb1-40ce-a921-2a746ebcd66b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb84f5bc-15f3-43a6-bc3b-c13c28c9c110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d949d38-f4c5-442b-8a33-bf313623c3d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ac4f2d-ea47-4d43-bc8f-abd0bc4d97fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448b596e-94c8-48f4-b218-b8d0854eab6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3463acc3-14f4-44ba-920d-36171057f83e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.137.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb668ee7-1653-4191-8671-f04463bdc2b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.137.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36be2401-039e-4a1d-87c1-648ed12b8b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.137.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d611c620-5852-4aa2-b169-df352313ab23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.137.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c852ee-580c-4b5c-92ac-fd37ac862364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.146.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56e36a1-6323-4ed7-b71e-1998a7ae0c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc37ec9-3436-44b6-81ce-3be6182e2f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6897856a-fd1c-4faa-be4f-cac989fcf838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cdfff4d-6fe7-44d5-8783-2090ede9ed40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a334e9-f20b-4270-8919-ae124d04b02e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a2669f-0ed1-4c47-a611-c1dbf5407df3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d606d4d1-a25e-4ed2-b474-005dbaa2c60b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.160.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc13fddc-81f9-4ce0-b2ac-966b46b49fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.171.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579e0379-b0ca-41a5-80c8-086b6d09fd95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.188.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f40719-7f09-4cda-af26-784ab6ca1736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2629bdc9-6dec-48f4-b5a7-f239b4c8c6d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113bdc93-6001-4a17-9f1a-6234eb73bfc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.62.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d38581-6c49-47a2-8bb7-b0f65d5304f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.112.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ea9acf-a740-4b31-90bc-57c475730134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.82.64.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe8d221-64da-420e-8ab8-da5e75b88c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.82.65.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a45d9b48-10c9-4585-a54f-48aa4856c256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.82.67.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--836978ca-e835-4a1a-bc6c-391e6c2b7c89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.82.67.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f4046f-6e15-403d-923b-34578fa4e708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4913bc5f-7091-49c5-9eb6-e7e112dd4370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.117.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11822147-9c84-4282-8d9a-bb2bde2af29e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.217.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05803487-02e8-4c73-b40b-3e0bfbf581bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.223.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cffe0cad-fb22-4b06-86fe-e6072bcbe219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.145.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df398243-f510-4094-bb88-8dacd91aa26a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.150.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc2d3768-f858-4474-b100-a116f21bf3ef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.253.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f099b774-9299-44c9-b490-067294548854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.210.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27781db4-e87e-4ce3-9bb7-1c137206c780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d6f065-6bb2-48f8-8703-e7d6edb523f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa646db-e45b-4e36-9840-f45df55a136a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2464ddc5-610d-4c1c-a494-d2bcea39bca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd961372-1f02-4b90-8fce-3f9be9bbf858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa023f1e-988b-4923-82d6-de6ad539f837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e36cb49b-c0aa-4db3-824c-80d2a5e3f4eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0580adf-e21b-4019-be63-877d025c2b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd89e768-08cc-42dc-8d59-ded32711c0da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5402b4-e7c9-42f1-bb39-16c478aa4497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--967699bc-500a-4664-84a0-659a5d8be8fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a96b7f-6420-4ce4-b10e-2f9aad9ca282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.238.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0525ce33-8786-46cf-af5c-86099ffdf522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.242.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3925e8e1-ce15-44a8-bc0f-86e60ec339d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.243.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a7394ce-cf6e-4f4d-b182-a1b0b200a059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.247.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d975c93-23a5-43b0-9d6d-dee2d408b419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.249.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2aced3e-d940-4941-81ff-4cb772aba552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.54.68.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--393672db-c26a-4352-b8d4-5b12e55e7a8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.38.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f46c07a1-2674-4c43-906d-ae361abf1826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.87.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8ae661-42d7-4aeb-9440-7d3d002936e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.0.207.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55609235-4e1e-49a7-af57-2e894e1a0196", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.100.126.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c76d9b-932d-4a79-9615-a7e60ff6e623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.11.240.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ffc8ced-6746-4567-81a4-db7b589a67db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.125.92.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd3e518-ba58-4eb2-8f82-898fafd95401", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.150.74.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ef8d18-fa9c-4805-976c-0d9e1e6f1a09", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.165.83.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e41b6d17-5271-416f-b512-1f71c98f1e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.196.78.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc0317f3-0ab7-4d71-9b9c-f0c70104af86", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.27.171.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed91095-70a8-45e5-aa46-56aec3bd72de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.116.171.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37fe7c70-828d-4682-a263-16580fa06705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.111.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1dc6cf-c238-47f3-9453-f95cf3c4700e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.111.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df672465-ee62-471e-9812-525bd951b16b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fcfdad7-5915-49be-8d73-25d83b2eb35b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9a4b8f2-dd3c-4b2c-9fca-b1ad3b9cd784", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64faa14e-6af6-42c9-8ce4-22ebb4e0804b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885683e9-8b1f-45b8-8c1d-064f5942ebe7", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--284bd52c-e210-42e1-b0f6-48f375edeb0e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.122.109.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--553b0509-1ee1-4811-be10-9ecd88139bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.193.13.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0513e8-cc28-4725-b022-edd6bfddc4d9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.227.245.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12246c2a-a9f7-4047-9bad-bd8226fa6d3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.193.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141f0405-d765-47fe-bd0b-ed4ee0b3079c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.36.251.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2795b5d9-df79-4a95-b4dc-f73dd7522b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.37.213.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--784edbaa-bc9a-4bdc-9c7c-649df98bc149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.39.105.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f97d8190-893b-4f38-a638-375adee9067d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.51.106.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6613b089-9253-405f-ab60-841e8638fcbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e8e180-d08a-43c2-82e5-747747c3c404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b21cde5-b6c3-4f81-829c-f18d4d9eb931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659b974d-4706-492e-b7eb-28c186c7ea8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6c349a-79ef-4ff7-bc65-d2aeccb90029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0091b97a-d915-486a-bf88-e8c2cb0f9226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d228170-d3a5-48de-ac02-0fe70dfbaba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de0b0ec5-830f-47ba-a7de-63d68a2b9ab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0062e079-8d05-4674-8bca-f48734986d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43df0bd-6ab1-4f4e-b1dd-f37466dfce9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b19f195-ae52-4ea3-aab1-0b281f9c8511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d4c916-0141-49ef-b3c7-e165cd078aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c5fe3f1-39bc-49d9-8b89-bb916f87c35f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e967ee-3682-4afd-8fbc-942a76f2449e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--406906d6-d9ab-4c96-a7e9-8308cd7d0ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e61f0d-dfd9-49e2-8d15-22da71796951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398bd1b9-4f43-491e-b9de-bb3e6ce78737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f27b91fe-9cf4-42ed-a0b8-be025e2732f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d895a234-03f8-4529-a3bf-97b549f677d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa7682e-d5dc-4e37-bdf4-57881174972b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d44c93-c945-4fcf-8011-1255ccc48db5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3be700b-6e35-476c-bce4-2f946e161adb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a7bb37-2ff6-4f96-a086-88c93a965263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a1a751b-1504-4395-8225-24bbc1055c50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd322bd-796f-414a-8fcd-ce2ccb6618fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b41028d-9550-4a19-b8aa-5d5856b969b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--395eee7e-4d2b-4623-95cc-627f0a838049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d749b9b2-3f39-4bf7-8c2f-f11f731cd4c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--387463eb-ed75-4545-abd3-3bb109522a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd6c1dd-6901-43ca-9fb3-4fd099dbd6c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e1f26f-599c-41da-8b4f-c187440b9284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2958ce25-2fa2-4670-800b-7d3d0bc2b506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0cf6a6-5231-4d85-9373-f0a8f2c788b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8bd4d18-d891-4c75-b326-3e59b5e9c504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddabc2d2-33d2-4be9-9d2e-b8dd8643d509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--191b8435-b032-4237-8a4c-ebed3458c585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7af100c-c5ec-4691-b672-638a2ceb6afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a5a285d-7c4e-469d-afb3-cc69900542fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b3198e-2c52-4292-bbb8-c933677e853a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32da0c0c-153a-4ada-b3b3-2a2417e2ce68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e81f2fb-5cdf-4aa6-9389-cff59816b3a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1ecd0c-7151-4b8e-bdfd-bd3f91e06466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee85784-10e5-4323-ade4-ca09ffd6b6cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da74731a-45a3-43d0-bac1-7686739fe545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a9c67cd-9443-42d7-8134-cadf03f206f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb5e9139-a817-4637-ba73-0a6b81055270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b84a8e7-2248-41d4-9e57-f49790d1e1bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f8c054-3fb7-4fa7-affe-6ef742de21a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a18261-0f6e-47a4-afe2-242f4deec070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--491c8336-f671-4be2-81da-345cc68b99e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05465061-5f11-4412-b575-01087f39df6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a729c32-0513-4fb7-9f13-ba208bc5ff87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88418b47-7959-4ed2-8994-f80737b55138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae81eb82-c5a2-4b64-994a-5a0b7f03987c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc51b348-c119-4fe0-b50d-955e5d6d057d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a503cc-5bd1-4ac0-bbb3-7be9b40b278c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--551e7a36-27ef-4c7f-b85f-bcc0a9152c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e236a615-327f-4c43-bf6c-ac41ce87b07b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea831cf-d76e-402d-b569-4d4351ae7ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c297b1-6368-44ca-a1e8-b4b4e11788f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a19ce0-e824-49f7-bce3-79ea515bc439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96214268-b208-4e1c-a9f9-ee0ba811b455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef370f3-b5c7-469b-8f82-dd470f0ebe2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f3c2ccd-b2b4-43db-a022-ef56f0509109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.22.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b8299d7-378c-4ce3-83db-3f7f996c1c61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48933f03-7a3c-4e14-b389-7c992c052c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53e4e05f-7e87-4b02-8d62-d147033a3230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f2e684-93bc-4aa0-b67e-e936e1613349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fee036a-2e68-46ee-bacb-77b286b47783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b905896-1ca6-4b93-b9e7-043ac485705a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36cea20-c770-43b8-9c56-24fb72cd5569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c360de-12d4-4a3e-a488-6f6bdc86eecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b59b3e-e3d5-421b-9612-b8dac4e03b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac12993-48c9-40cb-9fdd-1fddeb962ea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9885ff2-b87b-4c76-96b8-53ad9e3a65ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a157f99e-3ba8-444e-9a5a-9ab6f968a36c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c75fb5-c31d-49e2-878b-e750a03aefff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f022af-9801-4640-85f5-aadd01360be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac698007-c6dd-4636-9a98-5324268137bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05541406-6ea3-4e27-bb83-0311346be149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52de06f1-4bd3-41eb-a68f-e6b40a667309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c952e9-fe46-4dd3-bc9b-373618be9359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b7ccb5-e78b-4ad6-a4d8-896aead1c340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5526dc35-1ead-40a4-981b-fb315cbe9695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c73e73fa-8060-4983-955e-a2780a84bb2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12fa3f36-bdd1-4ee9-aeb1-61ad61a2ae40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c890da4-f298-4290-ad68-287c77b56016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f80dbf-b1de-4b1d-80f8-b027327288b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5bd4e7-487d-450c-b0e3-e33c3f0b8549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208ae6b3-1f77-4824-9c9d-5e72c36cc539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28081713-4b48-4e6d-bb05-2df47174f952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20816532-66ce-4e7b-944d-6afdf07cc620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d3e04a-d8d9-4a9f-ab96-a35f6572861b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d217f24-6c4d-4e36-a4e0-89d7dec022a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--564efe6a-1c04-43b3-a6a9-d056880d430c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2803476-6a88-4867-8998-523dee170978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f2a432-1c6d-4981-be34-44b8b312ae53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec74ba5a-0b89-4590-a4e5-03324bed6437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c158ec3-dea4-4960-82fe-5ca0d7921879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc0e916-690e-4f2a-87f9-906a0fe31d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5623bbc0-36cd-47cd-98b1-a03667749d26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3870f9f0-985f-4242-ac8d-4a44f10d96ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa36341-3927-4982-a146-c632bf6be2dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e652d70c-3669-4681-95c2-38ce0baafa69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065c4d14-bc5e-4ff6-ac15-85109a31e0f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e741bcc0-f2fc-47d4-a4e7-f636f1309bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a7476f6-1b4c-4200-84fa-9aa4ccd0bf3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5bd146-473b-4090-b881-2b08ab98cc7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e80261-2556-4699-8fe4-1386f354d245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a2633c4-ca37-4cb0-b903-1fcfe87fbff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927bbcd7-607c-46f8-ab17-4dcdae1f95e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a0f887-7ef4-418e-ad59-ed3d7d09cfcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9505b89-7152-4f6a-a9da-307ab2bf999b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d0dffd-2001-4ac5-bb54-9e728aed2ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b98f3d8-9a06-41e3-8b8a-2d62eeb5cbcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b03f3c50-bdf4-4fb3-b16c-b1581c46cdbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--838834d7-9a1f-47d5-bf0f-d28a093d4ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83883af8-93e1-4b64-9e2b-d37963c38098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae825a7-5e60-4731-b9ad-31cbc0fde586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe4b564-0673-4cae-9b3d-e1bf652d2125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823fbbda-b649-47ea-ba1e-c3134eab9366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c278d726-094d-47a4-85aa-3dde43015e89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7247a99b-3a36-445a-8a45-a5ffce1df76f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47cba9d7-4a94-4ca7-b7bc-e7f67dbb2abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.35.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--990030aa-8b17-4d50-91f8-4927886c8808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa9adc5-beaa-4fc9-a7d4-cb3d48a3c3d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a29fcce5-652e-4778-a9f2-50be9e38b09c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d30047bd-4939-42a5-865e-462ed4e8064b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb204d11-1e28-48cd-8c03-5c0e6bbc4c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6f696c-cd47-4d35-8c00-61cd66fb7538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ad9803f-31ea-4212-87f9-ec72a1f5dc38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e20fd2c8-b3cf-469a-bdb2-7810aa6dc347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a80efa0a-73ea-4457-b5f2-562a497d5068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183f1aed-b442-446f-9c1e-606a9a6a2b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7501569a-d165-4654-8270-9e81b1054a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7067f4b5-c209-44a2-bc59-f29c84f164e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9966cac3-c20a-4183-8d67-85bee30c47c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f26b46-3149-418e-8480-5d9b1710f686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1397495-fc28-4140-8315-8d94a30b5149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acad942f-30d8-46a0-a5d4-ab02b4dfbb5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc1d0afc-ec68-4c3b-b9a2-498f5eb41f1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--634dc3ab-9760-4910-9d2a-5c854c0a02d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b413b38d-5d46-46cd-b7be-1d708387a34b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0308c1-5891-48b6-be94-e8edc4853c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c37b89b-382b-44d7-9a5a-19a79866b5ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8744dcd9-a243-4011-8d3f-804f5b50634e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d41219-b643-4541-9216-95e5507a3e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff18d93-0431-46e8-9761-6be885107056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--714ea43d-f3ac-4a17-93c1-9fa49bf6c3d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b55d9538-8a3b-4e80-9f39-60388f12e901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc01ced-2138-4090-8ce8-0cb24ddfdb34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8382910f-a5e6-4523-8a12-5065a2046793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f975bbb-a82e-46fd-ac56-488029206fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c3ef67-b980-4d7c-9e63-574bcc3d7473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2183830-87ff-48af-b76a-13a8179c4ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541126af-15f0-4473-ad32-626bb9b35aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e0b10c-a8cd-4d6e-92a9-d20fafd48a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e62aad20-6ab3-4312-99a7-6db709870925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9505c30c-0f31-4631-ac3c-9ae533c401ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f509f3b1-9505-4f55-84f6-3a373fe64aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a73e75-b01b-4c3a-8522-ae9023b668e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e821e6-5c13-4fea-b19b-572d16804ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66fdf396-819c-4ed5-8120-14ea68badcbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a32e61d-d3ae-41d3-8831-17a22a0ec306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c09c4fa1-3536-4492-a209-4fa7ec5582dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59045e84-4177-4241-838b-46adf7041549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45ec1f0-d518-480b-a1d3-742d6bdc2663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b19cb8-cea5-4231-befd-401149dd68f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbde9838-4bce-4f45-8947-d58cba7431b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fbc8c06-ccfe-45c8-a93c-54b73c19ac4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b105f44-3e0f-48ac-874f-52ccc935c9cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d784932-9f34-4722-b0e0-3b0ef13e56db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8335e7d9-63a8-4a1d-9a35-e0e094cf9fff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--536f7388-a682-41a4-9f91-69fc785110a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a55ed1e-7939-44b5-b2f8-dd2d593ba985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12cc18e-1c73-4785-89be-54d6ac93b1c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e767126-e413-413f-839f-038cab161ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f12961de-4ebb-46fc-8c31-e425a8709286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1815ac9c-0f15-4c4b-96e2-5f2d5776af29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544051ed-6b3f-4cd3-96dc-23b241704230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76058a0f-70b7-4c7e-a424-93f652b1ed06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.36.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c52040d8-b7de-4cb6-8959-6fd41f7e77bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f47e957c-0477-431d-ae32-4fca5b1f6be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.144.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f606a4-57e0-4d4d-9348-59b53c95d904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1e54ec-da35-4e27-8dde-8082c025307d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b8725d-9ad0-448b-86b0-0173aabf21d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05eafa9c-99d8-4412-a6bd-e00ca86e12a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56121460-9c14-4b45-8826-26caf0d2ce95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7e446c-c251-4ee1-872d-448f5994a386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--254675bf-6aaf-450d-b351-7543f05e50b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229727fc-2ad1-4e65-b8bb-c04e5ba6e5bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75290a5-a269-453b-b076-8d72c9487da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33262c75-616f-41b9-8f6c-81e9bc7f3f6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--257ded19-7a5a-4fc1-996b-5d13df110be8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce3843f1-8cda-476e-8441-905680e79b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39bbec9b-fdd0-41b4-8317-1d579fddef73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a35eb8c2-c239-4215-967f-8ae767882e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdfb9db0-5f35-40f6-8eff-41a618985ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8227d43f-334b-4c35-ad0c-e391920654c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e13f7b-ed4d-406d-9152-662e5317d8de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05aa664d-5f0b-4ce8-b36d-265f50351bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f988cb1-ff7b-4e62-8ec0-57299bfd907d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f820809-b7cd-4322-9963-320090da10f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4430ed4d-0fd5-4343-9134-a4416ed83f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac8f1c45-1d14-4230-88bb-e64734d5a6b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.97.67.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc511578-b20a-42b0-9b45-23deb4b5c0e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.98.71.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f853e7-8c07-4442-b311-9d0cef494064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.10.203.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c6467d-f7cb-48e1-b0a2-38f836136be9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.131.215.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1283377-28cb-4cde-9326-e3cfc45641ea", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.155.234.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f3ac5d-c45a-434c-9cc3-722abf920f49", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.35.193.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--309fe9cb-9c42-4684-957b-792e46352c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.105.200.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27bfb58-6645-42c3-94d3-16f0ee4518a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.107.147.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3dae822-d052-4ccf-937b-f71a96cd2424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.127.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d138a61-5b7c-4432-bcc5-8119981b4aa2", "name": "Malicious Host", "description": "Web exploits: vmware-vcenter-sdk. CVEs: CVE-2021-22005. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.203.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21985", "external_id": "CVE-2021-21985"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22005", "external_id": "CVE-2021-22005"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d1922a94-40ce-4dff-a189-4fc47e12ba7c", "relationship_type": "indicates", "source_ref": "indicator--0d138a61-5b7c-4432-bcc5-8119981b4aa2", "target_ref": "attack-pattern--9f6bd0dd-9d9b-4eea-b75b-9f1c56fe33c8", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59f71c33-6a3f-4de2-be5e-3dcdd0b554a8", "relationship_type": "indicates", "source_ref": "indicator--0d138a61-5b7c-4432-bcc5-8119981b4aa2", "target_ref": "vulnerability--cf0a3d8b-5957-4e13-907d-8b0816ebde95", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cd478c61-df8e-4631-9ef7-9d5ee1ef7eca", "relationship_type": "indicates", "source_ref": "indicator--0d138a61-5b7c-4432-bcc5-8119981b4aa2", "target_ref": "vulnerability--45ea53f5-26e6-43b4-97c4-33add5bebbf6", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495fb601-b72c-4847-916c-4a3966ca74c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.32.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9e4f2d-bd7a-444a-a1b4-9a1a9c59704b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.53.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a9b604-e0a0-41b1-9250-5eeede6eb8a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--595651c1-6bbb-4b66-b24c-226f7fc0ea46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b83d8665-4faa-4660-9883-eb04061b987a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.21.67.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90dd560d-cd2c-45d4-b7bb-934105bffe3c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.211.139.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8cc5f3c-4240-4420-91a6-d260fb5f6b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.222.77.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5970a12f-d3b2-40c2-a314-a79ec56ea22f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.49.5.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c7acbeb-e452-4661-a79d-3e8a4955e6a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.237.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f13096ac-55fd-4fa8-afc9-622227bd7992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.33.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0fa11f-0448-43d4-a04b-972bcb5f9085", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.66.128.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcabedbd-e743-4ca5-b3e3-8eb124f88ccf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.73.243.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc51271-97d4-4ebd-b570-4719388af71a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.73.94.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea66711-ea43-4ee3-a00c-ae0a3fb0122a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.79.184.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c3564e-49ea-41c1-9b59-481ecf11018d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.88.112.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--984c3632-1074-4722-9150-15bde8a154f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.108.33.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bbc0ef0-906f-433d-85c9-1a86797274e4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.127.158.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c71915c-0e2b-4d95-b5dd-6d87826691ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.198.201.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6b9c1a-f6cc-41a4-bbd0-51872622039e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.37.122.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d6617f-2100-435b-8d5d-1fe27132664b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.49.81.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba72164-45b9-4a50-9917-0cd30e80b304", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.6.12.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb753532-b5b1-4ef7-9c18-f96b54160adb", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.116.101.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f07f59e-099d-4ec5-a495-86b6b67ed363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.209.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23cf0c85-882b-499c-95bb-8df847fe242c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.135.247.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ef3a37-2fe7-459b-81c9-d1b9d2b47485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.140.44.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d68575f-5015-4d2c-97ab-9d701fb5fe1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.190.15.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d218ffc5-0978-49ac-b12b-fcaac50a9d89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.215.183.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1245b71d-243a-4768-9255-b7bca1dced73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.208.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f359a0-bd68-465e-bb56-113262d0161a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.218.118.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4053646-047c-45e8-946b-87226beadce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.179.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d057fc-0d7a-4319-8309-37751028b442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.108.123.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408e4897-c742-4d03-8231-fbf11fd3f819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.108.46.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c13427-467a-4cdb-8c64-bc05758383f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.151.51.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2653b5c4-a0a2-4b84-9b7d-2a38bdd0f6fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.176.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810d18e1-d2a2-48be-9345-f3c4363eeb2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.93.138.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de3b2731-c2e9-4221-bb3b-e2a6d95cc54f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.115.192.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c810abed-1990-4eb0-882d-30e8749acde8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.117.136.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--342f84df-27d8-41a6-90ba-a4b44cae3002", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.117.72.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4b66667-80a3-4e2c-bad9-21b49d4538ff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.118.50.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e211b602-2a10-47fb-b8fc-143996c9829c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.140.45.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a47e15c4-4485-4cc6-acb5-931515ec54d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.209.107.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59995bee-7fe3-411e-b400-0d3dde940be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.228.16.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c48275f-d50a-4241-8ebe-f94a9fe6225c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.23.89.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aaaed4f-f745-45af-a7a4-5cec7e3d43b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.43.125.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--486b9b94-2550-459c-a272-ff7dc16eafd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.44.163.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d7f686-f635-4ffb-9d81-2b86c43cc9c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.46.185.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272e52f5-571d-4769-b561-5f784678b6dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.46.73.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e134bbd0-2887-4eb2-b875-836a9ed7907e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.84.154.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22fb3434-79da-4bfc-b7ed-f931e67ce344", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.109.62.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c81c60-a467-43cb-b56f-0d4f18d0adb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.123.176.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--895571c5-e6f3-43eb-9a91-83d48bd114f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f054ae0b-7aef-4435-8e08-3fc342875cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a923c90f-eb60-4960-84e4-efcd06a89633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37405b83-a732-47b6-817d-f19ee373b097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.176.172.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e447c7-f312-4735-851a-6e545b8533fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.182.186.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c2a628-397c-4a4a-9ba3-fab77b9a8133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.19.211.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28709c66-6e9b-4bbc-83a7-1db182d5830b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.190.221.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f785b56f-be92-4d55-88df-be2c32a45d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.169.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--123c5872-6416-425c-bfac-77a0af634350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.169.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1631a41-3fa3-4f82-af5f-c4feca93fa11", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.43.221.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7849de8-c2f2-45bd-8bf2-4f46d1a13089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.45.138.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6971aa74-cfa1-467b-bd66-09a42cc0c5d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.46.233.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c09e67fe-ee3f-4def-a48e-5424ac715462", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.66.193.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--261776d4-e35a-42df-aa9f-bc387760456d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.90.207.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bfa8445-31ad-4108-af44-e45c9b32a61a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.108.171.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce0277c0-e702-441b-8d80-c306313d7874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.178.85.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8744b203-c737-4fe0-aa9b-acb30dc0d0e7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.206.172.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0bf8be2-963f-4dfd-ad3f-d98601866f91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.92.114.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b5c09f-c188-427d-ac13-682410d77067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0f5422-1f5b-4b55-86c1-74418f3f23e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc8cde8-5ad5-483b-aba1-6e72f0662121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5617f8e1-00f5-430a-b2bc-74b4efe49283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ac0437-b1cd-45b8-a0e0-953197819ab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e6c734b-8314-4ae4-ba06-a20fc9fc989c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bbec2c8-5c42-4906-bf35-e05c8df6c342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55b1386-5c6b-4567-9459-2306a67e82a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b7e2d2-bf92-4675-9ff6-84427177ea5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b06299-9ac4-4cef-8f41-bd7fa9141b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38b28ac7-0f2b-48a5-8812-ffb8963c5d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c1123c-22c6-4f0c-968a-eecf35611854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8173a101-7dfa-4d6c-b73c-baff7e6622ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--977f5fef-37eb-42c2-adb4-12fce8a240ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5008a6c5-00b8-45fc-b226-f56079e878a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44742801-7754-4232-ae8e-ddf68e948c23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb2230cd-df08-4547-ac0c-9d93004b7a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a791de8f-5897-474c-9bca-901c755c3710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90da93dd-1074-4c97-beee-7dba8c00818a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a801461-a277-4f9b-96e1-f595818c7ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a0d92c-ef69-4df1-b60c-b397b3097d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c3f05c-235a-4821-a186-2d891229bb85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9678928-2999-4743-bdcd-ff70efbe5f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d63cc1-a878-4d05-b4ed-ef29997cef50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1f40de-080f-42f0-b667-bb0dd5a20f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec12817-87cc-449e-add1-b97be1a18872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a492681b-fa94-49bb-b921-0659c18848ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebec92db-93c0-407b-8bce-98364c21b400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--055204d8-ddc5-415a-91f7-c7dd65257698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--681cdca5-813f-4fc3-ab17-cbcd07e337a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408eb925-147c-4d14-b00e-b087c6b89e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cab12a1-e713-4624-a493-15c679589ade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ed360d-66dc-4bbc-aba4-e93d941a3096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac17cbc2-aa53-4596-9806-ce88cf3aefe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d729d9d-34e4-433c-b8ff-844d8f4600fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa889d4-d75d-428e-b0d2-11e46cee5640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ab08da-b747-47bd-9470-f019fddd74a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bfc34da-fdb3-4bce-9844-a0d50c32206a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996cad45-fae1-4543-93cc-487b4f016ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3619e524-ceed-48fa-8698-074813a8008f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea26cbcd-894b-4d5a-92e1-7093890a04f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26486097-0db8-4c2d-b058-b39d241b1f95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15975779-e6b5-49b8-801c-2fed44970237", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e084a2-7c15-4c1c-8bca-ddd0350bbdfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.176.35.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92592b1-a3c1-4d32-82f5-22ed73af9bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.72.121.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d602e4f-76fc-4048-a6ac-8363754643dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.73.137.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e8da2b-bce8-429a-9f45-9447218e9e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.100.87.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2938c157-df80-419b-820f-025b6445d19a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.11.145.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf0572d-21d2-4bbf-bc93-c0414a0c396f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.110.29.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5ee12a-0241-4321-9392-91fcbc173bc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.236.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaae871f-b61d-49f2-860e-00f9627fe518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.237.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057dc7b3-20b0-46b7-8169-ed6a8e0f7f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.237.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6a0a46-ecce-4bd3-8d01-33153c02bfef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.238.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e951a97a-e797-4054-a00b-f251ba0c8c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.238.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6157e2a6-e415-40e0-9a4f-f120f8b6be8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f09974-89c3-442b-897c-4043a44980f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.122.164.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200fc2c8-9f76-4e77-b15b-a0f6fcbbe896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.122.165.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee50b701-fe26-4f89-8e92-bec609c4e97c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.128.112.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc7b699-f15c-4f91-a7cb-52823d891711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.128.113.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da6ef5a-9980-4e94-afa8-4e4359140e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.128.114.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb47530-fa9e-49d8-b654-232abe4bc2fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.128.115.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--febac9d6-c3c0-4ba5-974f-3e370fc69c55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c297ea1b-425b-408c-a3a1-65a8971910d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef0a844-092b-478c-8ab8-755de5577d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8432b6c-5448-47c9-9126-3678ddf95fd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7f5cb0-adc4-4429-872d-34595bcce50e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aba759c-bb8d-4331-9175-d443f9ced89f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f7c344e-d974-4ca4-8bc4-0c336ae04696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.139.214.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--394a73e0-8eba-4a09-bf73-7af7acf3fe99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.168.22.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de0ce1ca-f19d-4751-a934-3c6c2bf82a30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c072741a-272d-4554-9b44-b59120f0fdd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69eb1c8e-ecbb-45ac-9130-cdcad46d4105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.174.165.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be0341f-5d90-4f94-9e23-64c4b7fa472e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e65098da-da9f-4f71-9c39-09eab8db6ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e91501-d903-446c-8896-40c3777aa2b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22be140a-400b-4235-9452-d499b00c6363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db5a8081-7ef3-4285-a966-52c81102453e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.184.68.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78df5fb3-7120-42e3-b806-b6e98f7f5205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.184.71.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6723286f-b783-4a8f-8ba8-a52b25b1b64b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.187.169.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c49656-d36e-4f85-a557-b1f3cffd743a", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN, SSH, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.45.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp", "protocol:portscan", "protocol:ssh", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc25a741-7e24-44e4-88e2-132b98936d21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.190.25.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d681a61-0d7e-4805-939f-fea3e03d7ff6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc7c82aa-1548-4860-8b46-543ce0298e52", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d537978d-1a65-430d-a34c-5ee57704b327", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5af9f09-b156-4451-af95-f38c42b113c3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbafe52b-9def-4e27-8d17-0c4f349a4d02", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde95f5a-ab65-48c4-a4bb-360f55a58404", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--782e6a30-80ec-40d4-8f97-2007653b80df", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be19bc8b-4b37-4d36-857d-c8782806fbda", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c07a5d-1798-4f21-844b-fcae59b9efe4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06055c0a-d1b1-44bd-9b2b-56a5c4c7492d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4613b2-8e88-418a-bb2b-bd764e5cc808", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9690a18e-c4db-4c19-8f84-99dd876e8f9b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8def93b2-a02a-4a3c-b5d1-2a3ce453be40", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897180bc-40ae-4ae6-adad-cb13e6d5255d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9457dd9e-3cf3-4fbe-9bcd-1e345ccdd68b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a4b1464-bfde-460d-b136-1e2e55116e05", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb8185c-dac2-498f-b76d-cba8750a4f22", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9494edbd-9fed-406f-8974-51b5d99241c3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--499c639b-0cc9-4070-a17f-b47468103bbb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b55a2b2-f4f6-47c4-935f-2adb80639033", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.192.71.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e533bb18-1523-47e5-a913-b81ff78fe8c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.2.80.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2b5619-7bc7-4576-be6e-154f50abe5ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.2.80.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11be33bd-831f-466c-9f08-ba505adb7f43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6707834-3ed2-47c1-b865-96ca5dde592e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de59578c-0db5-44ac-b86c-a64deb86a196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693c823a-fbf1-4cb1-a5b2-1d54d89cd03d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60724481-0c22-4d36-a701-c6c3e369b7d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ce8830-8f1d-44c8-9468-f3727fb91ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16dcfcef-6285-42b5-b112-e7bb794f596f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a088f1-9555-474d-8f50-ceac07f0bc3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.189.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--430f7bd6-b15b-465a-8c95-9b63fcf6584c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.217.0.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448f72c3-bd67-40b3-b85f-5863e15516c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.217.188.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73adbe35-e57d-4332-ac2b-814a3bbdbb6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.221.237.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f21237-4eee-4125-be90-b2c9d6931f51", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.152.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c96d0ab-c189-400f-ae36-f7903abc411a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a44d7361-092c-4b64-9f08-112825661e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cab212a-0a05-47ab-9a8e-89d0cbec61fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5bedba-3f57-4a4f-bb17-245aa7b15a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87810a41-fa48-4a88-8d83-eb251138a125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ffd9dee-819b-44f5-840b-4a7e81f004d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e04a8107-953c-4055-b7ab-c6a2e900cbd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44efc96-bebf-4b3e-bf9f-322d9c044580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8646d3a1-6dea-42d3-a516-502036019570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48b86e3-401a-4ce2-8813-9663d4b8bf6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a012d228-3271-4fe3-8e33-c07f608c7a63", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.23.66.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca363609-2b9a-439b-b273-7ed81ddf6456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.230.124.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3005831-fb02-401a-a6e5-aaaf7e915f2d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.233.247.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c966082-5dba-44ba-acbf-81c6690aafd3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.240.215.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28854e74-ea8b-42e9-b95b-f9eb0d955b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.241.151.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19b957e-3146-4c45-85e9-4aef35b512bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88921856-c8e8-4005-b2bf-8bf15a921fc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671cc436-f61b-48b3-ae43-e241ce74f94b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbab7260-5909-476a-9e76-95bd78c87d7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fcc0228-5844-422a-bae6-bc1fa8ec7461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c7792a-cf4b-4339-8c33-29160e9ef8c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--591ffdc3-c1e4-41d3-a07e-0bf470acd1c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c4f679a-4eb7-486f-a57c-473287f48cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb326708-92a2-4414-acec-ce734b712393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f57cbb4-6f2d-470e-8a04-4f2ebcd9568a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b3be7c-9e89-4d66-91b1-334fcf83c5ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84300933-3698-43bf-912a-0bdb9a95fb63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fafb87f-9437-470f-beaf-97c810167770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2945e39-393a-4336-a5be-5bc4b4dca644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00e9c19-636e-40e4-a2bb-15e79daba602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ae7c24-59fc-492f-a1e2-ccbb74b5549a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ce76e9-c97f-4278-987e-b2e8c2617f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b42ab3-cbc0-4fec-af82-b726aa693583", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2efde58d-f42f-45ce-a645-38cbd3fbc312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c08b407-a2f8-477e-a4c9-dd22274a5f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb1744b-002a-4e59-8129-0d13f14d407d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be73d5b7-84f5-4deb-b239-70b0035d7b72", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.5.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--388025b9-6de3-49b3-a221-409a05839a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9513ddac-ad70-4c86-8b87-dacc5fea2f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b76e4a2-4c2a-49d3-9951-9eabff4dae71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f2a386-3ca0-48bb-b27d-5dfa3bba5e28", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.253.162.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aaf1537-5dc1-45b8-8ea0-a3a13782ed5a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.35.8.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad7db10-ac27-442b-918b-1983b7aa8d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.35.8.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05997a6d-5250-4dfe-9ccc-36b6b2eb738c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.44.64.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0116cb9d-6b01-4539-b635-70f956bf555d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.44.65.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c868b2c2-3b94-4b38-9438-e248fd0b6b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.44.66.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc147fef-b5e4-4ae4-be8a-39b4940bbf9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.44.66.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb904bc-27ac-4c8f-a3d4-e81243b892f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.44.66.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a336cccd-cc66-4e1d-a991-058011fbe685", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.5.252.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e2661f-ddcc-4072-893f-37c42e51c252", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.61.78.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d98297-cf29-4c8e-89c5-714ce7226cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.23.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ba8d73-8600-4a98-8a72-729244f1c5b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.74.4.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd81de0-9290-4f78-b13c-696d3178b546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.85.241.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31457f3c-7b3b-456b-b6f8-99ebd0e2980f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.9.139.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b13cb0-4319-4ad1-85d2-99b33f7ab65c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.91.52.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dfc0c7c-b5f7-4ea4-bb73-9ffe04ea235b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.91.53.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1c994c-4d4e-4cfd-a357-67c6f2f28ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.91.69.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb65b4af-28be-4756-921a-0e63bdf72291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d965615e-6195-4565-8a84-74745421695f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c726e8-bc90-485d-ae4c-c424fac8ef35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46dfe98-fcaf-470a-9cae-be14633a4cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5687502-aea1-4f3d-9586-3746af5e252f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7478baa3-6b15-45d5-b02a-66444afeacf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec41d59d-c5f9-47c4-8cd8-94ca83ce1f31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.94.111.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5328296f-2d70-4b7b-bbfa-d486ffa4e1b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a750a6b-e9b9-4cc0-b3f4-0ab35493447a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6844cb96-41d6-4e12-825b-e0241c011e67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717552f0-8e56-4fa1-94d0-947ab1b29cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e7a496-b16b-42e9-b66a-0c7f0ce95af7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2311a2-517a-4967-a466-ca14d80a192e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb6b0c4-633b-4086-af75-1ff676a03b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b022f2e-356a-4cbd-b408-33dfbb26bf09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77cffca9-357d-435f-b1ff-0c5ab0778740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a3af53-0221-4897-b84f-cb34ee30cf13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13548799-61a1-4cd8-945d-c51850292a27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce7c5a2-237a-4ddb-a8b7-0008a334b97d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332b1e58-dd52-46ac-914b-c84898e0b144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f5a97f7-6b97-4121-bcba-bf32cc975e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77501db8-4e65-4656-bf73-a2c1b12e5386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f58863c-9a91-4e8f-864b-fea65bfa0bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26672aab-642d-4beb-b55a-3824dc3682fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5afdae3-7d16-4805-9c51-8f22dccd23af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d75ffd-c891-4edc-aada-3d7fb71b9a6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d60c55-2887-4871-a5f5-7f08fd575df4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7272054-1f09-4791-a984-2c5efee09013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ea9e1b-44e6-42a6-b43b-f39cc4d82988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a06d06-56db-4c3a-ae17-cdd4e7e41595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12c4754-1c2a-449c-a33b-b5ad86a2624f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b878826d-e547-4533-ba18-ec2a38bed283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e12ff65-e0fb-485c-ae89-cea994d21e4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d5f00dc-5cc2-4781-a0b8-62816acb5ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa11cf22-16e3-4ad2-b16f-f1ff942850ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435ebb01-e115-4e6f-abc3-a1444d60bacd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae558ee5-a4f5-4d3f-8321-54b2ff6437d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0dfb7f4-1ae8-4bc2-b590-4d8f62dd5cc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--902f9ade-f8de-49e2-973c-b7a8c23f2e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b100559-13ea-47fd-bdb5-fb92636ed093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce5af255-e517-4fff-b360-688662eb605f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb20e450-2d3c-48a0-a13b-ce5778bbae1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6665ac4-db0f-46c6-addb-889fa4450da3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a6fed18-afeb-4420-8a24-7ea003e6bdb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286172d7-f887-448c-8631-3f1397cb7df0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b379e8-ac43-47b8-ad90-d4a81994b43c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d475872f-2d1e-46b4-9d05-d2f4a5b98354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a301b2-28a7-4a8c-9faf-e6afbdfe5cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb661d26-ab8f-41dd-9a04-4af883107a16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb98a94-640b-4ffc-adaf-9fc9d8a7bdb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1c6510-dc38-4a7d-8d53-8b37f60abbe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23de2821-8393-43bb-b411-350681d2e08b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a643c1f7-30e4-4de6-9598-bad46850a721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674e2019-17ef-45e8-ac5a-8397e1b8476e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa719ab-0a98-4227-8ad0-45b48b896d88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08c1d5c-7c26-48f3-b3da-5772d32102df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8fde169-5569-4dc9-b0fd-c8942d6a7fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5560ac16-69c6-44e9-9961-b4500078f65c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81033bc2-631a-4644-a0cc-5b12dae4eedd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43672b63-5381-498f-92b4-f45d03168f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a11512-3c04-43d3-b2f9-2ab0a2484bdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56f26655-0df7-434b-9c5b-81d24009b176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b21720-5479-47db-9edf-665e6d7c9d41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d32457b6-1908-421a-8de0-9464bb0b72cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6508fd38-8c1f-48a5-a022-0399da13f48d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301a6357-0a39-4ef4-8bd7-0ceba6a76385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37cb1ccf-1302-46bd-bb16-6b610449475a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba507ed7-6556-44a8-97e9-f0ec9ca934a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7876a9e-2566-43b6-af59-ca7a3fe79819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebefbb91-2985-48b6-ab4d-46f96969bc65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01a5d13-6f65-4f9d-b783-52c962452909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8598708-4e23-4eaa-bf85-0c5b80ceb4de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a862fb00-15f0-44be-87d6-e9021b21d0a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff23bf3-cb1e-4eb2-aad8-954d438a2e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c182992-f1db-43d6-a24a-2c3f0f1f9608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e87038-6300-4eb0-b932-83644e7a8713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f811ab-7d36-4b26-a417-aec2234b7039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27baaf0b-dd93-4b18-a767-01f1165d23d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec8b64fb-3b4b-4c2f-8b13-6f1db5fb38ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2058fe55-64c2-4b27-85bb-4bffbd4a0a89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c88ac40-ba52-4ac2-b01f-34f4f778ecce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7917575b-80cb-4f6c-822a-6db1ef4f7baa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a50854-2bd3-4c13-ba59-610e5f2f83c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c10974-481a-433f-9833-eca38e6cdd8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df422e11-6433-47fc-9476-6ba9c3b835e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea877c8-a42c-4dce-bc1e-3cd8508c7da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b71519ba-a599-41e8-92e1-ce73178891a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd82b8ac-bbe6-47ca-9319-e21af5f854fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f602c5-c24e-469f-82e7-3e5c2343b9f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--265ea51b-a9e2-4ad1-a0b5-98a16c039593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb34b4b-82b1-43f8-a81f-85a52f8d9006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e1d129-545e-43b5-9b98-6c529d77f3af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d2db4e-8c05-4f9f-affb-197052d18341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ba8ee1-1587-4e29-8303-9eed5db2a588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0b03ec7-5d6c-4be8-ad7d-c315a9440db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3c434b-7478-4de5-8b3b-745f57ccf94b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f88bd12-5ec2-4388-aecf-900b883566b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4995a25b-8fa2-454a-bbeb-de1aaa7ad5a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b60901c-bf46-4f41-9625-dcc7760ba2f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082b03ee-8d83-48bd-bcd2-46a181d40011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa88b52-dff2-4557-b1b2-d5422a247c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493d8313-2ec5-4cd0-9d76-ca4a9e58fa0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--372d1855-b774-4cb3-b4a3-a452ad9274af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba410bb-1ee2-474d-bf2d-6c6e09ac5dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c5277a-299f-41bb-b417-5e8d29d33dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a81f4409-e0a3-45eb-876d-7442f0da3d05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--171d676f-e203-4c74-b0d2-42ee7c9fb68d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa8dd73-1229-48bd-b069-1e2ee88191cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19527239-0da5-4f23-a4b7-e1df3c3f38c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9be53e1-0386-41ed-a154-ea6cfadb3582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc649c4d-4b22-4b3b-ae5d-4317fb2377aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddeff5ac-5828-4a41-a6ae-d532b2457a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849635c6-7ab0-4ccc-b99a-eea0a0bf3cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbacead2-962a-4c86-b68d-6a82472ce01f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f9af16-2079-4df2-a60d-bb4d5a171582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d328f991-338a-418b-befc-44f045b742aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9ac723-ec58-4856-b618-d139035b9880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b848b22-6e24-4666-babb-e7695d69a787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec56be4-5bd2-4a36-8019-9318ae45ce35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e50588-0489-4d81-8e24-9b029e8b29d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea8b42c-be84-4310-9eb8-39750e5dbffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c7b007-cb5a-46c3-8edd-4389710eaea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b428b6b-724e-430f-a0d4-879d82be03d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f3407b-520e-4dcd-95a9-daee44d90863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be6e525a-c9b8-425d-92fa-19d4ae242441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32343de2-816b-4df1-bd36-66a47b207a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e909f3-117c-4ce4-aafe-523794b6c117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7fadb14-cc08-4b4c-b55c-5c71c73ca9f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--130a925f-dec7-4ab1-830f-9770679c02f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0173c137-a573-4fc8-99fc-27977e6272dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--915c9c6f-f694-498c-96f6-a5e5d6d62bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e71b32-84da-470d-908c-aa3eda4ca706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad012ceb-edf2-4650-94ab-1cc3f4ef77b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba1898d-ebcb-4d29-ab5e-1b350b18defd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08de0e8e-6cb8-4de9-ab34-3ffbe6bbe208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0266f7f7-38cc-4507-b792-e6cefd93357b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a8947e-8fb5-4078-ad53-60c5e564926b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c83c12b-950e-41ae-bd4d-eeba9193430d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8439b6e-547d-46f4-ac1e-b3dd7069a8f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4e0870-8cc5-417c-b76b-23b1fa3151c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0086a6ec-985b-4947-9d68-dc820982adce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41329869-0d5a-41d2-afe1-6a314c55fce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--195b603b-c3cd-411e-8e49-b6bfbb225303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f17d21d-558d-4a4d-92b2-98273ef8fe80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d1a67f3-301a-4af9-b14a-382405016a25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b72757-63a7-449b-a23c-b3488c2da653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f088f9-cdcb-4e80-b76c-3790170445c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b25d18-c4f5-47b5-aa01-b465bb5cb0d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b95a4c-6851-43b7-b377-e12160b63db3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b29959-e12e-4eda-83ea-c174fe0a5f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a45b0472-a565-49db-b7e2-bfe92ac26f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--895ce234-f43e-408a-ac1f-d89b25285d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e54cd447-c6c5-45f3-b553-ceec2c9dbeb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bfdc0cf-32d3-4500-aba8-6ef10ce29457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d404a2-4002-4619-bfe6-87d573251801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd015a1-f3ee-416d-b056-b633e615f126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8b337a-58d7-4083-b475-61fefb7cdeb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d043085c-5e9d-4eb7-8bd1-3b279415b295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca319a9e-c6f1-4886-b556-2a2a1edc1a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6411788-f3c5-4dea-96b1-16c020ef0546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09051894-9ae0-4022-a3ca-b1ea6957fd4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a3a40d-ea54-4802-9e25-f856cf9a35fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea301c6c-9dda-4e40-bd40-3b57f8c0ff40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7059b87-2f42-49b1-a70d-03eb5a0fe158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf4998f-a755-46f7-8938-13806dec3317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34ae60c-eaed-417f-b5e9-1de91a5d1252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce93cfeb-030e-4e4d-855e-dad00b6850cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22ce05d-f1c6-4acf-b6eb-97c252963346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9726bd84-76ba-4cae-909b-cf57887f7992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1087f45a-f037-4b4d-bfe7-7537c1fe0b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97b30cc-a16b-4e46-8d9b-ef36d369c090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe88042-4810-4210-bd55-e8f1279ff789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0778312f-58ed-4c06-befc-0e215d6dfe71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4538fa28-0577-4dae-ae35-70995dd90c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7330923-1ceb-4859-804e-6e5574a99081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd23dd0-d736-418d-989e-18357964bf77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8869e4a-fc6e-4c4b-84fb-a2c79ae7dcfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf19dfd-45fe-4d74-8a40-3c4516e3f19c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7129dba-5dca-4cd3-89e5-586a63479a49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa6c930-a023-460b-bcb2-6ca431f06edb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad3799a2-a810-485f-ba30-611d7c1d95af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2326a00-152b-41d5-972c-fdfb3705b710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56f5c610-5638-44b9-a5c9-1970615b8901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df8feaf-835d-41f9-9dd1-319c6d5098db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0713f4f-469e-4993-a8a1-28d212b566f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d429f9cd-e139-4566-afa8-5de8f19e7519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a32eac01-f287-4994-985f-495a2abfc399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dcf529c-d93e-440a-b356-a3998d122427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb7d2938-f830-4b74-9cdf-6169aae32f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f13db3-d151-491b-8e55-d430f75ba4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e08776-b6dd-4553-9f9d-c154e2d71460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0774ef8b-bee7-44c5-9293-7b315f63e7c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a7bebe-e4fe-4560-8970-2c4ea7926d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84bbf47-54ea-4bd2-8a95-7179a374bf54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--154801ff-1519-4cc8-8323-ca066de13041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2da661-b035-4604-b9a8-44dc6e2e5dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59f4bab-5bf6-4be6-8131-04c5316bcc54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4734c6e-1aa7-47c4-9644-e1026353b989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65912081-edc2-4efe-8de0-8d82d21b9e16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d5c1bd-98aa-466f-afc1-bd8c8cec0bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd2e95b-c45a-4cdb-9d3c-d71c72042af6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3878f018-321d-4a93-a1aa-71e8d764412c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef6565f-b258-4aa1-a88a-7c6e39bbabb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba4a51d6-094a-4995-8a09-6dec29f8419a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6149586-9d6b-4523-84b6-255f1c230377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ceb4e77-c454-447a-9fc7-52c1fb7a1782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde7315c-4808-4b1b-8385-9026419f9498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487449b7-f0dd-4703-aaa7-1ed287f07e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c36882f-7bc0-43bc-ab43-5a10866342a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.52.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39332e77-b2ea-4ef8-b957-3f6e6bc54210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--261f8439-7ae8-4782-9447-67b9a34ffd67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec3dac2-152d-4ebb-9e4b-aa39035966cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e405a5be-15c5-44cf-930b-e4c0803748c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e93fd1-5478-49bd-99a3-a9b8d6f484af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d46570f-5126-4d6f-9274-ee2ef40528c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6bb62b-76a9-4fef-a12f-329dabdf5d4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20602a9-32e7-4206-a08b-f5000b969c0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d5b979-0c24-45e1-bced-084a9fc97c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f765dcb-e285-4f44-bc5d-68bd94524625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96695bb1-1736-42b8-aa0c-20133584f92b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f51ef7-d873-4cf5-a252-17f90ae4e94a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e83f69d3-d762-4207-9fcd-2a445cd68fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ba7cef-7760-491c-9198-0d40c9acee38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5cae09-8c81-40ca-8905-7e8891536013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c7859a-d204-489f-bb8a-2a9fdda342ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac32cbfa-1905-4f38-bf9d-f6c2decf9e0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f58baa-e9fc-453b-a02c-449cdda51293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddbb069d-8f77-446c-b18e-901239e058f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141c1ee7-209a-4f12-9340-d561d2685957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b97058a-3a7e-40d7-8a26-c9c69f5346a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1cc7ef-ddb5-4f51-86d1-415dc4757ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fccd5469-c170-48d8-804e-bcbd196f426c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21dd44d2-0ce9-4254-9e3c-89f99a7afc0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81bda6f5-cfff-44d1-a161-c20050ce2b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29db87b0-a696-4335-a713-f9093bd542e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff282385-82e1-40bb-b804-d3212a268a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c06d1fa-4b66-4cc2-b03d-a0f2587298d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6385d5d-82c4-4d92-aca2-a8612330c7ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab9bca1-f8c3-48ca-a37c-15307a774cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc9f256e-b9b8-4ceb-ad4b-0da8581618c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc02399-ce17-46a2-9a3d-1b7fe99d00b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de111a4-3f60-49c8-9e72-8dd0a49f2f72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ec4f84-8c2e-4c6b-9b18-8d7748b74938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e36f59-be45-4e77-acef-670c397cdfdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43bb8aaf-fe98-4560-aa1e-71df1731efee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f43958-e2de-4e5b-8f34-4725103fb5b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0e4fa2-0e2a-4728-b922-f1ef48f4d86b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b52d03a-c5f2-4b7b-8f0b-387433781c62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a808e2d3-1748-4fda-a036-de599a4a9c04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e2934f3-4478-4808-8574-4da897bf9f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f9f460-5d1b-4f08-a672-d42546172e5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9b1f9c-e9f5-423a-a59b-679a1e77b163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0dad0b-c4ac-4a63-acfd-90e96ebf4eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cbdcc28-1680-45dd-9f83-5880ede056c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d8fd52-8232-43e3-9a0d-bd09ebc8ff89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e16f0970-12df-49f4-a962-4ee7ef79bee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--929e0360-5594-4cd3-ac1d-56c4c4226905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--643d6c80-af6e-4db0-a52d-956790deafff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf12e00-0d3a-4926-8fe8-f89b02e3c78c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86fc046c-9bf5-4003-8ecd-2ce35974e937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d288049b-30eb-40cf-9552-aa6bc51b4aca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c019ce55-01ee-4135-8ba0-290af0e3fc2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c93881-c59b-4149-a431-2c0a669336f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--987e8c47-d24d-42d5-89e6-cc9eb8f709ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--866cd0a9-b085-462a-9e8f-357d0d24b342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4554c15b-d3b2-42ed-b749-94f4f8681968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb426ed-58c0-42bc-8546-25de16898355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb962ab-52c0-4050-93bc-2b455d05e31f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d08d2d2d-9036-46ce-a499-8bc1050a680c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0aa8927-9e11-408e-9014-1092a9c62ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df44a195-0f19-4b1c-9fab-75a7a7a20b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee45eb1a-d9dc-4d31-bb87-3d83ee8126bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ef5137-0b1f-42ea-97b6-a9389f9181f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a13cb24-ea73-4bf5-ad2d-2ebf52e48a01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e51b6f10-43c7-480d-92d1-6b0cb4d201f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97687c0b-ffdb-400a-a04d-8d2229f88d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4daf7012-c1c6-43a0-b1ca-a6db8dca9b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302887e4-ef73-43e9-ae2c-54cd80949cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef88424-43fd-404f-98ce-3e029d70b09e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ff861b-2270-4b4d-ae3e-cfee4bf26337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d51c653-a1ab-4095-8268-fab9ff0b4845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b33c714-c0c6-4005-be1f-7def83919fc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8024a2a6-8a78-4ed4-a7c0-5c086cd87c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a60b8e-8595-41e8-97a9-c7201307ff60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29197df2-9a68-4d34-b46e-0b29eb7bae38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45998cb-5a26-443e-92e1-276b1d3f6adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fdf812e-542e-455c-a865-0cf112a9df52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--014e3818-a102-4dd5-9154-ee0be87dbd25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d8051fb-a367-4e6a-982b-e1e395b7c613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f8c41d2-2801-43e0-af6b-f3a4901b3432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f3e860-50b5-4763-9d8d-326c6bf6d489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2900452-19c3-44be-9b29-a118d591e9d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--321c7e53-6a46-4f66-8f68-717c8c833022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f285bce-e3c8-47b0-919a-92564f5d0900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd02216-f24b-4f12-94b0-ee29481151dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ec8fb5-0e02-4632-a8fa-901b5c957cc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59721674-04d0-483b-8834-b13a86c42005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0022aba5-d63d-4a8a-9179-9fc676b69ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df0f4d6d-7ca4-4b01-988e-87888811e7e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee36a543-8180-481a-be9f-f91d4c6281e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1b499fb-05de-4624-9f3e-0aa9426443c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106c04bc-0cd8-49fc-b371-0161b801e4b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59825b8-9e96-4352-ad92-82abccfd0e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0d128d2-58bb-4b4c-b8fe-06235e4c1f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b465506-a01c-47a1-b3a3-5598c15e449f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7801090-df09-4546-a324-0b686be417c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd9fba6-8a0c-4a09-a4c8-53ad784b9a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a85732-526f-452e-83cc-641de3a4bf41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a9207cc-10b8-4979-abdb-2ea0772a91c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8582b2fc-18fe-4262-abcd-f73bd90ea08b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1480395-079f-4ed8-9277-0b4e7c5dc859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2152b073-29ad-47ee-a01a-bbc0c0f3963b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d541a5-a9cb-4a07-8c11-2f919cde3121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256b50bf-315c-4065-8486-f9c182800c02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329b5f47-92b4-4406-811e-110be77680e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--566246c7-3322-4baa-b2f0-14fe3c7fc828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d812cdd-324d-4016-aaa8-0d2f711d6c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e90c02d-362d-4422-a605-c5175dd6a844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca0fdd0-5701-4ed6-82dd-49c0754728da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470ce375-c234-48f3-a1d2-99cda7bb74c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab1dc4f-4b6a-424d-99be-3bcb1a50ff9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582f85df-3e2f-444a-9112-ffc25d8c595d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce4da15-5a93-4204-bdc0-fed5bfc42eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e153697-4206-47ec-bdf1-1067bf3a84fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e72b30d-6ecd-4e56-a5f6-8b90c444d558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7f31611-c6b0-418a-935a-8dd569a16604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c642d13-655d-478d-b07c-5de5cd3b3c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913774a3-82a8-42c4-9938-135bcf6ccf71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--518c648b-b2b9-47c9-b895-35399dfe1031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd01e5c9-79a8-4749-a5a8-153651cd64d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a66638f-29c9-4d73-b371-4a9f5db996ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f5eff7-0099-46f1-a70c-ce15fdaa9ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c8d2b0b-0570-49fe-b47a-2602e75d2884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cdd486e-07f5-4852-8bd3-8f0b01f05e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b0865a-cc26-4aa5-849a-2172c3fa55b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f47c97-c50b-49dd-bb46-ecd6f05fa38f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be9d5385-5aa1-4150-8b64-d4318e72e8e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e42f3023-cffa-4132-bd0a-47d720494e0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a91b34-59fb-44a9-b383-d6c06f5f432e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e44bf40-04e5-477c-a534-d9fbf9a2ed60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd8737e-234e-4bd5-8a58-05624b32cc42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac550cb4-c1ef-4290-b7c5-cb19aefa2fa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42136208-2ee0-4d46-a095-a65c8b685d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae56ed88-2ef3-42a8-8232-5e5e7fb85010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9961867-2426-421b-b141-794a633745d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d2ce8a0-96f5-4353-a2c0-2b995f3309ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b62918be-e6a2-402c-be2d-b8335ac67054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0155ae5-0369-4cae-9c52-f40df159818b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d35bf04b-176c-41cb-bf4c-09fb4e8502d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4af1de8-9ed9-44cd-9f9a-e2262cd6ce08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c95e34-40f6-44c7-80f4-68754a52371f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c048f2-8e2a-46f6-80f9-5ae72b9d63d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6227438e-7019-40a9-a54b-0175a863b4cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f15e3e15-90c2-4bca-9924-7fd6e0e08ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a1212d-1a8e-487e-adb5-5d4d8538b3f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9064a3b2-603d-43e1-b9fa-3bc59169ca0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9340d84f-cdae-469c-8aef-ce4a4acdd5dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6066403-bcc2-4332-907a-bf63fbedcb43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b8155f-9ddc-4200-ba1f-2815420e10ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a45d62-49b9-428c-af46-71a7acce081d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b637e8-1086-43a8-abd3-5fdd5a551f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c5bf90c-f165-4611-b77f-965787929ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--091a1183-2472-4512-97dd-cd989d3f77e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec03154-31bd-4ea0-8ad4-5f142435ccb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541fa9a2-3e41-407f-a5c6-d0d427b29ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e5420e-36b4-425a-9e64-08d3bb875c11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b53eb9-d1f4-4a24-82ad-8658b0c9f788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24bae0b7-d402-45f4-ad16-e4bdc9cc550c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e631b8-2799-4f96-9bcc-279f6cab081a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0516454b-d299-489b-bf13-57b3819f0f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a3ab4ec-afbf-4f28-9de9-38d0fbad10ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b4f96d-1344-4ab0-8c51-a10598f0a10e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e9d7b0f-4cb5-4088-b402-f1e4c6dea09c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d639c305-3158-41e6-be1d-77059ab76942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a3db06-0eb0-4655-af7b-da17b7283d17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e66b78-4e61-404b-a7af-9d49fda51ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f62fabf4-995b-47ad-a161-36a1d3dfb10b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2c4027-1ec6-4a07-bcca-37f0ac9fff67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1532c169-ce2f-4ec0-a4df-c8c3a67a6ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--071c02af-016c-46ec-8208-5e413136b20f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd41eea-fb08-47e8-9d07-8ba3a03c9d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca3f51bb-d37a-40c2-8c96-97fbdd8b2806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1174b27e-1bbb-40de-9656-7521a0e73149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a6ff66-2777-4f6c-bd5d-9936d798ec81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c7c4382-054a-4811-a026-6c3a92b9b2d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7c8c95-6119-4d7c-a5c2-97435b2bebb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b3e283-2274-4abb-aaff-3ef3c6083bac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2447e6a-c5cd-431f-a100-957a5871227e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0748ee5b-bcb1-4620-96ba-b69b7a64c413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e42dfe1d-efa5-4cff-a326-555d93944c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4539dcd-0d1a-4684-9339-394609bbfae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5f758c-4a35-45e5-9db2-41be3275b5f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef430f7-419c-4ce6-93be-f85c92c8243c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6586655-0a45-4f77-ad4a-1f3cef800f67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb1f1d1-dec6-4858-aee1-5893893c3617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1b9510-a72a-4ebe-91a9-dbaae90e1dd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--249bd05d-4e3c-4e69-ae41-dcc61585b787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa209cb5-1524-45e6-ac81-16e628b2b964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6241db2-da8f-4248-aed5-05844031f203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de49d97a-ae8e-4f30-8512-94188eb90d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c2e6a2-8d20-4a45-9b90-785cf3dc52fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b37b8ab-d852-4a60-b521-1fb579d87251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e553ef-3998-4751-bc03-a2cc9168b448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61d1984-5d44-4d9d-ba7e-3bd662030921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c0335d-45dc-4f87-9076-8da3e1bf7eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acfefaf1-d149-48bf-b621-b43eca88a10d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580f5d35-4ff0-4ea3-b301-6260b23abb0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eea7ec2-d6e9-48dd-8d0b-94f954fdb283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c063be-69b3-45e3-94e7-fa95126b944a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f9905e9-f2ee-4348-85fc-980c513ebf56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a87d730f-6ebe-4e69-886b-95e9f81f6c35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f470eb-a7e8-4076-83d3-a5da56ad6029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d74841-d558-4033-8239-f048d849aa0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbbcf38e-d9f0-415f-9486-6729e69719ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a57ed7c-a330-42de-baad-b1f5d622d8ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc8a625-75a5-4022-9257-ecb627715dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c79d6d6-469c-4b9f-aaa9-35421603c61a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03af6d7e-51a2-46c0-b687-25aa5e647bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c83de539-97a7-4d87-b026-87183f05ba67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7738322-b8d8-4dac-987f-a14a3b5424c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8429763b-4cd2-40ee-92be-6037a9a4c50c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7335f2aa-f671-4a7b-aeaf-206961d66034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2506b9d3-e1b3-480b-be84-6e0862ca88b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ff4a97-5c89-4ef6-a568-ee5720790d3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cda85248-38db-4dd2-a85a-938a357b0b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e103415e-7d08-4ebe-9a6e-e15daaf7e8b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee79e79b-a04f-4918-969b-ee159dfa846b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f6a74f-1ead-4f68-9496-309ad3bf0795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a76d8a19-c201-4fb8-a78d-f90092b724f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7038d7d3-a2c2-4789-a9f0-e5c597e69cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5038a073-1f71-49f6-8bad-a43a2a7489b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc7549f-dd4b-490d-9ff4-e333678cac34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--105695f7-342e-43ea-bbb1-fc2a0f3ae040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb69e863-3b9f-4be9-bc43-041223899c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c579fe4e-7194-488d-8d3e-b6d6a5ee89dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d0be697-ebb0-475e-afe0-610201d7e814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba4275d-0955-493a-8a6a-0f4321026890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6631792d-a15b-497f-8ebb-18dbf5ca8f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444a04ce-438e-43a5-9336-289d2952f0cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658d9c7b-260a-4f2e-b29b-3a67cbf87731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--274c7a4d-de95-409d-9d01-08a6654b15c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d539d2-ddf6-4cdc-bf98-ae0e6c2699c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe963bf4-06f6-4d56-a597-7eca94a0cab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92796bfd-f1d5-4764-819e-0aa9c44cfe52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d2edd0-9e2c-48ff-848d-8d4cda9186fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54fd7ec8-69a7-44f7-913a-6065ea08a2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa048d4a-3b50-4b3c-9468-b40a22e0b4cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9228321e-d95a-4970-bd01-fff7ecef5642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.96.55.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb836f39-b907-4f9a-8912-43322d7ac29c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.98.76.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a20acef-5e56-41f7-9880-034afd3de70c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.104.231.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8af5c73-d25d-4ef4-a7e1-c0a7db498c1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.129.25.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ccedf4-8d83-4d9a-bff5-1e7922b14219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.131.216.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--120a5607-cec6-4ba4-921f-d5d10d488c4c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.193.158.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa83c3f4-e62c-4331-9f99-790700632a71", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.205.16.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb3715be-0bd9-4690-bfd5-6e3ce0ceb070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.208.74.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38ce775-68e8-419c-96a7-6892f807041a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.22.238.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f52b18-2500-4a3a-bcb0-fa3ad97738e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.22.253.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09400afd-708e-48da-a028-7cfaff622bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.226.178.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5dc9c4a-e95a-43b5-b257-5d22e64b0c9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.250.206.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286a68e1-862e-4762-970b-01bb662ce46d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.28.79.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--074e8f1d-ddac-4536-b1d0-324640d4059e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.53.235.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--905dadd7-a5dd-42df-8c44-4e072332f3fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.57.9.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b96309-1b6c-40e6-b861-2aad3963ef81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.62.83.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71eae569-d5e2-4928-b6dc-82166f0c1c3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.65.86.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90162bcc-55f5-4a5e-a814-a9c9a0f2a301", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.68.113.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9183878f-9dcd-4ddf-8aa5-be56d77c8fe7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.79.233.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09aa6fd-e90c-40b1-b780-924a3076f257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.80.30.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90637d21-4f39-4e09-be66-ec08f0ddc286", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.85.240.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df43440-ea84-4965-8f10-cdcb55e50643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.127.175.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edcdfe73-88ea-43d5-b6cd-cafbb9557587", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.127.44.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c0aaab-042b-4f56-a22b-020d547534b1", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.133.240.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--736b876a-9987-46ad-9225-6806be52a8a8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.14.225.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f541360-c78c-44b5-a457-1115fa782dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.17.228.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49f45cb-c723-40d5-b117-e3bf1c8cdfed", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.216.224.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c7b8763-e4df-4658-9389-df95c0378236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.221.62.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c8132fa-90aa-47fb-b11b-3160d3457014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.49.144.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c42e25-7368-4a6e-acf5-95546a35522c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.73.202.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--129b0650-525f-4992-b6a8-c9a47e9d7b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.95.96.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88cde3e7-c34d-47b0-93d9-c5fd8eb70255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.115.139.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8623b73-f837-4f66-b9e1-194c7911433b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.148.169.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae9e257-9adf-41a9-b0bf-8c8939a225f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.107.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35fbc098-8590-41cc-b97b-f38db3600954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.109.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b498d2d2-5f74-42f5-8823-78adcb216c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.116.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba41ebb-1e5d-4666-98a0-04cef611a0b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.21.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d762840c-0bb0-4b4c-96d4-7ef9b173cc89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.214.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1328ab-da8c-468c-846c-922b5b290267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.227.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3785f6d3-a9df-4f3f-8c46-bfa4e4f56951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.231.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3ae391b-b4d0-4927-92f7-94edfce786cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.26.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e7c93b-136a-47ff-967e-1b65924f3aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.190.19.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d6e84dc-741e-4dc5-95e3-f346111eb848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.227.79.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3935fd4e-ebe0-4cf3-abca-7822d5c25653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.235.60.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a68c0b95-e960-486d-8d4a-a76104bc0942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.237.81.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1edc292f-bedb-4a9c-99e6-8673936c8570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a3925d-0fa4-4903-b0b5-c063a0f1f31c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.52.51.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3634f5fd-a1e3-4c5e-8a3a-2a8d762eeab1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.53.60.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2dc2261-d752-4062-adc1-79f4c0a3adcd", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '188.95.65.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1256c5f-8b98-4c26-baaa-a536d8d140b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.142.196.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0acbf999-f717-4ba5-b9c0-24ae44974c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.146.21.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cda7cc21-99df-4cfe-8d26-ef7d97b41f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.191.50.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f552b3-7d28-4122-92eb-dfae857e82df", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.203.96.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20066b3a-b7b7-4744-8460-4ab70dee885b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.235.180.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357a6139-525f-4681-80e5-ecf997e54043", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.244.108.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--292fe75b-0d46-4792-bb0b-6aa0003bd080", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.28.77.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1440e4cf-aada-4b75-bb90-4eedf4b78d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.33.51.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d373b9d2-83e6-4715-93f2-8218e18386db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.163.179.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aabd1fb3-4ed0-4757-9478-42033972e9ca", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.182.160.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--014b48dd-635f-4836-b243-85018e487f24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.31.32.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771f46a2-cf3b-464e-8c98-30e7bd067ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.177.86.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a2253e-ba2f-4a1b-9495-fc4285ffff21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.5.102.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d723c9f-bf3c-45a9-a7cb-ce7f459a9cf5", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.52.217.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec60b9fb-cec4-447c-b0cd-9949eb5bc73b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8380fd3-09bb-494e-8b33-1267448660c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba2534ba-8bd1-42b5-ad67-20703a4bcd6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.159.99.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e05af24e-3bba-4ac3-b12d-ca045cab3f84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.161.49.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--668665cb-fba0-4cea-974c-40068973e70e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.226.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf216672-354d-4f06-bce9-6e014b85d44b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.233.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf9a1cb-9160-4774-84b3-b3e75c626ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.229.81.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09524fd3-212e-481a-84a7-4f2071f62492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.229.81.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a011ad-adfa-4a7e-bc33-d7c991821b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.229.81.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f930f0b1-8769-4419-b080-9b854f750b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.229.81.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6334f1ef-ffc2-4a23-a9ee-5db66ad1fcb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.236.225.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c717bd-a4dc-4080-be35-30ff7bfceaa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.130.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064b6c8f-c4fb-4694-a231-adac262f2eab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.248.150.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--300b1da0-acb7-4fbe-bd33-3cd9f15ac477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6542393b-37c4-4131-8b2e-391575dd1b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce0e8e44-8db0-4fb7-95ed-c02b54f1261c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.1.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f2874f-7b2d-40b2-9af9-fb447c481837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.245.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--688c2089-8be8-41f4-8173-ca7dba2972ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.34.57.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdbf3b94-5e92-4402-bc96-52c2548f089a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.71.30.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a44b2f-8fc8-4478-b73e-40ca0bbaa453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.132.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874f78b4-2361-43c5-a37e-3053334b1150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.218.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2c635e-2ed7-47d5-8a9b-a4fcdc27379e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.118.52.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd8023d-54c2-4855-bc51-566e4d872d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c25574-4c87-492c-906d-34afbc889e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff3fd53-9dbd-48e2-ba5f-70fc6e13ac6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--494bb863-0b8b-4071-a4ee-7f140910180d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0b567e-e22c-40cc-abda-0e6cfcc27747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d86d98b1-e65d-499b-8167-915a946d0f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1753e097-21ce-454a-84a2-ecb5e671dd20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5748af8-1ec4-4b61-b138-38e5216c3780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d0502ae-cdb2-4ab6-a0bc-3729531d1c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--251ee434-a12a-4baa-beaf-eb54e11d7f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de225853-ee76-4f97-a17f-19411e3dc8e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0da526-c658-4d86-883a-c374dc1b1ae3", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.160.224.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ddfcb9-4ade-4020-8973-5e976b13457e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8af92d-1278-4fcf-8356-837ea59fa329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d287532e-b588-45d1-aa10-0ff9f53f52a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b824b3-ca93-48e9-9fb9-8633691dd833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0cb9ef-680c-41b0-8b18-02611d1ab3c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9159110e-04d1-47ea-a9f1-ae4999a35499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b4bb510-16c1-49e8-8e0a-71ce275fe9d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f2f8469-937c-4710-8273-e2a55a28db96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--311bcd8a-655b-49a7-adc2-3cf8bc65d601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b901ffd-2ed5-4ace-afdb-27bf2b3174bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba940c65-f63c-43ce-9826-9a896eee229d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65e5b9e-5bce-462e-bd31-28f9d5ab4253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31db3441-d9b9-4b3b-a3aa-04969debd3ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a39a45-e471-4dd3-9f70-b67f320b392e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78b8502-b6db-4eb2-8f02-0e066399050b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c849f9-bec5-488f-9c55-16d8d0666a13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be4fb31-d91b-4b19-afa3-fe53e90ebc16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e998b1-c69a-469f-8a26-5c8545464711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99afedb6-c689-4b63-bec9-f739546660c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3919479-0210-4528-b264-1dbec3d2df2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7af6e8b-f10d-44f1-b4ad-2f2d943202c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0318ee-67c7-45e4-b6f1-4b1b5c599686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b78cde-995e-4073-b0a9-ad9af024ee8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40ee30f3-5f31-472c-b622-55097f6b250c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ed7332-eff6-4a87-a2fa-9d750a52cbd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0461b545-44c0-4041-a11b-88027889835d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa79c73-a736-468b-b4dd-9e0ba3105d05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f4bf3f-ab5a-42a4-bf67-18177503a818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ddba85d-bcdd-491d-a51b-9a63412791e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9393d8dd-4dfe-4000-8f23-cf28e16194fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d7ed60-79f8-4109-badb-844c35e2859f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b6cbe67-79c6-4d3e-993d-a58268dc15f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956f4ccb-22ba-4d2b-9b36-401df29893a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c69832d-a03b-4eca-889f-015d1379a00d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8abf21a1-a434-41f3-b701-168f5d243ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1281b029-3d15-4c9d-bbd9-4b96f272b34b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4bd0051-d58f-480b-8a96-bc1116b4ba0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecba38ee-3539-4f7c-9ace-bff7b03b3add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677416c4-d328-410b-9994-d866e5fffeda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c24785-1c2b-4e3a-a3ff-a67889b0f879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a728ab6a-957c-42c2-89f5-9c1c5ab9161c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd788c3-b245-49f8-b5cf-dd25433b546a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cffac8a-1ace-4340-931b-27d77bb904ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6775b4-389f-4838-ba9b-8cff0dfe4d57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6f19e1-9281-46a2-afb1-7fb505c7fd32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5673e12e-0122-486f-8a0b-e0d5ba3dca1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8fd9d6-fae2-4e42-8419-c1cc997063bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1540980e-7b68-4d5a-b20f-a7d34a7f0f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2a2145b-a361-47b8-89c9-76f2c7c8dd9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--841199ea-b292-4179-a81c-db156d0de297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a4483e-fce5-4ae6-b607-9ace1491671f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b9c89d2-8b8c-483f-bd5f-cbc350c96408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd31490-82a7-481d-9c20-b15fc8942667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--743a312b-8d08-42bb-b439-acac2fd5c30b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f04466-a402-4d1c-92db-bed796136311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135928da-0ff8-4fd6-a7da-371e56f9fa86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4644365-2950-434d-a09f-bf98db315d44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--266782c7-c477-4f2f-bb82-2c9065d201f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--714aba11-6ce5-4d90-aa49-4b5449e97430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e407f2-7b67-4f38-a95a-714a2043960d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.95.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--719d1d31-8444-43db-a737-f8838bb69a05", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.183.87.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255b720f-531a-4b87-b65f-5dfb62f059cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.227.179.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2380e31-471e-4df0-a475-dfc5c7994496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.23.209.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e43549c-3186-4de8-b4de-10c3e7c7a8a2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d04ab2b-2779-467e-8397-0b5ead53dad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8109c187-9c77-4b86-981c-81d51627114d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--155397b0-f190-4d05-98e8-8416f2df4b99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a3aa29-2583-4c1c-ad65-f505c7045785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e173fe8-3570-4281-a2f5-a1fe8162cb12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.25.217.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f0e305-f402-41c2-b547-f591fa7cd744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5432cd-6fde-4632-8c6c-fff1ff90d360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--030e7463-6ae7-48e4-a67e-fd2930f2ab09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7137011c-ffa6-4eb1-9aed-df4002b987c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2e2f5f-8229-4530-83ed-23bc6a8a1eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af061f82-b8d5-4943-8ae1-9a1871b2e68d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be12b76-6790-4087-be17-4379e8918cc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be9e5b38-5381-492d-acf5-4b2a6283ff79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.43.224.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ae0fc3-1df9-4d5e-938a-978b3ae2fe50", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.255.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a048ad69-29db-43d3-a511-8cb9125bd308", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.47.62.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f4195bb-2cff-4c58-9273-d8066d94ea2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.90.12.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cca568c-bac3-43c8-8c72-eb2484f76bad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.110.115.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a1fb9f-4b62-4021-b372-4cb090508cc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.15.52.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9194b0c7-f9b1-4f2b-a625-f48b1e3d2e92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe78983-e48c-4d4b-8212-d1cc11293a80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414d8325-a373-4f35-8589-2358863d87c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e263c18-64dd-4fe2-be86-f9515256e47e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--687cbb48-9ae4-439c-8736-b0faabdb18c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240fb64e-0f4d-4c76-a340-9069d3d3e2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04bc771-e992-421a-8612-5f8aeeaee0d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71192cea-1f5b-4114-858a-4265ec7f1a13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--403f3cb1-0f1b-4f65-868e-584b874fdc74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228cf7b1-b1fd-407a-9f91-f893622b065c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c136a1-b47d-46c5-8e08-fb1cb7cc7858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26465523-88a9-4ae6-9833-3d645b5d2143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eebfd0f-187f-4c6d-839e-a02bbfb845c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562f39d0-acdc-41e6-b023-17483cc5f9f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f311ac-d279-42e0-b7b2-9dd47a99560f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1093d7e8-3407-4184-85a9-11dc1faa3559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f60118f-7243-4056-aac3-d55e0ee44e2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba843812-9124-466f-8b72-221c4eb0ef12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb99265-30aa-4e3c-8e36-beb542ebe3e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f038836-4aad-4f46-91cb-ec5aee684fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af71cb3d-88f6-4b42-a039-243c482385db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9508fba2-ab46-4394-a33b-65778260b0d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e42eed29-f290-42b6-8854-6c43c97757a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1944d238-781d-4330-b32b-0e4fac2a9e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.24.161.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30ae95e-5029-4586-b7bd-23fcaed5bda3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.32.140.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5ccbc0-608d-4400-82e8-b86bb6a8f241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.16.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b472f5-a2ce-4e21-adf1-2833aeb429fc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.61.40.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2fe1f97-ff6c-450d-bec1-e5f7d78d5cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab76f81c-8332-4047-8e8a-bae68a412eba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b0603cf-6170-47ac-86e9-0f630b64f58e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e4ec14-9f60-4e8b-850f-242084c3dc7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda48543-ce19-4f78-aa9b-cf02be33ebab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689b575c-d9ef-48fc-b00b-3ff2d2f5549a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba0b770-e65f-43d5-a6aa-173cc951fa3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5732209e-c245-4d64-bfe5-57f808ac7335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--741500c5-d258-4ddc-a771-d59bfe52e347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee1e7e6-4c53-446f-9a6a-e01db08f0e3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c866a9-48f3-473c-a9fb-60377b58286e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.92.50.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68e2bea5-48a1-4f1c-8578-6c50b4261eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.92.50.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aba49e7-a6d4-4187-a653-c4b972e03812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.123.210.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212ccbd4-7fb8-4727-ac38-6951f7dfb1ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.133.27.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b3fa36-fe33-4629-9c50-38bf70b217a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64e3e86f-63eb-4f7e-90ec-b7ca8bada941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.149.108.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae09df2-3d58-4130-a059-f4b0716d425c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.154.48.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5219f1d8-c953-4c0b-b9a1-d43a5d9e331f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.154.59.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ad111e-87f9-447f-be3a-19e5c1721a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.158.16.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f3e5759-3be8-470f-9ea6-d01ffdb31295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.177.94.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e78025-9d9a-434c-a895-3c5b393796ea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a174b049-625e-4e5f-b39a-1708cc135f47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd3feb1b-1764-4ee9-b7cb-1b0010166469", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c65838-9952-4409-be7e-508ac4235449", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1d60c4-71be-48f3-9559-3e662792573f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aaeb588-c0f2-442f-847d-752c16ca12a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66000558-b635-4ae6-b524-346807c115a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.182.16.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c2b3be5-b982-4c2c-8591-73c47695c8eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3727d9aa-54c3-489f-9896-dc5a1239513b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b5774a-4ae2-4e94-8d07-c7ee89b4889f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c17fe27d-fad6-4663-b183-960219d7698a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba58ebb-1947-4dfb-8920-a5fd309f5151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1a5de8-3af9-4967-b606-9485947a0d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f05223-a108-4ee9-8aee-64f424bd241c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb7d31a-6cf8-4499-a33d-4d9a43c16bd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eec7b7e-d8f6-4bdf-a6ca-2d607eeabf8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad94ef4-680e-44ba-aa90-88e9dd41037d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--881e6d6a-2448-43c0-b73c-9dabaebcb072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65426dce-e9a6-4133-91de-004a934e5e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37d74b2-0065-4351-8d38-3bea635fa7de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9509f5-65e3-4747-9022-767f2bee7d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad795d1-dd69-4f2d-8833-6cb6a407e083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e5044e-aad9-4192-8502-7d95b129fa96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd090b2-8e5f-4dcd-8839-a6c16e30bd59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e527b3b9-f5f1-4bad-b454-c8f082722299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4fea0c-51d7-4fb7-975c-3717840a3f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f675faa2-88c0-484b-a1a6-c728f5d2fe50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e4de851-38c6-497c-ba9d-f0787ee2f6ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696af0fe-640b-4be2-841e-c262109894a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb2437a-b9ce-41a7-8c4b-007ab4ed430f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a3299d-8e07-4673-b3d0-c74e5bc2eb2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90524dff-306a-4230-9e95-7a9667f4ae7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f6f3d7-bee5-467c-adc5-d9d682cae85b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5db92e-f1a8-4b5f-bdbf-012b605a12f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d9a2bdc-f116-4872-9a48-581720c31117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41293cca-27cc-4654-8b43-d3bd4dc0a28f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--091e3bd5-2e74-4c3f-a0d9-48d5fd46bda2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1291dab7-3f58-4fa1-abe4-8adb2844b2bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a3474e1-4dfb-4edf-8b27-c65866f592d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf20d6e-b89e-4e35-923e-35f68825d574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166eea1f-63d7-4f8c-ac43-742593989352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0369e1d1-ba37-46df-85c2-7dd72d437f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab9fd6b0-1697-4dde-a9c7-bbbb12088474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb10a72-6b65-41a4-b48b-d7ef51c880f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14de34e5-5c62-4cce-932c-f2752fd1251f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74de4a3b-1b01-4270-bab2-acfd4cc79a35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d47d60d-d0b5-4a20-81bf-7ab7d76c1d6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea83cd4e-8ba5-4611-9bea-3e7592662ec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df2a2da-01ea-48e3-be64-9e51edb82ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0efba5d4-118f-4580-a8ea-fef484d1fa44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37883de1-0a22-4054-ae5b-ff5cc7727f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d8da29-dbb7-4cb9-b99b-e78384757db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a5b766-4b94-4953-b58c-6c2e2ecde473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0f8887-b0c2-49dc-8721-a78f3ced6ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0bc5a02-cfec-4f73-bd99-b2ffaa0cb301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb442dbd-5ee3-4b61-9682-6a41cd63adb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e474bf13-4282-46ec-801a-88e18ee21a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e51a69d7-8697-4fca-9086-a63b2a773b99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c39c738-c050-4777-b8d1-c4e800486e69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf59b9c2-b7d7-4ac7-9db7-fe3d2b710d62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c26f333-6917-4df5-ae50-f033a2421e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b35732-ba26-4d9f-849a-aef9ac0792dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c41f67-7fbb-47fb-918b-859a5fa8174f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d32dd94-2b52-434d-90e8-b8bd376ab6ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8897d54-fd05-4732-8878-b7aafe523038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a23945-96d5-4f77-98a6-e4d180d209d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c6fd21-9d75-46d0-bd5b-98ad347a0ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d334219d-df54-4030-87ce-68b64cd6ec5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3336d2ed-0d8a-4de8-8817-0b00d75411fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e0df13-3eab-4de5-8f31-3725f5dda9d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb1975d-9fb3-45b1-8ccd-e2141d0d8bf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee5eb98-47ce-4758-9c2a-cc68ba9a1ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f66f68-811e-440b-a860-7806d042fb40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2966252d-03cb-4982-927b-e11e30a89fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d0cf1b-a2a7-40e9-91a2-bdf02500530f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0de6ed6-f459-41fc-adae-c85a4fa129b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d4c8b7b-df84-4c2e-b147-61d277063db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee14623-0845-4a40-91c2-50a90b1c7656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b58e79f-906b-4790-a5d7-5e513188074e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924a6d41-0a36-4b96-8c95-9b675f651ac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced1d87b-c044-4125-8fcf-003b5b2633e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c78eddb-8fac-499d-8fc3-457233af06fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749174d0-383a-472c-9460-f703c7fd666c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f12522-f74a-4502-b1a9-b8e6e05f18de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--250cb467-2323-4e64-a21b-91a6b0d336c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4df98a6-3fba-43b7-891b-1a9509481fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a523ed5-f91c-45c0-9db3-c0c8d2c5be3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ee8e83-9fa0-4909-b8c9-e8fd44685774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.222.59.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d112b8-853c-4931-b36d-4045af72826f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.250.79.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c381b238-d3e1-4788-b37a-b0032735432e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.5.84.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f91200e-7230-42c0-996f-b3fae180cac0", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a7274e-6d7b-41a8-9928-e447fa7b334a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d893207-e553-4468-bc2e-9f158187a639", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.189.185.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cecbd4e0-637f-4012-bf8d-dad39d68260f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.217.240.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d50c79-8ce3-4765-be65-2ff25400282b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.3.216.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cadf7f7-4bf3-4fe7-9b62-2967dd665fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.1.11.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ee0db9-b43e-40cb-9811-5ef185b8f365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.158.62.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d11c50ff-8c0c-4002-94e4-e65b143eaf03", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.205.37.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f16a5b5b-eb04-473a-9058-ed537e2e4e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.95.84.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f10bf47b-23a0-4fbd-b4e9-26a190270b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.177.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1489252f-6b9e-4bb2-b8e6-2dfaad86b886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.74.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea765ae-a50b-4fa2-9a7a-86921ada762d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a56e0d-caaa-4512-9bb9-77714cef46fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2605c5ac-704e-488f-a39b-1bb16add2fc0", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31797419-a507-4ae7-94ad-cc294f223d18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b13dba48-f647-42f4-bff5-88a9e44e2306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad662976-5eaf-466a-81bf-c02dd90302d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe732ad-5ae6-4e6d-9697-d2aae0d9639f", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c21468a-44c3-4f69-8af9-a1cac6fdf423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--988a89b8-d0a5-4a08-8e2a-04bb2fcf221c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c971ecf8-6be4-460a-81f2-4ee0cb1e9f24", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b2e33cd-34b6-4298-9955-adfdda16dd2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f0ff58-cdaa-4c63-beb0-954c3bba7de1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b2a2bb-66dd-4421-b164-4854f4bacc7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e17f94-4287-4068-852c-e481b8735d05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--637d7ea0-779a-40e7-976a-891c795a53db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f9378a8-74f2-4ee3-b34e-67c6cf647b88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7dcefe8-2855-43ec-8380-9090cde92348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4271d855-c4b8-4e2b-a901-38955d460ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da4f9baa-521c-4ff8-90ab-f01a1a4d5a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769acb74-da0a-4124-9141-4b6848168898", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0083438-bfaa-4604-9a17-480685efdbf6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa61feea-d042-4505-bfb0-48495b619c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa8de7f-89f1-4160-8384-3c5d5a07ca0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4254e3d8-419c-4b46-ba6c-877fa46a0843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f69501-4f06-480b-b976-bd1747b2b272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--908c20b8-2f6d-4d75-9853-ed9b8c03e933", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e40b6844-8922-415c-9814-c2373ca55323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f8c880a-7d64-416a-937d-38eeba57668c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe026521-89d6-44d1-9a45-6aca872bb6a7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49212667-81b5-4b9d-abd8-d9d0481e06a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af0d6c3-9cd7-4867-a94c-31b4ee02ae47", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d97753d-e362-41bb-a6be-b2754495bd4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8007169-5129-4312-8988-6e0848344136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab46708-ea65-4a7b-a6ea-31b89e588af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24172f62-e24c-4a48-9c52-22bcfdc92454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b2c5112-5bc8-4582-8dd4-7557ebd245db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb04b3b-2c4c-4b85-9e67-ea2fcf550d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5aa6352-89d1-4556-b371-4391c16062bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a843f2fc-dbd4-417a-b7f0-ed38f7ca723c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c1c2e1-bfb6-48ff-9ae4-b6351ce9efe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e28fdc-b1f6-4fec-b288-b1801515190c", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd398df-38bb-4ae1-a518-daf247ad19e6", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5215a070-252d-404c-9de3-391fe57d79af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb98db1-6767-4046-997a-15b3d620a969", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ae639f-be06-4944-bffc-ace7e649226b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be46f83-8d0b-4b24-af8c-5c44aa35e8f3", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d76b71-5234-478b-93a5-04cc2acebbce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b249143-0623-4445-a6cd-af92bbc3498a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a1af84d-27ab-45e2-a428-1e4c65b2eeec", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4762dd1-19c5-4d05-a315-0fe588e60ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e9fbf0-b575-419e-9c85-c9e61c2d1865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04385b05-6601-4a5c-9e73-25d81d259fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12755e23-5ee8-4547-8269-5d85a533b2be", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f09c56a7-ba9d-4ec7-a7b4-8840044a01fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e1fdae-831f-4b46-b00f-8a51a0c54774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf1c5e8-54eb-444b-a733-dbeca323c616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f07a9be-699a-460c-9086-067c290d0998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b605d3-1df2-464b-8470-61175935c8e7", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e272cae-db99-46b1-93f2-1d4aea23f577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a65d3f-6553-40fd-9ed2-b1c70f887c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67126240-172c-4c4c-b16f-f3a7ecce3dd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea061b6-e377-4d26-bc80-c4f0f9b4cc2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7039ca99-450d-4d95-a2d1-14e75b68a738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b53687d1-a2b5-4e33-b22c-0a8bcce1a875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e4be38-6888-418c-a090-00af4fbb2b66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d9b87e-8b3d-4f70-97ce-bf076c3aee90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88fe032e-7f53-41cb-9109-af257227d6c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a698c117-e53e-473f-9004-c643065ade94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df99e2e-9e70-49b8-9e06-3dbdd8b3ee01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac0e427-82f1-4e4d-8006-932d962ef2b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8853459-1231-492a-aed4-2712561bfbfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b8fcf54-b04e-48fd-b926-c88f29921ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e33e167e-1c8d-41b3-b14c-8dbe93778d99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--786808c3-04f3-4af4-a63a-810ca5ea6f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8665d785-63c2-4724-993b-6e1988e603e5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a6a7e3-edd8-4f15-ac44-02274b872ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d05537-35f1-4377-b4a1-6f67bfe8e666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e11346-745f-4195-8fc8-b22d1a3abc92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1009798-a1e9-473f-8eef-70e43d7800d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--685da8b4-1da6-4493-bf09-f3173fde0583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91a958e-9179-4e17-ae92-2fbf33d9045c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083dd691-5522-4941-8c15-94cac52f5a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d2737e-8164-4d2a-b0c1-3794d77b0cd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496f9757-1e18-411a-bb75-45f578027567", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a822cb51-f58f-420a-8641-5b55774ef042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b263c23e-6982-477e-8c9a-079f42b09a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36863c11-a328-43b8-9caa-fe7d2e75ba8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a99177-85a5-45e2-b485-f9faf2c5b79f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2cd0eef-9072-4461-9843-e423eea42039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96da4c92-26eb-4f69-94f0-a56b82f8a504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781f51d6-3798-4181-bcf9-2bceac504098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e4b58d-216b-4cc3-a5ab-b6e9c2fe0cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fadab0c-3b10-40b4-b8a2-b7cfee3015b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--906accdc-7356-48c2-9cad-f157bfa809c4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70399272-c91e-4b7e-a8b8-1e19c5525b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd22fd8d-504d-42ac-a658-6bdf18d4388e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be1057b-72be-476e-b606-bc5ddcc5caeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3023f9f2-2f2b-4b17-95dc-179221de7915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e20925-d5f7-4462-92a0-64182604dc24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f969b8d-55c8-400e-a071-dbebe9a56ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--831aa9c5-9057-466e-b335-8414903f4e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8691dbfc-391e-4c4d-b2e6-b07c03bcc6ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dad91fe-5c09-40d2-8c5c-bf8f1b405f43", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b93e66-5fa0-40d9-ae3f-01ba2367e4b0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d1ababf-2822-4f64-87f0-3c4503510f7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2cdf496-2c44-42bd-80a3-97e4a2462011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a5137d-8661-4d96-86fd-65dd64161195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76bb11e4-6bfc-412e-8fb1-2dbd96c9dc9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d22a963-09a2-4cf4-9566-d55ccba145ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e446d3-ce9b-4316-a519-ff280a0c2a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9fbea7-2de4-4a73-9937-e5a351b239e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15adbdf8-0560-4f71-b166-6061dfc0d24e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5177227-3c7e-4336-adb1-d20875b79ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294b27b8-ccc0-4dbb-8e61-025e67fd1012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996ed72b-9e2f-4c0e-9f30-f89269b5170d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--634f555a-66fe-4f22-b2ae-9f1865a2df16", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15bb5e2-d563-43ba-9329-be58db58d032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53ed74b-d923-44b5-af44-c8b4b3fd040c", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6191e9f-baef-4b09-9ecf-d646e8d39773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06a3d97-1397-40ff-8f75-0ee6fbc7278f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63fae94f-73a7-4879-8eed-d52c98a60f50", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19fbb47-636b-4127-95e8-54148d4c9000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6e207a-e526-4ca2-86e8-39e85f1d06bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e0e07e-f31a-429b-a91b-76ce2b3d6865", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a10e775-548f-46a4-bf2c-9750207713b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a114bc15-6b1f-426a-9014-f91ddf99a8ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd82ef1-d02a-4925-aa2a-efe50292fe24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cee78c2-1632-4118-be1f-0af8d333d88f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.50.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d12162-8328-4b40-8bf1-435f3586d09d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.57.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317160e2-0935-4ef1-b332-cfc36efb6659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25626aca-8847-44b0-926b-5946d15b03ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--178e4436-06bd-4125-b653-f089929a6eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce13324-7740-4ca5-bd66-2b9b1398007b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5fcec9-f982-432f-8219-87902ef124fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc03cb0a-165f-4967-94f9-ca735b5a794c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822b748d-26f6-46aa-8f89-5f029210c980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d33f8c-bb4c-4265-8a4a-fa0191d2c93d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc66dc98-0e40-4723-8449-c6f2a7e79773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.48.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aff2eb5-cde1-414a-880c-65df6b75c4b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.58.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e31a4867-e5c6-4394-a3d1-c319f16c1326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.195.252.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac663f3-4bc9-422d-aefa-2ddc7522cad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.231.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c8c0112-f23a-43e9-b60e-c6032a458b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2737a4db-e5a7-4c83-aeb9-21abb745ceee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb96070a-e569-4d78-ab58-8939f31a2044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65196f75-91fd-4040-8b56-ebffee151e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff5abcc-e648-400f-8a99-67ecaefe58a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c74b54d7-4c94-4d8f-895a-4e125fdb46cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c84042e1-c2ce-4695-8266-b79b35cb669e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4db4d60-3d92-41dd-b400-0691cf7242ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a187c7-2882-421c-b3ef-d7a696916222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6018e76-cd10-4e51-b4e7-8e5df84e5714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9160d2d7-4c92-41f1-acc5-0f35260d0fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efaefdca-81e0-46a9-a9dd-291303f2fce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3997c8c7-721f-4983-94b8-a448c99604e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4874f62-11cf-4efb-ad57-d096054b0c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6622a0db-3b03-4e90-b279-875c8ac1ee92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69596178-8bd2-4d43-bdab-bcd3d03433c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ec8047-3737-423a-aa3e-491e9f1da6fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--397ac733-34e8-44ea-8554-a0ce08ab1712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ac1cec-3647-4108-8689-e9af0a7d4fad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5976ab17-7bca-47a4-b9e7-d97e2c2f617d", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c875f8c4-dceb-4135-812a-b5aa1ded729c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64e09e8c-4186-4341-be8e-f66d69b9b6cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5501f12-da1b-4703-bac6-eb56da45dfba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--552b222a-817a-4605-a23e-075d32a88135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d96c5b1-97d6-4d4a-8d4f-7790ec63497f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.27.153.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37641d9d-0b2a-4bfc-8fae-667512c4db90", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86902854-6d9d-46b3-96c0-05db97cf2b3d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043c14eb-19de-4f19-b7f6-c7b756e7e1a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e00a1d-06b4-4968-99a8-f61ef5de5a63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddfc605d-34e4-4cd6-8c3b-477a951dc707", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709e5222-a53b-48de-8213-0fe861339dce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.17.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83680346-b129-484d-9d08-df446fdf0610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.17.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a01a6e-f00d-437a-ba17-d719dd92cedf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.17.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347c72a9-e511-4ade-b251-65e517690f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.17.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28869e11-b515-4edd-ad04-19fd8fb9f822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.17.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50e53881-e321-4d65-9734-2bb28654c174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.17.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7007a00d-4e9e-4911-b23a-6b6e28d9f5e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.17.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625e7e17-0efa-41de-bf82-654fbc0bf524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.17.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b49f50-e89d-4289-9afe-5c7cd3c5077d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.17.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a945f7-efb3-4075-9086-e50aa70a3d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.17.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d855da53-7250-42e0-b0b4-c0f904a44be9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.17.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1395026f-59d9-42ad-9190-5e4a02997f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.112.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94b0fb41-b595-4b86-b1d0-d5740a310e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.117.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e4db8e-1c92-49bc-a96a-65543377226c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.19.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d609a51-dd6e-402f-b49b-a275345ddff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.195.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d205133a-c3ae-4e5c-9059-f507578fc753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.195.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66420dc-a360-4e4e-8b17-a321526ea565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.206.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed4da7c-675a-4028-9ebb-74f195ee5c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.213.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2843468c-509c-4d56-ac57-3e05b214d8d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.213.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e91a6fb-a345-40c2-9ef9-7978916aca0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.36.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d25f7090-19ee-4ecd-8a3c-9714f9a9b19e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.39.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16209542-2927-4c83-91c9-d70075fed42a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.49.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208a2c6c-93ca-4e88-a68b-2497ad07cc01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.59.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e831a8b0-1edd-403e-9f05-6ec2cc3b1bc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.109.162.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--265b203a-0633-4c40-8a26-d8f3087823a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.109.87.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ff7183-3a0b-401b-bd9c-2df2b7c01fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.100.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82945118-e44a-45c3-a232-6a075c3b2fa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.50.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8a95d6-acdb-4d4b-8091-b4d61d9705af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.204.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99c10acb-4851-4ffc-bad0-4638b7def1e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.204.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a99d580-d388-45d0-9932-49d0db579a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6108f772-b1ce-4e67-b2ab-8572e1deda95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.210.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcd3bff4-6397-4586-8f96-4843a24f8fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.249.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e09dd95d-4069-4d16-9082-e9259a1f8228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.250.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e1e9cf-fe6d-4d52-ac4d-de529278a2f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.27.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d15beec1-e009-4276-9577-1b00cb666805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.84.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25496c55-7db0-480e-99d3-e46b3d0097f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.242.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f9c7a5f-6e08-49e7-bda3-fbf11ee11c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.242.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00eff2c-aebf-4158-bcd0-e66350d508e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.141.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6fefdf-ba19-446a-875a-4410c9fa5a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.87.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42aec68c-7ed0-442a-8158-b7068248cd59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.87.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a753eb9b-bf2f-4e59-a31a-037d707f1266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.94.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb29508-5c9c-42c9-baac-e5689e757768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.207.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ddb299-a553-4b6b-a8e3-888cd18b6472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.74.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07aa3c5f-c9a7-429d-afef-fed8f54a2760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.74.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2d8ede-5b31-4ae7-ab5d-97f430d5a5ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.92.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add0eaaf-efa9-4e33-8e14-572bd2d5c03e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.92.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06035ff6-c240-4451-80e8-d411e8421dd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.93.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042ae120-9410-4461-9916-dfbc5ecd7230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.203.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea68c63-5b0c-4752-bb7d-968e4471c64e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.224.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b74228db-3293-4b54-b0c7-eaa126d16eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.228.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e06f76c-f182-4472-b92e-21db65964444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.228.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f4b76b-61aa-4820-9a04-1fc7cdc503a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.197.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--437892c2-7962-454d-a73e-04bf8abf029d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.197.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa3f2b2-393f-47eb-a3c2-c17a37cbfb2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.197.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2991416c-d85c-4b11-a544-36f78e7b98a2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.151.10.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a955cea-d0e0-4451-ad3a-612976dc26bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.161.58.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc024494-0b8d-4f35-91bc-69cbc8de4ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.1.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0477f54-5340-4360-b5ba-bab6ca9615cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.11.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c499c754-8815-4a0b-86f2-8ec26bae88c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.12.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336009bd-9564-45b2-a97f-3127e672dbb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.170.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77056832-6246-48e1-934b-8225a0abc9ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab29ef8f-46e6-47e7-80d1-462ad10707d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.38.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f46eda84-d4b7-43de-93eb-f3b46a481896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.38.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa88ec7-bfa0-489b-849a-472ef6ea03ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.10.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eafde6d-e705-4688-a992-86c5d6c4e3c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.10.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b187439c-af0f-4653-91ef-06b9461fb211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.10.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f7903c-ee00-4445-b2b4-f5758e5c9c1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.10.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82ebb8cc-4e16-4258-9bf3-173c4359d73d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.11.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e015229-f4e9-4e10-88a2-8b1fe64e5255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.11.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b6cba15-b739-4db8-bdcd-3838b9b27136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.11.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b1d234-6aec-45f2-9ccf-63ea38c5308e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.116.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202af74f-f5b0-4de2-87b3-b6737443902e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.117.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dcfa208-3317-42a4-a1f4-432c3929301d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.117.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3188db7f-3828-447d-9606-30aba9a45b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bff6dcf4-0fea-45be-ab7a-44c1b402a055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--092937a9-3d59-4af3-8102-683e76462af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.156.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac531232-fe42-4f72-b1f8-af4e3d065bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.55.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b582dc-376d-41c2-a208-31e1d246101b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.88.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4146bd80-b1ce-47d2-95c6-64f0bef09d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.10.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec7c6dc-6152-4bbc-a36b-78c82167d29d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.11.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7f94b1-da39-4915-b38d-88f416e54f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.193.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be53a39d-6fd4-4137-bfb3-51d683c79589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.192.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76cb7e3-bf4c-44e7-b8ed-6f1de91a3f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.67.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6d7d75-6ad8-4e22-ac8b-4784a1fb72c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.67.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67bcb682-4542-4e8f-8af0-0e6460680f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.67.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f93f1a-65a9-4985-9549-ccbb4e23e95a", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.21.128.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0485fa76-4ef9-4e9a-8ea9-968623f739d2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.214.149.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--970bbd1b-7f20-48a9-a936-9dddf86e3957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.64.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb7b14a-8619-4c36-9e93-1c5c37f7bc84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.64.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea5141b-91f3-4c00-914d-bf6657bfcefe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.74.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df165d6-a151-49bf-9476-080cccf63f21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.74.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c214a61-83b0-423b-819d-b5f4d4fb9b72", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.230.33.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf0d2165-f8d1-4698-8bb2-92f5d419d86a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.58.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9876d99c-ddb2-4830-965e-4db26bbc666c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.59.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f40d34b-cc20-4e54-9360-d8e62b582c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.59.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859bf0d6-2728-4a19-bd1a-23fadf60d9a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.59.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d74dd596-940d-4f4f-bc62-656230a83530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.59.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0161ed5a-62ed-429f-a27c-c24548a11687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.212.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40eea41d-9c7d-4110-9884-627419520612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.213.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ca02f1-5a76-4358-a454-dd0c757daec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.233.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0d37d3-5af5-43f8-a36a-ed6b2c1aeb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.110.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1331eba-2259-41b4-a946-3ca7c2c5188e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.114.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ffa3c82-cd2e-4591-8760-22f813d53f53", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.84.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584337d0-d3fd-4388-afcd-c1bda6f6642c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.47.118.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4316408-3d15-4b08-9436-efbb0f8e03ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.48.238.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d9b9aca-97eb-4be9-b43e-dc83beafa938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.229.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628131a2-cbb7-4069-8251-c62247f2e8e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.230.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce6996d-d909-41e7-8a1a-ca279ac1a8ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.239.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb693101-cb00-4860-ac4d-62cab1177b0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.44.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5804b8-7218-4efa-9a0e-cfae4c6706a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.52.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6cbcf9-8204-4e62-b04f-a224327d5aba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.8.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5c07ff-b5bb-487c-a484-83b53fc2d7be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.62.197.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97da6497-1481-449b-868b-cd08fcaf18cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.96.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bffe2092-d215-4330-937c-fe7130bd59a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.97.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21083830-b98e-4763-936b-c09ac5f407f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.98.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb7f0c9-27bc-4564-aab5-06706b7f0644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.98.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ab19ff-017d-438a-85f4-719de17dee06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.98.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a705067-f9bc-4f9b-bdae-c18b053fcb0f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.98.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd58bf1b-b23c-4097-855a-f4fdb23cc087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.146.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a379b6-ff10-4156-97fa-a2853026c2d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.146.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79398e0c-f688-4eda-bd46-c18367b326ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.177.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce58b89-8b35-445b-b684-b9372aa46539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.177.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c9c1c3-24f1-436a-9248-32346ac635e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.177.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f591778a-7e07-49a9-abc6-d263e4878bba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.178.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f48e21c3-94cb-4a16-84dd-0196f328ee18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.178.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a74953-5238-4e33-86f0-9af7c1365f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.178.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a24a2c-8d61-4128-8fd1-d61a4e5408ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.201.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--283d402e-07a6-4992-b6a0-1a2e6ec10bf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.201.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a71f1f-c6a3-4ae1-a320-b823c13608dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b68c977-4d6f-4b0a-9e0f-ce0d7b630323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4095a076-0e02-4084-95a0-1997c196d801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec1b2569-c96d-4f1d-873f-16eae3239369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e02ed1-b52a-4d9d-b273-f8d3d2ff5522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.101.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2263bd52-fd8f-4cbe-be02-549635fc41ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.110.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dfc7062-f46d-4559-9bfd-5285e028cf88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.111.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2991a6c5-45cb-49f4-afe5-d6a740fc3e51", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.74.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--536e93b7-c4a8-469a-b43f-23350a36afbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.82.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b588589-ed39-4f14-974c-8dffa6c46953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.45.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e3abbd-e92b-49e3-b1a3-b6ca935fd295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.45.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44107e47-3b21-499c-8673-423734b7de7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.82.38.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6583cf79-7db7-49d1-964a-e1ffcf15e86a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.166.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c735a7-eeee-48f5-9de2-840003f13fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.36.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f76a0753-745f-4285-8648-a04272a38e78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.36.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0885fe62-75fe-4fed-80b5-baedc14bd910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.36.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b59afc-482b-4b4a-abb7-0bdcb587a7b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.45.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0579e466-2b8f-48f9-8f1e-471261c4bddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.45.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e7ea57-b00a-4eed-8742-11edf99ab6b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.52.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26fa915-9bba-4073-9e3a-9fca43c28b2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.52.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2054261d-1ef1-4061-b86a-22034f69ac64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.52.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfdb7b1e-8d48-41fe-87a7-ecccd6625b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.147.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ff7803-913c-40ee-819e-43f9784e9b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.61.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43169b0-55ad-4a0d-935c-d1d923abde47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.80.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22963feb-edc7-409a-9bd4-65d14fdabbc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.83.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff5a47d-74ad-43ea-9cd8-b8af97fb715d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.131.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b17282b9-4cca-40b2-94eb-ea8ff97f36a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.140.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272d96e9-9ffe-4d04-abc2-f2e326696418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.155.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7ca280-a858-41ac-8ad2-ec7902f21368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.112.142.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c62426e-7336-4ab8-a2e6-95f0239119d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.112.142.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e23e424-c414-4f38-b7ed-db4c405ad60e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.112.142.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fbf1782-4c9d-4a26-8591-3bc9e8811d28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.112.142.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1907acc0-2600-437d-9c4f-2c8c05d82a87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.112.142.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5a8cb6-ae10-4805-8449-5e3977e48e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.112.142.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acaca2a2-ab80-4a66-ab7d-20a411b54aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.112.142.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0535e8-8081-4c7d-badb-3c098db5dbb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.112.142.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4e8504-9e71-46c8-a67c-a8d7bd6f593e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.115.102.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ffaab0-4f87-4247-9469-07426eabf44d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.164.213.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--688f6a42-6ae0-413d-a1fc-d9a415134fc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.25.16.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a82b2f4-cc48-4aa3-903d-eb348f947eb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.43.89.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--419d7316-2465-4eea-8520-42bd5f0b20ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.104.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26afa421-afa6-45a0-b8cf-fb1a4d1752b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.113.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c4b3882-1cf8-4e46-b6db-e84763a680dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.122.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e381bb-f7b1-4d0f-ada6-58112affe157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.127.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0f1e6fd-1cee-4022-a5be-f39fe3a7702f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.127.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa4a808a-b126-4411-92f8-59fd1e642939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.127.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9950a2e6-bc36-48df-9ad9-07c07475359b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.88.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--172e6b6e-cdc4-4a28-959a-6e759a2cef25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.88.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b215c1f-20cb-45b2-a192-bafe506560b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.96.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92fece5c-6291-42da-a007-4a96c008acf8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.81.166.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994957c2-5259-4cf6-832e-340aa28f4ae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.81.188.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2bdd44-a6d9-4488-b1ee-b32ae2782fa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.81.188.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae3885c-810f-4a89-8dab-dc8dcd8aa562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.110.170.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd9f41c-0636-4f0e-a99f-0dd7b288cdb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.180.121.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7022d6fa-4f87-4079-9497-8828c133536b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.188.225.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--088a3c22-8697-43ac-9b7a-b04e0d3d19f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.221.101.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--033a9c17-37c9-447d-bf38-124494bc16f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.221.105.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d617287c-3a8d-428e-96fa-bc8ec8d05205", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.76.120.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f535a7c-9840-4ef0-b69c-36a26be06f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83573fbe-2229-4c91-8d15-a374f532e1b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.189.18.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c5b3b7-1ada-487c-8c9b-d96faa538c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.189.21.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45620c1-ca0b-4341-962c-d6f0e5232cd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.40.178.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a43105d-cfe2-4058-a2ae-247f23441752", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.70.139.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc4527d-7e1b-41ed-b8f0-3daffa6d9267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.115.98.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58784f6-35ca-435a-b0a6-8d443f658579", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.128.10.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a803106b-7e31-46df-8890-04949318161c", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.128.10.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1dd656-5cb2-4c9c-8c98-2218ac81f414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.188.171.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a5c1e7-2427-4ce6-b98a-9fd486c49ab2", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.218.81.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6bc5fb-009c-4f6f-a9f6-1dd6f99f9178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.30.221.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dcb25a8-9fb5-4376-b844-08613ee4f717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f36bc0-09c4-47a5-8f5e-47a07fcc7428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a2fb43-a40f-4c24-83ab-ec246c842b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b227259-4d9c-4dcf-a5bc-18a786af06a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.83.11.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beff18b6-c4fb-43c2-9a7a-de8ad4000c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.83.11.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bfabc29-f9e8-4b44-822c-74e1f0854d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.194.49.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48bdcc3f-8968-46fc-8441-ca27251c520d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.48.20.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1adee40e-37df-41dc-9772-7e4e141a5628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4cad929-92dc-4288-b2b5-8e4b27d2b611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55893e76-c032-4fd8-b7b9-ccde81ef1766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd540a3d-4e58-400e-9c0c-fab652ad30bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--014cd658-6751-4a32-8c13-016650e703b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf4564f6-af69-41e1-b002-986503e864ab", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d851fdb2-6551-4cf8-880e-6fa2192fb956", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d9b7363-3246-4097-814f-b74d49e8f1c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8226717-b1e6-4d55-b188-020db0f86ae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d67acb4-6243-48d4-8379-545ee44e151b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0bfe5e0-7ebe-4a1a-9944-e2cd61850edb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b914edcf-bd0c-451d-add9-826f7a45159a", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa121ca5-12d5-444d-b5ef-e135f48a45ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02b0a8eb-c01e-42ee-bf5e-ad2ef5b86945", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb8a48d-ca35-4a2a-af42-ee958a5d665f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af651c4e-d1d3-48bd-84d3-52f3de36b339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caade7b1-8579-4a01-9181-60c585698ade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce00ebb-fc41-426b-9f61-21cff40bd084", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717f0152-0315-4507-9750-e2a484e30b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90442aea-39cf-437a-849d-97595f0e8b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a82259-e750-45c6-baa4-726190414f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78e60de-2f3e-49a1-a12a-5b1e79aec364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d229e9d6-3e5b-4ab4-bbd9-daad8cc40f56", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d956d0e-47ad-463e-b5e6-9c8646430830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9bf9b54-b818-4d43-acb1-9d21c96cc5c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ecbe435-2aba-4099-9d4e-9f33951a21ea", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d963e1-5074-472f-8a8e-6ad581b762aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7bbdb1b-91f2-4a95-986d-8945094d9c91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6613077-a598-412d-8c64-714efea312f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b84d974-f4d3-4a76-be98-6dd3d31b83a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf74f59c-0b82-4cf4-9273-ca7613ae6fb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771eea17-2e26-408a-ab61-d5a1906b6c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ddb0370-2d9d-4ebe-854f-18aa15229e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe94a95-dea0-4c8f-96ed-e46bb8ca0d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ff293f-d09c-4222-bbb6-158dfda97b30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a792f0c-ca42-4068-8094-211a276515ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35ffd58-28be-47cb-b6f4-9a6545c4da1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf9e163-c3e4-4016-a33f-db01b08e9557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae294a1-d503-4833-b712-9f8d8085fe6f", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa6baa5-70c3-4591-ad51-2494cc57ef98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53546f6d-0a7f-4b12-b244-c2cf979a44fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38fd9bb-f02d-4e31-b781-f18b0918a6de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa263881-26f5-4979-b974-4a591c9d805e", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc02493-5623-4fc9-8781-b75b9e8b7c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d9f8272-9a07-48cd-aaf3-7fedea59d189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d039746-9397-4bb1-826f-8cb367803b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a241b60b-999a-4001-8465-a7decae35cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a87e01-581c-45bb-90e2-28cd724db8da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2370af9-5aec-485f-8f15-91adeaeb5bbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561af05d-ca77-4a37-91ed-e2f0a798b107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7a37c0-e433-4266-a022-bb7ac7c63110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9af58e8-b07f-43c1-8c3a-2377fa3d3313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7151871-7360-429a-b8bc-5cb6d8111300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2033159-eac6-41fe-ac83-45b7e0b7a0d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95afbd6b-515f-4b61-9532-a9e9f77b0033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f04528a-f114-499a-8e6e-7eb0f93e3d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6248a7b4-5977-432b-8b94-f5648ed694a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aefadebc-a742-45d7-9637-0c922d56fb40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb1df65-85b2-470c-94c0-b0591ae5d56f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ce35c2-c96b-466b-9203-247b42f4690d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0430b2f5-2081-4768-965f-2421934f5f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--419f0584-9909-486c-8274-3eff5bd29cf0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697b0222-9d9b-4162-a64c-85add7ec55e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc908e7a-80d0-4a5d-add6-f1364bd90ae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--862f5c49-537e-4484-bd5c-1cce8414e33d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82f43874-5409-441a-97c8-4d00f52f8c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--706a0361-0571-4696-befa-a9f3d9161b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f69ba56-7b1a-4135-93fd-eb63c1d010e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed67bed-d75f-4539-949f-1487a8b7b953", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29306747-a74a-46c4-a4cb-296a82504b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40638f8d-4220-4a42-bdeb-a1dfe75c840c", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81c2c50-7f55-4aa2-97d1-6faa0d8e23db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e738a4-4754-4cee-8056-3cfedfb3c28d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92763c95-6e1f-40e5-b9ba-28f9e0f6e5df", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c92cb94-df0f-4c8b-a09a-0aba13feed3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e471a6b0-3228-4734-953b-3a1a212f6707", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6a492f-3efb-4915-8f9d-3783bd38f0d9", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee9f108e-6ac5-4ff7-8ba5-75e81999a63f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bede3a6-be21-41f9-93b6-b9d34461f62d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6672d74b-69a6-4ccb-b2b3-675b5b0a8188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa156805-e6f4-4a7e-847b-49a2487320fa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b95d0b2-215f-486a-947f-814556d19d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0702636-87e9-4c51-8ca4-f0cc4cca08cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f2068f-0847-4ecc-a523-cbc93a488830", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da2340a-46b3-4b70-b477-149d7077eff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--906c19f1-9b6c-401d-81cb-9d92e9dcf305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5bdd739-be15-4aac-8035-fad46debdc75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d5e446-d703-4a5a-b82f-a151902dc03e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1952a8-b20d-4058-9eab-31a613d61338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7a43dc-54e7-4c31-890a-d69ec64f59dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0420ff2-445e-4bd6-8209-66fd5f08a3ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c8248b-0376-461c-a900-191c28cffff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4792ac-bf79-4dea-85de-eddf9fb4bae8", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df6ff305-1d64-48af-bafe-5fd9c4814a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb26fcbf-2dc1-4052-a43e-312b8adf4bbb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723285e5-1288-4c72-99bc-d357d278f200", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd83e85-980b-4721-be51-51eedf71b035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8e2c10-f723-425b-a7d6-c26e9a45be5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05548610-f90b-4be1-96c5-acab46671fb4", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b660c6-afbc-4b3a-b6a6-1b76e9cc99b3", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9bf9ad-41ef-48d1-ac6c-1781ca796755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94331c76-f6f1-4e65-96ce-9736960a0bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3756595a-2627-46be-a04c-7aeed05ec80a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e2411c2-5cd8-4594-86b5-2c175f7d8a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e59cfc-3386-48be-8824-d7e87ad5589f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6515c32d-8c8b-411c-aba7-78aafefdf06b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b5a160-eaf9-4fcd-9005-c5ec2d58f074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d271fd-d34e-45ad-854d-07abab2c2ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c261ab-2924-4b9b-84a7-72f0d981210d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9926fa-1cf5-474f-a0df-48aab854490b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f1916c-282b-4d5f-9bff-e67b1ae9453e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c91224-07b0-4f8a-a096-a0d699abbb98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b75452d-941e-4711-9310-e10adfc7d1f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e565b1-96b7-4b49-9c10-a81fc84b1a27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e59ede6-d92e-4b12-840b-e57d39a1f736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa7e1a2-99fe-4aed-b09c-5bf9d85d3f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bfd3416-16fd-4cd7-a194-95c5b0583e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b2e4bbc-8224-4b13-a1bc-dd571bf52dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd60f13-7d2f-4881-95fc-d1bbc689d763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a80a2b-8e98-4000-935b-fc363594cfda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.0.81.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c956cf81-fd1c-4599-8af8-67b276fa7dd1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.135.34.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e4e2d5c-e7ce-4c7c-8779-f23c8c3d2974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.180.157.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6b5a3b-f82e-41bf-838a-85d31bd5bbf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.183.111.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--555783a3-8815-4871-be50-65c00ddb53ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.228.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce95209-de44-49d6-ada1-36050968eed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.59.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73556177-0e04-4970-909d-d5b059ff6e7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.237.14.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1101b95d-d352-453d-8712-ed4632d1afe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.237.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--322a3ceb-64ed-4a27-84b7-338ce959be12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.255.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--265f48bb-efb4-4d80-9c85-c7ef8a58bde9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.174.22.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40bf7a34-1288-41e5-9e93-b6a97e1c91ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.111.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e51ab0-f3b8-47be-be48-288ab8ef70b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.138.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94bb7917-3df5-42bf-9278-7b4bc69c6187", "name": "Malicious Host", "description": "Web exploits: aws-credentials, php-backup-grab, spring-boot-actuator. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.198.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1bfbe537-d9bd-4d76-b612-ec45fc80303e", "relationship_type": "indicates", "source_ref": "indicator--94bb7917-3df5-42bf-9278-7b4bc69c6187", "target_ref": "attack-pattern--8a8bb6e4-b7c8-4514-9164-c7db99614575", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7bdeaf0-d1c2-4221-a4a8-6a39923b3343", "relationship_type": "indicates", "source_ref": "indicator--94bb7917-3df5-42bf-9278-7b4bc69c6187", "target_ref": "attack-pattern--d867a213-be6c-4d69-afb6-caeecab59af3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3cf97515-a4d5-43c8-8ecc-a423ae7cb361", "relationship_type": "indicates", "source_ref": "indicator--94bb7917-3df5-42bf-9278-7b4bc69c6187", "target_ref": "attack-pattern--5e475c1d-71d0-43e0-9f8b-68c3071ac97e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c3842ea8-579a-4010-a5d4-11204c28f2f0", "relationship_type": "indicates", "source_ref": "indicator--94bb7917-3df5-42bf-9278-7b4bc69c6187", "target_ref": "vulnerability--6725651c-52bf-40f7-bf2a-10fe38562d4a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--37139a65-7649-413a-9019-d4da972d88a0", "relationship_type": "indicates", "source_ref": "indicator--94bb7917-3df5-42bf-9278-7b4bc69c6187", "target_ref": "vulnerability--09e8004f-6e38-483e-978e-fb0f092cda87", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab75366-73fb-4193-a10e-81bb1c32a91b", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.217.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df8a540-4ee9-456c-af2f-df5d84d81178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.69.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f7e8330-c8f4-4d5d-8919-f6e0f16e3a80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.8.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78392181-32a9-46a4-b675-568a75da6b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.180.242.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c38efb3e-19b7-43e3-9b7f-78a04276dfe5", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d881470-b5cb-49bd-b4fc-c7ca4556c725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0569ee28-5020-4fa5-b873-a6711951c38c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a177ee-7953-4f6b-8d94-c22c546e1956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93599bf6-4f5b-4cc5-86ce-cdb1ca90a5e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3da51291-2e47-48ea-860d-de5f6ff9e64d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cfd25bb-5b99-4828-bb81-d5e36335402e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5e2a18-50f9-463d-92e6-2b25920fb8d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d349c5a-e6c3-45b9-87ea-d894cccf31e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a82d3c3-ab0d-498f-a7fb-ecf4faa2990d", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9572f843-f98c-4a58-8396-633f6c7bea94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a603e9-7b96-45fe-a46e-0593b14c86f1", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba96077-3a3b-45b8-ba63-e93481dfa28f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce1b08ab-35ff-4027-87aa-898961e2dc4b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cadaf0e9-1370-497c-bc79-97618d8baab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e90c2240-2b4c-4f54-abbb-01a3b4a1f2f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f776aa-0123-4312-9383-533c61b2bc4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11cdc9e0-3fb0-4b55-8231-a061a071f809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff1a5c7-3333-48f6-aca1-8685e8073506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abb0d64-fd25-4452-9ee1-b5baddb77719", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.109.214.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a8f846f-d2ff-4f80-9087-ed3b418857f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af70d5a-332d-4dee-a834-b8eb6c2c173f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac35090-c460-498e-978c-e0ef2bd337d0", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.240.111.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f255369e-433d-4b1a-8dc6-13995d4bf7e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.131.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d84bd50-b19d-4a7f-8be5-2244c3975e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.19.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751506c6-0078-4092-8b78-1732877935b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.70.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cda5fb4a-fc17-4e57-b174-7d7069612374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.83.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448325cd-6d50-4b95-90df-eaee360ed5b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.84.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbebd8c4-31ba-4a36-9646-c5ea89c3f788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.86.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f64aac-c498-4447-9856-a154fd3ddfe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.91.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4785a0da-5fff-4572-a6bd-bb43f9463686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.94.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c7dca09-25ce-477c-a189-50668ab7c855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.97.129.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc08797-b57a-494f-83f6-3ae755ef7101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.184.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78806eb5-064e-4383-ad30-461de0b8a439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf66c429-e01c-4379-a3dd-52ae561ec719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fcbdb1b-02f5-486c-bf84-fd0205856623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.189.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc154c7-0243-48d1-8f6c-451fc8e96868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.90.203.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb379c59-edfb-4a1c-9ee1-4ecbe4f3a1fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.180.105.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--784dbac1-5007-4c6a-8e8e-5cf5fe4ab334", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.44.250.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e2b824-340a-4cae-a561-01507eb6f7bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.54.84.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9523c8e-3a16-4df0-851f-515288c2dc9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.129.34.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c267034c-a734-4def-aa2a-785b611db39d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.111.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf003bfb-da6c-4457-9982-9488f36f6e63", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.56.49.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136fc526-b1a8-4320-ae5d-d8c6b66e09b8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.60.125.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0962bc2f-ecaf-4bc5-a515-0531ca367b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8cfe620-f457-408c-83a9-acabb10dfaa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d17255ad-825d-4273-a037-457802426f0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94e2782-6e65-497f-8e1a-159e4f1d5e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51971d2d-0ab8-45c3-8d09-59f1dfca3b8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be7dd3c1-80fb-4cbc-a538-2233d301efe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c26476-c919-4e0d-8b40-fa9185676ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a511ece8-5cb8-4f04-8242-f64b7bc2e9c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8368702-7400-4fbb-8f21-27d14154f405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568172ef-44ff-4be1-b2e7-10a2052e463f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4227010c-a763-4196-a279-232abec71181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc96a38-d256-4f17-8566-fdc14516a023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33327510-26dc-43ff-ae52-75d1ca274cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36e3d2c-1651-4664-a7a0-5eecfc326abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65bfec3-fe8f-4fa2-9e8d-c77afad22bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbfbda25-8270-4122-8e2c-eb07a9aaa6bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f919bf-c0d9-4030-9094-0c051acc3d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7454b78-102d-4e92-a227-ea833f251ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bfa993c-401c-405d-adf0-faf2036c7e51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1faff667-463b-4eb5-be99-e6ae958c9715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56db1eb6-c0d3-4da8-8bd6-802cd771006e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f70ca6-bff5-44bc-9604-0cda1089116d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae9262a2-a7b7-482a-84d9-a7ab8a7b3dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d711fa88-fe06-4308-92a8-019b0cb46e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e175051c-b210-4b44-926e-fb13cd2425c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3803ef1-78a7-49ab-b015-179be3eece0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1704b4-846e-419b-af36-160553401e96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d07534b4-5e5d-49a2-99a8-bba100edb991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d2a78d-e408-4e09-9deb-587160cf6e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be7b3c8c-62fc-41d9-bbdd-b133d4fdcd11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--436c9b0e-0c45-4e12-ac73-49c4be5f7154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86553ed9-1acb-40f7-bcad-a86a18a07694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--694e6fe7-7496-4b0f-9f22-e705d674200c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c010ea6-73be-46de-9d62-04c9aa0c2737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314eef23-42ea-452d-a2f5-93f4c446462a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1de601e8-ef1c-4092-a406-c7790b3a71f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0d8bc6c-a087-4377-b924-666b6e84c200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1a0c66-ae61-4f89-8b3c-7c9a3005aec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--836945cd-bc75-42eb-8e3e-cbae9dd5cf43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93344c44-d5e0-4b2f-9223-597cdd919c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d276e6-9c96-4a27-8cdf-2d3c8446c03d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db955eb-9ac5-40fd-a619-990b135497dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8617cb9e-5357-449c-9fd9-c8182dbde58e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b50693-aed7-490d-9366-49918066624b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.79.124.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a40df63a-3640-4b44-84a1-388a248b0f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4355ab4e-b73a-4d3b-8d23-b1ecc31ba3af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2e2b73-5e8e-45a4-b53a-7a8bedf67bea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7964f9db-cfd0-419c-bf5f-c86d92827692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3a1ded-e33c-429f-bca0-4cc18413ecc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e00a348-d660-441d-86e3-f7d80ff2593d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3f20d8-9d1a-492a-87be-d06a31758844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29928de-afd7-40f5-af47-0fb9117748d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32731de-b1b5-4ad8-94d4-f7ceb00a4b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b37750-3e5a-475a-afd0-7dc758cc45bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9dc826e-bad2-4104-8706-042494cabd78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c023edd-2340-42a5-ab25-d6986d6417d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0eaa7f6-6fdf-4a7d-9628-43710e587dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06824192-515d-4d26-8851-2728f0273fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8929aea-8674-4f35-bfa6-e83a3505ae48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f1dcad-1365-4354-8d04-0fac63ac7563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8191e00-1323-4c00-9200-64ed739e908e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6edfb4ca-b294-430b-9c68-0abdee8f94fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c804ca5f-0612-4e84-a487-023257ea72fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01ae9184-c381-48de-836a-2828430cc2bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a37d2ec-bdc0-4b9a-9a86-1bc739b570ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e302ce87-d8a4-4bc6-bb9a-f811e3cdd338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f74796-9789-453e-9010-22098eafd24c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b996ee0b-9555-4c29-b1e2-b89a0c873aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aafcffa-ed82-4af0-8796-fc1620132b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f6d487-1b4d-4c5b-a36c-9b361870ca67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--843d6df5-7141-48cc-aea8-7af04cdc4a2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b625996b-cec2-4d13-a656-6b97ad64d00d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c701b9ca-21a7-4a71-a51e-9be08d25c28d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a03c8887-58eb-4edb-a214-c979b5190f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cda401e-40e8-48c6-95cb-1861ce51b9de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a1b943-a5f6-4fe2-8783-43eefa965bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b156e0-b185-43c1-bd6e-25887c51b90f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62693cb6-5794-48c1-9535-6d42738f0d11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be9aa2fc-4ba4-4244-bba3-b83e8048312b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17903580-597f-43cc-8728-f42777481647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ac5499-c567-4d76-8c8b-4d86f40b4f69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae2fe5d-2ad7-43a7-9bad-3a45f01789f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--258fcb26-c8dc-4616-b5d9-6238e2e125c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6b683c-63f6-46e6-8127-0095b1eb7ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--920ebc7f-a86a-460c-bbdd-dbbecb0919f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c47202ff-4fa3-487e-9884-76fa3c18f7bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d25440-f447-402b-966f-c32119dc56f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13638066-c236-4758-9b4d-84e514efb2d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ca97bd-3a7f-4424-bb1b-e57ef157922b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d2a052-ca26-4690-8ee6-f1cd5c0438b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a58e5a-3479-4be7-a797-342cf67b6380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7a3ff1-5206-41dd-b8cb-ccd0c773a4bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414de09e-ad24-45e0-bdb4-04aabb7e243e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1e3d13-7d8b-45f6-8366-f8e98b1a3a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7f1245-682e-4cd7-91a4-0e9ea828f20b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da776f4-378e-43f1-864d-38c94b67a7b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7373a85-05c6-48a4-8611-1cd14e6a5947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feeacae8-5504-4d1b-82cc-8e490c6accb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a33d5e-f561-424b-8ec8-6313e1258463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d029cda-9674-494e-b67e-f7bd4d2f5cfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ffa509f-1668-42f3-9953-3559ed3e0563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d583eda-28ac-41fe-ad20-51bbb294de62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--993cca54-7ce5-4a93-a6e7-003c2027cfaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cede272-5cc7-447f-81e6-b3884c8fed19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f11b04-b5d3-468c-a249-d32223bfd26e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.69.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a15720-8786-444a-90ef-e8c91c955153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8a729d-c854-43a2-b3f8-77db64471f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c822cf6-e229-4466-ba90-ca762e5041be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead4b0ec-bbf7-425c-b030-e833f5087a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cf7869e-39fa-494a-9258-ad6e7ea2e70b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--538f7f20-3d30-4cbc-b46c-e091783a2809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e8cff81-6cc4-4799-8204-c825bfd0ae77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1313b5b8-99cf-4f26-b5e9-d1125ff6f3e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9991101a-637a-4502-8fbf-86fd0e9e83bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06cafa64-d336-4f87-8396-ebc4ed971453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da8356f0-2c57-4f21-a2bd-adbe0ced6d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e588dbd-8e55-4e3d-a074-de590218eb0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1706c8-65f8-473f-9bdd-41d491abe7dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74266e51-6e2d-4b05-8526-310da6868a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2c4ee4-4dc1-4eed-b20a-a69de41063c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--981afeef-48e6-4bdd-80de-4ef69bc1ed94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3350fe0-529a-45ef-a88f-e0fb42068812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0abc45f-aa7a-417a-865a-3fc6a6fc4e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a17609f3-b3aa-4593-ac78-18c6c41171d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb58790-fc4b-4526-907f-9e1ec57ebb29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1664ddcf-0c0f-492a-b5e3-7f3fbc66f909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd3d5e9-ae37-474b-a757-b111167071fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5a4b8eb-df23-44ed-8757-ecf163bc4972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b193ff60-6528-454b-af5b-bf00900c53c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554d902c-845a-4447-adc2-67d38434e889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1863d2be-f980-4595-9f4c-137c8038bc08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5465b24b-8d25-4787-af35-5e61376435e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bcf2a2f-1c33-44bd-b69b-bf1363cfbff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3daf09-52f2-4664-ba23-7f3c4547b0c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c743ae0-d08c-411f-a841-c259f83d73e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eeeaa91-4522-4edb-913a-8a10361c3834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86abb1bb-8e3a-4c8e-a7b4-255d02601dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--853a4861-9391-45ae-b2a6-752585178e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a9514b6-1118-45be-abd0-600bd489fe54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3217de4c-f385-4b92-b384-63fb7a0d586d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452046f3-633b-4f1e-95e8-c9d28105b5f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3cb4f6-a774-448e-ba1e-dbc3f4eb0a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a9171a7-2795-42e2-baa9-712bc2a07eaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d9fb4c-0613-4c5b-bd43-004bf4875dc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--417769c4-269f-4888-8138-6c19724d8f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8524ccf6-2ee1-4278-84e5-f9f2d44346be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adcf9242-eb4e-40ba-a73c-19db32e11376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b11bc4-dee1-4c2f-bda1-6794aa0d7a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3abfe3ee-c55e-4ab6-aedd-9d060ba7f582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3593edbf-0b40-4c8f-928f-3537a10d4397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0891b74-ec65-4858-bc27-d29420bdd7af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--745a2a94-9f81-45f4-a93b-cdc3e6545181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b69a6e-bc89-4220-ab69-c7c242723044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2cab8e9-fd0d-4915-944e-81ae6ec6b4fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10305804-5420-4ba5-a543-a566145a44c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276b3c20-9b1d-4424-bfea-406c43d80b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b8edd65-5031-4311-ba98-8e58acee2d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.78.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7952f7-63cb-4dfa-bf86-51360d1a309d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb75a097-96f8-42e0-a983-bcf433c6f4dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e82c0f3c-b344-4342-b7c8-16614dda110c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78dd2e5-2acb-427a-bed0-ac76247f0444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8693b535-2840-459a-a908-bb533182e9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48868a45-d693-49e0-9c70-5ec72255e0c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ba3f95-c4af-4a17-95b9-50e31caabdbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d368c8aa-5a93-4479-a2df-9410c2517f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83798a53-8e03-48c9-a6e0-3172ef2f5fc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10fbf6dd-4b9c-4f7e-9e6a-a464f8eb482b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f378aa-9359-4537-af11-1b63a1d6892b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3256e8-c463-42e1-b483-0b060bc3a268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c98f1be5-26bb-4fe2-85d4-4ef994073fa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0472ecae-58b5-4ef1-91ac-1758daa89158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baace177-dd65-4b34-a251-3dc80c8d7d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c359329-cf23-4317-8c03-a81fe7379bf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a9645f-7485-45ca-896d-06538a2bb000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5690470-a7cd-465c-8c91-7e968917cb71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5585ff4-797b-4caa-8121-f0367d1b9461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c0984a-4e9a-4b3e-8b82-e9669595536e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169b2e6e-a6d4-46f0-a772-198b5cc07234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ef27a3-0ba5-4b1a-9703-51da2324a6ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ea74da-7c38-4112-ac8a-72fa9545954a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf8a4f4-d573-4670-aa38-88f5cad23674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5573b8f-f778-440d-84ac-54e7fe2b5d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab01deb-e726-4540-ac04-ccc287355f94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--632b7dda-939a-4415-9fd0-6b951bff3cea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--765ab63c-3164-4f10-9993-5e19e86fe893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47bb1864-08f2-471c-bf12-1edcd01fed06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36fb07ae-5bb0-44c0-930f-c3b5957a5e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a84ad1-d5b9-4672-9116-2d81b82ebd38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fecb6c0-f855-4680-9997-266c46977859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--716d2d7b-988f-438b-9747-177c36ca83dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac14a9b-9138-4d88-8bbd-ca14d30b14e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9338db5f-6314-4e80-b277-10aa778b016b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--269d3ead-e14c-4f36-971b-932da87b16ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33224815-e46c-4644-a457-9674344e676a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69cbaceb-d24b-4cbb-a280-67ce4f7c6e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a30c2812-67c5-4dac-9fb2-2369f4fe060c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6424dd3-3dc1-4dee-b11b-4b3e1c461209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--768c726a-887e-4834-b076-64c64d17e533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce554a14-0f0d-4211-90d7-b3119eb2c909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04478334-45e6-463f-b80e-38f2b0500b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae911315-6bd4-4148-a617-b705d05791f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--587bce78-2836-40f4-9996-b824d3a449e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77dd0ae4-0035-4584-8511-f1708a0bdd7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d2dbd1-383c-4663-a851-4e9df3346ad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2d51e9-2884-4fda-82f8-e350cf07c0b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c85158e7-6c61-47d2-becc-3d57c553a414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b8ceeb-3099-4b57-9072-a6666c581b18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97bc799c-9de5-4173-825e-8c2fe1ee8aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eaa888c-c18b-4b7a-a207-b7b5b909c090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.80.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5451d17e-cecc-4af3-b047-0b4bbfdea18f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69365b2-2400-4a3e-9c4b-6676fda6e2aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bdeb938-9cad-4c1d-b4c4-01bd565a0ead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce6faeb5-b832-4541-af2c-c88a477c7d30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5445b42-0ed7-47eb-acf7-d2bf0572d195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a3fdef-73ee-4f34-9370-4ab47b0798d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925b06f4-9702-408f-b0c3-8343ca2587cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af642313-c5ea-4ec7-98a3-032ba4165b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--192d37a2-6f64-4c54-881b-fb7bc46330f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cecfb2e0-c372-4622-9863-e913d5ccbe9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1cbe96f-282e-4569-b4e0-c820f3d9ea70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e733f0b4-4d9c-417f-89fe-146ed97b7e3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--085ffeb6-df66-4ab4-b7db-702c5029c0d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1e1736-d185-481d-83db-a9d76fd15acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd66fe3-4ba3-4cb8-893c-f581a750fa04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a76dd000-014a-4f30-b044-44755969fafa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc7348f-3928-4652-8f23-d51296162041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052a996a-299a-443c-a98d-8f4dd3cadf91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd8b367-8a9f-486b-a018-fff8e0c51ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e2277c6-653a-423f-bcfb-3375fcc33d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3d5ddb6-4dec-4fac-87e3-bf76141af783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8917df9e-5aa8-4ab8-9886-690b514b377a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--226ff93c-17eb-46cd-a6c8-8731e1827b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c692807d-aa5f-47ae-95b2-49500acb96fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--890a4bf2-1362-42b9-b8b1-8a9890fbd282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2089cfa1-4efb-4129-b783-7d9c395ca601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--361ee9e7-55f4-4853-8efb-0a617a4ef2a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9cc706-5161-4faa-90a9-641a98df8e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12f8606-f6ac-4e4b-a3b5-c3f033f9a83c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38040ec6-e22b-4729-a01c-b5195038c315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51911361-9017-4242-bd1f-2621c4c1de8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab8dc13-a03b-41be-a363-1065f49c6ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce8fa208-c676-4271-870a-a1cb99797c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6117781f-ce34-4239-ba17-20e88bf7353d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b5452b-f41b-4719-9ffe-3edd5d351718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14895529-1738-4b32-be4a-e7012e63c399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--093701f9-f682-4135-87ba-c0e6554c4c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--675bca25-aba4-42d6-bc74-744c4d5a213c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--258496ec-7e92-4338-9361-e64faea2d54b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ded95c6-1d9e-4518-8378-59fc21d9b8ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac0f857-8577-43e7-b2ab-38e74085efc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfff7273-d7e4-463b-8a10-54c995c481da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd75e4ac-d7ab-4407-8f5b-107cc1c17adf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e1a9280-a8a1-495d-8c43-4b5c8d8baf6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc78d42-0b1f-4f3a-a2fb-f2433fdea51f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa79f2af-fc87-473b-bb05-68b09606b1d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c20b127-679f-40d3-b89d-dccded40c6fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef693e8-8805-48b6-b6d5-b0ac7a32c7ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ca10a7c-37ce-4810-91c8-c0c6129e40ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d71055-6227-46a7-a886-68b9f9c1ef68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fbe57de-fad9-483d-9c34-4ae1a4886c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b9ba302-c39e-4fab-ad3f-0391984b2cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b249d7fd-8037-4420-98c5-cbb78cea21a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d77863-c2da-45ea-8e5d-f0b488e3777b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605ffd92-f500-499a-9b68-bd871706a780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e8b314a-691a-4e19-9c5f-1d1b3fc13f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93bc3514-4141-4674-95c6-a6c141c2e8d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d642d7e-bfb3-4842-91c3-8e27db137c7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d8493dc-3661-48bf-9502-7b3e3d06547a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5e7f96-ef35-4cc3-8d26-c153b263c1d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.128.81.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8bd57c4-527a-4818-935a-f41303855eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.136.68.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3da0df3-0ad5-498e-a8f9-dd03670c6b1c", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78326054-cb84-4003-b791-863e9aa95f55", "name": "Malicious Host", "description": "Web exploits: aws-credentials, php-backup-grab. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39623a79-ba84-43bb-9072-e2cf4ab16424", "relationship_type": "indicates", "source_ref": "indicator--78326054-cb84-4003-b791-863e9aa95f55", "target_ref": "attack-pattern--8a8bb6e4-b7c8-4514-9164-c7db99614575", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb86e5a6-a722-4849-a43c-3ceee19a38bd", "relationship_type": "indicates", "source_ref": "indicator--78326054-cb84-4003-b791-863e9aa95f55", "target_ref": "attack-pattern--d867a213-be6c-4d69-afb6-caeecab59af3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--019713b6-9027-474c-9ed0-83298d05c604", "relationship_type": "indicates", "source_ref": "indicator--78326054-cb84-4003-b791-863e9aa95f55", "target_ref": "vulnerability--6725651c-52bf-40f7-bf2a-10fe38562d4a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d245d853-190a-405d-ac19-9aa69e57dfc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--535c25a9-ecf3-4eba-8599-68d13469b143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c37f1ba6-17f5-48f8-9a8c-d16f3a9ff274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2bb58b-bb5e-413c-b6bc-8327cb965dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--450a51de-3e25-4ab5-a1f0-f25bb7a2927d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c3b5fa4-9714-48c4-8230-8c716af7d9b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4369eef-4117-41b7-9703-d985dd7b34b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a508280f-c9ea-47bb-a48e-591e6b7bbbc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d26d70c-866e-4103-9e52-f514a5ff2296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c36870-984e-4160-b8d1-e983c02dc94b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.78.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f24589e-e773-4c57-b758-d34f38023bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.78.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e833832-cf1f-40ca-a0c2-db1c84161709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.90.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3889dd-5ff8-4d09-b783-8826ac6ea691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.93.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa00cd9-f6cb-4ad5-827d-fbfcdf858a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.241.22.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752f899c-0fdd-4eb4-be2a-6c2163fb3c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.35.108.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--565ecf4b-fe91-4401-abd6-0f3f6212ace9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.35.110.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0c2897-e6f5-4fe6-bddb-782f6618c383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.66.68.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24147ee-9e7b-4b2d-b730-db39cdbf9efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9731b8f2-b4b1-439a-a005-3842e37acfd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48cf988d-f64f-4440-a279-86c851dd9e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--864a01c4-e56e-4777-a765-18e82374a081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d06b836-c3d9-47eb-a36e-d6500e869ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e960553-48b3-444a-9b2e-d79b943d6f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce4bf4a-0b53-4a37-8414-fb6733375303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56f5683-fc52-47d2-8198-474bb6095798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a458df-8526-4d52-aedd-0e30434b534c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e49a03d-aa08-47e3-b83b-2261ce204f55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b2e6d0-7d26-4408-9e1f-25cb97b8cdb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc076ed5-a5cc-40af-a789-2e715b640e5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f497d31b-8fb9-4274-9108-60045bfde054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce97e917-c988-416d-8b93-45b96576e53d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--168c7703-625d-4c04-b96d-b923c1de4a13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98983990-358d-4a89-90dd-c9c808575769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bff5620-be2b-4b3e-ad27-f2ea7b1d5a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed4e449c-86e0-4588-b791-a5c498f752c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897f4254-0950-444d-b06c-096814d513bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62881780-2d32-4d7a-85c5-5689325e30e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.77.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--420b246c-c955-4cee-8cc5-c9007de1f9b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.77.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e180a0c-fc1c-474d-b068-f65a7ebbc1c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.77.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50cc7261-b765-4905-955f-ecf1627dce3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.24.57.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca272aa-510b-4d39-8c66-f1811c71523b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.241.2.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--876b8954-bf49-4023-ab01-ba0e0b90ad0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.201.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--624e051a-58b4-45b4-a94c-c2a35495c862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.210.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f2bf50-7098-4f97-8795-a5ae08b44f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.214.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a6c538-276f-41c8-aa8c-69720a33a136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.224.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a2a3f8-a428-419a-af94-a49ccde02b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.245.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7de0b8-1a01-487d-9c2b-9379bf5d7aa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf9c8c1-0feb-46b1-bf94-7abfaea90193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a54ad44-79b7-46c7-b901-77a155624d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--785d2ac7-d6de-45a4-a75e-2e0363fc4fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f7a60d-3b72-451f-b105-caddaee4c042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3bd6f04-897d-4adb-92e7-cbc64934e0e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce68ae1b-5724-4542-b3de-6100ad5d9c37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9218f67d-1893-4988-987c-4a68f45f0abc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfbc7eb1-4b56-454f-b5e8-a6f522454811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5645f2-f40e-4506-9fd2-b7d3f5907bc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32181fb5-0c54-4589-b438-50cb5ff0f94f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--380212bf-cf16-4a79-9737-c7cea3f19e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b3392a-bfd0-4c58-9e6b-9943312c03b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5ea084-5580-454b-9d10-50bdff8116e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae219d8-0db7-470c-abe5-500066eceb85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30d8ebe-7842-4739-b6d0-d51b58991afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c60869-4924-45ab-b934-cbe732c02a26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b08849f-cfe5-4cdd-9a8e-86a15d7a05f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a740387-e53d-4efb-ba38-ea98ad132cf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef62896-d0ff-4d78-a087-3c11b6e2ccb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ac452a-89ad-46d2-938d-d7f691b630f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e407399-701a-4cf4-b772-2929cbf9b511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2602bd-3831-4c56-bd5d-78437b31edcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e55e9f4-cf9b-4f30-805a-b6fda47a0ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a3f071-73ac-4ed2-8e31-141520ee68a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dfb04b0-bba8-4b76-a7fa-a9fa595dc30b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749eee45-1b84-4946-85eb-a12e6336e923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4cdb3ea-783b-4601-849d-73131ad31429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a9eee1-4b76-4608-98bb-d736955142af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3fc32bb-7e1d-44aa-8223-765abac19e51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd01f776-147a-49e2-946b-3a4f7dffa849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f6e5ff-ce88-43b5-ac42-ffa2d65b71c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a87715-e081-4967-8987-4fdd0bd26c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3890e810-8b24-4669-807c-48154cac7e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27588f7-fbc4-487e-aaa3-a7112bf5be4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b83e8f3e-0ace-40a5-ae68-dcfa62b41a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e79b6765-1d24-4097-a5fe-e23d5a5d045c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ae51c6-9114-4083-8f4e-fc1b160ade4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb09ead-db78-4885-afd4-fdae5d66a87c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e83ab4b1-71ac-490c-9459-9000492ecb09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048c39ed-df51-410f-8d7a-62ff48f4e867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd13827-874c-4edc-8f40-e5d4fe0b8e05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df54cb2e-3a22-484a-9c14-c9ec6d6a11af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eecb6dd8-f866-4dff-aae4-88feb8476660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d06cb2-feb7-44e0-a09a-2c0d5217c904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517c7ea3-0c5f-48a7-9426-9386ee911ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36f1778-80bb-4150-9498-40d232e34a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe459b0-6362-4beb-aa12-931709ca207d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd33e7ba-3300-4910-bc70-ad97f3c7272c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb036154-8687-47cd-8291-dcca011919bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd6449c-8e2e-4894-a514-72d3efb0c1dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4559476e-31f3-4c5d-8bf5-4692b0ef8626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1a292c-175a-4e5e-aa30-a8afc4e5c54e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e48d29-905e-4789-a9ec-19a177a0096a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4674c9e8-c75e-4edc-9f63-0dae1aa850f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb2aaa7-c03e-4e98-aa57-066b747d56ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af91847-c8c8-4cdd-a9fd-35727e674214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20038e64-5743-40ec-ae59-e18a817e69da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b382fe7-6111-4930-bf3e-70cabfcb44cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938c7cf0-750a-4b72-8605-d6cda47a4b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f333ea54-63d1-4269-873c-0de3c808ed16", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b57a0b-a196-4759-b3b2-0aadef3de2e2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a52610c-8420-4840-a862-e5912bc64baf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70e5932-2d49-4258-8c33-ce3a27aba8db", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf74d18-8ebc-4fa7-a64d-e561432800b5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452c0e6e-dd6a-4b80-803c-f7dd41f7a902", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b5fe94-929e-48b7-a1c7-05da1d7c2e43", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c318c5aa-16fc-4bec-9c44-e63185606ff3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--707e23f3-439b-4587-8d69-6b501fdb63f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b58dc34-f2e2-43a7-bcfc-ffdbb1b08c07", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52906f0b-ea35-487a-bf5c-636034e15ea2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--045c8dea-00b9-4086-b6f5-9acefb00b46a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed01c0e9-a042-4670-9b48-6f2198ece45a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.81.200.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b21892fc-7e51-4eb5-9e60-62b864ef8555", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.81.248.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba14c44-a573-4145-8ce7-71e11f61d06b", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.152.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7743e62b-0ca4-4679-96b2-f4c43bf1b89b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.25.83.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c50db3-b905-456e-99f2-aedb749c82f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.195.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2144b8-d4c1-43b0-8603-a8b99d69bf91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.78.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a083b83-3e12-46c5-92a1-d4b88d875b87", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.79.116.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90a029b-cd7b-497b-b7fb-692dffb3f9c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.16.164.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7582e7de-b48e-4680-b6a5-3ba5854e6c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.250.243.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0250dc47-270c-46e3-bd5b-d10ce47f519e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.26.96.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf0654b1-0232-4c57-bab0-54c21da2de58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.58.33.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b490568-28e0-40eb-96ec-1b92689868d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.59.201.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b6cb831-ce82-405c-b20b-274ef37e03b0", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.78.131.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08e4437-e615-4004-9ffe-08e1902852c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.9.233.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17140d57-1b19-43a5-a313-c02707e707c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.138.99.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba0edc34-2ea7-4d2d-a5ff-e157d7f6fdcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.140.109.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea1c1808-a3d8-4d40-8a11-24f8223aa877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.155.135.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e09fa8-4a34-44b8-8324-6e4a671a941c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.73.42.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b817f0b4-a7f7-48ed-9094-b94c9ccaccf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.73.69.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aabab088-c263-40f4-9679-15d960884acd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.77.96.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d678e6a1-02d9-4649-8e2d-40266c288d18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.121.206.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfce1211-d393-44af-a93d-0c41e6cf055e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.132.197.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e30d1b07-a041-4851-a74a-64e981af6021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.167.233.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f43043d-8a52-4237-a0c2-76cf28fcb96c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.174.29.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a4d8bf-f14e-453d-9a9c-bfc3e4ca35fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.1.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c3ad981-b1fc-4ebb-ace6-68ab619a2fd6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0950e2d0-5636-41c7-89e7-96287485526c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.190.109.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4900412b-0043-4ddb-a0b5-b377669573ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.85.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad82ca6-45fe-4a1c-84be-1d167876499f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d17afe-9287-4888-a383-188a968c827c", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.248.173.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17dd4494-0948-4936-8ea3-172f9ae4482b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.79.74.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca59d637-9604-426e-84a0-acab6fe5024a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.10.187.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad0f6d9-032c-4b40-9252-c46cce0b9947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.11.51.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ae358d-1bd8-4a47-9184-4d1104cd5cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.11.60.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ad257a-0271-43f5-b298-bafa6900ab6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.120.5.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8550aa6f-a433-4637-a92a-0f63666b41ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.127.150.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b47815-4154-4081-ad78-a8fba1de7e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.14.219.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ea73b6-1100-4ba8-8aee-bfd84bf2c255", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.14.40.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe995b2-a537-4ae2-9736-83e034150ca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.162.135.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b03634a4-23d1-4e8f-a8a0-3ff76b5029d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.162.135.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de41dc95-f193-4758-9ccf-e1e4f1c653f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.214.252.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65850d77-8de2-4030-9101-e267cdd90562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.220.37.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf40c9a-ab29-412d-b67c-c9573b07e1cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.234.82.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c05a5e-1d2f-4781-a27b-510fbab8a357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.176.200.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae6d1623-e8b0-4534-aa0e-19a5cc94fa85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.186.13.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ac34ae-39ea-45ed-af3f-e7fb4b3e42ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.240.79.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733a5385-e0f8-455f-b6e5-4ea584f56d1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.246.42.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a790d827-9fd8-455d-b1a2-72e09b8b36a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.253.128.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c0f3bb-d60c-46f9-866a-97f33edd53c7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.71.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc578e6b-628a-4926-8861-481896d5ab2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.92.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae522a82-f6f3-468e-bac6-c8fcbddaab97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.228.136.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66696e0-8e67-4a29-bd91-c00ff0d04549", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.84.195.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029024f0-248d-4115-89a9-f92e98a0692c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.85.251.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7170e53-3637-464a-9bc9-a469bff6c7b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73befd29-8884-4dcb-8b07-075b6721d230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad4c430c-bc53-4282-aae3-88e3e9a7dbd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9298831a-7352-42d5-96b2-7925abbbdb38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921d37ae-95ee-490a-beaf-ecba7bdd1fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a7f4b0a-f63a-4383-9968-dfaeade786c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a895bc-40bd-4f5e-9e9e-0c283a3e88fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ca883f-0ff0-4f6f-97fa-cdaab39f30f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29cedbac-b995-4c4b-8c71-56b64cd5e519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed491242-c645-4e5b-9678-cb22d8ae35c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec636b84-8753-4d28-8135-a490e87fc4a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.171.177.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ef9f83-d645-46db-9114-b041b851df75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.172.217.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a738de52-2ea3-4ae2-9db1-343121ce567b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.180.120.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--420e00ed-8b5c-4586-afa7-1ef7aedfdd24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.224.194.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d83000b-ae89-4e61-b787-2bb646ce7ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.237.47.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd7ca24-5393-4dda-9252-a846a1d79cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.11.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9917e867-4610-40f6-be7a-5083903d49fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.11.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94080fe7-2f22-4d95-b502-0ff8037fa761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.4.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd70ef35-a932-48ab-a6e7-464085461c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.247.136.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63b08c0-5b9d-4729-9ac9-0a6cb6c9caf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.29.118.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa0a8f78-54b0-46f2-86e9-f8346cb40fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64af2ac4-2f28-41df-8104-bf5a189a19db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5efd8ef2-f593-4cf0-a32a-2d3048680bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28726571-8ced-4423-bdcc-3928b183ef0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbdfa787-2f84-4852-a5a0-396bc4d423d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4cb5846-1739-438e-b66d-dcb0338c51af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cef7746-7901-4f86-9e3d-5a0c45cc836c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--929d02aa-c317-4db2-92b0-77300eddd956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bdfe321-d8f9-49d3-89db-59ac1fcc4412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff09f93-ab14-481c-88f3-b795daa12ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336364de-4ccb-448a-b5e1-c2b2305f4f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.116.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c477b0-8e8d-4b33-a408-9ff7823f0dee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.163.189.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04b9ec9-ccba-4867-a403-8a552fc961bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.126.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db4d74c-fabb-4469-bd4d-a6a8943e1cc1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.53.64.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7179e2ee-c2cd-449d-bd12-c8c030188faf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.75.165.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70dba538-c6e6-46ce-846c-63d00bf50e3e", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2602:80d:1007::32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--552c9523-ee4d-4260-94bf-a15cc9b6c91c", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2602:80d:1007::54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdab0f6a-935d-4eed-9c64-497e25cd86f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.130.98.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b3e726-b355-4522-ba64-33c9567b68e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.17.235.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--843a6983-81f8-45bb-b10a-c18f880ba684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.18.153.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2da5d90-4997-4aea-b535-b214a9bfcecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.19.211.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69292c53-016e-4517-8c06-da6a5937f768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.192.135.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382af760-db3a-4b7f-b1b2-5f279fe01803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.192.172.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5793a8d3-b222-46e7-aedf-3dde00d4ec5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.196.16.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af65bf7a-f180-4bd7-8e18-21c03fca88d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.200.2.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a1662aa-391e-425e-8056-ab4ad67dc7c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.207.154.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb589e4c-3157-4a88-8d8d-58dfb5e29524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.21.28.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3657448a-29c1-4914-a143-cbf297784650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.214.185.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f0e82d9-772b-4fcc-b528-544c21398ef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.214.209.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ab27c1-e2fd-4a7f-a41c-ffc9e13c927a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.215.45.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd7646f-4dc3-4db0-a556-2551ab347820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.218.62.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0427bc0a-707b-46f2-bf8b-0a6923f9ebd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.22.151.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867d2a4c-3054-4d55-9583-f5e31f155d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.22.64.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--308062dc-1548-4d9c-8d81-554a8c13223e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.220.134.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba3ef93-d446-417f-b1d5-02680265de09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.222.75.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26753496-b366-4c3f-a652-c420a335252d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.24.91.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64afd94e-5fb4-4f6c-9f22-c7dc24577e96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.28.228.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa49e22-31ac-4e8b-b3f0-8e3f81aac2e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.29.164.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f066402-bad8-444e-9c9a-baba16df6389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.36.196.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee5d086-bf72-4597-a9b0-a26edc11daef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.44.122.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff551815-a68d-4aa6-830f-e31808b33799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.65.151.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b87fd87e-afc7-4d38-a1a8-499810c7131e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.130.168.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6681548-fea1-4e92-a803-74ef816690c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.220.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df7f848-d004-4c62-9833-78e3a6ce0216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.24.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--552b7e78-d8b3-4c5e-a4fe-2fdcc7f144e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.141.16.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6642da09-1c83-4292-bbd4-6c80ea96fa8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.147.122.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39fb51ef-e440-4dea-a8d6-46532d999bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.23.187.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0caaf1-44ea-461c-bab7-ae9484b3d3dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.74.234.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d812eab-1e61-4799-9787-dabc3949e384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.77.221.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1e1d07-f471-4f91-b5b0-35a402ab503e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.80.146.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c29cc04f-f70e-4030-8519-f62c133ec187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.82.209.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3521465-f19a-4324-9059-58757e10841b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.16.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b528026-41c7-47a9-ade8-f08922d6f481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.245.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4cdcf0-06d8-4713-b3f2-68d76249e741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.80.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3695fc1-ef60-451e-a38e-0e9ec37585a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.85.30.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bef16e2-9e3b-410d-ad3a-a4ad81bf7b07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.86.239.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a8b2995-3753-4f99-919b-73138350f303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.89.209.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04f483c-49d7-4da0-bc19-a1d165b5c9f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.89.231.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859375c3-4502-4e31-9cc0-bc9ebc20be0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.90.104.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99814201-68f0-4c16-bb5c-dcf534a78a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.91.159.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b9f5786-89da-4d3d-9c62-6adbb69ad161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.93.81.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe68d05-9cf6-46bb-b9bb-daaac188008a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.94.186.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef78b0e-f9bb-4931-8bf0-97e5cda0037b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.128.37.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d5cd94-b17e-4155-ad89-42aad43ffc5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.129.246.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b022ecb-59fe-4a91-92c2-fd15d62fa9dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.132.90.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc5cbf91-3fd3-4b47-befb-5348925d2654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7234567e-a5c6-415d-9eb1-80facdac065b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bde1e4a-714d-48da-9711-6757104e3abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbfdd594-a4fc-45fc-8f2c-a39c44400781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e55dc01-6f2e-48f6-9e4c-4b586c1b3c64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.207.217.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c06fdd-56b6-4978-bd8e-4d3c9e99a3cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.220.3.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6881fa77-d653-4eee-aaa0-f483f359c514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.223.78.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12fa6ca-5635-465b-bd97-e5267dbfd261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e8f8fef-07a2-494b-bf91-8576747c4db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dced9ce0-ac02-41a2-a8cd-99ee612a2d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22a03f1-e9e4-4420-8391-2e1e097b71dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd62c66-47d3-49ba-83be-ea6caa67ae00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11cd3bd-1fed-4124-b676-164fc46c3f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f558481b-d97b-4fdb-b234-0eeaa85d6ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3897eaaf-bd57-4166-a075-f7aa80574409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daab9976-ae06-4329-a4e9-a4d24a9680ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--684de3ac-50d1-4a7f-b4fa-8d8c409282c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e49b82-a0a7-4cc3-be68-2e2af57b5569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b480b64-821c-4e59-90f2-d7e6ab4b0446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b57f4f-2286-4cd5-9851-4c41d85f0d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c4acc3-ce64-4b5e-99b6-509b62ad76c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c85b945-e333-47de-ba26-6ba62fcadc7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e40e2ab6-f989-4609-900b-af15619e2f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cddebf71-1a0e-4e5e-8fb1-e0b04fef3995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d79061d-100e-4cdb-ab03-4eaac8844df4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8478218a-1688-4fa2-a5cd-beb699785c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b2c706-87c8-428d-88b9-a3de4f9e8dba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b83b3c5f-f776-42fa-80fe-254cfea5206b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0845d3-a1f0-43e4-85ea-f3637805efec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c593dc-9dbf-460c-800b-4c1ff8c8b2a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a94f77-386e-484c-8e13-e1a30a6fab7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--051a9d81-ae83-40f5-8af4-a583b6908060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13937329-058e-403a-aab9-66775c9283b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4847a7f0-c65b-43cb-9cad-d3833fc12ca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d99d6fc0-4dde-4bce-8bba-806dc7c2711b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4806db-cc48-428e-9665-9e611da286ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd090a75-cbb6-46ef-9426-b5be40e96195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c915aca5-0408-446d-81e3-4b7940452f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2617d839-9aae-4a58-8498-99d8cccddce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d88e9436-f6ca-4ba7-9639-0feb1271a7b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2747be40-667e-452b-9ca7-cfb02141a67f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b080d7-18e2-456c-bc15-da1ccece0c80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a62c32-0f57-4cfc-873d-ec20ea40822b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58d23b8-cc47-49a4-bdc3-f70dfc3d7136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580ad817-71e6-4776-a9b3-7988b015ef3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3673d846-5306-4f1a-a6b6-47913c0620e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f373aeb-38e8-4f7a-bba6-c62cffc1b616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3084773-4dc3-4fd3-bf40-d93ce62fa577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--365e06d6-27c6-4da0-9a66-84ac66ffe35d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f96b39-370c-4c6b-8af9-1f9cb910a770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5659fb7e-35a2-4187-ac79-ebbc2627fbe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d6334b-b454-4fd1-bf2c-fd7e3d304da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab1b8b09-fa1c-4963-a4a9-a2e9c5672f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d43da8e-df71-484e-9fe6-4afe3ac23f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d63fd0a-3bdd-4dab-b6f5-995bddac0f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd821cc-19d2-4f93-9feb-33a01415d0b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e93921d-645c-4905-8991-d1d7cb4589dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6efebf89-1f43-4ba2-8d27-016703589bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c07070-f5a6-4116-8a98-ec0fbee4ea1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c48142-fedf-400a-85f5-9f0d58c6d598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ac3559-76e0-4b26-9763-500967f71fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b1d5661-694c-45e1-bbe5-799149777749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--998b393e-b923-4b00-ab33-6ec77c9bf38c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54215f31-cd83-4d0c-9516-ef9020c62dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b771f59a-df9d-48f7-ac93-f9c177204ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b02d3b-60c0-49a1-87ce-d2700802da68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--530efd91-cb89-432b-9fbb-dcf19fac3dff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f8fa71e-cdbf-4dcd-ae28-a3b17fb6803c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0496800a-ac2b-4bb9-a0cc-dbee6b23d6ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--704e1b7c-1560-46d8-83a0-cee800acb8ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2627d606-e6ab-42e1-80b4-bca5f3f91327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8293d6d5-4fd0-4701-849f-1d66cf945547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e12e20-3dc1-4544-8042-cdf9613677ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--619743cb-5fc9-4e9f-8e1b-92f5b92e1cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7794ef-6b83-4641-8004-63d19dc1e23e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a818bd9c-dac0-4f22-aa38-54c8848c4d70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6fa396-7824-4d1e-86a8-b1211b655e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0b64497-1611-4ebc-9a74-5703c6ecc270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--710b5688-ed6d-4a64-8233-86692e816f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d098f592-c0b8-4334-946f-1762644d8ea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1037fd-7d11-4574-bef9-6f9bb97d4811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c8c92de-6d2a-4510-afd6-8721452eeb3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93887aae-27a2-4f83-a533-ef05384536f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a964905f-9fc3-4eb9-a60b-0c6952194736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d7da35-9907-494d-b9a7-cce6b30fb5c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b6e8cd-5ed8-47cc-96ed-6bf250e91cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4841ad2-89db-4f66-b497-fdb08b8254f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe1d893-0cba-4730-95be-c9305c886713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5953edd6-e2f8-4bea-8356-d2015de60e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9245c01-9bbd-4d95-9122-3885208d1b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8064431c-db07-48a8-918e-da26f0205efc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada318d6-34a8-4942-949b-2dd4eef9b6f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea01896-0245-4c6b-ba1f-5c614d1bd8b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d60848a-eecd-4b91-b19f-8ac4a2faa24d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d02ebf6-358f-4ff1-b19f-786459b19c30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb58dc5-4299-48fc-8445-7a63c0e8e3cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8012b2b-f7eb-45f4-833b-872e20daaf35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--998d407a-5448-495d-a843-389f1a6d111e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466ae8ba-bd6c-411c-ad1c-724a18c03855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a8dc42-7017-4813-b75c-ada6675bff67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c2f62a-1731-4592-ba5f-9cb522b34623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be440413-1e66-456a-95d9-a403d4c7a314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1322b0-bd8a-45cd-89a3-5ed71bd4fed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3708c80-8572-4b36-86b5-2a193d5efd1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f536a03-37c5-42b0-8db6-a9b3cafc07d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7413d0a-948a-4e90-b670-26182e13f7f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583e6cc9-c114-488d-83a7-03e44d259a90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f02d1c-1d95-4dfd-9bee-e5e1bf547b6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f8b912-0a13-4842-9947-075b7d96550a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea14e0d-d3b6-443c-ab23-795fe08cdb19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df04b6e4-5a7c-45a4-b659-9cef4ca27017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe773d78-8826-454f-a1d8-b202cd5c2978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c39999a-dd77-4a8a-b862-69538584d5e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c02a69a-af5d-4be3-bbf4-828cc9369c6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f155fdd-2688-42ba-88ef-4573d623ecbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7effedb0-18c7-46e1-94ef-ea80a75fee2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b364b6e-7929-4c79-89ba-300876bd29e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a24003-b655-49be-9cb8-f3ddeca89362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f76b37-0171-4c19-9bb6-3d46eddc1700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11aa0754-18e4-4847-97dc-5703b6252a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e37a2e-920e-4bc7-b407-b303cc4b8c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f2aa97-5ec7-4ac4-b4e6-c1d71118d3ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59963e15-b8bc-49bb-93b3-ca2848aaa820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c47323-2e70-4b46-997a-55365ef53afa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--898db4fc-be9f-4fd5-9a7f-67622e851608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df7394a-7968-47a2-99e1-1f0c8d9e5786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee7cca6-dfaa-4b4c-b312-a362d0ef263e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76dd284c-d40b-46d9-9694-35feece9afd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e34fdf5-e329-4944-ac81-9501629df5ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ce540d-c9e4-4b74-96fc-0534559a8c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4645360f-765b-49c4-81fd-e6c9dc592299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cefe9092-8c0f-48fe-b323-0a8fdf172e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e5fcc6-adbc-4a34-9029-0ced104d9482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e791bf-b944-4fd7-b3b9-95537fed140d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5069fa-291b-4b53-8436-1e4fcc7b37c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2275a895-582b-4415-942c-24ce00089835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae6aa21e-9551-4a31-af03-4c89af95dbac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f15f7a64-108b-4c11-a74c-bb16e7a7791a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b8d332a-abd3-46f5-97e2-6eef70b04b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1077a95c-744f-425f-bbd8-b05d337ff2d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4980cbe-feaf-4a4d-ae1c-771bf20688bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a754bff-81bc-4716-82cf-5bc0fd1b7386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f9d346-0f51-4b59-be0a-3ddcd78e905a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4988ec61-dc20-4a5a-a061-55164a47fc3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d5f59c8-8205-40b3-a706-ccadfe8617d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1d5b72-84df-40f8-adc2-fe6a70dee305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2993b3a6-5466-476b-9ea4-04d02286c3f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82bb8097-6178-4eb2-bc53-795024772457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbcf4421-9643-46d1-839f-00e203a13de3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01295051-3fde-4430-85e4-e724ccd934b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a97505-539a-4f36-95f2-5e819c655070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ded5675-76f9-4bcc-bc17-9c02909cbc03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fedb243-e471-4692-94f2-95d760a46534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a02cfb-d6e3-4849-99f1-cc7962bfb762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f737ca9-9dea-4e0d-ac5f-462a5cbcb56e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f91f5fbf-93a4-4b9f-be31-597e28913406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce7d0869-8942-4692-b34d-28f8e5f71d8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2d7592-2aaa-4861-9c9b-1d269f5464c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f4d043-2600-43f5-8415-258406a0b9c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e46703-0808-4939-a43b-bdc41fae1785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fae296b-e8a2-4f74-9da9-d81a9f789da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af26a28e-9569-45a0-b5a2-110ebe426174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1409b6c6-7128-45bb-8c3e-42ab13efddde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276d7bf5-983a-4a66-9180-72c963bba337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaff2c86-875f-4fd2-bcd3-d68a59120e63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6b240f-f279-4587-83c2-88f868ce4b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60383101-951a-4f0e-a296-867f17274ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bfa45f4-c94b-4a98-b59d-cc9ebfbbd024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c751c5bc-8df1-4be5-b5a3-e4227f87b138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9f6ddc-619b-49fe-8445-763c907a3bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f8b45f-ee40-4476-92d2-ad6a6369e3f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--738b8e91-7ee6-44d1-99af-04da437a529e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce7ed91-f1a3-4216-a06f-861b78b65ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df5cc10-3d85-4c94-ab8d-b1b76ba0f521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202146c3-94c7-4714-ab12-bdb2b57852ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14de91a6-5ce1-4934-b613-9d1c9a3bf0af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ecdd3f-e49f-4aef-a44c-72211ca27319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed7ed6a7-ec20-48a3-868a-f26efb851a91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d1a451e-6933-4d82-8152-8e9962b8acce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7864476b-03af-4314-a0c4-8a4b2b044495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8acf9fe-c329-4876-af8a-eebecba880b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00bfe9ed-4b9b-4c41-984e-5e7b970951ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88fbdf8a-989a-4fdf-82b3-dd1b2b460aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e3935a-bade-4bec-b254-85da01c1bf10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f25c49-0b34-42d0-b39f-f246ba41184d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58973672-ded6-42b3-9c9a-082b884898f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2905c518-f03b-44f9-9465-30447eb4cbc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be6410b8-d87f-4b80-8933-bfb243266e97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7320c29-c5ff-4045-8468-13b491934ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5728092-b0f3-4572-916b-47a72b4c3a93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9058b79-5e3d-4399-966f-53bbe4cb74b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4716e1cd-ff7c-450c-90f8-4cfff21b5e54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26e48fc-9cef-4693-90bd-fbacbf13bba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05252b5b-c3ab-4304-a114-136b1028196e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29bf5106-5a17-477c-af45-db7bda1874af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1bfd971-86e1-41a9-9a03-d11d7014411b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59cebbb6-06bd-436d-a2eb-6627d01e8a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df49708-3afa-4c78-8103-f5fef907fc39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89becdd7-d9b8-4daa-8820-42682591720d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa306a6e-82ad-4215-8ccd-3842d4227e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c87b5f-7e60-4ed2-a389-a3b83f63831b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba87268f-0623-4f6c-8177-df207ff68d00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f16dcf-bd1d-4c71-8822-e6d31e74132e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae778c4e-8156-4e01-a412-7ab1c04aac54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40bc00ad-fb7b-4a31-ba89-cc37e972c257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d388dd95-39f1-417f-8a30-159af2d3c544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e01ae72-899c-41ed-8ca9-70b78f6ba215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a5abab-41a3-467c-870d-5dded9633184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd94fa74-49ad-4b3f-88fb-622dd0796fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4097fe4-9b5d-428c-9422-c7779b813e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a2db8c-af82-4b84-9110-f98c0669c5c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c7f464-41a7-4a0e-aed5-e7230598a1ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33687bfe-bc1c-4d7b-a451-73f06c1e1ccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d018bc7f-b2ba-4f33-b343-d7c8142e5a8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b6b106-4d47-466a-8ace-e6e5d1139d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b515250b-cca0-4595-b643-db8a79ea5003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd7a84a-c280-4ba6-ba7f-b87a20e74f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e02634-56f5-4819-bf15-796815939dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba016b7-3a0b-4e13-aa29-ec24aa068566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--309aaccc-e96d-45e6-a2c3-ef3f0d0b4c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f11a905-ca77-403e-8767-39068126b082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c27a9f-cdcc-442f-a58e-926756b74f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a81dcc52-83fc-40ea-9cea-84bc94eb4207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e10ba1-da7f-4b9d-9fa8-c668f4c31316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d113fa-d6d5-4af3-bd8c-3799bd0a9b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09969930-7b5f-444e-9372-d4900e1b3b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc6ad5f0-b92d-45a4-9c0f-144733507256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509c3658-dca3-463d-8773-22fc35d7091f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87cd0610-8c6b-4096-bb1b-a9d5c3fc5029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce99db0b-42a3-4c6a-9ce8-d0a6e8e93c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682fe079-b2b8-4fca-9a8d-6071ab5508e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bef1e3a-beb4-4aad-b3c3-0da0d24c67fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2916e294-de5f-4364-b2ec-e0d3e3da8476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6617b69-7b69-4e70-bb50-9941b4215b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c5e7037-a3d9-4bb1-9212-9f7dd399a9e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3573e926-d9a8-4128-a2eb-1d3f096dd57e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95336a8-47d7-4323-89ce-989fcbba0f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a5fc51a-5f2b-4530-8983-fda3afa85332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f82411-6c6f-4380-a081-c33551af3e8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdea7fc7-cde7-424f-b14a-55a149b8fe61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f3af0b-bac4-4b51-b756-7658910ecfe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--700aaa78-c9b4-42a9-8141-f871e94b5b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f9b19e5-a536-4088-9907-bc1ae8691ca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e38fbe-a702-4964-a97b-ae1a702ad695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53cdb0d3-1eea-4187-adf4-fa2b46206bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.24.83.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b268b7-ad26-4d08-a304-04dd2eaf4208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.235.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9329e4c-aa75-4bdc-a006-320590cb6080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.236.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--501e316b-0220-454d-a1fa-4d20c3c64db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.239.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b8af402-e410-482e-aff0-40f0996b1a8a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.94.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abafac4b-bc07-4c25-8791-bf51173316d0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.41.89.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--600eb182-113c-4b62-98b3-4ae43d96ccee", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.41.94.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b062fa5a-90cc-4582-8b26-8be13a77e0c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.43.42.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39c149f0-65fd-4174-88a2-8b9444521a5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.43.49.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d66b63de-8962-4ee7-b2e7-2247e52d2154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.24.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725868f7-44ed-4598-accf-8b8b3e743d12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a4a366-a0bb-48c1-862a-61fb3e1736aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b153065f-fc4e-49bc-9f35-25e2f3f4b57c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--825caed8-09e6-4494-8362-833cd71e8ccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa86cda0-9c7a-4ab3-a2b7-68828024642f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.58.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fda520f6-8bab-4827-b234-33a2c35700be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.76.20.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab46be44-369e-4e01-baeb-0fb05e934241", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.1.155.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfac205e-82d2-477c-a687-25adaa857071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.101.162.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--305d49ec-fb1e-48e2-8d41-eb78894e6334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.129.184.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b70910db-e007-4af1-9b37-4b1b46ebfc73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.130.161.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a985024-f0a4-47b7-ac0a-3efa4bbe66b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.130.53.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--504b6cfb-81b7-4cdc-9c81-10308891da6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.138.108.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b665ec-8d92-40df-9569-2de911cadc05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.103.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62662c4c-9302-419e-887d-5d67b41cdf5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.96.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64fd97c-07fc-466e-a99b-8a9e57767c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.143.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759a218d-0fe7-4d82-93fc-8645b6ec5a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.50.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56275ac3-2089-4af1-a5a7-572fa8375c92", "name": "Malicious Host", "description": "Web exploits: spring-boot-actuator. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.150.51.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--74b4912c-6859-4c75-a596-4e700e5585c8", "relationship_type": "indicates", "source_ref": "indicator--56275ac3-2089-4af1-a5a7-572fa8375c92", "target_ref": "attack-pattern--5e475c1d-71d0-43e0-9f8b-68c3071ac97e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c0aba7ab-d22a-4291-8855-dc17bd8f22ae", "relationship_type": "indicates", "source_ref": "indicator--56275ac3-2089-4af1-a5a7-572fa8375c92", "target_ref": "vulnerability--09e8004f-6e38-483e-978e-fb0f092cda87", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c87e8c27-7f56-4e0c-8ded-8b7e135daa78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.128.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c1ac47d-1479-43ff-8997-ec4ab63cbc25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.156.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5facf15e-b507-4d46-834b-a6dbde363452", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.156.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ac1d55-4269-4082-b111-a2875c1bfc36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.167.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3734be68-3aa0-40ae-85bb-6d7254798bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.173.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c62a2efd-26eb-481c-9bf2-eb070d3189bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.180.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dcf0226-3b63-435b-8154-5cf61dad9897", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.237.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c67ebaa-801f-4806-96cf-652921cb1881", "name": "Malicious Host", "description": "Web exploits: php-backup-grab, spring-boot-actuator. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.31.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b53a2a98-2b2b-495b-b607-263013b72e05", "relationship_type": "indicates", "source_ref": "indicator--3c67ebaa-801f-4806-96cf-652921cb1881", "target_ref": "attack-pattern--d867a213-be6c-4d69-afb6-caeecab59af3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f236e9d1-18ea-4b17-b9c5-6b8f3de8aeed", "relationship_type": "indicates", "source_ref": "indicator--3c67ebaa-801f-4806-96cf-652921cb1881", "target_ref": "attack-pattern--5e475c1d-71d0-43e0-9f8b-68c3071ac97e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a90996e-4a00-49ec-9c2e-1101039de855", "relationship_type": "indicates", "source_ref": "indicator--3c67ebaa-801f-4806-96cf-652921cb1881", "target_ref": "vulnerability--09e8004f-6e38-483e-978e-fb0f092cda87", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17eda5dc-c8af-489e-9f65-a9be79a06bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.35.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--873e2221-37f7-4a48-bd70-c9f36128a7e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.4.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ce1e7b-bac8-432f-bf86-5c97c75239fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.53.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f2e9726-0c37-494d-b07c-951403394068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.89.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89cfac84-c3a0-449b-8aa6-7e903a350831", "name": "Malicious Host", "description": "Web exploits: php-backup-grab. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.158.93.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--941cf9bc-ba07-41e4-b9b7-776e7e81f4e2", "relationship_type": "indicates", "source_ref": "indicator--89cfac84-c3a0-449b-8aa6-7e903a350831", "target_ref": "attack-pattern--d867a213-be6c-4d69-afb6-caeecab59af3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad425e38-fee5-4012-947a-6dcea2099087", "relationship_type": "indicates", "source_ref": "indicator--89cfac84-c3a0-449b-8aa6-7e903a350831", "target_ref": "vulnerability--6725651c-52bf-40f7-bf2a-10fe38562d4a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eb498b8e-2895-4425-897c-d344634044f4", "relationship_type": "indicates", "source_ref": "indicator--89cfac84-c3a0-449b-8aa6-7e903a350831", "target_ref": "vulnerability--501b7c00-c25e-4982-b0bc-0bcf23f7f8f0", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--78fac1c4-d83c-42f0-a576-b008138a464a", "relationship_type": "indicates", "source_ref": "indicator--89cfac84-c3a0-449b-8aa6-7e903a350831", "target_ref": "vulnerability--8399d8a5-0d5c-4353-8f5d-9a5c90460c8d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c0bdc4-6244-4b47-95c0-aae28c650ab1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.17.35.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec4e265-dfed-420d-beb1-2dd484e0c9c8", "name": "Malicious Host", "description": "Web exploits: php-backup-grab, spring-boot-actuator. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.175.162.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c72b337f-d05c-47e6-bb90-7599d5248a1b", "relationship_type": "indicates", "source_ref": "indicator--3ec4e265-dfed-420d-beb1-2dd484e0c9c8", "target_ref": "attack-pattern--d867a213-be6c-4d69-afb6-caeecab59af3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7ff1d1c7-0237-4fdc-b2de-aab40808bd7d", "relationship_type": "indicates", "source_ref": "indicator--3ec4e265-dfed-420d-beb1-2dd484e0c9c8", "target_ref": "attack-pattern--5e475c1d-71d0-43e0-9f8b-68c3071ac97e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e31176d-fb75-41cb-b3b9-7c265c022cc3", "relationship_type": "indicates", "source_ref": "indicator--3ec4e265-dfed-420d-beb1-2dd484e0c9c8", "target_ref": "vulnerability--09e8004f-6e38-483e-978e-fb0f092cda87", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9278007-be8d-44a3-a6d8-ff8eeaa9f100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.175.223.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89c3d5a-88c7-4ef1-86ff-e46665e76e57", "name": "Malicious Host", "description": "Web exploits: aws-credentials, php-backup-grab, spring-boot-actuator. CVEs: CVE-2002-1149, CVE-2019-5418. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.177.100.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01fe186e-c8c9-4a44-9f25-7ba459d7b278", "relationship_type": "indicates", "source_ref": "indicator--a89c3d5a-88c7-4ef1-86ff-e46665e76e57", "target_ref": "attack-pattern--8a8bb6e4-b7c8-4514-9164-c7db99614575", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--74ce540a-55ed-4c0f-8664-76779c048d59", "relationship_type": "indicates", "source_ref": "indicator--a89c3d5a-88c7-4ef1-86ff-e46665e76e57", "target_ref": "attack-pattern--d867a213-be6c-4d69-afb6-caeecab59af3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--410004c8-e486-4d5d-b661-73b2885f0401", "relationship_type": "indicates", "source_ref": "indicator--a89c3d5a-88c7-4ef1-86ff-e46665e76e57", "target_ref": "attack-pattern--5e475c1d-71d0-43e0-9f8b-68c3071ac97e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d6cf459-b7cc-4945-9b05-22753f7caf2d", "relationship_type": "indicates", "source_ref": "indicator--a89c3d5a-88c7-4ef1-86ff-e46665e76e57", "target_ref": "vulnerability--6725651c-52bf-40f7-bf2a-10fe38562d4a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--740174e0-127e-4953-82f0-28681b8803ac", "relationship_type": "indicates", "source_ref": "indicator--a89c3d5a-88c7-4ef1-86ff-e46665e76e57", "target_ref": "vulnerability--a9662e46-4e5c-492e-8f0c-d8a68b711852", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0830cbdd-c030-4f34-b681-394072e4cd1d", "relationship_type": "indicates", "source_ref": "indicator--a89c3d5a-88c7-4ef1-86ff-e46665e76e57", "target_ref": "vulnerability--09e8004f-6e38-483e-978e-fb0f092cda87", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f429e18-5f3c-4143-8cc5-fcf504c24e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.180.118.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd939305-6712-4030-90e1-f29d3e31d888", "name": "Malicious Host", "description": "Web exploits: php-backup-grab, spring-boot-actuator. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.19.17.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2825d0c2-fdd3-4950-9afc-053ac7f091a5", "relationship_type": "indicates", "source_ref": "indicator--cd939305-6712-4030-90e1-f29d3e31d888", "target_ref": "attack-pattern--d867a213-be6c-4d69-afb6-caeecab59af3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10630292-e4c4-4a54-88d3-bc385a7514f8", "relationship_type": "indicates", "source_ref": "indicator--cd939305-6712-4030-90e1-f29d3e31d888", "target_ref": "attack-pattern--5e475c1d-71d0-43e0-9f8b-68c3071ac97e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ca29e4ef-42b7-41ed-bbbf-707c12c9c87b", "relationship_type": "indicates", "source_ref": "indicator--cd939305-6712-4030-90e1-f29d3e31d888", "target_ref": "vulnerability--09e8004f-6e38-483e-978e-fb0f092cda87", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12191b74-af02-4667-83b5-5d5888d4f837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.19.230.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7673422b-b368-48b8-a0e1-0612d400f1e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.193.119.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107b70d4-0302-4209-a297-d3c2e1e479c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.197.70.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa30261-666e-4b30-a3d8-6e80ccc91892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.201.71.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d99e9bc-e9d6-4011-a4a0-af63a406e2af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.203.202.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feffef8b-2d83-429f-bad7-e73f6950a585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.39.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae024b05-6879-4372-8788-a75a9d852d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.63.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--304c7112-82b0-48eb-8335-e699ea1bef65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.63.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b29110-4954-43d8-a057-ee5f70c09878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.230.221.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1862bd5e-e185-40a8-9c80-c4cbe3b0eff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.233.122.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbef84cf-5a57-432f-b307-f333c5ed7070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.233.63.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2f5cac-5b0f-424a-a55f-3cde3207e141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.144.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1bbb6e1-a26c-4711-9881-6cd3024272db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.40.241.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3bf8f2d-32b9-4ce2-ab19-b91fe014db29", "name": "Malicious Host", "description": "Web exploits: php-backup-grab. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.47.225.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--030ff1f5-1297-4673-b816-38e0cd44f047", "relationship_type": "indicates", "source_ref": "indicator--f3bf8f2d-32b9-4ce2-ab19-b91fe014db29", "target_ref": "attack-pattern--d867a213-be6c-4d69-afb6-caeecab59af3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3a336498-8c58-4add-b909-5e504b5d951c", "relationship_type": "indicates", "source_ref": "indicator--f3bf8f2d-32b9-4ce2-ab19-b91fe014db29", "target_ref": "vulnerability--6725651c-52bf-40f7-bf2a-10fe38562d4a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6437c6a-c3c0-4b45-a4bc-dad04f0cdb20", "relationship_type": "indicates", "source_ref": "indicator--f3bf8f2d-32b9-4ce2-ab19-b91fe014db29", "target_ref": "vulnerability--501b7c00-c25e-4982-b0bc-0bcf23f7f8f0", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b01b7ec7-9241-4ea9-9c9c-beb2f8a37f19", "relationship_type": "indicates", "source_ref": "indicator--f3bf8f2d-32b9-4ce2-ab19-b91fe014db29", "target_ref": "vulnerability--8399d8a5-0d5c-4353-8f5d-9a5c90460c8d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2554bd8c-e585-428b-bfa8-8763e263cc42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.50.87.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a3d169-780a-4b6d-9de8-89dd416d822a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.139.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--044f4cb9-8a38-4c7d-9f2a-f5b0ecb00c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.173.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c05a936-da1a-47e9-83ea-c00f9c3f9f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.247.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92603567-555f-40af-ab8f-803689bccf11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.199.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--059db04f-28ec-418e-a6bd-55ee7707f80f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.216.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee36170-8e0d-4253-9e32-ad84a99eda21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.218.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a77a1c9-4f70-4ac4-a03c-8b4dedb4ef6c", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.231.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0acf3f6-d37a-47d7-a1a4-33d5b5ce8970", "name": "Malicious Host", "description": "Web exploits: php-backup-grab. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.61.244.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84938a46-6c63-441f-9ee8-bdebd6a0e412", "relationship_type": "indicates", "source_ref": "indicator--c0acf3f6-d37a-47d7-a1a4-33d5b5ce8970", "target_ref": "attack-pattern--d867a213-be6c-4d69-afb6-caeecab59af3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--18e677a4-ebfb-45c2-869d-3b7abcc38045", "relationship_type": "indicates", "source_ref": "indicator--c0acf3f6-d37a-47d7-a1a4-33d5b5ce8970", "target_ref": "vulnerability--6725651c-52bf-40f7-bf2a-10fe38562d4a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a4132ae0-d61e-477c-bc6d-a56058cd49d1", "relationship_type": "indicates", "source_ref": "indicator--c0acf3f6-d37a-47d7-a1a4-33d5b5ce8970", "target_ref": "vulnerability--501b7c00-c25e-4982-b0bc-0bcf23f7f8f0", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5109f773-3fa1-4d3a-bac0-53e84bbb7499", "relationship_type": "indicates", "source_ref": "indicator--c0acf3f6-d37a-47d7-a1a4-33d5b5ce8970", "target_ref": "vulnerability--8399d8a5-0d5c-4353-8f5d-9a5c90460c8d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c32881-3cd4-46ff-be21-4bcc6d052de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.109.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--067a05fc-b394-4235-8290-38457376dfee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.166.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce579c3e-278d-4bc3-a5cb-d587c68c547e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.177.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d2f11d-d128-41ac-8d54-fad298539aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.216.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--465962e6-23a2-4de7-bcb4-a445ec98ad04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.218.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c9338b8-0cc1-47a1-a1d4-2df42fc558b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.250.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--545e650b-4e5f-47b4-83f2-96b04ccc0c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.35.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d1e1c0-2501-495a-bed5-97e72f365743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.4.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d4e4cac-1e7d-426a-9aad-dd35d2e1172c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.62.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e903dc3-8c7d-4a49-b37a-978c92957087", "name": "Malicious Host", "description": "Web exploits: spring-boot-actuator. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.65.99.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--06b7d4a5-bf80-4ba1-8ce3-f0c3913cf327", "relationship_type": "indicates", "source_ref": "indicator--3e903dc3-8c7d-4a49-b37a-978c92957087", "target_ref": "attack-pattern--5e475c1d-71d0-43e0-9f8b-68c3071ac97e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--93b39838-df42-4aae-8bd1-3bed6696144f", "relationship_type": "indicates", "source_ref": "indicator--3e903dc3-8c7d-4a49-b37a-978c92957087", "target_ref": "vulnerability--09e8004f-6e38-483e-978e-fb0f092cda87", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b105d3b-bbf5-47c9-92ef-37f928f9c11c", "name": "Malicious Host", "description": "Web exploits: php-backup-grab. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.120.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3a1db168-3c36-45c9-9c6d-d6a40f724793", "relationship_type": "indicates", "source_ref": "indicator--9b105d3b-bbf5-47c9-92ef-37f928f9c11c", "target_ref": "attack-pattern--d867a213-be6c-4d69-afb6-caeecab59af3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f486d92-2714-488c-8f28-c19a4c573d95", "relationship_type": "indicates", "source_ref": "indicator--9b105d3b-bbf5-47c9-92ef-37f928f9c11c", "target_ref": "vulnerability--6725651c-52bf-40f7-bf2a-10fe38562d4a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d9e2c21-f531-4d06-abd2-a179b4dad8bd", "relationship_type": "indicates", "source_ref": "indicator--9b105d3b-bbf5-47c9-92ef-37f928f9c11c", "target_ref": "vulnerability--501b7c00-c25e-4982-b0bc-0bcf23f7f8f0", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fede830c-1fcc-4516-9c89-fc30d9ca0f22", "relationship_type": "indicates", "source_ref": "indicator--9b105d3b-bbf5-47c9-92ef-37f928f9c11c", "target_ref": "vulnerability--8399d8a5-0d5c-4353-8f5d-9a5c90460c8d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f5fae8-2b3b-4cf7-96e8-1e0e92a2351c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.135.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee9079ae-a81e-4f9e-88b7-63d068224d68", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.114.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf67a08-ff1e-4e00-8ef3-de8d804f81c8", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.162.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2efb2d82-898c-4a11-aeec-a8c4906236bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.199.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c558eb-7466-49ad-ba4a-43043af6b751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.234.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657d7fd6-81fb-40a7-b9f9-6e006f19a20a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.8.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21201d57-04d3-47d1-b8da-ef9466f277a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.121.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64fc12b2-d36d-4eef-acee-d3ab49115195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.143.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f18191-1a86-46f0-b0e8-52b064e61543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.145.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc92eeaa-25ee-4468-8583-cc752faa0e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.20.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf0992ba-dab9-4def-ad74-6c0039240dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.237.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9dc08c2-7bbe-4e50-8574-9e53afa0c0f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.30.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a262ec-7e26-428f-9d43-c3845ffca53f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.82.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5816722-b2c4-435d-865b-35cce1f84eee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.81.7.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd021718-82f1-4f8a-84ea-38af307008fa", "name": "Malicious Host", "description": "Web exploits: php-backup-grab. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.85.11.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7bdd66fa-b933-40a4-bf36-e5eb396c2cdc", "relationship_type": "indicates", "source_ref": "indicator--dd021718-82f1-4f8a-84ea-38af307008fa", "target_ref": "attack-pattern--d867a213-be6c-4d69-afb6-caeecab59af3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--93c85de7-e088-4169-92a4-85dc32cf39a8", "relationship_type": "indicates", "source_ref": "indicator--dd021718-82f1-4f8a-84ea-38af307008fa", "target_ref": "vulnerability--6725651c-52bf-40f7-bf2a-10fe38562d4a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1db4f014-d79e-4c27-93d0-80d3cd79f138", "relationship_type": "indicates", "source_ref": "indicator--dd021718-82f1-4f8a-84ea-38af307008fa", "target_ref": "vulnerability--501b7c00-c25e-4982-b0bc-0bcf23f7f8f0", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e89956e-abe8-451d-9553-9ca1f23126c0", "relationship_type": "indicates", "source_ref": "indicator--dd021718-82f1-4f8a-84ea-38af307008fa", "target_ref": "vulnerability--8399d8a5-0d5c-4353-8f5d-9a5c90460c8d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1020963-972f-4d15-aa90-a31ade41d75a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.86.64.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a35a42-5191-43f7-91bb-b76618fdda57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.88.187.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917066cf-a9f5-4b4c-9058-14b92497d45a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.90.157.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49fbacd3-2170-4786-b0a1-9b8dd4b357ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.92.138.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17144a67-12dd-4229-a4d2-02580dd88a8a", "name": "Malicious Host", "description": "Web exploits: php-backup-grab. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.93.8.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--72963d42-2dd9-417a-9d94-b739ad290e0c", "relationship_type": "indicates", "source_ref": "indicator--17144a67-12dd-4229-a4d2-02580dd88a8a", "target_ref": "attack-pattern--d867a213-be6c-4d69-afb6-caeecab59af3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--424f7f1a-6ce5-4181-96c0-71b1b4dd337c", "relationship_type": "indicates", "source_ref": "indicator--17144a67-12dd-4229-a4d2-02580dd88a8a", "target_ref": "vulnerability--6725651c-52bf-40f7-bf2a-10fe38562d4a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--242838e5-33fd-4364-8e94-2711e669ca53", "relationship_type": "indicates", "source_ref": "indicator--17144a67-12dd-4229-a4d2-02580dd88a8a", "target_ref": "vulnerability--501b7c00-c25e-4982-b0bc-0bcf23f7f8f0", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b80940c-0022-4f07-b1df-d2a708ca6228", "relationship_type": "indicates", "source_ref": "indicator--17144a67-12dd-4229-a4d2-02580dd88a8a", "target_ref": "vulnerability--8399d8a5-0d5c-4353-8f5d-9a5c90460c8d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6dee509-6aea-44bf-8d91-90ecc0d06a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.94.140.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f06758e5-259c-41f0-adab-65325451bd00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.169.206.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff628fb1-1825-4a59-8fc1-066d84bf1d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.172.134.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5c3d67-9722-485a-b208-9b91c049305f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.186.152.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af09aeb-db36-4cda-b082-6568e8bf6659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.153.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd8d57f3-6ba0-4ada-84d0-6fe2dfaa362a", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.201.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f6e7fb1-5dc6-4960-8f25-25ac0483e4c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.238.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f5d990b-4a76-4e78-80ba-021ad34b5ab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.32.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a5e7cb3-6989-433c-bff9-45214bede3ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.36.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b046285-31e2-4b56-bf98-35f91cdea4ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd3eb82-6ff8-4914-9bd9-3e4366c35fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b0c876-6e2c-486a-8b72-962c45b72233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eababfd-e9c2-4d39-b94d-9ea7fad60952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--739b04c7-8fc6-4b79-bf19-6384a2622383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72192ae5-5fdf-49e1-9a97-6811260862f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f95ead6-6717-4e5c-8335-190ef60ac21f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1738c35d-ec88-4171-aae9-f111608bfd5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37371738-d488-4f67-9d8f-788f60e6421c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e64164-815c-4182-b047-d8667f1cd8fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f9693b1-0bd6-4e25-975f-5b0c8da04a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f3ca5c-f318-44ca-8c4c-6728781f41af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f663d5-da91-4016-a5b1-312e141d1dac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b60f25a5-d45d-40ff-b501-38f5b5bc1d29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d46fdd23-1127-4a35-8910-469ca26e936f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57260d06-4e1c-4333-b76c-93a70c0ac9d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5801b06b-e452-4579-b22d-98dd1c9484f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5a8f60-1fcc-4c10-9822-d22e78a69287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042a43ac-e356-4c81-8b21-873ea64fa148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0afff342-7c27-4f69-b910-bfe6ab3f1017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02edd83a-3ffb-42da-abe5-4ee6f37c5641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b889676-738b-42c0-b301-c10aaf9423c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8b25cc-49bd-4b51-81d9-5c78d291ee78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea8903d-5597-41c1-9f9e-8ba2db1b56f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f03513c-9b68-42c6-87c5-80e39c58532d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd9ae39-9523-4073-8b0e-4b699e4792cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21562d71-1c22-4194-8b77-71f6fb098f0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b69aaa23-930e-47c1-be09-3f676ed6c4e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f12b93c5-6531-4649-94fb-02f7101e55ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e2f79a0-2e97-4eb5-9e90-7ec1e94ed726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d48221-fdd5-40b4-90c4-c4a86a0c55fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f22971-0e5a-4413-aa1b-a4381d6b6ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830637ee-b7cf-4cbe-9fd1-12e005626217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3303bdd-b2a5-41e0-aa44-0ff0e9721538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf872359-ec3e-4c40-b0b9-fc258b882eaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a40c9c4d-94e6-4af8-8b67-e6e490c68698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b65b1d7a-601d-4f3f-8528-39015a896ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2439c7-069c-484a-a3c5-c0eadd5e2c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de31416b-f83e-4bd5-91d6-9c9c9d679c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c78524-bab2-48ed-8c80-dddeceb4171b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2fb620-9679-4ac4-89d0-c7cbc4655754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063b11e2-11a6-4883-8af7-a83a16285302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc2180d3-fda9-47e8-a16e-3ae071fab17c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff44736-3d64-41c9-a0c0-86fbe012c44b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc81c87b-9234-4d56-bf81-ec4829c1830a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9e0cc5-515e-4e83-ab9b-9f0520f12f0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb738afb-919e-4791-8383-9a2b56cf7335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--223e7a5e-f37e-49ac-9472-4c91dc8b46be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c123b330-1dda-4fab-bb9b-a58a1dedfdcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb9b9631-e055-40ec-b53b-22d03be8f9e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f04178-072f-4117-80a6-ab6d2d4b6113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a9d165-ae70-41fb-944a-8849f5b5560e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe5729e2-5bee-4df6-b8dd-9264531bede8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc8d0d54-f34b-4351-8303-372dce4be526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17532d7e-437b-41a4-9bd7-d6b2fb286f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d37de9ed-1834-4546-a57c-f27be7774f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee31cdc-08db-45b8-b4e3-5109cea2d713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d8e4618-0d99-47ba-a597-b1835544cadf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d986168-6b92-411f-a522-063beceaf10a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35b9974-d089-401e-b59c-9affaef0813a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feae0040-e264-49a1-94d8-e90a05aeb696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ed3279-c11b-4ad1-92ba-4a6138182d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a1fa80e-7c6e-4af0-9ac8-7ff2eafe1b15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb44103e-ea5b-4b52-82a2-2627195ba123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a221748-a8c6-480f-bafe-24e9718b6983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe47a8f-4f18-498a-b8a4-b2d00306306c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d8ad980-eced-4afa-a6a6-c407fcc9eee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb515d02-18e4-4f85-be64-909f64cdf983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f64e12-d744-4ddf-8cb9-a702a6a29aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a483e9-f6a4-46e1-83b2-40282047a768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247b1fbb-9363-42e2-8085-dd34084c8bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85676a88-edd1-4ef1-bfb1-383b245f5d16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5e408f-1c31-4344-88e1-41cb7bb4df79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05ebf7e-9fba-4e33-b854-623f41ceb590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644a54d7-7613-4fe9-80e4-f63f45dac4d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5113aef-b619-406e-b8fd-9a50feaa3865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91efbefe-6263-464f-ae27-5b104a456319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef8ad46-76a4-49c4-a657-bc02842e9cf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c4b9ab1-67bb-48e1-8689-ee175d53a5a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3fc8c43-d4fb-4e64-bbf8-4aabefef7e8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3713e6e4-f090-439b-a7b7-926ada8d6f24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d022b43c-c7a8-4b65-a798-7a003ac017c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2997f4b-58a8-48bb-961e-4703fa5fb145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f384cf1-5547-45f0-8aa6-f7c9c7b3b6cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5f9293-ba45-4ce9-a74e-e11bc421ec28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f57d1e-52e6-4210-854d-54d6173d5f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d584430d-0c80-44e1-8a07-5c36135cdcfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec0f45c-92c5-4635-837a-a6eb8d444bad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af6a582-8964-459b-823c-24f84c222a80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a66b01b-dd57-4802-a6f1-72556eed1267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26781431-fc52-4501-8424-aa985b832783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6771bb-a960-452c-b33e-a461811b3bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20dcfbdb-e34f-4ca8-a077-8cebfc2e7e54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d48154c0-4cd9-49f3-b9fc-ecd91e32626c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e2cbfd1-b385-4fd2-92f7-7f28cfee41a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e0ccc1-0796-46d1-a764-c14ab98ec9db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f8f4a32-c96e-4917-9cfc-5e599b411218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf8ed71-a195-4844-a035-a44bb8320ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27cf1b6-250d-4f02-bc62-50179c43ba9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8648ac5-786c-4aba-a53b-3c7527ca1761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20779f1-7e97-411c-8840-70812fad8e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6386e6d2-d09a-4190-8a9a-28d1c4c05cc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec0bd3cd-fcbf-4fe8-ad87-331187fc0690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7519c61-dc29-4c87-b729-2a7b4970b558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdeba037-ccc5-4a72-aa1d-374132f2b923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff2a4e4-ffbc-48d6-b463-08a68edef0eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e507d8b3-e930-4e3b-b2ae-10a122a9a1af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4620cfee-8ebf-4bde-90e1-3db262944cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53eb340-76dd-4958-9af4-e0d8e23b7308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb110b2-b003-464b-96d1-008882ebc75e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db3dc81-e360-454d-9548-2b1c62a05040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02958cd1-665b-4603-8448-987c993604bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971463ed-c73b-41a8-beaf-d39c68f245e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e184fe0-76de-4eeb-8f1d-e02ff9c56389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82877985-a128-4106-a8a5-4a68efb60435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f419fa6-2e06-4bd4-afb9-70a75f17bb18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bccbe81a-732a-4645-a2f4-a24cc1971119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbdc17c7-2c45-4546-9322-e61c8b4ddae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd98e24d-5e4a-4181-a0cf-51697d870152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c56482d-9ebb-4380-9f0d-ee0976fd3e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a14d12df-3cfe-4146-9ddc-fc107f71fa1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d647e23-2a73-4014-98f0-feca7a9999b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23d3dd4b-ac78-415e-9f18-9d81a0391a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b62e72-cb75-4150-ba06-0a833063409e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b02a38b-c567-4f5f-985c-03f5d33fbc55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d30d391-1251-4953-b826-434c84dc91d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53e56b9-d577-45d3-8b93-49221fdd3a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8149f122-a102-4b37-890c-a37f1a907e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d652f11f-5cd8-4bae-aa98-728a72780e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027c8a08-1978-4b16-8bca-ddea434aa197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4214f71c-86b4-4bb1-be7d-658afdd86f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d15259e-4bd9-4f84-b7ca-4980f69464f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da4966da-5851-4ff3-ad46-337414a0efb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba00a92e-adf4-4f04-bb1d-5a7a5950646e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f43ae1-78b9-4c33-8725-847a80dd1985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12654097-f583-4378-9bbe-69f5f3ae79ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d008d38-dcf9-47c0-bf88-e4cd8a78aa44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--438bdf5d-a215-47dc-82d3-0c69e3ddfb2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c998219-7937-4ebc-af52-a4b0645349c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0985ec00-7bb7-4772-bc6f-f1fb9bd0df26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc5d8a1-b927-432c-925d-ff0488ae0be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d50dee46-538d-4692-8f7b-4569580b8024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de96d2a-eb16-47db-948d-80dcc5929b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b1cc0e-f53d-46e5-804f-ab93249ddd38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e798bed9-37f0-4138-a0fd-afed3812b265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--630c2ef7-f1c0-48df-9bc8-62228c28e259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b1a4ee-fb45-4053-bbf2-98037e9d46b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c40e291-c12b-4d8f-9609-482795aa3b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c1cbc08-72f6-49a4-84f9-7ed71eb2476b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f1b34e-65e4-4ac0-ae95-9b97b3f35e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fead9784-e305-4fff-8e5f-c079839bf2c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--319b59c6-c44d-40bb-8a6d-eabe6ad5cac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f82825cd-66dd-4d52-a843-ecd9aff790c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab7741e4-60cf-4b73-963f-f790be00a6b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e21ff316-2dce-41d6-b86e-27f9a5cfa2b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126f61fd-1641-46a7-afc4-65e86d72d67b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b7f4cd-7760-42ce-9d29-56b18ee11fe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07bfcb6b-4dd9-44ea-9334-e5b9be176335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4109e200-3a22-4942-bbc2-31804e0cd81b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e90b171-f83c-4457-bb9f-238c70bf0664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ca96e1-4511-45dd-a198-676bdddabb74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b3a4c1-74ef-4922-88d8-4a5074211080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a567890-57d6-42ff-bc3b-47d39aecec82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f6fd7c-9543-477d-81a0-5b9b077b2f90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee2642d8-e80a-4622-915e-6979913e2865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee80026-8a2c-460e-8943-7b155d82bffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a8ce5ba-8aca-4e38-9b5b-9420a953ec4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15077b14-7a4c-4d79-9719-e3fb14b83230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8141bcb-e188-4389-be36-ef128c74338a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f943cce9-64a9-4970-8e12-ca136386ce4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e1b4def-0734-4e16-98aa-8ae5f35fdd80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44296593-96d4-4a30-a35a-20927428d822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9622a598-c66a-4135-bdb4-4baf1edf6730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--447988db-ab17-4d43-88ea-4f71d090f898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5c1de1-426a-4f99-8b69-a829fdd0a68c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ef80c9-3dc5-47ea-92ca-c7fcc8e93b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a81293-5a8c-484d-be8e-481bf8e10d62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56303ff3-c3e0-448d-952a-61be893cf58d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be5cd8ac-d488-4d12-8f53-c626238983da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0099f01a-017d-4fc6-b2b2-1c8acec8f9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a10c92b8-b41d-4fdb-8844-8ea847be49ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00335ce8-f206-428b-876c-c33c50c97988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e922899-75ec-4a9b-bb54-1246b9d94934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd851bc-d1a4-46fd-be19-98cd6fdcad28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5634c44b-9a11-4783-9e39-8bb8abd7595a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52224f17-f046-4eb2-8f16-49cd8f0657ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af018da-d1fe-4f02-9cb6-f4de19bee218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9515f198-ca5e-4ba2-a0cc-ffd91f3530ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d1e743-67a4-42eb-9e9a-4cbe3d275a04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2faf25d0-142c-4e7e-83a6-9434a83dbf9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c3614d-d72e-4f83-81f4-dd47ecb8536f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf40e79-f5ad-407c-a1f8-e906b1ecd437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a403a6dc-592b-4bd4-9672-583ff15fab8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--088a9ad5-fc73-4812-a3db-157cc2ffd094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--095ad4a0-6d2d-42a8-a3cc-5f04a0638fc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6bc40a8-b553-4548-9a8a-436123d71caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d63df68-2864-4af1-b065-a0d76bddb09c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7448fff1-546c-4dc2-ad02-2914f1815b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--273b78fd-a4d3-45fa-bf14-6a4c77fa5906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab9582dc-754d-4e7b-89a3-dd7ee27414c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db443cb-77bc-4b4a-8230-0fd94391847a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96485a1a-f824-4ad9-a06c-d2839a4addae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61b2c86-7efd-4690-b228-fcb8d56c0a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--624b4d76-9e39-4732-aa92-10f08375a0d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d70c45-c4f6-4e61-9264-6ced019adbe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e2a3261-840a-4955-83ba-7734308ad3ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a394b7-e763-478b-9183-8dfc01d3e8a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a626f5a5-7cfe-4cd0-a8fd-671e18f3e55a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18bdffd3-97f1-4cdc-a590-50df8d664c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ff6b58-31d2-48ea-be57-64881675cca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e64273-5649-4711-8d95-3fe6dfca6d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c197922-cd27-4e9b-a0ee-1c59eca01be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593d941d-3e82-4e47-8005-ea5987a34172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605f1d46-ca0e-4a46-96b1-b970f2f03625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71322a72-2df8-4b73-9686-09ec3b13106f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e10c49-cf7e-44ad-82ac-80a227a21866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b42ff69f-b9c0-485b-b1ab-5dbd0557d48f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61cc5a26-568f-4bfc-8413-d52c7eaeb341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec652ba-c256-4019-934f-bb9e897ef3b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--423fdf18-72b4-45cb-b229-3ec7c4b7045d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--279e6c6e-9726-4484-9caa-3826abb059cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08770a56-a4e7-43e5-a9d9-4525c8704fad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2269a21c-5add-447f-b60d-255cbd0d722e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3232c39-5a47-4ac3-9057-11b1e52150f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e535e2-e391-42cc-8b40-f3256a33cfde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff8a8a5b-364a-4055-bbfb-96d60add093b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--026c6ba3-1517-4f42-bcac-bb1d481fa866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aee6936-2d86-4b47-b38d-2f6b0784de73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--092e388e-22d9-4ca5-a9ec-da18eb44ff28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954f2ece-399e-4d5c-abb7-9b03644dbe90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74ff11a-828b-4e6f-ba75-43479263dfa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5ebf2d-6cf0-4bad-b188-2811c80679fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--741590db-2f07-4064-b740-8c58c7c763e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31dbedac-a1e4-4636-a34e-af6be8de84c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db47f3e8-76d4-4355-9349-887f3749ea92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe7d3ed-4e82-4554-8e66-4f43b3b1227d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--032bf1e2-7dd8-4527-8949-12cea68a22bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f454c30-f7b8-4fdd-bac1-69803cf77f24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceef2fd3-40bf-4c15-9216-ddf84b08e0db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--395bd04a-a42d-40ca-bc90-fb59b46756e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f7189b8-b1ce-405e-be7a-6b94c7ed5206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a89b3e-8cfa-439d-85cf-3ad603efe335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a66bd3-0292-47d7-9ca5-a86f7c2cfe53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5488d817-f364-4d7e-a89c-33922f192ab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da904bd9-68ed-4827-bdb2-16906ad8ddf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba4d524a-5509-4857-b685-0672befef0d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--690c6ecc-3e81-496c-af6b-1441786c9159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d76596fb-521d-4000-bffb-0bd1697c4a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--428b458c-6282-48c4-8155-7cc1bf9ae564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57481041-0956-4e2d-bab7-8a01f6e3d50a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e43cb974-2f7b-4197-8347-22d1e66fe1dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc43717b-6787-49ed-97f1-59f1cac6e34a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7dd7546-203c-4afe-833c-ca009789eab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eae0ff8-7261-4934-a0fd-653fd5868194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bfdd467-7e51-4f31-883b-5691920e6b06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b9e2ce-0cd0-4231-bacd-84b814ea8cf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149fc572-b629-47ca-95c8-e45da07b2415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--884f2752-72dc-4809-84b1-77dca6265720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5b6163-5ce1-4a16-bd14-bd6d6224f4e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55a1ade-244e-4cf6-be11-81adbc771f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b1e6ee4-cb66-4ea3-9403-006a0a751029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe48ceb-93fb-4f52-8782-e9556fbd9b77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.18.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b6b6df-9f36-4e40-9387-964024bf4136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.52.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f97eb668-97a0-427f-9509-538ff0c43ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.228.30.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3c265b-3758-43a8-a347-490d7ec9f52d", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.22.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a4a364-1a87-4238-8c99-5ad8336788f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.52.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f4e98f-3a06-46a3-8915-42cd905da79f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.185.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a31c00ed-a9af-484d-b324-11810d7dc7ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.191.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c38059ef-dc65-4de9-a954-061660b4e988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.242.133.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f204090-282b-4ab8-ac8b-53fc0b9a7303", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.245.101.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c99cf5b-1320-459a-a4de-dbceae88ab07", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.89.95.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d78c5975-8abc-4f2f-9d81-4791aa990735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.133.163.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0732d8-bb5d-4cc4-a763-68557faaeff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.134.27.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f63bce-488f-4931-ac10-116841f190db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.234.110.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd767fc-a50f-40ce-b6e3-bf6743dcff8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.250.221.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ed2da4-1316-46d9-9cff-79c2c9715254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d493f90-5130-49a0-b540-3fa2d60f8cd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9455e759-e3f2-4bb4-8400-53793faf9950", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.32.156.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c490c1-603f-404e-84e5-6e68580ac984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.32.3.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc745553-3400-41c8-b277-265cac16d74a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.39.206.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f4da269-c2c0-4d93-aceb-99a63b277afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.50.176.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d31180-3272-4aaf-8657-4ab0e57815ae", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.88.16.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd702c2-9fbb-40f5-8fa2-fa66b91cc77a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.111.52.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b638236-9eba-45c8-a1b4-619e85f43059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.112.26.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f99eb34-3ce9-401a-9437-f13424630fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.120.162.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da0b293d-e043-49dc-b0a5-b08c5f9fcb44", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.139.53.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--766125da-ec3e-464d-9dcd-fce3d6b7b71a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.221.195.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e4f7a5-b922-4c9d-b072-f3a3aaec134e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.236.210.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f2350f-89f8-40bc-a586-1cf65af70884", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.49.177.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7682b4-4f21-4ff1-892f-d8f60a2bed55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.67.113.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6450106-9816-4653-aa54-851d4492a945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.9.4.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71973251-c899-4ed7-a827-8681b81f5b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.110.46.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bdca907-8249-4de0-ba38-654fb441325b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.118.15.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d69d146a-2227-4420-932f-d375c58fba09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.146.28.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dbf5353-2593-4100-877a-eef8df1876c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.148.20.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c22f648-6f68-49c5-bb40-80a0dafc23e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.159.227.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d5211cb-e478-48c4-909e-94834c638aac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.19.156.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--330fccb1-ace8-4214-9329-0f9d1b736f61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.194.250.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef2643de-7afe-42aa-a605-5286bafc0bc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.199.65.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe175c57-5e66-4001-8b50-e7f80c72ab1d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.210.226.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d1132a-7290-4016-a4d8-2a5c87077e8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.25.40.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07fbce38-f50b-4250-bb12-d52e9f7f0ff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.250.64.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--172fbc64-8bbb-4d43-a0d9-6bcd3a65ccb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.51.237.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf19a4a3-aaae-4f69-a9b1-e44a77fedd4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.100.74.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f617a2c8-0772-4554-b02d-a7d51ea478d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.100.85.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef8d104-e49c-4764-beba-50e1cfeffbfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.152.175.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--458635f0-a25c-4ded-a460-40df59e85073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.37.204.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c51ad2-46f3-4f92-9366-1126407467eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.69.105.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acdf3e4f-d959-4c7e-95e2-6f494b5306f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.78.139.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be640e37-9ea5-403f-8dbb-bcf7f917eb53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.81.36.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53e2dfd3-a98c-4353-b229-87844186d431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.86.195.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7bc162e-ba9b-402f-9dbc-4a44e1677584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.88.3.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19f67ca-32fb-412f-b68e-f258743faab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.1.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a785b9-59b0-443f-8bc1-40d2310135fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.1.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--635b0ca7-9706-4694-9f2a-8c2c7e449b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.17.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d56401ac-ea90-4270-85e1-e621f8f9deb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.17.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e19910-9391-46fc-aea8-36754da6a249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.17.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c5d3985-5358-4be7-abe0-7348b0fbd945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.2.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e39a795-5081-44c9-b797-c5c696e65bb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.2.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--606bcee5-6c52-42a1-af4a-79b09ed978c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.240.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--862e4c39-76e3-4ea8-b78c-336ad843c2e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.240.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cadd3531-37cd-4b97-8975-cc2541b03b7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.240.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a89ee64-8dc1-43ba-9f75-6046c26f15f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.240.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af073b9c-51bb-49e8-aeaf-36b564a8b016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.9.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96546ab-742e-43ad-b21e-7c5233596a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.9.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a4f1e6-4997-449e-bb13-de1e3a09d874", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.150.189.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c97058ab-0fdf-4ee6-87de-f06f61c781f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.150.200.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba910d13-7efb-446c-98d7-5f21ab09707a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.210.91.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a2ff4e-ccf1-496d-ad08-5d22d2cf4a0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.154.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496a3254-f0ee-412d-a034-5fc2f0a61db4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.181.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d82ac237-fae2-4bb9-9801-d688f0bfe662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.249.17.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51491867-d82d-485b-a227-1ced53c289da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.249.17.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad09cf60-4b74-4f61-a26d-193e711fe17e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.249.17.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fecee004-0f1f-4439-b52b-8656416b8084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.24.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c7c778e-e9f1-4101-9bde-72c03a1e8c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.27.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a65317a-4094-4277-a162-e1cb6d3db3d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.27.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b7070f-df89-4cb9-80bc-e53ed0007a9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.28.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d77e6f9-4085-465d-9132-2513c94cc7bb", "name": "Malicious Host", "description": "Web exploits: exchange-ecp-proxyshell. CVEs: CVE-2021-26855. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.28.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34473", "external_id": "CVE-2021-34473"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3feae5a-8769-4799-bd70-becd31f259e7", "relationship_type": "indicates", "source_ref": "indicator--2d77e6f9-4085-465d-9132-2513c94cc7bb", "target_ref": "attack-pattern--9f6bd0dd-9d9b-4eea-b75b-9f1c56fe33c8", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--43b64229-b1a9-4b09-b5e0-55290bde1478", "relationship_type": "indicates", "source_ref": "indicator--2d77e6f9-4085-465d-9132-2513c94cc7bb", "target_ref": "vulnerability--d3d48e11-98c1-4f64-b1db-624611a10a69", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3a606bc2-dc95-4115-9b1b-db7c35a532d5", "relationship_type": "indicates", "source_ref": "indicator--2d77e6f9-4085-465d-9132-2513c94cc7bb", "target_ref": "vulnerability--b3bad351-28c5-4f35-ba75-f7a777173900", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082c0a4b-c3e5-46fc-abc4-eaff03fc9998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.28.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02b6ee80-22e2-4e78-9b98-3ae2d2156225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.28.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f42be17-3425-4f31-a395-7bb2cb81d6a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.29.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8919e36-fbd9-4b88-a0d9-8fb38c074b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.33.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec516a9e-a1bc-49be-98e9-39c1af026926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.34.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d066e85-67d0-4498-b706-f1050e9849d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.34.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--908e908a-7aee-4f95-b1aa-4c9715f90940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.35.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f299f61a-fc50-4251-9ad3-f0b96ce612be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.43.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d98474d-fac0-4296-b1b3-b8d2bef11d90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.44.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4609106-b965-45ac-b6cb-468358401f91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.44.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bafe292c-4b85-4345-85aa-333f6c6c3647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.112.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b4db85-55bd-4320-817c-c283bf55965d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.114.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3093491-4899-4dd6-af30-52e9353023cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.120.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b922c238-6f4a-44fe-88d3-a58baad18117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.121.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f92cdd-c150-4333-a22e-496bf3877d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.122.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--118cb4fa-c8e2-4c77-8d35-14b48d28bbdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.170.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1293ddba-13ea-4a97-9289-4f0dfe44bd6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.170.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b92f3d-c80f-4151-b941-e748e2a395cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.178.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b45c9cd-2d92-4c5f-9b18-6522d54efa46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.178.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee5324b-938b-4d5c-8250-f39ab1753660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.178.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2fb528-573f-474a-b414-ace8f0e8eae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.178.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08fcf0fa-563a-4b39-8efa-85b4069c9980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.179.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f72e19-4fcb-4adb-b11c-636bdab021c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.179.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--318cea8b-a972-44f4-b940-fd49ee8b2a04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.179.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e9a029e-52a5-4571-a8cd-31cc51034472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.179.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf62736-59ec-46fa-840c-f34c4f02d8fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.179.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0adbb848-2076-49fe-a9ad-6f3b16f0f128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.179.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7dd4548-696e-4054-b1aa-4330efee2d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.179.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8e7c14-83f8-4c75-b639-fecfa73583c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.179.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69430558-9fe1-4d70-9326-ae4ce845da24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee9df8c3-f66a-4a0b-8a1c-96127e7de0c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac8e0459-badb-416d-bb39-6d40b32d34a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff82c57-bdad-4ea5-8f12-4577d4c635d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e90ef9-74ef-4016-be96-4baa56a9ee09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0309aa4a-f7fe-4376-8e17-ca41fde6cc9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.187.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f17414b4-b97b-49fb-a2ea-8b20f46af9bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.81.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683f39c8-5304-47d4-b171-15cbea228a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.81.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8599e71-c9c4-45c3-b3ca-f6c0f893c39b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.82.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ca6fa7-9f0c-4e6d-9d9e-1721fc8aca6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.82.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb6c410f-db7b-4310-9dc3-3b6f1b005b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.82.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd785386-af0e-4135-a0f0-1b56773b1a39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.82.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966024c9-8d56-4f66-a188-b9c8293670e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.83.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e228fc89-8ed2-4aed-baa1-1b714d68c891", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.125.42.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293023ec-cbe9-4c53-aa2a-fe2b8eddc2d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.171.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77155389-deee-488a-9159-505e0e290aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.178.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a32d0c3f-6e0e-44ec-aa9e-2f85dd4c22f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.68.94.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f35341-5316-4d83-b412-827a3fb9ff90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.208.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbba5e4c-c4f2-4e9d-ad2b-a4e66c0980a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.209.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e6a3650-9a38-4c24-8a4f-f8a1712a7819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.210.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9643412-c7f1-4b7d-9e0e-119dc2e537e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.210.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea9268e4-df49-4025-a6e9-c9d451a4820b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.100.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba5a7db-3d93-4ae2-ad87-2c6e036eb5ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.110.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f035e67-9ed2-4f20-8b62-fb8e1ed7e9a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.115.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336b8855-ddee-45ed-8683-6a247cfc4b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.122.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51757176-4347-4055-b126-68c9c2d25c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.123.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1142eed-8deb-4cbd-8070-56bf0c6adf9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.176.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e88a05b-5f0e-4076-9ae6-efd677ffb826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.253.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b85f583-c92c-46a9-a1c0-3ae6928068f1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb9bde53-ecdb-4eef-b4ee-a73cff07750e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2515b15c-03d9-4f96-9ef8-a7c88dd21c0f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5f9cbd-6341-4f5a-bbfa-d47e84c888e8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45f4d90-9ea7-436d-ab47-69dd10828021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.202.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24d7e1d-ea34-4335-bf11-00a820ef3675", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.202.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cde15cb-c61b-433f-8e85-b8a4039c5cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.203.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--650a10de-d8fa-49b9-87f4-3d9bf2ec88f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.253.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc3d5d67-4fbd-48b7-b1d2-fb9f75487149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.253.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a63e65-9e32-4ade-9b6d-bb157247782b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.215.133.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba438782-96e4-4644-b3d7-7c292c2212ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.228.241.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad15ea5c-eba8-4781-80d1-8cf748d66f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.32.112.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f26688-8372-4119-a11c-1775f12321e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.62.116.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5008ef26-5f73-4a31-b070-fba006b81514", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.76.83.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a221e89b-1d01-485d-8379-e9d880ce9289", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.93.28.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbac5fef-4a3d-4cc2-9221-0b68ec077092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.100.58.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e812d1e6-739f-4682-902c-3d537b9e58a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.87.102.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd271120-a6fc-439f-8682-117bdd9e71e3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.94.45.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e9919d0-82be-4801-907b-4a91a0ebe2b9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.107.42.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--620420bf-9907-4934-bb41-df14620e5fae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.129.162.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e6a43bb-ef4f-4b26-ba86-277f726187e3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.12.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea8ae93-c27a-40b7-b7b5-4692a4816f66", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.3.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a978a0-2758-4861-9d1b-d01d1c89ad9c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.91.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8831b5-488a-4a19-987d-c36bdf2bf8d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.23.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354c129c-a31b-43c8-986b-0ecbe7844004", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.132.214.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3003855-c48a-4f20-bf4e-8414d88acce4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.200.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--811fdff9-2035-4c23-8853-acb3760ca681", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.210.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d532cf64-24eb-466d-bf96-26823d5deaba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.91.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--753943fb-1f6e-4c28-8545-721f905158d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.11.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72359f6a-7bd9-4f8d-986f-2cd9c0e91d72", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.23.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--942eedc1-93a6-4f11-a3e0-f6d4abaf6297", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.133.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a2d46c-c1bd-4512-b739-328a306d7540", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.36.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9fdd7d-3839-40a8-8c30-f447e962d39f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.85.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2d20151-3477-414c-8256-0b9d78cbe4df", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.154.29.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd41885e-216a-4459-b640-19dab3e85ebe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.232.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944fd77f-e640-413a-b15e-d4bf03c458f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.238.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9292be-f3c4-4dcf-826a-76a6948ae465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.79.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e99fa4-c588-48d3-94c3-7837159f63e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.104.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05af31a1-7961-4d69-bdd5-5d13e9ac009f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.148.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f94991e-db49-4dba-8cac-4362f54a580f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.150.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b83409-68c1-478f-b7a0-1581fb3915f5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.172.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af46c264-6c7c-418a-9e01-437a337bcb1c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.179.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0661ba3-d9f4-4bbb-a798-388be131779d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.22.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4533bdf8-c101-4ce7-b54f-12dc04615f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.38.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e867034-2f39-49e6-9433-b358535b2640", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.50.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a57515-f8b9-4f52-8a62-03ea0cb6474c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.207.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8023faa6-6f15-4039-9674-1bb27e043fae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.225.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854b5811-c2ff-4d2a-b606-706880e62858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.162.103.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b55c02-d765-4fc5-82df-cb5dce05b00d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.113.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d68d89ee-cc47-4a62-8090-8a23f2bb634b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.232.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--074e25b5-8244-454a-95c4-5e51bbfa5cfb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.80.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--132911f4-b470-45ec-aa3d-04b485cf5f8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.133.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c23d98-57f8-42e0-993f-f5809ddfe28d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.192.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4dd16f-f226-43e4-bfee-9b8cef193f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.168.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98fbc81-e62b-473a-be78-a5f1dd9afb67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.174.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ace8c60-0ea3-41a9-bf8c-2862b1959a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.198.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf35c213-d310-41b8-848a-a690275451a5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.2.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1d41bb-ed35-4f35-ab37-7468bdf197d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.7.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a724ce5c-f989-479b-9f73-6d3672dca49d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.1.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cbd9a5f-8cab-420d-86d9-c60ad0f8acf9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.238.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c2662f-1176-4e95-ac20-fdaf47dc75a8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.243.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315a7e65-7bbd-4cad-9e6b-a1439a105309", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.205.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc1e1ea-6afb-45cd-93ce-23f7a1f261a9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ea5a97-c794-4376-9015-23a1e7c15c51", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc4a12d-0620-44e9-9420-fc9c07c9c632", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd885c8-1869-423e-b48a-ef258b7d6556", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5481c7da-b52c-4e71-a401-0dcc095339dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac54a47e-37b4-4373-a5c3-84ab1170ca42", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c36a5d3a-7f7c-45e3-a2c6-5acc72f03ca9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218855d4-fee0-41d8-bc3d-cb1ef19a4660", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ccb3592-8361-4430-adab-dbcb27713d04", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d652d1bd-c6d4-401f-b13f-b16cd9307c5d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae7fd4d-4583-44d3-b159-9285c13acaf9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeaa8089-e2e3-41c1-a390-7a873d71b1c1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f644c628-d0e6-46da-8e28-c0ad251ae262", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.122.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298cb8be-d625-4aad-a7d8-dbe2bff0105a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.132.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab70ea1-0d3e-4bc2-aae0-0dd0499e5afb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab8274e-3a45-45d9-b1e6-9fd6cd618526", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c678d17-a639-4917-bd6c-bd24bd342405", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55241ff3-81c5-4e8d-b955-98aa082cb7c7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d55c0b-5c6b-4862-b0f5-03dd8bc7a455", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9daf2c6f-e3df-4326-818c-24ac956a4c6a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--177dabc9-f75b-4dd2-94d0-3ecaf6a8e901", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9fc1133-c232-4a86-9bb1-ee608470faff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1570f084-6def-4e89-ab87-59ea11cc4402", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--443a6e94-6a79-41e1-90b9-8f84a652e82e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91440c5e-3dad-4276-9894-07071ae5d692", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--622e090b-d240-47e8-90bd-617be20f9cdd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1c572c-8e89-4bff-bb2c-2c7f7ea50a32", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c28d5c95-a0d5-483e-9f18-636a7ac2022c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7459717-e06c-4152-8351-17793abc692f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56720858-c4d8-4190-bab0-052814dd9cb5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffac42a5-64f6-427c-9705-2e7f2b4ce73a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9845c3-6b8a-4f5f-b49d-d3e0684d7916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00947d04-0676-4a02-99f2-1ef298d38c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75e6b68-a351-442e-8954-cb4ac24bc57e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448e2173-c94f-4ea5-922c-3501c7475ca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.240.14.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1de8214a-5efe-4283-8b98-e5a1a0c351e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8cb6ccf-9f7b-48d9-be92-c4367ad5a6af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.201.163.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e60b7e-3673-4bdb-a1d3-fd781ea6c115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.201.218.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--397ebec2-3194-4d46-880b-daed1b548094", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.201.34.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--947199d4-20db-4b67-b5f9-0e271e33d3d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.203.125.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a11f88-feae-42ae-8d2b-d52d58094f57", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.203.85.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d128c2-62cb-41a1-9d01-3bdb64b1eda8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.209.164.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8806aef-dd53-436d-bc0a-69037e941213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.211.197.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519ca598-13d5-44ab-96c6-d65757aa6f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.215.219.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57bb3444-0454-4254-a92f-0b8ff696dcd3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.172.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfc9b737-f9a8-47b9-be68-beee37404a60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.225.140.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4ddeca-6343-4626-828d-88749ef26d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.226.211.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05478947-5087-4a36-8613-f8fbc27275be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.227.45.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b4efa6-d077-4854-9cc1-aa8cb6c05fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.233.21.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2491bd-39a4-433e-a8e0-4f2f3661a159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.120.126.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be8d6e9-8cf0-4db8-8c67-c02d3f1a3c0f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.195.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1475f5cf-e34d-432e-b70a-88987b22bf9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.196.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3a8ca1-3b4b-4f68-8cc0-7dddb5f4c919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.197.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f40c45-5b8d-4f17-97e4-7de7d9ae7cef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.198.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4395a00b-fa31-4aac-83bd-a991a82759ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.199.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d887d78-347b-49a6-bc11-a14c178e401d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.173.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4206c9c0-4397-4990-978f-e065825aff3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.173.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--799e38e0-d71a-44c4-9b14-c0ee8d2cd99b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.173.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b76e686-ce0d-4624-9384-f60dcd8d4879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.173.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe05485-796d-4dc7-b8f4-b797cd570e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.173.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1c0cf0-b531-4934-995e-17fa968e00bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.173.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51baedbe-66ba-4915-b1d2-81c7bd2711d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.173.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4dd4419-7a79-4e38-a2d8-e9ae9d3bdbe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.173.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64ad2066-cb61-4cc6-a9fa-574a7b70958e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.173.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b27028f-6766-47fc-a181-fe37546f5107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.173.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4984c33-22e1-421f-a39c-dc90353d4971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2572ea04-95bb-447f-af55-874ff6da487e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ba54f3-de12-4c1b-8e47-59d7499b6e16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc1d649-90b0-4170-bb6c-09e32b8087ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a7ed978-baea-4104-b8d9-f42e6febb159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbdb2927-64cd-473e-ac68-d58923168171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06abb99-a4ff-4134-90f9-e9abe4bc89a0", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.89.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5220e29d-0252-4e8c-94a2-3f6f7bc799c1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee877301-f161-4b42-b7f2-bda4b193b400", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb50d622-0d05-4968-813a-b57255bfa891", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ad0f51-a99d-41b0-a454-aeb562b7114c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6942187-5a71-4571-b4b5-83223d59e4b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d07665-ffd5-4c6e-95c8-1e2b054593a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30dcacd9-f8d4-4466-8493-7686abf6d143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f629533f-e054-4716-8e1d-1b65109c0054", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b571e8e-e1db-41c6-9772-95479ce0745a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6046e29a-cee2-482c-8ad1-157a605759af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d32b8ee-bdb1-4e37-95db-59b21e4d5e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d7b4ee-b8e0-48b8-a169-e17b98e4d1b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce002843-d64f-44b3-9dda-181dbb4d8fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.154.33.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcec44c7-726b-4170-ac42-4cd7c01b3350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa1f9b9-2341-45f5-bbf0-ae05fb27e7e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9845f04b-6dc8-49f4-9a49-94794a2f2351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceca979f-ff77-47e3-ad77-506d601d6162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d559880e-066e-413e-8ce2-f5695df5c282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aadf17e4-83cb-4f3e-809e-506101a12387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef773eec-2838-4edf-a4b2-6f09cd409009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1242d7c-7116-4e7c-b6f6-97cddc3d078a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d90c971-00df-4781-8fb2-443cad447e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ae7119-66e0-4610-a9fd-0bf594adde7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc541dfe-e699-4689-822e-8203f87f0534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b08dae-8fe1-4d83-9afb-20de30489898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb048f76-e8b4-488c-820e-8c29b649c44d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ae2f5c-ee31-41f8-81f5-ce2d7f520465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb7319d-1a4b-4a57-becb-3921b9ee830c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287d9885-eee2-43a9-9ce7-65cc377221f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.158.127.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e5fe313-ea78-4edb-be9d-3c71d7f5c102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.159.230.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1011d826-aa75-4e5f-805d-2309c0d2f892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.164.247.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c4f2ded-2359-4ce7-b5b0-1cbcd4711c13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.165.12.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54bff860-2936-4652-9d0c-c17c3b7eeeff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.167.104.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2500c8-6130-46e0-aeda-fa2945f6442e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.169.200.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2779db79-c098-402f-99e1-7a09e8690eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.172.108.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d151162-f78d-4fea-ab11-fc1744548116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.172.108.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b575ea6-33a7-4c19-aa97-2db15871f7f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.172.108.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b1acd72-ff10-48ac-bc4a-b48463732bc5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.179.11.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed4f15c6-366c-494a-bd85-d9fe129c5274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.181.242.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d36de42-9c09-44af-92be-aac49ff6fc2a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.186.208.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01618db3-d5cf-47f6-962f-af1970b95fc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--911255c4-c1c2-4d8e-ad8d-74f4e98d7ac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3aab208-7fe9-4a08-bf48-b48d14a53ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b148c5-24fe-4e25-a5d1-e1514620be37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190de710-4220-4089-b84f-f97cad8d1acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18724d6f-ccca-4585-9111-ea2c73273f4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a6f363-7da8-47e2-8d0a-61c56860e1d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab702ae-ee80-47cc-98c4-f07f2dc5f58b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a887a78-090e-4aac-af56-dee429d24fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d396e8-2eac-45fe-9a77-3d98ab6bddac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ffc8b7-90e8-4446-a896-a1edcbfc3d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d327820-953c-4b52-a9a4-68d7884f4fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2baf7ac-ee42-4c78-ba13-407ccfde815e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e250753-e527-44e3-907e-3eb7f4794ea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e749aa-d374-4d82-9c1c-e087a2503902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93b7d52-68bb-4f94-9078-f5ea096f28fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff254e51-1bc9-4176-b555-4ef08364c35d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80084980-d813-49b3-88dd-33a319514404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0193fa4-3f93-43ee-9e7b-267d51cb5c93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21a1e99-3dec-41a1-8964-4af91bc4bc9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03bc8b98-f465-47fa-9203-76b7b6c02bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a40bce5-31b8-4ea7-80a6-1d54cfa21a80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01cec7ca-f62d-48c8-897b-7e70a3d45e7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4ae5fd-da63-41ce-a02d-4a157f6c1543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd80c6c-c920-4c6f-ba1a-4c9e49cb1d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868f949a-5384-4648-b662-50eb3723a7e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ad90d5-f897-4b38-be46-9850743c4220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37bc4fed-6ed3-4474-be31-14c01b740c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31535ff9-917b-4e4f-9510-ac0edcf69731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b958a0-5bf8-42a9-a1e8-eb9187e2ab35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eee64f1-8971-435a-bab4-bb88e1117455", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.135.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e395453-556e-4d0f-9158-b83bb41798de", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.226.96.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd29e2d8-21b8-4ac2-acef-d3a206233864", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.231.165.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90021f40-1af5-486d-9d27-490b32ff21be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.235.163.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7f85e05-25ee-4461-bf56-9976ff2f82aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.244.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f88336cb-5ad8-4d60-b26d-f3bd4ef46206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b3a982-4708-4d57-adc4-9e641726b5b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd1b9c8-1351-43a8-b5cd-4da98169cdb0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.3.62.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da2dd7e7-2a72-4c9b-897a-dd647022f312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.32.243.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5091e21e-e55a-4781-a879-dab2cee92552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ae7bc9-9895-498f-96a5-7f825790dfa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d9eb35e-5182-4195-9942-a80368335cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.110.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6031bfd-aa0e-44aa-9050-78ad376c38e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.40.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e45cd7f-a63b-4a20-a10b-d5e5ce6ed533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.41.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deca6254-6da4-49ab-8b8e-a77da01e8084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.42.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531687ab-7c68-427a-8a0f-0297e0a5d294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.52.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2069ce-7b68-49e3-8b94-86b05c6de358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8563f651-a381-4b66-9b4e-1e7de263648d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac1ca1c-a953-40ab-96d4-ffeb796e8e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d624b1-b150-437d-a0c2-19ac776ab919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e39152ff-a85c-45fc-9101-120efe530252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.89.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33294b5-5068-49a0-a978-b7ebaf400238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.90.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f42bd8-1302-4ef5-9beb-a620b96b2859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8fcfaf-8699-4f6d-9f0c-5b4ccffa0a0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9812e1dd-a8d0-4db6-8fa1-3e811f774e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ae7dd88-d4c8-4da4-944d-3393f8f15164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c8e6bd-d603-4d9c-a890-99efcf4c7639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.88.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de299519-644f-41f6-93b8-98e2e1f1b1b5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.37.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--253910f6-1e57-46b1-8427-f8ab063ccdf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b23367ef-c8d2-4d11-ac26-c094a98d0865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--417ea660-7628-4f8d-a0b0-a0c648b772d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a70dc2-cf35-409a-86c8-45dadcda01d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.63.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e085bc57-7cb5-49e1-8f42-70e3ccb17b66", "name": "Malicious Host", "description": "Web exploits: aws-credentials, spring-boot-actuator. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '45.45.237.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9e6542a-4239-444d-8cff-749b133ccf85", "relationship_type": "indicates", "source_ref": "indicator--e085bc57-7cb5-49e1-8f42-70e3ccb17b66", "target_ref": "attack-pattern--8a8bb6e4-b7c8-4514-9164-c7db99614575", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--378ae07c-4554-43f9-9eaf-ec5c5911c1a8", "relationship_type": "indicates", "source_ref": "indicator--e085bc57-7cb5-49e1-8f42-70e3ccb17b66", "target_ref": "attack-pattern--5e475c1d-71d0-43e0-9f8b-68c3071ac97e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c140035e-2a18-4939-ace3-bb905fac1c77", "relationship_type": "indicates", "source_ref": "indicator--e085bc57-7cb5-49e1-8f42-70e3ccb17b66", "target_ref": "vulnerability--09e8004f-6e38-483e-978e-fb0f092cda87", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd24480c-68db-4657-9e34-9200ad489e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.236.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffd599ae-1276-4d54-a32d-97c503c0d403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be30045-39cd-4b36-a97e-2b6862b168d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25453c83-5886-4c6d-8f9a-3f7d9828222c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208718dd-ccd7-4c09-9e27-d56f0181f99b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00c544b-cb92-4c2a-bd78-20d778badc94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c7dc67-7774-4dfe-84d8-7d3cfb43e8eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b51aa9a-eabc-4bb9-b13e-1951af427efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c938c7a-924c-42a7-91e8-8e85f45f3ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df3a8033-c1c8-4660-b165-dbec1238b83f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.84.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f792ceb2-3161-40ea-a91d-9bddbc4d4160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.85.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b3c984-9faf-485e-889b-313c320778b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.59.170.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d46050b1-1508-499d-827f-187027d6dcc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.129.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebbf5119-a8a8-4847-afe1-4f0cc0ed6772", "name": "Malicious Host", "description": "Observed: FTP, MYSQL, PORTSCAN, REDIS, SSH, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.144.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp", "protocol:mysql", "protocol:portscan", "protocol:redis", "protocol:ssh", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f51b0155-d3e7-45bf-ba41-e430575c1573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.145.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c77bb8d-3fc7-403b-9108-29b4c97b412b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.163.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f08c665-2410-481d-a21b-ef32f73670ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.170.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31581589-4f79-4a93-abb5-332151976c4d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.188.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d403b800-fbde-4d57-b9c3-d578e2ac9563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.62.170.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3320a9ed-27b2-4f16-9c29-51b0233bf420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.63.4.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f82a82d9-36ee-4545-84ad-145c5fb5e229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.66.249.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18501f9b-2df8-4ac5-8628-e4bc4b0e11e5", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.71.254.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc1ae4e-f7af-48ef-936a-690b2d67937a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.74.20.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29698bec-e5cf-43b4-9b58-5495ff28e3cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.74.20.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4559d446-52bd-4e0c-b38d-d63f5f6b7c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.74.20.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85f0d77-24dc-45d0-9c8c-c4e764828089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.74.20.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e20d5df-6a12-47e0-9aae-48dbe934dccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.74.20.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e971a99-7c27-4dee-83b6-73f0854aaed2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.74.3.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6046886-2ea8-4206-bec1-8a8a00b782d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.74.57.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c082108b-8de0-464a-8b25-8ec8b15b7e3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.74.57.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7993c894-a10e-4383-b93b-f1fecbf138f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.77.121.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4439d42f-0a21-4ba8-978f-c36139db960e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.77.61.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f03f3a-284b-424a-8fd7-2ba7492c37f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.103.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01fdefea-a70e-4974-b6f8-e7ea9bc2b4e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.104.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ee7430-166e-42b5-aa43-a317acc34e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22a0234-c6ba-43c6-b838-e4dd1cf84e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb2ccfc-ee86-4c11-b5e1-48751c4736a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea98856e-df22-4ca5-bb1c-40fc030479cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ee9be5-ca6c-4d8f-8e92-25913f2f59fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.110.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3274b1-8b49-460a-8a8c-5adedc2f8230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.114.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f03655-5a73-481e-96a0-48d8344d7067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.130.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35326f42-541f-402b-868c-704ed98e245a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.132.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35db1585-1e1d-47ba-881e-88e8404e32e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.138.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e4b282-062b-4f0a-a770-de74728d766b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc88737-04cf-4a16-b743-9d3ab1d637d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0cb00a8-e093-482c-8a59-ecf611c7161a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f5c65a-0e61-44c6-bcbe-75c53629d275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f9de285-2acb-44dd-954b-2c1ca4ab130b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aa94a15-f2bd-47f9-9a9f-ee72db62bf57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed6912d-3ee2-4891-8ea5-b8f1141cc6c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.160.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94165d36-60ee-4189-a331-400986f70c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.162.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d50bac-b94d-4eb7-851e-f6bd578abc8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.172.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1758f3a1-b4dc-47e9-84e9-70dcc524b6da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6605d7d2-9ee1-48cd-9d5c-72be527fab8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70fd2a26-2ec5-4856-9018-9dcb41a92871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ec30d0c-e70a-46b2-98fe-ecfd03f2f623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.186.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b7fd6a-32f8-4d5e-9e62-6751b514917d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.191.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f09a58e-6d5b-419b-b162-02c99ac8b461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.225.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb7a4a2-7198-4372-a835-4be487d3e311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.67.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fba19718-7929-453b-acb1-91a7f0599b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.82.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d26dc80-3b53-4424-8235-e851f1bd7537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.92.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e968822-d7d3-477e-9562-e7090550abf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.98.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ff77c4-158c-4f21-9b52-69dc43ca86c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15967459-1dfd-40a4-8c63-354eabc994df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d561afc1-fc49-46ff-acd9-bfb357299610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab66dc8-a428-4a74-8021-f9ec054f35d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e866d459-65c3-4304-8e09-41c3877d8d10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bca3a09-d38f-4e19-9fb2-15bdc6593610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d94ec2-e266-4512-ab92-19a9619e862d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--571a53e5-e612-4430-8188-b506aa3c7d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d81ccbc6-d018-429d-889a-4e84e75c9b76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c5a74e5-a954-472f-90ea-87d6bb9f723c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5a663d-7f05-44ce-9a6b-8d5ddc08756e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b699771-2d75-426a-a84e-cdba071924be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee3c9c3-de62-4a51-94cc-6bf57faf1a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ad4696-e02b-421e-86a0-81dd38dc0bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34449fe-7e00-481c-b172-4d1f12350b55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5772354-cdf5-4a05-b768-cad82b1498ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0720d25-8a55-4768-9533-e9f6f7ce6fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93130446-3d49-484b-9e64-9e12f49deb43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7432b778-5980-443c-9a7e-10ec2b2e8746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7ba43e-1c5f-488f-b1b2-ae8b3b88c5e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e48c0238-a0fb-4134-a74c-2272c7147852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5bf0346-d505-4634-9902-46851204f97c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21775022-9158-4622-b67a-c7970bbb3510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3830d1ec-b13a-4960-a94b-8ec083088834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ea59e9-4b94-4dce-8d54-5dfa4b416c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9081a9c-4b98-4e01-9cf1-d16f8b967e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b67a88f1-a9ac-4872-99bb-06f401aa86be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e54f85-2ac9-4404-a1b1-50fc7f51599c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce2f7d1e-6115-4a30-8db2-88f059d83d05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f1720f-c474-458e-934c-e44d48afe83d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a747292a-4ba8-4483-b0a1-bf806c4a8c1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b399256-d56a-4140-8abe-a9329cd00159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae45a732-479a-4135-9049-72d04d70bee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3505a866-a714-4912-9006-4e551c997e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64440766-1fad-4517-85db-9601f1c61c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8be432-405e-4396-902d-e4f4791ff83f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b7cfb1-36df-4f10-b327-2560e4a47550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ef68ec-d56e-484b-ae80-ccbe32216768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7510156f-2624-4826-8426-c9a1f230bc3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec90362-123c-4ed7-b8b2-f0f645b99181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c7f112-4631-42c7-8c90-c63a58a74fd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ad87de-9bc5-4f91-aeef-e97d1ab827f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc8e157-36da-44b9-b1bb-113766498f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40ca7657-6fdd-4ccd-a7de-443161ee0613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad95e30-531d-4ca1-94a4-c4f48c2b8559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17545903-58aa-43f0-b2a0-c6624191874d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45a3c64-a623-4019-9a06-597668151227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9e19a5-c6bf-4ece-8e1f-6aa10cc6cd96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af71958e-7416-49c7-8e3f-a5c4ef221a05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e806d888-b019-47d3-b1d4-d0b56ed684ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a60037-e5cc-4281-874b-8fba720fd535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4eda69-b5b2-464d-ad5e-f9928c8edf82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce855c04-4505-4aa4-9792-386d68bd25d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59505472-d3c2-4b31-abcd-23f022a54b8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ad9d8a-d8be-4044-a202-3a9fe0d83c8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ead6f2-4c30-4251-803f-5e37f4f8e2cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67cbd033-48fb-426a-8c13-9adaa2a12479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b99293-b9df-4a83-b33b-dd254c38f54b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ac8b93-9c85-4afd-91b1-2edf68a19bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebf3b48-5953-45ec-9922-6602f4b30ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff7763d-1095-4354-aadc-1357da79702d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a67193-cd7f-45d8-bce0-e0fe25fc1e67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53324e21-d4fb-4432-9f23-8bb5eecf25a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a47df8ff-b1b7-4584-b849-f1e46c356c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a215bc70-7c20-43de-97e3-fb631739fd43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--098297f2-dd68-4eda-8ecd-1d50c37803a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39aabc45-9e8d-4018-8923-d45a1fe64c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c8d0b7b-e22b-461d-8926-d175bc64125a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4deeb5f6-c476-496b-ab67-ce5909018cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107e3d15-45f3-4d8e-bfcd-140ad62487f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a7da40-8e72-4661-a552-ea41d06624f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e756e8df-0662-42a6-b334-20700769a9b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--273f0f82-a648-4640-baef-ed53cdafbc24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9af2dd-2edf-497e-ba47-cdf1cab803de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd252aca-ff2b-48ef-9d3f-b50cdd0bb1ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7e4f5c-38f8-4b46-9db1-3379be5cff86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c5d2df-2b1e-4307-8455-da92a357f0ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd09bd7-53f3-41fd-a470-c386921f7de7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1471cb5f-86dc-4687-950f-a96018b69668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed8aa58-a4e7-4716-9080-8845b5cf0b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffb9fb81-e826-41a2-bd58-b871c06633d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a77139-645f-446f-a519-81b77ec226a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f0f4ea-daba-4116-ae47-e54e7d29d871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3fc91e7-90e7-4298-b4ef-9ba91e1b83ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a208cd1c-5279-4700-9e50-be897d65ec52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dafd516-9499-452a-99ba-7c266913c103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62db88fe-468b-4649-81e1-daa4aec49ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a76fb927-eebb-4319-9e2b-64c0b4dca7fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--285dcc64-9319-48d9-bae5-0926e97c138a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f950a1c0-9c4c-44da-92dd-d59a1f2e6586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871364db-d054-4d95-8362-8ab52fdd25bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6375367e-4ede-47b2-ab90-b0eb158c4221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a39fe6a2-d5dc-4c16-9615-07a34fa1febe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65a4601-b47c-4920-9d73-4abc1807c9c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b84c44a-e4c6-4c80-8245-362e4e5146de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82f77542-75e8-457d-933e-758795a5de6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc52aa55-fa68-40de-b29a-0f140aae19bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3b533e-133a-497e-977b-7c16e33970c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18f67099-6dfe-48ec-89f6-e85361870c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e935f7-3949-4e91-9ff2-9d37413100d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4664bdb-5cfe-4e40-9796-58f175b40780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a98620-e55e-48e9-8138-b89af67b2fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--416d5864-49a2-4e98-9433-4818bc82099b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec7c0a5-4683-4f65-830d-969ca974b825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d09cd8-f14e-44fc-9526-0a1c207fbcf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5a911d-8095-4d28-ab6e-b4ae147b0fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f621645-8f17-4bf3-aca7-4bfa41cea21c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c43348c-5673-4a6e-a5ae-43ccc77aa7ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b770b0a-03d2-440a-9429-4744a0afdef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce623ed7-6276-434c-a3ed-f5f087483e73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc71773e-cc53-414a-ad4c-c052e56eea57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb16aed-f4a1-4568-9ff3-b68b926871e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f321e2-6883-4fcc-a727-fc3136c1cc37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ea4cc5-d174-45d6-80f9-7c794af4daa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fc6be1c-aa7a-4b6c-96eb-cc50673556a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c01ad2-9e82-4e76-8e56-1099b825b437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f00be5-5421-4364-a697-7a7d693fd015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917e7e31-a30c-48b5-9ce4-acb767f0d320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--319d7451-b462-4314-8127-81ef42d30939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43efd16d-72ba-4d81-bfc0-e2518b8ba615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f01e70f-ed09-4e29-b70f-d3bb9b0294f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a73136-5cad-44d8-841e-fda7155502dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6533cdb-1786-40ec-985d-fc487b876432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad76056-2cbb-4459-97d2-6b6580f75f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bff5d79-ad5b-46fe-8666-03606dde30e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe7a6440-8b93-47fb-9135-01075e03d366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf60b17-a46f-4978-9498-33f44f113936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b8cf49-d95a-46d6-8176-570783ebaa5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c41808-81d4-4a26-b1aa-2e321ac44b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f66c677-3f53-4aac-89ed-4c3407e0eb79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fc58680-5707-40ef-b3ca-93ac20886e63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd8378e1-f0b6-4897-aded-e46e649623ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a520a2d5-6513-42d3-b7c5-bbc9daebeb50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b16aa5-6945-4242-afd5-1c6482df2578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7847f63a-7e95-4201-a74a-9d51b3708591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--104b5095-ab69-4038-aa34-463935d30742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--831dfa37-3677-4e36-80f2-c3f438c1518c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ce6233-2ccb-4989-9aec-811c8d82bcb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f25061-594d-4a0c-9954-2c6c62bc9546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e1451d-d82c-40ae-a02d-d132881f123f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52cc8b86-0d95-4cd4-814c-5905c7729059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497c668e-79a9-4f8e-b037-fbe80b4eb2d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2b9df6-66a7-4f65-9636-6ec88d628950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f205b28-2a58-4007-9051-507f0e2f22e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b32d2a1-591a-4563-904a-4592ad58eb35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68524d6f-4a1a-4602-b57f-12ad2a863ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--359c05f7-728b-45a7-aa93-f8dc464206d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54ec536-8a42-46f9-a64a-cc8767b2c0ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772a271c-2075-4130-8f8d-59d0fc6b1f21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4196d362-ba82-4c46-99f3-3e90ebd08ef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba653a8-f87d-4e3f-899c-4c41f459b923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--129cdd81-9658-44cf-ad56-7c770009b15e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6fdd219-a863-472a-be34-1f7ae6cb551d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f045751d-85f2-4dab-aff2-54382dfab116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36242286-d722-40db-9ccb-75bd288f1dfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30414293-29ad-44c6-bc1d-0a25aef5a552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20c06c4-beaa-48dc-90d0-b43967ca62ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d84fd0-9c54-4287-ad44-81bf70c909e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063e70a7-55e9-4dab-aa20-be97f3385887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e269ff3-560f-42cc-8e86-91be60c892af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d07130e-6df4-4a73-b378-7cabe1bf8fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a929508b-5212-49b2-99f1-553f33501334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a96195-ab25-4642-aca5-0cf34739e7ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff125b19-2ce5-4486-8540-f72b3a11ab19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dad3be6-a479-45fe-90fe-56dcb5caa622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd73fa9b-a3d6-4918-9232-1adba62fe504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7391d04-c067-444f-84b8-223efe02efef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27417ff-4f33-4f9b-9d95-5b362d1164de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--643d4264-fd59-4f69-8228-cb988cdb18a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e32ed23-f492-40d9-947c-c4b5426e7889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef7280b-a82e-4039-9a4c-c4ac247b7b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe50fe4-a51e-46d7-9b33-6c669385cf51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8d0bcb-2e4f-40e1-9f21-45dfdb04f8ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b99703-fc2c-4386-abaf-f2f3c4d9e3f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ffc632-6d2d-44c2-9358-278b89ec93dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54074380-05dc-4642-922d-375e3373a8a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a252413-ec57-4d4b-89db-7051d49ffde9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0abf2e5e-7edf-4794-8924-5abc2f2b2477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b14b41-e17e-4302-9b7b-8d36ffde062c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5072b290-2192-4011-8b97-58f2e07914cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65511ef8-eff2-49f0-a346-3efac1e0f454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b694e49-a447-46c7-bcca-abfe4b474785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2fd24b-dde6-476a-9773-3d50236bfde5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c221f12f-f2fe-40e5-a712-197f4fa73e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c9c0d9-1e04-489b-8644-08306f5e78f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d4b8fb3-a277-4868-9563-a74cb276df71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28bf9fa4-76dc-4989-a87f-6e276f116505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fedcdfe-95f2-41af-97f2-5be8c5936010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a157a5b5-6efa-47f1-941a-9c0c9b50a47d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46144d19-8fdd-42bc-a884-191a1a15a8e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--031d3650-3137-46eb-b57c-a0e78033ff84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a16d360-7521-49b7-b4ef-bb6bfb2fa37f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d5f7f9-8b57-4f31-86ce-91565f3575fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed84474c-8a94-480e-884b-4a3df5a92ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2cc923c-2f70-4f5d-b30f-15251ecaed6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--292f8759-934b-424a-872b-845dc41b0d4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf28e2d-20a6-4000-83c9-791724a2345d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f48725c5-bbe8-467f-9a38-76053f3d9203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d60802-ce55-47c6-b239-68b01e9fd2e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2d5c75-bd74-4f59-9aee-f650beffb922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb7ab5fb-41af-4162-b1c8-a961c5a0937e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c70ae7-998b-460b-93cc-2b833b74f5b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b972759-bb6f-4df4-96b0-7ce8cc63205b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222d8673-ac7c-4f96-b448-df3cf7e97484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--880deaf6-ad98-4339-8d44-53b542b9f2d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86f105db-fa6a-48fa-9662-33e917749c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da97ba1-9162-4bc0-8149-983f447a477e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4237f60-9a52-4a86-a87c-5afffcfa6119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8eed633-e44f-4f7c-9eea-2d4d5892a11e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d96e02-3e95-448d-8bc7-1ecf68181752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1335401-7351-48dd-9dca-9a50f1c90b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08141c54-2e0a-4e19-9215-f9c7edb162b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2166963e-01c0-4f11-ad1a-c3cc6870b7fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef2d2f2-f059-4375-b08d-9a7f223ba2bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5301093c-02d0-45bb-9cd4-45feda46d574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d76f09-321f-412a-b228-75c37d619888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b74853-42de-4ee1-a887-ff28b7195234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8916d1da-3698-4c83-bf0c-291c70d5c864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e785ad-cb73-441d-97f8-56dc129a261a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7896ae20-c115-46be-b070-4ebb864176b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ad7bdc-ed75-416c-88be-dfb6f57590f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007cb8f4-4655-44c1-9255-e313ea48c228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b160d72-83f6-4f77-bea8-715a63c7e3cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd2e288d-af05-4ae0-9e19-1afb43584fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a31f3e-cda5-4fbb-ab39-54094840780e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--416d7e2f-f884-4d37-ba0b-30ca1f218a2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca0f130-8287-4a24-9d52-f19df79f9a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e805950-c3f3-4287-805e-b47d40e9e2c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2872fa11-c89c-4660-a3e3-9822ef4a2b7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0fb853f-ae86-4a56-940d-e18e4002375c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c6f79d-5528-4197-9ed7-9f9aa9670772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10661293-ee90-42b7-8401-3ea15663acfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46592e6f-a5bc-4a05-aa30-882bacb4353f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce618b68-74a5-4347-9f2d-d89eef6381b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.144.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74ac95c5-bc2e-4e59-b7ba-7f5114382f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5be1638-dc6c-40e5-9b4b-eba9a5dcddbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e116be24-8e71-43a5-8973-15a1588845f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d6e59e7-844a-4cbb-89da-4085293b42d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62110594-fd7e-4808-b39a-cbcb57da06ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889c71a2-cfb5-41e5-96d8-ba4d3f26b5c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15313bf6-ce8d-4367-a99d-95e84073e8d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06910e74-60b1-4041-84ca-4996e93830f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a18a759-5672-4ff9-b397-d4fe0ff96573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--762acaff-18af-4353-abfe-1315414c1322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f35b50-a532-4108-a64f-841e528718ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c30f9d-93da-4f16-9e18-1c9e3b416317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b85493fc-d906-408d-99a1-0171c82ffdb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c25fe55f-42f4-4d32-8f72-530a0537abca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd21742-8736-4306-b974-ce9cf48bfb9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3092cd82-6901-47e0-bb5c-691c7a2e6b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd88bf3a-f67e-4d39-90d8-fd5da6567ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76aae480-1c03-41f9-b866-b6fc19a70883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d2b3aa-0c17-4485-96ae-f1cd793efc88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f4f348-130a-4c03-a883-3633db7a8cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9336ee36-ff95-46bc-996c-03920d1c03f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf8e3a4-03c3-4b3b-a98f-4ce7b3678f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e6cdba-c062-4c7b-a10b-1e19d88654e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--162f8a5e-e5b1-42fe-a16b-f824ac496973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1815a100-0825-404d-9063-2c1bf0d704d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0684d852-52ac-4927-8485-43c5c10787e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddbe121c-a611-4cf3-b0c0-9f3b61ce02f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f172b6-0635-42d8-a9fb-ee3133f840ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5868f911-6dba-45e7-afac-da4905242c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ca29f4-89a6-40ee-8d20-3779e494b8fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e6bad7-edde-4b4c-ae8d-15d9dbe382ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165ada39-7d3e-4db9-9b05-6b5fcc19c42a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6826674-776e-43db-a80c-d7a0d08f827b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--520e9f85-6296-4f2b-a570-ddaa55e5b2f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc1cc03-8e64-444a-bac2-7c35493c0e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--238f2c5c-438c-4102-a1ff-3da07ef7711b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea08003f-a00b-421c-8d2a-56fb8f7e2342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee24686-20dd-4b70-a444-951bd64f297e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed9ea68-7067-46b6-8377-2ec9389eceb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a456071-63d4-4de9-b5b6-a599685d709a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d82c7026-ffc1-4a09-a036-009a01affd8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39105029-94f4-4e01-92c0-8d25f22a0249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f1ae724-7b8f-4ed6-b1ae-3caaae4e892d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd3c16e4-e873-4449-8465-1ae6636baa83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aacc7f5-b2a4-4b7e-a156-e862bd123043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faec48c8-0920-45c0-8d9d-8afc375e159e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f0922fc-0708-4df7-842b-733f4eb1fd71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f26aefc4-2238-4b07-ac90-b4488bfba389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616d67ec-5075-4141-86a3-b49703dd57e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e7349f4-df5e-40b5-a824-7808e1a24b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c17f4048-9126-4ab2-9551-5f096e91d441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0f6fd0-5dc5-4001-b5fe-469fef82d3a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00df5805-f576-4ee6-b6d7-f250dd16d40e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c07a31f-0c48-4f25-ab46-225d020b1d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a8bd004-137f-4765-adde-6da70eebbc14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57605418-d08a-4a5b-913c-581f45e24c1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b277526-6040-4cfd-abf1-70e6e7a7c9c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a49c33-d49a-4e68-83a4-3ded719bce46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8256ec09-c735-4307-aa4b-151371c8a282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acee23b7-2e27-437c-8c4f-708ba6b6da52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc8acf2-6138-4d40-bc7a-a2fb7f4c3e0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--409a4a08-5509-4807-9a16-3375a0fae01e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1bb3f72-9a88-4156-b99b-df1069063e26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e21de6-04c4-4157-9bdf-d704ed2e88b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470df288-72ee-4485-9add-82fbfaad40f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc1f5983-2db4-4da1-b6be-ad0dd92f3339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be12291-f05f-460f-965f-adfc7b94a7b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe1696f-7c60-4b73-baad-18aca72a6618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d70921d-0624-4b70-9100-ddf2d946a091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c33218-cb59-4fac-a9ab-b38ce713d09c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bb1459d-0cdb-45fa-88ba-942713a14dba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58233ed-6276-4f63-b830-be1b52de060a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757c04f2-a57e-4977-8561-f3ef820a5b3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4f7fba-08ba-457c-a492-0db3069f1515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56b7189-e861-4e59-8411-e4315aa8db3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3568aaf6-b192-42ed-b4dd-27fef1c22faf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed445e81-5b18-4890-b515-9aa1ceebd190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44161ad5-442e-4ba1-a234-f03bc90c4fad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7790b64d-d8ed-479b-b6d8-adaf145354fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d572982b-fd37-410d-a37a-e99d81bb7ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5178ec-ab54-46e6-a0a8-4dbc4f482d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89194c98-9cde-41df-a799-f62959fd735a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b79f105-d53d-495e-a30e-275a90277e24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--574e9c53-3f32-457b-b8a9-28c6778faea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1ea593-348e-42f1-9db9-3e23c7dfb282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a156eb27-a34a-48b4-af2b-931907dc67b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff700a0-2fb3-4cba-a943-03e677e157b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca84d8f1-a427-4478-8edf-f73e9e57dd5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c85a85-bb0c-481c-ad3d-dd47d031b01e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7556e972-c00a-4fa6-916b-391a8d379164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14e5c6b-ac20-4794-a4eb-4277e79c2b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2c7607-d147-4ede-89d7-25da86c4c86f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daae4ad2-62b0-40ca-ac7a-d43ecb8193de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771a26ea-306a-42d0-8e2d-e121af6fcc3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df3db92-8c87-41f3-9b88-c7ebe0f9fffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b85da551-1bc7-4ad6-b609-bbf8362be3ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--146c11ca-3259-48c8-bf82-b9c66704cb4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--288ad076-9050-4f91-9841-9c340ac66575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3507db-b4c4-4ccf-8aa2-8e215e551f40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc9a849-9c37-472d-9b81-6127b3596412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e5d4f8-e704-4e58-b92f-69ddd35a58a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bceb8ebb-06a7-4643-923b-9d1a7d6772ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1113cc-3aec-4dd3-9bd7-5270163ae8e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2572f8-a60a-45cf-97b9-8490a9056d05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deda0708-a81e-4d02-94ec-f9985a03f5c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6911afc7-5995-47f1-a905-4b709fd0de45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fbbc791-2b63-419f-8936-0997c08bd0a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a895d1-012a-4208-aaf7-f973ba51dc07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38ae550-98c6-409d-a69e-48685a952abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25222559-b5e6-4809-b61c-372baae3c690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9758597a-41be-466e-8c4a-b37520ed0d05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd49af23-648f-4b23-8afe-eef10318c027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03cb34a0-7045-4851-af1f-ec7d0ff8aed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9265d6f0-6901-44a1-87a1-ab595d65c220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693638a7-055b-4bbb-a6e8-d0bdd55947ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a79307b5-d8cb-4dd6-b460-041bdd5b38f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8071befb-b875-46ee-b5fb-afa1f4660ad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4570c9-9363-4db2-a750-bd8be7bdcca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa1e25f-0ca9-41e4-80e5-e3d5b02123e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582431dd-dcc5-45cb-b77b-6d34ed19677b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e32c09-7389-417d-8fe6-b91e34dcbcc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4187081-9eaa-463f-9182-2e2df608abd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ac10bc-af1a-40b7-8b17-1c077f972407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5df49b8-9bad-4ff0-bf8a-d919c66035ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b8735a-fe2c-4308-9927-022661e67201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab8e590-b800-4164-8b93-0f7b2222a23c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1390b1-e374-4c1a-a425-b1c1125cf902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--074fe66c-dd4a-48d4-8552-f85bd545accd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c330c0e-1f9f-40cc-88e4-417ddb8e97c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c6fd149-35ef-4ca7-a067-838ca1af561d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73928726-7eb5-433c-a2fd-6c8748938402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65f5476-1c69-429e-b592-6c5fba6988b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02cb1ab-d240-4c8e-8c4a-eaadad9f01bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--695638da-9ad2-42a9-82bb-95284d6ed563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--427d7246-3542-42b4-a74b-551e8c5cc7c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e04d8d-2c12-4e17-837b-1ffefaf65099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a55d28b-f923-4399-9a08-0136a6256888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ba67ad4-82bb-459d-b0df-a8af9a54fd62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c789f8-444b-499c-b6e0-9de237d60416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e113284b-d309-4bbb-8aaf-d407357de8a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--685d8910-12cd-4fde-af80-22f5fe520cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--172ae5ca-a239-4952-8834-c548f049d8fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48d94cf-5313-4bcd-878e-a04ab9680e4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03fde99-0f7d-41ef-94e0-111f5a5e6feb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7813dd6-c9ca-4cb8-aadb-688d70d34a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db2d8627-aeaa-43d6-ac9c-eb3070262317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f462dbf-b3af-4d82-b37b-a66e51acd180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be8a7fa0-6c5d-4b91-a2f2-f6bd8ead9bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cfbca97-9033-4eec-9156-77978311671a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28faae8e-7c89-4405-8ee6-d610d680fe17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e7c23da-fb37-4be4-8610-601a7665a4cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad4b497a-46d1-4207-b167-1e4c4848e239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e7fe56-34e1-4975-b2ee-89f04c77195e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b25bc1c-fb34-4cc1-a306-f401ee4bc5eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31fe5c3f-519d-49d4-aabb-2470ee459ab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9241a816-1225-406a-b0b1-3edb47cf6500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a13b191-d57d-4f86-9d87-09c606f3808c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f944698-4a10-4a29-819e-03f15dd90560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba6f913-5407-469b-9013-4369961d013d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3054282-0d0a-4ec2-98b8-f0177df0690c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6206a3fd-b5f1-4449-8208-422a79996005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec9112f-fb61-4b21-9801-1fc2ac9cb4cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db44c089-9d48-45dd-8a9d-fa157a8fff55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e3ad19-c150-444b-a92d-4e2f3e4e27c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad410c84-3e90-4013-87dc-7464771ac260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d4d224-49b7-474a-b6fe-430adeeb10d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70988cb3-df20-4d82-87a9-3abf57fccce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf56ceb-e8ad-47bd-a585-6c2025a57cc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82eb7a35-bfb9-4dbb-a376-08e90606df18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceda5572-468c-48fe-bddb-3068c9bd755a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--321ddbeb-9af6-4bee-8f7a-1a930a4e8dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200e252d-b17d-4805-9606-cef9b182b529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a32d68cc-2e99-4b93-a6cd-82bd4c79906a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb5acb7-4d56-492b-9edc-0f5c5f1e2fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--322167e7-de55-49d9-bc04-4b0d5fc86ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6329294c-e98f-4f4e-bf62-0e3df1c397c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af7a7d1-7f15-4ec4-8b88-e588a13153cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756cbbea-6ce7-4296-9559-8d66103b6795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d66a45a-bf28-4c29-8156-f3bb23d2d203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea63da12-40e6-475b-ab14-6162f7810f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f61976-bba2-4060-bfdf-ee28576468c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b7ada7d-b74f-4039-88e2-d5485478adb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--650da00c-0086-45d1-b34d-70cd0876e661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff191df-f1b9-409d-90d1-c0d3de8b5c11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e968715-a0fc-406f-a082-01dfa90daa7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8cc67c4-1f59-4991-addc-3179c161cbb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93fb9027-cb8c-40c4-99f2-e2a8d1da18da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ba9a9d-3604-4ada-a8e5-9ab97d032a25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d55ec6-293e-42c7-b5f5-f3c1b05af7df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3840996c-ffc7-463e-b5a0-c751567a791e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605ff15e-ab21-4711-8710-1d1f69e999ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e066db-8592-4a05-97f1-c7c443632465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95013af7-37e3-4803-8ed1-83893428ffbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f941554d-cc6c-42ee-b916-aa93cf18226f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed9d456e-f2eb-4696-b692-33ca4f4f3020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f6dcf4-1300-41f6-a53a-41e534ec5013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df7ce38e-5630-4cf8-a6f2-763cbae3b28a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac1f4cf-9153-4a13-9bfb-803e67de9f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58005244-b26b-42be-b1c8-4a3737dafaec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de3dec2-7508-45d1-9a82-bfbee97f1bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d117d5bd-f68c-433e-9d0a-de961bf7d76e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15387c3d-4bcf-4798-9ac7-232806632e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d59e45-e9c8-412d-a17a-17f9857c6c24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01fa29f4-15ec-4cd2-b84c-0b6a6f5d70fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee1f318-73f9-45c7-8307-733e7cc42216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38fdc91-e569-4639-8db0-2e9e4aeff37e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f914f42-c39f-4897-b4d4-43cefd4630ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a27c77c-ae44-4410-aaea-b3447cd337bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f41cff3-7275-4e4b-b217-5825c4a4bfb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b7bb3b1-7180-4552-abec-ac824cf60b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b5af16-c1af-400e-9cd0-eece3b8536e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca6d1ace-0e65-41dc-8b98-9bebd5e55776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4b0e34-d2ef-4eec-b837-5a29bf4ee5b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e370a2-4e08-4634-bd78-9b6335669135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--803f5e34-eef6-40e8-b67e-ff883a9aeb5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48624dae-ea9a-4ff0-acd6-04e7813e07ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b2479a8-57b3-460e-bb62-e0ca33568740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e275c2fe-2ba5-486a-a673-b11ddcf3d6f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd507c6-0b91-4d4f-bc57-2c3dc0909647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95916193-9d68-470b-a071-0fd347a52b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1180a1-1950-4f46-9c48-961787c584f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7fec597-4842-4d84-a5c3-4766180a6abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf758631-1a10-4e1d-8f15-6b673ff1fea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b26c7a8-9dfd-4013-86a9-28c5bc49c1a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9ac86cf-c4e8-42b9-a177-0bdcafad47a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354e0f1e-a089-48b6-916c-2bff504ab5ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e45df39e-0fd8-464a-93f6-6d4da6f6c8f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09067d2e-9936-4e1c-9c7f-533a1bebfef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c10a1d-b959-45b3-a147-aebe4ae2a70d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5455388-b5c9-468a-9cd6-281844c921bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7faabf7-371e-42b6-a90f-6bdd71a56a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c225460-8675-4159-ad10-c305f3eb1641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd3dd0f4-4a4c-4505-95f8-162baf0e9065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fcea352-5801-44cd-bfa3-33f4b35264cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d298d33b-8bda-4d20-9ab5-1386fa87f44b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e90f0b-afae-4716-bbb4-dff17b99a2ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b78afca-7edb-4a0b-9968-daca9f93398e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d00e71-0ede-4b7a-a559-b0228f9c9203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b006140-e744-46af-8f9d-dca22fc586c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda63d8f-c5fc-4217-a971-0a69333a1ca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--170d3df5-2058-49ed-b486-50274e3c679c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ae4914-2a55-4e0b-bc22-b1b3166a9a27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a574932e-fed2-4797-b8e5-440f03e05342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d645e69b-c6ed-49ea-8fd6-e86401a34bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e9742a-2cd3-40b6-ada4-936b7dff2113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc83e8f8-f548-4cea-bd66-79e1746bd52d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.145.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c661a2-269b-4493-a91c-f3506e7434cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb419c5-81b1-4ad2-8d0e-16b91a4b47cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de21c8f1-a90f-4cc1-96ac-c69851e776a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8c5265c-b429-4698-bf3d-c4a5f523dd29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8882477-3137-4e0e-a1c2-44c7f41c2fec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3adc1df-5c46-4b6a-9083-85c7a872f76e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db972b46-15b8-47c4-9823-4b4ab4706a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ccb2dd-8858-40c1-9d94-8a43f610e114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac12bba-ac6c-433d-95c5-bdd779891f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7cfb855-5854-4669-b3b8-30e3d5cf7456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63dd20a-10ea-4413-a7c8-f9e28a4cedbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60abfec6-5baf-4794-a1f6-5484d47c5fc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b7160f3-813a-49b4-8e48-c8e2f817c980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab93f750-3887-4a9d-b208-32ab287958ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--418fbbcc-d2cd-49fb-8c47-e51f20ca3b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813436a8-d468-4b15-907c-9ce726a89247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cdf8464-3bfb-4f5b-b6c3-9ba7f59a30b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c49f47fe-90be-45f0-b9d7-8d00442d0780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e783f33e-daf8-4476-a499-8c60e4d7d0ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e155dfe2-0d54-49bc-a93c-86ee7faeac51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde9607d-ff8b-45ba-9231-f4169441ff9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30976c22-9e9a-4aab-acf5-8f4a4a48232f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf91875-da38-4978-b7b5-0256728724de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14a1a01-0911-47a6-bdae-9e83068984c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9345b6d8-a5ca-4c6a-9ab4-79b57fdc3b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f5199b-ede6-44e7-8d1b-ae706b510587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64deade9-6f06-4d82-8ed3-fec29c044984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.83.244.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65388c23-ab0c-4df7-a260-015919bc457e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.9.46.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212c0f68-d7ca-460a-8f00-66c729249202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.90.163.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4039ff6-788a-4c09-b262-c18fb869b6b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.112.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81016f1b-d3b0-4574-961d-8f8088449701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f851195-8a47-4b00-ad6d-00b8f20f86e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d106d126-1002-419e-af16-253afed65206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4842c1c1-60cb-4341-b7b6-02e433eb6975", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.146.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20c31bf-d34c-4ee2-bcfb-9b813d942ca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e685d41-61d6-4059-8119-cdeef495cbac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.147.228.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe27d78f-7a66-4641-84de-2088111a4e08", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.150.74.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63bb0a7-10b1-4f3b-b405-15ef19d19e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--485d9460-26aa-4bf4-a114-5729dbe8d9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.16.150.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230fb4c7-b1c9-4a5e-9a5f-91e5927973ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.19.67.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79928063-3cc7-43d1-a895-be5b24ebea7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.229.233.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c91870-af73-4023-8718-91d63acc0284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bcd1fed-b3f8-421d-b814-2580b1b1c476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b789247f-ac9d-4bb0-b5e8-74ce92d9982e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--078acbc5-a603-4a0d-97ef-59b24fea87cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31ddd68-fd05-43be-8852-e4ee5aefd360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d23e0f3f-646c-4f9d-9afb-62a5b7ccfbb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d413d0c-370c-4c6b-b183-70a0323ed38e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf12cc3d-9004-407e-b42d-6d2c8507469e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.38.146.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2b9e5d-e8ae-4cd4-b4af-116918813517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.4.66.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43fd9bc7-4df9-4da3-a4d5-1d411e94b860", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.52.96.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ea4a16-aebe-40b7-a8e5-4679ea001b51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.170.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0417c369-9ecc-4498-9b6d-bf85a55734fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.173.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef535d18-18fb-49dc-a14d-5eaaa8e3659e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.192.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb0a0143-7e86-4de1-b65b-e9b69c306669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.252.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187a0995-e3be-48de-8436-9f9240f660dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.110.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0562e10c-a094-469e-af53-62c59c2f7760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.112.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b52817-173c-4c19-a758-81a0179410d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.118.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--422758ae-7465-4201-ae95-0b94c952b029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.190.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a9325e5-5469-479c-8aa8-232d3dcebc9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a149b0-da3c-4621-858d-bcc95a73be7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--237fbeb1-dda1-4305-aee1-9ac85a36d21f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--718672a6-85cf-4736-9614-5175e0bf691f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1326ba6-42c4-43ba-bf6c-063523fcbda3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce895c64-d68c-4b64-a5ed-8bfb24a0eef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9263b45d-c7c5-44da-a93a-abab29a85fc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8fea101-114e-4e01-b12f-c60833bb29af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--722a5e68-fb51-467d-aab1-f4097fc7a2ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67cb6206-b5b4-4227-bfdd-3a4f57ee99f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--831577b1-c281-4e80-9b71-2a7e80336a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22381769-1f09-448a-9de6-c0fda0dcec45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e5aac5e-e689-43d4-a1a3-92be5bd71a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1a169e-fdb6-40b1-a5cf-b6e533af94ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb08bb0-aea0-4aad-8cb2-853ad3956cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ca67e4-c306-45a7-9e2c-e3da58b1531c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.11.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e7d029-1865-4530-a7cb-1ed8d55d8a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.113.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe3485c-a247-4cc2-9dfc-0ead4f9e573a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.119.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c41033a-0353-4829-8b67-7dc875dc9d63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.133.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b194398-3331-43a2-b69c-7c318b68985a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.140.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c7a4613-86db-47dc-a4e1-3d4311e21b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.142.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44d01663-eba7-4cef-aed3-ddc7880d3cc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.146.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce8139d2-afca-4153-a05f-b52aff8abbe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.161.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6daa7c-09ec-4401-9b96-57d668286442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.162.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93fd23cb-9a7d-41e0-b03d-b6c32641314d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.171.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1640f55-e9de-48c0-983a-5baebea67311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.181.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f76f139-203d-4209-8f97-6d6400bef71c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.189.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--574dc05f-4ac3-4300-a3c3-fc2d12a789e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.194.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21ef685-b0ca-4743-9517-054c02ed27cd", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.219.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae5d739-d8d5-4413-8d0f-affb36c409d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.36.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f35beed5-c9af-4675-8de3-f7f45d424b1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.47.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9baf51af-8369-47d6-bb36-8cb5713e3cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.53.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba00d5c-aa7d-4865-a0ac-2190b702c911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.82.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15032e01-35bd-4843-98d2-f7a0b341364b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.83.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07585ff-a4d3-4ed6-9f7c-ee24c9c7d138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.83.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d896b67-e423-4c2d-98a8-e8a5083b5a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.87.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8359bab1-1006-432f-9359-92ac8b73aae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.89.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95360e1d-9d7c-44de-a86a-341cf44a3c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.92.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fac3b86-7eaf-4dad-a2c2-4f660b89ae13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.94.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f05ed81-7b1c-4b41-80ec-9e2707f0a4c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.94.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c2b287-577b-4069-8ee0-132939406951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.100.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2da67f2-5a60-4a8c-954e-059047771e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.104.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a255b6d-1557-406a-8d54-ccec0361d33f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.105.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4010d6f5-c581-4ffd-bd4b-f5adb4557207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.111.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d13c7240-9104-4ef2-b902-a8033df539de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.117.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0128778a-911d-43bb-90eb-6eada472f4ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.119.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a52389-b237-4bf0-83fc-ab91dae3823b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c37ee4-d8c1-47a6-9bd0-027758fc9188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.124.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9aedbd7-8e5e-477f-81b3-3460d7a360c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.141.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86cc5588-3dcf-4be2-8b08-967a7b3d0fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.167.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff8b842-bb58-4a83-803e-7cd52ec597f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.17.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ab2328-447d-4d8c-85c6-4805bd92a3a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.174.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aace9be0-e243-44d9-af75-c05a5a632077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.175.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee49a7a-3616-4305-860d-d37bb54a2ec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.176.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30c3f983-f7cb-484f-98fd-cca532e3d0ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.181.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ddbd8f-171e-4ecf-8f6f-8f219ff45e7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.182.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689a85a7-7cec-4700-82b2-1886de562e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.190.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fde2523-8b74-4a92-b855-5fbb0ce71713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.191.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7806170f-f1cd-4f69-a696-753e4360355e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.20.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2427b7f5-d2e5-4514-bf57-5f5d0552f220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.24.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c17f22-7b7c-42c5-a976-5c248aae0c61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.241.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2083a54c-d171-4def-b124-ea4d41eb8971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.242.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303899df-7dd0-4620-beee-558d8f4743bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.248.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d07f42c1-a905-4b9f-ba32-54e3070a37ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913aaca4-87b1-43fc-ba5a-7c203efe168e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73167fd-1329-4a82-bb5f-79c2cd7816b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.42.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd6826e-099b-47a2-a69e-40d5e70548d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.42.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1074acf7-df1a-43b6-a514-cef88533cde6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.44.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--948df6ff-4c5c-4a6d-907f-171ece78a11c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.45.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c986fd6-a020-4fe7-b557-60d28402d2b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.52.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e83dadec-7f23-4534-b9b1-e1a8dfa985dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.59.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af2174ad-1697-4a8c-ad57-c0a7424e813d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.59.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93e23074-43c3-4bd8-90be-e27bca01e68e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.61.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c09cf69-95e3-44c7-a421-6d7b3a5fabd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.70.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a8c2989-92bf-4d3a-83f8-07d58eca1706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.88.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f80c35ff-f864-45c9-8a3c-9495234a01f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.89.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f31bebd-d880-407f-aac1-9f274cdf079d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73997442-921a-4c24-b734-d90908f40b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.94.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199fc341-0075-487e-a8b1-772d8d54c72e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.94.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8cfebc-080c-46ce-aaab-5a9a907f9788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.98.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--300161e9-a9be-4b00-9d0b-24ee5e6b3b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.218.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f47c9799-0e61-42f8-82c1-9ac33dd57f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.135.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f89e4880-ad51-4db9-b91c-8bf47932d757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.141.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93264c0-b91d-4aac-93be-038916427f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.143.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3a368d7-962d-4a0b-8a1d-0f200b53dd50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.147.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09893ea8-d20c-4bdb-b427-dfa5071164a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.148.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a40595-ec56-43b7-a968-8106b22b00a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.15.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f79533d-5070-4ee3-a8ea-18d23157e740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.159.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d9de67-003f-4c7d-9ec1-b8a407e7a68b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.167.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--451297c5-9640-4b6a-a313-8f50e2a25fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.176.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f97c9fb-22cd-480f-8a1f-0fd9e81721c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.192.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e54a4a7f-cc1c-48dd-a002-47fafc0bcd2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.195.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfbb0374-0a57-4209-bdf2-6506d0c0811c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.198.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de306521-a0ed-4da9-bf4d-80aa3ee7b4b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.213.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9491e70-3ddd-46f1-8c56-741da4f8ff79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.243.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ad9768-2154-457d-b145-2f5c666225f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.244.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a1f122-020d-456b-8847-fa6ff67371dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.25.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b16aabe-90be-41c6-8c43-bbe9bee00309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.250.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7755872-628a-4c74-97b6-9d4e0f52e839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.251.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d97ee82-c576-4fe1-b796-bdc35eafd221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.255.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5372b678-b8a9-453c-981e-b1e3217630c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.37.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e7c1249-14c2-49a0-92b8-edc3196dab7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.38.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f35cca-45dc-4c49-8dcd-4c6722cb53df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.39.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78845ec7-0314-4f4d-9ef3-3511d6d52198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.50.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f9aba24-60a2-4325-ac8d-cc5dcc382769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.69.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f8d45e3-f0b7-4bb0-aca2-829a5365c467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.70.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f2f686f-6301-4c25-80aa-65378a5246a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.84.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70bd4b5b-00ee-467d-8b68-e12e166efd71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.93.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce4fbc4-7d0c-4cdd-8f20-fcb6fbccc266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.45.19.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c06f77b-94ca-4d32-b7bb-bf82230a67c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.215.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76348a8f-bbcf-40cb-91f6-f76d96189607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.217.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab36f162-a5d0-4743-ab0c-1dc7faa38fdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.217.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a83cc7-8323-4180-8e14-aec151447329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.220.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a176f7-7d24-4d46-95de-216a844b225a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.221.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b79c38-2796-4089-8ce6-5d5df380a09c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.228.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ae23f0-98ab-4dab-94cf-a529421935f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.230.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af1ebcb3-e5c7-4ef4-a2ca-64faa0d2f4aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.231.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e06eb4c8-2d2c-45b7-94b2-551eb99f5029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.231.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6aa678-95c4-42f7-8f0c-47975f349c78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.232.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f7d699-ee5d-42b1-82bb-9854f41113d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--009ad5aa-8dd6-4f98-ad1a-1e5f239111ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56f167fe-f292-4696-99f8-0b06d0b882cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.234.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd595d0b-7c54-4f95-b41b-ab53570c8358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.234.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7611291b-0f01-41df-b531-2458daf79313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f18fb05-d4d2-42fa-8099-b4fc1af15853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c1d6eab-caa3-46a9-8803-668f2f1eec6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df2bf94-37e4-4ede-84ab-82541194050c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d0b3a7-a894-42d4-82c9-9478e8900961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.108.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c4e433b-bec1-43aa-9aa4-5e6b53bc9ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57cefa67-c000-4e64-8492-d99d747ddb80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912dc511-e1b8-4629-8478-398d311bd978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f461c33-1351-4153-b57a-dad1f2af76f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68026963-99a5-428b-bbe9-82e343445952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.132.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32744f0-8655-4d98-bef9-d9400a0f8276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.132.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba7cf02-19c2-49fd-b2ff-4dd76d3c53f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--458a1a7f-b7c6-49de-82cc-f4ecbf16aac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--046634d2-e2e0-4e60-a88f-33f348da50a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34234a7e-f1ca-419d-99d9-38fd7b035b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25f0337-402f-48be-8355-7b5158270c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6508d88-ba0b-430b-98ba-206c4d4185e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda91d92-de42-4345-b98a-0f4108c066a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56f44791-1b7a-4cfc-8874-d7dafae0a7b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffba3fa4-58f2-491d-80af-15cb732ff315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69bd8ffd-42bd-430f-bf81-219e71c636ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d17a6e9-2f83-426b-af82-331bcdfd7b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f1cb50a-c751-4108-be06-382eef68ec0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.191.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c645eb93-be21-4451-91a5-e45a0374d975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.200.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c036225-ed0d-40a9-bacb-277ccf038a1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.203.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd329412-9409-45eb-b673-ba021614a81b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.204.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be58d34-b79f-4346-a262-10cda2799611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.86.36.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b68b42a-e888-41cd-b73a-62f025b69a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.1.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1118a3-33ae-4ca6-8ac0-40e2e9ff8990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.15.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5765ab7-65ce-4ac5-af54-758a636bd232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.56.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a4534f-aefd-452a-9c97-e92ddfa5d5c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.94.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc7cd33-4f9b-4c31-ae8c-4ece2b8ff3cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.1.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d2723d-98ac-49df-a4b1-4ca291c6c483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.94.137.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827d8435-6bbd-472d-b956-04fae2c2890a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.94.92.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0cbf365-e6e1-469b-abae-5e88d1803a0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.95.194.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50e8f0b8-645c-4e92-b79a-ea1a308a651c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.95.204.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d73672d6-07fd-4505-b5c2-444b361c5477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.95.206.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ecdca2-5ac1-4291-8c7c-dd8833532b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.95.209.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc52e8e-8f1e-4bc6-9eaa-de5b8653bd49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.95.210.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f2c6b1c-23ef-4900-b19b-72ebc72f088f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.98.255.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6afb61a-5370-4d37-ba77-1d9509efa410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.99.115.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0837b9c9-0fcd-4227-aa5b-06a7117821ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.145.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb3b601-792d-4e61-9969-2adc26840fd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.187.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f2c91b-b23d-43c3-8e82-829338a44be9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.235.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbea7c17-359e-4ed2-b5b7-195162b52ba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.85.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee5265b7-a7d4-47e1-9887-9b2997653bec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.85.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0075b08b-1e61-4c82-852e-92ab699bede0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.0.237.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8566c8dc-0351-4f97-881f-40b006043b9b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.0.237.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d365334c-8ef6-427b-a6ed-9ca37cfc6593", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.207.186.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98791fac-f938-4ec4-a55c-101690599d99", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.213.215.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30a0041-4d1e-45ea-889b-5d8184c93cfd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.232.104.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5785f6d5-2f6c-4e98-8005-5afbd4be75c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.254.31.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98927c9e-5293-45d2-8eff-8c67238600ed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.166.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62986de7-016a-4ac8-b9f1-548c86cdb5a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.204.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8204b20-cb7c-4d79-b3b9-eff2e499d5d9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.48.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46121bd6-2f5b-4d0d-899b-7a8584b22ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.50.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f23fbded-a901-4e07-965d-97737b10a43b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.77.136.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d2305d9-13ec-4b0d-a1cc-2358bab78560", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.133.192.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1e5fa7-7a1d-4aa1-804d-ccc96dbe21be", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.133.192.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c79efe-2c64-4676-92db-e46daefbd9eb", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.160.135.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29cf85d3-ecc1-42b9-8786-3860f665d544", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.181.87.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06864217-1282-492d-8959-2600f09a1e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.208.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad2c1361-973c-4d92-8b40-f666f89e7496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e4c837-dd6f-4d85-a39a-9a9381755c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--015d28f1-2ea4-477b-b849-d52a1c74c040", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.137.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c08bc0-4c8a-45ca-8e2f-b109c1cbb1a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.20.21.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84bcd1a4-7a3a-4cf1-9957-6ed577c7e56d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.237.90.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1cf369-b0da-41b4-82ff-74a8260794a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.237.92.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b95b3d62-a62e-48d6-810d-0046d5370928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.237.94.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d11240c-f95f-40af-ac20-441514b08e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.237.94.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25fb1393-2ef4-4869-829e-c2f12a550aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.252.83.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04ff56a-506a-4dbf-a1eb-7607cb154456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.252.83.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b068ae9-470c-41f9-9e30-459d7d026135", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.252.83.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fadf28b-036e-4ea8-9478-ee15f2830026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.252.83.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2903f1aa-de2d-476b-8482-8deb4fa2e5bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.252.83.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf98079-d3a3-463f-b8b8-f8e86e7156f1", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.252.83.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65be4438-79fc-4d32-a023-a056f1bcbb87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.252.83.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f97ebfc-f2b0-4fbd-8e87-32991f8376a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.252.83.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e2496e-9333-4ff0-849b-8c5c740d9141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.252.83.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78db3d6-6472-4552-973a-22e85f4e6419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.252.83.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea4ecec-88e9-442f-a11a-cc69e21ede3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.97.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066880d3-c941-4537-86f9-016d7af6ec4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.34.216.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feca5030-d17e-4d6f-8351-6b3ea44bf6c2", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.39.19.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f9b382-bef5-4fe9-96ab-a9cad7ace659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.44.170.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f88a3ab-eb4b-4b48-8677-50bdf5600066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.138.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dadcfe37-98b7-469d-95c1-37c7a728814a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c7bc21-6b72-42e3-8095-a4776a20ffa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.16.30.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b83325-3a99-4b43-9f1e-d5786cda8410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.16.43.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b876e752-f2f7-4f96-ae0e-fced3f17ca76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.242.76.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af388eb0-df06-4e26-91f3-e3cb055a0e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e819565a-3144-4dfe-a853-728647c4e00b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.105.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b7076bd-a6fa-4732-a575-926a53e20209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.111.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db03fc07-0baa-480a-9f38-b1961a3a004d", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.13.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa628346-d934-4d3b-9d8c-ea0e7c83019c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.171.250.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac8fe61-dd14-4a97-b9d8-0e46ba3523ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.250.125.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da6d130-9c86-45b0-8f57-716e92bdef16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.254.49.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bbaa594-e6a3-4765-b393-01cecaf2229e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.255.166.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a1572a-5b3e-422f-aca9-9946637a6f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.57.80.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bde2c9d-f5f0-4eb5-adf8-57b1b08f5323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.57.81.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ee54d6-a483-4b22-88b3-be251d5ec92b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.57.81.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063c6f94-06d3-4db1-a5e6-db38016a4cd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.57.81.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d8410f-4f2a-46e7-88d0-5a82794316f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.57.81.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b92b417f-a55c-42bc-84f1-90659942703f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.111.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f70c6dd9-5554-4c21-b702-09d55fcbeb9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.180.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89584831-d446-4ea2-8cb5-036c92b52131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.77.91.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20b1960-1db1-4f1c-ad4e-484ad5b91ab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.212.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0624a032-13fd-4395-b651-bd968ee5597d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.212.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aafec471-a6de-47f0-bf59-35dfe537f6c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.212.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c859b4fa-b5c6-4660-94dd-fd3a35ac817b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.212.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--177e1575-bc4c-45a6-92da-844c7c06d5d9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.8.102.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--177e7860-de34-4637-ab36-62ca0d2018fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.8.82.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff497e0-424a-4d71-8b6d-10b3daf80a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.8.83.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e5269f-9e24-4892-8d9d-8e7c5cc733d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.8.89.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afb71965-d04a-4dee-9700-65145f57992f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.8.89.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e5174a-59f5-4aef-b487-d7e70e0d5a87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.8.97.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c79161-9d28-46bd-b847-489342a8f894", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.104.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f48ee71-6f82-4a56-98cf-a9f241aa85d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.110.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e609c877-9c77-45ce-ab7c-5eb37c9394e3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.111.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d39209a-9cb0-40df-a7e8-812689b6cde5", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.123.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f835e52c-976c-4b67-a735-4e553f558ccf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.9.51.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e74d90a-8722-4bb7-b7b1-c986a1965afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.11.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--831ea855-c7c1-4839-8a0f-0b9cf619ed04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.15.153.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4361e341-53c4-43e8-b579-205cf9f29380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.151.198.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a7cb0bb-d8dc-46ca-9617-da9e8c7e2542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.91.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f759e1-b56f-4e7c-a92f-8fcf941c62fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.96.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a18ebc-3f92-4eee-a2d5-4a96743f78a5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd11e2b2-acee-408a-8032-d4bc6186db09", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4d5012-60ff-49b1-870a-43628006c834", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f63ddc6-7550-4b8e-a57f-07d947fefa0b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c839fa1-5362-471e-812c-a8ca1563eed1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa73e10-8fb9-4ab0-802f-5d3d4ce91e74", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e20a99-44de-444a-a990-7ca25b8114ea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f14b0fdf-e7e8-429b-b9f8-0ca213b3e02d", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.169.144.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b583e953-6ca7-4231-9f41-93520a153112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.137.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e30101e-c240-4988-ab00-d664cbda8209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.140.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb5dd657-0d69-4ba4-abeb-dd76072f04ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.147.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa41bd2-260e-4652-af03-90c05867beee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.153.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de6425c1-802c-4605-8ecb-32c5e93eab11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.171.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffb8e180-db68-44d4-bc4f-bd24cbb42091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.20.198.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b0928f6-2c10-49c0-ac45-9cb77be338e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.207.196.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a08fc28-f529-41a6-af86-fa0185ee1cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.21.227.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44d623c1-c620-47d1-a23b-2df0c7e65792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.224.245.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa4c7dd-49c7-43e7-827f-ab4419691ad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.42.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a344a9-eb14-4c21-9c18-c442c468c9bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.42.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--465edd58-86b2-4604-8ab2-3fcf6a652ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.41.90.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79196a50-940b-4238-a7e8-9eac08a27e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.7.83.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--701a1e66-8e21-49b3-913d-b0ab41450f8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.27.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a4d05b-376d-4d29-bf7d-23dc4c7ebdb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.144.162.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b3f232-f0d8-45ac-bd8e-71ed2e1386df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.146.156.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3110b2-ca21-4d80-a9d2-b9c523a217f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.147.51.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a883850-06c3-403d-9ae4-6f9b695d4ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.159.49.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa63381d-5fba-44b4-bd48-285ddc0012f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.165.165.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac7c050-7c8a-4222-85a1-c8444c491480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.166.203.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e746b5e5-383c-4fc2-a761-bcc7b0ea58f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.167.234.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08369e2-5f85-4a3e-8f4f-ca45756ae1bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.174.230.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b0ca499-196c-4a40-a683-baedd449d8ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.184.203.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58c640f-f45a-4aef-ae65-239458b204a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.204.58.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62bf4e41-34fa-4936-969a-da5669b4ff7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.204.71.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680325e4-aa08-4982-bb25-5f808246ee23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.221.141.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e587e439-c18f-442b-9afc-d6da8e59bb05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.235.238.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c15aec0-14ef-4d4f-bd08-3590d3d84c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.39.248.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c39a831-f2dc-4af9-8bfd-bc00d85e30be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.82.246.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f297332-9940-4274-97e8-539288c655ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.82.54.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a12bd382-6d96-4332-9a7d-79dce840d3bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.86.188.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5971bd7-28f2-4ea9-ba36-1b3afe23b421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.89.226.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9a5ae4-e6db-432b-be2f-4e8567e91f12", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.2.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--356cf64c-cce1-4342-8c38-887379e023e2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.2.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b64fcc2-32f8-4738-bb45-9d8083b62ac9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.2.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b1c10a-2e6b-45eb-ba0a-d56e7d8fad75", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.2.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f5f6c5-dd03-4a6f-bbd8-8345d91a1d03", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.2.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d61e93-9572-4680-b50e-56a965e6cdd4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.2.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f88b0b0-d040-4a21-85ef-bbc9436821fc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.2.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--789a4c79-7dfd-4ee2-8dee-2fdb2ea93a87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.154.243.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85adb523-7110-4f10-bf47-0c544ef8ae68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.154.243.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d66c3528-2051-4ff8-af1c-b0882edb66f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.153.236.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ccd68e3-d310-4ce8-aef7-31d61d4c5b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.186.224.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c307a51-f0c8-406b-b871-79178eb0829f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.187.60.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0016387a-906c-4448-abdc-b082a074c367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.212.237.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2572cdcb-5905-45b5-aff2-1b03a51d2fc7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.240.28.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c0aace-c712-4af6-b552-869e06c4ea76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.247.17.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f0bdaed-c4cc-41b2-9d00-a662f63c8f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.42.22.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afbafe76-5b48-43c4-a58d-03d441fde6aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.52.109.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ba4d04-7ca0-467d-9888-032ec3cb671a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.55.16.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eaeac4e-738c-4e6d-a533-ffc9e270f996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.55.90.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c631bdc-6ee7-4420-941e-2c7c48a4c1f4", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.103.132.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fcb5c98-f203-4c9e-a7f0-9c39b43722db", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.11.42.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6db9c447-bb62-42fa-830c-5df5684991fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.125.31.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29588dfa-addf-45be-ae76-85f095f2f3cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.126.127.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a6e121-ef62-4056-8a6d-da4712cd9bc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.126.175.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f82f433-4dbd-4afe-8d5c-2d043daabda7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.126.182.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae221c96-7552-4573-9000-7f74c4be6d48", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.126.78.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--104fa222-2954-4e06-85c6-de29f3121dd1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.127.237.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579d42e5-31e2-41a2-b1af-2bb344f60b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.174.86.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647dfad2-8ab0-42f8-8c51-c66cf35d6c9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.49.230.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--238f14f3-7257-406b-98d9-f3535ab0927c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.52.103.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc519bd5-10c9-4f7a-8288-33dd28c411d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.58.42.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--740e29a4-5a64-4cd2-8d73-9cd2c83b78c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.10.158.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6fcc27a-0f8f-4f83-8238-5c064282c659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.209.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf1abbc-ee15-4983-9691-fd665d352265", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.173.100.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abd3799c-a8ae-4f4c-9135-50e2c7d416b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.191.137.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d54486a5-28d0-4d18-9a35-2269fe0f4318", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.199.224.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ba7eee-0a01-4e9c-9a45-9c0413ba8559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.249.207.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef61dce-f5cd-437c-95a4-ad8bdc308bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.136.88.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b719a7e-d2a6-4303-98e2-14b5794d9a9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.142.105.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f3e480-46ea-4a8c-ab51-3bcbab825345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.147.209.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9c098b-0315-42b2-b266-b85e70661bb1", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.163.115.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0905741-a87a-4414-a28a-0bc63f259ba6", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.169.106.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c43b633-cde5-4ea8-a495-9a3069f1646c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.174.155.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39313a22-1043-4dd3-acee-85640339b4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.182.67.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8afc26b8-b93a-4b9e-9314-9484f52d5fe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.184.232.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac7556e-7715-47f5-a054-df26c530c368", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.54.216.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ef9651-1c47-4410-ba91-2847828805ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.55.11.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f935a83-3b42-4081-92bb-8a1351c57bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.58.106.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a90a3826-c9a9-4370-a87e-cfe79086bb32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.90.201.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb51e51-9d67-46d8-8870-8c46decb5bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.151.182.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92a2ec4-2a69-4389-ba27-acaeab6d1b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.16.0.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02b669fb-0c7e-4e36-bec0-6b6bbddc1712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.164.211.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37913948-5e03-4229-9c4a-c0ef72eef78a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.169.26.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b374a23f-1fc6-427b-a092-bb3d10293907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.146.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4036e870-8283-40f7-acbe-c007b6f1a4b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.147.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd03881-7356-4d64-a43f-c0878e589866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.169.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677235c4-da26-42ab-8b89-76ff77a38fc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.182.80.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c34e72-0d92-4645-9c03-0fcc00f8dc77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.205.223.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4743bb62-f23b-43fa-8b50-b8d6c98bda32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.142.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c494f265-7b3f-4297-9eab-c0f34b1e5e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.220.171.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8d20d3-2f3a-40f3-a5dc-8d40f35d3ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ab2dc2-e4de-4976-b928-ca496817ee39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e453c7c-1ca6-4226-bc5e-7d03cbbcce6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c53d96-05b0-4e40-888c-0739129b35ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d621337f-fcef-4094-b5ec-ec659712b8f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647b7edc-42ab-4f3a-a662-de21b8f9ed44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e73357-5639-4dc9-8067-e1caef661b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba45ad3-78e8-47ea-b40e-1b56d7732036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d39879b7-a017-41e9-9c2b-e8a9f5b1d782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1452443-767a-44d5-b1ad-ae07bd2c86a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b132fadc-e804-4577-a398-eaa8c2da94ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f84149d-0088-403f-9a54-ec4fcf8b5e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4341d9f-e485-48c8-aa06-e274c07751d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--630abe19-5be0-4d16-93da-5f2e01d5377b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ccb234-27de-43dd-b9b6-1b90314024a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d462f9cf-7b64-4e02-911d-7974afe9f7f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46fef7f6-9669-4373-93e3-3010cf147a90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ced8b3-5797-420a-8866-038d03e904c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f5596c-31bb-4a28-a4e3-a361b2724a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f0be0cf-fbf9-439a-ba57-3f4039bf1c78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697846f0-f79a-447c-b8ec-a7a9bbe2e7d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1feef0b1-633a-4ccf-8778-8c18de716399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96aa2890-2aa2-4451-a5d6-5c0c6b1a24cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb16e2f-7730-4a64-bac3-0754b1421b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5465e6bb-e770-443a-835b-24615a384ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08d3999-54ad-47f4-b274-7171011ca21c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd9a0ff7-23e1-442a-b272-d51843af36d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d381c8b-241e-43ba-a906-7cdc8a268c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8185503-24b5-4476-9a91-c7e7bdce9fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6fed314-ff84-43f2-8240-986cb1b382f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e20d0a0d-60ea-42f1-bad6-8c57fceb4329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab29773c-960a-4138-96e3-6fcb50dda89f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c985b8-6fcd-410e-a0b8-ad4ba2c47c50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d1445b-e5cb-44dd-8099-857b02400b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b10ada-865d-45c3-ae1d-3c0f06a40bc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5d47ba-0ec3-4442-875d-70a939067b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec7c79a-45d7-40a1-968b-1852a5e395ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097c617e-e454-4b34-a0d9-aa812dd98b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a93a72-84dc-46ad-80b3-2336718e4862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf3739d8-066f-44b0-b1e6-dd499ce2d5ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58eafa73-b2d9-4fea-ba17-07c4fa665463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1518ec5-6698-4a42-9c81-2d8cb8256f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d5c14ab-f923-493e-ad99-986c8fb5c73a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51752e62-115b-4eda-839c-4f1949e6a6e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00728c02-1ce8-478e-bbb8-98d56987db31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--011a202c-21b0-4807-b36c-76be8020bddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc555e4-d30c-4810-a99d-bfc56e83ba62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef077ff-d666-4dbd-a15a-177a3a9b67dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c8ec96-c58e-4f44-b700-3c7fa7e8b4a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb58c4d-527a-4fa3-a178-8b2dd64c3e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1ac17b-628b-400e-a7fe-8581d12f63ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e2df6da-c7ef-4fa3-9710-08f7d98ce2dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b75b8a5-2b1a-404d-918a-d3d5bb949beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ce782b-70fd-400c-8c7c-25b8839bc0db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c748a6-4169-4d87-9144-cff9d10a403b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f3db20-c047-4a2a-9139-b7f72518db5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3276324-5efd-4063-b8e9-65b1a598d851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a35e875-ffb3-47fe-95dd-fcfb87b6ff00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2e4150-ac5e-4c97-a886-28ae3dd3e11e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3abab54-96be-49da-9ee0-a3046ec42f80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e57b500-e0e2-4a41-99f7-37d3fe9f3a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7904343-7b9d-400a-a572-8fde8752efec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80652de1-755c-4e69-bffb-9d56f20dcd99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b0ef0e0-5dd3-4397-b21a-8e45a40f10b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c52c5894-286b-4b1b-a097-31ce2fa582db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd723503-a1d1-427d-adb7-b232959e6469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315c9457-eb2c-4c1e-868b-7da56b344254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1223cc8f-0490-410c-a5da-81db65a09163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857f05f0-589e-4a28-890d-677dd3ef43d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2afb59a9-af96-4815-9b9b-5761ab4cdb41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94b7071a-2686-4da9-89b0-ecd53406a2e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80157126-0aea-424c-ab0b-2d315fdf046b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ccb3ca-1060-4e1d-8813-768dee010a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e999baa8-5a20-4bf2-aab3-35e44c857eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb92e6b-f949-4fdd-9076-befc3e7dc231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12a3ef68-6091-42a9-82ee-d904c3ae1b3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8405821-6dc7-4aa3-a283-a0db6fb51f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d3ce75-fff7-47e3-9c52-5181b5e72756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2cec5e-25fd-46e8-b85a-57e62d65c902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39eac016-88b7-4aa8-ad01-cfce0cdc6cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3711a27b-e76f-40c1-ae28-30378e54edc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4f1980-c501-49c6-a2ee-316d4da2aaa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a149fe-0f87-48c3-adb8-e732a77a0373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d70aa5-9d53-4a54-953e-333138714367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971cf7d1-c9f4-47df-ae32-c1847c8e3e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c040e3-9228-446c-82d1-cf57f3f04fc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e27bb8-2390-456e-98d9-e5e59fd24891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f997459-b1ed-4159-880a-62d0b0e65bea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51551bb9-727d-41d1-9236-7662818b3881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4fda302-66a2-449e-88d7-4adbc84d0c04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbf4468f-20cf-4e01-bf56-e52c32a08c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ed12cc-9e82-4556-88dc-1cbc567fe5e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26b8ebf-35f7-4a93-a2ee-d1f6a22af685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf93f7d-86d5-472f-9c4f-4c9e33c93d87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f472ba-57c2-4d94-b375-770009fce553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73414bef-ed09-40d3-970a-1a814795ca00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e0ac16-033a-47ce-9cb9-db4ee633f0e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2173a3f2-4944-40c7-83ec-519ce6c88e53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923455a2-6833-4333-9e2a-186c8bdc40a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a8831ff-e4ac-4d41-bc17-3d4ad6af5398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ac84a6-f33f-49d2-b772-ee539ac2e8f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe48ebb9-bf4e-4a55-95b8-1a8ad908ac3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3a0080-faa5-4259-a7c2-8c813b7602f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b1db94-24aa-4176-acda-77ef73aec37a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a73bacf-1389-4830-8a3f-9b858dc93b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d956663-5b4a-40bd-8192-0ec66081d405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f053f107-a63f-4677-bddb-483356237b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8784c586-52d3-4d63-8ac7-4a830e37a2ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189e753f-8f3c-4869-a71c-2b032738bd11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a23c61-51c9-4bb6-b083-a55d2dcfc6dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--225303e3-73c4-4f2d-b589-f1b0340100b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b7a1eb-3c7c-4d19-a392-d89c72e07064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeddc478-f70e-4bf0-8f7c-e27a4838024f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f7a8bdc-e9db-4ec7-a83d-961036c0df54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f670893b-ff5b-4c7c-8f91-9c6956ebd66b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--626e761b-0766-4eca-be29-7dd58c3ae1cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab3161a-98fb-46eb-88ec-abafe22964ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e9fd37-b9f5-48f1-97bc-5968e4b4bcfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf46ff5-bff5-416a-bca8-d56b7887a759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65913ea2-1f77-4e1a-8416-4e1179f6db10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57324fd1-3022-4fa0-bc31-d0502df8ac17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b841e4a-b073-44a0-98b4-bd6484b956a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8653c083-cc12-47ad-b2f8-3e9f66089033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a96435e-82f7-4a65-ad1c-a84e7baa30ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf441d9-f23c-4e95-8cc2-1fd72ceb8e16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13857845-1a09-4170-b5ba-e9c04344899f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4095f84c-1ccf-4e26-a8b4-91095009c542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d20dfd5-69c3-4be9-95a5-176d419e1668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47451158-841b-4f1e-936d-62708a85a505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68bca6d9-352c-4cb3-939a-3242a6a5e5dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135fd400-95f8-40e3-8cd8-bc21198a4c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6664360b-c0bd-4534-adcb-2506b820a1cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df2ef421-ec98-4169-a532-6b0859851350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcef9f89-2ccf-4b64-9271-00e5965f3c9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f51c6bf-69a5-49d8-95a2-906b59910b94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4e62bf-c755-41dc-95fa-7d2f095f8d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb759db-cd8c-4898-8eda-b8ee4e9b1e27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa1a600-8a40-4086-b163-d2b88bf1b4bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5094f6ca-fddb-4d3c-8663-90f942e274ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad2a76f-84da-4133-8163-1a0a937a40ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43146a01-0560-4108-af00-26058addbe0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--556ac50d-0f91-49ec-a233-6f5ce0fefc61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab00660-57f7-4d95-9642-2848b70e70fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc37077-fb95-46bb-8eec-30941e1fe34c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f129187c-e3ab-4a5e-9f94-f82728853502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7fe726a-48f5-4c45-af0f-7ba731dc668b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c043ac0-b1b7-4ce7-8e39-d55a88b7b0e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e57071-367d-47c6-98c4-8a8f2936dbd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73090652-627d-4b2b-9cda-5a625fd9792a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74057aa3-021b-4854-96c9-2377c4d0ad5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859d9648-3ed5-4be8-8c68-7e24c5225346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f194cb81-b653-4b4b-a15b-df0ee07b2dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e33770cd-f34b-47c3-aec2-7d93825c45e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a2ff95-28b4-4d87-bb7d-4d3d3480a781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c25bfb7a-06ce-4e28-b749-b3ad28a2eceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc68b72-bd0d-40d4-8f01-cb65b8ff8458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a46fe2-71ac-43b4-8901-ff657eef732d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c98f59-cd23-4dd0-bf9c-efb2a72888c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a27c8fcf-4b0f-4a71-ad11-f27a39cbc002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61547f3-ac40-445e-9c98-73d327f30f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddfd60a5-87e8-4377-9af1-19165c93454b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--104b0196-54bc-47b3-851b-293b9f2fcf0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7861c9dc-2ea4-4ea2-9839-dad561c91572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f132a78-0139-4b5a-a1f3-4044d7e96892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf0a05c-d98b-4b61-a19b-b79bbf3d1d7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a53b71-eee8-487a-b6b0-7bdfbb379e25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5e01d7-3ea3-438b-87b5-9319b35e15e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b2ea9c-9b3f-4f56-b42d-c5074f3822dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e647f9e1-07e0-42c5-8432-a1685aa6d745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6feab62-bec9-4007-86c1-3c893a9230b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--930a27c1-2352-4b8c-a937-dddc9d1efc3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a9c1c6-69e5-4cd1-a58e-d5fc6b8846d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cca7406-b4a6-445f-8523-b7ecf90d0b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d832564-30cc-4d49-85f7-79d1e70628ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73905d67-0054-4522-8390-a6234a79f4a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27e66eb-bfae-466b-85cc-b83c82660b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a586ca-a870-4d9b-a35d-b5d3f002534c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf49a9a-3f1c-4225-a284-a8210efc7b88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a0bb66-f22b-432c-bf6e-78ee599f2d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--177f5bd7-d83b-443b-b606-8eb8e4afede6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd8be02-f998-41cb-824b-d62c2ac82256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe4b274-4530-484b-a972-8a28da477143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c28f9ce9-c4bf-4bc5-8956-bbe99cc5a615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c4dfca1-0ea8-4a54-873a-76d4b60ff79e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412ce021-851a-486f-bd1f-ec9ab92d4169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528b6beb-1490-4281-9f4f-ce16bb3fe49e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f01610e8-bacc-4ed8-b410-525ee3c6194b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb0c127-1859-4118-b2bb-99d93193ef64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18fd77d3-006e-49df-accf-f5ff1f3b34aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be41740-7e9f-4675-a1ce-0c9abe8df824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c79f42-d03b-4943-b94d-f8661f8d87f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1517f576-da7a-4345-be03-6943ecc4e36c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f295893-1916-445c-85f4-98fe69633727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d5a4d7c-809b-49da-a31d-7c2acc49ce2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3315dd7b-64ce-49c8-89a1-3bad93d76acd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cefde76d-61a4-47b1-8256-a31490eea396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81fe0258-7913-48f7-876c-53009a971369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da4c4d6-98f2-464d-8338-3283fd32a489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb4e7872-0590-4e2d-a040-c189286b849d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb720dba-b999-4258-a39a-2128695cc523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--039c90d2-c88d-4c7d-8799-16a845d328b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d42854-cef4-4667-a870-3d5221b77e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eafdcd7e-cbe4-4537-91c5-8e564499f553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82108e8b-e93c-4c65-8862-2c49e014c6d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee127ec-5595-4a57-9700-b3c1a613cef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b3f2f96-2597-4bb5-b3ee-431cf9d5b04b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5d99db-8663-4033-8512-52cc846aa68c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8abb36-7d43-46d6-acbe-ea2bd2b07b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--319096fd-b92b-4b5a-8049-516885d7a3ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927a6851-8f47-45ef-a5e6-6295f7243c86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a832d3-ae65-4254-817a-d39c1521dffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4babaa1-b03d-4642-9835-05327c7f2dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a77f2f2-5c2b-4be0-b24b-505a65a7f11d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c911039-549a-4321-a98a-5362b7b03e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb3dc3d3-1732-47da-a412-2b0e8ab2c3e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe11779-3966-40c1-9c1c-05445617d17e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64550220-6372-4523-a693-9b7d24b0c2a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c50035-cc62-4d76-91bb-e3b398935f24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feaef278-82c0-4c84-8a98-26fa2ae0234d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a2f072-259f-4fc5-8dd8-d0541fb6fe33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c4db1f-ddd8-47db-9bb4-b40003267628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.3.27.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1dc656-dc69-436f-83f3-410ec33a7c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2390fce1-163a-49e2-8f67-e048a817e0ee", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c613abf-5d46-4154-8546-ffc570338cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6818fb53-c9a7-4ca1-96f7-b8d2a20f3f38", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b6df237-f304-47b1-a9a2-ce4c3fb0bf66", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6339507-14f5-4e80-83ab-55a560cd0362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.121.13.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6895394-9592-46b4-aea7-fa8cf7e215f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.74.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c5c05d4-1767-4158-96d7-9734286d0a5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.114.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9e2c3ac-1fc8-45f4-b942-bba3df8334ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.86.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ab280a-9524-4b20-8830-74d83f6cb0ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.93.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f2de51-5fcc-485c-957c-8c2202ede475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.161.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c12e6b8-7ba5-4073-9d9a-8d699e909b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.214.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7651c3fc-29c0-420c-86b5-41050eb667e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.217.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff46ea4-57b2-4e8e-a62f-fe38a95860a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.49.11.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e0b7ec2-9731-4f07-9c6e-7a924e9eb0bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7804bf8f-aad7-4ae0-a5b9-0f77f922f533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70b96d3-0f07-449b-9525-3d035a81cf7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81411bf6-2571-4e18-922b-adbfd8612186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c275461-504e-4bc7-9d23-7abc2b433ec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adcadf21-de9b-46f8-b0f0-dc56c1196cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f59e8075-64b6-4a78-9852-7fc8a6317af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30c57007-573f-44ce-b2f4-95368deac1db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0759db-2340-47b1-b873-5b7b48a4a8b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32deabba-aae4-4f73-ab20-0633f2ba5f91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06b02685-05ee-49db-ad97-38540b33a696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71502b37-388d-48d5-9e1b-74213eac5f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b04649f-10a4-4b91-8b1f-e515876ae01b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7fad1a5-3dfb-4646-9938-34df854a03ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11287229-087c-468d-acea-a897adeb7b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a700c4e-6255-46d1-9463-1b1a81a7c767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f850b0eb-7ad6-498d-a201-c05cf66b7d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8c7acb-d2c5-43c8-85e4-b58e980a24ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f94fff-19fc-4d66-824c-a07dfd7c2c7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77d8318-ef8c-42bb-bb81-7a7608ab9ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c36ab6c9-c4b4-4533-8129-09679dcef9a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ad026b-56fe-42d6-afe7-de246ee9448e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ddd68a-91d3-4e90-931d-d3c304780032", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ffe1c74-1b46-4d80-9cbf-e6b785bbcc0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b3b614-2fa6-48ea-ad71-5121f5ae3d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9af2189-176b-4dee-8062-39f1171c9bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe04dbe-6be5-4db5-a24b-b77a6eca9003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5cdc321-be52-4d97-9d99-fa95f95428a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b48b8a6-2952-4245-9d4b-43b487c8229d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b49eca74-8411-4ab5-88b0-ffad7d3b9391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf3785d-0c57-401f-b266-803175a41535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae15cfe9-df24-43c4-9c49-acdf3b706e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8be8c9a-7c99-4703-b393-e4ef529de582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--654adcb0-d7fb-46a6-b590-704a15e10919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b91ad0f7-f247-4a62-9932-315d8a3f3a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36af02a6-ddc2-4fba-ae88-24ca0d5554b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--926aea40-b086-4d58-968f-528147a907b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbcad5c2-1fa2-486a-b803-ff1465a8c0e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a876b524-3beb-4a16-af2f-6c52bd998f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--520827e3-dae7-4159-9b33-28c9eaa07703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7aaef21-f2d5-425b-bb10-8073eee1cc69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed4f7e4-d4b6-4e5b-ad87-8aa989379cc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6a40d1-7f47-449e-933a-c1263e4f9ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a58099-c12b-4d82-8aa2-589b21408444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b32307-6169-4f70-9f79-559109086e42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19b2387-4cf6-4a65-83be-07bfeca47db4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7feb30bb-a903-480d-8759-acf02148ea34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd9575f-2aaa-418f-95ba-0f690c16462b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a6dfb72-03d7-45f5-8ba9-fa7d78f728ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7afa6dc5-5b7b-46cd-b149-66fbe3470cd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f3bf458-5087-49a6-8f81-712cf60e552e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808e4ed6-0e39-4f1d-862e-f43f735a3d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ba9832-0d74-4327-94ac-ce8aaa218c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--170b8c82-dc35-44a9-a325-a1b714b49647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51f2a36-0334-4e8a-87ae-9a207e0d4cd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1388b7d-8886-4b42-91be-98bc6308f2cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d245ce0-9258-4b26-82b0-1a4c44e3da14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c49682-8beb-469e-9a86-dc38b30a0ac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a200603-d410-46f3-88c6-f2f6906d201b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f662dc9f-ae41-4536-b660-cf303dd59fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc29db5-19f9-4298-8988-5a1097e7845d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bfeb46d-d067-45d4-b62d-e1f065b6721b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa6fe85-12dc-4b7a-a57b-c5a59cf470c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb342f1-945a-4ab7-a3a5-10f77389de9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93893e6-6be3-4b88-93bf-cf7d1a6caab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242b463b-ee8e-4ad0-a498-d886c9985cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d008dbbe-1087-4c59-acbd-5a32976eeedb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8926da13-d5b7-4a08-825e-f68b62d7cb82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7669966-c199-42d0-8e40-7bbf190e3fff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b723d1-af11-4d57-804d-107ef2f4d137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec336328-4f0c-4517-aebd-95685b04effd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b7dde4e-686f-4cac-89f9-77eede50e8ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885804a9-a899-47d4-bf0b-4db7a990fd17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afb5751a-2c88-42f0-a5c6-31531fc297dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fcb6ea5-6731-4135-9558-8d60af5bebd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d3688e-c8a9-4a72-b529-baabd971de85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e50e00-a51c-47af-98fa-aa90363478e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--861d16e4-fa96-463b-970b-451b9b08203c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b990196-f600-4aff-aae1-ffa10762781c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c141915-951b-4461-8280-762f536d26de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e25ee6-4a88-46c4-bee8-ad744da5155a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca8d26a4-e3ed-4c0f-b1f1-622876d2731e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2abbb58-56d6-46ef-bf9e-039505048f41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff105b7-e926-48da-a3f0-d1bc643df48d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84af285-13a7-4f5d-b555-df21051d3a74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d16937-627c-4784-96ea-4b40393c56a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f089a9e1-b8f6-40e1-af1c-4eec92cad6e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaba5bcb-0179-48bd-804f-d53892a23542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d44c35b4-1f33-4f6e-8c8d-2a15d8734560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab36d37-d6da-4051-b935-07929606c0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c587e5-f3d4-461f-8549-82ee929e835d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb6877f0-caa3-4b86-8918-870b73f92f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.194.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b29c4b2-9bfa-415e-a67d-5420d09f96fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.194.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be8865a6-8da0-432d-9faf-11a5520de0b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f66e55d-da7b-410f-a08c-4a7c40bcb705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e85aae-3ac7-44c2-b38e-0878bba5f46e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f416b81c-66aa-4e9c-9b11-88474b03e5e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd552f4-af61-4b12-9b6b-1c98eec1061a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1baf093-0ee2-4d02-9c14-2f06e2aa1f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a728c1-dae6-4460-9bff-f4eb28acb01b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d94a49d4-44e6-469f-b2fd-a13f2bef3a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b91dc139-4fec-48ff-b7b5-348fcfa56ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe0b57b-ddcb-4f4b-9dff-99e861a698c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20fa5286-f940-4836-866b-8cf3fead7a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a4475bd-3a8d-4109-9749-ec91024194e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46635836-d499-435e-a76b-50b57b260ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6862006f-8980-4284-b5fa-7a6e003a5771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e13c6617-98b8-4b51-942a-abfb62d11c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--362eca0a-aecb-4c7c-9ee0-58d970de10d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817a5c51-629c-46e4-b384-0d7e5518f179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c60a5e9-8879-4246-b193-64be518d301b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad507e4-66fa-47cd-b2a0-23226e1dd344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7178d47d-07af-4248-9dd7-9823f45bc0cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67bfb718-1b2a-4c5b-bef0-18e952207416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4bead4d-3c25-42f3-89dc-3ab04afe3aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1b2f35-17d8-40c2-93c1-ad82ad4faf75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9268c611-865c-4715-829a-3d7588a9b6c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6812b598-d0e3-4f98-9ea2-6d4eabafef4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17724bb1-7e73-4e30-aa2d-1b8d15015d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7600092d-12d5-485f-8099-1792233571ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dce6f0e-8fc7-447b-a86b-b22dbeaac98b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1aea353-b1e7-4b09-9691-7c18eb00af07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2715441c-fd46-4776-a9d5-973a2624ac0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--640de8c4-c0a0-4c9e-a291-5b95177c1a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d02b33-5146-40de-952b-5e7028915308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f10caef-ed40-4957-9e80-5dfa499b4488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a1c086-99a8-4828-8a23-d451e3a1a9c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e2f91e-32ab-4729-897f-09c941d1b353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef60b79-c0bf-4751-96c9-c7a8891fef6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0755a5e-15c9-4fc1-b97e-9d9eae12d815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d0eeca9-a77b-4751-817e-ae6d0bd0b843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c77477c7-22d0-4acd-9b9f-8b53839e76da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec3c626-3d55-4c52-9051-055123dd6332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb3808af-6c94-4556-b75a-bd7111d3c0f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb7a1f0-335e-410f-a516-7f2a0110093c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d51ccf-0c3c-4417-9408-d4baeb6f0114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294f6b41-d741-4268-b364-51695946bf93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9457dd6-cee6-441c-8c69-91213b79ec36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0082655-a9f6-43b7-a320-2028542988bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd320b6-dce3-4f23-a132-ff7f257c651d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b23e8bc-0f4f-4e80-8280-6aa8b2610016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca106cee-927f-4986-9944-d3b4b2ef364d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11811b37-1d30-415a-bc82-117f7dbe3740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90300e39-41e5-4de6-9417-2b4ca200732d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da297bf-a7a8-4d45-b0fc-3cda8e20dd89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c63b079-fa1a-4c81-868b-0b89f491896a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be53e74b-1422-4d16-b1c2-020153ef7308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db0df84-df02-4d89-86f6-51164c219c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2283b40-e9c6-4f88-835b-64b41af942ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb99939-dd12-4218-b349-00f1e8e3fdde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4e8202-9027-4d0f-aa2f-f6001e502149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fca86c1-446b-41df-a208-80f8a5ee20ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec55ea0-c01c-4f71-9e86-cb9d47bb48c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e991bd4c-7b9a-439c-8596-d17cfd489753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3525a3c3-c025-4510-80c6-954eb9ef1662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c4694c-33aa-41e2-940d-8a73f4db8f23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e381ba-e4e5-49a0-ad4f-873dd2e6c243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1c1f79-a28f-4203-b0b9-3fdb7a876752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e607d7b8-375e-4d25-b44d-9fe6b2be07f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78aa5978-766f-4741-9940-66b22c6b5799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c28a33-dab0-4e0f-aea4-8c2f864435d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda554a2-924d-46b9-a549-2def088ee765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554ce0d3-ea1c-49b3-8482-d510c3621332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca777130-a265-43f3-b889-7a58d2714a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ef4b28-be51-4f73-89c3-c7b57e1f0372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a49d3864-1f43-49af-9028-53675463a246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--003a4aeb-534e-43bd-b1de-ba4041b405a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46750f70-d28c-4464-8da5-9df24f5eb2fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1731da33-a2be-4c98-98c2-7309d7a9a584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b3a30e-1df5-488d-bba4-1d3999a7a0c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0203298-7313-40f7-9be0-81cebc01851c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e8c72dd-ca8b-48e9-911e-b8cf7bf3c730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.76.8.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b098071a-4b2a-4efc-ac6d-cc588feba844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c15ee0-6726-4989-abdb-8f7b19bd1048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373b91c8-b6c5-4597-8c0c-373213f715a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22bc9c87-d246-4786-a5ce-f2f7179d99da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0e1106-c397-46f9-aa85-bddc70a2c615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2387cbe-8c28-45cb-982e-8d552dabfd07", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e10848-4f0a-463c-87db-023b2e29648c", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1970a054-1eb3-4de3-ade7-3f4f8334734d", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85649418-d012-4a43-963f-ea3e51860f5b", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--433b890b-5a5c-4e68-8689-9dafe2e22c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be25896-fd61-4c85-9092-fd2451ad448b", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afefb457-be33-470b-a2c8-103789b895e2", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ff2498-23ef-4dfd-8f4a-7df3d2978024", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e0e59f-bd89-458d-bdae-2f4b4e9ced8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aade96aa-f120-4ff5-a5a0-0d3df46bc0bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e1d999-97bb-443d-a132-bcc3909e3838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7d2da0-b9bb-4294-ae78-5a344a867926", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa539b4-78a1-451e-95bd-82f746ef3dfe", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37b45b7c-ba6e-40ee-981d-58afd5c6b3e5", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83cb5f37-4b8d-4fe7-8614-1f392049d316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697f4d97-9326-46fb-a536-7e465e84615a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e7ca2f-686a-4ac0-b172-dfd4faf062e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b3c6c6f-edd3-48bd-bcad-c87961727019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835fdbd3-514c-411e-9e0d-4f15cfc73368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f74ce20-d545-4bb6-b2b9-6bad2acffecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eef55fa-a4dd-42e7-a678-3f4ab7254885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d236c7f-6d17-4606-9c2a-6d41a13400ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4769d7f7-02ec-42e6-93ab-ce6008a2d8b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--297c24e3-2428-468d-a8b9-4b1be2c7fda8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--239283f5-c4de-4979-9edb-426ac34c593c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0937963-b507-4ca0-a4a8-fef8650d161f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eebef5f9-cdab-45fb-8b89-5a0868169395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7208221-17c9-44da-ab85-b3eedd67b8ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b697edb-f39b-40aa-853d-9ed281ef41c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7e156c6-3e63-47cb-b093-9a6db0b36826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d52fb0f-9fc3-4950-a437-032760b1da41", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c09cb0e-3eda-4e5f-ae31-019394af7daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea3ef92-4c61-479b-b977-975f47563e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbfbab4e-a846-431d-b3aa-485f2f306c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f7b940-06fe-4e70-be83-7d36fc945052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4794993d-353d-443f-8479-042912298a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e92b43-3ce7-47c1-94e9-9b7741b8991e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee5333c3-73ef-4717-b8d1-88874478b7ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0a6c00e-7056-4658-9dbb-fb67658874c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e292ca45-d794-40ca-a7ae-63370e693329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e4b912b-a130-4a5f-a795-beeea0c1c0c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3d14c3-b471-4003-8f8b-430bec697c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baea86b4-c42d-465b-a607-7f90cab34e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4636a507-4e38-4037-af50-d16a308a7ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c700244-5c1b-414c-a2bd-3f9ea6f206ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9669554d-a1be-4984-9033-b44761ceaabb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b02f2031-5831-4c89-b4d0-a5cf6d926aa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2526cfc2-d9cf-4610-96c5-3a047c19d11e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a4220f-babc-416e-bcd0-383363c41ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e371b40c-b8ce-434b-8388-8d3d479ce563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ecf4d5-97c5-4b11-83ef-5f751b972f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c46740d-3768-4684-a3d1-50b9c4c99e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--263327d6-ee5b-444f-862d-d36cd7333ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59120f2f-db0f-4f0c-84f1-684315505734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e738051-64e5-4747-9291-2505b1261212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0517317-ac98-4d18-8aa3-8920760b7d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8595f563-3966-4156-b12f-88af662d70ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a78ad2c3-2ae5-44a5-95a4-8d57f6f48ff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb479423-bd14-4429-a489-64cab653a154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e94cd8-cc12-4015-b8a1-c54ba41e3c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ecc34a-dd70-4d87-bc93-eb68cd78bf42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6162c62f-55e3-4611-bb55-6cfd145944f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f924275-cad1-45d7-97de-12c399214a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da5abb1-64e9-440e-bee0-d45d45d0e9a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6727315a-b828-4338-992b-aa1bf12b29ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--632a6de6-028e-4167-976e-e4b9276d8414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb88f39-2ce6-4e75-ab46-c115fb16fa2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d025a14-f18f-4221-ac6b-767c19b68595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83f973a-d0cf-41fb-8974-2db3bff4f49d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80100c7-1019-405e-998a-ce171ba55baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d587b7-a7d6-4f6b-b403-98c71a8b924b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b94c93b-516a-4c64-8d5a-d1b963b593f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d33779b-ca1e-40f5-a9f8-9e3c3ce60ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce74382-e38c-4836-a2e2-3aa2d13efbe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--376df3ce-70c3-49e7-8f6c-2887eda04a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4adfb02-fd24-49aa-8d53-1c961a0925cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be710430-99a8-4420-95cf-ad7f71178e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e1927f-3918-466a-b445-5af302d3159b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de6205e9-ef9c-40ba-aec1-b580a36201a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe02a73-e028-4174-8b65-6b3e65c824f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea288ae-2033-40bd-a2bf-ce6f4cb1c49f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2134d68a-bcd9-4ac8-b3c7-7abea07628b6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a70de9df-f02a-411d-b984-4de06dc47fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f281e2-396a-45a8-8661-7adae89dd0e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ec4cc4-eea0-4712-8320-b5e695571ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8289815-6084-480c-bcbd-89a805c0b341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c132aaf-255f-4cc4-b136-c07d2b29b547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be956e8-7b2e-444b-96fd-85646328389f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d861707e-bc9d-4652-b227-7dd2353bcb3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--352355cb-e830-4216-afd1-234cb9f3ff64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf4def8b-7a52-4038-9c37-b9e74c16afb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3636539-ed44-4ac5-9e88-e6093c00894a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d8d226-6957-4b86-80ff-cddbcff0ddf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fee2866-8b84-49c8-99ed-5251e610d3cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee2bd6b-05dc-4e7e-b330-2859b6c91c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150dd061-b8a0-460d-bf93-4d10aa16b815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--148d0c54-df5b-4ee0-95cd-c656b5485587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a830d3-041f-4e0e-9894-63e38f065534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a827e175-2857-4f74-adde-d16c69622264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7156c2cc-34f9-4f98-88c1-d6ed77ea381c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c87457-0ac1-4256-a0d3-8f0574a0352c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95266089-1b0c-4106-8e2b-1152f8f9e591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f339727-46ce-4ddd-b161-d33900a6087d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9df628d-8766-4d89-9b80-6d8c68cb6186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c238a9f5-d6c8-4a9d-a727-3de1ff3663a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b0b699-c434-46ce-a5fe-b418b4e5a1f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffdfc942-31f2-4ced-856e-e305ed117f40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b7d3fa5-ab21-43ee-a405-1e9761415b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c66ea1b-9909-434f-97fd-95146ef202e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c503077-eba4-4455-b657-a9b7b4db72c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd309d6-80bf-4f80-aabe-75dab5fc2dc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac5ab7a-ac24-45d2-b086-03349bdeeca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f37c5e-afab-44a3-811e-544ef3a885ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c5b6e7-dbb4-41c1-a25a-35e0055ac9ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa80b49-2278-4bdf-bf04-d2ccfe8858bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d36f79-4ccc-4b6a-aec5-aae57ebf3d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e795b470-ecb6-446c-a2e8-62b89d2896d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa22525b-cee6-4e1e-a64a-7bdc02a923ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b29ec97-bf37-4f1e-858b-5a205864502f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db19d26-a5c7-46e0-823c-202740f74189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfaf481e-9301-4f1e-9f64-113fc642236a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe854e5-9bd2-4168-bbcc-e485a6f6adeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a6140f5-9d2e-4470-92f9-afe3ddf5aeb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7afac961-54d5-4430-8fd4-0df74eb90979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da2143c-426d-4585-9cb1-846853882b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b10fe9f3-050d-42fe-90d9-b2eb9f51208a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268060e3-c49c-4589-b83c-59eb222adc77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--774dd3a8-2e74-410e-b84c-3e1bebe2728d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63c5bf0-10d1-40ce-8ac0-f02c9f604d34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--843a3ca3-5579-443c-9ed6-9318cbc0d834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c76cd60-79c3-40c6-a4bf-38ff0b1cec52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad2bc44-528b-4c8e-b097-dd7a0a1e382b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--267a6c2b-3c23-4d04-9b1d-55ea57388af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e4b00c-79af-4f62-b54f-05ae7a7de1c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c563e0-9e9b-4ac4-9037-da1131bd35a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f4a0b0-2a24-4d02-a9fd-f55d5e2f781f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2631d557-9e39-4b6f-867f-5aa9e7de4958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc0196b7-702d-4681-bea1-f472019b9ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.54.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc410685-4544-4e7b-a712-66b1d089dbe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8640c62c-c63b-4a31-b724-6d111f63072a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d6bb70-aac6-4db2-ad19-254c66e752e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e3c1d6-d380-4fe0-b867-3f25da74c88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a23108-8303-4e43-87aa-3b4725b52e4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32841429-2388-4f56-a6ef-bebf14739a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1982300-d52d-49da-a099-832e170bc8b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b0b3d9-f7bf-420f-a626-8c4ef7344ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5142dea-f31f-482a-ad88-e412c564584b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa2fc92f-e12b-4fa1-b422-b3316beaab85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca15342-621f-420e-8f84-c0d6e51b31ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07adf769-a71c-4f0e-b52d-5a3295d7f7b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d1c6f2-1ce3-41ea-a0ce-474fc4143fad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca111951-7efd-4efd-a919-4947dce62368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2afc840e-4083-4fc8-8ffd-8508019b52f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25da1ea-b15c-4f6f-baa0-b213f7796aad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e0160f-b84a-4526-b007-14d30508fc2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58b29595-d4a4-4660-a683-81f71d6dc741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a4ee65-d7d3-4073-bb55-31d42fc4faec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45fd3b5b-df72-4088-af9a-6558a6873130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10874fe0-2a76-4ea9-87f5-51579f833f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc36271-5133-4677-9f46-7eb8bb7cf3d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b00fb3f-a7a9-4c85-8268-147a1b0e0ef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7399adf4-0129-4454-93f5-351fdcc1bbdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0a21f40-a636-4b55-b3a3-15f87baaf68a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010296f0-5363-44ec-816d-2fb67eb2f76c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7948eb2b-d368-4df0-890c-13628358e011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--901e6d31-69a7-4b53-8812-731a5a70a518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91dc8757-05bc-4092-9dc4-90f71af68073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a039c6-7a46-4c68-ab4e-c1281235a50a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c4f4f6-c94f-413b-bbce-d438245ac6db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc44470e-4cae-48da-820e-3ff8abf4c712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272f4edd-66be-43eb-987f-fafeb2943a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76380d41-d8f9-4903-b838-a02bc009fe19", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8abd82e4-9621-49c4-85fc-63c1c3d7fa68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab7455a-f765-4e18-8f70-d2351f648c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e1000c-9096-4a55-a6e1-8502fdd2ddf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b082b23-d6eb-4da1-bdd5-863431fb5350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc90caf-af35-4aae-8dcf-db662d78d14d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9812e573-7135-437c-912d-bd56beeb4955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7d1f08-6ae2-4b70-af67-b67d23cc3950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6551acf9-87e7-4542-b6b8-5618212de576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a4d4edf-96df-4991-9990-daa3a9d807ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b5df54-54fc-4cff-95b6-71fd56fbd663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f4124d-1368-4d46-a6be-d942164c77ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61ccd00-ba06-4715-99c2-26bfac690543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b626a9ef-b3bc-4d77-b3e6-19adaa883800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19168ff3-c407-48ef-8c1d-65241ad8adb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09394937-17d5-49f3-827b-97be0e2539ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf4c80e-9302-409e-8a78-70cb402279b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b689c11-3e74-488c-90e2-f1668ff412e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abeb38da-1073-4f30-ac4a-c7203f850d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82937a53-4d0c-4a5c-be37-a752a078c906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--431a08ca-5e79-4cf4-80e0-d3e64020551c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f61e60-b484-4cd7-a371-f3d38e5c3764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d37f029-4cdd-4399-9370-576dd39a117a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eba1d24-f0f5-42f6-a40e-ecfabf5c702f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34689fc-f11f-45e7-b049-e0b0d4f84597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b39cbe-9904-45e4-a3f7-d428c11f8622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30bc42f6-6fd2-4b6c-8de1-2fbb935cbb4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67bd2bf7-3928-4161-a45e-14bb10e83b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a183755-c4f4-4f89-b646-0f96a30fb14c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19961b49-4e2e-448d-8ca7-d6b85e73ddaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66af70a2-bea9-4537-9391-0e657fdb7d18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260e1623-29b7-4aff-9541-1e97d6412abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5994684-f503-4400-a268-865621cfdcad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05921d2-baff-4eb9-abb4-4fb818f71ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e5f937-575c-4a33-a650-3f37c2c90ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c966d231-8e87-461f-ac09-43a4936488d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa3232b4-6733-4ed4-afc3-31a7279d178d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a0874d7-5687-4836-9886-de7c3b4f1cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f65551-f74a-4c7d-ae21-f90c5512e28c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e7642d5-269a-434c-9681-edd201dbe536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c9d79e-9161-4066-89d9-e80ec1d3696a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be404aa-271f-4782-ba11-68a0b3f3dc16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c5b8620-d477-42c3-b29c-39da82dd3944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee22512-01a8-408a-a835-ff96e24b7025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daa61891-2767-4ca3-b9f5-7448d63f6d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66faee44-6888-454e-9657-3d55e0c4edde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2363ff42-8bff-47dc-87e2-1092a1680ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba7413c-c483-414c-945d-322d2e4f574c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25cbca42-2a09-4dd1-a2dc-e835296504f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74cf6b6c-ad8d-4e6c-a8eb-f81695275d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--395bc26a-59d6-4dd6-8e94-fac6c4efaabc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af2e5952-512e-4bcd-bd45-39ca12488ba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--307e7064-b637-4986-9822-746a677efd63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9814d4c2-2752-4550-8641-f34f07e97199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90dbc7c1-8000-4eef-a309-0c432dcbd520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7dd060b-dcd3-46e2-812d-9ce9a5427eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e4e21b9-ff67-4644-844a-6a8c7ae2e8fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa43952-44d5-493b-8420-3d808bc402a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c2d0f4-490b-44b1-a2a7-fff585939f3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d76c3ea9-4f51-475f-b23c-e1d14cb3a027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb88bac-d962-4834-8afc-5bda8f5b9218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b857408-a278-4a3a-b0fb-aed2bef29e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e5fc4b-9cfe-4a7d-8ea2-aca2da766b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf059ea9-b254-4e0e-9d6c-9f489d294091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a51f522-5cee-41a1-8ba6-6ed84f3fb7e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16cbab60-4163-45e6-bcda-b6a1d3b13c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a529e18-80e7-412d-bcf7-2c5202125bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1830a36-3dff-49d5-9fff-49d9a40b2029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d854b66-6c8b-41dc-b241-1f5d34a0ca47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46800b39-9c18-4506-82ad-db1e7f0e9d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcfa87ea-c424-403d-bc6a-b74d3097c578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d79d2ff-4d1a-4f25-8e22-106c10169cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e4f882-b1e3-47a4-9773-1715c141d144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb4ce90-977d-4766-a06d-7dd038a0ad76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1748a80-f30d-4e50-a964-52d0072396c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73292fd-0bd0-4fc7-9731-a7598af7ac3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3303e521-5155-43c1-9c86-a1824c5e4425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8327de2-6001-4bb5-a506-e6e66fab7b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68702e1c-3195-4f54-8d55-bfea2306fa32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25b7e11-b658-4811-aa7b-cb40df24514e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30effa4f-d89c-407a-a5a8-552a9ccf8d8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ea9a48-ff40-4fa4-9079-1ef1c3361663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580d0a85-e65b-4911-ad03-5f18f23ab0b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e7ebb4-0e32-4a50-8a36-5e2f9787db3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a19728-cac2-4593-a822-7d514ecd52c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fab17d8-7dd7-457c-bebb-4b63646ed105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f9e1cef-1cb3-4838-835d-e576f6419e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a3faf1-0454-4469-9d73-611183d7ff35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b71abee8-313f-4eca-950f-caff49cd159f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebcf4f7f-f49f-487e-be35-7ea92df88482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c18fa07-7a8b-4088-8742-238cb534bb8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4973c3b-ab1b-491e-9683-f40ec8e006eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0594a066-c204-480b-834e-e7b4005441c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c645da-05c9-4914-9556-916f0eaddf94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a93bc2-94d3-46a7-9397-82bfe157b984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1dbde3f-0aef-40c1-b735-b7d1a18e8504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bdf36eb-f7a7-4626-ab25-9454f45e31ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed260c51-3c71-4a5e-a46d-804896f90c30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fdf09b1-1576-446a-a514-348b6f9af894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1a79c3-0559-4786-9d32-d6076464694f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9a4fc0-760e-4f2c-a0c9-ff71f0dc72d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096a0650-258a-412e-86c9-74ed71eed671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab2b5ad7-2250-41b2-a575-27cc0e65f04d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac7d409-f84b-4f25-aa47-47e83f1462a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cfe34f2-ebc0-429d-bd3f-dc0dae933135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d9ffa5-6192-40f7-bb26-6a0c58913176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751b0614-25f2-40ee-a788-8889f63b10fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7802fbdd-80a4-49b9-b707-f0ea5a460944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726d0999-d1b9-44f0-bbbb-15fe24c614c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01dcaa44-3e52-482b-a98a-05d465ba5a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a76fbd-1e07-477a-8c10-cc097a9a9d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106215a4-dc51-40cb-912a-e05411aef5dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6041e59f-8ae6-4020-9ae6-a1887d2d9b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3cceef4-30e8-49d4-8884-df7e8adb8800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528e38fc-9e8c-4855-94d6-6d3f6e314705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d6ea3f-af8e-490b-93c7-b93a49ae0475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d3af33-3316-4bc2-b6ca-5d2f166d7877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa7e4d3-f364-4662-888d-ecaf2b9d92ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--140d6758-0f2c-46c4-9f2f-7f8e38b42751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f361caa9-dd28-4e3b-a04b-3f3ed0bb0f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3c7c90-68ad-49f4-9dcb-219cc3732849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d02e3ff-1d88-4267-aaeb-6f46fc8ea5d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--447c29c7-9985-485d-baaa-07957c73600b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--748c01dd-a16d-46bb-8f68-bed0c1ced9f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd4d368-f143-41af-8a2b-789469b5f04c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4179d11-e274-4d7f-a9b8-edd4c47bb7b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed194fb-359a-476a-9658-f18b993108f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.150.198.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d65804a-ccdc-401a-b1d1-da434480a343", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e67d510-430e-43df-86ad-11ac36c00038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.215.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d484a21-09a1-453a-9a05-5722362d9203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.220.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e004d152-5822-48eb-af78-852cf7dee796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.223.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03271a64-cb03-4967-b66c-7f288275e165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.179.10.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31af92dc-e4cb-46d7-8ee3-e1cda3bdb2d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e83d11-f2cf-48a6-a2fb-3ddda7364761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.41.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--055ea612-4947-47e7-a403-245c86cf3df8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.41.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5f28bc-dae8-4aef-a05d-da80654256f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.43.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40922375-30fd-451c-9391-a44417f5911a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.192.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f797b52-e82f-4000-b540-15824f59d0d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.205.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c857c8a3-206a-4316-a8b8-68c59d7fea19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.223.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab9fa00-c168-4c4a-8a02-ad72570662ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.223.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966eea3e-63f8-4d47-abd7-57447ec934d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--346a14f5-bfbd-4f9c-a8c7-f14483bc7996", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.66.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d85e094-0653-4e80-90e6-c41f04679492", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.66.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01ad5ff-6e66-4de6-a2a1-93e560dc826b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.80.117.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef279e7e-c66f-44f5-b5b5-609510aa8b80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.92.247.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--283a34bc-0989-4ca1-9086-00a285646d24", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.162.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66664c35-93bb-4bf2-b3f4-0954a6909d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.164.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd26d7d9-abd9-4095-95fb-205ccac34740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.213.121.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbee883b-f358-4ec6-844c-ec78d8847d3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.11.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f720ed-9b78-4601-a7cb-0b550d906f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.177.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab13a9e-dacb-4252-8577-e3530fcc684b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.187.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f6db28-a3c2-4884-85d5-24136537a0f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.19.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6282c67c-5a10-452c-8883-2d89cbac14a2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.50.65.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029a9425-40aa-4532-ad1e-50c4caf22f89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.12.71.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7150d464-5b76-4b85-b547-3b40464db0bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ca5b83-334b-4d76-84cb-1eddb09170cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb66033-ea32-4532-8673-11077aea974a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.165.75.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f9d3a0e-5cb3-4104-acd9-20ea8ae49539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c6034a-c2ff-4631-9018-7055190d3943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c0387b-0494-46d4-88a7-5b10b0169086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04314493-91d1-4f36-8f99-e58157b72d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29a2a1e-9b07-448f-88bc-412b7ce7affc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--955a3036-dc8d-4b3d-a5ac-2ec33cddf755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d30a8b59-360a-4a2a-abd8-6e40e5fb55f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1edec539-e939-41d1-acd5-24d1f0602cd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95417a7b-ec95-44b1-888b-d3320af6cc31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99403a35-6a55-47ba-ad7f-23b8250309fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b68d1ff-10e8-4d4c-b1db-13092473583c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d8d6e53-5704-4bf3-97e9-2f6b47dcf861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6843c7c-6ee8-4d42-bc60-15a40fa03fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ca1048d-5ce0-472a-b9cf-1e0e14cd11b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c911d0-2dd4-4b8d-86b3-6c8ec0227cc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f2089a-ddc7-4ca0-9038-92d13326ab79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--461b8b6a-1a09-4de6-8dad-62f321d7ed83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b95f7b01-4569-4fc7-a1cd-88f1ade0b46b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a97d5df-83eb-4aea-9d11-97fb3534a293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eece9425-7286-4920-9031-91c8736cd79c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.6.250.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47419444-c2eb-4a57-86c0-57de6a5fc291", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.73.232.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8451c7f0-1922-49b1-9462-e0710396177c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.125.16.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4cf0b27-cf94-4bbd-92c5-88fdb636439f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.194.189.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fcea738-db58-4851-9240-cf6bc11d2d94", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.201.51.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f71b218-f78a-4df6-ac6f-fc9f585b348c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc0ed34c-0386-4aa8-b685-9c2f61a4c630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c456436c-0fd9-4ddb-8e3f-31446f82b05e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a17a47a-937b-4302-84ac-af5a12bd7ea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56eff6b5-f169-48f9-a180-678884702558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb7408b-558a-4f5f-9cce-8dc4d6726200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.147.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda69fcf-cb96-4457-bdac-81b696d81acd", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.167.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa5d35c-5a1e-4deb-b2d3-ed6f64b934dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f95295-23d9-4260-aca5-1bd9277b19ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065bd48e-d4ae-48b9-9a9b-a0ad5c45491a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d815abd-5b73-47cf-aa4f-2854cfe13e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8752a22c-a996-483b-aa23-a99cb9f1bc38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d600e40d-41d9-4490-a493-d21080a9e13f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7fea02f-635e-4940-b4d3-aa7178f9b810", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.167.38.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298f5b0e-fdec-4175-8461-9b3fef514bec", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.3.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f046d1e1-8ed9-4429-ba87-c1781d4dba30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.125.88.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a0f7bfb-86eb-4723-a453-a14abf4ecc00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.206.62.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5719375-7333-436c-88df-7bf87c7e3392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.212.14.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54011e04-e955-4e9f-a1bc-945287b4f96b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.244.224.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3add6476-561d-49e7-a28a-2fcab571433a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.67.131.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--279e60b8-89d2-4a64-9893-ef16d1949b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.76.159.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--188cdb4e-8355-4ff2-b2dd-23350a0ae15f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff000ebe-6d73-44b5-a336-20ce06009329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d734737-e4d2-4660-ac91-40bb21cf6dc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--895d9ab6-7031-4251-aaa9-75f1e8ce7ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.123.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be42d7f0-a19c-447e-b37a-ca92205bd561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.165.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b0151a-4555-490e-9b4b-8fa3433a0e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.187.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e59d26-2af2-455b-8955-35ac0d1f8ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a4350b-6b29-4e0e-8578-5471eb4260fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.185.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba0c00e-0abe-436e-877f-dd351c18aa0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.194.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e97356-a259-48e6-9e3a-af1a33fe7dd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.194.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ef888e-cd95-497c-901e-c154c06bfbce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.195.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7d81e2-a1ec-4d3f-8af8-fb6f51ef6cdf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.175.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0509de72-c2bc-45eb-b7d0-9ac6602658f9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.227.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d997d6-6e86-4842-ac05-0f2be86cea28", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.228.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce0f613-4c32-4797-94cc-12c0838b7556", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.242.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e3378b-9f1d-4e60-95d7-2ed073f64565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddee7bce-f374-4e0d-8345-7bb8aa057c63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c60ee2-3767-4ce1-aec2-478b0218eafd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64209182-aa41-4eef-98b6-e8623c4b8601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5dc388e-4f07-4346-8296-0d40c1d83f47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c9bb53-eddc-42d8-8af1-476070c4edba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7998e0e4-c5ca-4fe3-b28a-eabb56347af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7581870-5e50-41fa-abf0-c4ec4ab2eece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d17d391-5a2f-491b-a2f9-f7455b6545ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b50bf662-c2c2-4986-a323-123b0da62433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c10083-cea0-4f45-9f6b-22befb97d283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be2df3bb-2d04-4fbc-a217-4a983696c069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46cb447-3a3f-4bf3-bdb4-cdd4f219b328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a28063-8145-4be1-a5db-2ecc59c57e8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1130635-025a-4c51-86f6-83cbe141134a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9849e5ac-58e5-4ee3-b4c7-48f9c9148971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0071b8-a503-4802-9923-fe87894e2ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d6cbc0-2fe4-48b0-bdce-2141d3fdc53f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.87.117.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65fd9347-bb23-46b5-9474-d7af7a7628b0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.91.195.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c0e57e-bd3a-4179-b72c-4bea5b512c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.1.240.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39c7d5df-c98b-42b3-9b50-004915941468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.108.84.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5a781c-a56a-4064-917a-ee52d73ca101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.14.106.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c9812f-383f-41fe-95c1-e210d14c8f8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.38.84.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9613e90d-b45e-46df-8838-0afb1154c2a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.120.240.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4307d7c-7eaa-4323-beff-95863c3ac7d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38591985-9925-4eb9-993a-90d3fd62a848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26766e26-d212-4725-b184-161287be4e61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--191526bc-1a3c-4d7e-bbaf-e8c66104654a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a24be56-32d2-4a82-b9a3-303603944e49", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.28.52.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b47ec30-354d-48d3-a253-be41d281d51c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.32.96.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00293bef-fa08-44ed-b5c6-c110f31ad520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.38.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127a1d8a-75d8-487d-ac9f-67f5a9ea89a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df3b16d-75bf-4f85-93a3-0a56ba481891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f6cd81-910b-4dad-8ed4-0fc56c464b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24942c9-e8a4-4a04-9522-4f3df8ae3570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a58d1c0e-7dc2-4f56-9b5a-fee277ba18ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0991d800-6e29-4e90-b092-e6c94869916d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd4eed5-4c48-4168-a95a-dbe5153e674b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ab4696d-a092-478f-9b5a-5ee0f661e413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a3e91a-0801-4960-94ef-078efd060ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c450ee-bd86-406b-879c-318e42e420f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c444f78f-1687-49dc-a39d-f16a02ebabb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6cecf4c-8cbe-4482-970c-9688df497de1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.109.129.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e055ab3f-9a8f-4a27-ab50-45b4c622c350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816f2297-3c6e-4939-9bf3-2caecf3bf254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4c9ee89-d5ca-4ef1-8ab0-aeb38b9a6a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c634b37d-dd21-420d-82c2-277edd4e1a27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a346be-8ec8-4127-baca-2071ee2a55e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--558dad3b-4b91-4273-9a3c-029241d0a1f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f353c1-3e42-4cd5-8b86-3a2f12bc600e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b107b6f5-1e11-4e7d-8505-e2a71405b676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06edc1ef-48bc-456d-b724-7ee438f93dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978dd11c-14ea-431e-be30-cc3ca2211826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.142.18.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09fe348f-5a5c-4b3e-8975-e481adf6fa70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7164aa59-1afc-4de1-bcd3-abb8a73d581c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2059b81-a004-4e35-acda-736259363651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31da1278-cf42-42c5-97c1-b988f5355972", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.154.179.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff6e7c9-bde6-4096-a60b-55e9b79969dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.17.147.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a716ac5-cb36-4bbf-a184-f36d639a766b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.111.118.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169828bb-b447-4e33-a5e3-e57ebc0b1dba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e74b9a4-9d4c-4c73-8e5a-2c36b363a3e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588f43de-b062-4061-b340-5c32b5cd6759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69582a17-9447-4f60-b4a0-d6e008c9bc06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab49e42-4960-4c63-af42-dcd0b8cf947c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67bf3aeb-20e9-4d1d-8f3a-8e1511582c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b880fb-08f3-4572-9dda-5e2f5ebf6fef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a047358-c369-4e67-bf87-a9d0023889cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79568d9b-2f36-4192-8b5e-4b0efc8cd1da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53bd4ded-0299-4101-bbcf-9562083f0e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582c2eab-db9d-4295-a7f5-6c7c8e57f437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee4463a-98d7-4822-a00b-2419cc7f946d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77bd2113-e7bf-48c4-ace0-aebebb4560f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--999cd9d7-6881-4276-83d2-b4b13131dc55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6906daa-914d-4a1f-bd33-755013d53eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf58ab23-b802-4e98-92cf-ba185c1d2561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fdd9594-2450-4b3c-8a92-4253e59c455d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d71ff4b7-07fd-43db-94cf-ea56593de7b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c77c4d50-60b6-4740-92bf-3027bde6486f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3831a1bf-2eb0-4227-b797-2690f3d6693f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.60.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2abe79-f4ab-45ef-9752-0f064273043c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ee0918-622e-4940-87b5-5d5facd94cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7470d629-48c8-426c-a8c6-255ccfa2e53f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--824c1613-6017-44dd-96b9-35337790196d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b21f3d78-bfc2-46f3-924f-9415129941a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.129.11.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e006f4-137b-4fbf-a60f-253557ad3fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.137.100.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ce88c9-3b8a-446e-a5d2-4778dc4244d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.143.187.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd713bc5-c638-472b-908a-9bb4d861cedf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.197.83.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b39863e-7da2-443d-bef2-a4e28b425d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.72.3.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--502e8c05-c8d3-4a9f-a702-0fbd8e7cbd17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.80.122.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c55b7b2-1d68-442a-9351-0af42b5cde25", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.141.100.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4374b8d-d004-441a-b775-2643dbdf918b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.105.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6929cc99-974c-4e70-9992-f7393b811a89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.115.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc40b00-40b4-4ec6-914c-0d5495cef06e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.125.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048b3db9-ba60-4905-85ce-e28104162321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.127.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--278519b9-f5c6-4b8f-8346-fcac4c469aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.200.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2220f05-bdd1-48bf-8099-e49afa6045e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.216.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8098a49-a0dc-4384-b147-1553ca84af30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.218.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d741710-7d9f-427f-a8ff-d348c329a744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.226.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e4d133-d513-4355-83fc-b490bd87ecfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.232.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e2eebc4-07d1-488b-8149-b7b9f1ad0c51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.236.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b94c0f-cbad-4465-b5e9-655d5129d470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.96.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--939bdc1c-6b58-4915-baa0-b1069b76de68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.96.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af49089d-03ad-4013-a6dc-4695b8e7dc63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.144.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683ed0ee-eda3-4f0a-be8d-8ad0c8568a93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.148.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89211e89-cfb4-48db-8707-ecb34fa36630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.153.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66cffbd5-0449-4ee3-94c9-5edbab8fbe84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.16.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cf3c59a-76af-4000-bd16-a17dc68e0e43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.172.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f0d4bb1-81f4-4ff8-8c1b-f8fad65792d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.175.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea190212-e81f-4c2a-9a62-594a896053c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.27.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf80c6a7-f58c-478a-a606-47a7a7ea3c37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.3.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d78d280-a805-49ee-b47f-26a7c7f411e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.30.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3c16f7-ce30-4a30-a69b-cc624380bb15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.31.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa49fa8f-6960-4cb5-8fe2-eee93a3d07b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.33.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7951980f-4c5e-48d8-8ff7-9d0a0ae6531b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.36.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e65660-e240-41de-a2d0-3ec7c977c911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.41.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b29f85-acd9-4f93-b7d8-624c1fd1a640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2e1ca7-b073-42a7-a094-c5e6e7b70020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.46.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0790a321-a4f1-45af-9b82-0e08d7858c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.46.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7311206a-7880-4135-9264-bc065303fb46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.46.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69817b63-86e2-478f-9a9f-cf440d1bbbb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.47.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e1e9f30-f7a8-4f69-9bc3-22f07a88c83e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.10.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8cec03-1354-4f26-8ab8-c5d36577bc7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.11.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c01f8fe9-f6b0-47cd-96bb-fae921be1874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feba05ca-36ba-4a68-9ea8-1125a7dcf5b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c3beff-42ad-41d5-94b2-b7efdcd3a464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d149e7-113d-4326-8ca1-a6038f7e9922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.15.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b0bf9d-bb38-49be-ae66-db9e500abb15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be61506-5f97-4892-a37d-68377ce3e6b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d41513c-0c68-43b5-8344-128caae02d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add0f052-c65f-47c1-8e05-cbe9b26ace40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b863884-b731-48a1-a15f-e7f8ae335c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c25e6d-b762-46e1-98e6-f3cd8f3c4f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d00f19d-be7e-4e3f-a04e-32652274c07b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76288fd1-4fc5-4fed-ad87-6351a6d1c06d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2bc29c-5cd5-4099-a309-a3af6d7c3acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--877a8967-8aae-4e82-9643-6bcbca840ad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14121e33-5b16-4402-a623-e5197ba369e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7025a199-2ca4-4814-b5cf-cab74d714e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90070b2c-90c1-461d-8c64-ba17acc48c41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aefd5ddf-1aba-448f-b550-c06661e37d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c390e1d1-390d-492a-81c2-0b28e342ec7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6224e6cc-952b-438f-a72a-44a9102412cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e3f09d6-0bc1-40bf-a640-f2837042a12a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e397bb21-4c0b-4731-853f-3155fe06375a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c49997a-99b5-4ffd-9b33-b08448734730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--534e9c74-9578-4456-b5fe-6adb35404f25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ff17d2-cf72-4c1f-91e7-ae46d8f7f07a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf5bb55-1885-4adc-b549-6c04b32ba5b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87a9a0d-a22a-461e-ae0b-a6ace41aa073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4f1103-ced5-4688-95b2-706007ff4373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad6fee1a-0eae-418a-bde7-38fb53f02bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4dcec3-5dda-4af5-9c91-2ed7fe577f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f57419-6c79-496c-928d-1a3786f22750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.90.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--566a540a-16b3-4182-836d-9e727703e4b0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.217.145.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3002d7-21ce-42dc-940a-f8b5124567eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.217.148.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--502b3182-b193-4cfd-8bc0-d02cb35b0425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.100.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a1b58ba-d9d2-43db-a318-da1e93dbdac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.132.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc90650-92f9-4b80-91a0-cd2688fe3094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.220.195.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769a9abe-5046-4e08-9d0b-233369e8f884", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.128.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e23f47da-14f6-4588-90e2-d1941e84279c", "name": "Malicious Host", "description": "Web exploits: spring-boot-actuator. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '8.230.22.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8256ea92-491b-4412-b63d-aa4a490ada2f", "relationship_type": "indicates", "source_ref": "indicator--e23f47da-14f6-4588-90e2-d1941e84279c", "target_ref": "attack-pattern--5e475c1d-71d0-43e0-9f8b-68c3071ac97e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9229c9cb-9e9e-407d-8c4a-12d1c46e5c25", "relationship_type": "indicates", "source_ref": "indicator--e23f47da-14f6-4588-90e2-d1941e84279c", "target_ref": "vulnerability--09e8004f-6e38-483e-978e-fb0f092cda87", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5602eb-83d2-42a6-90c0-5fbd040745af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.230.24.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc3ce9c4-8442-4ae5-92f1-69b36f5a5cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.235.100.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a22b65-a77f-4354-a775-f2c41cfce56b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.11.57.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720025a4-ea83-4612-af3c-953f4bd3cfae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.155.140.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817d6965-f3b8-4db7-a6da-a8279747ee2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.232.225.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e190236-0c9d-4478-ac6f-6609295f4a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd192ea-d812-4c05-b13b-db7b324b3d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--774a9a97-756c-43be-846c-eca95f8cc489", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.69.55.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e67d34-c25f-4452-9cc8-7b8500779ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.79.65.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--783215e7-87b4-480f-b321-94059c1ec3a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.64.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7450a8d-09f3-4d06-a5d6-e41a53d5bf83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097c4d6c-c79b-4357-b9b1-f6d8cbf53174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953bb002-8d01-4acd-85b8-0b1932841e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.91.71.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b483117-a127-4e41-b3c7-0813aac17301", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9891372-33ae-4555-b241-a9e4802168ae", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08874c30-78a2-42ab-84b4-d9fde6b50bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57ef29d-9c84-49ea-a03d-0b241ef83b1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Web exploits: aws-credentials, php-backup-grab. CVEs: CVE-2002-1149. Sensors: revproxy, vultrtokyo", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "labels": ["sensor:revproxy", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c1cca06b-4f95-4296-afd0-fb615b4b8495", "relationship_type": "indicates", "source_ref": "indicator--a57ef29d-9c84-49ea-a03d-0b241ef83b1a", "target_ref": "attack-pattern--8a8bb6e4-b7c8-4514-9164-c7db99614575", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e82744a0-ee8e-4170-b1a2-7accf1020b49", "relationship_type": "indicates", "source_ref": "indicator--a57ef29d-9c84-49ea-a03d-0b241ef83b1a", "target_ref": "attack-pattern--d867a213-be6c-4d69-afb6-caeecab59af3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--93455e0a-50aa-4a2a-8d47-f70f8dc160e1", "relationship_type": "indicates", "source_ref": "indicator--a57ef29d-9c84-49ea-a03d-0b241ef83b1a", "target_ref": "vulnerability--6725651c-52bf-40f7-bf2a-10fe38562d4a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ce9816-09fb-4760-9fba-0f8148e90251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60002f12-9198-4b29-b54b-b55a2d3de803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580b1574-57b9-4a04-aaa3-f255f585a399", "name": "Malicious Host", "description": "Web exploits: spring-boot-actuator. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '81.171.72.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f9a52ccd-154f-496e-a092-865d159f62d1", "relationship_type": "indicates", "source_ref": "indicator--580b1574-57b9-4a04-aaa3-f255f585a399", "target_ref": "attack-pattern--5e475c1d-71d0-43e0-9f8b-68c3071ac97e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--00da6ee5-0f60-4c1e-808c-ac71a3ad2d08", "relationship_type": "indicates", "source_ref": "indicator--580b1574-57b9-4a04-aaa3-f255f585a399", "target_ref": "vulnerability--6725651c-52bf-40f7-bf2a-10fe38562d4a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4abfa90d-c2a0-4f0c-a658-67c2203e5138", "relationship_type": "indicates", "source_ref": "indicator--580b1574-57b9-4a04-aaa3-f255f585a399", "target_ref": "vulnerability--09e8004f-6e38-483e-978e-fb0f092cda87", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04a5a7a-8ab4-4ec7-a890-47447eaa1c49", "name": "Malicious Host", "description": "Web exploits: spring-boot-actuator. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '81.171.74.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b41a86e4-8574-4cfc-b07b-9deb907dc4e8", "relationship_type": "indicates", "source_ref": "indicator--f04a5a7a-8ab4-4ec7-a890-47447eaa1c49", "target_ref": "attack-pattern--5e475c1d-71d0-43e0-9f8b-68c3071ac97e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d1e1cc62-ec11-4eeb-be96-3a5e5da8fb68", "relationship_type": "indicates", "source_ref": "indicator--f04a5a7a-8ab4-4ec7-a890-47447eaa1c49", "target_ref": "vulnerability--6725651c-52bf-40f7-bf2a-10fe38562d4a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--06fe155e-d973-490b-8741-8c34c0ebe753", "relationship_type": "indicates", "source_ref": "indicator--f04a5a7a-8ab4-4ec7-a890-47447eaa1c49", "target_ref": "vulnerability--09e8004f-6e38-483e-978e-fb0f092cda87", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59809430-fa33-4322-bdc0-873bc2b2e616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.18.38.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2384b8ea-c8d7-4888-bb64-0a3c2598c876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dbef09d-38be-47ce-a575-e5f2693d7ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d1cd67-c259-4f32-bc5f-3de9a686b7b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.200.252.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c56e5e7-085b-4482-a1a6-1b0f1a3e2929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.250.194.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1060603-e0f1-4e59-a289-ed08b7f1c8ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.123.133.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f11030f-16ef-481a-8c70-71d53e7ae56f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.147.84.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f40c135b-ee96-4c95-b8de-40d83aac9424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.193.116.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8119874b-f876-4c19-bbc2-660d948e07a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.38.67.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b185c69b-71d6-4b0b-b39a-bbe197b21f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.39.154.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa7b0ce-4870-41a2-8cde-7d1b8a94defd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.54.70.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af778f5f-a354-4195-8e9e-1619b324d94e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.64.198.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66aee6f9-c08f-4874-8ff8-c767c58ea59f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.97.245.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbaeb4a0-0dbf-432e-a19f-36628025dffc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.217.213.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e65a2d4-a88c-4901-bf2f-72450e9aae89", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.235.16.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317be414-c7bf-424e-8ff4-6b8210c4c6da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.9.230.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3121dd1e-015b-418a-a6b2-178eda0a755b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.16.230.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d6a907-6189-4bdb-b97f-6564301b8317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.242.138.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--176230eb-d434-432c-ad07-b00a2ca4da13", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.75.148.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0347cc0-d8db-43e3-8bcd-187e28dc2ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e27adda-8ccc-4b39-b138-bf51e8ea4a90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f4c90f-8ef0-4c28-b03c-11bfcf44e60d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30210c08-5f55-4b82-a113-137c151be333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50e26858-ec74-46d5-aee3-5cd1124c2129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d66e8e8-a757-47ae-a812-72f9f828628c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fddccb8e-b652-43fa-af9b-d858cca48f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46b78c00-5bd5-4b17-9a6c-a9d41a0122f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b45eaa9e-59da-49e4-9321-3f60591a0998", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891018d7-6a84-4ea4-bb16-d8da2b488bd4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--263c4889-e5f9-483f-a095-c126bd9f4476", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8774b5-a629-42ef-9184-d6784fc303d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb57cca3-f154-453a-9ed8-f111dc6257f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ccf51f-4a8f-46da-92b5-6579f95bfdf4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32317e8c-c12b-4b13-bd19-bbc492ce62fa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751fab53-837e-4309-823e-ca5bd31dc0f0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a865411-4df8-4e03-86bc-c941147a31bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c7cf25-28a9-4211-93f1-4672ee05fac7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf388aca-d48a-44be-80b3-ab8461c335a6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b44e24-4556-4b2c-82fc-c49c5ab7e8bf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e05ef0ba-2633-485d-b450-2a2d19967172", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35547bdd-27a7-44e6-a862-74b2dbc3a39a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6220965-2b1e-4f5e-b101-cf7a2fca248f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc4e9127-6ccc-465c-83ef-48129b783c41", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02082bb-c86e-4c98-90c9-0ae704825442", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--553255c7-1391-42a4-b264-445c56326bac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d392e594-2e7c-4d11-9c82-f75ec0c2a731", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e7441b-3c6e-46ce-9b1a-4d5c01412f20", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f463b733-28cd-4a39-ad3b-6d30fd61f151", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a605e710-fc95-4d20-897c-59dd6a4f8038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69368c9b-e3ea-4136-9ad3-fea5f6a45649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31335638-012e-4628-bb0c-28662586f942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ab69a5-3349-4c47-b242-e97e6bf1923f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d62af449-cdec-42ca-9193-669d8ce14454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b89fa08-3f75-4a06-8704-929e29cdaa05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11d53ea-3b21-46b0-b908-02ad0b66e3da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3521ae23-dddb-48d2-974f-0add8d556b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d0d443-3bd2-465e-a3e3-340dcd3beba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe91c0d-2373-42be-aacb-5da20caef55d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54fa8a09-b58c-45e2-a3c8-f6f3732c8745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bcc5e48-0f08-4d0a-a24a-cf60962e8695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0c3660-e205-4a73-b9f7-6a11a5b1c4d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c30216e-598b-440d-865a-413c28200244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc184bd-eaba-49fe-b086-34c6e9f71f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f55c55e-f8ed-4f36-be36-c5d9552b81d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--030e5df2-dda8-4cda-8991-0722dea392cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2753f11c-7c2c-4dc2-8e47-92b1a25c76d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6dcaba1-3bdb-4b09-ac8c-09cb83fdf119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef29aa5-405c-41c3-9478-2847db3f3ae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea6982e-2e28-49c6-b3b6-cd9a0b611917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f4e7d5e-6f6e-4ae5-8d3d-b68514a6b6bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317da780-abc2-48ef-988e-5588ece7b97c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--091e25ae-9690-4582-b42c-43b4383ec4b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d7ac42-0ef1-409d-be57-2c1aba82ed0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--688dbf8d-0368-4534-b013-d5c2394bad7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--177085b0-6d16-4db8-961c-fdc8877f91db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e4ac26-6ebf-4703-834e-9a0e8b608f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb035d6-a9aa-4b63-ace6-0d0ee93c3fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3596dbe-f3a7-4f8b-897d-5a07f5252fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9e6dc9-7d74-45fc-9f90-bcd936867516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e52b2689-6ce0-45a8-a52b-90754e6a2ffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d27fd1-3cd3-4cea-984c-b2439c8e9473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f47c060-ebcf-44be-a909-71c8bf41c333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c5dba6-47ba-4153-9143-0c4f36187c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7558fdb1-e7fe-4471-8f18-01f7869ead76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0bb58e4-d838-4f1e-9373-deb4a89ae1b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6827ad38-aa8b-4174-abfb-e8622304bcb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fbd1ea0-715f-4a06-ab0a-5979e7d451a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bfb8722-83f8-42f7-b18e-88ccd197c82f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f52ffa2-4925-4a27-ba64-44f58107971b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868e204d-0d3a-45ce-ab58-528bf7fcbb2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b4132e-7dcc-4963-b22b-09b07f5a4686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba97bdd-a4b2-4c91-8b71-caeebda6fcef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f254b60e-13ee-4e9c-ad0a-99c71a410991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02497f25-1e06-4935-a20b-93065d5ad2e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b41d137-5d13-44d7-8518-0f0980d1c15a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8506119-0e2e-4b32-84a8-92116a4759fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d53905-e490-4725-8e8e-5dcdaac3b7be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8556457a-4a80-4081-a720-baa4c6e8c283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad57bd7-f50a-474e-b00d-a6138e307822", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1cd0e07-fe06-484a-b696-e3ee7b2cb5e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--016af8a1-10ac-41af-a129-925121325e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a75e301-13c8-49e2-9b78-b73e6d0aaa43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f3049ae-d68c-4afa-a4bc-801b2b887810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83299ed8-78d9-4f34-a423-685619b03417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13dfc9c3-ab48-4402-ba3b-6951e9a09adb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce2826f-6500-461d-a580-7edbd8649d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d91cde7-9df7-4da3-bd9a-d30b7022b021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f4fc0b0-c9d5-42fb-9fb9-a82de588dcdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dcbae0f-1aef-40cc-b823-2cfad70710cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858edfa6-d5b7-4dd0-832b-31b7419d996e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487ad951-315d-4319-8028-13ed1ea20064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af146d15-47a7-4ef9-b817-a0c08918547b", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4867afc1-1d2d-4186-a198-46f05c486ada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7206fe13-9778-4749-a40b-8f154dd2df95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7e83d0-77c0-4b5e-8223-11d36a58e22b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae1bbdf-8c86-4661-bc26-a96fe700a0ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d697603c-dd2c-4f66-8e2f-7dbc66d30907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--695a6823-ae9c-4d0f-9214-22359871afa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--423a6c02-6b8b-4d87-a1fa-424bb038a72a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9e9301-1d64-40dd-bc14-0a220457331c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c09d204-7dcd-4467-96c9-dffd855a24e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c6b357-6178-430d-80e6-43e01e6c1ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06762b11-4483-4ab8-b2ff-f7f26c908d44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08eae449-afac-460f-874b-f5e7b8ffb0f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faadd429-3877-4db6-9f88-910b9900a3c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5081d150-73e5-40c5-8b3e-c0eaf3a3fe0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee39731c-5efe-442b-89a4-1131b82b99bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.93.58.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c4968c-8785-492f-b645-b442dc3e3ab7", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.96.242.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8978f44c-7a44-4e59-8b77-da9dc532cd47", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.19.124.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81b1369f-8a5c-4cb0-b761-88fa7d4cc7b1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e063d04b-947d-4a50-a700-e860d0f0ab0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd775a8-bd39-4158-9c36-c16c2ebd4be8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4386e4f6-0f7e-4f9a-8251-4898c58b6df4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be7415d-e88d-442d-b2cf-385ef89b0ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9593dfd9-bfef-4b47-b2b9-d154ed958d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eeb2646-9db2-4086-950d-91cbe28fee3e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.102.107.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2167f235-ace8-4f1f-81d6-7e26494e1674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.106.218.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df021a0-1ba9-4e90-a7e5-5733e4a9dd61", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.106.88.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d893edc0-504c-48e1-9de4-19916c797315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.120.104.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed928e4-7037-4e54-ad21-db2da8c705f7", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57910475-0ff1-45d9-ade7-d7264a9a9b32", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.248.155.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b6901b-0885-40f2-9846-227afcbd3ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.79.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e768e9-3bc5-4ce1-80da-54dba46409d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.58.197.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a511cd6c-4245-4e20-bc36-7def7c0546e0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.118.75.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a296f363-f2b1-41e7-a426-c2054b2c84a9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.207.14.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb70c507-4b76-4d43-a9ed-d6c56c5a5e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.230.154.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--162b130b-7c74-4545-b219-c1a843e5ad92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.189.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42ec3c9-d570-4163-9973-c2aae3d007aa", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '89.117.104.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da3facd-0d66-4411-909d-d62fcdb8deb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.125.113.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55daf1ed-3c77-4fbe-8daa-82e0d0848abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.139.23.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d960a8d0-cd0e-49d1-9402-2a782f742707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.146.120.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--137c2962-552e-4534-bb08-5fa0bced28d9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.148.244.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--865c7d97-4f9a-4e7b-9580-5e1612c483f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.223.69.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a99df9-f497-4256-a365-0ccfb053ce41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.23.123.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e62596ea-9c51-48b1-8ce2-576232699199", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.167.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c555a8a8-1dde-4526-b9ff-a9cc7763b920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680c8944-8339-4097-ba7e-a97972056cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--652f6c96-112a-48dc-9b8b-5e73d6fbb1f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c580c7-fa9b-433c-90a3-2499cc88aca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14646431-055e-4ad1-a84a-1e6a5dc9f322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13558f28-fa44-47e6-a2ab-7ed6fa7641d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4bc610-1a0a-4a3f-a83f-abfc03003cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.251.161.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9e0b94a-f7f8-493a-b668-5a8d34708b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Web exploits: openwrt-luci-rce. CVEs: CVE-2023-1389. Sensors: digitaloceantoronto, revproxy, vultrtokyo", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '89.42.231.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "labels": ["sensor:digitaloceantoronto", "sensor:revproxy", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--57ad7592-ea0c-4c4c-a281-97a69f36837b", "relationship_type": "indicates", "source_ref": "indicator--e9e0b94a-f7f8-493a-b668-5a8d34708b60", "target_ref": "attack-pattern--9f6bd0dd-9d9b-4eea-b75b-9f1c56fe33c8", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9085ed09-19e6-4652-969a-4bb28ab92cac", "relationship_type": "indicates", "source_ref": "indicator--e9e0b94a-f7f8-493a-b668-5a8d34708b60", "target_ref": "vulnerability--4ce13f05-f038-43d9-ad03-f2a70de257be", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ada6877-6e7c-4f46-82d1-75f070926ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.10.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d513680-efdf-4f85-94fd-fa9c87e8a4a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.17.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759a0156-1886-476f-8792-6e1b1918219a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.42.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb551de1-d742-402a-95b4-ec05473e39b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.146.227.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb4a7afa-5abb-4724-9ac1-0dc7fa11eea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.134.242.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260b43cb-5093-467a-ac71-67c7b38e9cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4752ff14-39be-4e9b-b83e-3d82f5f4b5f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405ff690-76f9-414f-a759-87af6ed7cbf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--633a898b-48f3-4642-a815-ef61749b1bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38fc8c8d-fcc3-4886-ac52-09b69ec528e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b9b3ac7-0129-4612-80af-c2978ab022e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b2a880-d594-4611-8d98-58f01767ef92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ff09f5-686b-440a-92d9-f6194053ddab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294de185-03e0-4b69-b293-603b5dc38f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d4b115f-7373-4fb3-a64a-702122528533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a1094f1-6de0-41b4-89e7-cbe1fdadc2e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4cec801-4397-4cea-bdca-25efe7e5bd79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e82eb5f-1523-4fe8-a775-1db265d3c135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bd00a81-4058-46fe-8aac-751b618a2e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339b652c-4b75-4074-b90e-600238230ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac6d8b6-5f61-4d17-b481-adab3bf6eef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b62fc6b-689a-4c6f-b72f-e720f6e09b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c4c3c4-1e09-4075-8ebd-e50093fd4115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508c79c5-e996-434c-91f5-8ca72c73ef66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0fa1252-09a5-421c-8d9b-121b843ed88f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d95f8649-46b3-4676-840a-6db765ce7c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22b786b-3516-4f80-a350-684768840c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd960399-29b3-4a75-ae88-4f4de490628a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b7d702-638c-48e6-a444-1e4a78e9b1c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5412418d-778e-449a-9516-797fd3f61d0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b8235a-3bc0-4a98-a474-bded5f9da799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da8560c-5f84-49bb-bb4b-860c5185fbef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0908ba06-54ee-4693-ab7e-1d0afea972b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e772cf87-c18c-43d3-9c8d-d540953c09ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd58733-7bed-4105-b44d-2d583869a63c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8229316-a426-4c9f-a85b-367ced246894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8392ba4-d8e0-489b-8f7d-7d18f9fe2e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d083b336-babb-4be3-bba1-2244008250a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a00cec90-4de3-440b-9460-af3f59164e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48083b1d-8762-450f-a660-c70158d2364f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a44eab37-9f57-46cd-bd82-4273878c8d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ea80d5-041e-40fe-8c09-6f8ed104c191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25aabe77-c532-4b48-accc-c6b7c9ac1c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fedf7130-70e2-41e7-8fc6-30e5cccf3662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b889e294-1c17-406c-b1a5-a3e8b5a43ed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32104e96-ad97-4898-8312-881ee0685b55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa3bac8-6883-4459-a090-1a3b163234a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce1dd2e5-da63-498f-9bdc-f54c9f71b25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bfaeb79-c9b3-41a5-9ba4-de68494936ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa05616-04a9-4f5b-9e30-d17ed3c110c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a7406a-c1f6-405f-87ef-23c1b80b0ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749b12d3-c68f-414e-b1cf-7c8cbbce115a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22255ac-259b-436c-b0f2-c119b41e3515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d912cea4-d363-4b52-92c4-65a6c97408e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8ad05e-5b42-4f63-8ec0-fcaba9523d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6907ed9c-b0dc-4063-adb5-545c95951677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea87bc18-2ead-469d-b624-c0d0f1d3d289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec74f3f-1f8f-4e8b-bfc5-a891472033d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4213f6b6-5c2a-4837-83c3-2f8f5186b276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37663019-2e11-4f95-b01c-bc3cbf3f1fcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8eef53e-7994-459f-8034-30787366a4b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e4a3186-e120-44ab-8c0b-af0ae8c76c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--139d395d-c877-4ce7-bfee-525f3a10456e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6bd2d8e-b27e-41b4-bd8e-ad3a7ca8372c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4433b07d-14a1-4174-aa61-9bae475c41e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71c9960e-fe69-4f57-9723-cb9f22f01fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3bd88ee-2444-4c61-913e-5be81b9ba7f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74907dc8-11d2-4bd6-a6c0-7c74178fdf00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad73f759-2b58-440f-a22c-2ee709548b61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a384e1c-876c-46d6-aa88-8062588b9e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb5c364-941d-497b-9739-6bdfe481ef4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97206a60-7221-4bad-bab9-375c10af6e97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead67eba-37a2-4a3e-a8cc-87b540751a5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--464d8c16-8b1b-417c-a5c0-45369482f944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b837911f-563d-4ece-b203-9a32fae21103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc08cdda-ac49-4858-92fe-5b6bbc7d0c37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a794e35c-3e3c-4e25-9b6d-90a9b0b9c396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46856a80-07fd-4a73-8509-b27262a884eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d025d1cf-529b-4a4f-ac0c-8bb49a16e5a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5608afcd-448c-4c9b-8dc2-b8580b5ff143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbf22bcb-e62b-42e9-bdda-9f8bc98b156b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d53b0f-238a-4548-8045-6f2110aa8018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2653877d-32bf-44ec-bf58-89bb9bafa86d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6f6a52b-bb0d-476e-a6ce-a704d4274b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daa9a2b9-9e7f-40fa-a517-ba6a28cfda7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e9feba-1837-4e0f-8f5d-f36d8442c282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36bebc9-4084-4e89-9735-9544d5b5a231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--864e8aa4-3c2c-49f1-9865-20c541f52d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363794c2-966e-4ed2-a77e-517c99899bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375d2191-c78e-406a-a3d0-a19748d249b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce65eed2-0652-4794-b384-ea0130a124ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fba82ef-cd82-4ed1-858a-a6f9c42d3bba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f2c8eb-d9e5-4aeb-bf8e-74d0cabbcec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd318844-1ce7-4578-8282-c8e479dd1a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a0d56a5-2b0f-436a-8c40-748c3de5dd0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a44687d-8f67-4c07-bab3-124f24bade02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e0ac89-9963-4997-b72a-889768e0cb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec7c35cd-62e3-4b61-b906-3415fea4df29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f84879-f2dd-436c-bfe6-0ce5bf464207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf85a34-db2d-4449-817c-9e0ea9e04eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6a004c-65ca-4664-96d9-37e8a8576349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaca20bd-9cf5-433f-b089-1095b8cd7ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb85d47-c6af-4420-a357-e8ae9cfc5ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea5572fe-124d-4f94-9ed8-ac709fa53153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18983e17-717a-4c71-bd3a-1eb17fa9ab9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda59be8-f6fd-4214-aee8-95b197f06dce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cadcaa5b-f0d7-4c8c-b398-ca8c1a4d6017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b13035b2-ba37-4bfd-ac29-673b273ab14a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--676c8070-ffe8-4bc4-a8a3-c57657524d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1fa47f-043e-4b23-bdbe-f9ead44c919e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e9e1fa-0f11-418f-9cac-c780cc6742bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--778df597-7bb4-42b4-8f8f-f73d1653ecc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41dce3a7-7f5c-458f-ac7b-8ac96e12486e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc44fcb-4eb0-409c-9910-37b283a9720e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b6d9bea-a5f0-42d5-98da-fa193652af35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77abb707-536f-46cc-8701-04fbbc32ca6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b6dcb7-4a2d-4157-bef2-d25c6af1a381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6f7b83-2219-48d9-9f9c-d340581a0a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81616e6d-b324-4dfc-bd54-84551a80046b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff1bee3-a8d1-4942-a293-61bc4e876b20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bce8d5d-9cfe-42d1-9d92-332435a83432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d64a71b-9b75-4df9-922e-fa1637d37391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f47b698b-8a34-40a0-88db-98c85000313f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233086ec-e5c7-4313-a361-0c3a0aecf36a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ae3ac5-f4a9-4c97-9472-5a34ac33b735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5118045d-6ecb-43d7-9335-1a3ab6671cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da0fbc0b-7521-41ea-b51c-f492b187517f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe78ddbb-c88f-419e-ad3e-e9e26b096165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717ee331-8cfe-412b-a6dc-a1a0cd61cdc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a14927-d7fc-4ceb-9319-5d3b2cc0e4d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41109780-0db9-4f40-bbfa-47720f6ebaeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f072bb34-88d0-4016-af29-57f556a81a30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e620e542-2655-4cef-8163-a229300205a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5f51bf-e3a1-4cbb-a470-d6a292ee513d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed80cc4a-e157-4a1a-a5b7-ea5b9738d02a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270d3bdd-a226-47d8-b7a3-70fdf5ea07ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f716f8-2ff9-4e93-b1cd-34c995024204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440228b3-e00e-43e1-8668-86b8c09a1149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--785c6f91-ae5f-4048-a9d5-5e7d563f3f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32837a8b-99f9-4564-bf30-c6d5ee853c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b9559b9-9ce5-4e4c-ad5a-b67ff362fce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d5d415f-250a-411e-b623-fcbe42701c04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c511a113-3d8e-4bfa-90d3-c31b7cc468eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a094a34-1a09-487d-9a9e-c8a290148bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75d67f8-a502-4726-aba4-f137f479354f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89232a90-ed98-4df5-b928-c31a96b2da97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a1d9c71-b413-4277-b09d-87272d7d0f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6dde7a1-6dd6-4e48-83e3-c4ae7d2fb472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198bc626-ad64-448a-8cc2-b085e7cf1f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181e1e67-0e88-48fc-af56-3fcda8e55d3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fad238b-422c-41b9-86e3-abe6a773c9c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3863cfef-38ae-4d68-a7e0-78adc3eb9904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50fcac6d-e398-4c48-a7fc-7af5b6920736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9fa0b4a-449d-4468-bf4b-5ca9b35191ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53bc32c8-f903-4eba-bcb4-6df2cb400510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70cd08bc-cbd3-451d-a118-88bf683e2f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af137ab3-b6e5-4300-bb05-c6bc5de1012c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b2afb58-4fd1-418f-8724-b661805963f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2007731b-f70c-40c1-826b-9ad46993b7cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7e8831a-6aab-4ee1-a569-67010182b594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee5dc02-dacb-42a9-ac9c-b3baa44bcaf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aecf96c7-8a6a-4b92-b861-72b945ae20a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71179128-a802-4c7f-9dd1-86d0f06d57ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f41b47f-7d6e-46d1-8d85-b72bb15e320f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f17b091b-5b01-4ef4-98cc-588a58c6bd9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e066721-401a-4886-ac40-72f8c148f54e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b245970-0700-46b3-a275-500a7ea10f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--793b3d36-caa7-4f18-8155-192da67da6c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8ffe863-c426-4fb5-8c2f-d23bad485720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df2d90fe-d8b9-4e79-ab08-a78b001fbfd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72acab99-7afb-406f-8e85-c2b9f099b7d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d26a3568-ce38-4ddd-850b-2112e38948f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77db01e-1dd0-4601-99a3-ebe172d37cf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a4e832-a608-4e5f-9c79-93110977d095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--710621cd-6623-4949-b3e8-96526a6f549e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80ef93c-f4d8-47e1-9a45-b7c4cd17cb02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9659a771-772f-4cf9-bdd1-46d15520e741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1684360-70e5-49ae-8bf5-c18b373672ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e68c253-a518-4f57-9123-224c846685f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f84ebe5-8bd8-4d20-ad9c-80f9256f9365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9635f6b3-7d44-4b7d-b7dc-7f4a9c33f933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6691881f-21e3-4af1-a93a-00232da6cb41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a2b43b-3878-42db-b4ca-a1a8c62374a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f73035e1-507c-4232-b062-38ec3bf37886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1a8785-8b07-4765-8d26-4b1d80e46003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354e6716-2751-4b67-a0c1-59bff793c567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615391bc-c679-46fb-a60d-8e9774b8e205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--866123e1-0fd7-494d-b62c-95c7c0b967f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb0ccac-e211-4e60-b5a4-8eb1a6289f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9a4022-df36-4aa7-9a4e-8c7bf7574113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db81610e-295b-44ed-8078-e2616c995587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e12d39-2e97-493d-be33-4d0a8deaec58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0bfe42f-afe8-43f7-b065-99ce8afba99a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad0d2edd-4a2a-41d1-93af-542c036f5046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df00fcf-6f5d-4e57-9f6b-4523fafbdaf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c187a437-5b7f-4232-8673-693a19d1c809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28fa52b2-a2e0-494a-b45a-8c0603e95dd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--296fb53c-a82d-4126-bb9c-140ef0f11ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd48875-6ebd-4938-8482-7751e027fcbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c7049e5-c3a5-4ad9-88f2-5b299420e2f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef5afea-9921-45cf-abe1-90d6b1a8404e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d68acde0-44ed-4f94-9fce-446ce5b55252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a15a59-2598-4f5a-8559-4a67f0bc53d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0594ca-93b1-4839-89ef-3b6d24e78735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3238ddf-bd1e-4296-ad2f-1e796397cc0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97e2b9a-6353-4f52-9c19-4f6f8c07e12c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697e8f99-ee00-4868-8ab0-4dd9dda6ad0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a02329-3341-43b0-bd9d-e8c140cce863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35e742f-e65f-4726-b9b1-87b0bd62a606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9280f867-56bb-415c-8877-7b57b661f387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced3d06b-33ae-4616-aae6-1ebf92b259df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df3a0b91-e0e8-4def-8917-082e3134c592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb579de-9211-4d6d-922c-3f051fd28a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da21642f-c7a1-488a-b687-c15c9975b7a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696656f9-9905-4f1e-992c-60040e022b66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f333216-1b68-4043-a593-40bf9f61105a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1591745-19dc-4966-937e-afd7b261eb25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f13143cb-735e-4264-a621-514a310c436d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c129d9e-cd8a-420d-9dea-fb0ce606c949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d758951e-eb8a-4044-a6dc-9cc0961a2b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65842b04-4a4f-4af3-a01b-ebf2ad6bcfb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e7ab7f-d53f-42d2-b6d7-b72d6d63e6f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656e6a68-9f52-4f4e-ba18-4171f007f11f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef6b62e-827b-461e-a45c-aaedae8cc41c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a8fb13-5a66-4161-8b51-6d892bbeedb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1695aea7-7cf1-41f4-85bd-c83bc950d80f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--389e06c5-e4bc-4b17-b3aa-3fc63f369d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f6093a7-8e6b-4761-93ff-86fa9e7fb122", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df95b5b-95e9-4a74-93c3-d9e507184b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce48e7b4-d709-4aa3-8a7d-bae20b80fdc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--318ff754-2d71-4557-8bf1-2e50fd454674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb677965-004b-47d4-902c-332836a23286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb3c56f-31c4-4d8b-a285-fbeb46572061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252ca049-3471-4ddc-ac6c-cc872a9e93e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2269b47-b73e-46f6-adb3-75b0e9c31883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4eed9b8-7fd3-4989-b284-7fc168d0bf1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9182e38c-71d9-48c4-b7c3-ed601e1b874f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.196.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--321b94c0-8fcd-4647-9091-7284765fcf70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c00e39c-dea9-4d8e-a608-032f81897548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075b5bba-ccab-4f54-a5a3-9c6f4a1c161d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4adae599-7d82-400b-8368-ecee53d229a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb199f9-eebc-4f4b-9365-fde31aaa727d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ac263d-6002-4a08-9a58-a1615604aad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2eae23-49fd-4996-9f84-919a3639ba56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df5be199-1ef3-456a-bb3f-5cb1e5bb58b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b3fa002-3fb6-4487-8b91-8f95d9f02db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d697565a-46f3-47c8-bac0-980a012c2571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07756772-7ea5-4b2f-8a80-b9e7132d9e08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cfb67ac-81f8-427a-85e4-ac664de2d832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b927c194-6797-45e3-835c-cb45d12eb537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce01d97-aed5-46d9-811e-64d73b8a6e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9205adf4-00d5-48ad-84b0-11dc26e90d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5390d9ed-1d1a-4f91-9cb5-7d34a20e0fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46fe11be-4580-456c-8d70-b8cdb3339fba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b33cc65-19e7-4d75-a6ba-8d400c83abe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50015b31-5cc9-4728-b629-b79e71c4570a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a9a1fe6-28dc-4aae-9e6e-eb5d8d588860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357aae0b-cbc4-43f0-9b2d-5a47443069e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc77bac4-4ee4-4d65-9dd6-981149a193fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5df51dc-13bb-4675-8141-2322707380de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7390f383-14b7-4a68-822c-4f433db4114f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c4754da-42a8-46fb-ae01-6db4d542be47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f2d7eb-a201-4952-a700-5a0c5ff2e35a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ae6e14-aeca-4435-9a79-a8830e166193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1686867-f921-490b-9c92-76efa7431e24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bae4260-82ef-4106-93a3-3873019047fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5ef14d-7a9f-4a33-badc-b46f1dee11e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d1d3475-ef03-4bcc-9919-83745e9a819c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4adf0cfe-4a67-4b45-9549-fcff0c6cecdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--138f2653-346f-42c6-bf79-e348cc973c91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b414bd-c795-43cd-ac03-decaebab78c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd30cf56-dcb3-4f99-8d20-db9bbcd7a182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--038afa2a-a0ee-499b-8b64-ad2887ef3488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37b070ba-2536-4b66-a4e8-f2d1259b7e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3b4a0e-7490-4d39-bebf-73712085f8d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0a3119-721a-48f0-a493-ffd55c033a87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ffeacd1-0ab9-4ddc-9b5a-16f7c3784f02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa67e4f-4cc3-4a57-a7d2-df2639772dec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c0e954-47c1-4e04-a073-042d73ba8ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77392882-ff39-45d9-99c7-b764b3af664a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23ea3a0-14ce-4366-884f-d4d7769d733f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab8bdbb-ff72-4cd6-973b-ae03fdc74af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e7f03c-82a1-4757-bc6b-c5c198abbdd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dfca330-1112-4bfc-bc08-9db47d8b38e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59cfbf15-250b-4f04-97e3-42a631b1aa50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be3e7c7d-3739-428f-aaca-8e56bc65a03d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50750105-360f-45c1-80fb-b116e17b917b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3f0aa1-3ec1-48d5-82e6-62c8ac8a947f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579ec904-7f11-4a94-9e18-6f9b306877cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2626bff-61b0-4cdf-8e1b-61e616b88b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee8d6d1-3e93-4a12-867a-55c89b24cf7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d88656b-3944-42de-8aa0-41f0e3185023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f39489-b81e-4163-8a1a-0e27c1724725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb0d45c-025f-4836-a46d-efce015182a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab6c65b-d76d-4c25-8f23-5afa894c66bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a201c8d-6ba3-4ab1-b881-e4b82ffe3fbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18351270-b9d9-443e-96e7-90f72bb4edeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e473c0a-d7ba-418a-96b2-2b975c1d3cfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8a38e5-3319-4690-ad6a-2a51c31097aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e8cd43e-0634-4e18-8fa9-aa8b66c27d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb73346e-30ee-47ba-9fe9-a89aa32ad12a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71b87bf-d799-4ed6-b046-4ae884f282c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f635c0c6-0e72-45ab-ab34-4b735fea7d0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96f36801-adcc-4c9b-86f3-396a9f509356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--950bbf1f-7677-4631-b313-b1cb19ea9279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f031264-1b7a-4433-8752-6b22aa06478b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a983f2-b490-4c6f-9896-4474201e5c85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce0e141e-a4ce-42fb-99a7-63ab437abaf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d0318cc-6c7b-4090-b7dd-3f74d717b45a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--575f56d6-d6a4-4915-90b8-cdb9bdd22210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fe65140-2896-48b1-9dbc-3ef9e025237b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b35e1ab7-4203-4233-8f7a-b6e98f7b0400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4200069d-d23c-4304-994e-61a33ecaf96a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7fd22ab-1ce5-4a28-aa06-7dfc67677bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32030899-f45d-4289-93a6-23cb3a65870a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--654f3694-0786-40bb-9e70-5a3a504ead43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63eb7d48-fbd2-4fd1-855f-645a81505265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af36795c-39d2-4906-86fa-32f7e63290dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71fd2c16-5da8-4e48-9246-2be7d41ff083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6a634e9-f661-4478-971f-4af52b1b1654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e22c934-9242-4b87-aab0-b592aa48d0d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c787632-8f89-4e33-8e71-3f4be68b9fa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c9bf9f-7eb6-4b2b-bc1b-91475a748b2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba003adf-188c-4289-a2d4-ab9e1935c642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b8ad8e-e892-4f5f-8817-c22bbb9cd4a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4110cc94-7d6b-4f2f-a256-8308a8079ab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb469aa7-29b0-43c7-8a12-29098cd0feb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a2052cd-3cd6-455c-9856-05f8d2146e89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b91772-1d4f-430d-8875-15d8c4502a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba03228-4291-468a-a1e9-cc80098a4389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54fc8d82-d7b9-402b-aa77-fb8ea450f1ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c990e0-acd2-467a-86a1-c6751f56604e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c426433-55f4-4883-9839-38ddb8c454e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421748d4-152b-4721-8f82-0afc534e1095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b20920-30f7-428b-87de-5e5ac8e166fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53b76e3-c83a-4d84-8e9f-1014be6eae9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0401a441-1bf8-4b3f-9672-985a3a256535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e5084a-b269-4899-8cbc-8635058aa26b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2af64e0-519e-4b44-85b3-19b8aa7ce0e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--740596d0-8b16-40b7-8aa5-fae332cb1e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77507e02-931d-49b0-922f-1c927bc960bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b72bdf-7d9a-4813-a4d7-52eda1dfc851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a67ba4-17c9-4d82-8e55-b621a0adbc07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b153526-c3d6-4634-9137-87ac64f53ccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5de317c1-e116-4308-904e-cbe2c260e372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f94aefc4-6214-4e11-8d99-003e2da59ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab630ea2-fffe-4ef0-b26e-302535f47a36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21af0901-b271-47fb-84db-e276a19f5537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4452adb9-3815-4dc7-acaa-122e8245b8be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c54003-e8f8-4e8e-a4b6-30c16597af13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be7c59d-1165-481a-82b3-bfd3d8a4ba4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8750a17c-ac96-463b-89db-840cea806535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d837e91-3254-4c8b-93c6-00798c465939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6690b77d-402d-43e5-a12c-9d42545affc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a691862-5f3b-432e-8d19-7d842a222a74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--321be75b-cfe4-4d3b-b350-bca3674b1eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e8b2c29-16b0-410d-b058-d5b3492e0c4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e845b14-75d4-4fae-b816-7a124f68eba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5804130-63a1-4dbf-8f49-33afafd7d54c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beac06e8-4f10-4212-83b8-bb14dd68b6aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc69dff-79dc-4eb2-9290-b82ea26aeb21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823ee5f5-7e00-4593-94ca-bd0a64770fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf015d7-e4f1-4845-8153-d0c50bcf4aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38ea1c7-d58a-4246-9047-594f7ba1453f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7365672d-3234-43ae-955c-f684e7885af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe79de2-72da-4e2b-8e70-9e04251db8f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe77ac7-bd1d-47d0-b149-c23bbcffe9f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96bfed48-3026-4bd6-9acc-1496d0038907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f60d016-6327-456c-b511-639135c92d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34fd284-6555-4e26-a0a2-db4811f80abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf29498-a219-4978-b29b-66214a1a16de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b117b7-aa7b-4895-bf17-57368a77601b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b4b799-5513-4459-8399-1b61278bda4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deed6b7c-5470-4a45-b9cb-90f32554a76a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8924c7c-586a-4dad-8396-112f7f9a9373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75aacab3-bc77-49c3-be5d-400f6052469c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d58f45-d75f-4450-acd7-829de7918247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e7c9482-2173-4fc9-93d7-9d0f474875d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6081b782-4a1b-4b46-8d91-44f84ee66a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c7d75c2-b4a7-426f-b813-2b6780963096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed7010b-9c89-4c2e-85e6-503635a37c31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94aebbf-25b1-4218-b4ca-4ff39275ad5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--937f2e06-64bb-4b9c-9fb2-5445803e5454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddeb14a7-34ef-4112-b478-2230830fbf22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46008baf-d7f0-4701-9d79-9e258b693a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52aa4ec7-38dd-4f58-bd7a-4436df3d4222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14af79f6-8b93-4d07-a02e-bf484bea9ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa860162-8139-409c-95a3-44a2f6f722e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b82087-9088-42cf-81ab-04ded6a06855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86975816-99e5-4f3b-bd5d-d55c569fe566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65bbb2b8-11e9-4dc1-b360-d91201a79336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02013687-f654-4059-924d-e0edb51e43f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf3750a-63bd-493e-8a17-ec42a7fd8a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05684b08-e1c6-44d2-9cef-adec9de78d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392f0064-ed91-4c5e-a817-6ce6a7dfa788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbcd0ba5-51e2-4419-a717-9933b2459af9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9e5394-2d70-4d1e-aecd-3eebde54d8dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff52550d-37b2-423c-9225-64b7e6f41d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1faae0-7c33-44ca-9155-0e699a3df251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7edd051-ff78-48ad-8faf-6510d8ac7e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71db28e2-a6d6-4b3d-abd2-5cf998aea504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c74b734-b44d-4701-946b-99c15cd3afef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f1544c-83ea-4954-b59e-43100b0ac5f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5098aaf5-24fb-4899-84db-98519089b687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ddf82c-a056-4d1b-aaf7-44191443e695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6024c342-3f39-4a25-8ebf-8856ca3816cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb1dc09-2cef-4d69-9b06-d190353f0b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4199df8a-fc61-446b-a934-237e164a9437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa95bf7-902b-4881-a8a6-f100bbabc327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec8de13a-6159-4347-95cd-b4fc8f04bea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--446a5943-cd39-48a4-bb64-e17167863ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d89b3aa0-4bf3-414d-9f60-0a73cbdf4ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2791e49a-f176-4079-a466-ceb8d17af542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d9ad33-a416-4c6c-b49b-0bf61546033d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1cb07d1-27aa-4b26-8894-7eac88257a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b1e432-152e-4efe-83db-cf71ee06836c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1e2bc4-60f6-4d61-9b0b-355d04474bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252fa082-0ce6-433c-8b6d-dfb0e274f1fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4fcc52-7f5c-4458-a428-bf3f7442114d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--550000df-6ffa-40a5-9fee-64abd12638da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7276a21-43dd-4b7a-afed-f702b35195fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78dc753e-de40-4ea0-b10d-a6d27e9991e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca65769c-d3df-4496-8ed5-1dfa3fd7f651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ade4482-e2b5-4d41-9c73-0a03cccbbcfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c151b3-417c-406e-b961-8bd77aec2eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85db972a-9c5d-4e5f-a3dc-7298b48b5329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345fce39-e63a-496c-99e5-d363f612816e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f52e988-daac-4ee0-82ef-be854a175ada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b753aa9a-d0b2-4fd3-8e0f-cfb57795a149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bffdbaa-e606-465e-8287-b9f32459f7c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9954a448-a454-4bea-8737-3ffc8ce738d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d19a19-f4a9-4ccc-88ab-f461e4dbf2e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b3d9a56-0e62-4c21-a4ed-2ce11275f049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--947b1164-c9f6-4dd7-8ac9-d8b98dfe0c02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b0e596d-3c10-4c80-adcb-bc78a927943a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709fc513-d3fd-4ee9-a6f2-adc93e4b2fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36381368-38b3-4858-bd62-4a954562634c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7e5d91-54c0-4e39-bada-236bfeba7e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46823ac4-5144-47aa-87d5-f32b58026129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18868a7a-d598-49e0-a3be-b7da839b6a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe359012-70d8-40b2-ad19-418bc17c517c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77552a3f-2e10-483a-a4e2-8e35cc72b972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--123c5144-8ed7-4cf1-9696-81969f8f3d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181bf79f-e996-41b0-b838-b54b47fe5c23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f02fed2-6d9c-4fa9-ae4c-cb0525dcd91f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.197.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c406e4f6-79b9-4246-a9a4-cd1a9a81dcd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d94501d-9137-4c3a-b2f3-994c39d30f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db629dff-30b7-4db2-98d9-e7308fdccef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd0f6c54-dd5a-4228-8461-c27a3a898ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f013df2-b055-4a2c-b035-b078b9070498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--801f8393-61bc-40f9-9bae-b18daab808f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b020f9-f75a-43fa-9572-e50c1ee525b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac4bd99-410c-4d8b-a724-724e9b52d1ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1eb405-8738-4914-8216-fd073ffc26a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e5a842-a550-4da5-a10c-9eecdfde9649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e54d0f81-4d38-42d5-8f00-b0acba252a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1336d6d8-6967-45fd-8f9f-43ed306e7d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf99d9a-e9f8-4bb7-874c-77d2da3cf1d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040d8a63-a811-42f7-88e6-59d504493521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc531eb-c3f4-42b3-b9dd-679bd4118589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac29adc-6df8-4b68-a207-271875c6df3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e26eb1-2810-4cd2-ab47-5fb71b378ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ef5e20-c126-4268-ac98-72db02a83af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c72d7f3-6551-435d-b17a-85f56bd0a2da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06c4276-870f-41bd-9af2-a9f8a76e4e4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ebdfae-4290-45f7-9ebc-3a4effb3776a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--253c1b62-60e4-4fd5-880f-4c1f22579ac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ed1792-0d4b-474b-86c5-a613afc38ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb1fd64-6a4d-472e-8469-6c9ae948b2cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a35f29-765e-4455-a6ee-3e558c2d17ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a218d32-e386-409b-aae2-ba22e96ed052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec03ccc-41f7-4de3-b176-8e156a46917c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d745ba6-3e7a-482e-9ce7-459a404d1831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--080f904f-c580-4f88-bc78-b91c72252e4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2dfef47-58e6-42ea-8f4b-8fe06be327ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a9493d3-79ca-4e8f-8220-cc0aa6a5c043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98126b5a-5fe6-4043-b30d-a2de28b0964b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4715ff90-fbb5-49a7-9f0a-360892204124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6923476-7b91-4a4f-9a95-62e36559d8c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29dfc214-242f-4ea0-ac5c-2db05e2780d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3cbea65-1942-411d-a9a7-9480a3fb77d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a00c25e-802e-46f0-92b6-1c76228b7db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807c9903-3c84-408d-8ce4-4a28400c42cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81d2e647-4932-4c25-8f05-b7710e101f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c9afbd9-1369-4e2d-8a7c-c0c0f3049b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6666fecd-2abe-409f-b186-1638b2c018e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c7ac52f-1415-4ee2-b0d5-6b1c0b8b1d10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8242d85-1333-434e-bfff-9b40f343ef74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebbc8399-a5bc-4b30-aa6b-bb1538e328c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc6db971-6223-444e-be98-fc2f396945db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f285cbec-16b0-4391-affd-396306edb554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f9ea86a-119e-4966-bb17-93afed3cd3ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af493cd-874a-4454-90b6-d4a451a6e396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f435176-0912-4f0f-9feb-d71f668aafbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a743609c-5d8f-49d6-a2da-d3aed5bbc223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d526fae-9b8b-41c6-a52a-153ea585b375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd6e2e4b-89cf-4bb7-85ef-96344fd0a094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3046c907-eb33-4c1c-9a18-c27086827a0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d9b880-47d6-4917-83a7-96c2ff670a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b000981-1e7e-4b09-98ab-66208a8f1972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d12df492-4ad8-41e9-aaa3-ad281ce4b0f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc8332f-0b10-42f6-8014-6d905025f377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30977d54-f48f-4658-8a69-81ac177a3170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f8d1c8-9e76-4593-9836-09d63b288861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10401171-3a88-4129-9520-c50ea3295f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e9fa80-dacb-469d-b615-87d82c089733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f552ae-5f6a-4fcd-9cbc-16af5f6a3e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf67a048-8019-4b05-b8cd-66e07fdcfbb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a464902-e3f9-4809-90ff-8ef53f3150ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--803bb749-d3de-47f4-96da-0c1ccc0fed89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31bafea4-d7d6-4293-87f1-61531734882b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceabc408-aea4-49e6-9ff9-9f3b1e68a0c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75fc1240-f06d-4bf8-86db-ee2b24458281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6770dcd2-f593-411b-ab06-16e7ebe00ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e47403a-1c9e-4353-be90-95583fbdc82c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d9800e-f036-4046-9ba7-4919d566c237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d3b553d-3736-4ad3-b7b2-b0956d09a716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61ae2c4-0627-4216-a4ba-45563227fc37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68ab85b5-695b-44ec-91a4-eddc5ef17ef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c19272-109d-47ea-903b-bcf45641828a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee97c8c-1fe6-44b4-99e9-4f18fb96aa71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c35488f-1f1d-4245-8e10-6040940f295d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66187f64-4de7-400c-ab25-05be42b8fa8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa937cdb-d3c5-4bd3-92f8-3afaf6e71755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--076fd932-c006-4f1a-9fd4-de60d1075a23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8715d1e6-4c85-44f7-93db-87ece36080ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf02097-2f2c-4c6a-8384-77667de44993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25dff6dc-9418-43fe-b83f-e34d983e0a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5157d0-136e-463a-9c68-7f1788dda636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336cddd3-c784-4085-89cf-eed8c2acf63b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e25e94-170c-46f6-b5d1-774b0a578e5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b19d8d9c-4c2f-4bdf-9988-7ea2f1c1ffe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b3151f-3707-4e83-a9d2-a0672432c324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d6be905-532d-4739-865b-554fe2f2511c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--739c4c26-0bc7-44dd-9b34-0da0f8f54488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a817a35-5e92-42b0-bc1f-8d3c206ba209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623a5969-f129-42b5-9be6-9501fde91f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519f1a48-551f-4f81-af1c-9074b1d5d32b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05821ac7-b1cf-4caf-b05e-9bbc7fe117f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a6288c-201c-41c7-8d03-7c4c75233f5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ea3886-55d9-4603-a339-aed0b307de8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64593d91-d242-4459-86fc-e6d146e0623e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b455299b-ef87-456f-8b95-4b9288d635df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--300fc8d2-20ad-4605-9066-1cc8c80a90fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cbf28f6-6ab4-414e-ab2b-29a686c3890c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b82a36e-c3f1-498a-8ade-4b0687d89f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89bd03b2-2640-402c-ba72-64f46e6f98f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea354c0b-453e-48c3-af1b-2950406f6e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54959796-66b6-4617-a047-29dea2dae2f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ddc92e5-c711-47d0-b26b-2d3ed447a513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8f3d17-5f48-483e-9749-5ab860657296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270f59f9-6bcd-49cb-bb18-5e677f36bb32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48dd444f-8fb3-4695-8a04-3deb248b71b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43cbb877-596e-463c-af53-539c1f5522ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--876a7f20-9a53-468c-a14a-5c58217b4915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--137c1d3a-6b65-4970-bdd4-c606d825cdb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910473ba-0632-4d5d-a233-14fc52eebe5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4177544-22a3-4fe6-922a-df14c5dba744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e70a71-62bf-4d7b-96af-a74237f10031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e15240-86ab-4996-a77a-9e72b488d413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--795d55ca-5ad7-4a4d-9995-0e4401333fd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed3ac74-aab2-45c9-9211-ad0707f69970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac8e04a7-40c7-43d6-8ac0-f81057278f27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ce46083-3baa-4970-a960-dfa249714e4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc9ceaf-cfa3-49cd-ac2e-96e6466e3a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d295868c-9845-45ee-944d-2f4e8eb69efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29604bb7-0e25-496c-b2ef-f9ab4d253c10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0af8f46-913a-46ac-bac8-ada749abdf66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa344e0b-74c0-438e-bd0d-2c044afbe39d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3eb6723-4abd-4379-96a4-7e5d2b9b9ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--977b1e7f-e337-4b0a-b371-0e087f35c862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5b2657-a9d3-40c9-80ae-bc9b9e76abbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17993700-e36b-402c-87f2-f8797858a082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f302a076-5831-431b-9c14-e8044bc261aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3d9ef5-ca4f-4208-aae6-d22aca9240e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--990ef6ca-db1d-4845-99c6-4d38f3b16f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e31c1c8b-825d-4f23-8a48-3892e47df090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b82cac-1fdd-4d19-bd54-65eaef56bc6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--883792ae-cc9b-44a7-a635-802dbb7681f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0ca584-a887-4539-9be0-348aedfd58e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b968c1db-95d8-48b0-866e-dace314356d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d616bea2-a8d4-4801-99c9-fb4c0f43dc37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6b2d2c2-aee6-4c85-b06a-ba23b48ab793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07a0b18-fbf7-4367-b9cf-47b2f13dcfcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2940891-b734-4c4a-8d73-20bd883d1f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c667fa8b-a104-4311-8dc2-dd82b60986b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b50fb76-b5d8-4c47-9aed-0dbf1bea1350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a3cc8de-cbff-40ec-a493-17a75966840f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c80cb179-5e3f-40de-b980-515f492cd80f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccbd6920-cc36-4eac-a49b-fe2656c21eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e811cdb0-66f0-4c99-a0eb-61059e5a41c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--101de2cd-0aa3-4e4a-b36d-d4cb621aa767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c397de4f-e5b6-424c-8bcd-943fc73f9e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c2227e1-1e01-4e6f-b426-18160c205e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2badff-db38-4659-8722-25d5dfab361e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c3857d-f65c-4ddd-b664-39584ec1ddc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34b00da5-9fa0-48e3-b880-cf27a359c31f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab8e81d-64fc-424c-8366-e7c0856661c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5748dbc-faee-4101-9005-2f622ff6d7a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d26db2-06ce-4954-ad4c-af48927c5706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e74b735-9b4d-4c7c-a8a1-c5e749452b4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d76e0321-6465-4e24-b0de-385c4b85c616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c9d657-ba95-4997-9c41-9b6204ab48d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d8c3d7-446d-48b8-a10e-a4568dfd49f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56120603-aa53-4b09-8526-54443ce8c08b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--645d6665-b591-4884-b86f-43be3cb46599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1cc2b7a-e7de-42bd-a7e9-de9b8fb6322a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2578c26-2575-4bda-8a63-83b80cd3a2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d8950e7-b37f-43a2-a46c-66b21ce51495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64a9f9a-53b5-458d-833a-f3f1d2b0b47c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de3a218-9485-44bd-afe3-9e5c25f9a92c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae09111-e50e-4343-8475-a97b90edcb0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dba70066-6636-4fa2-9a13-fcabe7e47dbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--653b3bd6-a399-42aa-a416-2054cad09000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7844c55e-85a2-46ec-bd91-2d513b849b52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--881b0daf-7a77-456f-a12b-51181eb19b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--174ca728-7457-452a-87b2-ae0c945efae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf9430c-4387-4d7b-9065-6aace3648510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2038bc37-3573-4e61-82f5-6d4e03e4d817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9024968f-0ba1-4321-af29-f41f3e4a01d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb4da2b1-314e-4962-843c-bd0adcc60ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44925c77-137a-488d-ac38-42da3bd68cfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04da65e-a097-4240-ab79-f1f3aab158dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91b73aa7-82bd-44b7-9755-59862146c108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e6d4695-604b-4550-8747-0b64e3b1969e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e7d363b-e24f-4384-93ba-f2e1d31a086b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6292c93c-9819-49c6-9a9a-2eb7adb53ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b994bb-d10c-4331-9e94-bd6f25248ad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef05644-cf30-4786-97f3-3b540d7271d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--288d0f2a-fa72-42c6-9280-fa1052970dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cafaa570-1995-4fa7-9716-4c9692fdaa7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4737a14b-d066-4c32-89e5-75c76c9d18da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71da1711-b301-49d4-8bed-69019fc92e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab337a2-8ef3-408b-966d-b48fcfc99cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d9f9c0a-e8a7-46b7-82e6-85e9f1930035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df53a939-c71e-4858-8657-593c7a3db632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef2786ee-c5eb-420f-a521-a005b9d69653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--013b040a-1eca-48e4-9737-1ca46595d8a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3055d9c-4caf-47d4-aaff-d850b4119225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d5aac5a-3be6-452b-bf90-591c8029e7e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f67d6e-925a-4f3f-9d32-dc9647520f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c3f5d4a-76ef-449d-8e4f-235e18765bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.199.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45475302-b81c-4743-8528-f0165400b386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c854c13-9428-46dc-ad0f-29a1cab8fd1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfed7220-58da-47a7-8291-c9a9947c59a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c35fbd-24f7-45a9-8e0d-78c8c512a613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc04ad6-ed45-4cb8-a59f-0ee8020e8301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d84ec9-99ad-40ba-abd4-e6a5a807850a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82ac60f7-90ef-400c-984e-0f63ae61bc73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4640477-d610-42b9-8042-db88fed62bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42bcbb1f-0839-4781-a072-497c9bb54638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--379184c8-30ef-4316-af18-09b484ce1a9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b223f22-a150-4a41-8c6d-c5997fddf0dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8de0e0e-9038-4d8d-acad-c7b9a5b03e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0242fc24-c3c9-4262-928b-f2b5c214c4a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d5c59e-56f5-48a3-8baf-4412cdb2a90f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c169c2ab-6f02-41d9-adad-31bc63c8c634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99cc288d-208d-4f5c-8e18-725589d33ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1defc742-d648-4abd-8f63-47fcd3cfb80c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4182d517-e6c7-4bdd-97de-f2df80c01b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae8594a-670e-4e40-a53c-0a4d4ab01740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--564a2949-11bb-47a2-ad54-8eac6f9a1d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1740da66-75cf-420f-8ea5-436d46ef36ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ad359c-7c69-4d3f-b4b6-5f80740d3939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf17c9a-4f0b-4b21-90e9-1d2d5f743626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--536ceea9-7f18-4c0c-8a09-ef78d2757a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa60f603-400a-44cd-a2e7-25fa8b1a0a0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b4a39b5-df55-42c1-b750-680c1c427ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5290a892-25a4-4159-a9d8-e0a22ee76b44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d9111bb-d6b8-4aac-8a80-6e39d8622a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b88426a0-4899-446b-921f-a677c80ee32e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1d3c27-9214-41ce-97ff-5a16d7193df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf7c726-ae97-423c-9789-202e43211d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--080e0539-31e6-4f42-9f9f-687b01423255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ccd28b7-0a7e-4223-a978-7376e5282817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907dee0a-90ae-4d61-95d1-6a759b8c2f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f4840b-cb2e-4aa3-82fa-ce94988c42e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500ba4b4-5a0f-432f-81f5-09debcca30d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07dc35dd-0d83-4aa5-8056-50a69fd72f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c52acd-2b15-4564-872a-fbc667067f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb92655c-7cac-434a-95a3-0d362109c2b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f13dcfa1-a1a3-4147-8892-c5560910fb95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed7f78a-7068-4344-ac87-cd70c33892b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d430b63-b86c-44b1-a764-7ba14735e860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49723379-ad91-4b76-84e0-403d27779e0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49bf7427-3bdf-4bb6-8fcb-96b8982e3398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e84a542a-72bc-4d58-b906-ada825ef1006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dee346c-2869-430b-b60a-3b2c8017c89d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16581e75-8f56-4427-aa7d-9c62dcd88a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5086bf7f-1be0-43ae-8ccd-ae615de4dacd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbfc7102-b9bd-4b5a-b10d-612bee8a4fad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--836842a9-55a2-491e-a056-e7100e2cc03d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c5c0c4-e3f7-4285-a289-10e0d27cab3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d118b1b7-8961-479c-a703-d4b03c13d10e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44846b37-ff97-40a2-abfa-5433e1979546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ec0246-c767-4690-9dc7-d9f11a443775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92934f72-1a63-45e6-907b-84ae933f421e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c7a473-3c59-46f6-b5f7-cffb0e849c31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--344e3849-5a90-4c76-be43-2ad230cd38bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6093c2c0-fc53-4c94-81cb-77b093273a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc60880e-ff00-4ea6-92a6-8bee65ae0a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6205dc8-5ca4-4ee1-98f5-96297fd14c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ed254e-3e20-4fec-ae49-9335e30993ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--245346d8-cbbf-425c-af9d-fbaa58ce90ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f76a4b-a2f4-47cb-8893-4d2fc8b9ad5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--471511a8-2bdf-4718-845b-2fa572b67919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5663cb0-8a52-42b6-9ceb-090eb87872f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc2d16a6-fd14-40c7-928d-c0f697fe3247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8ce18f-dcf1-40f2-a119-18c6d6d03d3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2d8e5e-1d06-4bda-8003-759f916a47e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d805a9-105e-4224-b8e5-d3b67ced1cd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af9b87c3-4dba-4303-8c23-615e721e731a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd3e741-1672-4ec9-90a0-57c80345e058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b58e506-184a-4bf1-9e86-5f0d0e11c455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2eb8a2-09c3-45c2-af25-63061c742018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fba03ee9-724a-42ae-871f-75d78c0e737e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8092363a-f949-467d-b6b6-be71e38594a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be9f10d-f453-442f-a25a-f793fec1f546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4533e642-1ea2-4736-9513-c7ed4b68fa84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--031454e0-c6e4-42d9-b517-5a78078c1376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--188a1da8-d9b3-4a52-be56-b3def35afb2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f6f8b77-84a2-4c94-abc5-dafd1f4a5140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3caf1c4f-6d77-4c3d-8674-ab0ece77c768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b1a9aa-0b46-4b12-8faf-6cc717e63e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1db245-c319-4f93-bfbd-3a87bd0755e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503b32e7-340b-4e3c-a90b-ca6a7c986dab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--821e2ca0-e015-4e1e-a415-d1ca0668be22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a42da0eb-ddc2-4888-a5de-48b644413447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9110eade-17f3-455b-8652-644c05a109b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff63bca6-b3b8-41de-aff6-ba3588afba63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af17509f-c173-47f4-a703-32c283bbd45a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b619c943-a5e9-4fbd-8f50-7f613eab4af9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62fc6218-cf5a-4661-a09a-38609eea68d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f42a94d-fe21-46f2-9bab-213d832b034c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e0f327-9f54-4ef7-8908-0842d8444832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a00d796-9d22-43c3-97ce-5c68ff17d3d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--514b4340-071f-4a38-a7f1-ae6b20fd135c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842ea1f5-cbd1-4afe-8fb3-5bb7c2bac0cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--736eca34-a487-4a93-9a72-078c6824d0f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7127a9a5-239b-40ef-99b1-c54d84a69ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1cfd062-bcb8-44fd-bfa2-1b24d9abaee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b37a34-b184-4e05-a87c-370b0de57fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b861f0-1492-4bc5-aadf-efd7b8758097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d41e43-8b68-4833-8e70-ebd9468ed6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f00bd97-362d-46e4-8217-cc1f5b9fc00a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e38841-51f5-4603-8a04-f3718eaca1a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d965469e-bef4-4228-bfc3-f09a35f82f23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b49e99b-f4cb-4c72-8aa4-c197f8f11fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--958621eb-6039-47d9-a17c-cb9426679a23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d07622-92ea-4238-9375-bb50a180a365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f39a64f-8caf-4fc4-89d5-a4d813c3a7c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab8b428-5014-4589-be1e-663042858b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d5d8716-464f-4d81-bc6b-ebccd878548b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91701bd9-9a0e-44f5-bd89-42899cdcfc20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b9846f-38e7-4c84-b69c-de30bab328c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0fd4b37-d0b0-4eed-abb0-c8f7091216ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae829db-23b3-4d74-861c-7bca5ffad705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--571e1b31-7135-4a75-abd6-b70532ca61aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e85fb8-a713-4d24-905e-276eee45cba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a5139a-5fa2-4a20-a5ec-279468626d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c500bc0d-2156-4fb2-b99f-bf1b672689e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a4d3771-c080-47ab-9c6c-106305ab0790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--619fd685-fd7e-4771-9b68-bb4ae6ee876e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--609426b8-6d6a-4095-adb6-c02d1b096bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a466633c-4a88-4ead-9a5b-bf77992f2946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b349755-fa90-4025-a914-a769a33f6911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb63329-ba80-4c24-96a6-5f3d8026b25a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3786b9f0-800f-460f-8aec-535ceff30824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22dd6f72-8e19-4410-9bc2-0007afac0a1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf987bff-5dd0-49a8-a0b3-269cd61fa940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--020a6dd2-a7ce-4b8d-8d57-77946572352e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da7b5640-f943-4baf-9efe-d7e915c06f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00acd522-1733-4716-9345-4c2e2b5eb46f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8032b9-9ed7-461f-89d1-31b70e1b82a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d485cbf-123c-4e55-bc5e-228a5d3e3899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff966c6b-76bd-48a1-b891-c5702975c003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5c4979-b220-42e7-a3c0-53d73725b016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e149c49-c349-4824-a708-83ec63248a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656de02a-7a23-4311-a0e6-e977502e6e41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--491e9590-e057-4d0b-b2f4-cbf9f9c89d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4049cc32-9817-4ff8-a113-4a7d8e9eb5a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce5bd97b-cc03-4760-875b-99e3ba5c3354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2fc532-df98-4981-b779-ef28793499fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4bf8cd6-df1f-476c-8df5-02688f97bf40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d39f9f4-82a4-41bb-b268-36a0a396c3c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c3dec5d-2f88-4e2a-be0c-b9faa733e008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f90e188-8b5a-4dc1-8381-30e938b260af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e813d160-b00e-4159-90dd-cd8936ddc2ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f437a3-30d7-4cdf-8aeb-586f7be5c3dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1476718c-a8bf-4604-98f3-5a9382144ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a3a745-cd40-49b5-98de-1904ed90ba58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--091d767b-9410-4434-9fc3-70b9e9876829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b87318-be43-47ab-a357-d1f4e25a5ab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9cd7a38-95c9-4333-8caa-ca225ad83667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38f75a62-4ab9-4f18-8b69-540eb428d6e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3adbac4-53e2-49dc-97a4-9caa1cb9ca65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ef88fe-dd56-4fb3-833e-fe7fbbf68f4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cbe030f-ada7-4b41-a6ae-6da871f87928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf2e05b-db18-4c76-b87d-1767945d5c70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e67b6b6-3127-49f9-9add-a982a6a0f3c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f33381-e971-4cc9-82fe-86f16f6dbbbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f38180-f0af-459c-a2f9-a0f72fdfd5f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2f53e3-0e07-462b-ad06-44ff3745fb57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adffd8f2-6ac3-4104-ad59-7bf57ca5138e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47bc5fab-8e35-4474-9fe8-58ce0b4313db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c35cb0-2185-445e-8e3d-520f36228ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2ef188-6b57-4647-9561-ea7f0e74092d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb8eb80-09e7-4920-a05c-e9943121e2f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42b90ed-ec34-4ff7-8cae-f8f8d168ff38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af4b249-e1dd-4159-9294-0dd4e9bc325b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c898d3c0-97fb-40f5-8fe0-d82ba16352b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f941d62-f25d-445e-8c9b-14bd95b50ad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad42039-8ee7-4f3d-bf90-11438abb695b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8bb372-0368-4077-b0b9-72f8079dae9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c58c99-8e02-49b5-9143-e9ff2ed18cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e85606a-5709-4184-8392-870006be2e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6442a5e-ad17-4d15-bf28-feb713a443c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80019814-faad-4547-8aed-0e90c657a734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0b9631-0194-4f1c-9232-995be2c5b570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b2d7fcf-949f-4bd0-a377-307a3644d9ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d375e7d9-2f78-4c3a-aeb0-2ac27a863e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe54099b-9dad-401f-b180-088c38af4aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3fcf3c5-08d3-4046-86e1-435676b3345a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--046e196f-da93-4d70-a35b-9089a4884ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ca5fbc-6e43-461e-a1d4-564971466b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--742cbc04-7f90-4547-ac4c-2cd8765e2174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a66c2d-f4f8-4019-a78a-ab59705153e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ed5e8e-fcd6-4174-acae-fbef1bf7bb55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bfa6ad4-a0e6-4cf7-908a-7c36d39553d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15bf7cb1-05d9-4e03-8fd3-81bfbb5e101e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73f7580e-f727-4a8b-9967-5cdc811e2480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c88f102f-f58b-4cd2-9d5c-0550fdd04792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a39b85e1-a1c1-446c-ae79-393d728043fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7a89b1-a3bf-4558-9d01-59735f023fe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56efefcd-f73b-44ff-a35d-5118b1dcafa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a4fef6-2f99-4f7b-816c-70137e53e11d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e2561b-c190-4dd4-9e05-be00be1c1bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd2e892-b8e2-4cc4-8d59-2d31799d0cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1bff81-5d05-4754-888d-886cdb4f9d22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5afa800d-8f3d-4cf8-b434-06bdf35705c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff219a0-7ed9-4705-8d2f-2cd8478cc7ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1305a6af-8f99-4570-b37f-e2d81a0d0446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--742f8720-3ed2-4344-bf50-58f1204c28f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--762bd119-28a7-4037-94f5-342341fc3ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe428613-8f75-4428-b580-ca7de5e70ca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7831117-8c39-407b-82b3-4a3e749128ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb4c0a4-0dab-486f-9774-5197d1c84d7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021caf4e-191a-44bb-bbdc-172aa47fab60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f83331-754d-416b-bb44-d62ce004751a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9bfc01b-7359-420f-b725-1caf877c1152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d0c5e8-a228-4a5c-b459-b1ef41ccfbe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.204.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dbd8ed1-6b56-4e98-9a22-307ce131d243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04152ff9-f350-4536-a679-973690027629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a2614fa-7b31-499f-a060-af67eb9b63ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb6f7a03-da60-4298-85c0-f4802002bbe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05cc0d3-1bba-4f8e-860a-091523facf9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc4e85b-a2c8-4bad-ba02-5dbc914c1c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d47a943-fcb9-4b64-9a46-c3c3e050093e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c94f3f13-0fc6-43fa-bb92-86ea3d0c0c7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd32380-1d58-4636-9e94-46c1c2513fc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c87f4d72-2b05-4c71-a512-43693a88b92e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a565692c-d7b8-4c47-a703-d99dcdfc126c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf3c0df-1f6a-4aa5-926c-97ae2f11cc54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71633ff4-b3e9-4f10-9175-a676d90a57bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b9dc9c0-cb8f-45a9-aeeb-14a32efc5f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb9066b-cd21-4317-b961-daa09e144dd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae761138-d5d1-44c3-843d-940758196a65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75c56a62-a70c-4ba4-a970-c82f4883d3e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb59725a-f6f5-48ea-b050-3fef3d4a5eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe731f0e-607f-47e4-bf5c-2c35f7802de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa0f5869-88ec-4453-8cfc-f2bce720de1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d3f03c-688b-4c9b-9964-bb9ff6e70c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c065f0-7707-4faa-a8e7-b5de63917469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe5ff66-28ea-4f73-aef4-cbb29bbe7e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc98fd3a-05c9-438f-80ed-d15386420b78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1250cf38-38d9-43c5-9652-7d8931f68043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34371622-851b-4cd9-84ad-ebf8a70091eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce3807ad-de9a-4f7c-819c-8bfe43b9683a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f23400b3-79be-4e27-b577-55c14eb66d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64879795-cf53-44a2-b042-514876e3ea22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a29dac38-8b15-4f01-9985-8bc117002b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f05058a-002d-4c1c-9dd5-6b25a53486c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc81cc20-f667-4d86-992d-0a2f715fb299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c316b1b-4138-4a42-8ffd-1403d2e6696e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c94ab6-8721-43b7-91a5-e4b733a5a2b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f090bcd-d79b-4480-bee2-f3a3eaee1d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac3739e-0f38-48a1-b0a7-b287a8156e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fbb4300-a758-475f-939a-2cd0c7ee9509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e13055a-d26b-4c02-b3ba-4b5f13dc5802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49a62b4c-932c-4f79-af0b-fd38b2d1e77c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ba6764-348b-4dc3-9a31-bafd91fdc3ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e36d046f-d3ee-4cac-beca-f3c2ce7e2c9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5722b3ca-45ba-4312-bc3c-db8a6b1a3dc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--296c6c76-9ffd-40e4-b2f8-0bd81e4de383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78eb580b-e954-47c9-b98c-4679391fc792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f2068d-ae30-4bc8-8f6a-12c379d4cb66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf3fb4f-6a56-4c2d-a8bf-63e9926e8b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4b619d-8f81-4c9f-9b62-7db84a2d5d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27999a09-23d1-49a1-93d8-0082ba7bce6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d83f50c-943a-43fb-9256-f9b1d73d2a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69f223f-21f7-44c7-81af-f05d20541b61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49aa1cce-6d7d-4514-9110-d402bdaca1d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14436eeb-d354-45c9-9e70-a13f6a5ea8e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73870c89-4da5-43f0-a6ab-9db0454a1fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6172e2a-fcbb-444b-9e54-943a371ee20f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec27830d-1bc0-4400-b1a3-d1bdcd5ae65d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b08e8e2-4c53-424c-b327-0d12a7088881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27124bb2-d68e-4301-9bae-9a27f05e5493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c680332-7b94-4982-8127-292d74ae7a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e934c462-8d21-4559-999a-129c4153704f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a1b4cb-d558-4be8-9979-542fb3ff86d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97170ec-169f-4e8e-aed3-cfad8c496bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615bf66c-d32c-4514-837a-f9e49993b7bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96462d32-fc4d-4dde-ad4a-59fb8682f3a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2365c403-9490-4d23-a07e-d09f88401a16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76632d28-9fe2-49a1-b87c-3e1eff675711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bbf3413-76db-48a3-8cbf-ff82348f2f96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54441d7d-a326-4385-bfcd-7a11c27cd621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d433f5de-471f-45f8-ac2c-1383d74c1773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f375cf3e-d62c-4c8b-beda-6056c3586891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae8665dd-c100-4e33-b11e-cc015a776eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaed30b7-c132-4db3-8ab2-a948164882ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f6374b-3425-49e9-b118-e3b8aceb6f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81b496b4-1082-448a-8a53-5da2661bbcab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72353740-e6e5-4f1d-b78e-b5dea22afd98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a31383-3553-4a4f-b00f-de2bd6e75dfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f251d2-d872-4dfa-9b63-6d72d529b8f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58bc3a91-b07e-43cc-84ad-49349ba16687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab07b285-761f-4df0-ae8a-535cd1067e96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a1838f-1e9a-4aac-ba74-850de0150d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4294c4a-259f-4cc9-b68e-e1a2c3e2c910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--750548b8-4fb8-4bc5-9cc4-0bd9266cb7e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541529c1-342b-4620-aa47-a9143463b3c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b39836-3867-4f35-a371-14a5bcd248bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ebd5f1-20de-4899-8eef-97de5baad52a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--795d5c2b-819d-440a-8b49-d3a26c9c495c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc46f2f8-9569-4629-960a-382db940b1fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054ae3a0-bfc4-4772-8b2a-974aa3b7f0f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64caf558-4dfb-4fc1-bb29-e199b518d01b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199e00b3-3302-4e82-87d8-51e6f0e5e5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe41e26-1e84-405d-97f4-1d1e65b542a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f966506-2e96-46ce-8c9b-caa1b0a1cbb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7270140-4ff6-41f3-9853-63198ed3ca7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1dbcd15-b28f-4a97-acf8-14c361aaf5ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b180160-b5fb-4280-a1a8-d12addfcde5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332d0994-4765-4682-95a3-6dee619d41c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3414d8de-f60f-4b16-8a95-9e7afcde73f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d81f0c-ddda-4d7c-8224-68992d9f1c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a8588d-68f6-49e9-ab10-f03bd3023602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6debee95-a621-4f96-9eab-ec1592f00114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c434533-c462-4175-b748-79df75f1a4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--862ad3b0-9fb8-4976-a722-e1f8f2cc27bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23861467-dd6d-424f-a8c4-432f68d3d05a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f4fdfe1-a2c8-4f79-85c4-1b0ca74778dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69cc90db-0b51-4faf-9fb5-b462487ec53a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041ae89f-1eca-4ba3-9283-8068a74084af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26ebebfc-37ad-47b2-9398-5fbc8324e167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f560f1ce-2563-4ecf-85fa-410957e65f67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e600204-ca69-4b84-9b88-e3b46bfcb746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f37b4e19-d69e-4aec-b1d7-2d1b991aa01f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29aa8d82-7ba6-40b8-ae0b-f5e8b11c4660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--555f7f9a-ea3d-44e5-89ec-b34e80002271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2feabbec-386e-4077-887a-6bc930920306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a41bb41-4655-4522-bf64-9e435dff5022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62fb864a-7b12-4cf9-a170-750b2eb178a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08565895-5f54-4c89-acb3-184edf7aa0be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83fe2949-56ba-4803-afad-3e657fc70562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69617857-4c58-4c75-905c-fac550301603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82456fb5-d48a-4ba7-aabc-e7e292b02d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--826fc847-fb83-4866-95be-7cfcdca53052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60120d30-4bf7-4af4-8e02-3033a0ac6403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287af586-c333-453b-a4e7-348a6f7f2c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25511e60-e0ce-4d35-9673-a685c39bbd0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c022f7b6-8fbe-4a0e-bb92-5a2a417f432d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab48ee60-3588-4aa8-a5e7-d9b0f97c030d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da434134-6dcb-4857-9b4a-aa10f3a4c11b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce97720-c4a3-4eb5-a2d7-e646b3074cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7112f232-efbe-4718-9621-843712643ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e97deb56-43c8-4286-b59e-83a9d4b0c787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3f9c76-4111-461f-b297-6e1224198270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ea8b93-c9e1-428a-a910-41383b1029cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26415849-7549-4001-900c-b9ba5a1af374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b12a80-c724-4585-b978-39edc1f98f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32379b85-a2b4-420e-80ff-647f1d14989c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d08a47-42ed-43da-b609-a81adb01fe5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396a37fd-13ba-4676-87d2-228ed30b7c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e87825-c6de-4fe2-a6ac-d1917e8bd593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4737bb7f-691a-4fdc-a0c9-b000a1e16e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ce1b35-1a79-4914-a075-b852452db5ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--388dbe3c-d115-46cf-aa9c-f0a962d46d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9cb5a1e-5d09-44fc-b01c-1cf0cc4cc4ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b83b1642-1f42-4807-a5c4-e70dda264090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a8554c8-a8e7-4ca0-b57f-5ef4c59512c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b02133e-fd1c-4053-bdcf-dfddc8ba6d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39984e55-f177-448a-a918-98735541e04d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc3329f-1716-4ce8-bda0-5280fea99adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa248d56-5517-4a4e-a33c-a2ecdbfa11ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4d0207-9a50-4240-9a76-877b2d4e0e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be8e94c9-ee6f-4050-a792-1681bbc83210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6558440-a69e-40bb-bbe7-370cedde3352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81369ee6-9526-430a-87d8-61d24ff619f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ef502c-cf3d-4a76-ab08-9b3029adcd6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218a610d-cd8f-45ea-acf6-67a03a363da1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a53b26-3c80-4ebf-96b2-64d3ea229405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56b4dad-c38b-4ba1-8cd4-857d854dcc14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed76f63d-a1c4-4123-b0c3-ca4f05d28683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07e1a29-f1f5-49cf-9741-9ba367dea9bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a4484e8-dbba-4a41-b608-291a218509d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ceac16e-5a78-4384-aa03-8310b1a90b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db95875-17ca-4c42-942f-fd8cb947dbc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d6293c5-667b-438b-a93f-964a2eda7d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01353f81-6965-4536-b6a3-f3974acb8532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1142bda-af87-4ce5-bc9f-cf5590b2f69f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee77fab7-7130-4059-b780-44df90902f1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4971d0d-7b41-425c-9734-27bdbb7937b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78099788-e2f4-426c-9cca-405eefabfc57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd3630f5-0686-47ba-be1c-eab1feb4b5fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7168af1f-298a-4d52-b550-fb69dbc3554d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--846b40f1-2c46-467d-976c-7af05565b75d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9fd70c8-0225-429f-b61f-6e9108f23d1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--461b5d2d-b062-49e9-b4cc-3d998f27742c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f84196a7-a5d2-4878-82fe-a2f6e22f8bbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a30ee1dd-849e-4c7c-af1c-e18d6d3c560d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01190cae-07d5-4334-a471-4c56a226a3f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeeae814-8329-49de-8407-836a55ff9d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830085f0-f2c3-4c7f-9097-d334fec0b4ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a2ecb35-afe6-4f52-8438-8b40d8a415b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71536dd2-ed69-4c0f-9abf-27b10f68124b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3632413-ca2e-4265-b17c-8ec15aafa40b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7844d1fb-d035-4abb-825d-3d011871ea86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c72537d-4d0a-44ca-a4b9-fcba9ef55649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b0cf2e-39c8-4676-9252-cf6a477d9834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0071617-a830-4b2a-9b1c-64c736dc8ae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb87c11b-d859-4613-83cb-bd436fbf3132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad54e63-c1f9-46f9-b554-731217a7853e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f7df0b3-36c8-44c4-b296-6cbcc2a73959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b17a445-c2a4-406b-bccc-2f8cd9c84393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde4c1f2-47b2-4192-85ed-0da6f435eb56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ea320c-a361-4afb-bbf8-32645d81af42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32015cfd-2def-4a43-9b83-6963d3cb9f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba2c4452-cb13-43c7-bac8-ae87f44a75d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c12b6e-5639-4e0a-8784-18ce2c06fbd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f76464e-4aa1-4ab3-bbdc-a1853fe2aa17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85aace1d-8e73-44ec-a0e5-2bee6d65c0a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aff3dcf-b32c-44ed-abd5-a170d10fef96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10116ab5-5898-49c8-820b-0e623e185481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faeb3b7b-9bea-4762-87c5-9804fecb0d30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--926682fd-1174-474f-9947-a594e2b0ec71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2afb1a3a-5503-46e1-a23d-82f16c2a4f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92cd7786-8a5a-4a16-9231-63468502062a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47eba605-e290-4d1c-b94d-d8cdfd6a28c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38bd8772-131f-4633-b69e-53a786b3611f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99395bbf-b983-474d-8df8-2e1123c9167e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--641d629f-86e4-4775-9f8a-28765e665222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3308d558-123c-4d59-b912-af03f41cb951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85725f8e-291e-47cd-8c46-8f07ea2cec8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--905f364d-096f-415a-8021-7d3b5728cef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84377351-f8e4-49c2-b42d-51471fb43bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a30d9e06-cb16-43b9-9655-e6e5602dc86d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.205.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca54c2c9-292f-4956-87a3-adcecc9b79f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3958167-1459-42b4-a05d-27ee065ad7bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd1d75c-4bae-478c-bced-b1157a6459a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--534e7fea-ff32-4b0f-9397-476e27afd865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a6f8fcf-fe41-428a-8634-57883d592900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe0eb33-83a7-403a-bd85-d0e74965d97c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e82fdb1-baff-4088-a0ed-d0012c5455fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbcf6173-2363-4bc6-bdf6-a19030ad53bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fac8691-1506-44a2-bca9-8af305ae20e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e0577c-c476-4e68-ba0a-6fd98fd602b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28362f7-165b-4dde-8b13-34f4b66b0eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--575fa730-4a8d-4024-9404-ab4992d86a5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9f2b55-ab80-47a7-a09d-7019ca1f60fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f79858e-d107-49b5-81c2-830e1ee8d7a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107a27fe-f402-4e34-9670-5cd504d01c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d32e4e-3a4b-4a64-90c2-a914db52d850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9fa2d34-d9f3-4790-a8fc-83eafc0fd3f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd291146-3dcd-4b70-a237-b5b7a20ad253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2d2477-7331-462b-9ba1-d75717f7d979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf3e2c3-3d9f-4511-9421-4b08e308d9bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d0ad36-fa3a-4749-a2c2-e3fdf2e0a51b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4222a861-bd56-4e65-8717-57c788a7f246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66fe78d7-85b3-4d1b-aa35-3a0060bf9ab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3685e3-9837-47bb-bf5d-6c892f41aa24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--044c5d39-df4d-4989-9a56-8aa4ac6afe22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c8faa4-e027-4299-89ea-365f6551a801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b3c344f-ad17-446e-a959-7c59095f6e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a482c718-3491-4085-a55f-ec678a7c570d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868a0757-6dd0-40f6-8d3a-f9a82d371daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7e5844-603f-431b-a0df-8d2f303bae15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f8d5ce-46b1-4b22-95c6-0ab4b7f8690b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb89c454-598c-4327-98a7-c742d17ca57e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f7ca88-3a07-445d-a7e1-1d00f25ca06f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1592ee4b-daba-4531-9b82-a39d93555537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a50ff85a-ea56-479a-829a-be9c08b54ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f3b544a-cae4-4fe6-9e0b-75cd835c4c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642cdcaa-ec82-41df-b0d8-c66e8c117010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f1786ef-d749-4c6a-8132-a61fb8ac048f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7047871-467c-482d-bd24-8c413e845aca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a730f67b-6073-431a-a8e2-91bc6e98941b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ea9773-43d3-4d63-b2ba-7b43a32b736e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c49116-5fda-459d-be7b-6bb280ed80cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05031b4-40d4-4bba-a208-e944d9f26dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc52560-e441-4455-9bda-1a26048f1a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc1aa2a-2361-4ff3-b643-751963ede5ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d141087c-0508-406f-bc76-46c363ac66fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af089c4f-18ca-4870-8dab-28833cbbf2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd33ca4b-22e9-4e96-b28f-cb5fb7ce2745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ecef088-a467-45f9-a8b1-006911130624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0514cc2-8164-4813-840c-9a74824aae27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc57979-cd7b-4bc0-80fa-04005ac15418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc32820-19e3-4b08-9fc7-c94c0f06af66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f00d022-ac8e-4c07-a2ea-b21f7ab08985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f762e1e-89ee-4bab-9ceb-b9a6438df74e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2dd5485-cb23-4b86-bf46-39e8e739544e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d13f44-dd6d-45bd-8d09-b81b602584dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5c9519-4ac2-47e1-9335-17b87e78a17e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2287cd-0f47-47d3-9376-43bf09ec4235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c25b2cf0-72d1-48cf-b94a-d1d919b1e172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2a1d4e-de53-483a-b054-15f1a86f8c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b176cfd4-e6eb-4eec-83b3-2cba8e835b14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc059d65-a0ef-4d3f-9016-699b73aad147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d4aab0-4806-4ef6-a001-ef718fedc75b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ab0839-31a8-4813-a05a-55e22b2db998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edae0f4d-37bc-4279-8afc-0899ef3d651c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3cb17a4-c98e-40c2-b7a0-f216cd37b07d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683e46db-cbc6-43d9-9e82-01ef97a1a47c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d609b567-b953-4200-a4df-e38455e81010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f5d991-a3e8-472b-a5e1-0bbe99e5c9c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d66172c-c48a-4dfd-ad89-1a59b83decb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2234d69c-436e-439c-8e9d-d79b74c75cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb89402-b166-4f01-9b01-c5b814da6330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d05076-69da-41d4-9f50-98d6068e7630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc60185f-ef4b-4eaa-90c0-b52a3bbed549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf1dc385-3bf3-4a27-b26b-2ea85b7a0820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a335703-8031-4f5a-8397-09d255c98089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28af628b-48ff-4385-b225-874af134c855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2850857d-351f-4936-9e0a-5eb4a5174223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c741972-10a5-4019-b354-95ed9a0a2efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57ec3b81-33d0-4928-8f91-6914feff69e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d328b56-bf9c-492d-9621-5f68635448e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e6951e-6ea2-47a8-862f-024b57384429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04a5b1e-b9d7-42e5-808c-929990c2bd4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29db4f24-4e27-463c-83df-8a0944a4e2b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--238dbd75-2aca-41b9-b134-998bf3cdf588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e16cc462-9bb0-49f1-a19d-ca2891b6660b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d773f39-d5ea-4bcb-b3a6-a2695728aabc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e148f5a-2228-4b47-ba3c-41d93de37957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb63bf7b-26da-4ded-b95b-3932650f8f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--037ba74e-f338-4ebe-b806-619c5a4211dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf7c482-ab75-4e14-a68a-3635c8f597df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b714d70c-def8-4ace-ad96-4a43c4af2d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c82f4b2-4b97-4400-a26f-3e86ec590571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b8aba7-b89a-42b2-91b4-c0c15bbfddc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa18df9-bacd-468c-8fd6-b6c0ff268f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2894a4fb-d0bc-4b8d-8333-710d700bdbe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--427dcba7-659b-4b33-9951-ede28541aba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b363a00-531e-4a7e-8359-d38825ab3219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f9bb4f-021b-40f5-819d-12672386e747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb9a957-ea29-4f5d-a840-c93e0380b5ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd82e15f-9bf3-44e5-9c19-9c608baecc7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52044b6d-627e-4db6-8f45-26280db04991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a807cc-8925-40d7-9d16-ace9680c8ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a77e0d02-6295-4a1a-82b7-136f11b3331b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f027b77-e259-4026-80b5-5fd68b43bd5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77064fb6-d1ba-4a28-a869-ab6036335f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ce34b6-16fa-481d-a7cd-241d0bc55fd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1825b468-93a5-49a3-b10f-5cc52c98081f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fab2c4b-a6a4-47d8-a08c-f33f1c18a269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26b7a2e-395e-41ea-a559-eb837ec9b06d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500fc890-b303-4462-a161-05130fb7eb72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01bfab8b-5766-41d2-960f-7b3a03d28414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64917df3-603d-466b-a2e4-1f2fbbc79b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6394dc63-6903-4682-bd77-b1c252439c1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e2cca4-84e1-49e4-86cd-73061e5aaf3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086bd4a7-64ce-4988-99c2-db6481c92892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d10852-5d42-4653-a604-b9dd3aa938c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1276aba3-5820-49ac-87cb-72b8fd4e2a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c670d4e-6b45-46ca-8acf-0b663f513a74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75444648-ce7b-4dad-9dbc-dce6957b6921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae50c6ed-ffb1-464c-8ba1-0fceff256ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c751301-9c3e-4cf3-b2dd-07cf6aa1c9da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5014af7f-95d7-483f-a605-d4eb4381a3ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e3c746-c653-4354-bd4b-9f93cd62ffaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce7d41fe-46d3-4fcb-a8e9-7664309772be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da0214b2-f083-43af-9d47-a6cf94ad71bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f98a9169-56a6-4c35-87d4-df38937107af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96821c1-fd51-4bba-a46e-0361bfcdeb0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244c579a-810e-436b-936a-50039c3cc5a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad6f7dc-e157-45b2-a226-48e22ceef24d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e108c37c-47a5-42d2-bc02-a494a65f4f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb933d7-ff56-4779-a6ee-0c90768b777b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb040d5-c207-4806-a1c4-83f1d65d17b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d2eef58-2a91-4494-b298-1a018466045d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19f4988-6975-49cb-8a8d-8cbd0bcfcda8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f0acae-4c13-4eb0-babc-78af379bf70d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe2bf43-d9c2-44de-ba18-952f355c3f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a726a0e-f6da-4bfe-aea3-7d045a42b4cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e72c337e-de71-4009-b4f7-05d750fd6d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611f053a-f677-4e6e-ae5b-14eddfb14cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36ea4bbb-88da-44b4-a581-0632da24e3d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3f1579-0988-46c0-ab54-0fa978744bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b805d31c-0ae2-42a3-8539-a6ddf9489827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b45e136a-235d-49b1-8125-3a4f00b0df54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c2df2a-718f-4ef7-abec-cba4a19938aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4650e92-ad5c-4fd1-9aed-1a1fc0c00290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e938b52-9823-4ce8-bd7e-2b5c6bc0277b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d3dc0a-ac4e-4b0e-8c5f-025f90f245bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02588e2-5187-4830-85db-bfcc0a2c8993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f64df87-a4d0-4efe-8ca1-aea5b875bf22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c69ced38-e46e-4619-baae-5c3c74e5d53b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b2f91ac-0784-49e6-b4b1-8c7988a1ce05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74fb518-89da-489e-a943-14adf3eeb93e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353ed3c6-0dd1-417d-af73-7e0f19dfbdd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103e113f-57c7-4e19-bf23-5c3f4a791345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df5a8b7a-7e68-49fb-a073-6840de3d1c7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c18adac9-8f23-491f-8d9b-deb0415bb4a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c8000f-f541-449a-adf5-310549d9fccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107651ff-10e1-4bd2-9452-3aaeb6daf137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65febb98-c8bd-4c93-be39-1ba72559aaeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17091fca-c96b-4b8b-a075-b965ecb235de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85abec6-7c42-400f-b863-aee2a4dde14a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bec17fc-084f-40a5-8ed9-16a182d67626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--450a457b-5605-4f26-8fef-4c7d1d45e471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55401cfe-f2a0-4e49-9fb2-7121c948ad33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c52933c-c58c-4e33-93ef-7f36cc9052ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7136b61-726e-4b00-89b9-a181e8280a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce0919b-7246-4f89-9388-f851f8d9b686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0efcc573-4fea-4c21-8116-3d2c5b5e906f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f11f4a1-9788-4470-8f0f-08f69caa2bf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--888c9576-5a38-4750-a1bd-dbb4b4e330a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--795af80a-2d4b-452e-b2b7-fbefa9f64645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74164ffe-72f9-4d78-afd2-aaacaabf1eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807d1e49-b7ed-4ced-b188-f888ef49e40b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d56720-50eb-4b15-8efe-4e26c1f7272e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--146c5767-0c59-499a-8787-204c19521983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--505cebb6-ef85-4813-ac4c-03df0291b8b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd97ac63-c19c-4c13-9c7c-0bbb96f89e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b0f612c-ba87-47b3-a494-03b84810e62e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167f3692-625d-49a6-a862-137c0794a0ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d5b1c1-c841-4129-b624-c2d30758b701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96f7ed05-fa28-47f3-9ece-ae2a40dd3611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b7e6bf-d8e3-42d3-b142-8d4eb977d5ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ce6584-3df6-4409-842f-e5e85a8846a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--226e65ca-9737-491f-a8db-c69841da2fa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71485320-0b16-403e-b391-4eacc69fef75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--225f6693-b340-4624-bf00-2d7605371309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd9f368-a098-4248-83b9-b9658c7d66ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb50a07-0a03-4f5d-9fd5-a86e45b62aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53205a7d-d864-4244-b12b-d1b0993dfba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db7f122e-e6da-4b03-9957-2e73aaabc85f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a647ae-fa91-438f-9567-19d0dc9d24ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425568bc-d5d9-4945-9faa-20d31729d3cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b3afd24-0969-443d-bda2-5cfdf84d6685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f682fa-3dd4-4eb2-8fa5-04bf80d8d51d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d67b1c2c-1288-452f-817e-e5a0733e0fc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c92198-e383-42cd-bb7b-b39917f89557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360105d1-af82-4d24-93e4-6c7cf11d2648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaaf07bf-2488-4743-9d77-0d1e1a1a826d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c21fe0-c9da-49c7-9d39-eb389ef2bd71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4441c067-92de-4f92-9df0-9ba140bd9be8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58fd6b42-1653-4b35-ac09-218e2bc0c582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd2a49e-a0d7-44aa-9b30-5cfe481cadc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09cf7daf-ed76-48d1-ac0d-8c36ab213313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e19176-0ee8-4b39-87f7-344c466abeaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccbbe061-e945-472f-987b-e61cf2d1cc19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e88fdfd1-1f68-448d-8c74-6e13e1b58de1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b1e1f61-38c4-4ddc-999f-280bbf8c9bdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c101de6-91b4-438f-a3e2-9c60d1944653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51af7eed-3f41-481e-9a61-8328ccf938fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0678ca41-c39e-418d-b2c4-484b3896e905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb7152e2-9e18-4297-88c3-d7676900e7f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bfae729-9661-4ad0-a0aa-700d502b198c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49adece1-9ac0-44e6-8c91-2290088b4341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8018e23-5041-48cf-8b3f-6c875e9556bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--602f2eb5-e934-4f75-a3ec-121a8ff57533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.207.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228200cf-4f1c-42bc-a6ae-4036f0b65d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75a1df5-4429-4fd9-a518-778406f173e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2fe45b9-ea91-435b-be90-16ab4fa22ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ebd039b-34ae-4429-887e-951f06a28c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--675bf946-4d3f-4678-9c60-ba34e66aaee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f00cd2d-7436-47ba-ae46-95ef577c8d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a443ca38-3031-4925-ad58-05b2d8cf9d12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5935f638-cb14-4814-902e-0be0d6692eba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f938de-8319-4636-9cf1-267ec50e217d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14228868-9649-44aa-86b0-34fbe200c1b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ddbc466-9a7a-4f53-a894-48a1b3a277c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc7cbcf7-b867-464d-8b4b-9a45c46a475f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ca1d61-e314-46ce-8783-ecf7a5465c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c0817a-c380-4495-83d8-dc521a71d453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab2801df-d605-4a09-977e-b034a48c92be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c156f26-ab9c-47c0-8150-c39c097f99d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bfc033d-5173-4c82-8ddf-30832ed03ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45448a06-6552-4e07-956a-0578a278b0f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfdc0daf-ae11-4fd8-92e3-36ab8323d4cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5eed0e-e8f7-4779-9bf6-8fa7f45cba7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b908b087-534e-4e60-9769-936be9f78d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c5f0bf-3300-4d67-8a24-1d52b1a62ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04fc56c1-b685-4988-b4e8-ccaf5ae9a012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8159d84b-9cf6-4c98-9829-133120ff5326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12be2a3c-4da1-4359-985d-ed9bd01c175b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b85877-a8c3-4833-8d15-70663517ef9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b87d459a-11bd-41ff-b9f8-192f96c6f9bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32007cd0-6d8e-4b54-b5c9-e0fc5a6a263d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9414eb51-3823-4be0-829a-3f5a59da10f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97004abd-0155-452b-8cc3-0711a3bd68ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9cce9a1-9e5c-4b24-bae8-d8d3ca88c37a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e20fc257-6c32-49b3-b636-61e27d88a923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2668400f-4cdc-43a6-af10-855d243a2af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab47e0d-d226-49d0-bee2-8e0fff324612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa2b92c-2e99-4740-8798-b6dafbd6536e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79dd770f-eed9-49d1-b8d4-3a4193134a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba90346-052c-450f-8388-e3ed328d29a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8816b0-e107-44e4-b850-7f40ec98e3c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb68036-fe1d-4e6a-bbfe-74a6727d6d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a995826a-7a91-4bea-86df-19f6de74b8a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d42ea9-59f3-49be-9cea-02d77a4d1879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e218c35-61b6-4695-bedb-9e46e80ee7b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc337fed-e399-47e8-bac5-c515d2fbf067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4aeb7b-dacf-47d8-9f77-2d6d8e4ca145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c79f0a0a-2350-4724-a0d5-050a536b96ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8617bbec-224c-4dbd-b7db-e8f75af1e5d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f69dc7-6033-4098-97db-272191bcc91b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f62ec0fd-209f-4d5d-8c1e-937f8c0d5ae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87211ff2-1f30-4f45-a03c-1a1e1c3f33f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7abbb307-afc8-4b16-aec0-9897c5dfca34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452df2d6-77e5-43aa-b9fb-a319a430c11b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--881044ff-06b9-4f7a-90c9-c135271e8640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ece3f6c-fde3-4cce-96bb-aebe732685af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9392436d-cf7e-4752-ac78-472570d81d29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96dbf88f-05c0-44c3-b366-eecca7b2cac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c25d599-3d94-4768-b1f8-68ed8c57f780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d579f8-f72b-4f2c-8abf-39001a792aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c3e51f7-82eb-4bb3-8458-4f2034766948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a8b3f7e-5a41-4970-80e5-903af410dd41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1640558-d79e-4e40-8383-ef3777dba89c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c9379fe-2fa1-457b-a18e-582e151b29cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3050c37-df07-459f-8805-584ab15f6422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa539a2-3d65-4e06-b3dc-11a10c9ee857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b3e6092-c0f7-4765-a884-b90cfcd7b4b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b54af5c7-86d3-4b80-953f-49eb3517aab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--249bd07b-38f3-4284-aa71-7e125b366947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00a0e21e-c928-446e-a914-29106ce2efa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f662562-256b-46c7-9d1c-16140d7c4f6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6665a07-87e2-4031-a423-5e5425637fcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08cac0dc-967a-4b55-97f1-5ffd9e59e445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27db15f-8db6-407e-8d6e-076e402c87ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bbf1226-c01d-4d48-855b-11ce69e2d762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0046bbac-3efc-400e-a8c0-0a41959d8c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaca8e7f-f9fc-49cc-b979-fa8e7c017d29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba38f93-01eb-485d-8ea6-84ac78afd096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7476390-8b58-4e15-b27e-7c52f900808d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f55113-798d-4d80-b18b-9e91f4a39fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f790839-5def-45cb-bfd7-aeba8970d5e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--811c1d70-1504-40ec-b902-279828020295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7cf0378-e368-4df3-b802-842597433363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a869e7b2-ac3d-491c-a6cf-d078c348ba0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5264abe0-5d71-44a9-b763-e3dbacacf5ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc20fcce-4d6a-42fe-a68e-068436bc44f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cbe369d-6068-4b91-96ab-db8767857a8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b76b0e-a9f9-4a99-b36e-5bc0d35370e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b517d69-21e3-4c2f-b7c9-28a2fe75c810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac85de8-1e7e-417a-a744-ab3a0f3e9529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a61789-83d4-422f-90b8-4e21f8fde003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f0996f-8a5e-49dc-bbb5-d286ee30912b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfefd15a-6b17-439b-8f33-a9c9a409fda3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55fa293b-112f-4d26-b260-6c5709534c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc69a25d-1b2d-4cff-8ffb-fce01934172c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--006741b7-dc7e-4b69-bebf-a0225763f368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9432d2-637f-4fe4-bb64-a39c36a9838a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15266fe0-3a2d-4ad8-868f-f2593ac8dd1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72951523-0fd7-4c60-bd85-ea76abc46776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06911c60-f7fe-4158-98bd-57a557be03bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e0e847-e164-446b-976c-f74ce53c505c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55dcc574-47bb-4769-9d50-c6c1176c1137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7dc3e13-c061-4f39-beed-17c19c2e76f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7220ed-010b-4c1e-b138-f62dafe6ae0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b67046f-c1f1-4182-b093-8faea4ffd73b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16633d11-c9ca-4b85-9041-a6c5bd4c54c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db82b1a-07c0-47a2-89ac-5d21811c6430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4379ad50-acf9-41f1-b789-96ed711f60e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d629c0-5a67-4a93-bed5-f4ce94d1db49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c88721b6-e1ae-468c-8f83-d0c7cb8c4ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7604ba6d-3a90-4d2c-a404-4facd017f1b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c10341-638f-4981-991a-34f08bdc94ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f48ef8-1290-4a57-a442-589fc6ec530e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bef915be-6fe8-4434-a1df-f09f145cce02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7ecb01-dfcf-4a11-b0ae-e8d53f8e300e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f40086-60bc-484d-a142-cfd06f911206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e1eea9-1916-443e-ad50-d34f95108e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae60f6c4-6554-46cc-935e-c81ccfb3f902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12995fee-c0e7-4ce4-8164-669fc8a9e043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78101456-06d8-43b1-99ee-6762558f3130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf308273-b285-4864-8e0e-ad3e820a5069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c8e633f-56b6-49e9-83ea-068424a2e6e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f4eba1-7f42-4bf8-bac8-8fdd64aac9a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a5ba0b-ede0-479a-b5ac-89c0a48b9f76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea847a59-c840-485b-98fa-445064428e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3574c099-e4b3-430a-b260-3886e4b58ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c3b338-b71c-400d-9104-a49a6abb464b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f521bd-b430-4350-bbb1-11641bca2026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd2e7f6-283a-4e7d-8d62-79880384a273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28931b7e-18a6-470d-a3d6-ac8dbe5550de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd669fe8-e9b6-4f13-8281-2b31fc0a7a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb8612e-f554-46a3-8d73-b2f76665a851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.208.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cbfaa54-81c2-4ef8-bdd4-ff56ac2e0059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f9435e-424d-4a20-92ff-a54bb0486b2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a29bb29-e5a2-4ec3-a6d0-5ce52d58ef2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19880408-2cfe-4688-9603-30b34410feca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78382a0d-e8f8-42e7-a776-3da5fc4b2dad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2558e1-f1a3-4a68-8d5c-351c9c4eb2be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a8a061-17a1-4aa0-9ead-c263ebfb7700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f8e083-2d32-4492-ac5e-37e985ed2767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cfb657c-85c9-425d-a988-cc528943e828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eaef677-7dec-492f-ac68-dd43bb7999a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa751b3-a9dd-4058-ab07-85274cb87892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ff27cf-df41-413b-991e-86516806062f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdeadee0-d6d2-4e01-94ef-84c42fea55c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9929f9e2-d3f5-477c-b154-430b02e97fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d976f541-7fe8-4521-9dbb-68e6c9f83326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--850d7054-8e97-4794-aff2-a919116aee97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--624d14a2-58a2-4d5f-96ef-f6f626fdf4a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8fa76ce-93c1-44e1-a5e2-504aaeb563ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed8cdd47-ea34-4118-b71a-3e63d3366be2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e3840ad-2e66-4b6f-a1ea-cf6c5660e503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f7d6436-c5fb-4357-8b49-c7dcd5056abc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e592d6-b803-4c5a-953f-82cdec7a98f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba05e0dd-14c4-41d8-a782-e70c2654d8ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa2d2d46-397b-48b3-9837-8a12071b4b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a3c6d8-215c-4cfb-bd6c-e8c72e8f4932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e2ac9de-9d72-476c-bc56-b572b4cb7b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd10d56-0cfe-43b0-bb61-5bed3f594825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f791c708-3916-4754-a57d-6a816d1b9668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4832debe-2c5e-4a57-a95a-b33c3961c11a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ec137f-3957-41c6-88aa-3ee508607c6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b66520da-8db4-4f34-8139-882e26b6dff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d97eded8-b045-4937-a8b1-5c8ee8dbc7ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e5806fc-f87f-4f34-b82c-b03fc94e69d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073146d2-6424-468c-a4b2-049e41be98a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e30aa73-d278-40fb-b0dd-df61c65032b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6bf73c-7739-4703-8ea3-095ff7956fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a0cca1-018c-4652-a760-c1d875f96bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8360d30-4f3a-4855-9c84-0217da521391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4237737f-9dbf-4fd8-8555-a164f18a7b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab59ac9a-d901-470e-ab52-5875be283026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea091c6-7e02-4736-ab4d-c8ae80066089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60305359-60d5-4da9-a552-83aa95b69691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8dd8dea-266f-4ff7-abea-6174bef238f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7651bea0-b301-43fb-bc16-8e2b656a052f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689c5c86-607a-4b47-accb-aa3b7f11dc06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--618cc470-26de-4db0-a9de-9e2187ad89a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c093a35-a0e1-4983-b8cf-0a4885f802d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc117809-174e-41a0-b951-9fb991495cca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e884628-bee0-45f5-9f86-4076b61b9231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e39c0d0-ddc8-4cc5-a44f-092a9bad780f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2695b01-6b86-4c6f-bbbc-d715360c7235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6c4318-ba2d-44f2-ab36-97bb46bccc06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b88358-b669-4e74-b736-4d90f5686c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7314082-36e9-4fea-a179-8f3d6a6b3e89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be27727-7a22-4213-83a6-c538aae1397a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e6f9e1f-9717-480c-9bfc-52533f0b0505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46be11c7-de36-4ee6-b42f-e77b11be1109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c344682-0d96-421e-8104-17b35785f53f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6e54d5-3932-4555-8f9f-ff3bda82771a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7919d590-26c9-46be-885a-91bf90cf9155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e7d03b-3a71-4b1f-8fff-115f65b41349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5bf655c-7847-46ef-a7ba-5892d5059074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a79a78c-f335-41d2-9511-0c307a4674d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d75428d7-d1f1-4147-9d93-bad9b6427420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97a685a8-bba8-4b5e-8c1d-9e1bee316400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab92423f-e2f3-48ea-bc51-ecda490eb1a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42548c74-9ea7-4adb-bcb0-9334c2dbdcf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1197bcac-9e17-43d1-b182-74a007ee36b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f16c326c-13b9-41fa-9e0e-1707d72fb033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e1dce1-a055-44c8-9bf9-af909b54fc6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f0d095-0860-43ba-8b23-40b4b46f96df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67807a3-96ca-4160-8ea5-de47d71200d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23015461-1ff2-4af7-9b67-d84c6a2a77b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a442c23e-b238-444b-a42e-7ba11a1fe2fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ecbd43b-87a0-450a-af6e-034872ca0082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a657253e-1667-469f-a721-caa7e2d521cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e0994d9-22a8-429f-a3e0-22e28e8dfbb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d60187e-cab9-4397-9d55-3b01b3670867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--795d92cc-9971-4c5b-b975-f455ec75c57b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc8e48f-a11b-44cb-9b93-09a0a5611671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10aa4118-1807-4243-bcf7-43795f623e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d23514cb-14ed-411e-b809-3e8026a8d70c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa15eea-7ca3-4cdf-9c4b-d15c41449142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56cf6c09-028a-4591-9b16-8f46b5ba786f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f07eac-b25a-4ac4-b7ac-fb1d9a1a3db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db443fad-953d-4ed9-98b9-34a7ef32713b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af3b8f1-dce0-48d7-bb7c-e8005e3b788b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34cd4ac-a618-44da-97f1-ebe9553c51ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2921d5d2-a130-4b21-983f-15c30ffa8926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d7db600-b3f5-41c7-afac-0c7a6c6418e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49c57066-79aa-4183-86a0-fc0570a0ce1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b4bba5-3f03-41f7-b4c7-b4cb98435d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea623f21-d3bc-416f-a44f-97e78c2f7f31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d72021c6-5639-4df4-a2ed-2aa62a06296a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a68260d-e933-465c-a75f-f5a650027ba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf42881-6e3f-42a3-beb4-95aeada987b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--338780ce-b024-49f6-b016-5e55a5541db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7eea531-9602-4d08-93dc-b2711cfd3347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f42a4f-794f-43eb-9666-4291d46fc961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb32bf97-cb9c-4ef7-9de3-e4960d0f6e0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9bba4ff-2071-484f-9e3d-e75085e5dbdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e634f1-bcad-4a6f-9f88-d5582893bdb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6bb5d51-368e-4896-b5ac-d1ca667ceeae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4daea610-faa0-4ca9-9fc3-a038cb705053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c496da-9e78-4708-b214-45d07f64bf29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c15fef2-6328-41c1-ab73-567cbc3f59ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a239c22f-4b74-4b1e-8546-bc7cf24c4fa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acbf9fe0-8de5-42e9-997b-771ac95f012f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25be2b9b-fa8a-49dc-9ae2-d8bfe8b08d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98002d7d-fd68-4511-b99e-4244f84ac788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--942f8965-b7b5-4524-a281-54c63b289298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896c47d7-df38-470e-a527-88bff600c128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b06cbc-bd44-485a-b2d2-531b26fd33ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8eaced3-e9b0-4e53-a3d7-308c5f55f8b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd24b2a8-c1b8-4e3d-aa7b-dd2fffa9a847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c3b8ae-6e25-4deb-89ce-a478ee056be9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25f93ca-b560-4566-af54-15fd85d90e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2c88b9-c32f-4458-8c7b-d77e5248d613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e992dd8-616a-4135-a478-8f1f7ea5f400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80725cb7-ce8c-46ab-87b2-cb68831bc7fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6670582-dffe-4590-ab79-b245272db1ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b6c3d04-3846-4b74-a98c-a9592c0d4868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd7e33b-16d8-4611-a8de-a97497d5fcee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04af156b-4e1b-4674-aed8-7a52dff91328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ff51da-437e-4760-8a43-272f9c5f8b18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1094dcb-4aae-4d54-be80-c43bb6cb701a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa54c81-0c1a-4b21-b967-fd5759f6ba05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96875010-e486-445d-85bf-340195dae5b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b51b4c5-9c3b-4ff0-8477-9821885145b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1c88d2-a751-40ca-a052-1fed40df9f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816e4845-e7c3-4663-aa86-2bf1e4ae3f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857dc431-8a70-41ca-bef3-db456a1bfc5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5969189-4758-4e03-ad54-492087403f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34e58cb-e7b0-499d-a215-b8b9dcbd2be5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a04d5a-c220-47a6-a9bc-c52a65fd7b89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32cf348-c71a-4e6d-a8b3-7721937b2413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d73ce0b6-ea72-48e6-bae0-23422d3b8b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef7675ea-ab6e-4dac-afde-885ea797a572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a17f4ce-2372-431b-9b02-eba6256b3c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e3218f4-9933-4433-9bf2-04b9a4fd0802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d2fedf-33f5-4dac-b5f9-b36cd2590711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51c0abc-cfc5-4efc-b563-068f045f88b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a47e8b8-202d-4ddc-ac97-984d53feb50c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5acd686-cf51-4e6a-bd0b-66747826999f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242599f2-64df-4f9f-bc6d-89d0344b3846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1e6e1e-e1b7-4a8a-92ef-d809b54d11eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20042415-f88e-4990-9519-932a4e4a556c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287deb33-4b77-4e1b-ad51-3cb963e58522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c493145d-aab6-492d-919d-8143dbfa8052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58606346-36a4-4a3b-ab3d-4238a748eac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace66373-b445-40f4-a647-56e1465a9c77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc506f3f-569f-400d-8db5-47ed1e121b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d11cd25e-333b-4305-bf1e-34e83934d96c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b71dbe-562e-4313-b306-fbc518982b2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a26a3791-98c7-46e8-b5ea-18b4607ed551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c4e408c-eb6d-4f87-b342-b4a47d97ffd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ea048ae-cb94-47e5-a109-175282641476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc3beb1-d357-4678-b839-d518e259f8b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--288c5e7f-13ec-4431-984c-6421d329e179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a458b258-a064-496d-8490-7cb344e267cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ee0b65-dbc0-44e3-8265-fa3498e1fa80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab824fa6-75de-4d08-a65f-70e3055645b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d90db80-96e3-43ee-9ee9-c6b21ed365df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907c19a1-1c97-4baa-a0f4-85cccea0daa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7212c07-5ad4-472e-b51c-bfd1d9230367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ef960f-3ad5-487c-9008-39d0b173246b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da280c0d-d1c1-42dd-8e8a-e1690a74b314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ace936-0221-402f-96bd-ae0e447cd9ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f640a0-90fb-430e-acf2-4108e2656f41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1805504c-90fa-4f9e-9ddb-1e7b3ed373e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2bcca0f-943e-4f5f-af80-cc15e49af9ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6801ae4-ff13-423e-9d8f-5048e9768c35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425a7dec-6a6a-45fa-953f-2add56eccec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e0ee1b7-ea5d-4c1a-9b94-f635d0964b83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17753119-e4e8-42e7-82ad-b45b936d8546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc61f2c9-3606-41e3-a92e-42b86a67752f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--024f6ee2-225b-4cca-89ff-8af95d4f2884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00df2b21-4c4d-47f9-9dc1-d61d9cbb2ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a5eda5-7cde-441b-be1f-1ba40c829a2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--654c09f0-cf45-4f8c-93a9-418b1e173241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32595826-b62c-47ee-9096-43ee7df1d8a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5edef546-0516-4143-8532-ea00572dcec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc77e9c-8cf2-48e7-b5f1-5fe64b55660c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72049480-01d6-48fd-a1c9-ffd50e556946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9778dbe-8b20-43c4-8a14-eae408f6e920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.209.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64e14402-29a2-412d-895c-c5da74c2510a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80821a7f-7a12-4c1e-a2be-03d9fe2542cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--576920ea-f4dd-4d71-b2b1-c94e8b952fdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc61d05f-bfd8-4994-80aa-43c8bd3bcd7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--832ce27a-e2e2-4f56-b334-88b5451a3925", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.193.172.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e98441-292a-461c-98de-8ecb59ef5adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66cc84e5-4979-40c1-ab7d-302cf3cd1f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82aa62d-c679-438d-be7e-c7e938aa7bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f95432-cd19-48c2-ba12-7d7c19fc56eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f197d3a-81a9-4b8c-a6b3-8bf97cad215d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90736309-8242-46ba-9d66-96c665fa40b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d2a63d-d55a-485b-8ed7-8c249f94d1ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5c4d3c-1561-4493-88d6-3b42483f891b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f64c1a-e4d6-4923-9e75-cf3b6b46babd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0570230-fbba-4993-ace6-d74dfc92c1d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab6e9a8-321f-4c82-88ab-7a3eb1e1590f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2929dec6-da86-4914-bde0-247b984f9269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70a637a-3f88-4ba1-a41a-0c9a22788afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a250608-b511-40f5-bac4-4619c5100191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf1f659-bb88-46ac-9ba2-c68d30810a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871392de-54d3-41cd-b8ee-487716d37408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d7e6a1-09fd-4dee-81b0-133ac11c7c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f46f77d6-d212-474b-812e-57dce6b92072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30d73d0-43a8-427f-9dda-4b03104e80a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d664f2-24d7-49e1-ac48-3a02010c1c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7182199-fa56-47ed-8162-ec7639c847f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10063ea9-a450-4e0d-9a55-1a7f22d6c943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc21ecd8-bee3-4fb4-b961-17b8b0cfaf50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a67fb7-fa35-4fbb-a2a8-a2442b946cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d78356-d9ca-4734-948f-9aaa18c8acc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cca35e3-3805-4f81-88ef-87dd0b6a2517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e8b62f-de2e-4ba0-865e-dbb83b8ca048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a8b8a6-6dda-4903-9dc5-1536395251e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466c8ce5-9dea-4ae8-87d3-56bb71c8232f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3cad18c-d1c3-441d-a76b-bcbd1155f072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e3fa03-95d1-418a-8ef3-8183f2ee6917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09843fcd-8317-4e1c-953c-2fdf776127dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e3b9dd-0b44-4686-b818-75ffa683a41f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f8f8aa-229f-403e-8236-d9f515969ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97ab190b-c615-47f1-9de1-586217ddbcbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ebcf417-1b54-4250-b3b7-6318396364d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1ab042-5a01-4de0-a50d-fcf2004e6e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bfe8bcb-7653-4507-9065-1c112c45bac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84d6da5-2f0d-40fb-9163-3d71cb7f71f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065b06a1-319f-4b74-b9dd-7d5973fc8059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46066cbd-d6fa-4e58-ab51-56b1d54d7192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a3c91b3-1ee4-4a3b-a223-c134fd948c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd49475-0c6f-49e5-b475-aa912cfdc494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60fc6da-ea73-48e0-bcaf-a02dac3b4096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9ea022-b648-4e59-ab22-d18d0b3d13cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd4328ef-2235-4270-8cca-780ceb33b5c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a4763d-bcee-4ad0-92c9-6aca7ecfbe1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d86326-2bc5-4139-8858-b75e93c0fa28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeeba49a-99d6-4218-9c31-c15cb3e23e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb1ecd3-386b-415e-a5dd-6672cc987f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d44bbf94-1dc4-4d5a-af3d-22933957aa19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6320ecab-d082-4549-8db5-73affa63caf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dfa521e-fcd8-47a6-bb04-8cad049e78d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de907ab1-5231-45cf-9b26-34e51f2c47ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc3cb3f-96c9-4d9c-8760-8cab1e3ede54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc59c222-7f30-442f-8dcf-f34deed4d45a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f67c2c76-e616-4067-9c33-9d4d3ff80104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbae9e76-cb57-474e-bb2b-5f3a220f8be5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5baefd26-3ad4-49e8-a6ea-d1a645a76942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf29701-6a9d-464f-b4ed-bf662d6ec1b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ec7788-8082-4ec2-aec3-1cf7cc9c5947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db3fc1f-a507-46a8-bc88-6d2876ae4361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd36c22-9dad-40cd-bcd6-43d129a76c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2ea7c4-cd3b-4d83-9b32-20a8a49fb055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0be8ef3-a873-4ab4-9cce-7ed722bd3bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--811011fa-dc09-49c5-a492-c6bbb7b9754d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11847d8-9b63-4f35-bed9-913bf2f16f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d22a978-b542-4e27-b60b-d2b85dc8000c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4877e61f-44c7-44e1-aa82-37d8aea5bc9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c8f2c2-a648-4833-b300-f0f2e24d4b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9836010-6559-49a8-8eb7-0fd8e9d691a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c820a45-4480-4edc-952f-bfcb300a6448", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.231.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c3d0fb4-5624-4d87-a10e-d134f2382080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.199.163.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--828cd3d1-d6ee-47f6-9c53-8583e5564c69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.165.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a15cef26-c718-42aa-b753-9d9e73112083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.207.244.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a055d4-e240-42d0-9987-872e2ec0c9f9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.207.245.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ca3105-6f3f-44b7-ace2-eb3e8e3a85ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.215.58.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2dc502-3388-41c1-aaf9-8b39022917ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.216.173.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0603b321-9ffd-4eca-b4ef-865e6f7a9fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.218.99.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f37c64c-9c82-456a-8b48-6cea83014678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.219.80.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9c1579-2520-4a84-8485-07e95b0f1d78", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.222.66.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb7e1e53-9c94-4bfc-84a2-a389b40a936a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.225.162.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73496b12-e271-4d4e-93fd-0c75efb4801b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.225.162.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fef021d-9b28-4823-9b3b-5e434dce48cd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.225.93.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adfa457d-584c-4484-adff-44ff6bdac2e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8831316a-21dd-4423-92e1-9a55f88e3a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e0e4ba-643e-4d2c-bc43-d766612cfb6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8295121-815a-45d2-838c-5c0844bc8cf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--685ae3b5-6fb9-49f4-a76a-4ddeb37bdac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d39d3388-f23d-410d-8112-0d3626e34e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20793e3a-8b24-4619-a0b1-9f87e007b640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae0745d-3a3d-40c2-926c-0771f34c8e05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3af4a6e-6fc1-497f-bf19-29ae575258df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e7675b-f06a-49bc-afc2-543704f4c6fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64ed4aef-5613-43c6-87d6-eba49f314ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e307067-2fab-46c9-b122-da18cd677d4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569f4e3a-4f58-49d7-904f-d4be3dd30194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--559a4a96-8668-44bd-a62e-d2da82c1f74d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6718a8-4a67-49d3-8c0a-073595accc41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fc9147a-24d2-4bed-806f-e909e7c2153b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c11db1-abc8-47b2-affe-412767a0f75f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f321b74-65a5-4f40-b7e0-5d88e815ca72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c68e03cb-103b-4214-aae5-5eacd7dc93d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af88f022-a280-4908-b4c9-86dee4923f96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af2e2a66-177f-4a69-a80f-f68264609b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bae901c-54c0-4998-91ac-c531b7c39de1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa0b4ac-d5e4-4a32-9efa-f2b89e9c3490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb272a3-5230-4fec-bb5a-190c584cf97b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e19bc7-e44d-4ba0-9080-53b57b236284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86f5350c-4466-4878-bad4-a5ff045eafb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f17e6878-948b-4bb8-935a-42cf1bfd1439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23fb6199-dfc9-4522-a0bd-03844ad24e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d9471c7-8425-4072-b796-43ef89de36ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d6a9c64-3fe9-4f2d-a574-dcd82e740f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca435a2b-51e0-480f-9cd1-a3e937097ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f519ca59-cd23-45c0-82c9-e9018401a44e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25603542-a74c-4f7b-9dbb-06039810494e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4163fa7b-b9f2-4c7c-a154-f07267742b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f8fdb60-97cd-49f9-9b5f-027c0ec98026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e885e796-6daa-48e7-87d7-b2240d135016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e38cdb-e183-4bb3-ab0f-a8cc93e938b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d281c810-10fc-40c2-b5b1-b880bff6d754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7eb475-08c7-4fb1-b493-e26cafae8128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e71cfe-cf84-4165-adf1-d69d786b06fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dabe3279-dc4c-44b3-9fcd-5e60b27d6eab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7490de98-0b54-42d9-95e5-4b3be219663c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3192c408-3f35-4b7f-9c6e-f30e9bbae9a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda87511-bc6f-4d01-9588-859158cca510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef382471-241a-4bda-92e3-6aa97db6dbbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28281ed0-82fb-4a4a-a25c-765829312904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a2be0e-25f6-4968-8aa1-76f8baca5397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e6ff747-f653-4d26-a0a6-b9bd0572a9bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1a339c-1f9c-489b-93fe-dfbefcf9c9c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a26d83ab-c859-4e3c-83f3-de2869360ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ecddae-41d6-4a61-adfb-6ccb0fc0cb30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0142bf6b-bd7b-426b-bd7c-891abc2dd1f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--542289d3-e854-4843-9dbb-0af7f833a2b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65412139-7b11-41fb-8879-b4877cc601be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd3dd4f6-0243-4b75-a346-31f9e9dde90c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474aac72-6fc5-4f8d-b09c-8a09a9546029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f0e16f-10af-4728-90f3-af2ec82c3208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba130af-8509-4932-8fc1-90ef4c3d8dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a17a858-0e22-4a84-a4b0-3047d6dcd020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad114f2-472d-4ed4-96cd-7971695ee2b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2baa7340-1303-4ba1-868b-0ca88e173b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--770f3117-03d5-4f44-b21d-3b232589990f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d26147-4aaf-47d7-84f2-691aa1b5e37f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da92db0b-424a-4140-95c8-5a1f8013d7a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e328eb0-00d9-4ef3-b303-b4f60b3d23a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfbeb742-10fb-4490-a7b9-4a37d6a14096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aacb6f7-bd77-4557-8660-5f8a0ff9cf74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02b23d55-e538-4ad2-9f27-ba9293512510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d4c47f-5629-4fd7-a6bc-bafa22efa75a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391d32b6-8d17-43b1-b6c3-e8c8d0e71a67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9d54b2-4945-4fad-b167-fbed30faa6a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6271dab-1891-40ae-b387-7a5be888cdb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e23f13f-c240-4216-8407-319e15930ca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc76a092-a416-4b6e-97b1-28d89a39adbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b79884b-ca63-47c2-9dd2-26e305ec2288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--976e70ac-eeb8-471d-b781-647246118ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1897bd9-e975-4711-ad16-61ac5d7cd48b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9910e1fb-607b-46ed-b1b4-191c65a08163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5220835-9a1d-41c6-bc3e-0234e704d36c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--114be554-bdad-44fa-ab12-1954b60f670f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0f720b6-ef97-46b7-8513-8bc15bc8e82c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df349a4f-ea2e-4840-832a-e735b859a441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffba18de-8ea4-4d45-9807-ac133e0b4ab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7e74d2-6d56-4e5b-ab54-91c72099dc57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--123faf59-4f44-4744-be6e-6391c415062a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8593d52b-dde8-43c8-b526-aba36e21f36f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a6dbd1-8217-4ea3-abf6-7a35c970c33a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be9b7d66-bc35-41c9-85bc-db46c840cc99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d650c563-c348-4640-9024-7281c07ed5d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faef3f0b-2307-477a-a0f1-2f2e4e6cc464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd9ac91-d271-4fde-b33a-d6ec2d64ce51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c71a6e-08af-4c26-8612-5b1e6d54c1dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ba6b5e-2e7a-4fa2-81b8-c05d82b82dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--104900ba-384e-4e2b-9c16-057d6b9f00ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dc146d5-d37d-47cb-b944-0fae77bfcdaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e93e483-66cf-4904-b037-074712593d63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59f64b8-33e4-4ea9-bc7b-5b9706e937a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd941f9-93c2-41b0-960e-5032abd9fe1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de2a809d-760a-4ecb-83df-7fc6ba773c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b84a1b31-ae9e-4a73-99a5-d65cc4dbc40a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d19f0a63-7c59-4f9d-b7bf-65de32533119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d150faf7-7cfc-496d-a979-3ac5290963a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde5e25f-b220-4404-a080-b84866c3da6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51fd4da0-56fb-4c70-86dd-b6ad6561b287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0312b3-f75e-494b-9848-63234f139642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32726ac-f9e6-405a-9839-cbe2b70ac4e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d81ebe-3394-4982-88a0-92a3af970ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47cfe1eb-002a-484c-af82-5a61459b421d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11818fca-0b24-4f04-9f0b-ea71438f3a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9fc878-1dec-4aea-9786-884c5782f35a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf69ee7c-9a22-4200-95b2-861b00ba2f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7f6c17-3be2-4015-82f0-62d8dc50d9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d165dab9-9cb7-400a-b04c-b978f1891346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e3afc8-80dd-4075-90ff-f6e0842b7392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c8cc17-af91-4fc7-b9c0-b1c0c99f7be6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a1aeebd-2671-4f18-83ee-8d4d081c67fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a0b343-d5b9-46a8-a492-95971f947acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c0e7f4-d1f8-4a3b-910d-e9abcdcd4039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9a1d0d-d4f4-4e39-a33b-a6d5d24c3010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3fc10b7-9492-48f5-8236-d7eca0466f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f9a704a-f755-416c-ae12-ab18821c1a74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--585d1792-ccca-43ab-b9b7-7faa67cc12f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1133a02c-3236-4da9-b956-5beae5a62d6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee62cc35-9704-41a0-aab3-7bb613876c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f14f75-3acd-4913-880d-28477e628b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2100ca4c-1e69-4101-bb4f-6bcc14cee97c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b6f132-e296-40e8-bc5d-8007fe68c2cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--290e8e8c-178d-4084-b677-34d67da6cdf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517a37c9-5b51-41c2-9397-af3874138ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81369f92-f94b-455b-9b4d-7431a818ece8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c7e8ded-63db-48e2-bbe9-333e820d52bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce3d3db8-7526-4582-809d-288c59ae9d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fe12c93-00f5-4385-914e-9f73efae6b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a8acf72-ae73-436b-99ac-a65ccf8b3925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--788f63b1-bd9d-4989-abc4-8223cba21eda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df02ea74-623b-4106-8aef-ebc99df5e7f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14baa8b6-1e0c-4598-ad83-2434082c775c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46214ae2-eea0-4091-bee3-465230067146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af5a784-92a8-4168-80af-1deb5c811f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46b18a3d-e665-4c56-9e80-f16da4302cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d6d9457-2e68-4a63-aac2-9811a667bfcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c990927-f401-4319-9d4a-e75d94a3430e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24731fa-d19f-41c2-adfb-9da48eb47018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--056fb4e9-8a06-41c4-a3bc-b399d4c9b37c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ba7795-8758-4f6c-9878-ed9fea225c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4849cfb0-c2b9-41fe-8319-f4dfc84fa940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c70ab9-fc98-4d26-a9a8-d8274ed4c5c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c96db23-0c90-43b5-9f25-aef8fa900bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7337add0-3635-464d-82ba-8b2c16758064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d9b99c-a8a1-4d02-b826-72644a1aed9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d240526-7c6b-4a32-b140-490d682c76b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d67e12c-6a85-4f19-aeeb-66b8f07ecb98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1acda6e-e316-471c-8dc5-956748dfc91d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf61dc1-680e-4807-9ea9-f905655dbc14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c95861b-1dc0-4274-b69f-810735aed4ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6f7844-8f56-4c47-8c25-1c1fbcd4aeb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e52237-7b25-49f8-870b-2c936241b85e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab44732-dfe1-493f-bfb5-7278162da40d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa1b50ee-86a0-4cb4-b452-933b3265b00d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2630ae8e-21a8-47a4-bc10-fde18858813f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6a401f-afc5-4a4d-988d-f946ec75fb0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a0e125-5b95-492c-bc5f-d466db872206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dcd705a-9f42-436a-87b4-4a4c57629d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5637e4-9125-4acb-9953-595a4a725f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17869b1a-4195-41f5-ba22-6ea41fd7dc10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae00a45-47dd-4ba0-9bfd-bc28b60c17ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11d6094-a8b9-4e19-af05-0da74ddc6049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3165ac6d-f692-4077-917c-2db9233e68fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.232.105.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02a2957-29b6-4bfe-8259-8e6b62df991d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e8b405b-2f8c-45b1-85bf-4a5daddc8861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10475879-fa02-4bf0-8362-032ddf71f89e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d311ce-4703-4ff9-9784-5c608570d59c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c3f738-86ce-4c34-aece-f15c23b67f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eddd9ed-39ba-4c8e-8e37-cb3a944a2533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d099674-207d-419f-bd02-aafb9466d3ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da08539f-4470-49bf-a2a9-83379e82cf29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a9ab7b4-f023-479b-baf6-3c5bec2db259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef4f37b-3566-4df0-803d-9ef87ceb7c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9270ea-f00e-4d28-b4b5-f14b24c27cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ff1b39-9047-44fd-99a1-c3de82aea991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473e8d39-9c69-4dec-bb50-18ffe4b7c9c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cf4651a-04fc-4a10-bdd8-3a9e7b3452e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e80c6c4-047a-43d3-8898-493a592ad186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37642d54-04a4-4a2a-ab60-8bbdde9a88ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a971ee96-90e0-45c5-a659-7ce98bf0b07a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ea0542-9ded-419c-9ad8-3cfea6887a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da29be7d-735e-4dc0-8dcc-a88fc98655a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19150544-0837-4c32-a77d-4398af85562d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e624ad1-46fd-4989-ad5f-03bd176fe639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d864210a-605e-495a-a44e-f995c6a945f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47439e21-9bc3-4143-bef1-1cfa173a725f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949ca298-34fd-4f03-971d-ae32f0ab674b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f11e615-0ae2-47de-9eb9-f0128094927f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e20d7e-4dd9-4725-b4e8-2c23319ce12c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--930a81c4-b35e-4ba6-bee4-733b73552268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44fb1e60-0953-471f-abe6-cfbf0cbc59cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a80ad3-28c4-4e5a-ae97-6c44e336920d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dcd7429-14ae-4ca2-9d6e-a63ba106355b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce91b624-903e-47b2-af6a-8d3ca6f809d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b5652a-21e9-4363-84f7-8559feb650dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05b18ee-dfe6-4c40-80bc-973b69def837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647b1b90-3172-4a2b-99ac-c08487b54096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88adaeac-7832-4f7e-a8c9-89ec5c85f916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117baf8c-0f70-4dae-83e7-b3596e071904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd861875-62ef-497f-b647-36f352cb14d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48795169-d4dc-483b-b936-af7b5504b816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d11929e8-f70b-42b5-95b9-bd32c9908c04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2242e1b-b1fc-4c6b-b73f-ad70246b8c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28179d1-db44-4d02-9e78-592b308847a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549067ab-75eb-49ef-9ca3-cfddba4c7ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31505b56-6709-4a78-a98a-08f06221e1c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5786c513-1c64-4c9a-9baf-e8ba5feeb066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--936eb877-1f14-4ea9-8da4-fb8442aa9d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e6bfe5e-f2b2-4bb8-b13b-63c0a2fc91a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b828dd2b-c080-4e3d-99fe-720a1e2b5ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--744c337e-aafa-467c-9f98-954f9851a412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ba2105-4221-4430-a021-0503bed6a852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190bcc7b-e286-4c86-8397-6491b60ad113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f23f32-ff7b-4a2c-a58f-8a0b9129438d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--730e3ccc-d34d-4def-bcb3-240a2a61c654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bd417b5-f7f4-485f-81d2-576e1b4503ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c90e84f-1e6f-4952-8a99-ec6c36549e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea50afc-a1a6-4cb5-8249-b476bf380450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09902c6b-83f7-4f4c-a6f8-81401132dc42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4deaa5bd-7da7-49e4-9c09-2029cceaa78d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1501f26-add1-4e07-bef5-6f8d80092282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--637c1900-dfa7-4aaf-bc9a-0eb96ece04aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee631d1-164b-40f4-8921-3fa475393ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6faa8d-462c-4638-9c40-b71877f3a5fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b4e1c02-ecb0-4fa0-8d94-f417375944b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fabda013-6fd6-4049-9a48-39ac38ce6d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df82c96-c093-4ec7-b9e7-85556a6575cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086e2911-9d32-43c4-a0df-9f95c52a8d3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677ecbf9-417a-4437-9437-036bac804f5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec4144a9-324d-4649-9422-c5019e31a8ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567d7dc0-9632-416e-addb-9cdf12f05c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb159073-429e-46af-a2f8-0ae8c74ee61c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e218414b-91d1-414a-911b-e8ce0cdd731b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf071a09-a632-4d0b-8531-caa3c19105a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79131364-7992-4f6c-8465-bc44fa19c4d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6288a8ff-0c5c-42cc-bca0-5300b925660f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe721faf-8ff2-437f-8c02-6a336f9c9b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2750fe63-4d17-48ed-a849-47457795f057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df02bc62-34f1-4879-b97d-686d43496aee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b54b96c3-1e72-400d-b49e-e763834cd848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1bda182-337c-4486-991f-f8ae18c68d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3815cad5-e317-4aeb-83db-161e1c87db3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e05a429c-b278-433d-93a1-b26d87313a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e94049-c346-49b4-a2a0-aa0543017f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a16396d-f4ee-4dd7-9fa8-6f514b9c22c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d48ec8d3-e2f3-4e98-881e-f677a329ba3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2828422-3d84-4981-b04d-bff2b3c7abfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0969910-378b-4f8d-ae74-33eeda51ccb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65dfc81f-e2ce-4264-ad3b-bcfedaa772b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a9ab7c-3f7a-434c-8504-34709ad4e4af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f55883c-02ab-4e38-9c48-fcbef61d44b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee9cb8d-b468-4fab-8d6c-6ada28229474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7323b94e-e363-4a43-95fe-b3b0e19875e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc77cffb-4078-4548-b94d-45ab3b6da266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--464b8839-708a-44a9-b5ad-d773fcc1d776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f017dbc-3d42-4d6d-9935-00d2b1c579ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09acba3f-6b5c-438d-b103-50a9c8783a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a937721-303d-48d9-88da-b91af36be3fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a75aeb-610c-4848-ad4f-37d6e369deee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c91aa03-6a5f-4a8d-ad53-79825f6557df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fce8d47-47f5-41a1-be9e-70b6d291dda3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6371070-b737-417e-92ff-446846d0f254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14241f62-5b19-429a-951d-b57168b36df9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9de8942-e1a4-4bf2-b11d-069fe343d9ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6edb9b56-3fe7-493e-bf91-772a6640df94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d4301a9-2976-44c8-87c2-1014855b8018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3def663c-e73f-4c82-a4ba-504c5410c945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6e96d1-c4e7-4079-9d80-3363b5f57e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5289f251-afd5-40e8-ab87-0e6eb9b310a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e4ff3e2-3935-4233-83cc-2e42076e29c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9ca5111-3fa3-4a5d-9bd7-27a07b9135da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dff9287-d25e-49be-b517-b074cc567178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5442e7-0a70-4e1e-a944-90b9858fd427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e57bd3-3b23-4ffc-b109-010eaf2b31cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--387ab2b7-11f3-4bea-9469-bb5fba31829a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f883d4-49c1-4655-9d09-b00cb812e272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ce01c8-cac4-44ae-9187-7efa0501850e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c19f5dc2-b7da-433e-a51a-cb197bb8241a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--346293bf-2f3d-4711-b801-34a465161185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ee29bc-3aa8-4f34-9a16-129de7f3c7c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293a18f7-da3e-4619-97e5-3af15466ce8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb98a22d-59c7-4ab0-b401-729ae7316401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c54ceccc-6b8c-417b-bfde-513763dfd858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b8f4ed-2f35-4296-878a-9f2258fc4aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9e3c9e-1735-4e01-a694-c5709a477c2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31d63e9b-4eb6-43d0-863e-5ad4982f4b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb3d649-d010-4fad-b218-f417f60c9d63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d025658-d03a-405b-a883-c1fc7e68487d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db210ef-f4ef-44db-bf93-fbe97ef1f2a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbeea554-3e95-42e1-bf79-4dc0469ab553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff3a816-dd18-42da-b5e7-3fdb1093fc04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--796effcb-beb2-4a51-b3a2-64fcf84b467c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98dc7247-7388-47a5-bd0b-e7069610f714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2cd5934-39b6-48e8-a407-1fd2ff465fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad9c729-ba60-43f2-be65-dcbd3d4adda1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a3804f7-88d3-473d-824e-740bed604f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f965fdaa-0a0e-4b51-8986-bf71e3d820c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3900d991-f9a7-4a5c-be46-e4a17bac7f0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be37d9a-621e-4ad7-9050-e53ff51d271a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76297be-60c0-4876-90b1-9411b6c13efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1282209-d89c-4a8a-aed7-835ef04452e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9586eab7-0e2c-4b12-8c0d-7c34efc90ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae021b06-7dc4-415d-acb0-701669d42ae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5edaad5-f4c3-4f40-a7c8-ca0b17e7ae48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b6af0b1-ccc3-4e89-8ac3-18859454039e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc54614-3aab-48d1-bb59-15073a18e89a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df083210-4b1b-4543-a216-08dcb88036c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858a0847-a337-43c3-8d88-02491dcc19a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce49cd8-81b0-41e5-be94-4474f590d88d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3405708-7820-4f91-aef7-50759c5d7a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4187fe1-421b-4c47-98b7-6498197b9d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb4f846-7add-4dfd-9171-55496bbd02a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ef68d8-adde-4c38-b791-9be4ed957cf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dcb137b-26c6-45c8-a04d-0e3d039d9e76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba429f3-d2d5-4d0c-9799-d6c1a23018ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b654b957-7cc7-4cce-8fb1-1f6d1431c723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a4ecf8-61a2-4ac3-a765-c82a3d7abd83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ac315e-b740-4161-9213-2e9be286941e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a53bd78-d7a1-4edb-9f1d-4506df31f0b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db5bc32-73fe-4014-b840-ec12c9705013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef10d53-b609-4288-bd35-43431467ec4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34196e0c-5909-4b71-9204-fdfae79d36a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb5aa09-f2e4-45a3-92be-a6bd0c93d908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7718fc8-88ec-43b1-97ce-695f0d4b7969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eceeb671-edae-411b-bf2b-6b2d499d32e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21317d41-0205-4b98-b43d-ab353bf04ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c270a46-c57a-4042-9e5f-17b64299ad75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--704545a5-aca0-45e4-824a-eb798b83c333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f900b7-fc9c-4ba3-9356-40cb7ed3800c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8abba843-6158-46d4-9989-e1f63a3359fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea0ee00-40c3-430f-9070-ce0d1c4866fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a13d3e3-2d98-4090-b478-76cb088e4d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1dfd026-3315-4218-999e-2985d9e0c576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--462c8a49-321a-4ceb-ae5b-bb79ee27a2b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57fec80-4f1c-4772-b78f-c69a161b1c9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a392f37e-e557-4270-a97a-c4f4df756155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc12aef-f894-48b4-9346-6bf36c78038b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f7793b-5085-43a5-8561-e1bc0569bf10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47012d03-9210-4176-9d1c-97ee6e3274c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b1fff21-5cb3-4013-9eeb-4bc8382ef859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5126ed23-97af-4265-ab5e-684485707359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0aedb39-63b0-4a2d-99b2-9ba747c8bf29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6fc992-ea77-405c-9af9-2bad609a4b94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c16433b9-573d-4daf-9ba2-3c15d5bcf796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef9d2650-6666-47ec-a16d-0543e14dc546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c005e79f-65fc-436a-9f8a-d93849bf2b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--153b1d5b-dfa3-4983-8973-cd1b8187be8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70cb741-609b-49eb-b22c-313efb51eb11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921b056d-b74a-4c13-b022-276698f667f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--137f27a0-61ee-4d50-bdff-47af543b50df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e88d8e-94c0-4b08-be7c-e22edb6bacdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bcaee96-944f-412d-8d11-154474283d90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca8f7b9-4a49-43e3-8505-2caacc0b9515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ce76e9-934e-4626-bebf-6d02ebc589d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816177a0-cb6a-4ecb-9f4a-b47d8af5e0fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00a0a913-f0ef-4518-b9c8-9e2d70c32d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835d4aee-902f-4c57-871c-33d422529c69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c2717b-ad9c-409b-8fea-f8eceec43b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--416faf20-b14b-4ea5-ae5b-9efa5a95a069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47df179a-0565-4cb2-873b-873507bd36c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f47f62-5e29-42bb-9436-ddccc63fa7ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c79898f-caa3-451b-9f69-799d2bab07f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f8f3f3-bc3d-4371-8b77-696ab7501a80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6849dd6c-2a65-400b-bce7-04a916562518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--652360ae-3655-4ce4-b440-f7da68d7152a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc17d33-d41b-4b69-bc92-ab8e2c710bf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac26499-174b-43d6-b3cf-d82cd12a2a04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd16bb4d-b882-457f-a070-f4f619683170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a6b2b6-50ff-4fd4-beab-19d06859b77a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc03b9fd-9758-4646-b8dd-e2daaa5132ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b65b4d-04b0-449b-835a-7fa4b5f6950c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb67f776-1951-4fde-b2fd-327a5607a36b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106d69f5-149a-4047-9c17-442eafa78c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.12.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f16e1a-c728-49d8-9a22-7ecea8b1a5fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5e487f-5cef-494c-a9e4-3ecba26516d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--253db928-e53a-4644-9643-d754eb4f550f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ced0c0-9c82-4507-9060-13eb26e52a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37490e96-a7fa-4f8a-be57-d4e0c5f8beff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59700df-ba1c-4419-a8bb-2d706d7c3730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bef51824-f655-44f1-99be-91db429364c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4054724-2905-4a60-bda0-cb7f10743768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4567a24-2a74-491f-aca6-4bffb5436c93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636ed0bd-1b95-4120-8de8-974b423a1270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e1453f-45b5-4796-9fc4-cc585e057fa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b34a6d-cadb-4470-92b0-5e9af1802fa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc8d87b-e531-40e4-8e98-f52ba4331a45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc21c35-67e6-44b7-8dc6-91759896a05c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95a31ef-f0c9-4160-9a57-7b530b3a72ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9cef5d9-0fb3-4e52-9a54-687829c2ddbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a07d64-46c5-42f1-b048-5ee998c262af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21098485-09e9-47e1-a9a3-f981e9ec04fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb69f37-9d22-49c8-a3a6-79035e73ae17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68ac21ca-a0a4-4edb-ad4c-480dd3a95543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46bbf20-fa70-4d6d-8e24-3f8d437112fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d11357c-c5cc-4a0c-94ca-3b82c4143f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a145007-0f14-49fe-971d-07464f4a09e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c89e51-50a0-4541-8150-f71379753acd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d08dd220-bb22-4254-b1f1-b8932de989b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d15a11df-cd55-47c3-b4d7-64411015ffcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e565eaa-d504-4c75-a4f9-69e5e4ca82cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f864ddd1-992b-41f7-8fed-fe4425fc2a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec8600d5-2a05-4fff-8dbb-35658ab53c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b2a10d-77a7-423c-af00-9a60c532d796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e1d31b-b0cf-47c4-9c72-af0d1a480df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a38c0a1-ca5f-4ffc-a9b5-deac87c6076b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54473cc2-7ede-46bf-a874-c9925969ec6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d5eb73-0193-4b60-9d72-31390655f867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b67b9b-f078-490f-8fe0-10cdb38ca267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c07e22-6261-46b8-98b8-24e0cb733a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09e05b5-91dd-48c3-a171-c6b35f69c82e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb89e13a-7467-435a-9f07-b6156e49ae62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d49955-9366-4264-a3ad-82c6237c1820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b52996-93d9-4362-b7df-f90567ea82b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f79a0d-7564-44e9-bcce-1721977df767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eddabddd-4e2c-45d9-9be9-a1a9b8109132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12103334-c180-46f0-9d0c-72e8ffe33312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39581cc3-a7b5-436d-978b-5acd4a6bb7f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8269452-ffde-4515-a5c9-b5400434ce96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3483b5f-2501-4c86-9532-7bc42c1e4e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89908423-1880-4d2f-8207-3b2ffc423ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc6b51d-407e-4596-86db-86aa4d5fa4b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f35f6d20-a314-4a31-8c43-96c0e9fba362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a20e5a-b05f-4b79-8332-fd9e522ef786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb898b4-3ab4-461b-9c2d-30b151ff984b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cabc665-72fb-4ce6-b52a-12d08f7685ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--738390d9-2fe8-40fd-ba15-d968ee9ea0f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef279f8-0f26-4988-b4fb-0976b8f5b458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca98c7e-363b-4d6f-9d76-27a126bef8d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4b18e67-6312-4715-8489-f50cbb7601d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e31466b7-145f-44a2-81e1-6f4a3b8b26db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb864888-5f9d-4071-921f-9b05ca61c685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea16639-f121-48dc-b453-68c9f25abe86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16276938-8767-4ea2-8c81-602f3869103f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4d14aa-4d71-4ae5-971d-fb170769e434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6376c51c-2e0d-426f-8534-75fb6fd354f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a154f269-8b3b-4529-9047-38d5e8db91bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c470dac-6683-4c5a-8e76-4406307c9152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee14f5b-b15c-46fa-bded-71111d019712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3868f108-0b31-4cf3-a822-59700baaa661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--705b3528-ec43-4b10-9c13-988567359426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cff8c1f-64f5-4134-9832-786fc0922eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f99a4dbe-084d-46dc-940c-d31385a9157a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6465304-1fc5-4432-8649-51bf7efc6167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58fd2bb1-66d4-48aa-8ba6-8f8d567e64bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b45b9491-4ce2-4d35-9c66-c5603a0fb6fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c184e9ca-72e2-44c1-a72c-02d8df702a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ad870c-45b9-4ab4-b271-599c30116ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--514a5c4a-fc72-4eed-aeb2-88d7f1f95d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b098a191-614f-40f5-ac58-9dd19de87aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab37f85a-6edc-4c2a-977f-064240b3a4fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--660ace68-34f6-4b76-bbb2-725e9cd8fc3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de62900-d3f4-4bd8-85db-3da6cf4ad11c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b5fa81-5be4-47c7-b4dc-9b9aafd2d753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1fcc6e-b2d5-47e3-8b0d-4f7547c240a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5982532a-f673-43bd-8433-373b40bed2ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fbaa452-6911-41e6-a6b8-68499383f696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77340730-50b4-4b20-958b-5074e3aeef40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--180e4783-ae27-49da-a74e-b6e833641bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--245a8d9b-a62a-40b7-b732-0b32473e48bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a3fca6-faa6-44bd-998d-a663ed5c4732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--643b67af-ab5f-4942-aa2c-81cac4600843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c937166c-a5a3-4a7a-bdbc-24f75e43dd52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac44b1e0-946c-4b2a-ab48-191cb3265575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0eac4b1-cdd5-48ff-8ade-4dd86ec228cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf1f4792-0eb1-440e-9ced-ee7831aad7de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a29030d-7a8e-4700-a321-534fc5883b3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058e7ca9-cab4-4334-b1d9-17172f1b0a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a7ec34-825a-498c-942c-82f397be1c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80af1ede-b855-4495-a68c-025721b5bc65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66573f44-4ec7-438b-a4bc-9318001742f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee2a5f3f-5f85-4c43-bc54-14a184b76810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae45d50-752c-4425-a3e6-6335936f1d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfbcd3be-55dd-4ee5-be76-2a7efdb2dfcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0caf43b2-1f73-440f-a17a-d5d1b3c028ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a39120-64c1-4e96-b02f-905d4d515e4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26660148-bc72-4960-b1e0-01fb49f7c240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43fb3bd-58f1-4288-89b9-01a406fc5188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d3bb983-d3e9-4a2b-81c5-412121e0476f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b8c263-c19a-4ffc-ae35-110b54d176d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cbc9877-c294-448c-8520-6653bc48e2ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--308016d3-04a4-49fc-b2c4-a133df7e7b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--784acecd-6697-481c-9b10-1c85cf029db8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--603e74cb-589c-46f3-af0e-6746c1417157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f705420-b9ff-414d-ae49-930217d2f34c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ba9b4b-7d07-4eed-84d5-2f89ddecf2c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4ac30e8-fad1-46a7-9b7c-a56fb1e65e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d37dc860-a836-4366-9cb2-d4cfc6c949f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c66b4288-bac1-4ffe-acda-3775cc8d1cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d60d3c-ade6-4592-b577-262cabab9261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a00264-5615-4808-b049-91b69d0dd4b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527e7af6-d658-451c-91ba-b23800d6225e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e25de1-0ae2-4b91-9153-880f2fa11f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac61397-2e9c-4d68-80b2-11487972cdfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef38f217-f776-4c9f-9e4b-7b56c6aebef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1670f986-2a44-4854-a340-9e799c31c1b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2aec2ce-c9cf-4765-bda6-c8e9159cbf8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a79553fc-d721-4623-8795-438366b456eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da30ea58-3b48-41f3-a782-cf6e8f39163c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01249862-69b6-41a5-a036-6f3622e62e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--038e8456-f7c3-41e2-9ee1-a27ca14979b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e816e1-f5b5-4c29-aaee-ee51f674e2cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a880a864-55e5-42c4-bb37-f988ab444c2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd83aa55-7a9e-4d75-b00d-957b683b60b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a9517b-0891-4890-8c4b-b98f9232a4c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f81e1ed3-90d2-4615-913f-80f265b26240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b0f2c1-27ce-4e57-8439-26e06b3daf37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b207557-7db4-46ed-a06e-69b20ba9c2a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--280467ed-5340-4ad4-a522-2b3fcded2a8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87970ed5-5c99-4898-9da5-e28d977011d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c6f6c3-d692-46df-b1b4-4963c73b8589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b292f2-9623-43aa-a9f6-4ff286dee210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c62ef0ce-eb4b-4da6-aa8f-4f5e128f8a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c629d1-ebe3-4941-942d-de1c0470a6a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b63406-a221-4da8-834d-e02fff84fb51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37443ad-c9c3-414e-be70-c19f0505f8ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5393792-1323-4c99-b331-6d0969f0eb19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dec7bfb-fdf2-408a-81fd-9919323ac499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187c08de-eebc-4b02-9869-183c018a0dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169fbc3c-2051-4eea-b7c6-78a5d8b19c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909949ab-a2bc-4046-b1a1-5a6013d6a618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22a9961-9816-4290-a539-ac37e1234d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e41e09-0363-43a8-86e5-dc7218dffe51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdfcd405-a64c-4802-97d8-31eae0e6ff35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc9b5dd-954e-42e2-9032-b7d7b98ea5b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b378a73-7194-4186-b2f8-c5b35857754f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723c30f3-d853-4e6a-ab77-bc3866ec5c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c24aa0ae-26e5-47fb-8f75-8e08306097bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc74e203-53bb-4727-ba2d-addb1ce64085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47397f04-5ef1-41b5-82dc-867d0dd3a01e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412993c2-8a56-4b84-a899-6afadd887b55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c397a383-2e8c-4ad4-a5d1-4a23f8aa56f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27eee95-f700-4087-979c-0b938f410c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6cf82d-446c-4860-9e6d-d0ea5407d403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8afcfb50-1964-46e9-9c61-13e7a0c25101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fad9f5d-6813-498a-9f72-c91a439cd36d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85950d25-2d48-45af-8c08-2944c586e6b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1193b275-287a-4771-8ce1-0ac1f601e02c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa601cc-d6c6-4769-83e5-93951c4df482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ddcbbb-92e6-4a37-9388-3d2d3bf755ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ebb288c-8904-4826-8740-f89da8984a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde8a0c9-11af-4a61-acd1-cbc9b93eed4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df6ee82-5587-47d5-bee5-e4dec1bf31df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43aa0792-e7bd-44da-81b2-c6cea6fc4ec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f211dc56-b3ab-4071-b765-e70c95ef2df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e89d7a68-e26b-4dad-abf9-d3b2b2cf8294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9bbb09-94cc-4636-9556-c829238f7860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4334a4c2-4930-44ae-bd9f-5adcfd951fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37881467-bcc8-48f3-937b-04d3d161427d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9685806a-7b3a-45d7-8407-6cb43708de8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f76fedd-9526-4381-9974-7ad38bc272f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb28539d-17e2-4cbd-9f15-744e5e1e91e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1483343d-8b51-4724-8635-573f61cac633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea14f94-3339-44cc-b27a-97c850bc0947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c779180-1c49-47f7-8aca-ec88ff7333e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f8578d9-9d0e-431a-a345-b473c201555d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff0f8d3e-7b13-407a-90f7-37d3c972c3c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41e1df8-125b-41bd-befe-9e812f709fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c31f10-0ebe-4d4e-a26c-a26415950d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a0e5998-8c3b-4fe7-a783-d6999cc8a9d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12601691-9948-4e10-80ab-d5e9e6a9f6e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35437ebb-a70c-45d3-bdb2-396a8d1d9d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3586e68-88ba-4ca2-b93e-334df8557b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e12c83d-1a46-428e-a51d-34d2652f07fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243ee6f1-3cf5-478c-afad-a2841f803490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96b3e22-4268-48a6-861c-13a45082b010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fda755e-6cc0-4003-b5b1-bbd4339e5b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6319380e-a4cd-4fd3-92dc-f27f5805673d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1866123-062e-4f71-8987-d292ed9c66a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f2e2c9-4184-4013-9e41-2882df06cf61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c03b9c7-99a2-4c23-90eb-81944618c0aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c062e6-f366-48c3-81d6-b2453186bf3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0928449d-6d93-4a3f-aa2f-204ec58abb8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffd7bdd8-3c5e-402f-8921-3fa257a3dfff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d16b1b-83f0-4c3c-9214-dbc9a6585887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb7ba71-8837-45dc-89e9-70fad367f9e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.13.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200743e0-5977-40f4-960d-504d9c075a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a4eba6-be4d-4bc4-b92f-7025bc80f761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d2a9e1-34fb-4902-86fc-2389dfb4253f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b842f0d7-ebe9-4d57-b620-27113b4820a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004e8a07-a32e-4f86-b078-8ea92c46b585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d06b00-22e8-4704-b869-f662a8df53d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3880da7-dcf5-40de-801c-60a15e728e75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d73c22-d2c5-47c7-a613-450e3b0f3837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a92271-1739-450c-8ce6-787e4a3f42f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b66d80f-c1cd-44e4-bcb6-1cd041f1cf13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d625312-4009-4623-8f96-a48af7a0600f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c63ccaa-ab51-455c-b9cb-525b2932a767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25fbc97c-96dc-4d40-bc76-436205a8eec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f45113-66fe-4969-9ef9-3cbbcdfa45c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--941f3a0d-d022-4f14-9f02-7f40a7f1a7ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ced4d8-dd69-462f-a744-133da0078289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bacde11-626d-4206-b5fe-e1ff7997d74a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0012778-cc02-49d1-a316-8d6e8497e287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2355732c-2bbb-4adf-b030-d05e93ed42b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8553d9ef-4d2b-4146-a7b1-8a3db1ddf340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a69a13-2bd1-402e-857a-e98640434eb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ce5bad-8bf2-44b0-8028-ad2eff8dc52a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f9db41-5e5d-44c8-892c-b54f6588263f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43b73b2-a1ed-4ff4-a598-68272a8e1932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed408fd8-15b2-4ea3-b2fb-bb1374b40df5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97ec8479-c865-4ce7-a8a1-72694243f5ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0492e15-aee4-41e7-a10d-1416164db24a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27dee7e7-d5af-4e15-8240-e2ce9405c4eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59ff8da0-0359-455f-8e1b-bcde2cb417b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e24420f2-c594-4687-8e54-5f61122d3b80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73925333-b4c9-4fd3-816c-7de996a6015b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa74fc3e-0d08-4669-b20c-7d15c5e74a87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12624075-bb56-476a-b9bc-c96b61364c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858c5ee9-c0cb-4f68-842e-1910d6dd9c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6756b694-ce84-471a-9541-a387eeca163c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38f5ca9-8f10-49a8-97f7-e6a412842d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0a3ab9-dbb0-457c-9b1a-6bb3559b2c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--612414e3-7817-4a9c-9665-835929274ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036d0994-89ca-45f5-8ff4-1d2ce31218a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ded5a1-e522-48e6-9f98-f5d628c3d699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.14.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c1c314-c815-4a1d-a032-ff6d53f93c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.245.74.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2f2398-6663-4c95-9537-309bb32f201c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.247.116.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9861fc35-8e4a-4aa4-8102-2428674852b3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.90.11.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97daeacb-c09a-491a-a779-92f6bf1e532b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.240.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--283e6f33-ad49-4034-905e-3a7bb1198bdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb42a41-c8d1-48b8-a9b7-872d068b86bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc226751-e6e6-4b2d-9e89-a9e8d8040a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509eaa82-9a46-4462-b068-45ff76d5e336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.41.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4962ae1d-c035-4abc-bcdb-a9bda2eafb43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.0']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6799301a-1be7-44d8-b264-57ebe14069cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9660e41-60e1-4fbf-be89-95a5db90d355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.10']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef9cdcb7-be47-432d-9956-ffd10484a5ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67cf600a-f9a2-4b04-94f8-567f7b39b8fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.101']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af12e427-cd62-427b-8dd3-d79bd6023c23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.102']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b2b063-ad83-484f-8bfd-5dff1cece999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.103']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40efa04d-4c0f-461d-94ca-23192d9d46ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde38172-017f-4d9f-a680-7e196c5e0fa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1779e0-16a7-4108-a0c9-e4de4ac95c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72dded08-0950-4ab1-a833-c38cc797e15e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.107']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e585a582-3c94-4f07-a486-b5118ad574da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.108']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94edd291-f733-4e67-99fe-8617d570ae1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f3e9145-1ade-4782-b06a-17387abb3a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.11']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27acaf7e-a483-4487-824e-e88de16873b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.110']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636a64e2-e991-4806-98da-474c96450036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf59b4e-4f1d-4fbf-8e7b-cc89b97005b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.112']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e85e75-0d04-43e3-a1c2-8f6de0fa0b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.113']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee527c10-161c-4f5c-b273-b89b5df5aaa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.114']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349cf693-fa4c-4093-8f4c-16ea48642de4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.115']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466f0790-565d-4bff-8221-814d8f08f616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.116']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3567aa94-0ec2-425b-80b7-0a8db4612849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.117']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073a3070-04ac-4673-a31f-4b125d45185d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ee66f5-66ec-4d6c-b3d8-acc2e33a1a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.119']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa8cd73-ffcd-4eef-afb6-cff8c1042697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2ac2ae-009f-4981-947f-198d1ad9c1db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.120']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1992a45-fb70-45f7-82d0-6fbc5a5d0366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d42dfda-335d-43fe-974f-2ddeae7a980a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.122']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68decb4b-0b42-47f8-a64c-c7cba851087c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.123']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9908301-c8e3-4211-bd5c-9743a6341edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.124']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd731641-fc4e-475c-80d6-30485d9114c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.125']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86448a9a-8938-41b6-8692-673473a2e7b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.126']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd31aefc-d541-419d-93d0-c78f002f0782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.127']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ad8458-10a2-4f43-85a5-16f797030a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.128']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--879a11a5-41b1-48e4-aed0-0489e794e6ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.129']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9371ba1e-1266-4803-b4d5-54112acadfa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.13']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e56cd60b-dab2-428f-8051-25b79ed60ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.130']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d269833-ba7d-4308-97fe-db23d0857c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5f9fce-9722-4430-9f4e-8a9f7889a275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.132']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b09d1b-47c9-49db-b9e5-2db8d8a0cf74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.133']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd099b38-70d3-49e3-9775-c1b4ff39d68a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37beacca-1b0a-405d-82dd-f4f9d1a5ccfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.135']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d17e55-dbb0-497e-828d-2ebcea23fcc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.136']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c3f85f1-756c-4535-ada1-5eba19d2bf33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.137']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ffed6cd-0d6a-40e6-ba4d-3231e021b545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be4bbfd8-28e2-4fc9-8d91-2941736cb394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb3643a-dc65-4e35-ac62-17d117417729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a6f201-0d30-427b-a473-d72d3f03634e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53de93c9-cb91-4e1c-aee2-999b8b16f755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.141']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ccdc6e2-a5a2-4d41-a083-8cb13e08196a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c67fcf-d939-402c-9a39-401566718c62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.143']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61acdaca-14f0-428e-a587-3b39593a524b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c856fe-50d5-4b8f-92be-b17b805381f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.145']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9cc546d-1a36-42a0-ad84-586166c26c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.146']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed41385-03e4-4344-8167-1e2277424b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e0f951-ec26-4b5d-9911-c3734ab34ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.148']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8eec09d-cdb6-4643-8371-7bbdd4a59205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d3e951-f09a-4045-af64-eabec16e2691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.15']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd222bc9-260e-4337-bac1-e4b800682911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be77d570-f187-47af-82f7-1f839184c285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.151']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e537dc4f-e184-4aea-81c2-c3084aa14a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.152']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4069045d-15bc-4144-99ce-f8b73a1381bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.153']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f387a5f9-0a9d-4300-8ea4-9fda87262854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad5fb51-287c-4133-8323-719d6f7fcf25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.155']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00b4b3a-5581-492c-816e-2f8d3cc2ac9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.156']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0113ff91-3350-40e3-83d8-f5df862b968a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11275c3-7a63-4110-ad9b-9bec2b33ae2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.158']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5d7894-fbaa-4dd7-9acf-6d4189c98d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1eff7b-094d-4ea0-8a71-a3ff6530423c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.16']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f5e501-7560-40a0-aa8c-9ee218a6ac86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.160']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a790e8-3e9b-49c7-8baf-c570014e9fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.161']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--124f9bdd-e2f5-4f04-8924-e1679a45c7aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.162']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26cb4de6-a3c3-4beb-b0e8-477c14474faa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b23d275-e94b-4ae1-9b4a-6ff6234a74d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.164']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb38da6-8aaa-4859-ab64-56821a973129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.165']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4c8d7d-3ded-4dd6-a139-80295083e3c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.166']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61562df9-8de1-47d0-bc15-a58cfb636c25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.167']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3214573-dd9a-4348-8ea3-2aca2b7af043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.168']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac74d09d-43c5-4430-ac79-26917c67aa88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.169']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c8a8d15-819a-4021-86ef-02d197a6fe85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.17']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d26900ee-2957-4829-9fba-a3ecd59b896b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb4252b8-9eaa-4858-8297-25566f6dad0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.171']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8dbc06e-3eec-4a14-acb4-13d354c888e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.172']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b61a3012-c6b3-418a-80ad-535f33f85cab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.173']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f0a310-379c-495f-9326-0505c7135923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.174']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d615eb6-f3eb-4f50-944e-2db447c921af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea9ce9f-b486-4150-91fe-48b90e6b5ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.176']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c26965a-a02e-4ac1-8ec2-5aab1b5e5839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.177']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a3c1b8-2628-4d3d-9792-63286e579b30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.178']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1474f253-0cf1-4941-9638-e8543c14a0b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.179']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0391bb6b-8015-4037-8a66-6ea501e52ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.18']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--173ee50f-9961-49b1-9fea-6f064fec315c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.180']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--460c574b-582a-41c1-bc7f-a48941007e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db64dc32-098b-4b56-8d98-db7a0e51707b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.182']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e35e9763-08a7-46dd-826a-4d2f7da077a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.183']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f01ca42-4e4f-48ad-b879-d97e5f1cd2dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.184']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbcc1c81-770d-415b-a6b9-a51fb098ec4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.185']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa3cb93-a268-4c7a-8423-d2dc0409ef30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b365e6d9-aaa3-4396-9347-6e5d25c9dac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.187']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f27a5f-fe39-4ce9-bcf3-d0ea868c8189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.188']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c79014d5-7418-4336-b113-efebac216d0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.189']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a228e1a1-fd1c-441a-953c-1962eafe835b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.19']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7baa5718-ff8e-4a87-b667-df8ee17accfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.190']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301538ad-bb04-4eb1-8ef0-4e25bb7e7035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.191']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c77d845-39d6-4650-b5c1-80602c21ed69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.192']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1882554-7437-48a7-a70d-f7e078fe26be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00052f9-5c3f-4157-a08a-7c9d9f9f8d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.194']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f3e16c-d69c-4482-ba94-aa2fbc2efe5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8feade-4d31-4a9d-9f12-bdcca208ad09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.196']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd83eb9-f1ba-4704-9ddc-60f1250c95aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ce11a0-aa08-4c57-a29d-58915edb73c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b384a629-dbea-47f0-ae95-360b13a622e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.199']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a14e53-6fb4-4709-87ab-5e18b9f67183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae6d9af-8a58-403b-81cc-a8dbb7cc53d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.20']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf66e7e-fa0d-4d12-9303-5e6a301d7248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ffbfc75-e777-44a3-b681-40ad12f25ab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e6a8a6-966d-4fd8-a3e4-2b058b5331db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.202']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--542338d8-96cb-43de-b7eb-481978a53c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a62c78ce-c8f6-4104-9d8d-9d89c19ee8ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.204']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e568a6da-cbef-4e48-a0d0-1037e389c1ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.205']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16be8d7c-c024-4c6f-ab4e-4b462e9900f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab314475-2f35-435b-8d43-8a66292e6191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.207']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ba7861-7c29-4392-8f51-3b7ab7377321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af701113-b84a-4023-ad9b-ce26b5d10bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc30392a-d21e-434f-8e8e-9d45e525d6a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.21']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb18e2f-2b53-4ed5-bc51-cf24399872df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac84e5c-1007-4ddf-9347-d5b1ce00516a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.211']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c459f98c-a8cb-4eac-ae8c-563f8db0e235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.212']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e3e14e2-abf7-4f45-937a-22fea4e1733a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07cf3fc-92fe-44ea-abe5-8481c67b3d95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9552f54d-463b-49f0-b96c-1c494395add8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.215']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7e93ef-2e4b-4ba2-82d5-86bece14e444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.216']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8874e932-6e4c-4ce3-8e00-c82286cbced4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.217']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4398d7d1-bee0-4336-a2e5-41bb3099d59d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.218']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a7a5fdf-750e-4e89-b5d0-940d57b826c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.219']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd7fcf19-239c-4c23-b5df-4cc98030a385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.22']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b1cbf7-409f-4954-9785-7f2d1295453a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.220']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--753acb12-e6e7-44c6-9184-68273c192abd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.221']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e330787-9c58-4739-bbd8-5ee2f148b862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.222']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c166bea2-fdfa-4068-a1f0-1f94aa86cf8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.223']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f15c881-4a8c-42a4-819c-55989234a291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac9b5a1-86a4-4eb4-b373-62f78255e6ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.225']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd2a035f-1d44-4816-8ad9-7be8dd1bc5bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.226']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8990aff6-1d58-4aee-96de-c119ba8bc6f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.227']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f25c66-e15c-4688-a56a-6078b972107a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.228']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b02c948-e2b4-48a5-aa85-19ec86331caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.229']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497c461e-5617-45cb-9284-a631996e8026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a6c051-c844-4457-9fa3-a7618eafd187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.230']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--401f801c-9955-4955-86db-2e17b9011ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.231']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc22c3a-6c10-4e5c-9d04-bba3c1892c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23d1b4b5-fe67-408d-bb46-c4def492e0a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.233']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70347c3-3135-4240-983c-aa31ee086e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.234']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1fd509f-9482-4da6-ac98-bcd54ad520ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c7c073-77c2-43c9-93f6-285e4bc3de15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.236']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec0c19cb-86a0-43ff-8c10-1fcc4877efcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1316774-93cb-49f2-98f0-fdd6fd3ba552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.238']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f583109c-bbd9-49ce-b324-b6b5eef3b72c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf16f1db-cd4e-4919-aea5-5e41b837b0b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.24']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42234c01-eb43-4f10-965d-372e9ce08717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.240']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff04e0fd-2a65-487c-9c3b-a628fd6b6082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.241']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--618d3455-97ec-457e-ab41-acb6c7a66e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.242']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69bf263f-68b8-4848-be19-838a44024222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.243']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e3cb46-b5d1-4665-8f67-f8d3fd69753b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f40f96-e212-4361-a77d-93630c50bad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.245']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ce38a5-0d2d-4498-9476-9b09b35074fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5fdc91a-5426-4dd5-acb8-8827e393efd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca165e47-a3c2-4f1d-a549-e08351b066c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.248']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c733dccd-db32-4b5c-8346-3b01d93021c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a455a85-f173-4bb5-9cac-62eee4e2f8ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.25']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--981724fc-2039-4c30-9bdc-08504b5c5158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe806efc-949f-4c51-b0ce-3884384a00dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.251']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aca22e1-2a3a-417f-a652-2cdfb29eefca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242fcbee-aa74-4203-8caa-f7a9e6a845dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.253']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19d3a5c-da13-4c06-b72c-cceb76b5204e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--430c840f-f4cf-41dd-95ac-ce67347552e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.255']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a107d5-a648-4f9f-87a6-c532a6c01983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.26']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d777759-c3b6-43e9-b07f-36a5353a0b51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.27']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b020d0d6-6e01-41dc-9e67-dea2c93b8392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.28']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d6d817-993b-40a4-8726-70b99808f938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.29']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41291b5c-cb35-432b-8eb8-1db764e52c91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcde56a4-ddbf-4bc7-99e9-6abf20134f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.30']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51625a6-4571-42b4-b18a-d9446225b65c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.31']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a090d635-7dd5-4ec6-ab56-32b0f5f66c61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9126ff0e-e1bd-41e0-8730-df048bd24ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.33']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b50d88c3-c499-411e-ba04-c7445f6c712b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.34']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa31dfc-d9c8-49c4-beaf-48ae159b8077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dea26a7-5d41-4f48-b204-460e9bfeb3d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0dd333-19af-4f4b-8b95-c632fd6414e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.37']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8df5550-670b-4e58-91a6-239a3e2c1850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.38']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--594ee8dc-2909-4b9e-b4b2-73d4f5d39bc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.39']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7dfcf2b-fadb-4d8f-b8a7-623a62459418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.4']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86f17855-cc13-4749-83ba-a2e6fe633fb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.40']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c59e1eb9-3997-45df-82d1-bcd0ed57b101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.41']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff1b1ce-0bf2-4e1f-bd04-8cfc8b61f8b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.42']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb2b97f-b2b2-4906-a16f-edea1280f6ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2efc960-e09c-4357-b510-77b2231b441a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.44']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c23ff5-780d-4440-900c-43f458d403d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d3a173f-40f1-49e1-8e2e-a5b06ac9b766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e03098-bb58-44b4-89ff-10ed2bcc5095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.47']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5601e58a-0bfb-48a8-84e6-b2d854146fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c10ff8-59c2-44f7-ba91-fbe33bc50698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.49']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a635183e-a3b5-47d4-ba47-1eb9c2d2fd3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76780521-374a-4604-94f2-a7d99dd05ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b486ab6c-6cc7-4d63-abb1-be05d759d4f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e67491-a8f3-464d-8312-1168dc385dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.52']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--282022aa-eac7-4559-8722-0ac937c894e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c88307-ed4e-4abd-b7cb-06e182ba5c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.54']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--173e6364-4b02-4706-8f97-03c168e3ca49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.55']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4336e7f-d845-494c-8caf-d7abadf85696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.56']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f1b2e21-c4fb-4239-8b13-e4f089cfab86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.57']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671e27fb-9616-4748-8591-b564cb37a161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd55e4ef-e715-415f-a52b-c41d4a184c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.59']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3412dc9a-065d-494b-b02c-83ca5c2a3443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ab70f5-cc13-4f14-a163-1ff2231adf90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.60']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ff01ee-62ce-4581-8841-5ff9db2c818d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c255846-3f45-4df3-8eb6-3c3f4ab1c012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.62']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c5c54d-8fd2-46c2-bc0b-1335ac2ad7e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.63']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7233b385-90ec-410f-b8be-7561fd5659b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba52d6c6-20cc-4967-ae3a-ba0bc5d69506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.65']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1e44ca-f819-4e0c-b23f-f1f339539752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.66']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a8be18c-8dce-40ef-8200-c1c4375cfb41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.67']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871f9600-b6a9-4170-9e9b-9d3e56a0cb59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.68']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122699bc-5f15-4857-abb6-7185130c0945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.69']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242d987d-de14-4510-ab02-fdc0e144bd42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c24d96c-6fe9-409e-9619-9167362f3d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0fe7114-ef4c-4269-b1e0-af0868f6113f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07fb56b7-16d2-4601-9cba-de2e136d4181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.72']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1125f7a1-c6d5-4007-aeab-75bfe8141656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.73']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--269afe63-d48b-4e97-9ce4-006d23d82688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b936b7-22e7-4277-a90d-049876e9e01c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.75']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6206433b-7229-417a-8e18-5d1128384ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--037a6ada-2899-46b6-8dd2-200fb9312625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3973861e-56a1-4445-b7b3-cd0adb28cdae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11cfba3e-8c9b-470a-a08e-febd0c4136bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.79']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe192bda-2b2c-4a27-8bb1-11c0f16eb0f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.8']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce1aae8-c6f3-4539-af93-fd1bfa87000e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5929759-8e5a-432a-9215-c82db29382f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.81']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--976ef38d-687c-4ed1-b2d0-670fefb4a90b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.82']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306a74f7-a6d0-46a9-adc7-ce442d411f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.83']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1995d429-6686-4928-add4-190ca4096c29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.84']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab2a635-cd86-49c3-b914-346692a1996a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.85']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65379dc7-5288-41ac-b5cf-196eed19eb67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.86']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--311e7758-d326-4746-8c7d-f801691914a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace6f6ce-b7f3-471e-8870-8ebaf7344575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.88']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ef0e8f-6a81-41e1-ad0b-f775e3a3986c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.89']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad3052a4-18f7-4625-8cf6-73b21a8198d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--834c1ca0-4857-4250-97f9-b8db0881d083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--574b8e98-8402-48fb-85b3-54122b3b3b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.91']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c70fcc-874b-4c4c-b2ca-10a69ef9726b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.92']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09db2899-2b6a-4469-accc-e37c9c2ad2bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.93']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302a72f9-ef98-4dd0-a29e-f54398bc9ad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.94']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c013d4-4c97-4a5f-bb12-0e6b7067373d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.95']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea328fd-aaa3-4e89-9aff-b94c017fe474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5b8c73-92a0-4f45-a14c-903d1afb5462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.97']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f254432b-084f-47b7-88f0-8030021ea103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.98']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e488e32d-259f-40da-88b7-acf0f4531a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.99']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cacae9c6-27e0-481a-ac32-85f4819d7ae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c001801-f1ed-4076-85ef-10acbc8968bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.186']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74388af0-0365-4c0a-bf53-79f8cbd177d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.252']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830071d8-0d2d-4ce5-a583-2a1688889009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.58']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07bbc30c-8958-4ae9-922e-fd59ecb2e91f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a6a49e-15b2-4f09-9d73-d8daf66ecc31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f539333f-918b-45fc-9dea-ade1ebe512f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.205.32']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe70e241-b5d3-4d38-85e2-e3da5d710299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.14']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15949412-6bee-40e9-95d1-7a596773825b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.50']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bea938e-1909-45b5-a094-372515a5163d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.61']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c2f5bf-e132-45af-8639-ecb4f00bd99c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.71']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--245db759-d233-4840-ae18-78a7b74f1bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.74']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b94ca7a8-27d5-434b-96f2-bb48cc22dcc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4623e75f-264b-44b5-b9d0-5ff07052b099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a6b01f-eafa-4eed-98a3-5d68d4ab4bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.57.209']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51573161-3fbd-481f-a6e0-d67d66c6aec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.58.235']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e0b50f-dd49-46b1-9983-08f5e6fac3fd", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.204.138.198']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--059904ce-3deb-4e54-a898-b3667c4a992a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.205.183.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb87c07-4a53-4413-a066-207ac674edf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.222.203.200']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042d6b49-90ea-4923-926a-a44e24751bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.253.123.138']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db64688a-fc95-4543-9edb-175caea092c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.5.132.170']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a00d91ec-3d45-46a9-99b4-4e37f7859f7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.113.10.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bffc614-c8e5-4852-9c2d-4e84fa4d4163", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.120.186.154']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c55e2a77-13a6-47de-b843-d28ffee99aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.109.214']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b26d71-466d-41c5-a924-35738a931f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.206']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8816a87-bc02-4360-85c0-ca3249543c46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.224.9']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa6786c-6b5b-4c36-b475-d01a6e4f22db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.93.12']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b79b44c-507c-41bc-9a5d-b87f145797df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.95.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f7d5e39-e625-4260-94d1-47d6dbc7fd8b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.177.64.139']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0274a8af-9bff-4d1f-9413-4bf22604ec4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.193']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b5b377-4373-461c-b7a5-ca0ee776f770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.100']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf6567d-5c21-40a9-8e2d-ca18fc97a530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.104']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c270f9eb-c447-4bb8-a3d2-be5abfe8f2ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.105']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccff4097-8c3a-49b0-9c91-317f9b451184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.140']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47345224-ca9c-454f-b237-e5480e79b376", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.195']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3490f5a-f8ba-4a05-bcaf-eeaf81a7fe6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--651543e0-926b-4698-b1e7-6d823e282e39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.203']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d5bfa6d-cb98-4907-9c3f-e88b994a856e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.237']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c5f9d6-43ac-428d-b618-83c881b05c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.249']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee71baf6-b27d-4623-bec0-ca0493c35b3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.250']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2304bf-e38b-4e5b-9867-e4c9338871c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.254']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd3aebb-4cc1-45b5-a954-8d8c82de15dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26cec41-e9c0-42d9-a95d-46736bcf468c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22246aa3-45b3-48a8-ae32-e1efb334fcdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.48']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba2f4c9f-a9f6-4e51-8ed9-c5898bbb848d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.7']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec160017-29fa-4a85-9a54-26ffd1e9f32e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.70']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c34042-31cf-464a-8491-b72c792e90b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.87']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb8c1845-27f7-402f-8852-3fffe6add1cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.46.244']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feaf1bc9-bb21-4c9b-8add-e9cc73e2c4de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.46.246']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52eebd7-bf65-4b0a-8630-6c007a177e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.159.110.201']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da2929d-cb55-4b7d-8f4c-4cd8dfb9b934", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.178.203.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066bb1ab-a1ee-434e-bbab-0e2d7ded89db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.182.121']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a334463-b974-41f8-869a-03b89aedbfc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.1']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a0deeab-993a-4bac-b110-de8d5f4caa39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.111']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b92e1a-8f43-4a12-8ac6-9dc30779b28d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.131']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1294e7a7-e9f6-4a37-b382-fd3e6d0b6133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.134']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee5fe9fd-6a28-409c-8126-c1551e47df70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.2']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f60e22b-8cf3-48f1-beb4-5f32d9d4989a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.3']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87dddb2a-f078-4fbf-a6be-30d4846c062b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.35']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3813e35b-9eb1-4823-a6f7-5d758472a9de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.36']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa7a5c7-cfa1-4100-899e-c55bb2609dc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.6']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb2867f-d2f5-4ff9-ac54-5a8485fcb8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.243.15.53']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ceac5f-b584-4ac8-911d-e39cfbc14f71", "name": "Malicious Host", "description": "Web exploits: aws-credentials. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8bd50382-49cd-475f-8ab5-81adeecd02cc", "relationship_type": "indicates", "source_ref": "indicator--21ceac5f-b584-4ac8-911d-e39cfbc14f71", "target_ref": "attack-pattern--8a8bb6e4-b7c8-4514-9164-c7db99614575", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7bf0a991-06d6-4dcd-b2d5-a5640bfd82c4", "relationship_type": "indicates", "source_ref": "indicator--21ceac5f-b584-4ac8-911d-e39cfbc14f71", "target_ref": "vulnerability--6725651c-52bf-40f7-bf2a-10fe38562d4a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d869fc3-bce8-470c-a055-360305f2a0b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.53.122.80']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abeae687-ae54-4410-93cd-09f0545a5cd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.67.197.149']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79bd5837-5829-4a2f-bcea-94a1936446e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.74.116.224']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d93e205-5e9f-4995-be7c-f01d984ff55e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.74.71.163']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43968930-6622-4897-87ae-526e0ea3c0df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.105.71.239']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03dddd7e-7797-4686-a530-56f6891855cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.107.99.43']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68fc4972-42d7-48f5-bfe4-7a040317252f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.146.23.232']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeea42d3-b9e8-45bf-bba3-44b32ae0b626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.165.208.90']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c87e267-2736-4ba8-9e1d-e7c8d4de4bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.173.161.147']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f9ce8e-bab6-48e0-85f9-d794a0270790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.53.157']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb284c9-be03-4dee-9ca7-7520f817da04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.255.172.142']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9967407a-4a67-4f75-9c92-efbaa6909602", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.255.212.78']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347c8fbb-2102-4450-a6f1-0bec0f5c67d3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.27.71.208']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca21290-3765-4298-a6c0-bfb9c27260c4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.32.84.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c235e1-f2ce-4213-977d-3d2757d5f3db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.68.90.106']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8b1848-8b5b-4220-b517-ab6900d86e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.70.164.96']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3eb599d-2ef0-4d3c-b797-8c77aefbe3e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.84.184.175']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d666f5-73a1-4f7f-9658-e88908c0ce1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.46']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e87d5909-0ddc-4675-a58a-b2497d8c7cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.51']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4cd6407-2bfb-41ed-ba3a-336853d09770", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.130.210']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba36b736-84d6-42ce-bebf-80e8f1934436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.96.45']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949d7476-3513-479a-a66a-bc17764f9e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.96.77']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4377e01-5de3-4cc3-b423-9339f6e3b9bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.2.94.144']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96de1b1-1e3b-4f6e-999f-d1307b8a7c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.130.64']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f578a4-517e-4fec-b715-8381a6454fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.133.213']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15713cf4-7f4f-43e8-9586-b96037a5a091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.134.181']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b92d1f82-69a3-4fe2-a6e6-25d83c9e64a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.141.150']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9371bc57-cba7-4d34-a531-88537e812b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.80.120.159']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68245f55-0584-42b4-8927-3a8a5b93159a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.89.204.118']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cede53a5-570f-4a54-9c0f-e1adad97fd98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.90.43.197']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea4169b-aabd-407f-a72c-bd24bdbd4c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.91.19.109']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0760362a-a024-4bbd-9e31-14cb46f91a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.93.16.247']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c1398d-e5a5-46ed-8ab3-e17efa58de83", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.95.10.23']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f2ebbb-72de-4c32-b028-0080ad469be7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.97.24.5']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffd54217-6329-4971-bf73-49e0a3e5cf3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '99.249.126.76']", "pattern_type": "stix", "valid_from": "2026-09-05T00:00:00.000Z", "valid_until": "2026-10-05T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-05-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adeb2769-bd4d-4d29-8a34-1dc136002683", "sighting_of_ref": "indicator--ed2080be-d991-430a-a1f8-f848ad78071c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da2face-386a-45fa-be19-9c596e221f91", "sighting_of_ref": "indicator--31305f69-a2e5-4956-a42e-c8e2b39494ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78741f6b-076a-47ea-ba72-fbedea13603f", "sighting_of_ref": "indicator--eb4bf741-4671-4565-97e5-8914c570c5f3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb7b7f1-286d-4858-a8bd-24a21c6f2e6e", "sighting_of_ref": "indicator--62d6b61b-72ad-4773-95d8-33f926a7d268", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ccc8609-cfc3-4f22-a171-e71c3920271e", "sighting_of_ref": "indicator--caaeb2b4-f869-43a0-b746-3d556069a194", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91a5548-0f66-4f25-be7f-c8a04b3aa11e", "sighting_of_ref": "indicator--38bec5bf-27ec-4dc9-82b3-c7cdd102442a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c346fc53-4cf5-42c9-92dd-18d661d372c8", "sighting_of_ref": "indicator--979f06cb-1026-4e6b-9d82-f8ca4ae1c548", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c12d03b-d6d0-4afc-b469-e1dbfc49b04b", "sighting_of_ref": "indicator--a0133f3a-d5fd-4d28-a4cf-f5e858078c64", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2443afa-6556-4e7c-9f12-0bd572a45dd6", "sighting_of_ref": "indicator--0a7d9571-1eb7-42d4-b0e5-0c855cada229", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8adc68cf-aa5d-4e6d-9509-bf4c650c3666", "sighting_of_ref": "indicator--dbd096f0-d1f7-4448-9b6e-864639c65ee6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2145fcb3-29fa-47d8-969c-d61fd5bd540a", "sighting_of_ref": "indicator--3e5f5ee8-d4c2-40d3-bab4-951cfd07e47d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9535e39-77dd-4ad4-bb2a-902970bb521d", "sighting_of_ref": "indicator--3e5f5ee8-d4c2-40d3-bab4-951cfd07e47d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2d143a-69f7-4e6f-af75-0842e22106be", "sighting_of_ref": "indicator--3bf5f26d-c104-49e8-b460-d626b0f1f867", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60650116-87c5-4cde-ba00-1db09cf001b5", "sighting_of_ref": "indicator--3bf5f26d-c104-49e8-b460-d626b0f1f867", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a8aaae8-0822-44e8-8af9-0edf624e3697", "sighting_of_ref": "indicator--e2423073-56e4-4941-a490-5d5781feb0cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cbf64d8-e6f2-461f-a1d2-d19ea280951c", "sighting_of_ref": "indicator--4f21eaf3-c402-40b5-8b37-d45b7127db06", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3130d851-c0fd-4c94-ad91-ba9cc958a86c", "sighting_of_ref": "indicator--0ae8d9d2-dbab-4ba5-8a86-9c1c70420c8a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfee93e-4859-4911-ae12-eff9e67a8515", "sighting_of_ref": "indicator--962e7b25-f1ab-4b79-b289-d8e283fcaa9f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a1b6a1-7f41-43bb-a300-80a46158c40d", "sighting_of_ref": "indicator--38e607cb-1d26-40af-b05a-fd640579ab78", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a241dae-3ac7-468e-b3c5-7412419cee87", "sighting_of_ref": "indicator--8d6a2be5-9d1c-4951-8473-93a9b2e9f5c1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e48edaa-9ccf-4423-9d04-02663688d07f", "sighting_of_ref": "indicator--5960b0d0-2749-4103-b092-61af81b05126", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e54f47c-767b-4da3-a4db-29b0c35c93a5", "sighting_of_ref": "indicator--15c8bb78-4d09-4fd7-9b81-68ec28bde967", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9012e9a2-c804-41e2-8458-0b563dc5b32c", "sighting_of_ref": "indicator--4b65fd3a-941d-4aea-80b9-02222c962f1b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a684dfc1-50d8-4668-b6c5-9c42449666d1", "sighting_of_ref": "indicator--aaeadfeb-5203-47af-a8b6-3e3f9023eab3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c9222a-7d58-40b4-bc50-6a5d9d8eaded", "sighting_of_ref": "indicator--7559966f-fe4a-434f-8a3c-5edf3abf64b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da2418c-365c-4e7a-ac7f-6490fd8528a6", "sighting_of_ref": "indicator--87394484-0a14-4e60-beb2-a71ebf3d9142", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb8d0c5a-bdef-48d6-8fb0-0e896b65c858", "sighting_of_ref": "indicator--9a14d9e1-5b74-45aa-a3a1-5c38a97c331c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cbc8b31-d5fd-4ba0-8661-87394ed06518", "sighting_of_ref": "indicator--c9ec7524-cf21-4ac7-9d44-db9cc73469d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154f5ec4-67a9-4423-afe8-9e98004c51d0", "sighting_of_ref": "indicator--fb2f47fd-52b0-46ea-b8e1-f9c9ba5514fc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc0ba13-6617-40aa-b1c2-7c5e3ebab826", "sighting_of_ref": "indicator--9e1a0866-727b-412e-840c-b47b016cde74", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b4b4ec-ebd4-47da-a5c4-14018baaf8d8", "sighting_of_ref": "indicator--3a7ffa7a-7048-4949-b8e4-6563d3f50f9e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721b3f53-4889-4d6a-8c19-98d83c85b4f4", "sighting_of_ref": "indicator--79ff54fe-bd9f-462f-a0ee-2660d795d5b5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f819c1-e91a-4e2a-b671-3bb743f00805", "sighting_of_ref": "indicator--ce53387e-d36a-4445-ad1a-6ca1422ba250", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065ca6a5-cc69-4268-9a7b-fd59f02afe50", "sighting_of_ref": "indicator--972f7621-d5f5-46b2-985b-37e8a4e3db8d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d7069c-425e-4ad4-bdc8-cec0cf92d9f9", "sighting_of_ref": "indicator--f7003c01-c513-4117-a346-915cf06f3c20", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b49ea5-710c-4e6b-81d3-6aebab4c4a02", "sighting_of_ref": "indicator--f7003c01-c513-4117-a346-915cf06f3c20", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc76f91-34c4-4e46-b97f-df66d46d5ca9", "sighting_of_ref": "indicator--7dd4d7a8-b4a0-4651-a549-bdc07e857187", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f11ee7f-1ea2-4884-9e15-39cb70075bf8", "sighting_of_ref": "indicator--32f7ee51-3cc5-4901-83a7-4f50408308ee", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c94cad-9613-4395-9325-270ab70a9e78", "sighting_of_ref": "indicator--32f7ee51-3cc5-4901-83a7-4f50408308ee", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a2ddf7-6d8f-4c31-a1ab-47564f26e44a", "sighting_of_ref": "indicator--7498776d-0106-4581-8bb6-7bd1c93d5bc8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2ecc4c-d47d-4f3f-a49b-1f253b98024f", "sighting_of_ref": "indicator--7498776d-0106-4581-8bb6-7bd1c93d5bc8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361f0316-9616-489e-b64f-aec880a705af", "sighting_of_ref": "indicator--afa92c22-3040-497f-b335-ff2e7b8edbad", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33f71fa-c353-4a63-892b-aff417fd7df9", "sighting_of_ref": "indicator--afa92c22-3040-497f-b335-ff2e7b8edbad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e0ade1-e839-406a-9631-4ae20f94b3fe", "sighting_of_ref": "indicator--ecbcff35-e91a-441d-a1be-b278b4658a67", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39483cf4-de72-4efc-bb50-c6d46c4c0410", "sighting_of_ref": "indicator--f05186a7-498e-45df-aed7-049f46df74c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4681d57a-f425-4352-90b9-4260f03a50c1", "sighting_of_ref": "indicator--e9969642-58ac-4263-af4c-d8a5d00966b2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1816022-1c6f-4fc2-b478-5d050bfa0813", "sighting_of_ref": "indicator--a74471a3-bf82-43cc-a032-cbfee5ff37bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f4994f-2b10-401e-8954-4aeb4b0ff953", "sighting_of_ref": "indicator--84251e81-8ff4-4272-89d8-6b3804e409c0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb77dda9-1766-4b12-b8d2-ab2160bb9627", "sighting_of_ref": "indicator--01cbe03e-ddd3-42fb-8342-396e86a1f993", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc01cf4-418c-4924-8718-3534aa04cb7a", "sighting_of_ref": "indicator--3c18a422-3ceb-4557-afaa-de04cd256957", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6544ebd9-4ee3-4f22-8d87-bceac4cbbb61", "sighting_of_ref": "indicator--af431532-a483-464e-92ed-7666c09bbfc8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d5350d-51bf-47d9-b389-9e09f74eb95a", "sighting_of_ref": "indicator--4b266b74-4828-4b61-b5dd-e814e9f8a3c0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039d89ac-ff14-403a-8264-e884943bbbda", "sighting_of_ref": "indicator--4b266b74-4828-4b61-b5dd-e814e9f8a3c0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49c0dfe-f8ed-4f5e-8300-180b46b6135d", "sighting_of_ref": "indicator--7707710c-2913-43a0-bc40-d8aa66b5c128", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64660e5b-53d9-469e-9dc8-2dfc054f4698", "sighting_of_ref": "indicator--7707710c-2913-43a0-bc40-d8aa66b5c128", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b4a5bf-33ce-448f-aa60-00c13b5efd68", "sighting_of_ref": "indicator--2a4be2c6-f6c4-4cce-8829-70de874ed46d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec50834-b48b-4031-bb28-67a21306a2d2", "sighting_of_ref": "indicator--2a4be2c6-f6c4-4cce-8829-70de874ed46d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ec2f78-81e1-4227-87f3-3248a1e23372", "sighting_of_ref": "indicator--d6bbe111-60fa-4052-b6c4-2745f59b78e7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90271e4-d4b1-43f4-a193-a5aa65277ace", "sighting_of_ref": "indicator--15d3f51c-976b-4689-a604-da2740193483", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--310ca64e-0478-446c-b183-76b3187a154d", "sighting_of_ref": "indicator--c3bf36a4-3912-443d-8d7a-8ba12a6ad572", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--378e6cdf-94c6-4bb6-9e6f-5055b84f0f59", "sighting_of_ref": "indicator--bf5c095b-6b3e-4d6f-beaa-ff64646f232a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f87f3209-06a2-4741-b570-63c9774fdf04", "sighting_of_ref": "indicator--ca93e152-bb12-459b-85ce-7adfaa2d5bd4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f5b6406-9df7-4d62-850c-578e5ca34011", "sighting_of_ref": "indicator--cef0f698-32e9-4bc9-84dd-5b84229ced9e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b82f85a-81f0-4c33-9267-cdcedf977867", "sighting_of_ref": "indicator--4fe01844-f598-46fb-b2d9-ede74badac79", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7ee4fd-e985-4c5c-b8af-30186679becf", "sighting_of_ref": "indicator--8e27c4d9-f8b6-4bf0-981b-259e97c976ba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e1dbd0-42b9-4a04-aadd-50bb65991e23", "sighting_of_ref": "indicator--9e57e66e-8166-4ff4-a9b6-1acb6c0c926e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3723dabd-0c57-4921-82ee-474fcb7237e3", "sighting_of_ref": "indicator--4552d1ec-a4eb-4956-83d4-896725dc4e72", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc3d6d8-2b3d-4421-ba28-059344d88343", "sighting_of_ref": "indicator--c5d090de-3c06-4dc5-88d8-faf8a5c805d8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829f7039-a47c-4105-b7aa-728943fa1ee0", "sighting_of_ref": "indicator--6158db68-2210-495b-a1c4-361e09d8c4fc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f3e2796-b3f1-4a00-b508-43570836da9f", "sighting_of_ref": "indicator--861e3ba9-4522-4997-ae90-ac1948a6aca1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9224a9b7-a331-4a2c-af10-3a49f60e65a4", "sighting_of_ref": "indicator--873b79b0-6013-4d69-95bc-1f0788d453a6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0194273a-7e58-4861-a5e0-e9c8029fb5ff", "sighting_of_ref": "indicator--01a235fa-8687-495e-a2f5-4434d7f7c608", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a203d70-e77b-4cd0-b5bf-247e2262dee7", "sighting_of_ref": "indicator--cca97691-940f-4462-9d10-a0323e5b4895", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ea5fb4-266c-4ceb-b452-7c6b8310b921", "sighting_of_ref": "indicator--7264e03b-a5c4-40c1-9040-2610aa8c0787", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a5e5cca-a700-4c23-bcc9-f7e3e6a5337a", "sighting_of_ref": "indicator--af587685-d0a6-43f5-83d7-bd1f98f6050a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f575493-7378-47e4-afd3-951161730c68", "sighting_of_ref": "indicator--d2167b37-9e5f-438f-b0e9-d138781617f9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a55e16-6068-485c-88ad-70151af5578e", "sighting_of_ref": "indicator--6cb3a9f0-9090-4dc2-9eaa-9aae654202a9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37173745-440b-4ae9-8f76-f30cb3455a18", "sighting_of_ref": "indicator--ac4c8d02-b83f-4540-9ef9-c39a5afb25e1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63098384-844a-424f-bfc7-31cd84e2d280", "sighting_of_ref": "indicator--4fbb6de8-0a79-4ad4-8e33-1abda88fd6e0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b93915-a467-4ca2-b3b9-678e011b36f0", "sighting_of_ref": "indicator--553f5690-1aae-40a9-9918-a2d1518439af", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--979d8166-1dfa-48d0-af44-9a7276d4288c", "sighting_of_ref": "indicator--958dd2d1-a92e-451c-913b-cf47f27d6e65", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab8a5ec-e775-4bb7-bd40-1dc5ea6edeca", "sighting_of_ref": "indicator--44bc7621-29c2-4a82-881d-41f944eef455", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--565cb1d5-1b47-4fa2-bd67-750e0f18e2cd", "sighting_of_ref": "indicator--fa2f0796-8190-4e53-aec1-332eabdc1507", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f0f107-5ca4-4d17-8c62-18133f878b21", "sighting_of_ref": "indicator--a8ce3ac5-b16a-4afa-a7a1-301535400601", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f559ae-216c-4c5a-ad39-0d548a516fb4", "sighting_of_ref": "indicator--639ab49f-9034-4d2d-b0b5-6c23b44bbab9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c498db9-fac5-4569-ba6a-306a9f5dff7a", "sighting_of_ref": "indicator--f01a9fdf-9d2f-4721-94cc-757ecb20efd7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7015f1bd-995e-4245-8c67-9a7631c96229", "sighting_of_ref": "indicator--f01a9fdf-9d2f-4721-94cc-757ecb20efd7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4d8e97-6542-4a10-892c-595dc214f738", "sighting_of_ref": "indicator--538eeecb-1ad8-4601-a2aa-a030e8cca938", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f91f7bc-a424-4d82-b81f-5ec7f3bb295a", "sighting_of_ref": "indicator--4ac1ae7f-5786-478a-9732-4d9a6391483a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275ebe9c-401b-426d-8834-553a5826d54b", "sighting_of_ref": "indicator--d23f2e66-3b71-4764-9b27-aff77bde42bf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7986a13d-d12a-4d6e-b9c8-f8acca94b8b6", "sighting_of_ref": "indicator--fd4e171c-7ea4-450d-b3e0-b54267745a64", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d3f157-5f83-4c46-a3c9-6b103782c3e4", "sighting_of_ref": "indicator--fd4e171c-7ea4-450d-b3e0-b54267745a64", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6d520e-e68b-41ab-86b7-063b43d26ffd", "sighting_of_ref": "indicator--f6198a40-6030-4214-834e-07ade1beabd2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cbdf213-fe50-4db8-a100-6f6480cea950", "sighting_of_ref": "indicator--8361a9ff-2b4c-4f03-b173-ff8af91c5f1f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f5f8a70-d6eb-4280-982f-7f28836727c8", "sighting_of_ref": "indicator--3399f831-3eb0-4aa3-9703-93694a48af0a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95fd54bf-26ec-4b3a-aa4f-0ee15b669ddd", "sighting_of_ref": "indicator--6de87f5a-78a1-45c8-85a5-c13ec336e2f3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc4bc08-3aaf-4294-a438-a1d612b1d78c", "sighting_of_ref": "indicator--5d68cf4f-6d6a-446a-803c-e7476fafd0be", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe8c512-a7ab-4a99-9d50-265a36138aad", "sighting_of_ref": "indicator--a98bcf82-66bc-40d8-b80a-ac2b962f3bac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07fa53a-c05b-43f5-9a63-ded4a0c4e7cd", "sighting_of_ref": "indicator--8943de5d-baf9-4869-9107-90ee6a318455", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a42e35-8814-4ecf-8f85-a2a1f731fd19", "sighting_of_ref": "indicator--58d6449a-ffae-4061-87b8-9e70ff7af567", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ede314-1d67-4d38-ad32-1fe8b609d35e", "sighting_of_ref": "indicator--de209b9d-dd8a-43b2-9a53-bc4e7d0f453e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13cd12c1-f24c-4139-ac56-089ebb04efc6", "sighting_of_ref": "indicator--de209b9d-dd8a-43b2-9a53-bc4e7d0f453e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a94134-2dc8-4f43-ab54-2b4c06076bb4", "sighting_of_ref": "indicator--db38467b-4e0a-4719-9b10-8cff4ab840aa", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7958432-d016-4687-908d-6dfc9a63ce14", "sighting_of_ref": "indicator--db38467b-4e0a-4719-9b10-8cff4ab840aa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e69ff8-4765-4584-900d-cfb8df37bce5", "sighting_of_ref": "indicator--67cd2e20-ed52-425b-9f39-57eb3fe61e1d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01d65a2-53e5-40f4-b90b-310d4ca559eb", "sighting_of_ref": "indicator--b783e183-80fb-4bcb-a526-b2c920845858", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92991c09-21ed-4fbc-a1c7-33f003755550", "sighting_of_ref": "indicator--b3a335e2-2bc4-4be9-aa43-515f2b696433", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786fae7b-ce37-433e-aba3-14b565f680b7", "sighting_of_ref": "indicator--b3a335e2-2bc4-4be9-aa43-515f2b696433", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66245fd-b547-4f4a-a023-0a6c30cbba22", "sighting_of_ref": "indicator--1b61d505-f9f3-496f-ae88-a01bcd97d8b0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778ccf2a-802e-4ff5-9d76-8c2452a75683", "sighting_of_ref": "indicator--d10b340e-72e8-46b1-a97e-0dcb7f6cc483", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40f5f1c-047e-45e6-959f-e89957d4ea0b", "sighting_of_ref": "indicator--1cdbfa58-32dd-4793-b3c8-ce7ed76748b4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97769ae8-9ee4-4c1c-a019-70e4cea58ad6", "sighting_of_ref": "indicator--646a362b-0a9e-45bc-b9d3-83b76930e395", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50627f31-f1d7-4138-b2e4-2524794310d4", "sighting_of_ref": "indicator--935aab5d-0444-4055-9159-1185c29b7fee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c4eda2-784c-49c2-8f8c-f7785f0d137d", "sighting_of_ref": "indicator--5e59c363-bd8f-47ed-abf1-8a652fbda5c5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b784a882-392a-44b9-981d-a85db38502c6", "sighting_of_ref": "indicator--72ba4f54-f84f-4273-9dca-5458373a8527", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a654dba-f34e-4229-8c77-e075cf18b68e", "sighting_of_ref": "indicator--2c369436-285e-4c9a-a4be-3c39bfcfc28a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea5d695-9f25-4b56-8a43-43ef9b5b549c", "sighting_of_ref": "indicator--06d738fd-edf1-41c0-8be1-5d16f29ec159", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40397af3-e23b-4169-b119-f8bd7beefee5", "sighting_of_ref": "indicator--2fbac7ba-28a9-4478-96e2-733d2c63c51e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a2c7ff-ba65-4f68-b643-3e1ce4e83345", "sighting_of_ref": "indicator--47c50846-9212-4450-8608-3a6b12d73869", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc439483-ff95-46a2-b25b-43249d24cdcf", "sighting_of_ref": "indicator--daa8f094-4b66-4908-b0b9-4cb44aa27d2d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33fb04f-dbe5-4a4b-8000-e9099952e784", "sighting_of_ref": "indicator--45a01796-6e56-4ee0-ad61-aab22226dcdc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c530a3de-c9a2-4085-bfb8-0a1043183f4a", "sighting_of_ref": "indicator--eeacaa58-9a05-48e2-be68-f3926bfb7ed8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c647a31-0729-4f29-9525-2963c6f6e56b", "sighting_of_ref": "indicator--140ce233-8c19-40e0-95c3-bc924bb6238c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50fe9fcd-a4e0-4885-b3ce-0c3844f89b61", "sighting_of_ref": "indicator--ea77b173-8012-4ffc-9fa7-5ec320ca6bf0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d00e69-b609-42f2-8221-8e69313e42ef", "sighting_of_ref": "indicator--020ae1e5-35e4-48a3-9925-fb3b84c95735", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e978cf0-6f80-4da1-b674-bae9162c4c91", "sighting_of_ref": "indicator--a1b7dc00-97e6-46f5-afb1-f6bb16b734fe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d33d6f-3bb0-43aa-9174-e4a8f10e0ddd", "sighting_of_ref": "indicator--b6bcf9e9-2edd-4c94-808c-ef1d2e1b51e8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dbd9806-d59e-40c2-b426-5335948512b7", "sighting_of_ref": "indicator--b6bcf9e9-2edd-4c94-808c-ef1d2e1b51e8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7b3a2b-19f3-4b72-a23a-250c56488268", "sighting_of_ref": "indicator--37984574-ac0f-4301-a723-ade594440922", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4671bd3-0a56-43da-be5a-502f33dbed51", "sighting_of_ref": "indicator--2b433529-f14b-41a6-8f22-3b53c1ea8365", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17fde9dc-7583-4ffc-8989-11ff73e6be81", "sighting_of_ref": "indicator--08b61fef-022e-4649-adf6-09d77aebac01", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--333e1589-6700-4639-b5fa-741800b1baa2", "sighting_of_ref": "indicator--1b1ba0e8-101b-47e3-8832-d1e4738bf3f4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53be7909-751e-4489-9bbf-d1a9db6804f8", "sighting_of_ref": "indicator--52b58672-7049-4d45-8307-ff62f6108085", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4db022f-b254-4877-8228-9a93cea6f092", "sighting_of_ref": "indicator--401d601c-20c7-4832-a23d-e2b73680bc7f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600317ea-673c-4f96-b72b-e3bf2312b03d", "sighting_of_ref": "indicator--2466a354-d1db-4032-95fb-287594fd82dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0692407-1d2f-41ef-98f1-2a823c67dcd4", "sighting_of_ref": "indicator--54bbf692-5ee0-416c-bba8-8487a954d0bb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6042be-9b07-492a-bfb9-7651c21e373b", "sighting_of_ref": "indicator--b6a5b31f-ef0e-4f3b-a515-743221f15142", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc4fc74-7c30-4d8c-8127-794c17323308", "sighting_of_ref": "indicator--ab83b60e-7d53-40f2-a874-fd80915ad750", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39abc03b-2e04-45dc-818d-659930a0de1f", "sighting_of_ref": "indicator--9eaa4b6a-15a7-4e88-9dfd-e455360c0f6f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ccdf00-d0d3-4a6c-a432-f5e67b736f18", "sighting_of_ref": "indicator--aea43e19-6ef8-4f2d-9cfe-c4fdd2711979", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0ec0ff-a242-4e43-8ba3-6b045b93aacc", "sighting_of_ref": "indicator--0dac07f3-b505-4650-8a5b-78f0e8059781", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4ca98a-e516-4c47-b1ab-336d2b843f85", "sighting_of_ref": "indicator--5757b26e-fb78-4539-989c-6b1b53254440", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca80dc34-18ee-4dce-8c77-40bbb84d9ebe", "sighting_of_ref": "indicator--938dc461-741f-47df-85ac-fc339cc10b08", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c012c69-601a-4596-a50b-ceb971eb99cf", "sighting_of_ref": "indicator--51c7a867-81e6-4daa-8c63-d92a08be962e", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d74c9045-4003-4849-8bb9-ce97c9cbaa3d", "sighting_of_ref": "indicator--288bf80f-5674-4b0d-a642-24f2fff4d5f5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aceee5bb-fa88-4b71-9e37-f03c5e43a872", "sighting_of_ref": "indicator--8f409bd6-1cca-47a3-a6c0-6d1b3fe6ee83", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3bc75e-e5bb-4264-88a4-f73e5bbd0969", "sighting_of_ref": "indicator--8f409bd6-1cca-47a3-a6c0-6d1b3fe6ee83", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff89d4f-5f45-41bb-b84a-b84db92a7771", "sighting_of_ref": "indicator--d98a220a-4cbc-40a4-acb9-ba978e5b26e0", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb1b79e-f9d9-43da-8b9d-044fc46ccd75", "sighting_of_ref": "indicator--a858cc10-b0e5-490c-9563-71f63255b463", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647d964b-7726-479a-abe7-b006d4a61e79", "sighting_of_ref": "indicator--c15fa695-d1f8-47d2-8503-3f425fcc4c7c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484b5b08-3665-4270-94ec-c13f1a3815ce", "sighting_of_ref": "indicator--3a99a87b-d8d9-472e-a281-5d3b02e8a6bb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612674cc-9371-451b-8882-79184ff45b0f", "sighting_of_ref": "indicator--54a55d4c-dcfb-45fc-8f52-048e7b7f0c06", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba15e77a-2730-4b83-8099-1f4b9797a476", "sighting_of_ref": "indicator--aa16d935-07fe-4458-9732-69bf5faa7f3d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6357084e-12e1-439f-9da1-898ac00fd39d", "sighting_of_ref": "indicator--833efa65-14da-4208-b0f2-fa279d93edfa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180a1631-bb36-4e19-8ba4-1ae9bb0f50c7", "sighting_of_ref": "indicator--084e6f2f-b25c-44fe-aab4-07f275ac868a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef693ce5-935b-411d-a2cb-4a580482796f", "sighting_of_ref": "indicator--77e5184a-f8b0-4eea-854f-903ab60c65a2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e36946-1f45-456e-93e1-41b36f13aea5", "sighting_of_ref": "indicator--14ee7335-0c50-4ef8-8822-b8a1936ecc68", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a4b340-7bf6-4af2-b489-28ed504ab9ce", "sighting_of_ref": "indicator--341348ef-0980-4bfa-851b-590e1392c83e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56878766-7252-4f60-9722-6eeb98bf6f52", "sighting_of_ref": "indicator--776aa21f-98e1-49f4-9888-c1b1066c9222", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9427eab4-a55f-47cc-bf4b-20b02586a7d7", "sighting_of_ref": "indicator--d6f5cca6-e616-4a2b-ad21-e153d997940f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a73f937-fbdf-47a1-8aec-db9ac3dd41f4", "sighting_of_ref": "indicator--dd1ca906-fc2b-449e-b2a4-3beca51db095", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4699d4-1ed8-46c1-af54-62cd77deab8c", "sighting_of_ref": "indicator--11dc0fe1-dfd3-4fda-8228-f037220d6026", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7bc334-5c03-4aff-b4c2-dbc6f8a139f6", "sighting_of_ref": "indicator--45b24592-4558-4415-a0a8-49048d5ef1db", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753665a2-d068-4478-8442-535ae80e2728", "sighting_of_ref": "indicator--8da6a806-2f6a-4e40-b20a-c9624f06c3c9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a7ca79-35f6-4f87-9aeb-399ad23fd464", "sighting_of_ref": "indicator--5f6ce2e6-75f8-4aeb-afe1-1d37b40d3585", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273a19b5-6ebd-4135-b581-ced3680dc091", "sighting_of_ref": "indicator--57104359-6ad8-4e37-93f8-f0b151f8cba2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64fcdc8-4002-41fb-9252-024137507ff2", "sighting_of_ref": "indicator--bba97617-5091-4eb6-8f4b-ca82910bf801", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2d1b1f-c63e-416b-ac82-b19e98f53618", "sighting_of_ref": "indicator--f63607a5-28b5-4762-b637-d7e15013b7ca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f54d51-1f4c-4f90-9b3d-9b1338d3b6b4", "sighting_of_ref": "indicator--5c81e10c-e3a1-458b-8b4c-c1ad2df8b1ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae4893c-4a6b-45fa-a36f-e99acaa912a4", "sighting_of_ref": "indicator--a7675b65-60d7-4469-a647-c2a8b8878f4b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a58f1f4-3dbe-45bd-8209-53c229f4b7f0", "sighting_of_ref": "indicator--3c34d125-d7a7-42a6-9dce-2099d32405d4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecbc0aa1-484f-465e-b439-b5f20a6a63c2", "sighting_of_ref": "indicator--54e50290-d5a9-4f74-83bb-29d39d1b1dee", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a06437-7bd4-427f-b9c9-2d48cc84fa41", "sighting_of_ref": "indicator--4905e6e2-59e2-4725-be99-a466cf225027", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed14fc0-d9bc-43a5-b67c-d7e378fe3bea", "sighting_of_ref": "indicator--a3e2c904-7f5c-44ed-a96a-19b105b71124", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21548301-d83a-4cef-b623-75a24682e7dd", "sighting_of_ref": "indicator--2047d87e-117a-4bba-ad24-b2bde09d73aa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990e9168-4681-466a-8652-19d048fdbb31", "sighting_of_ref": "indicator--623d22eb-2fdb-4329-80af-1d5d28228335", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99172576-2d91-4db7-af5f-e0895d7f76b0", "sighting_of_ref": "indicator--bedb05c0-2434-4eed-885f-919b11da104b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7cd4254-a9b4-483b-89cd-380b0f12c9b6", "sighting_of_ref": "indicator--a6edc71a-3616-4981-aa35-94f7155f4f5a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d826e598-65e1-414b-8e04-c350efe14d05", "sighting_of_ref": "indicator--6ecafc0a-65c3-41f5-87e5-a7e80eb210dc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b59952-00a0-4c65-a46f-ca7b835d621c", "sighting_of_ref": "indicator--4fd45008-b4ec-4802-9124-4039e1d044d5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f22911b-07b1-434c-863d-04a224efd672", "sighting_of_ref": "indicator--2910b65f-5638-492b-8014-1a0e1d5aed81", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e297335-5c3c-4b17-9806-03b27edc3f98", "sighting_of_ref": "indicator--3f368ee6-672e-4c57-8bd4-c1ae3729013d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac7b493-d87f-422d-8f10-5649b3787054", "sighting_of_ref": "indicator--0b847792-de61-4664-b66b-9b3d1d3ad956", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18028505-bee0-4f93-afb5-e194904eb537", "sighting_of_ref": "indicator--048d3add-1591-47ab-8340-b4da58cd8ebc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbbc332-d474-4a6f-894a-80f5252bbf83", "sighting_of_ref": "indicator--17f35650-7768-4d77-9a23-eedd1fc071a0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf78e76-0e2b-410b-a1f3-e6064b35be0e", "sighting_of_ref": "indicator--25ee041b-42ed-4e7e-9ccc-02a31ba2ad0d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c997405d-305f-4a9f-a4ad-482acc32b6f4", "sighting_of_ref": "indicator--e4d22a12-a552-435c-a54f-3973a37aa8fe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f350a874-874e-4a57-92e3-103826355f63", "sighting_of_ref": "indicator--55e77735-51bf-43b7-b8f5-c72c1131b079", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a49e1ba-8089-4233-b37a-7e043bf86c72", "sighting_of_ref": "indicator--004e981c-55fa-455e-a738-ad6c844cc538", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01339139-e488-41ae-aceb-07ea5b181dc6", "sighting_of_ref": "indicator--21d4a92d-6e33-47a6-83e2-c385d27676fe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2ecf99-174d-404c-8db5-3ce2c65e7768", "sighting_of_ref": "indicator--591adc08-7f59-4002-a46d-1f5129781f4b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e27c76d5-5b92-4f04-96c2-9e654c26ba2e", "sighting_of_ref": "indicator--aa8db17a-03ae-4075-a588-ce2edf5dcdd9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36578f95-cb64-423b-ad8e-226c1386df48", "sighting_of_ref": "indicator--7c803919-ee95-4ad9-adab-1607def78d37", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbba32fc-13ab-49c8-ba69-41b667d4b70d", "sighting_of_ref": "indicator--4d97a383-78fe-408d-bdd8-6bfa54754c70", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22dd2431-7590-43b0-994c-b328d84d5856", "sighting_of_ref": "indicator--d3da19f0-e266-4a27-b2a4-967cdfc1daa7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23eb7c4-c200-4e26-9599-c4f97b23ba5b", "sighting_of_ref": "indicator--46fbe13d-eed0-46b5-8948-645cb3d58581", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc17db6e-e81f-49ad-a282-87f32db3cda8", "sighting_of_ref": "indicator--ba372989-eb1a-4528-9eef-60f93f26ae5a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92cc4417-87b0-4d02-a8ec-a797cd6058db", "sighting_of_ref": "indicator--c6884bed-cc21-4b5a-9710-d8e4d3703c1e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9236062c-453f-4e67-be19-abd3dc8a6049", "sighting_of_ref": "indicator--fe505427-3cc1-4878-831a-7a0748b81988", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc3e92b9-905b-4bbd-988c-3cdc86d66482", "sighting_of_ref": "indicator--5fba9406-e3da-4777-a64e-3c949a9413e6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fcda6df-a54f-4934-8764-ca3e6ed58b03", "sighting_of_ref": "indicator--6ca53ec3-0d23-49d7-b0fe-dd5f9b97e8fd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ea6bc4-2bad-4061-9c2c-65d26f89bf80", "sighting_of_ref": "indicator--367fa2f5-cde4-4736-b421-33c6bc24cd2c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a946fae0-d72b-493c-9fa6-deb4f092bb31", "sighting_of_ref": "indicator--26581a6c-2ab2-4dfc-9974-89242cdba5b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a712d0-0aee-40f9-8a9c-c64fa39afc14", "sighting_of_ref": "indicator--e61a955d-d2b3-4445-a3c8-375fe46c74c8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a04e3a-1cde-49f1-8f51-a57a6c39b9d8", "sighting_of_ref": "indicator--7804fba1-2fb8-459c-94fe-43aacdac31e8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f368c6-d60c-4267-9919-3cac99319412", "sighting_of_ref": "indicator--b8077424-c65c-473d-88e4-5b89033dc6c4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a09b914-dcb3-4bd3-b66e-3325eae860dc", "sighting_of_ref": "indicator--e8150b49-cad0-4cb3-88c4-db54ec6a311e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5833ee-2c7c-4ed0-8d05-a4c73bb0957a", "sighting_of_ref": "indicator--d3e3b60e-c42f-49a8-a2f4-00e7de49b2d2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce7c280-f137-4496-a0b7-1e41cc57fcfb", "sighting_of_ref": "indicator--59472540-ff96-43d1-a710-3daf3f7b8b09", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb4d981-4cad-439d-9881-981eccdc7e9e", "sighting_of_ref": "indicator--8ad0bd9d-0ed6-4d3f-91b0-a6327c0403c0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b975684-d41a-48fe-89d4-aa6712fce6ee", "sighting_of_ref": "indicator--8017c788-fce8-4b0b-bbbd-e1bc3d044a06", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78e9f4b-13bc-4c4a-80ce-e9227d93251d", "sighting_of_ref": "indicator--4d1d96c4-217d-4a32-af49-8f323aa4fc21", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d04733-6fc4-4a25-9080-30b45f2d20c4", "sighting_of_ref": "indicator--9b9df71f-f23b-4056-858b-1f386b879a72", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cfff9e4-bdd8-4046-877a-d1fc071d5b93", "sighting_of_ref": "indicator--23f32da1-37b8-4cfd-85d0-6069d5fa17da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9bc641-9db2-423c-843e-b7cb433bb910", "sighting_of_ref": "indicator--7acc9136-4305-468a-bb4e-4f9a5f10bbcc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2001650f-1e0d-40cd-b308-00b02f9730aa", "sighting_of_ref": "indicator--8f834e1f-e6e8-4e4f-b6cd-6e164655a752", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42bf3efb-4853-4ed0-b722-ca8e0bae6eb0", "sighting_of_ref": "indicator--db09b66d-8044-4968-bd7e-9f6b54de08cb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55ee9ab-46d3-4fc9-962c-0715b42eaff8", "sighting_of_ref": "indicator--c54c290b-9979-4f5d-bb11-0227d6810111", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f101940a-db00-4dcb-ab80-790272b95d24", "sighting_of_ref": "indicator--01aafe6c-ce64-4467-b291-4aa3ebaabc87", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39af013a-e480-4fa1-b0c4-b68cc9a50449", "sighting_of_ref": "indicator--7c2a25ec-d66e-4f57-bc70-b6819bace672", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d856c20-cfcd-421a-9224-13dea6a89102", "sighting_of_ref": "indicator--5fb9bbd9-ffd1-41c6-8882-937c05751fe8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed53074e-1e18-4b90-ad76-057f9b00a782", "sighting_of_ref": "indicator--f05ef99d-ffff-43a1-9d68-27cffe50744e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899e07b1-eebc-4fef-ab96-605c6d740ea7", "sighting_of_ref": "indicator--413d2cfb-be3d-402e-a8ce-10a92aa4f49c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609399d5-489f-49e7-879c-3332ced34db9", "sighting_of_ref": "indicator--8bd3283e-0127-4e1c-9617-292098f832e0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe4c95b-3100-461a-af29-d96265378bba", "sighting_of_ref": "indicator--ae39fccc-78e3-460f-85be-bc009a6d5537", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc30a0b-33e5-46d4-a604-0383134cff58", "sighting_of_ref": "indicator--c503ec81-6303-49c8-bae9-d5f46ba2889b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196b730e-4bdc-49c3-86e0-efc4d292598f", "sighting_of_ref": "indicator--f7ffa4ba-47be-4bf8-bdc7-76ba16fcdba2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--075fdafb-6406-4a0b-88ec-74923fb9fefc", "sighting_of_ref": "indicator--2fac692e-58c9-4ebf-ad49-b6e7f56d604d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a513e6e7-f5e5-4663-a745-1b58e56790c3", "sighting_of_ref": "indicator--ab5753c4-cfee-4651-a76b-25428473970e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929926f0-08bb-40e1-b23d-598bbc0404b3", "sighting_of_ref": "indicator--2f6e2a2e-5ec3-4bad-ac6a-76878298d201", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4abbdbb1-6025-4171-849e-1f028e891d04", "sighting_of_ref": "indicator--e75998ad-bd7c-48ca-97a0-4ec88853a72d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18900516-bb8d-4c0d-a848-f957ddaa395b", "sighting_of_ref": "indicator--9b464193-ee30-41e7-b6de-551a93ad3f8d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da408af-92e4-42b0-9e8c-e34613aa2736", "sighting_of_ref": "indicator--5d78e7f3-1219-4a58-ae84-db14d2503231", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d5f539-26aa-426d-9602-2fce15d40e09", "sighting_of_ref": "indicator--2e2ea0b8-7173-4969-9f1f-990b01a007f8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4766badf-54c8-4571-84c8-be76be71a54d", "sighting_of_ref": "indicator--e4af84a2-4263-40ba-9a56-938c5fd55418", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc4c66d-1cae-4936-8e59-0b085f6d4d32", "sighting_of_ref": "indicator--21306c71-fa3a-4ef5-8321-89bd8c2f49b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996cbf77-3bc4-4562-b9f9-d128c8b361d7", "sighting_of_ref": "indicator--55c372eb-cddd-4eab-8a39-04f40c3c639f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce89824-c0c9-4374-9116-5893c919ae90", "sighting_of_ref": "indicator--3ba983e4-ec65-41f7-81b5-cb84ce32cf9c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebdb25d-c8d4-4a91-9843-1b7c337506e5", "sighting_of_ref": "indicator--78022608-aa4c-408a-a43f-0d4f89d78a3a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4da0def-4c63-4f98-ae6c-4cb372afd916", "sighting_of_ref": "indicator--7d57a986-c539-462c-9f8a-3edcaaf437a7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dea7ee9-4bb8-4e3f-b472-54b12abe6c81", "sighting_of_ref": "indicator--26793cb5-e1cc-4a0f-a868-cf292990bb7a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4964e54a-8684-4b53-8f84-17cc5d4cce28", "sighting_of_ref": "indicator--27b21513-b4de-46b0-b5dc-91a88785bc55", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac72a02d-a516-42f9-bc55-c1c9c5296efb", "sighting_of_ref": "indicator--8d6016ed-a237-4072-a647-a2f7afb8fc04", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fecd649b-45c0-4de4-82cf-868aba1d250f", "sighting_of_ref": "indicator--6dd08115-4e13-481f-a9ca-0627f0026c76", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac879336-4236-4d6c-a90a-09c57691cefd", "sighting_of_ref": "indicator--cf2dc258-aed2-4790-af82-24ee66d4ab3d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57096908-2f8d-4a2e-978c-8cb2389c1bba", "sighting_of_ref": "indicator--569de5fa-3010-4215-9615-e290589a42d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead212ec-2f73-4463-9dec-4a4e94dcd1e7", "sighting_of_ref": "indicator--248a96b2-59ee-4a62-9b44-d764ac987d76", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f723f92f-6d18-4f43-87a5-99cd82f8022a", "sighting_of_ref": "indicator--9bc7b07a-d15d-4a12-977d-fb1b6c8f58f6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be6cfa7-691c-44d0-979b-f71b8acdbd34", "sighting_of_ref": "indicator--b15be666-5717-4f8b-8e49-50a39baa8534", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f506a35-794a-437f-a7c6-c5599ebbaf85", "sighting_of_ref": "indicator--0305471a-631f-4c81-89ee-5e39ceec95cd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7948b73a-f504-4f68-ab9d-bedbd8c254d7", "sighting_of_ref": "indicator--cb1b7df0-c9b8-4211-9c00-b7791cf19666", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a96e8aa-7dd7-47bc-b937-cba51f8542f7", "sighting_of_ref": "indicator--b0456d68-86b5-469d-8a8b-aadf1057ab73", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4103e6ac-356f-4647-a4ab-4a23300aa8a7", "sighting_of_ref": "indicator--56c1c733-998e-41f3-8d29-41befece8cfd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4b7ea9-5da9-4758-9da9-ccae3ddbe96c", "sighting_of_ref": "indicator--2c811ef6-a374-4c7e-b0c0-aa094b13f7dc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b3a3f7-8717-49ce-9018-6f9bc3ff80e8", "sighting_of_ref": "indicator--59ec07ca-591f-4028-858e-70aa52c26544", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff8141d-6531-4986-a7d8-e13e84c5c916", "sighting_of_ref": "indicator--27a39f5f-d03d-4494-8d99-2dd36e720f0c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff4bd53-b75b-4003-b785-0010ad682588", "sighting_of_ref": "indicator--e22707e5-8200-4e9e-8f00-9fda1c7542f1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9416c5-bdb5-4c44-b56c-339aedf78fa4", "sighting_of_ref": "indicator--5dd5be98-9e25-4a88-82e7-89f09d0074c1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--711ead45-47b5-419e-995b-c98dccc1af11", "sighting_of_ref": "indicator--d9e3aba0-2827-4105-908d-0f55667f99c5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37fc33e6-e842-4c7b-9040-96654441e37c", "sighting_of_ref": "indicator--d4bd5b0f-41f5-4a4a-ab09-ee5a358190d2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f36ce9-cae5-456b-afe3-afe6cb4f07e1", "sighting_of_ref": "indicator--1bad43e5-0346-4938-900e-34b483d10f6e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--319bf397-a802-4c41-86fe-4659644a1700", "sighting_of_ref": "indicator--d1eba1e6-e284-4b45-acdd-38e00040b82f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd7fd7a1-86fd-4f9b-a3f6-74d71fe7150b", "sighting_of_ref": "indicator--42935147-100e-4494-ba6b-83ddd8ecaa0f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72e7cca-600e-4833-aea7-83d057cbf3d5", "sighting_of_ref": "indicator--9d3d51ba-f18b-4850-8bec-4a02ec1edda9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4d2aad-ff30-47e9-ab65-a7fd9b7fa7c7", "sighting_of_ref": "indicator--a06bc516-a0b0-47b6-b717-58bd49c82594", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9fd2271-19f3-440b-a711-1af14459f38f", "sighting_of_ref": "indicator--601471c4-f12c-4b45-af59-03921768c70c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c072c6fb-c91f-4837-99c3-e1206596be4c", "sighting_of_ref": "indicator--4035b803-1a0e-412e-a595-9394587f55af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa9d180e-4754-473b-b3fd-bff18c0888ad", "sighting_of_ref": "indicator--5655faf5-4492-4431-b89a-34d6162f214f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb32d19-444d-45a7-b5fc-d5d88e007391", "sighting_of_ref": "indicator--c3e34876-070f-484f-a11c-8f357c6de213", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea55bd80-b18d-4aea-bf35-7fef450eb98b", "sighting_of_ref": "indicator--1c25e15d-d645-42a6-bef6-9c53014236b5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154518ac-4928-4fe2-8567-b39a823c1068", "sighting_of_ref": "indicator--4e07951a-66e5-41ed-9249-e1a18dd3984d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f437a9ef-b8f3-4435-a112-9b751b970dce", "sighting_of_ref": "indicator--52e680e3-a114-4350-bada-7b47b4019bb1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f72c2918-3d23-4867-a5c3-f1b3cc1f098d", "sighting_of_ref": "indicator--8bba8633-3f36-4f37-8dcd-c8657686293c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9050d6-ea4c-473f-a62c-ef844c3035a5", "sighting_of_ref": "indicator--ef56e33c-2d9a-4cc4-9129-1641f109f8d2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d525dd-b9f2-4fcc-947b-6ceee121281d", "sighting_of_ref": "indicator--0a0efed5-db9a-481f-ac16-1d67e2c4a7a4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8900c274-7515-4766-bcf6-4d4173b396f3", "sighting_of_ref": "indicator--26ede0c7-e143-406f-aeca-2f5a5a25fdf6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4946c25a-bc9f-42d3-91fc-f2a41a449192", "sighting_of_ref": "indicator--7776b8dd-835c-49e2-a984-31d410cefe52", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6573a985-2d2a-4397-aaf5-7721b8ef332c", "sighting_of_ref": "indicator--560fc8a1-8ec8-489b-b7d0-8e4569b4f162", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1512f08d-5358-4303-a4f7-4abf8ac85281", "sighting_of_ref": "indicator--eae5a380-00dc-42aa-a965-bbae5089cf83", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548e2fa9-e28d-4622-9c54-156d6e3b09ef", "sighting_of_ref": "indicator--062799bf-075f-4335-8300-dc6b060ca0c7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a5e648-0e01-4d63-a007-433cef36e4f9", "sighting_of_ref": "indicator--6a874756-5053-47b9-9b4b-2599d09386ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d3633e-53a1-45c4-87a1-53842a42c7dd", "sighting_of_ref": "indicator--c3a4079e-c416-4e27-a918-333610591358", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2dafc5-c16f-4b17-9eeb-4e5c120423ce", "sighting_of_ref": "indicator--df483e19-94a2-4447-a065-4e5e96298196", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aab2166-c29b-42c8-a98a-149436889967", "sighting_of_ref": "indicator--56a309ff-2203-4571-9a9f-bdea5fb22d18", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--994334cd-dac8-4e23-b1ce-d3ce488e112b", "sighting_of_ref": "indicator--5c447825-44cf-42a0-9f3e-82bf6d8f9df6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17dc1a81-95df-400f-8ca2-11d724449373", "sighting_of_ref": "indicator--7cb7552c-1ada-4d0a-8bae-af81e91bde70", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbcae56b-6c18-411e-a6d3-3d06aa429373", "sighting_of_ref": "indicator--f5342c53-880d-4c45-87d7-522747301eba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8052d7-d13e-4640-a8b7-af7f40a498ae", "sighting_of_ref": "indicator--33bf4e15-1c4a-433e-aea9-b0dd102017cb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a203e14-f9e9-40b8-8463-c2ff382d100b", "sighting_of_ref": "indicator--2922cda9-008e-458d-a1a6-8d7c9b2ae657", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--883a4b42-35c6-44ec-9da3-d9e7e2b16186", "sighting_of_ref": "indicator--edfb8efe-0ea0-41f7-a416-05b263acb775", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa355c56-8a77-440d-a1db-2f749ff9fade", "sighting_of_ref": "indicator--bcc267a2-3bc3-473d-89e9-31118dcd5192", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39cc82d-5931-416c-b173-4f926c69bab7", "sighting_of_ref": "indicator--4f4b8ae2-c0a5-4899-a6ca-82f84a907ce0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad9c843-2513-4a41-850e-b56f88159b64", "sighting_of_ref": "indicator--f2c3e96e-8ade-4b01-a878-2422b206b24b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f28799-c243-492a-be5c-7044a726fd4b", "sighting_of_ref": "indicator--62164c48-6fa0-4911-b03c-e63b6042a2a5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d18be2-5bc5-4053-b861-617e5c6ab032", "sighting_of_ref": "indicator--2fe1dd5d-ca41-44c9-b173-e849faf962f3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc290394-8191-44f5-a914-10935017c4bb", "sighting_of_ref": "indicator--a8cccf53-4be2-4d1f-b758-ee402314d8a4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0e16f2-76d7-4110-9808-1c5866dc5fbc", "sighting_of_ref": "indicator--1b462b4a-7479-4f90-a0f3-72e0a4c6dff7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c63ac6d-a955-46f1-8431-401da61a9e01", "sighting_of_ref": "indicator--91e0854a-f7c3-4d40-beef-5cea8c1055ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98be19a7-c278-4e08-be05-2aaf2efdf853", "sighting_of_ref": "indicator--2ea8d8de-6866-4af2-b797-995321010dc6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f375bd12-d357-4feb-8b58-124a05c45fe5", "sighting_of_ref": "indicator--ce9f17fa-697d-4e4d-8998-68ba35cbdaf3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828ec6e6-2c04-455d-94e7-6d7ccfb77959", "sighting_of_ref": "indicator--fe064c29-243c-4789-bad8-af8902f4ed43", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea675a7-a408-45ea-8db0-0bc9a686759c", "sighting_of_ref": "indicator--f30d1408-edb5-44bd-95fe-d296ab162669", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe957bb-13c7-448d-941b-9a7090e72c13", "sighting_of_ref": "indicator--b808bcff-4abd-402f-92e2-6e70afec92d1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578753e8-0941-4aec-8cab-4be98ee24d56", "sighting_of_ref": "indicator--4ee87e1c-3828-4140-bdaf-8801a99e6f71", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895d76ed-86e0-4497-a174-e807c0a2a83a", "sighting_of_ref": "indicator--32e3e685-a984-46f6-9d2b-9f2f85d9361d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b8dfb6-55c7-46c4-9af4-8628de864eca", "sighting_of_ref": "indicator--3bb6ff10-7fe1-4607-a5aa-f43cb30a5048", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf1986f-9855-45e2-b869-c114d937250d", "sighting_of_ref": "indicator--eb8ef6d2-f595-48e6-89c6-83e312406f32", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbbf5358-888f-4526-a76d-b7e5fa0e7c97", "sighting_of_ref": "indicator--a0c09c95-9478-4458-b35e-c3bf3b38bbfb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b309784a-72cc-4c9e-b9ae-da95a53d45d3", "sighting_of_ref": "indicator--c6938deb-d61e-4e19-bb1c-d42592366285", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2d56ac-581a-4170-804b-b0d8ccfd56f7", "sighting_of_ref": "indicator--3b75106d-806d-42c4-b95e-241016b77893", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd54c72-db5d-4ff0-bfca-0de4a429a50e", "sighting_of_ref": "indicator--53861b79-8c4b-4748-ac04-ad0d222c20aa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c708ec0e-3741-4d0e-b4bf-1b37fc5b8fe1", "sighting_of_ref": "indicator--3f54d544-c613-4931-bee2-92afc88888d2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32752db5-acdc-46be-a0ca-6cbce46b8986", "sighting_of_ref": "indicator--4fd236b6-9b93-4b06-a399-68d99b284f80", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b5dab44-4b7c-4882-a8b2-e2347c4dec1d", "sighting_of_ref": "indicator--77900c5e-fa73-4f1a-9f96-4ec6b4b6c5e8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6146546f-920b-4639-a567-e7fd4da1d0d2", "sighting_of_ref": "indicator--cbac78b1-1a1f-492d-96a9-f848071958e0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4bc42cb-505f-4fc5-8673-18ff2a40b929", "sighting_of_ref": "indicator--75b055ed-c92e-4979-a4cb-2e36309ccedb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8313bd1-186c-447a-aa02-48400b6940c7", "sighting_of_ref": "indicator--3f3b4d7a-3a87-4efb-b979-1711ea302770", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe699e8-1f01-4cf0-80d4-f6bb8bdbe84d", "sighting_of_ref": "indicator--49596efd-13ac-4bd2-80be-d4ec289d359a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf90f71-bb38-4dda-90f5-42f545db4cd5", "sighting_of_ref": "indicator--4ffeca9c-b58b-4100-81d9-4cee9ab0e382", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9056a196-7325-4c7c-8797-20cd07839866", "sighting_of_ref": "indicator--82337eb6-2649-48c6-9494-db8504398e2a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d0788c3-f6f2-48c7-9cf1-79b8d002e4b5", "sighting_of_ref": "indicator--3a42765b-6700-444e-81ed-609211175e7d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381b9ca5-cbd2-4c5b-a0a4-9e6630cf0bc7", "sighting_of_ref": "indicator--f5457450-9671-45e8-bcff-eb5a78343d73", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f677261-38ca-42d6-bebc-549e0eb140db", "sighting_of_ref": "indicator--3486b25a-b452-409b-b28e-b6097dd0b233", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee870f29-be9d-4c71-9c9f-efd4299d3803", "sighting_of_ref": "indicator--583c5798-a7f4-4a2d-b811-cb633df32730", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b21ab102-e806-4d30-81ef-954c99afcbcb", "sighting_of_ref": "indicator--3f3111bc-2188-4668-9f4f-fefd60c98652", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691b8136-9280-4a13-9fc8-8fd1d5cd8ac5", "sighting_of_ref": "indicator--c6085722-489f-4ffd-8b52-ce903960bf2a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4210922e-c216-4fe9-b575-6fe6f372c454", "sighting_of_ref": "indicator--292eac95-d0fb-45f8-ab0d-31556c1e94a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a71689-6265-4bde-871c-ee9c66fcd941", "sighting_of_ref": "indicator--a416bda0-5d9e-49e3-afc5-b783413dd695", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7800e40f-a12b-478f-979a-d1c51456e1be", "sighting_of_ref": "indicator--620fbb29-bd20-47f2-984b-439a832f7ed5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40fe3410-6ea7-44f1-89ed-adf9223f2cc9", "sighting_of_ref": "indicator--16425652-6b5b-41af-b2d0-a1545ba2acf5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5017cd-b54a-46ff-a517-710c6638ff79", "sighting_of_ref": "indicator--9ea4c425-2dfd-4e61-924c-1fff943975fa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee69351-75e8-44b6-99f3-b3395b15e017", "sighting_of_ref": "indicator--36f339ee-c49c-4331-a613-1ceee1bd8d18", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92c19a3-d789-494d-b3d1-8361bf6fd8db", "sighting_of_ref": "indicator--a3268dd0-face-487e-849a-9c7f8e439cad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ebc775-b4de-4b3d-8b92-015e2fe24f6b", "sighting_of_ref": "indicator--34061ac7-9fd5-42df-b731-aaa6b1fb5723", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058778cc-d81d-4838-9799-c8ccfdb811b3", "sighting_of_ref": "indicator--24623afa-3634-4b1a-8637-20c15dca8754", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf5ba86-dcdb-4285-8526-2383ec50c572", "sighting_of_ref": "indicator--fb22ce9b-a5e0-45e9-9ffc-c5fa8bc4674c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f62df5-58cf-4cbd-9314-9d605fb0f030", "sighting_of_ref": "indicator--2c16c020-f7ee-4043-8401-d85b4b2f258e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b091a5d4-4d59-4bf6-825b-076a98972412", "sighting_of_ref": "indicator--ff026910-9363-484d-a539-a4920e85dda5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00626f7d-d968-4089-8928-343abd5e40e4", "sighting_of_ref": "indicator--9f4a453a-c5ba-48d7-9353-26929a3b9652", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3391fab2-6d85-4c8e-8bb4-3d8a3ea26ea1", "sighting_of_ref": "indicator--7df39805-3de7-4d66-8979-a01730d922ab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a568a3-b50f-42fe-bac2-0e92d0a5ed7c", "sighting_of_ref": "indicator--b92228a4-c9cf-425a-9ddd-d988f9f95cae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f8c5da5-93b4-47c9-b0fd-c00987b8a4ac", "sighting_of_ref": "indicator--a1fb3729-c41f-47dd-a443-aea807e158da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7dba26f-4738-4f44-a5d4-40735cd22e2d", "sighting_of_ref": "indicator--bac08e5a-8f8f-4d82-a1d1-8c9e460bfaf1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578960cc-b035-475e-9ec9-546e453c85b0", "sighting_of_ref": "indicator--6f0baaa4-0589-4cb3-90aa-0c1d739fdaf0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebb62f5-969b-4392-8f7d-593da23cfcc3", "sighting_of_ref": "indicator--ae3e6bf2-3621-4cb6-ae35-01b67041c820", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b49b863-22fc-444a-a4df-15c4be239be4", "sighting_of_ref": "indicator--f8df73c3-ce85-4ca9-82c3-903ee434d7bc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806d9d22-c4e3-49e0-9e79-3afd542866bd", "sighting_of_ref": "indicator--13b9382a-2d7a-4b5b-8937-b812795f5011", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ef4ecf-2020-4b4a-8054-d7faa4a24216", "sighting_of_ref": "indicator--d3c0b605-6a29-43c6-880b-8fbf79ea2ba9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d99653d-3f62-417a-9006-d3d6c849d32d", "sighting_of_ref": "indicator--3c03843c-3db1-4525-9ec5-c261ab0b4886", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d21eaf-08d6-4c0d-aed9-82dcab2b2aef", "sighting_of_ref": "indicator--d7971a5b-bb7a-495e-848e-045b918f74c3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c168f8-05ae-433a-a471-11b990c61aa5", "sighting_of_ref": "indicator--454f275f-1db2-407f-aa2a-518c83dac479", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffbb9620-7fb4-48e3-a6ca-178722b889c8", "sighting_of_ref": "indicator--298ed623-7e50-440e-bd78-995f1ad7174c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9513bd10-e7d6-4b24-be06-ad3e514512e9", "sighting_of_ref": "indicator--837f6a9f-140d-45ce-a5e2-7b48ee11c3c1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d048edd8-48e2-41eb-8988-21a10a8e7495", "sighting_of_ref": "indicator--6c323af7-7fc0-43bf-a51d-441ec0e6054b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ffbab51-4788-48a0-9d8e-d1367b289a08", "sighting_of_ref": "indicator--dd49c88f-decc-4422-a587-f294783d2bfa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54235eeb-1c39-4ba1-ad3c-369c72934b5a", "sighting_of_ref": "indicator--42b20c39-5c0a-441e-86e2-803c35517992", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5edaf58d-a090-47de-b27e-87bd0b89e745", "sighting_of_ref": "indicator--a950975d-6e81-4b97-b96a-00b1ce7a6ce3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea0623b-92ef-46f0-b6c7-b7626dc2c464", "sighting_of_ref": "indicator--e537dee0-0d99-4940-a5be-f5e7a9e6144f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e90c3b4-0b5c-4baa-a30b-497cc217819c", "sighting_of_ref": "indicator--37518ac9-011f-4517-a57d-161677cfcd48", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a1482f-8a3a-4d34-849d-d922abe3f427", "sighting_of_ref": "indicator--fdfc54bc-7a9d-4631-8cb2-dc2e73a6958f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--109c167d-9416-413e-9402-4d2e9205480b", "sighting_of_ref": "indicator--9bfbc65a-54a8-4ffe-8ae1-dd9c5b389576", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6b1de5-e347-4917-a260-f3263a3152be", "sighting_of_ref": "indicator--fd1c255f-aa87-4c82-9525-a3b5ce2cb830", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d72b97a-c5e0-4a3d-8656-f76c0f044111", "sighting_of_ref": "indicator--b6721893-b1d6-43cb-99d7-ceb2f9af8379", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7267e440-f08b-40d7-acab-54dba85b105c", "sighting_of_ref": "indicator--218087de-ac98-433f-89e8-6764de750d63", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc07c5b-448c-4aa3-9112-d15e42361edb", "sighting_of_ref": "indicator--53aa3912-72dd-432f-9f61-8f5f78c1d661", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aebeca3-dbd8-405c-878b-e0d7740f61d0", "sighting_of_ref": "indicator--7ecd8457-3323-4185-98ad-c03b389b1910", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108c1151-4208-484b-bfc9-2c34ecb9b9a8", "sighting_of_ref": "indicator--9770179b-7d09-4b55-a12d-88b3b1bef30d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec515b97-a5d3-4d9f-b51e-0d42bcd81cb6", "sighting_of_ref": "indicator--fba4afd1-764b-4422-b80b-4e9ffa00d313", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1561ea1-b194-4679-a3a1-7f89d81792fa", "sighting_of_ref": "indicator--90b2d9dc-acc2-4253-bcc9-147c3698eafa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102f4b10-a64d-41b4-b6ec-5c7f3a91ba5d", "sighting_of_ref": "indicator--4b860b09-9818-455b-bfca-9cf0787ef397", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--979475ba-2920-47d6-826d-7b79da8d73d7", "sighting_of_ref": "indicator--35b7f336-c53d-46eb-b84c-8d581aa3be40", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d1732b-3476-43fc-83fe-0b18dc13600f", "sighting_of_ref": "indicator--9c6f870c-7fe6-4247-a818-3f3aaabc59ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d445a80-8cc7-435a-a9a6-ed0ce9e71e44", "sighting_of_ref": "indicator--f05b4299-1173-44a7-86a5-4f5505f1d387", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621a333c-d84e-438d-8c0e-ad7814934e3b", "sighting_of_ref": "indicator--4386b2e2-5289-4d23-9feb-356126a99fc4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1189feee-f4c6-4fb2-bc37-e91ce06df80f", "sighting_of_ref": "indicator--e0fd4525-d4f5-4bd2-811d-1b518c485e34", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf2fa04-1d4a-4ddf-b450-92699079e67b", "sighting_of_ref": "indicator--0a0092dd-05bc-44a5-b6fa-74f85b1d8ca9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba04efc-46eb-475d-84da-0e9c5d698b5e", "sighting_of_ref": "indicator--bc3f5cc7-ea7a-4374-abdb-336a9f456e08", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5290c4a6-25a3-4b9a-91bb-0f5eae16bb16", "sighting_of_ref": "indicator--887bbedb-a716-45be-9d20-b78d4c4375a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db9d396-4a4b-436a-8348-3396a81d7c39", "sighting_of_ref": "indicator--f18916f7-9030-4a10-8e51-1396cdfd8729", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40e7ec9-739f-4850-b9fa-6f62d9768e0c", "sighting_of_ref": "indicator--56d4803c-50c4-4b1f-bccb-3fb80acb70e1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0dbf6ad-054b-45bf-a640-f5c2802ac3c3", "sighting_of_ref": "indicator--d8924241-2963-4fd9-9fa4-f4061537cf48", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c6a0a8-e547-4f99-accc-ff1d99177b70", "sighting_of_ref": "indicator--9d809fe9-75a8-4c68-92fb-338335376109", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b450d2-f210-4b65-b3f8-974d6c32fb81", "sighting_of_ref": "indicator--07fad533-5d49-4ac4-b349-bd78681cc1ab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d6ee7a-bb7d-4e6c-af53-13bb4d07a6b7", "sighting_of_ref": "indicator--d535d45f-545e-47bf-a7b4-a4fa2f89ef27", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1136ec-689c-4e08-b685-f2dbc19471a9", "sighting_of_ref": "indicator--2cef577f-43ac-480e-9227-d0a689865286", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a1ac924-2f27-480b-9a96-0953896bef95", "sighting_of_ref": "indicator--430aebe6-6b28-4147-881c-f41fdb09db8b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0886e874-a9ee-4f7f-88ef-3c79d8cc825f", "sighting_of_ref": "indicator--6d87feb1-275d-4c45-a8f7-ea8a3b2485f9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c9f6e1-e14e-4265-98f6-c9186ef5ebf1", "sighting_of_ref": "indicator--a69fa8c9-d810-4d22-8663-e25c1e64a309", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc3f0ad-aebe-4408-add4-c39e36442cba", "sighting_of_ref": "indicator--8471fc67-6208-458c-87ad-d17933b71f23", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93194109-a6d1-44b7-a1c6-8e2b49ad181a", "sighting_of_ref": "indicator--6ea4bdc9-f270-4524-998e-e40819bab217", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a6e1eb-07ac-46fe-8589-acd8e421bfea", "sighting_of_ref": "indicator--808361f8-9891-4cb3-b7fc-2762ba03c24e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c80b045-af33-40de-8947-32e8c9529751", "sighting_of_ref": "indicator--228466f3-cf8b-4cab-b155-bd00d56d47cb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2044c9-852a-40dd-9f51-2c915b97fa4e", "sighting_of_ref": "indicator--7d3f5324-932d-48f5-95a8-4eb42cc778be", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d22dc6-65c8-4261-a2f8-b603d42c8a7a", "sighting_of_ref": "indicator--8a7a2548-979c-4d28-90ee-be75bb0c45f3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56446e28-b540-4ef9-b0fa-8b9843c567d7", "sighting_of_ref": "indicator--62d18d0f-fc48-4f67-8ade-2e415e12ea44", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f329e3-e915-4405-a357-f8db37012d12", "sighting_of_ref": "indicator--dc1da9c6-4c96-43a7-8b2c-6daf2ce86e8f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58736217-ca84-454d-ac43-608458471ff3", "sighting_of_ref": "indicator--a6618430-7f5c-442d-b9b9-75d45bb844ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--096a5bf3-5ef6-415a-9d0c-fc9c7fc45c3c", "sighting_of_ref": "indicator--4c225a35-7de3-4c94-865a-2532ceb6d7b7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9e63c23-3ee7-415d-b945-eb00bb3654de", "sighting_of_ref": "indicator--fba753b2-acf8-43cd-afc4-11aa53324a77", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91fcda9-56d7-4ab8-8c36-ef556c5ed749", "sighting_of_ref": "indicator--ab4bad65-fb9f-4ffd-8134-d4b40be8b989", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ef105f-1823-4e4f-8804-cbfb6db4a926", "sighting_of_ref": "indicator--a5644d2b-79df-48d0-acf0-c2213b30aa93", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d0e4d41-026a-41a4-a87f-924fe330e93e", "sighting_of_ref": "indicator--628e8c87-eaa8-498e-b5c5-b83c94f23617", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659d4d89-3600-4579-9b58-199b620faece", "sighting_of_ref": "indicator--a43d1e3d-7cb1-43d6-9faa-8d6093aab8b8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ffbbc9-cef5-4cb4-aa39-d0c090bba96c", "sighting_of_ref": "indicator--cab4ff71-26aa-4655-a763-1cc03caf8c65", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782e0395-376f-4f1f-affa-ba4f660c44a2", "sighting_of_ref": "indicator--2abbda1f-70d5-4633-a571-265ee5523373", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851a7505-a608-45b5-81fb-9d2173cf1c03", "sighting_of_ref": "indicator--89ccc21b-6204-46d2-9c05-c63e1c7cb9e2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e77f57e-d802-4540-9c0f-1d65fcfa3de2", "sighting_of_ref": "indicator--cef31de4-5155-43a2-a522-bf21c6c53411", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac832f57-a669-4e12-abda-e9c43a631cc6", "sighting_of_ref": "indicator--3339f879-6769-47d7-8549-eefb8760b6bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237e5c5f-2344-482f-8f28-6c65817425bf", "sighting_of_ref": "indicator--59a4aa27-53ac-4618-901c-b0cc7aabfaa6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d37e21-4edd-4192-b896-81741a854a53", "sighting_of_ref": "indicator--134ea17e-ab69-4f36-a0a2-fdf9f9221efd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8a2833-d62e-4411-ac04-69eba54a7099", "sighting_of_ref": "indicator--eca4692b-9fa0-457e-bf9e-86f6d3c56591", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4adf3043-a3df-4d1d-a347-29a641f6efac", "sighting_of_ref": "indicator--315256b1-79e4-4d74-a473-6b159dffb1de", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a2f6a9-1754-4d86-b6aa-79f4e5687e5a", "sighting_of_ref": "indicator--f0a3f927-e704-401c-bbc6-5fd06f2b0ff2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7089ce98-fb2d-4e7d-94c1-d1a8f843fbc6", "sighting_of_ref": "indicator--2995b64b-a216-488a-8c19-d28e2e44021e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d879bf-3aec-4b85-808e-5dd116583e92", "sighting_of_ref": "indicator--e8c945d0-9a73-4c76-8eb6-095b59ce785a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d1b7c15-1e79-4f2d-87be-80ebe37870c6", "sighting_of_ref": "indicator--27f75d0e-4caf-46da-8f87-5b6d87344d65", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7fa552d-da06-4d60-b3ae-e7e1d510028e", "sighting_of_ref": "indicator--f962eb10-2895-421a-980b-c065872b0278", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f28cf19-0afd-408e-94e0-094c67263392", "sighting_of_ref": "indicator--842492fa-36ce-48aa-bbf0-c32236f79aa3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f382cb-36fe-464e-90f0-a15039e660b8", "sighting_of_ref": "indicator--b61f3806-4d98-4cc8-941b-bbb4de9c1ff1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e14417c-0203-46cd-8e63-a94f271d8b9d", "sighting_of_ref": "indicator--4aa4bb1a-0bf3-416e-a253-3d2a68fa3494", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0a3268-7944-4102-acc3-be1420e766b6", "sighting_of_ref": "indicator--b5551fcb-90b9-45d6-876c-0df0aa6fe563", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2768e144-bff4-4efd-9898-aa9c915e5cbc", "sighting_of_ref": "indicator--1ef99dce-cb3d-4665-9daf-8db2b6a1ccc6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6dbfd92-61a9-4d99-8f62-63dc2bcedb23", "sighting_of_ref": "indicator--7744ab2b-55d7-475c-82fe-be75273796e5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d016f738-c108-4348-9357-ccfbd4d4fce3", "sighting_of_ref": "indicator--8fda3237-f429-4921-8882-042de226abd0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9043ce44-6aaf-492d-9548-e066c04e3f83", "sighting_of_ref": "indicator--55b4926f-76fa-44a1-a9bc-5cc8a7ab8a0a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4cfe231-fd43-4edc-8151-0716d33caa29", "sighting_of_ref": "indicator--c9c9e5d1-816b-40d1-b993-1416e8077624", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4960f939-5e66-480e-a2ec-41a6ed983ae8", "sighting_of_ref": "indicator--52622650-5189-435f-8e05-dfa971ae9fff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06cea1dc-db14-46aa-8dd2-3b67987e656c", "sighting_of_ref": "indicator--b2f8f0b6-4031-4f1e-bb86-f0d5feedad2c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5f5bd8-2ad6-4ce4-a2e2-a37a475388da", "sighting_of_ref": "indicator--1b76b07c-e4fd-4612-a52e-27aa60bc3610", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ccab98-539a-4110-9028-a85d32f6cc04", "sighting_of_ref": "indicator--55f40de2-ea5d-4108-b824-da0b39994b0c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf6738c-2081-4e95-990f-ec625f886897", "sighting_of_ref": "indicator--92d285ae-525d-4cbc-b77d-96ea825a4616", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2af557b-b4f6-4ec8-ad7d-d036a3bacd01", "sighting_of_ref": "indicator--7ac73385-c641-46f4-9199-58c8ccb86295", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f88c83c1-b3d2-497b-b560-2d65a1644dc4", "sighting_of_ref": "indicator--63ec8336-dc77-4dd4-be2d-9fd3e65c5166", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa29f786-de7b-4ee9-81f4-5ca90726dfb2", "sighting_of_ref": "indicator--b69dc465-e44f-4aa9-8925-7e543d1c85ce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7bc5e7-70a9-4cef-b2eb-079e283dcabc", "sighting_of_ref": "indicator--653c346e-8158-42e4-9473-fd5197fe6878", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5403123-cc05-4959-a296-7c7e3717646d", "sighting_of_ref": "indicator--52d8e659-252d-4168-8221-faad15fd4576", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16decdf-94af-4434-bcbe-9e2c087db39e", "sighting_of_ref": "indicator--f3e97046-1644-4eb6-b4b7-5af2083ac638", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e940a19f-544b-4feb-b94d-b0c220bce1f1", "sighting_of_ref": "indicator--872f5936-debf-4dc8-a57e-ca0c61022741", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a61ccc1-b6ba-4330-8b5b-caa0f65dcaeb", "sighting_of_ref": "indicator--6dea02dd-0b87-4d98-a143-f103fb4e9a3a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5370ef59-77bc-466f-bba1-6e9044d47c4e", "sighting_of_ref": "indicator--178a604c-6a82-430b-8cfd-d8ec7c367e8c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8955400b-6287-40b9-a131-7517828ff045", "sighting_of_ref": "indicator--75a955ae-36f3-43b1-9de6-1643c1659518", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590ca437-e6e7-4699-a4a3-94dbae0175b7", "sighting_of_ref": "indicator--21b785d6-fdcf-4737-97d1-912b55975d2e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a5cec86-3320-4ee9-b915-cb12dc19d42f", "sighting_of_ref": "indicator--ba10e3a1-3176-4c6e-b4ca-243e3a41a2cb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf74d2ec-a3e6-4187-bd08-ad8fade77fe2", "sighting_of_ref": "indicator--bcae5949-9e8c-4bfb-b281-1e300ad77b90", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2ef522-1e39-4529-ad9f-81b0c478d76e", "sighting_of_ref": "indicator--93e0edfb-9d4f-47f6-a9bd-b55497348792", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066eae8c-64ce-46ef-a367-48ddb0e443d4", "sighting_of_ref": "indicator--27e4ee2a-f635-4913-8868-a4b7c9dc535c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dfe2cb4-94ce-40d7-9db4-1e717830da2d", "sighting_of_ref": "indicator--8e6fea0d-3fd9-468e-8a5b-a2a6e91c0ce1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bfeb458-b7bc-45c6-8243-182994d5b161", "sighting_of_ref": "indicator--695fa136-c8a7-45fd-915b-604b3fde7926", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba5e1ae-84d5-45a2-b8ab-2baf4abcfcdb", "sighting_of_ref": "indicator--4c07310d-d88e-489d-ab6a-f8d8edb8d6dc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b09e1323-07ad-4b54-bb13-e35438a4fffb", "sighting_of_ref": "indicator--6374f6f2-547e-478d-8c35-e3cc67f252db", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62df2392-a706-4199-a05f-548056fd859a", "sighting_of_ref": "indicator--fdfd0fec-b7a5-4836-b4d4-fc7304c3761e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc201179-c127-4975-8530-33e7d9e95c4b", "sighting_of_ref": "indicator--e7d786a5-f5bb-46f1-96db-cd3abf02db44", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76975bb-ffd1-4b66-b5b3-96d3dbb3f494", "sighting_of_ref": "indicator--7ab2aa75-c0c4-46c5-8cc4-5f70b95782c9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45494633-7461-42c6-890c-80f12f228f38", "sighting_of_ref": "indicator--84f7d9f9-f62b-44a6-921f-639b1b610328", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d996a3-00e1-4deb-8986-faf212a4c03c", "sighting_of_ref": "indicator--3e5bbc55-ac68-441a-9df4-f4169015f9ef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be21627b-7044-4d5b-870a-27092e770203", "sighting_of_ref": "indicator--b6dfec3f-5141-45c8-b744-d15be627b063", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e61caaf-a869-485f-b861-d08bb1f430c6", "sighting_of_ref": "indicator--482025d4-6ee4-41f7-8d34-077f11393a8c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a7c56d-3f8e-4e0e-9305-a443b28f27c1", "sighting_of_ref": "indicator--4818ea30-5df6-4992-8b38-516af800e2d4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edfcd328-cf82-47fa-8da8-b67a99032836", "sighting_of_ref": "indicator--a28cc6b8-9b2b-4d56-9d34-200ae16f46bb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694a6cc1-ce9a-4ec6-801b-850db3ec903f", "sighting_of_ref": "indicator--909a86e1-eed2-4900-9f38-7cdffcfd3e4e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afbb4da1-b591-4c08-9a92-57f2897e8bf0", "sighting_of_ref": "indicator--a4641d80-b58c-4d0c-89d3-8fd1623afb43", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597e2c6d-3e16-4fea-a235-3bbff3333f58", "sighting_of_ref": "indicator--2d1ecbc6-82f1-410e-97cf-b6dd9f8ad0a5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0740e983-db92-42fc-811a-1465a892af9a", "sighting_of_ref": "indicator--31b96af1-8663-48f1-bb0b-0f66650dfc92", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e626c2-7d28-4f87-8612-8f6e289d6fe4", "sighting_of_ref": "indicator--d19ec9c2-b17c-4b9e-8738-3c8477d7f4b8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa26ba9a-f5bc-4487-81e9-15e7804d71f1", "sighting_of_ref": "indicator--80dacbe3-c562-4af0-9023-03c569f41566", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d14f6f-9b56-4487-9c8b-e5c6e06e38c0", "sighting_of_ref": "indicator--3d7700c5-dfe1-4290-a333-04365eb8aeef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b22eb0-85a0-4c29-aca9-b42c6d02e411", "sighting_of_ref": "indicator--8a07dbe7-e02e-45c8-ad6a-331f86dc1359", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c332e3-ba34-4712-a782-0742a45becff", "sighting_of_ref": "indicator--ff55bc17-81f1-47c2-ab39-423d5143be41", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a688e01c-9899-4ca2-ac31-33b09b19cde7", "sighting_of_ref": "indicator--f6465d63-57f2-480b-bb66-9804d500e8b8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f030386-17ef-45a1-8ea5-8f980e29e40b", "sighting_of_ref": "indicator--098ce017-0f13-4c62-a9cf-8432784cc058", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde87de4-e29b-4df8-8fcc-2ffcca46d9fe", "sighting_of_ref": "indicator--f7ccdba0-a08a-47a3-9c87-46a322f1927c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e35a9d-8011-491a-9027-c5fc5477cdea", "sighting_of_ref": "indicator--b0b16a02-238c-4f96-99ee-b373207cf9ee", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--536e71c3-7aea-4dae-bac3-5a9383618e4b", "sighting_of_ref": "indicator--16b062e4-d66c-4a18-a08d-b077f84cce4c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7e13bc-8a50-48e0-9189-8455292d7f19", "sighting_of_ref": "indicator--7087f7fd-01e4-4acb-a076-de9831184b38", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe044122-c621-46eb-99da-7b310f062081", "sighting_of_ref": "indicator--63a7f323-78cd-4981-bbfb-385fd56ba39c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f98a7716-e454-4367-b0df-c71bf346798d", "sighting_of_ref": "indicator--389415d4-99bf-41c2-a7d8-9827051486d4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dce53e3-e1d6-4cc2-92b8-04d10ddd14a3", "sighting_of_ref": "indicator--dc079f8d-e840-4787-a44c-0da19740dba7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414cb3a6-fe78-492e-a693-ce7569826f16", "sighting_of_ref": "indicator--a7d50183-fdc0-4b64-ac4f-d5a29015aec2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e8bd88-4efb-4d4e-a1d5-efcf340e7016", "sighting_of_ref": "indicator--a92c4086-0ced-405a-8f28-2d26d31bc4e4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf1c8b8-e58a-443d-ba76-04a2448afd32", "sighting_of_ref": "indicator--c94ecce2-1778-4229-b144-6838d03a4f32", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4337e27-dc2f-4f8e-95c4-afd933589f68", "sighting_of_ref": "indicator--b32b0bb2-4f27-4d4b-ab67-99e5895bd35c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53a4e49-38d3-41dd-9c36-f5405a14fee4", "sighting_of_ref": "indicator--9857cbe1-b8d7-4bdb-8164-9caf70d098bb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907dc849-e514-4418-8c09-becbcfc5e3e2", "sighting_of_ref": "indicator--4a303c76-f069-490e-9d32-baa7d9d239d5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81dd607-dc8a-4e96-a021-870b14395352", "sighting_of_ref": "indicator--fe470953-0524-422c-8f6a-10fbfec9c8be", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc53816-8358-4a54-bf86-2bca9b9b0432", "sighting_of_ref": "indicator--ea638f40-e24c-416a-93fd-df055fef61e0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8574059b-ec86-4702-b72d-545684fea9ea", "sighting_of_ref": "indicator--f9512e51-f8db-407b-af95-1766998db8a1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d877209-1c6a-472a-bb88-a46bf5764dbf", "sighting_of_ref": "indicator--8a684678-02f2-4102-8712-481a6b40133f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f148d3b9-4ec5-4a11-b69c-8d53cac9d4f5", "sighting_of_ref": "indicator--7fd7fb3e-ecad-4179-9c84-1a2323e25d0e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340a9e10-7922-45c9-bf56-2c4c2d13d73a", "sighting_of_ref": "indicator--391e27b3-b75b-4dfa-b121-2a56bc2f15d0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de5b4fb-f5e2-4ae8-9200-6b9907d620a5", "sighting_of_ref": "indicator--6232824b-4fd5-4476-83ca-6dc006a3c2e9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf366ee7-a7de-4b88-a268-cb368470940f", "sighting_of_ref": "indicator--5ae77240-af89-4a50-a27e-f646581e2b89", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68779ca5-c65a-44ea-ab60-c6a98f757254", "sighting_of_ref": "indicator--4e212c34-4987-4c0d-b6b2-3ec250950696", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34d88bd-914d-414d-b2d6-cf41f2af4844", "sighting_of_ref": "indicator--205901e3-d1ea-4348-9ef9-409276c03766", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d49c76-8559-43af-8577-9260be545358", "sighting_of_ref": "indicator--03aa809c-7491-4548-873e-b6fcfb9f61ab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058e2e26-f49d-40b3-b488-49fc16bff136", "sighting_of_ref": "indicator--ddff7684-00f8-4e79-89cd-63e83ba8bab4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7187a8-0875-4149-9bf6-36fb5db9df7c", "sighting_of_ref": "indicator--6ed87325-05b5-45a8-89a1-4a245dbbde77", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814532a2-8f1b-4f46-be20-658f44746260", "sighting_of_ref": "indicator--158d2002-06d0-4a4a-a717-82ea4f58ffea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060188a8-8e13-488c-b668-df41b3142699", "sighting_of_ref": "indicator--2cc632a6-9e72-4dcf-9ba1-862cd8f4a372", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb0290f6-729d-4f30-a04c-77710a710f2a", "sighting_of_ref": "indicator--8f12e5c7-2bf0-4a45-a2c0-98f96bfe87a9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f824b5-4043-4465-9d4b-55789d7b22c9", "sighting_of_ref": "indicator--1e3a8eb1-a2fa-4532-85cf-dc0bd59141d8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1adde1bd-fb87-47f6-a72d-cd1d4cfe5ab2", "sighting_of_ref": "indicator--b72517c5-0260-4aca-b4cb-d5c19696a420", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede1668a-4b5f-4172-bd74-77503f44a960", "sighting_of_ref": "indicator--731ec7d7-8710-4f25-80b1-f183c46f3ac4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7cec3e-3331-4e9a-a08a-a0f99a497309", "sighting_of_ref": "indicator--a95ee237-545f-4fce-ac45-c45dc37d75c8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6add9383-c3bd-4eb4-812f-1bf278282c62", "sighting_of_ref": "indicator--e0d7df47-135b-40da-8bde-cd13fc88fc45", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4197d2c3-07ec-494c-8ae8-5f37856fc7ad", "sighting_of_ref": "indicator--bdc2fb45-757d-408a-bae8-439bbead766f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50cf6bb2-7f3f-489c-8c2f-f5ced8894c50", "sighting_of_ref": "indicator--4ff086c1-b600-4c0d-986a-6ee29b288c54", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f43512-b1dd-4d00-bd5e-cbc4e32b9f96", "sighting_of_ref": "indicator--0bb0f9df-7621-49b8-8063-4d90c715bd3f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17921caf-a97c-49cb-ae6c-0d409dde6bf3", "sighting_of_ref": "indicator--0931afd4-368b-4bac-8a3c-722e1e8f5307", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d45d8b-7ffd-469f-b1c8-b8ab53c7b7ba", "sighting_of_ref": "indicator--e7d454a4-2dd9-489a-9b72-8c0f427c1a73", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7442e200-ceda-417e-96cc-dc96e89e8d97", "sighting_of_ref": "indicator--7cb3c349-8aac-4391-9f0b-703a6461eeaf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2b7e0f-4e43-41ee-9a4e-0d960922fd0f", "sighting_of_ref": "indicator--c2d2bb1a-bcf6-4988-83fe-924e96634d34", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb31d69-baf3-40a6-8957-f4c1e70dd9c4", "sighting_of_ref": "indicator--affb9708-5f2e-447a-afbd-87a69f4b4fdf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d6cf14-ba33-43fb-a96f-15db1cd734f7", "sighting_of_ref": "indicator--3c12a005-5916-4cbb-978e-8bb4f3158231", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c927d03-2c33-46ec-acb5-44b97119e106", "sighting_of_ref": "indicator--01974231-49f3-4644-ae00-76cc34ec7ef2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984f7b2e-43a4-428e-980b-7126a9fc2238", "sighting_of_ref": "indicator--4206f22a-7f8e-4908-af53-4d07e1b7afd1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c3151b-4b40-44f4-856d-c6560b7e0adc", "sighting_of_ref": "indicator--6ab03f32-6cb8-401f-8161-d0fe5bccb8a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ffe7aca-6992-4b01-a60d-c3853ffc9f31", "sighting_of_ref": "indicator--163b3927-b6de-4e36-8775-641fe154f489", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7580094-7638-4d90-8691-15b5d1f94492", "sighting_of_ref": "indicator--8627617f-e2d7-4067-8870-35b88de30da8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1570c62a-766a-4314-a159-789c66a4b6de", "sighting_of_ref": "indicator--8bf0d1cc-ce7f-4ba1-8b2a-45d2e1817360", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751b2e37-d97b-417d-a2c6-070c38ab78e7", "sighting_of_ref": "indicator--09239924-adb8-4a30-b4ad-25528cbdaeb2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928ac0fe-6403-42ca-b638-093687d05713", "sighting_of_ref": "indicator--c70a0513-2a4e-4b90-a19f-920c2507fe1b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef602701-f359-4a05-a3c9-4ecdd48136f2", "sighting_of_ref": "indicator--34069a54-21f1-45c9-b4a5-fd44e66dccba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39b2d27-68f6-4e37-9322-827d1ffce1ef", "sighting_of_ref": "indicator--fc073473-97e9-4ffb-82f9-3651e0673ec0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27450779-ad74-48c6-a1b3-989a51eb4681", "sighting_of_ref": "indicator--1172e399-e10d-4a1c-a3ee-ca0cffdc7def", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5677152-05b4-4475-9796-dd2a6f01c9ad", "sighting_of_ref": "indicator--83ebcdd9-b266-48cb-995e-7c6c7503cec8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2149644f-835e-46b5-a4b2-5f4bcbee841b", "sighting_of_ref": "indicator--8f42742e-dfa5-4e65-a04f-562801fa0eae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7f8acc-e1f6-4f55-a239-26e0fd282494", "sighting_of_ref": "indicator--ef3e4234-6a69-4278-b475-528d1cdae2d9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356f3622-fcb3-43da-ac8e-e55485465c02", "sighting_of_ref": "indicator--5e0188db-f8b6-4c3a-9c4a-c0b062ab4ceb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09013dcc-9c3a-4079-9803-83cebad84278", "sighting_of_ref": "indicator--eb15cadf-4fb7-4c3e-9333-79f42b7f8623", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--626a2bd2-23c0-47b4-bd46-5c704c45897a", "sighting_of_ref": "indicator--df8e548c-11c4-45bb-9d8f-f4a47850eea9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8339af93-7fb6-44b6-aefb-d65125f71b51", "sighting_of_ref": "indicator--fe95aa89-3ff1-4adc-a350-adef7c1da559", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06cdde6d-9e3d-47ac-ac21-ac2b34076945", "sighting_of_ref": "indicator--4519ff7f-e5e6-463b-8a82-5615e62d87d0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef7749b-152b-4d38-a2b7-b4c1a33a6066", "sighting_of_ref": "indicator--ca008686-0fd8-4da3-8a2f-ea1fa6cb33fc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc3db42-90dc-4496-aecd-82fe274d910a", "sighting_of_ref": "indicator--f1f041c4-923f-45e7-826d-fe8203d7bf07", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ec2e78-ae88-4f64-9643-f9a3a97bb86d", "sighting_of_ref": "indicator--743d7546-241a-4983-8ae1-8bfa6bc3a329", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffea54aa-62b7-42be-9477-fe092d6fe6f7", "sighting_of_ref": "indicator--afbcc7d3-17f0-4e90-9897-f25b7d1f20ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897478c2-3173-40e5-9f50-a29c916aac12", "sighting_of_ref": "indicator--c3792f72-8a23-4805-8877-93e8ccaa9078", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0eab0e7-f33f-4896-9b9f-17e8b6051226", "sighting_of_ref": "indicator--5eb4feb2-eb19-40b1-94fb-5b872ff24059", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177e4ec4-f4b5-42ec-8e01-7e6fa38646cb", "sighting_of_ref": "indicator--65938267-84a8-44f9-93ab-f4abeaeee10a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313e705e-01a6-43f0-9fe4-73a402fc3490", "sighting_of_ref": "indicator--bb9bd821-3d0e-40d2-8d49-40117fb65b18", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe28122-9b8b-4083-938e-b45fe597ef44", "sighting_of_ref": "indicator--7de02224-8b19-494d-8098-c33500306871", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8846b6-207b-4707-b0c9-7a26341a4ad5", "sighting_of_ref": "indicator--6c85c751-5716-4d64-8c83-bc6d03d23ae3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e81911f6-e44f-483d-9a45-7fec5f204626", "sighting_of_ref": "indicator--810bf7a0-e0cf-435f-92a4-769cf75966be", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d013dfbe-ce5a-4cb2-b77e-553dc60f7fe1", "sighting_of_ref": "indicator--dfe72d76-13ae-4c96-9bf5-98a20affa797", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206733f1-7cd7-45fe-a7ab-aa15a2f44ce4", "sighting_of_ref": "indicator--9b5ec268-3d67-43d8-8f92-1fc9262ec4c5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e469968-d69d-4914-8537-894cc6a212fc", "sighting_of_ref": "indicator--9c035dc7-6d05-4816-9a3d-8d626c30cf76", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c281f4-2ac7-4847-bdf6-72529e1763c9", "sighting_of_ref": "indicator--3714627e-9ac2-482d-89ff-58a8423ff4ce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e340d149-11b4-453f-92bf-dc07886fa61d", "sighting_of_ref": "indicator--b3e3410f-f74f-4d26-a8e5-21c24d82f820", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca390b3a-483c-49a3-a21c-25152c6e6ec4", "sighting_of_ref": "indicator--c31d8fc9-be52-4dd7-8e49-1c39f0c22e93", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b272c9f-d618-4045-b238-1a4c9347c86c", "sighting_of_ref": "indicator--e900ffe9-8eb1-4fc6-9ba5-6afa32ff64dc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5519bb5-4d44-4355-bb30-3ab530db4e18", "sighting_of_ref": "indicator--c89e469b-f753-4651-8669-6e9e5666b8a2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7212108-6770-4413-90d9-009916fa90a0", "sighting_of_ref": "indicator--f668dcad-bdc0-4360-9d3e-0d058e2036aa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c458273-7c88-4d00-93fa-0932e90c9006", "sighting_of_ref": "indicator--d23ab278-c780-41b4-9703-00b25ebb3c18", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3afeb2bd-5dc1-4bbd-af7c-d24f7e1f0f04", "sighting_of_ref": "indicator--a0097372-055c-45ec-a0f4-542bf7aebd32", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25df4f4-bcca-4603-8f49-1b4db6272fa5", "sighting_of_ref": "indicator--211de21f-b942-4c6b-9091-10c276de5ccb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc5547a1-92a0-4230-aad6-b96c17a2e7d1", "sighting_of_ref": "indicator--63ff4801-a840-4a6a-9336-ffc1795215aa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae302146-36f0-4ea4-ab56-e00a0de924d2", "sighting_of_ref": "indicator--c8f94a7e-769a-4ef1-a435-11f3274503dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--181db6cc-6a60-4199-9fd9-21961ec101d9", "sighting_of_ref": "indicator--fc0472db-7797-4e08-9e3c-7705f778df5d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46168520-2147-45f0-bc9b-a44d12daac66", "sighting_of_ref": "indicator--ff98a5f8-3fb9-4da7-bfdf-4e3968d47c1d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f272628a-f337-499b-ad21-b179f55a2934", "sighting_of_ref": "indicator--4889ee3e-bc19-446d-88dd-3e6fc43329a5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8184d4cc-b805-4e0c-8b92-4493765c706f", "sighting_of_ref": "indicator--665524e3-2bcf-49fe-b768-fb888921efbc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988e3540-23aa-4d9d-821d-2f114dc5ed5b", "sighting_of_ref": "indicator--16139237-f301-4f6d-8f21-574de3c2a334", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c446dbab-3d07-45d8-9087-5d3fe7e9fda6", "sighting_of_ref": "indicator--f3d7fc77-9bd8-49a4-b957-8644f8a9ec10", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408122d5-badd-478e-a700-1bc137ca4eee", "sighting_of_ref": "indicator--b7a6768d-5250-4603-9ebf-2f8bc1aeab97", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbbf4034-149f-4069-970f-f7363491a754", "sighting_of_ref": "indicator--73f72cd8-29e6-44b0-96c3-1a705f2e3c20", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b5b4d8-7068-4cd3-86ca-9af4d79e82f0", "sighting_of_ref": "indicator--5ad269ed-1f18-4fbd-abe3-ff68255c2dc7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56bdafa-bb22-44e7-a3a4-5c288ecb36de", "sighting_of_ref": "indicator--53d03f83-7bf9-4f78-9e47-7e8137885086", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b2ec5a-f47f-4db4-a8a1-ed7003acdcae", "sighting_of_ref": "indicator--33cf2491-c95c-4219-909d-83b9068686a5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba1b42f-0ab6-4f79-a0a3-97472a1f620d", "sighting_of_ref": "indicator--dad9964e-a046-4ddb-8dcc-8453d4b53af6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a565bb-8272-41c9-ae50-628f4aaade04", "sighting_of_ref": "indicator--701a3c7a-51c6-42b5-bcec-2e83102b7c31", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb675da-73f4-49b1-9ca7-cc9596a7e386", "sighting_of_ref": "indicator--be480bb6-e922-4ae9-9b45-64d8995c75e5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba7d93b-82ff-4f2e-8ca8-403e3ca624b4", "sighting_of_ref": "indicator--dacfa561-5fa0-47cd-8db9-ba633474fd42", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42005e29-8c31-4c88-b200-0f8104df1e9d", "sighting_of_ref": "indicator--b6adaee7-72f1-4a21-8be5-cf41d284c629", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a3c1ed-83c2-4f73-ad40-c0de1616c0fd", "sighting_of_ref": "indicator--f05a4a67-9833-45a3-8aac-eed4bb10c716", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b120683e-0145-4767-9de9-ec702cbec475", "sighting_of_ref": "indicator--199ef7f8-0156-4abe-932a-17f4dc849629", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428ebd59-c882-461e-83d0-2db2c558f3db", "sighting_of_ref": "indicator--db1def95-1868-477b-abe7-527c0034ac6e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8431235a-158a-4370-b4dd-a5b8d3ae5dbb", "sighting_of_ref": "indicator--95851baf-7f75-4221-b3e8-accf9226eed4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da584f0-517d-4ca4-ab89-cf4ce3c57068", "sighting_of_ref": "indicator--c3594aa8-1462-4ac8-9345-09bf2e2577d1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6510a0-f9dd-436b-bd8b-4c969a1e92f8", "sighting_of_ref": "indicator--cd359ed2-2879-4b63-8375-39468f40dda8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6fd5cfd-1db2-4c5f-aa7f-f47c71c54770", "sighting_of_ref": "indicator--bf2363c1-3c35-49b0-833c-84a40bb9ef9a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4f0719-8fb1-4faa-a524-0ec9f43dd4c7", "sighting_of_ref": "indicator--c901a1ee-f8f5-4249-9523-176631fb29f9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c50d104-350c-435c-82ec-b15ee14d3b10", "sighting_of_ref": "indicator--b7c330d0-ebae-49a6-b127-37cede6cf67f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ea9012-87f9-4874-9a2a-613efd26c8f7", "sighting_of_ref": "indicator--1d3312bf-36ed-40d6-9d33-68213c3d0b3c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412a5343-caf0-4c7d-a93b-52faf6efcd1f", "sighting_of_ref": "indicator--fc252638-b57f-4f9a-9c65-d6712b6ff25c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbcf22a5-9585-4ecd-a4d4-ac83d60c17e3", "sighting_of_ref": "indicator--3fcd615b-b434-4548-af28-a22acf07ec1f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4106f187-5aaf-48c3-9357-560f8220d5df", "sighting_of_ref": "indicator--2fd6241b-9019-4c54-8a01-13230157af7f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02017040-48c7-4e03-afdb-4f6e2f5c6a39", "sighting_of_ref": "indicator--d1ab210a-829d-437e-aa10-590f880bb6d8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c337e1-d91a-4e31-946c-78adcd9b823d", "sighting_of_ref": "indicator--e3493d5a-9847-4cee-96da-fb9cb27577d3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--711bf0bf-8f59-45c1-bcfb-52e8dff51faa", "sighting_of_ref": "indicator--6335da40-5adb-4245-8438-887a45d7ab22", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3691129c-3eb7-4a61-a0d5-67a8fcefee9d", "sighting_of_ref": "indicator--0e9da41c-2ef5-4ecc-baa0-e0f1edb952a3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07bce7e-5bb2-481f-9374-f6f11b1c7e4e", "sighting_of_ref": "indicator--78815221-2ede-4cf9-9a8a-ff9294f7e380", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525746da-8257-475c-9458-9d68ea0d9b80", "sighting_of_ref": "indicator--5759e7bb-33f4-4105-b33b-8b27c9c6d793", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481a7671-c3a6-47f6-ae37-4eaf8949ae1a", "sighting_of_ref": "indicator--6e2c4512-c735-4c09-a140-1fef5db994a1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a9f7165-f8e8-483a-aeba-2ec8f9ae77ee", "sighting_of_ref": "indicator--2a4ff638-b917-4e70-bfa9-c6fefe8fd098", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d47cf4-748d-4368-b1e2-800704e7cbec", "sighting_of_ref": "indicator--4ca6b37e-0d3f-4d60-90fc-3a5900d9ee65", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0d31c5-dc15-451b-b6eb-c373e4ef7957", "sighting_of_ref": "indicator--2817c591-eaa9-4cc0-bc08-a6fa6a001a08", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bdfeb9b-7514-4fdb-ade6-6d5b8695dc51", "sighting_of_ref": "indicator--83b65b8a-6268-422b-b4ec-dbe884d50ce3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--508812c5-53a6-448e-8d72-8ea5dd436937", "sighting_of_ref": "indicator--4ddf6984-1245-4af8-a3f3-5ac3dff8ed30", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179112b8-6b49-4642-8299-43bf37a6d198", "sighting_of_ref": "indicator--701f7ae9-5a98-4eba-988c-d5d851846576", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7618b236-54fd-480e-8341-83f5e2ab5c88", "sighting_of_ref": "indicator--3a7ae64b-d473-436b-be84-b795b8bab1b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be67ffd-4700-430b-ac8a-63b88e3acfaa", "sighting_of_ref": "indicator--d799dedd-a515-43b6-883f-4cb6b8fa09d9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5df4bc-5371-465e-89a7-aaa8d9abed82", "sighting_of_ref": "indicator--2159146f-e616-4106-868b-104be4fa1eb0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091be300-b63b-446f-a4e9-71a7e9e727b2", "sighting_of_ref": "indicator--babd2b89-12f6-4bf0-82a9-2fa7116ab48c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d075a6-e527-4f33-9e30-d3f633ef118f", "sighting_of_ref": "indicator--ff38e6bc-8aca-4b5d-a906-cdce118f76bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f349c6c1-f00e-480b-9072-da35d6695086", "sighting_of_ref": "indicator--2f44f925-8079-4923-a07b-c2af4d4ac578", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb593ea4-97b5-4ad1-ba0c-6adfd3e0591f", "sighting_of_ref": "indicator--ebb8ee1a-2525-45ee-876d-ef23251dea9f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf32358-718a-40ce-bba0-6e34638d425a", "sighting_of_ref": "indicator--c5eee5fa-1684-4b3e-a5d7-712b255acd2c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7567ceef-92e3-4f16-bac7-ccd035197c4a", "sighting_of_ref": "indicator--8b2ffe4e-5c66-4a2d-82bd-0f479153234e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25bcc582-ea7a-44dd-9934-d48b90c5c929", "sighting_of_ref": "indicator--28ebe3f7-03bf-45b5-99a2-2fe7db04e96e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea1104a-8840-411b-a484-4de302de99ba", "sighting_of_ref": "indicator--e69cc73c-bec5-47c4-9453-72d338e98328", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d24fed-ebd6-41aa-8c2c-01310a989570", "sighting_of_ref": "indicator--533a2bed-f328-4b45-878e-1216e9aa63ff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ba2f73-3ce8-44bb-839b-81df8da67eed", "sighting_of_ref": "indicator--8e62ea32-d8d9-4a4d-ab98-dbccd933d336", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc889967-6fcf-4081-93a6-df0b0d1f0330", "sighting_of_ref": "indicator--6a91e7e7-ee66-4b56-83dc-09e87a10b99e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff294f6e-b78e-4a1c-87a6-99ec51c63ba5", "sighting_of_ref": "indicator--17d0e53c-8107-470d-82a9-6e07a178b238", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f5f101-8f83-4fc4-a94d-f15b250e5216", "sighting_of_ref": "indicator--29a223f0-e2f5-4219-b7be-e5e5da452c01", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c04e8297-0911-4e49-b942-742addaa0f5c", "sighting_of_ref": "indicator--1a666ac6-1eaa-4c3e-ac36-82a53e19876e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6063e76-f8f6-49ee-bea3-1c65b6e485b7", "sighting_of_ref": "indicator--5507a0bd-13ca-4e9b-9ce5-08cc69b008d5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29b1036-3bb8-4e6b-835b-7f0a0fadb84b", "sighting_of_ref": "indicator--bf132e50-2003-453f-ba85-c0a21049b008", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218f6cdf-cbb1-4588-ad06-387909bec7e2", "sighting_of_ref": "indicator--beda11ea-f81a-4c10-8b05-08a0140fdf7f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f86ba56-9b6d-44ae-8cef-c230bbed5e1e", "sighting_of_ref": "indicator--82f184ec-200b-4080-a98c-06b5866af138", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a331b053-b6e4-4830-8e20-a57713ea5406", "sighting_of_ref": "indicator--9adfebd9-ea79-4053-8607-99592bd69664", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e5f2fd-c2db-41e9-bdf3-70071719602c", "sighting_of_ref": "indicator--c3ef2ece-3719-4dc0-81a5-0070eb7700d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225527f9-9c64-4821-91df-7ab720b800e2", "sighting_of_ref": "indicator--a27ea054-5673-425c-8456-f0490948fabc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63ef243-a8d3-4525-8566-9f95d73cd5fe", "sighting_of_ref": "indicator--107eeae5-c6fb-44e1-8ee6-f25e95d0b0c9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f95dd5-dc67-4abb-b098-cf5995865af8", "sighting_of_ref": "indicator--9a998845-cb34-4b07-833d-8cd95f71698f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f533627-b26d-49b0-9d5f-0aefc1c8fd0f", "sighting_of_ref": "indicator--2df0a5b3-0583-4e87-b047-8b3b2e66fcc6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633c3afd-bd2c-4c00-8fd8-ccb0ad63c8ae", "sighting_of_ref": "indicator--88ebfe2a-c36f-4d57-bf28-363b1df3e650", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9dd82d-e13b-4e20-81f9-5c3334df6345", "sighting_of_ref": "indicator--a39ea914-436c-4c3a-bdc8-3e8c5300f545", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab0705e-b43e-4772-9724-86d5c33dfe1b", "sighting_of_ref": "indicator--fbae7ec3-e075-44fb-89dd-07fc1432dd3a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac8a626-c993-4a47-8734-9bbcd0014576", "sighting_of_ref": "indicator--eb1c1678-df77-4282-bae6-6a6b7d64ae11", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be184c09-0858-45b0-9f28-e5290efc1c58", "sighting_of_ref": "indicator--553e199c-be57-4230-81df-111c6c55be3a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e4e6c54-f80b-4c9e-8032-f8d028a4e930", "sighting_of_ref": "indicator--1d118bd4-0e71-4948-98be-14bad04b77fc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c8912c-4b83-48dc-a0b4-55f87fbedbb9", "sighting_of_ref": "indicator--30dc8dc3-6aa2-40f5-926f-cabf8f989ccf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978169a2-558a-4730-9bb8-d8dfa177a67e", "sighting_of_ref": "indicator--3bc206c2-903f-42c3-bef0-04197d0209bf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02647230-54fb-476e-aec9-a965e2d01122", "sighting_of_ref": "indicator--de976f57-13b6-4abe-9f18-779de85ece2c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2959bf97-29b9-4ea4-8fbb-ffb89d72e256", "sighting_of_ref": "indicator--b7b2386e-9a71-4b8b-974b-0079d65fd86a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c901bc2-912c-4b61-ad81-bc4789a86245", "sighting_of_ref": "indicator--854f796c-f759-43cf-8c9a-c207ab406c8d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95345b4-d96c-476a-85d8-dede92a2fc95", "sighting_of_ref": "indicator--fbcac2a4-2edf-456e-8277-82d6409f4a14", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86fe1a78-094f-46ec-911d-32f67ac9070d", "sighting_of_ref": "indicator--1f59af24-27b2-4d7b-a207-8389b76afbbf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9563d8b6-c5d4-4a8a-9ca1-b97bfabb2a30", "sighting_of_ref": "indicator--008e18e5-719b-4d69-927e-548f477ef700", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06b2715-6e29-4423-a103-c59c16fbee87", "sighting_of_ref": "indicator--cd6877a2-0ab7-44c5-a532-53d8cfc7065c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef767e2-ec96-4de8-a8ab-a1beccaf0592", "sighting_of_ref": "indicator--fcc7e9b8-ffdc-4da3-a808-b18922ca38bc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2db6b5-fe59-447a-a1d8-9307c7016015", "sighting_of_ref": "indicator--bb7d8785-fe0a-41ba-8447-1f24cff35b51", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edadd9df-793a-44a2-b6c0-d466e89a50fc", "sighting_of_ref": "indicator--02ec82a4-6ac8-401d-a202-32280d640080", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0848a4d-bfaa-486e-90c9-ee5d605626e7", "sighting_of_ref": "indicator--779c18ca-5a86-47be-9dae-85b4f98593c2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56eebe8f-8a49-4534-b5e2-e164e6d371bf", "sighting_of_ref": "indicator--30db9a42-d4b2-41ec-ad61-adfd8dcecd41", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8304cc88-dc99-4429-beda-bbb86b445f91", "sighting_of_ref": "indicator--fde9e3e7-4f33-47a5-921f-da1e8e0c4ffa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0357e547-bd79-4cf0-9f6d-b704d62521cc", "sighting_of_ref": "indicator--7a9519d0-6e54-40a9-8e0e-ba73c959613a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6902fa6d-dcc2-43af-a7d7-b7066636d93f", "sighting_of_ref": "indicator--175655cc-3ac5-4da2-acd9-8d7479d8dd79", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9d913e-487c-4200-a56b-9f94eff1eda5", "sighting_of_ref": "indicator--b9a345df-594f-4489-a96c-492715d1cbc2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fed5ad0-975b-439a-862a-59d87081f921", "sighting_of_ref": "indicator--c367f53a-52fa-458c-b920-c4878cf786c3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f76737-0aac-46c4-a295-a776e81d50b7", "sighting_of_ref": "indicator--d5464473-fd84-4c9e-ad0c-d0b8ad95d7e2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e1ff54-8e84-4cdd-814a-33561d8c470a", "sighting_of_ref": "indicator--516f8edf-b033-4d04-9e09-62a5eccbdd24", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff9580b-c6a3-4f3c-ad9e-cfdec992216d", "sighting_of_ref": "indicator--d1a03188-b0da-414e-85e3-a6f748c1affe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0470c584-9bc7-48ab-8d30-68708b6cdafa", "sighting_of_ref": "indicator--1284929a-3755-4a9b-846a-1f4bd8502fe3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f05401f-506c-45e7-8784-37296749d939", "sighting_of_ref": "indicator--496a9e05-0635-49c2-b700-43b531c82451", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139fc273-e6b6-414f-a4bb-164654a0c0bb", "sighting_of_ref": "indicator--e8dd9904-de99-43a2-8313-1fca16d6031e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9292133c-97f6-49f7-a533-fc5d21240a71", "sighting_of_ref": "indicator--61b00de4-7f43-4d51-9199-bce4acb8851b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34553151-242b-4bcd-8a5c-8c0dbb4d0be2", "sighting_of_ref": "indicator--9a480027-561c-4340-88e4-f93c5a9368cb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e34cf9-be10-4a0b-be7e-c378351c6ada", "sighting_of_ref": "indicator--d6d6e747-c128-4c72-8227-04df35954f81", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4c6587-c1f1-413d-ba01-14925a95cd33", "sighting_of_ref": "indicator--a0bc5fcb-efcd-4518-8fa0-5468fe41f9d1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27fc91eb-0905-4f3f-ab4e-8c9fc4532da2", "sighting_of_ref": "indicator--eb8c999f-3fd3-46a1-b30a-8db7296ca86e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be3b1631-fac3-4140-a3b1-37925411e855", "sighting_of_ref": "indicator--c82d425e-59b5-4c32-a12d-c41771614023", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--671cf148-7bfa-4167-b4c3-c1ef60ed078c", "sighting_of_ref": "indicator--4e8aa165-c64d-4382-9cd6-6a9e5bed271e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba3da63-7228-4ae1-948c-863e5fe73130", "sighting_of_ref": "indicator--157e01d3-86ed-4396-ba0c-05ed926b1050", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95511e6-8555-45d7-902f-5bb32cd22402", "sighting_of_ref": "indicator--9d517d83-6908-40a1-984e-6e140b765896", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81086c3b-e6e1-468f-b9f3-e9853e0507c5", "sighting_of_ref": "indicator--536a6a88-d3cb-4694-ac5d-da9a3da37279", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f551cfa8-4f90-415b-96c0-066440f2467c", "sighting_of_ref": "indicator--09cb3d0c-e9cf-4dd0-b157-9c428a847160", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a1d758-0523-495b-87c8-cb5089d0427c", "sighting_of_ref": "indicator--ad792103-c274-4a6b-957d-b170bf66afe5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd4a272-1aea-4c09-a229-ae91019a3112", "sighting_of_ref": "indicator--cfd8c55f-78d8-4bcd-9dd3-ef65f48eed37", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f62c15c-26b2-4e13-ac1a-04b4f6165ebd", "sighting_of_ref": "indicator--583daa14-39cc-4e7e-b1f4-3cd113b43581", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c39ace-f3b1-44b6-b176-da137de49fe9", "sighting_of_ref": "indicator--87250fe9-3c10-45a4-b6cf-cae4ec8b0815", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5607187e-6f61-490a-82fb-95f1aeed764e", "sighting_of_ref": "indicator--94415dc3-b52f-4b72-83e2-47b9e2daa237", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75801aa0-c89d-4087-b188-198f63a48ef6", "sighting_of_ref": "indicator--38603469-01ab-48fa-aeeb-1c57eb3e5f56", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498b2a54-5611-4491-ace7-69a47581a8a3", "sighting_of_ref": "indicator--bb52369a-90a7-471d-a6c2-58e3bc822769", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70700b6-bebf-4963-a557-a15cd1f70a18", "sighting_of_ref": "indicator--5d408d81-64ad-4cc2-a885-06a90b1f13e0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea9325d3-8731-4127-81b8-ecbbf60f0f2c", "sighting_of_ref": "indicator--fd42fb59-525e-4e42-b23b-61f7a915be76", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654eb467-3fc3-4416-af68-ff3568da010d", "sighting_of_ref": "indicator--ac87e9d7-c681-47af-ae60-7c817040e2cc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae3bbc54-05e7-40b1-80e9-cd0f25dd3776", "sighting_of_ref": "indicator--4322255c-5f16-4037-8b56-37e12564a45c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4851a1-7e1b-4de2-9dde-4cefca000b6c", "sighting_of_ref": "indicator--d12616a0-e1ae-4f79-823f-d2b27e5df8f7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840f9c19-b65e-41a8-b4a9-7eff27ac6a01", "sighting_of_ref": "indicator--3f2924fe-ea25-4b37-94df-8b8bac8e51a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99a1d9e-f93e-4d16-8134-e6dd315fcb2e", "sighting_of_ref": "indicator--3d07a7e4-edc1-4973-90a6-a1557d94f212", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ccf344d-0602-4d1c-b537-83054dfbacbd", "sighting_of_ref": "indicator--0626d1b4-8032-417e-9a0b-5097bb33b76d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddac6b61-bcd4-43db-8d4a-d69275269e36", "sighting_of_ref": "indicator--9765b796-0eac-4a4c-a86c-9ef6e0ff56eb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554b4151-78ca-425d-b6e6-ffebb8fab82b", "sighting_of_ref": "indicator--399f9664-7e13-4fba-bfd6-ee155ccd89bc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e51563-6ce1-48eb-8024-e2d906ced964", "sighting_of_ref": "indicator--c86abd05-7bd1-4588-ab8d-84edb9036e12", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97dae177-b2c4-4f1f-9dc5-371f31b7572c", "sighting_of_ref": "indicator--c65057c6-f6a3-4eac-9940-2248eb0b7852", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207811b8-5886-4c6e-a10e-b2676b65b955", "sighting_of_ref": "indicator--bc40af27-d3a5-4180-a59b-8e05971f5b40", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db811808-0b49-4210-9c8d-5b369b05a402", "sighting_of_ref": "indicator--dda509de-07bd-498b-a251-3e1b3d4d0857", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--046a540a-4445-4d59-94ea-0e370368857d", "sighting_of_ref": "indicator--9133e77d-6440-474b-9a84-767b6bc323b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2cbf559-c3b5-4d45-8e3d-cdde18375e38", "sighting_of_ref": "indicator--3f8a7db8-954f-4263-ad87-0d25c8986818", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb456fa-14d3-4d92-b2ef-28302af6bd6e", "sighting_of_ref": "indicator--7169f9a8-c1c8-46eb-be01-bee810cb8b0a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3559b50b-45cc-4f74-9923-2532e5916284", "sighting_of_ref": "indicator--ecd283e5-1260-4f79-a2e8-08a787f09291", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e9c172d-a06a-4ffc-81a8-1577853c11df", "sighting_of_ref": "indicator--92191710-83ad-4a4e-92f2-8be387966ff0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba8cb35-09ad-4f9c-9fcb-be58d67ab93a", "sighting_of_ref": "indicator--b09d045b-197f-4d80-88b2-6768aeb7ff4b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee4e85b-5787-4642-9cd3-f6dfc7dc596a", "sighting_of_ref": "indicator--18eed7b8-b3b2-4278-a332-0ce2e5955fb7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58652296-69cd-402e-9f2a-d3bc1890efd5", "sighting_of_ref": "indicator--bfd39951-6fdb-4379-84b1-d31017c4694c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4623f8e8-8530-463b-add9-16b914c557a1", "sighting_of_ref": "indicator--d2a19054-c06f-47a1-a985-2d85c5edff45", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc78093c-5e26-47c2-bf6f-6ffccec685b6", "sighting_of_ref": "indicator--1f76fad8-7c2c-4a1e-9c0a-5fec3250850c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1f1449-67d7-4be1-8e56-7411702d341c", "sighting_of_ref": "indicator--24c1c9ba-0969-4815-8b02-198b72df619f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9d633d-59fe-4d44-b136-6aac4782cceb", "sighting_of_ref": "indicator--9f09626f-2e76-420e-8b01-3e72f9ce48bc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045ecc0f-533f-4c88-be7d-d16c34c2a5ee", "sighting_of_ref": "indicator--00e17bc4-c251-4da3-8078-b0a7374b2d0a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd1e1b5e-dabf-40e3-a322-47739b71e711", "sighting_of_ref": "indicator--04c03dc7-882d-40bc-b4c3-853e04427813", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89a3af1-608f-4a29-b663-c7b55152543f", "sighting_of_ref": "indicator--ad6838b8-705a-4e66-87db-5d5f2cb44f44", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db75250-e00b-4b7a-82ec-b85b813db104", "sighting_of_ref": "indicator--49a7ed04-758c-4359-820e-3ed4554a2e48", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981264c5-f600-4a0b-96cd-a41d85213166", "sighting_of_ref": "indicator--61d319e0-83a2-4435-8436-4549d4051ab6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa74ebd-c784-43c9-94ca-abc5314fe02a", "sighting_of_ref": "indicator--b49ff14d-db38-47c3-ab68-f744047f979e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33772c89-04ac-4da5-8053-29329f5862ec", "sighting_of_ref": "indicator--2c68ce20-bd43-412a-a859-89fd1543f9aa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8350e15-5f55-4a48-b187-1f802fc536e2", "sighting_of_ref": "indicator--6f05e95e-2007-4630-9625-746fd8f9f5ba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--825e9aab-a0f5-4131-8bd5-144e3ff28888", "sighting_of_ref": "indicator--28b2f300-a64f-451c-8874-d5652bea31b6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4fb3e1-106c-4d6a-a62e-ebf98a54ac63", "sighting_of_ref": "indicator--a89118b5-94f8-4031-b933-67a66a0fed4d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d35d4e-659a-4256-b761-85240a12862e", "sighting_of_ref": "indicator--76e92cc3-2356-4552-a1c7-44450fa87c6f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f806401-d097-41f8-8a34-dc8a6a9b9993", "sighting_of_ref": "indicator--a5315b71-3cb6-4a09-bfe8-2572df182c5b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11be12ea-9e9c-4c01-b2f5-9032a014b882", "sighting_of_ref": "indicator--1ce3f30f-d211-437e-b4ee-f010a21679e7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4a346d-11ae-4489-bfb0-f35e0e5dd744", "sighting_of_ref": "indicator--e5628c33-8e7c-418c-a061-b4191ea3a9b7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c20aff-8c3c-4fa3-80cc-d7b13a8f54d8", "sighting_of_ref": "indicator--a4693195-5420-4fcb-b7ff-d4da780367a6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d3076f-23f5-4235-bc9a-1a320d864fad", "sighting_of_ref": "indicator--e4a7ebf9-23a0-4e2d-9d36-ed671f3c848c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ec61f5-e115-4ef5-a37c-e3e1a2d5ac78", "sighting_of_ref": "indicator--c90c9ea8-4dcf-4248-896f-eb80aadc5b82", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa8085d-a3c2-4752-bb61-d919ed8712a2", "sighting_of_ref": "indicator--786352d2-1f6e-4722-98e4-5ce16ff87c58", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05da0eaf-e7ef-4425-b186-29766620222d", "sighting_of_ref": "indicator--461cdf90-21e8-4401-99cb-5d66df5efd91", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5ed73c-4cbf-4b50-8e82-666097793758", "sighting_of_ref": "indicator--9d017fda-c4d1-4cb7-8386-9562900a64fa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c644690-d47f-4130-a91f-2d373c9bfa44", "sighting_of_ref": "indicator--0cd7752f-5815-410e-8412-cb31c38f7d24", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff21646a-f321-4a96-ab53-04c28412cb2d", "sighting_of_ref": "indicator--99e63635-0c06-4cb3-8d1d-fbc754fd7aa2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95fd38a2-329b-40ed-b2b5-9bf6fd3125b3", "sighting_of_ref": "indicator--c47fb4ab-563c-43b4-808c-2df702e3974f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--821b1cbb-ca21-47d0-bbc3-ea5d3fe85be0", "sighting_of_ref": "indicator--4514ddbc-49c2-4361-8f13-95d6fba15cc2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af505557-1b34-49cb-a1e4-081f444dd98b", "sighting_of_ref": "indicator--32ba2eb7-7dc2-4499-a36e-ae73587d8d7f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa6eb49-5963-4821-9b4a-c0932124b06d", "sighting_of_ref": "indicator--dda3781c-09d7-4265-9af5-bbf9beeccddb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a03a501-bd79-4b93-b7d2-2aeaa5403c76", "sighting_of_ref": "indicator--5a2aefdb-4c2a-4947-b8ac-37f2476c76ab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4f2f4f-f182-4955-8f5e-dd13f0f0bf6c", "sighting_of_ref": "indicator--77ddeaeb-84b3-40a4-852f-9d27597c1610", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40735424-1689-4551-89ce-7c07edf3f320", "sighting_of_ref": "indicator--01bda275-186f-4782-b837-30a8b8f0313d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af62e5b6-e5fc-4eb7-b8d6-3d4eaad0cecf", "sighting_of_ref": "indicator--43ead00e-b9d8-4c4f-9f13-8d6ef605246c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f025e618-5b2a-4b30-8b79-0537db40e01a", "sighting_of_ref": "indicator--5534080b-1093-4348-93da-3fbdbb58a4d1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5af7ae1-659c-4149-a9e5-908f8f5376a9", "sighting_of_ref": "indicator--1eab4362-7fef-4d8a-81f7-c012d11a3b36", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ef0a04-bf5a-4e10-be57-2831148212c0", "sighting_of_ref": "indicator--7cff9c7a-ea72-4805-b480-68f19a819abc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--babc1992-a295-45eb-899d-3e65b14d367b", "sighting_of_ref": "indicator--1719f4e9-d55a-4cb4-b5e6-a75496239338", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd15ab7a-90a0-4b4d-9242-3350790db8ed", "sighting_of_ref": "indicator--289449e4-a9ed-4e72-8805-af10e40499c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409eb04d-7fe8-4696-b681-6b9a09279625", "sighting_of_ref": "indicator--0e802556-3c28-4e54-a33c-261f0dc0c998", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd929e6-5ee8-404f-a8b2-d794a901d845", "sighting_of_ref": "indicator--ea63afe5-737a-4b26-9e08-1bbb0bc51234", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36ddc73-5bc0-4faa-8311-5c2a6ab567b1", "sighting_of_ref": "indicator--b587ef59-70a1-4855-9d10-0ba68b20f282", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e36699-d47c-4a9e-af08-6cfbb309ac76", "sighting_of_ref": "indicator--2d2bb335-eb5d-4d7c-b2c9-8c861b75aff3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdfbad33-5261-4fa5-88a1-c63514a3bcd2", "sighting_of_ref": "indicator--962cde5e-9151-452c-b9bd-4d7bf5a8ffe7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba0d3279-8f42-41d1-a06f-1192d7c30b56", "sighting_of_ref": "indicator--db70d23a-93e1-48c1-aab1-98161980ee4f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a42856-e8b2-4ec0-bd62-331967729b8c", "sighting_of_ref": "indicator--e57e3d21-eb1b-44be-88c0-0cc0fffadd64", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90e853c-a599-4783-8407-272e2dfd8e75", "sighting_of_ref": "indicator--0688682a-3c2e-48c4-84af-e322eef07431", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d53754-c2cb-4a63-b8fe-2323aa1de150", "sighting_of_ref": "indicator--8fb1d736-9347-45c1-9daf-13ae6b37aabe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0635d6-f926-41c4-b6cd-355c749a510f", "sighting_of_ref": "indicator--89e0152a-8208-4c50-8ab7-61d91be9a2ca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fa57dd-5646-4c85-8eff-4cd472d91ded", "sighting_of_ref": "indicator--cd6d587c-904e-4d3c-b326-5c93914565bc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b3b2f7-7e03-44b2-9c44-fa4378806839", "sighting_of_ref": "indicator--63bc417a-745f-4b28-9ddb-0b67a2637c7b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c0d585-925b-4dce-856e-db2ac07b43fe", "sighting_of_ref": "indicator--23fac85f-c84b-49c5-b9b2-a41b0f540f3c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bccf4b9-5bee-48ec-9964-bcff13418315", "sighting_of_ref": "indicator--764a63f0-010d-469c-bd6a-1bec8501cba9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15337623-cbc1-4a02-b469-297d366638bc", "sighting_of_ref": "indicator--dcbae508-2730-483a-a5bb-96bb7e7434ec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45cbf0c5-2672-4243-9eea-ef9f20d2bb77", "sighting_of_ref": "indicator--6c1e3ec5-589c-4f78-9591-b9ca0d24bdee", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a424e3-8b52-4898-ad4b-5c90f82556f7", "sighting_of_ref": "indicator--fb8e3dda-e2a9-4962-913a-a17b1fe4597a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14aa6c9-4c40-4342-87c2-3eae8f0c0d20", "sighting_of_ref": "indicator--a65a80ff-6df5-4b43-b8d2-891e40463af6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2e7043-d88c-47ce-8646-f2a08e26a97a", "sighting_of_ref": "indicator--b4737e70-f9ce-42d9-8c54-259c353c7866", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bca4901-a494-46ae-aba3-0b47978ce58d", "sighting_of_ref": "indicator--3b12b562-8266-4c9b-ba50-2aa54c3d2960", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af63c86-548c-44a7-b431-63bacb169a86", "sighting_of_ref": "indicator--b17404a7-3e8e-4864-b226-6fe791737df7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9e7a03-faaa-469e-930e-779e64fdd22f", "sighting_of_ref": "indicator--b77a23a0-9f53-4cec-9e61-3ce8f19498c1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ecf978-0ed5-4598-9a6d-0b3fe45f9420", "sighting_of_ref": "indicator--f0361fde-3229-42f0-95a0-e882460fe72e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c428ebd6-9b95-4d48-b30a-fea246fbb1b7", "sighting_of_ref": "indicator--2c250c33-568d-43e7-9e82-f8f0b6580a70", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a03c3302-6347-4326-ba70-257576558a03", "sighting_of_ref": "indicator--005e51c4-da5c-4248-b34b-472645936905", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df54bf80-c674-46db-945d-7d33c9889619", "sighting_of_ref": "indicator--4635069a-f9a5-43e0-94f6-840f2671eea1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6892262-0407-4afd-8c7b-3e4a30d55e47", "sighting_of_ref": "indicator--05cd70ff-95a6-404d-aaf7-7992562929a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae24b43-7d1f-4c99-9d8f-29767c3c84c1", "sighting_of_ref": "indicator--a6c82263-007f-41ec-87e0-850a780fb01e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9aa7749-1e0e-43fa-a16a-5186f6a13af9", "sighting_of_ref": "indicator--73a904a5-8e34-4b6f-8738-6d32335e1234", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ff62fb-810b-40e4-83c5-9a651794842a", "sighting_of_ref": "indicator--2f3a88e8-1932-4bc2-8a6f-7a660e2ccd90", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf31e8b-3715-4ba8-b472-9635a1174b6e", "sighting_of_ref": "indicator--4fd80e92-d0a3-47f6-991d-54e94040599e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79044247-7c0c-492a-9226-f774aedf213a", "sighting_of_ref": "indicator--925af894-8c28-4858-b71f-de6c1415f420", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9319d2fc-d034-4861-bf5c-5f62c653b2fb", "sighting_of_ref": "indicator--eb07e63b-fcaa-4352-93ca-0929a7e55cab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5221c87-f390-4cb4-a9b6-3ea57db450cf", "sighting_of_ref": "indicator--25a03676-6c37-4459-b790-e8cbac86da30", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9d46a4-078d-407e-9f33-d31adff81518", "sighting_of_ref": "indicator--650c0259-8cdf-4a4b-92aa-de328502bf46", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c710680-3808-462a-b3f1-2a56cae6f35a", "sighting_of_ref": "indicator--cf2cc286-ff09-4d48-a111-1ef06151c172", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924edb99-5487-484e-a1e4-874e79455b85", "sighting_of_ref": "indicator--e2fdba7f-f587-4fa7-b70c-8c850257d383", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de95e2cd-6d3c-40c3-b691-57e64380daa1", "sighting_of_ref": "indicator--b5350ec4-9e8d-4856-84c7-7f2ad5bd5669", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9dd9b82-762e-422b-a166-cc6f4a07ac16", "sighting_of_ref": "indicator--839de70b-e6f0-4386-ba6a-b649985ea77e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e247675d-85e3-4733-b1cc-5bed5c900de3", "sighting_of_ref": "indicator--bc3f86b4-4abe-479c-b1c7-5e2bc9dba589", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff855a6-7bac-49a3-814a-b7430bfe24b1", "sighting_of_ref": "indicator--78dc5165-b8b0-41bc-b9d1-0006316f753c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91398b6-b50c-45c9-8e8a-44149f3ff842", "sighting_of_ref": "indicator--c4cafeea-519e-4b72-8daa-e68188a00269", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--434e0da6-e632-4d32-869f-eaed825d86a1", "sighting_of_ref": "indicator--4b898f64-97f6-44c5-84bb-42fa6c7ab628", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95423ccf-9a7c-4568-aa86-da3f4ea0c41c", "sighting_of_ref": "indicator--d4b0a17a-565b-4392-8b42-9ae1d864a537", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ddfea1-2d1d-47aa-a357-1003a2d60465", "sighting_of_ref": "indicator--11bbf285-59f4-4012-91f1-60eb9ecec1e3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34578e4-b7da-4290-8e3d-fc4f7c40b70b", "sighting_of_ref": "indicator--7ad5f602-6d80-4faf-9d45-8062a1dd9a32", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd24cf9c-0c12-413f-ab9a-e19cd85e4ab2", "sighting_of_ref": "indicator--68f01948-5b7e-409a-8db7-89f66a16b0ce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f44811-e5ae-41e0-96fc-b8de228ff6bd", "sighting_of_ref": "indicator--f0a68d0d-e2c1-4005-a589-393359a57cfa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e18859f-76fb-493e-9c88-263a4485aa43", "sighting_of_ref": "indicator--8d66b017-3148-4e04-92fa-a0b68ffd35b8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4aec7a4-c8f1-473e-b8f3-dbd3aae3713f", "sighting_of_ref": "indicator--4b66925e-fb4c-4e70-a2ba-559e6b39e6da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3462020c-9964-46fe-8c99-1050ab8355f0", "sighting_of_ref": "indicator--a59c4169-cfa9-48b7-b4e8-ee25a1caae21", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3334a6b-29a5-448e-a809-3f58200b3b89", "sighting_of_ref": "indicator--2f2dee3f-d588-44e6-9abf-d0804e9e305a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc71f870-ac48-4927-b3bb-e50af2decb80", "sighting_of_ref": "indicator--515ed15f-d929-43a9-971b-2410c746344e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ccf9446-87fd-4bdf-80c5-fdb4c7b43c58", "sighting_of_ref": "indicator--3981c5e2-39ef-4d1f-9374-9023af41c690", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f294ea5-353a-4ba9-8b28-db4fcdb25f97", "sighting_of_ref": "indicator--d7c194ae-b84f-430e-9eae-833f94cdd59a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d7c54b-8d6e-45b6-b5cc-04ab6178e8e9", "sighting_of_ref": "indicator--17feeeac-869a-452b-9a8f-9f940a855499", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e880a361-3cf6-4a6f-b51a-874d7dc4423d", "sighting_of_ref": "indicator--f58ec844-114a-467b-925a-88d8a5d23654", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cecb3dc-43f2-46fc-a2d2-24f520e60ec8", "sighting_of_ref": "indicator--20e33dc0-7a36-48cf-90fd-f3756f961133", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5289fd03-c284-478e-b474-421cc4434b03", "sighting_of_ref": "indicator--88f85e14-aa62-4c37-9997-51e2903cc8a7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d568a4-0fc4-4611-b499-8c902d0caa88", "sighting_of_ref": "indicator--6d59274b-fa89-4a48-ab5c-b230ba5dd594", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a231f4-4b9b-4d5e-a541-87a4f99cd2a0", "sighting_of_ref": "indicator--ba1cbcff-d8de-4f71-b30c-23448ebdbd90", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db7cefd-94c8-4bcb-bc08-98915d549d55", "sighting_of_ref": "indicator--55624ccd-e02b-4db5-9b49-2980415fa6a4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb365c2-511a-485c-a3b2-d6daad7117dd", "sighting_of_ref": "indicator--2d97878e-3a4c-44b1-aa9d-bfccaa668bab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--383ca724-aab2-4d1c-aed4-851b37a06d0d", "sighting_of_ref": "indicator--cf78d277-d346-4800-9578-eb59cb8184cd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b9dabf-c371-4918-bfd1-da0267601fa3", "sighting_of_ref": "indicator--caff4d72-9de2-4a5d-a259-23e8b8d103cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff88ca7-01ac-4770-9609-25158f3d6a5a", "sighting_of_ref": "indicator--10c74bde-0fb1-49f0-aa35-97d1bc1ab544", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7a1939-b6d6-43fb-bcf3-d22573f50c00", "sighting_of_ref": "indicator--26183c7c-3936-4cc2-84ad-f32fdedcdcdb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfca5c52-fad5-4f58-9d65-e61559161570", "sighting_of_ref": "indicator--7f4f542c-ec44-4136-9d07-6477db37f16b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1eb8c68-983d-415a-aae3-b730f2a0d598", "sighting_of_ref": "indicator--36bed091-15de-425b-b61b-69813f9c858b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b22695c8-1cbe-4e8a-9346-c1620dd162b5", "sighting_of_ref": "indicator--2c51efd1-04f5-4513-b4c8-7d5b66ddaa51", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b97300-bd5f-44fb-ad1f-bd073fe38976", "sighting_of_ref": "indicator--d956969a-df6a-4d00-89da-4bb3bddb128a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a348411a-07c9-4988-8ca4-84bc44f76a5a", "sighting_of_ref": "indicator--8e28bc98-7070-4819-92ab-dcca3a279a02", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f2f5cf-7fab-4fe5-86bc-083902d53e53", "sighting_of_ref": "indicator--c45609d0-356e-4538-8e24-53a1e7ee2b9d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81217001-3e15-49a8-8919-e6267b2d2526", "sighting_of_ref": "indicator--c660192e-3b9f-4bc5-a071-ec7f003e8550", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--465552a5-b147-4629-8939-70f889d25aad", "sighting_of_ref": "indicator--80c8a39d-63cf-40fc-b47b-492c784fc8ab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eaa861e-3578-4a34-9542-73fe93e03fc4", "sighting_of_ref": "indicator--1004ab63-a4e5-4b1b-83cb-f261e93547d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6b5368-3985-46b1-932e-2ef72e57f932", "sighting_of_ref": "indicator--e1ee5232-f944-4e50-95d8-efbe0e706196", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be878832-962b-4074-aad0-ad8cc7b507eb", "sighting_of_ref": "indicator--31059d6b-073c-40f3-b7aa-2cb9bcb1f47b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a456e663-4807-4d60-94cf-650c1c7cc389", "sighting_of_ref": "indicator--9c1ceae4-b448-4463-a7e0-e83870589615", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceecab1e-9808-495b-8769-637201e76a2b", "sighting_of_ref": "indicator--fe190bcd-7405-4361-bea9-2d8dd95426e2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882b2cb0-f0c9-4c1c-8785-5098f1a28d5e", "sighting_of_ref": "indicator--f713622a-e4d3-46f0-a63d-6da6473dd232", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8717cde5-2b95-4a22-a8f6-a41600f9ebef", "sighting_of_ref": "indicator--35a07450-bf80-4fbb-8391-7884de4c6669", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ae137f-fb57-4307-bf9a-f03f8abcde6b", "sighting_of_ref": "indicator--6e0a054e-d5ad-4510-8bdf-04cf8b111c93", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f90fa0d-72c4-4369-80cd-e2637c70d02b", "sighting_of_ref": "indicator--4428dda5-9917-4513-8852-edab88baf94c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966ddd87-d36e-40b4-abe8-50224c9b4cc5", "sighting_of_ref": "indicator--755f0026-d0cf-459f-a894-64d3048d20e7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8531dddb-6a6d-4ce0-9f5e-eada7578067f", "sighting_of_ref": "indicator--0389ae37-4c15-4c16-9869-b5ae98959bc1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece11a1b-edf7-4edb-a0a3-047175398a64", "sighting_of_ref": "indicator--6495f75d-da58-4942-a1e2-1a6b0b45127d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ac0cc3-405d-4fa2-87f5-affb5c2d7416", "sighting_of_ref": "indicator--6ca9a52b-f924-4063-a80a-bbd196af76a3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79916fe-2161-4a1b-8af0-da5d4c8378b1", "sighting_of_ref": "indicator--af68cc75-db34-4c48-a7e9-3a1df96a3f5c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee59eee-ed8d-468b-b2dc-6012d268ebf8", "sighting_of_ref": "indicator--f6b0b90e-c9b7-4df8-841c-aa6e47d20842", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6112a11b-0240-4d5f-b2be-b7bda1dce3fb", "sighting_of_ref": "indicator--74523ea1-c02c-4db1-b00d-8fd544bf2006", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0f442e-f039-498b-bdca-31e5f4364a8a", "sighting_of_ref": "indicator--89cc2ba9-feba-42a9-a0f4-913ef50bbf76", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde5be1a-7258-4d79-81ee-4b2409e1c77d", "sighting_of_ref": "indicator--5ed32eff-74da-4472-afb9-99a7d5f9cba2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc7ed6c-7247-441c-9f8f-a8c188272d84", "sighting_of_ref": "indicator--3c57d5bc-2cc1-4148-9c55-68544b751520", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c519a5-5bf1-411f-a748-91c8830efcb5", "sighting_of_ref": "indicator--cfeb22ca-849f-4c3e-ba48-e981aa7008aa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--894c74a9-34ad-4d5b-bde4-c5b8773b5bc5", "sighting_of_ref": "indicator--faf462cf-bb73-4494-b939-af2b7991d8d4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d66f78-3174-4db2-9cc6-cd25ffe81c75", "sighting_of_ref": "indicator--d1ab2b6e-295d-4219-a5e2-4bf928fd4720", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb94dd6e-d4df-48ad-96a2-d46fe751850a", "sighting_of_ref": "indicator--3241e9be-b469-41db-b8e7-2729fe03215e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c0c4a37-f240-4151-a334-50a3022afc05", "sighting_of_ref": "indicator--9e0fbb19-f158-4b43-8399-30ec09f5c2ca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72686c7-87da-4514-ac78-e44ecf4f111c", "sighting_of_ref": "indicator--33d96883-0f3e-4f2d-9bbd-677d386c5627", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eeda169-e5fd-4eba-a2af-67071c01c520", "sighting_of_ref": "indicator--70297a32-b2ee-4873-b3b8-f7b5fb7105c2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef654e92-7c07-4bb2-ac41-91db64d868ae", "sighting_of_ref": "indicator--9f3cd088-fdba-4948-8b87-1159c44dbd3f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ff8637-cb0c-40a2-95be-54e842dcc7e2", "sighting_of_ref": "indicator--072d5d53-8826-4286-bc3d-0c3ed395e47b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59085af-5a34-420f-be20-1f058f041ea6", "sighting_of_ref": "indicator--ca708cff-d873-4bb8-bc18-d8446570139e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73ee61a-ddb9-4c59-a7ef-7a174d8aeb5a", "sighting_of_ref": "indicator--7bed009a-670c-4e4e-8c3e-8e6352af855d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14cec88f-c568-4d4d-8095-8e8f782ae9b1", "sighting_of_ref": "indicator--32d8852b-f69e-4243-870c-da447a06e6fe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7478adee-12b3-4025-8a1b-d733317feaad", "sighting_of_ref": "indicator--484a368b-a5c7-49dd-a48c-6921ce17fe26", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e0f2a4-f3ef-4152-b7e3-5dda9a9aa514", "sighting_of_ref": "indicator--4f24b21f-3972-430f-8dce-9bf139aec2b4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c21759f-51a5-4f2e-bddf-d4b832f11dd8", "sighting_of_ref": "indicator--42ad0f6f-caf7-4c95-8b2f-3b092939101e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b2a05e-758e-4f2e-b0ab-223440484e3b", "sighting_of_ref": "indicator--cd677d0f-1d07-48ce-9dc5-0a7b41186bf0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a372ea0b-f722-4625-8f7e-9ce3597e7719", "sighting_of_ref": "indicator--dd05a7b6-d4ce-4661-a4ca-0293e083a6bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10bc02e6-e16c-4843-8075-811e26fee7d1", "sighting_of_ref": "indicator--faf7da83-e59b-4de6-b5e3-83a66ad7e9e1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6002872a-e6c8-4cee-a2da-e6b614b51160", "sighting_of_ref": "indicator--6e98f226-0252-4f5a-96ed-c8b7baed5d7d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aacc476e-a25f-4e26-bedd-fb52d6c49f09", "sighting_of_ref": "indicator--a0568fb7-d69a-4922-8ce8-7ba8ef780889", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e0abfb-8b4b-457b-b12c-1d8d224dd49b", "sighting_of_ref": "indicator--9bfbe955-7d2b-4467-8a26-5d095c8e8284", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c45b8a4-63a6-4f2c-9b81-9c428c4f50a0", "sighting_of_ref": "indicator--0ee72387-522d-495c-8b43-ac5414d4d7d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc0834c-d483-4748-a35d-ca37fe0abd96", "sighting_of_ref": "indicator--06f23d2f-79bf-4c28-9dd1-26c52c3e8bba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2920c58-47b0-4ada-ba7b-9c4d4cce8b3c", "sighting_of_ref": "indicator--75371b32-10a6-4c52-998e-34cc4fd26376", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6271be7-50b8-43e0-a513-43d10f22cbd6", "sighting_of_ref": "indicator--54346fa5-d1bd-4b4d-b6ec-8e2f6fe6a1b7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5cd184-dd70-4ab5-8038-c7775f130716", "sighting_of_ref": "indicator--8b78c6a2-0a49-4b67-8432-ac2281a77fd5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec39512-d8df-4676-8100-0b03d2bb19bd", "sighting_of_ref": "indicator--9952d884-1563-4f29-812e-9f98b3df248a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29824b9-6d03-4e1f-aa09-ddc132233322", "sighting_of_ref": "indicator--99cf997b-f9a3-4e6f-8a1c-977ecae21223", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b08ceb0-68e3-4118-a326-60d3f9354c6e", "sighting_of_ref": "indicator--3e5976c5-56fb-49f9-ad8c-86f23544e4e4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92ba7a1-2f0a-4938-9aca-fa15d0b69ae8", "sighting_of_ref": "indicator--61add95e-2f5c-4900-95de-9f906e268579", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f928ad-8cc4-4a0a-8ccf-1a50bc7438e9", "sighting_of_ref": "indicator--f624d673-fc80-48aa-a28a-88830573018f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de758c1-c5b7-49e9-8b3e-69ff3738d95a", "sighting_of_ref": "indicator--39520abf-d466-4518-9211-eebe495ab369", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61bdca5d-ce7d-46c2-b264-edf371b9a6d4", "sighting_of_ref": "indicator--21119cd3-d85a-4758-8b3f-674a3fd5902d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9116676-bfdf-4e3c-b7d8-406e0b5d0e4c", "sighting_of_ref": "indicator--c840cef0-76d7-42ce-8a84-b2712ca51eb2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78dbc091-edd2-40a1-9382-4fffdf0ee540", "sighting_of_ref": "indicator--9e3aefcf-32fc-45ce-bb48-245dfc85fa2a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65af48c-38fd-4a18-bb36-0278432ea43f", "sighting_of_ref": "indicator--4a3591f7-61d4-4275-8c57-77bffe3ad54a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b741720-19d4-46bd-b051-7462f2332a35", "sighting_of_ref": "indicator--28564217-870c-42bd-a707-71ea710e2278", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6484b6b0-d937-45c1-a6e0-dd62448579a9", "sighting_of_ref": "indicator--418d0641-cc42-4eb9-aa57-2f506299a4f6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5dfd352-b516-4518-a3fb-3507adaad0ba", "sighting_of_ref": "indicator--34c5eb32-19fb-40be-9de2-e36b40799fcd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09579015-13b1-49e9-8a2c-63ba54d6b14f", "sighting_of_ref": "indicator--0c3177cb-742c-44be-97cd-37619d6d909a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d706e788-b239-4078-a7d5-2679ebfaabae", "sighting_of_ref": "indicator--e37237f2-56d0-4a63-a72f-9a5de149ae2c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd3b3bc-85b0-48a9-aaf3-50148814839e", "sighting_of_ref": "indicator--1ba0b7e5-0636-4592-bbac-5349e9b7399a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--536d3069-d5dc-4bce-9f07-23f705c80e2e", "sighting_of_ref": "indicator--848c7c1d-186d-43b2-8b87-7d23649bd634", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56e1481-05ed-48f0-96cb-14865fedeb78", "sighting_of_ref": "indicator--fa241d39-0a09-4dd7-9554-9f11b8165d4b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deab5342-b5d9-43e1-8ac6-36065a9e70eb", "sighting_of_ref": "indicator--6fdb0deb-7396-4390-a75b-9ed2f21baf9f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1566d9-67e5-4d14-b997-e32fc5c5707a", "sighting_of_ref": "indicator--6f0a6d7a-5c51-4050-a5d5-6611f6d79a8d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77dd05fe-5d00-45a1-aac4-69c18b4b45a4", "sighting_of_ref": "indicator--4fd941e3-fd0d-4d56-9eea-930985a9df07", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a83b08b-5ee2-40ba-88b4-69d18e1b7a90", "sighting_of_ref": "indicator--1b879e92-30da-4c97-bff9-5c5d06b1e358", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82dd063f-1542-40d5-b3de-03dfca8fd63d", "sighting_of_ref": "indicator--739e735b-82ca-4fa1-a68e-ac72be8469a6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142af73a-7aad-450c-81ee-a5db9b1bb8b7", "sighting_of_ref": "indicator--6bb6627e-249f-479c-b422-944ba3d03df1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70626dc5-8419-4c46-b56c-f0381891167f", "sighting_of_ref": "indicator--7a4a8880-2e5a-464f-ae04-c50d6189992b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca27f99d-c6ca-485d-b0b9-1ae391f2d5eb", "sighting_of_ref": "indicator--c14d315b-1889-4a03-9305-6a912b9c0e42", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34392699-5490-40be-b9c6-03e764d0a624", "sighting_of_ref": "indicator--adc81e4d-54f6-4ca3-b853-c79e747dc34d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5561ce2c-3abd-4541-a431-81acc9dc0ba9", "sighting_of_ref": "indicator--06ecdfce-02cd-491a-ba84-faf38e03b88c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--350b6a67-2bdb-40eb-8962-829fd7da6fe8", "sighting_of_ref": "indicator--86d9e74e-2de4-4015-a24a-daa30c8173c7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce46846-2afb-44bc-b182-610cfc686f21", "sighting_of_ref": "indicator--c0f1d1b0-9ab3-4921-8f79-642c1127f948", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1af393f-8ec6-4897-afb3-403c5620b9d9", "sighting_of_ref": "indicator--e44966b6-95e7-4fe8-8c27-0a8aff3f19b4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--784aff72-8add-488b-be0d-36027105872f", "sighting_of_ref": "indicator--cd4517fa-eb05-4a0b-be6e-e576a6c0ea6d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e047fa4-836a-469c-92e4-a71145103a63", "sighting_of_ref": "indicator--abfb968d-b5fa-4c27-8e74-374d289f6738", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ab5a25-ffdd-4b4e-a027-48e636c83438", "sighting_of_ref": "indicator--a2b450cf-314c-4714-b5aa-95a3eb07cf0d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be5d7b4-0c20-4b74-9fad-d2ac1313e12d", "sighting_of_ref": "indicator--ee4b7462-1053-4fa1-bcb7-b101035bb338", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f31656-31dd-4bbd-851d-37ce0d17d905", "sighting_of_ref": "indicator--7fa5a8ca-493a-4afe-9fd3-04cfc8156a37", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aabf39e-a057-4d03-80c3-493969e25593", "sighting_of_ref": "indicator--3e41f824-a502-4cba-bfaa-c1bd95e96e39", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c639eaaf-40c7-45c9-82fc-5e25aee8c970", "sighting_of_ref": "indicator--597daca8-d41e-4774-8984-d600ebe544fa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4565bd41-7500-4606-a03e-fa54feed71c9", "sighting_of_ref": "indicator--8a1b96b2-60da-4e57-ae4d-0608b06a4662", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36545193-dc5a-408a-8f46-591fb7326064", "sighting_of_ref": "indicator--4ba7d17a-da7e-4213-a6a8-aa333998df51", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd22bc4-6da6-496d-821c-d2789def33d3", "sighting_of_ref": "indicator--b0d7a39e-cb4f-4a02-9715-05b60729acc0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb964140-92db-4ff8-9418-908c3f100e17", "sighting_of_ref": "indicator--890ac250-ee0a-42d3-b7db-098651d6dabf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce39f8e7-6488-4788-a601-3a7fbdce0387", "sighting_of_ref": "indicator--46993bd8-e63a-4f57-b2d5-1a481f634f58", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73432e8b-a481-43e6-a1aa-40da44bd77ce", "sighting_of_ref": "indicator--70dd8580-4c12-4748-b15e-5b0abd4d512a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a82a7a-0da9-4063-bcc2-7e520104d913", "sighting_of_ref": "indicator--8b373220-fb56-4b79-a68e-d8bce072dea7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24260d7b-200a-4c9b-8cc5-b0987097df2b", "sighting_of_ref": "indicator--67b3ef77-0852-4a13-aec2-4913b9ed71fe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66969b1-e272-4a94-bfdb-21cd0329b0b3", "sighting_of_ref": "indicator--a8b0690a-45bc-446e-a8c6-76e998fa129b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84d3ee5-31b4-4517-92c7-97d53e04460d", "sighting_of_ref": "indicator--a859045f-f483-4154-afff-9640b9b9be2e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0636888b-730f-42cf-8671-aa0cd054f5e7", "sighting_of_ref": "indicator--1d3290af-92c5-4ca2-b406-452276d60024", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088b68c7-e029-416e-b82a-0ca8f686477e", "sighting_of_ref": "indicator--c20ea101-92b9-413a-a5d1-bc07cfddb925", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce89d15-3345-4701-ad8a-c2a5e0173430", "sighting_of_ref": "indicator--e3d729d7-729d-412d-8489-57b4533e6458", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60daa86-e4a1-4a37-8cd1-1ea477559f7e", "sighting_of_ref": "indicator--555b51a8-3a1c-4149-beeb-07f1c625fb12", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c952d7-8940-425a-babf-a38147992737", "sighting_of_ref": "indicator--ff1d47dc-3ae8-41a2-a1a4-700d01d957ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--793bff48-d6b9-4077-bf92-28945dbd4308", "sighting_of_ref": "indicator--f7c25701-2df1-4f87-81ea-49136ea3f782", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db849e66-1e6d-409c-b727-193280dc17c3", "sighting_of_ref": "indicator--d21e0533-3d9c-44d4-9868-6851758eb504", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d525a89e-9719-4489-a456-af924825fc29", "sighting_of_ref": "indicator--5b206ef7-7fe4-4661-84a2-6cd5265da589", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a85996-fd17-4f08-b4f3-de11ede24563", "sighting_of_ref": "indicator--f3521c2e-49e5-446b-ab50-adfd06d23a62", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db443331-d72d-47b2-a390-4ab7991074ab", "sighting_of_ref": "indicator--405c71a4-718c-4147-a7b4-17d8bcbd3f74", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c1b662-ccf4-4a30-b230-266a497aa888", "sighting_of_ref": "indicator--f86b5d9f-5246-4664-9b67-e7b0ecfadb13", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3823e56c-f775-4574-9805-c1ad4071845d", "sighting_of_ref": "indicator--6d79d04e-56ee-4eb2-b3a8-9f03a5460a86", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f89943-b98b-473d-a668-b6d32c9f1f7e", "sighting_of_ref": "indicator--3c9dc195-17f8-4a14-87b8-02a25b81a160", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42dc5d68-79e2-407f-9dca-a8fa2be96df4", "sighting_of_ref": "indicator--7a57e788-efcb-4cac-a391-5242dd465c3e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d811dc92-5b0c-417d-8aa5-d3f5cafb17bf", "sighting_of_ref": "indicator--37141a51-6d1f-4f42-afe9-df4f0f4b4eb6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3813da-a411-4000-afea-4555b4885504", "sighting_of_ref": "indicator--8c021f84-0a49-4919-b89f-bf89eb4d54b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce456ee-cbbe-4ad0-9e20-0eefdd056658", "sighting_of_ref": "indicator--e7636666-5d3c-4fc4-a49a-fcafc3425cf8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe080a1e-995e-465d-be22-c03b273192db", "sighting_of_ref": "indicator--2e6d7a7f-c9a2-4c23-8b3f-619c9bad317d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291bad38-183b-40ee-9eec-42b459daf4d0", "sighting_of_ref": "indicator--4df6b458-1d28-434a-8237-8cda6141aace", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc6b503-c600-42b7-9e7c-0efaa3ab9dd3", "sighting_of_ref": "indicator--65d650e5-6766-4a4f-a4ac-e6018df2ef5e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a08bec5-1655-44b8-8dcb-ab0552a3e8f0", "sighting_of_ref": "indicator--58bf1ccd-2111-4caf-a445-17c061602b63", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda587fb-c857-4a1c-9ee1-28a57d380750", "sighting_of_ref": "indicator--5f2b0131-8658-494f-a1c7-a977296bae0f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9651729d-32cf-4bb7-a153-dccbe38c69b7", "sighting_of_ref": "indicator--e0f22a75-6df3-4111-9eab-828c75746846", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a40ec0-b250-4f8d-9ab4-87bf15da18c2", "sighting_of_ref": "indicator--59aa2c2e-d9d3-4c30-a5a5-f31165217fc2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6120cf69-1383-496d-98b7-88024a835ec5", "sighting_of_ref": "indicator--4aef4a29-1070-446f-91e2-8d568df1e84c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de565d17-0bd2-4183-a066-dc419451fa4c", "sighting_of_ref": "indicator--248f1ed1-ecf5-48c9-9e3f-dd6b551a9050", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d671c29d-9b02-4639-a545-ecbb36d3a396", "sighting_of_ref": "indicator--81ce84f3-4cc9-42b1-9e6f-a406ad9d16a6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174bd546-fbfe-45c6-98a2-8a0a8ee226a9", "sighting_of_ref": "indicator--9b20df73-20fe-4959-acff-5108be754b17", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830d9edc-194b-4426-b604-40ea1ba98ceb", "sighting_of_ref": "indicator--bec7a852-62e0-4cb6-a8a8-fbe3c5efd58f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f0ad6b-a59f-4ecf-a1e6-a148791d7ec7", "sighting_of_ref": "indicator--c86f3275-1a49-4a6c-a1d6-2898b83393d0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80c43b1-b895-47bf-a8ab-42c085abb88b", "sighting_of_ref": "indicator--2d1e6f14-c49c-4c06-920a-ff7f0fc39a4d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d695852-2d6f-4586-bfbb-a61cdf990b52", "sighting_of_ref": "indicator--3062364a-2046-4ac1-b164-afc6788298fa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49274a37-e6b1-47fb-841c-169999147168", "sighting_of_ref": "indicator--6ef34091-1612-4b9d-82a2-b5a57dd0c9af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d092ddcf-fc7f-4a59-802b-f4c1d42ab593", "sighting_of_ref": "indicator--b7ac9b94-01d7-4d98-9189-04062d065f0e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a48107-7cfe-4b86-9e2e-b92543b5adc2", "sighting_of_ref": "indicator--28bca044-adc2-4725-8c1c-11813ee18220", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f41f0e4b-d00a-4c54-8361-72a2a7860dad", "sighting_of_ref": "indicator--4ec57892-0e9e-48d1-bcb0-2bee3ebfe381", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9476daee-703c-427e-8bee-10efcaa9887d", "sighting_of_ref": "indicator--7b07ff6b-c679-47ae-a14d-ba16dd5d028e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c980b86-af45-451f-9a17-d5d9dc69217e", "sighting_of_ref": "indicator--2791de4a-f0d3-4bea-98e9-bb16866e23d5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34bd08ea-b8f3-422d-81db-10a248d2d4eb", "sighting_of_ref": "indicator--9f5f765f-26d8-4b9b-a52c-f80663afc657", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36302dc6-729b-4d9b-83ac-d1536dc653c0", "sighting_of_ref": "indicator--1f9b3bf0-65a6-4383-a6cb-d497ef1b4bc0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eabba014-ac41-4de5-a18f-2a9473a2d78d", "sighting_of_ref": "indicator--e77d255b-a98e-480a-9dac-55f43238e03d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2c08fa-17a8-4d61-adbc-94ba8385de2e", "sighting_of_ref": "indicator--744739f0-641e-4a9b-b75b-70ad84b2de0d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b74eea7-5770-4f23-8972-8fb2dd51d6a2", "sighting_of_ref": "indicator--77e171f8-6ee3-44b8-bead-cb6d62881bc0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f127d2ce-8e82-4993-a46b-2daac5db10bb", "sighting_of_ref": "indicator--654cb5dd-5927-408c-9c58-bb939d0235da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004449d5-f0a6-41f1-a9c2-2814c1d3e414", "sighting_of_ref": "indicator--ed6967cb-ca29-4f34-8d14-f25da34ceb08", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e51585-7525-4c02-a8ed-80889380b5f1", "sighting_of_ref": "indicator--492bc040-06d6-4661-9f85-09936d83cc89", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163a85b0-ddbb-4018-8add-27aa410e46a4", "sighting_of_ref": "indicator--4bca0ec9-e043-4ff1-8005-e88f16014dbd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8719802f-c926-4c73-aa47-b3716a86ed04", "sighting_of_ref": "indicator--593d5ad6-cbfe-4cf3-92cf-7e82f93493c4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92533916-ebf0-4716-82f5-a114b06c2bcc", "sighting_of_ref": "indicator--718d419b-82a6-40d2-9528-7579eaeb12f7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2ca8bb-2526-46f2-8ab4-0d56771e5b4a", "sighting_of_ref": "indicator--4075524b-5df4-43ca-ac5c-6cd89d342043", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695164b2-39e2-4212-a935-f35a1bbd7d62", "sighting_of_ref": "indicator--df32e507-86e3-4def-9bc5-93c8ad7b362f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f223fb23-aacc-45fd-a442-15f6126c34cf", "sighting_of_ref": "indicator--bca18750-4c0b-4db4-b0b2-88820e0712da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2407de32-ab25-451c-8a95-c4417ee6ff34", "sighting_of_ref": "indicator--cda6ea2a-fe45-44d0-909c-2e228fed7230", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c922b39c-4119-4a11-a440-475334330899", "sighting_of_ref": "indicator--3d402c59-b9c1-4c39-b452-5773b73b7a9a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80bba7ea-2c68-4946-9460-4d2ce3ed5615", "sighting_of_ref": "indicator--4833e729-12dd-48a3-8ddf-c2d5db6d18da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15ec4eb-6b97-47dc-92dd-0806c1928b79", "sighting_of_ref": "indicator--7c58deec-1aea-4260-a1ae-4b731996289c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545c2be4-16d4-4af8-8c82-70de52887824", "sighting_of_ref": "indicator--f3a4a0f6-216a-4c44-aa90-fed480dceb89", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06a9bd7-9f3d-4c95-9f24-96da1e11d3d1", "sighting_of_ref": "indicator--6658180b-1bb0-4550-ba4b-38de33c84e85", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33bf3297-0c00-42b1-955a-b35961c8cacd", "sighting_of_ref": "indicator--a5f527a6-72dd-480b-ad8e-76e99df6111c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ce490c-dea2-4e0c-ac8d-924b4a6929ce", "sighting_of_ref": "indicator--9f52dac4-71ec-4466-a278-ebe2bf8f429b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55aa591d-8d0c-4685-8a6c-c62e969e3d79", "sighting_of_ref": "indicator--4b300484-957a-4446-8538-de87f30ee09c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689fbe91-6462-4096-a912-f50dc527ec68", "sighting_of_ref": "indicator--d841022d-2506-42ce-ba96-b4c0018d9326", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9afacefb-4ba7-4069-9c40-fb08655ae2bf", "sighting_of_ref": "indicator--9c169fe1-9970-4efe-bbe3-beba72229bdb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c65b5fe-3325-40dc-a7b1-7b2e692c1a3b", "sighting_of_ref": "indicator--de5ff56c-982e-4930-9945-7782eb226dbe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0fd7ba2-a405-4f48-8a27-7a2f19005bba", "sighting_of_ref": "indicator--8fdb423d-3fd7-481c-a484-5155dfd14315", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44749bf-1760-43a7-9e95-a5442da25e61", "sighting_of_ref": "indicator--d6da3dfc-eb7c-46f2-a1e9-10f69576a531", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373cb79d-0172-40d5-83b6-50354ddd9521", "sighting_of_ref": "indicator--500e5c4d-ec0e-4f52-bf8e-92f04190a8bb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c09bf74-0557-41c5-ac76-0d9b6f7ce403", "sighting_of_ref": "indicator--095b8893-4246-46a4-87b8-cbaceb45dbbf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec4e8e1-f0d0-4342-ae89-98926f3323be", "sighting_of_ref": "indicator--84f333a9-5adf-4d3d-9766-99f347578679", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e726f0d-a50d-4689-9cfa-8581f5316aed", "sighting_of_ref": "indicator--00deef9d-0378-4e38-a001-4c2dd82a8a92", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb9fb3a-1df8-4ad2-a4ba-49a523db3703", "sighting_of_ref": "indicator--25cb4e7e-9418-430d-b069-505e9fa31514", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e33841-8681-4a85-bbd8-3ac9ca8b7705", "sighting_of_ref": "indicator--9576d8c8-bdf0-4e15-8494-2c8d9afe44e2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66e862a-9aec-4385-8de3-be363d6eaf19", "sighting_of_ref": "indicator--91522511-9ae8-46be-8565-bdf959c4968d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--628bb9e6-913e-4f44-aa6c-e3aefadf0e27", "sighting_of_ref": "indicator--494d2d70-05d0-429d-a7ca-e6c065908dcf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b2890a0-05f3-4811-95de-b0b16b58b3d3", "sighting_of_ref": "indicator--0895feaa-163b-4303-8bb1-e144a6401260", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73735d6a-26b5-4e88-a3be-b42b4cd39808", "sighting_of_ref": "indicator--51a75848-bf7b-4776-84c5-446bb1472f87", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34c96b8-1dc3-4371-bfb3-142316603a95", "sighting_of_ref": "indicator--3c4faa9f-f326-44ef-a940-92770aec94b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc37dff-57be-49a7-9af3-619e05bbe4a3", "sighting_of_ref": "indicator--cc79550a-09cc-498b-be3e-b65e030a0b9c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e8df67-f5f6-4ef2-9e43-6036c30285b5", "sighting_of_ref": "indicator--c11a0f8c-2e40-4db3-917e-36013a5eb44d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb442e59-27fc-4ad4-8b6e-9750775c7af4", "sighting_of_ref": "indicator--662d8b81-c56c-4c94-a25c-cf05b166f28d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a0d19b-7be2-4d6d-8aec-970cbe0be7d2", "sighting_of_ref": "indicator--ff5e71bb-0378-4787-bd31-80549c1b3a3a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e969149-dc97-4027-88cd-fef7ebf2bd05", "sighting_of_ref": "indicator--896c8033-4a58-4c3e-a844-bcb7754cbb53", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25061af3-720c-4b0c-9625-5e7c3c449a43", "sighting_of_ref": "indicator--42bb5e5e-efee-4cd5-a3ad-b7d27e3b2cfe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f4fc01-e514-4a2c-807e-17bf3ac6c1b0", "sighting_of_ref": "indicator--6367af96-499d-4cdf-8745-71b751ede587", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89799ed-01f0-4e97-bcfc-6e541bf2260c", "sighting_of_ref": "indicator--c5faacd3-3ad8-4c75-9bdd-09556ed59988", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a3177b-38cf-4e7f-8fa0-ff68e3f4fb07", "sighting_of_ref": "indicator--1e5db0b7-49c9-48f3-a035-7d2ff864c9c7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abdac286-643a-4ba3-95a0-c7f7a371d125", "sighting_of_ref": "indicator--483dbc80-ba76-4636-b5b9-ac5d8a2c3790", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8646202a-95c6-4d6a-bbcf-29252e0d3403", "sighting_of_ref": "indicator--169a98c5-b2c2-4725-9fa8-3f4a74c581eb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f46b4cb-48ff-4916-ae83-28d988f356e3", "sighting_of_ref": "indicator--fd5ca8c6-0dd6-4ed6-ba6f-d3a66de62c5d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0c3b58-6839-4eed-9fa2-01b6db2d08c7", "sighting_of_ref": "indicator--1b53d1cb-f2c4-415a-9ad0-568586ebbd7b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34405411-1afd-41d7-b9a6-b65b90d10c88", "sighting_of_ref": "indicator--5be2d1fe-eeeb-4b46-ae3c-a7934011c3d3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5128514a-900d-4fe9-aad4-076bc4ae5b2c", "sighting_of_ref": "indicator--2729238d-c19d-4437-b883-73f8b6949c6f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6810b75-c12e-493c-ba76-536e6eeeead9", "sighting_of_ref": "indicator--0a13c62b-ad0a-49aa-93c4-6820580e387f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adcdb24b-b5db-48c1-9691-f663288b70b6", "sighting_of_ref": "indicator--a93415de-0cf4-44d8-8a94-0d9fc0585687", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1147452c-978e-45b0-a74a-7aa2979eac42", "sighting_of_ref": "indicator--2c88dfe0-10f2-4965-9b44-5606ea42c335", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d596648-69da-4643-b91b-acabbf67f9b5", "sighting_of_ref": "indicator--1d870b41-5190-4827-812c-88d046303783", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e2808f-7a8c-4424-9639-339bba2f4d21", "sighting_of_ref": "indicator--647242a9-eab5-4580-94c4-e8ce0e0f6b19", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ce54ec-8378-4a4e-9e22-e52b31513344", "sighting_of_ref": "indicator--37cdbdac-a2e0-46e7-a547-4439bba39742", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a6c4d0-1671-439a-a56d-64150c0830bf", "sighting_of_ref": "indicator--03659cc4-fce7-4be4-981f-dfbd099b424c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8476f73-877b-4aa2-b32e-5d07282d4518", "sighting_of_ref": "indicator--6fa1c46d-9819-4e1d-870c-b49e3004cf24", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6574001-db42-4f84-bd5c-7f54640d6581", "sighting_of_ref": "indicator--6a1b7a48-9d54-4898-ac33-da8051274cfa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f461aeed-301e-43a1-ac07-40b58ec8883e", "sighting_of_ref": "indicator--955a3099-4982-485c-89e9-b1f3dd0da528", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd11eda-db2b-422f-8fd6-b4270d508df6", "sighting_of_ref": "indicator--17c6549f-987b-48a8-908c-a21a1caf07eb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c885fc-7579-4709-b855-5e121a92b747", "sighting_of_ref": "indicator--1c459236-bc2f-4a85-af09-7c8ed759c3ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3235c38-7de8-447f-a5f8-393b91ed6015", "sighting_of_ref": "indicator--7292365c-0841-4b49-a608-c3e4d09a8c6c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dfd13a8-30c1-480d-9c7f-156656118b7b", "sighting_of_ref": "indicator--46dbb26d-2bcb-4a9f-8afa-f03a8cf18178", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677fc236-fea9-40d1-b68d-58e851d9ddd3", "sighting_of_ref": "indicator--05fa49fe-6df4-44b2-a807-cfcfac0f3f8e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6e36f9-a340-4bbd-a560-bbcd0da32889", "sighting_of_ref": "indicator--1d118686-ea6a-463d-9608-268b99a42192", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce8d55a-343b-4b07-a99e-b25990bb8fe0", "sighting_of_ref": "indicator--41109461-89c6-4006-b267-e89afe139289", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ceff76-7a03-42ce-a448-7899919a842c", "sighting_of_ref": "indicator--d25efcd6-577a-4217-8e88-a9d963dcc721", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1adedd38-cf67-41da-bd92-2a64880042c8", "sighting_of_ref": "indicator--fae1ab1a-8266-4a6f-aa41-80f288762437", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73252e8f-bca3-433c-ab6b-a99512c32c39", "sighting_of_ref": "indicator--8a6d7e26-02e6-4056-b2de-2a852df2b554", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862e31b6-bc77-4a14-9d10-ff18aed469c5", "sighting_of_ref": "indicator--5627ccae-177d-4dc6-9443-c94be0ced403", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1af040d-1af6-476d-b3b1-0883da206817", "sighting_of_ref": "indicator--80dec3cd-57d4-4140-8838-bc6daa88bac9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f946a18-923e-4141-a52a-4d5c36168425", "sighting_of_ref": "indicator--5c07e57d-cbc1-4919-9cc3-43b1417a7bc7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7f0859-3bac-463b-a845-5843215f72e3", "sighting_of_ref": "indicator--bb839977-5081-44d3-b089-d7bb8dfdf9f9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff44d1ba-351d-46cc-8a98-50bf93dcb9d2", "sighting_of_ref": "indicator--af44c25c-fad6-431a-a91c-7944b9435e06", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87cfe320-aba1-419f-885f-a8a77119ef6c", "sighting_of_ref": "indicator--d0fba574-176a-4421-91ce-580c60bd93da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d92d7a-2361-448b-9f68-b0011f933a3a", "sighting_of_ref": "indicator--12425d93-74b5-457c-a87a-fa57fb5b30c4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1830884a-c0d6-43ba-bd47-4033d8f3f639", "sighting_of_ref": "indicator--733a1f52-7604-4b74-b765-1cdb2cf88471", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385a6849-18a4-454d-9b65-c1fc8ba8e3b5", "sighting_of_ref": "indicator--da44bb4a-8460-4508-aa2d-a118526465ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4edc9a9-090c-4630-aa3b-00b94d815820", "sighting_of_ref": "indicator--5e685926-7ad3-4359-b0f0-061461736e47", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9729b1-aaba-4616-bb6b-fa11fa0539c6", "sighting_of_ref": "indicator--a76d47b9-b0ee-494b-b8fe-e635cd88a046", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21514aa4-710c-4a5b-a8da-db356212e303", "sighting_of_ref": "indicator--43f66760-e3de-455a-b4f0-cba117182dc6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db417633-b310-451a-96b2-6a25b438cb97", "sighting_of_ref": "indicator--9fe14be5-a1b7-4b08-8279-922a88c754ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9f2a03-5a64-4c2b-a5b7-35f78b409ac3", "sighting_of_ref": "indicator--5f32ab07-751c-4c83-b675-8f017811bcba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c751520c-bed6-4861-b8f3-62a07ae161d5", "sighting_of_ref": "indicator--1d00a291-3f19-4675-a762-2ef49c47d2a6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7d03e7-484c-429f-a624-fd9231c46d15", "sighting_of_ref": "indicator--b5ca9220-e0d7-46f6-9b86-b25ac459a611", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebca1653-0f43-4b13-ba12-13f2bd441151", "sighting_of_ref": "indicator--2c9c8d1d-7578-4aa3-a3af-fe578ef1f954", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae952cb2-0c57-4aca-985a-3f5af4bccdff", "sighting_of_ref": "indicator--e8b2942f-1469-4aed-a209-562e610ddf6d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7347976a-1e74-4a26-95e0-63911daebfa6", "sighting_of_ref": "indicator--a42931b1-9b01-479b-b2ea-d2b100756dc1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e28f4c-60ce-4505-9d29-3e58e9dc8cb0", "sighting_of_ref": "indicator--ea06258b-7f52-4e88-8673-37dc4af15afc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0d91be-0370-456b-9a77-5bc141288bee", "sighting_of_ref": "indicator--973f120e-aafd-49f4-8182-9296b507be76", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a31fe65-a623-4175-97b1-a3f5ba04663b", "sighting_of_ref": "indicator--e633d326-50d5-46ce-804c-2f2654c39043", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0abc842a-b80f-46f4-b068-c5f99e0edbd9", "sighting_of_ref": "indicator--6099bfee-9d2f-43c7-aa1f-aaaf698b4978", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c366ea1-92c7-42bf-a4f9-e5b15be49081", "sighting_of_ref": "indicator--05a77d89-1be8-4841-bd16-2893649587aa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a585ad59-d522-4811-b7d1-3cc89e3a2f09", "sighting_of_ref": "indicator--b2e6dab7-6990-4fa0-9c10-b7c57a693075", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e6300c-5697-4b84-935a-091ec6c13d15", "sighting_of_ref": "indicator--32ba6e4b-f61e-4ae3-ad15-fde7b029a96c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4a1fe6-e183-440d-b929-3fd7247917a2", "sighting_of_ref": "indicator--16c874f2-d69f-401b-8321-5d3bafc00b16", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ffc1ac-b121-45c9-9a46-084e6d024486", "sighting_of_ref": "indicator--4b5c5da0-227a-4124-be89-2a72b7698ee8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f16d59-5f1c-456a-bdac-dbfd5f58e3f7", "sighting_of_ref": "indicator--5e53ad92-e99b-4ded-9426-a6107950485f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a13728c-f4d6-41fc-b553-cfd8a801fd3a", "sighting_of_ref": "indicator--1802c1dc-c52b-4779-89fc-6aab18fed6de", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7675d994-3e7c-4cdd-a56c-461d68c38aeb", "sighting_of_ref": "indicator--1d75191e-6445-4d86-8f07-0b2a1e901abe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ffffc20-1917-4c1f-9d50-a33783ad06aa", "sighting_of_ref": "indicator--52c6d7a3-255f-4076-9498-09cf319fb995", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2055ca67-70f2-42ae-822a-ebca58008aeb", "sighting_of_ref": "indicator--2ff812c3-1128-4677-b6f6-bace62779c64", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e0fa9a-877a-4748-98d1-84aabd27840e", "sighting_of_ref": "indicator--17576e9b-76d7-4fb4-a166-77fd3bbbf690", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab5664dd-f26e-4d52-8f20-0140e632bbd9", "sighting_of_ref": "indicator--98d69c51-fad7-4e61-981c-7902726664ae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec46769-69b6-431a-a690-4a8cb4f0c686", "sighting_of_ref": "indicator--1c393a75-3a73-4bcf-bab1-925112b80a9b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a264af-3a96-4cb4-a746-9c4e29d06e38", "sighting_of_ref": "indicator--f3b7abb3-151b-4ab3-9c49-1ef5152610b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981c6e94-8314-4027-b460-2c89735c2243", "sighting_of_ref": "indicator--6214fdd4-05a3-4a1d-aab8-cc082df64a6a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f7906b-6c9b-47c8-abe7-697f783a6aea", "sighting_of_ref": "indicator--83d1db1a-498e-49dc-8483-78b30c3a3a6c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86e730c-9fd6-47c3-8afc-1acd2b6e91ee", "sighting_of_ref": "indicator--0a988a4a-4f38-41cf-8a59-8f1739fd2544", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dabee2a8-7b8b-4cf4-8557-51ed66c5be94", "sighting_of_ref": "indicator--dc927065-da44-4b1b-b5d4-2d087cbfd5e5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6f09fa-cfba-4a54-885d-d53e7773053a", "sighting_of_ref": "indicator--50f5df05-95f2-4676-b446-4980039eaeb3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72f1e68-17d9-439c-81fe-ce0d7efe009e", "sighting_of_ref": "indicator--b06ca033-288a-4a4c-889f-e17f7f911fc2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc3babc-cf7b-4b6d-a025-7e89098ae2f3", "sighting_of_ref": "indicator--eae970b0-726f-4140-8755-04e98d2d7eec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516a6696-bc20-4bbd-85c8-b0eb77ca6f19", "sighting_of_ref": "indicator--1310bfcc-ff60-4417-829f-52f69ce25784", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40aef13-3149-4895-8fb1-3e5b7be17514", "sighting_of_ref": "indicator--aa07b7d1-e8f6-448d-8eb7-db2f36bfb6fa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fdba5f3-263e-42b4-803d-e7fd01dc3600", "sighting_of_ref": "indicator--81bbd6fc-3d6b-464a-a05f-2470cb3c48ec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a184012e-775f-4bc7-b146-df93b66f33b5", "sighting_of_ref": "indicator--55aa8552-2d2e-4972-84a8-959308550059", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8954655c-b263-4bb7-9159-f69b3ef8d90a", "sighting_of_ref": "indicator--f291a65d-c682-4ba4-ad0d-34b78943420f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d4a138-d016-48e4-aa1b-e4cd854531f2", "sighting_of_ref": "indicator--1753be66-4c68-4ea5-8739-0c6577070917", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09eb787c-dee2-4c1e-a1d1-310034d3b0cd", "sighting_of_ref": "indicator--198ec4c8-afed-433a-a8b9-97987c570ed1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5e729e-70b6-45b1-b171-fcd72b54498b", "sighting_of_ref": "indicator--ec32b542-3475-4ed9-9d44-bc5ba1cc879f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a7a6e2-2cc8-4441-b80e-5430596cf92b", "sighting_of_ref": "indicator--b0c7b2c1-dc6e-4a31-bbb5-0ff1d4f4109a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd1c938-e137-48c7-83b8-5e34636c2637", "sighting_of_ref": "indicator--1927d0f0-995e-4133-8073-b8a13f6ce7fe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f2e034-2223-4bca-91b0-905e6c244f7c", "sighting_of_ref": "indicator--ee67d5bf-8f17-4168-9ed7-aaeb112c1678", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55038f28-03c7-456b-8e9b-b60397d15eac", "sighting_of_ref": "indicator--29642a8b-8203-433f-89f2-ce2b47c9f075", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c14755b-e7f6-4858-aa06-d299f6e61e11", "sighting_of_ref": "indicator--cd25a37c-1c9b-4423-b9b3-c7a4883d0418", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ae361b-e62b-4f24-9345-8a1d730ab746", "sighting_of_ref": "indicator--9ebc59df-673a-4be0-a230-e8eeee520226", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e98446-e6ef-457f-8fa5-63165430225a", "sighting_of_ref": "indicator--a55d80c5-cc99-4506-8f41-60cee2d87eb5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3badcf06-0a9c-452f-bbec-d83415c65c2c", "sighting_of_ref": "indicator--50d590bd-d848-4520-a959-1ca3fa72e20e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21e2b3b-44d2-4677-b681-87150b990f84", "sighting_of_ref": "indicator--e6cc024a-6c34-4486-a17d-356fb2694096", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8162f189-eaa3-4159-af36-32f51e7c2532", "sighting_of_ref": "indicator--47b6e5c1-19bb-4414-81bc-f1d1d2f101d4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6751562-ece1-48bf-a1fe-e66a28522ca0", "sighting_of_ref": "indicator--8fa8e4b1-30cf-45b2-8ec2-96cd35ec1e5b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d78f1a-44bf-4db1-b41b-a65e0e8cd8ab", "sighting_of_ref": "indicator--e76713e6-5d7b-448f-a505-185b6bc2cbcd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d84cf6d-41d7-42c5-b4fd-0e1ac59e89d2", "sighting_of_ref": "indicator--bbfe6e19-7a9b-4a07-8259-156af5eb1ab0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb64330-fd9e-4d22-9493-5f86f664a38a", "sighting_of_ref": "indicator--52ce4454-df4b-43a8-8012-a3fabb42b350", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b78de73-a6e5-4a01-ab0e-c4c99fc9628f", "sighting_of_ref": "indicator--f78114b5-4113-4c54-a9bc-039eccd307f6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf3398d-6312-47ee-94cd-ca71ace603fa", "sighting_of_ref": "indicator--35342884-20f3-4f13-9eb9-c10b0128181c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311a2558-bdd3-4e61-96c6-ebab3affb3a0", "sighting_of_ref": "indicator--547f6b5a-26f8-437b-a163-b95c41892fe8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d39c1ab8-60e7-447b-9379-95f3b4299988", "sighting_of_ref": "indicator--d25d4f5f-7de9-4312-82c9-f87a0b5ac750", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0819c5c3-f821-41ca-a88b-6fe392a4ab7a", "sighting_of_ref": "indicator--71b609a3-7e21-4cf8-85cd-62bee778a761", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94a5884-d4eb-4299-b842-98603c28899d", "sighting_of_ref": "indicator--d3f23ab8-e9c5-4e17-ad7f-6a4f6c1bbd20", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1086a92-e854-41cd-8646-cc9503be7f73", "sighting_of_ref": "indicator--29b4515a-dc2a-4556-b71e-47d70224a169", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68a651c-4b0d-4493-8b24-ec177e521dc9", "sighting_of_ref": "indicator--31f88526-38fb-4110-849c-45f0cb56a0ad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ed5254-7bb0-4705-8071-077fbd7efc55", "sighting_of_ref": "indicator--44d6f711-aa0c-4957-ad89-5ebde8c00747", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4956c3-6952-48ad-a3f3-744b432da6fa", "sighting_of_ref": "indicator--d8157c9f-c1c3-411d-bd5b-d33d28060487", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e8e56b-ac3e-4bc2-9a15-febe29b7e3f1", "sighting_of_ref": "indicator--b6d2a52c-0a36-403a-9f7a-02fa189f5167", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be8a56e-10d3-47df-8371-95ba38550280", "sighting_of_ref": "indicator--6d933e24-319a-453d-ba76-41683d733122", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f82e7fd8-8336-45cc-9eb8-7d3381b34d6a", "sighting_of_ref": "indicator--971ca60e-0987-40a6-983a-f238c94b0a58", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d559828c-a6fd-49d1-86d9-d1b0a2d8163d", "sighting_of_ref": "indicator--d9a94661-3891-4e9f-8d16-e296188bfd5c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df925277-d7d8-455d-9a36-4b61deef2041", "sighting_of_ref": "indicator--1d6b70f2-d98c-4d0e-846a-2c46c180a52c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8729ba6a-0bcf-4efd-9793-db22b24b7652", "sighting_of_ref": "indicator--18a90dcd-e43f-40d1-b2f7-1fe73e08e2dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a36483-d0d2-4da7-87d9-1f1be58a99b4", "sighting_of_ref": "indicator--1a2a184e-7fc7-421d-b8b7-882bb42660c8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87668530-dda0-4905-807c-138f36d5a594", "sighting_of_ref": "indicator--a5147a43-55cc-44a4-9a83-f016b9c6df59", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df718b8-06b2-45ce-bdf4-d0940c717444", "sighting_of_ref": "indicator--567f8962-5217-42b9-9361-42a97959b2a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb12682-f51f-4d3b-98e2-971af4a7914b", "sighting_of_ref": "indicator--ddd50aeb-863f-4d85-8761-30a8cb98d6b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce843ce4-27ea-4ec4-aca6-29af1570d2d0", "sighting_of_ref": "indicator--bdb10969-5da2-468b-a4a4-815a07ff2e2b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ca9c34-8eb7-4e1b-a05c-3617d9024f0c", "sighting_of_ref": "indicator--56cd3d63-0873-49f6-adf8-cda3e3bd3349", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96324a61-3418-4d7a-b3f6-808cd6aea903", "sighting_of_ref": "indicator--8635ddec-423d-4360-9006-2868799b67fb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80927a63-c2b6-47a9-ac6d-294973474188", "sighting_of_ref": "indicator--e04e553b-6afa-48c9-b9b4-345f536df765", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14298cbe-2970-4415-ac09-8d314df1cd8e", "sighting_of_ref": "indicator--e500946a-551d-4656-89d7-c5cc5b9cd0e0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a30405-9d25-4c31-8073-47262dc77749", "sighting_of_ref": "indicator--fb0298eb-0827-42df-b3cc-af29babb7726", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4fbf332-8aca-4834-85a8-45d01ab5d77b", "sighting_of_ref": "indicator--d1daa1b4-e004-4702-8117-6d9c4e93397b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00856c3-efb1-4b9f-aea5-7f71ffb32e98", "sighting_of_ref": "indicator--e296c442-9a34-4b62-809d-7e4ca22572e9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b78df2-0232-4be7-916f-81a85796ec92", "sighting_of_ref": "indicator--2e5606c3-5c77-487f-84f2-803fd6c9e062", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab6cdf9-dbc8-4d5a-a402-1e106d3866c0", "sighting_of_ref": "indicator--6f8392df-71e4-4ffa-b0f4-592790929f5b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38273e48-93c7-4449-8e9d-0c2dca372c82", "sighting_of_ref": "indicator--d962364c-33e8-4e59-b8cc-edb9cb3794e6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39fe09c7-b60f-4c5f-8d06-6dabc2a04e7f", "sighting_of_ref": "indicator--d1f495f1-5391-4bf6-8527-36b2c9d701eb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b62d39e0-0ecd-48fd-ac38-85343cc32a87", "sighting_of_ref": "indicator--27010230-aa6d-480e-8ab1-126a1cca7841", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1654b02f-9661-42ce-bdbc-2a524b3305b5", "sighting_of_ref": "indicator--bf85be75-2c9a-4600-8352-0852f807ba59", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3279784-3dec-4cb7-a5ae-4d9d2c2fda25", "sighting_of_ref": "indicator--9720a4c2-3bb4-411e-a8eb-dc667128c016", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444ab411-344b-44e4-a176-e46be7b7371d", "sighting_of_ref": "indicator--be3a5eca-9a53-434d-9482-0fabedc03ee2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aebc8f6-0be0-470a-ae71-e9ad7ca61600", "sighting_of_ref": "indicator--f450b476-06dc-47e5-ba41-ca331e78c830", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3f6862-0cbb-49c7-ac2b-2f316c7a6351", "sighting_of_ref": "indicator--19503666-64b6-4921-8ab2-617fabf6828d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5bca8c8-d865-401b-9e86-a06ab626458e", "sighting_of_ref": "indicator--b4ed79ab-645f-42e8-b5d1-54af76c5597f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed10eb96-964f-43b5-92ec-a0fe72747dbc", "sighting_of_ref": "indicator--343e36d4-1f87-432f-8e23-0b32fe9b933d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8780b5-4914-4684-8222-30322780f98a", "sighting_of_ref": "indicator--3bd3d3a8-ce69-497b-b456-9784665b5a9e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c8d444-7aa5-4a69-b639-6153de297532", "sighting_of_ref": "indicator--302d2cbc-06bd-4b5f-b822-5a635f70ebd7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c3b2196-d4fb-43a4-81e3-569626b48a57", "sighting_of_ref": "indicator--0f4603cc-8208-46ef-ae3b-a86b8ac6bc58", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f06f893-46ae-4cab-b033-4589da3b298a", "sighting_of_ref": "indicator--0b8e4667-6515-451f-bbe7-4124be401191", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8faba92-8821-4586-a7aa-024727e1cf9f", "sighting_of_ref": "indicator--a00df825-c9dd-4e7a-8332-70a00eb76e99", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bdb39cb-7cbe-4c5a-905d-f586e44ebda0", "sighting_of_ref": "indicator--94e53107-9247-4605-a0bf-b738c8507bc5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5246a25f-ee29-4787-934d-a30869e35015", "sighting_of_ref": "indicator--af9d9b2d-b253-4f60-a1bd-19c12805c4e9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e6e12d-ceb9-4673-87ed-33554891b129", "sighting_of_ref": "indicator--04b52a63-38ce-4ae8-9af0-90c52a952d14", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4442cb83-b04d-4277-851a-9f3645e696ad", "sighting_of_ref": "indicator--cafe3821-fab6-4296-aa88-e03b67d7f9e6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f1a5f0-a554-408f-b884-e5d33d2c16bd", "sighting_of_ref": "indicator--5c2d6d02-93aa-4bc5-829e-6c9d45096abb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116fad41-0e12-47b6-8be6-62b616735ccf", "sighting_of_ref": "indicator--8b2993c7-12c6-4e51-a85e-eb117dbf63a5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252bf1df-9504-40d7-9b30-1631e8378922", "sighting_of_ref": "indicator--b4863f09-90af-4d3d-a4ea-d5771291806c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037606ef-0c64-4d3d-8164-ad9a05dd8c53", "sighting_of_ref": "indicator--14b0310d-aa04-4f27-9038-6821e3a8d83f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d69985-86fe-4901-9f7e-783bbfc03a8f", "sighting_of_ref": "indicator--9f15e68a-98a8-49ee-9f5e-6b0621027140", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2a1af0-feb8-416f-8286-9b67a5ae26c5", "sighting_of_ref": "indicator--4a2ea325-1031-4a24-a017-4a110db15b0a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5b8dd9-c6a3-4636-a7b6-bbe129a0d9ab", "sighting_of_ref": "indicator--7ac0c84b-0560-4254-9f8c-7bbcf8f3cb69", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4782ae41-1de8-4654-ad94-7a19dd7ad97a", "sighting_of_ref": "indicator--b1c2c840-609d-4c12-819c-1baf0e2a5aba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97330ab-e9bd-482f-b30c-a278520d25fc", "sighting_of_ref": "indicator--0bf8a130-b61d-498a-9454-6a2b17219026", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a102a433-ac4d-44ea-aef5-b0493fbc3ab1", "sighting_of_ref": "indicator--8e4014cf-2f0b-4f91-b129-fea366464e5e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d41d3c-90cb-4322-8b9d-61a92276b004", "sighting_of_ref": "indicator--547574d8-4664-43e8-8b10-d7b811b8e102", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f29b94-5419-4ed9-9483-5b1313dcf333", "sighting_of_ref": "indicator--c28089b4-daac-44c3-8f75-3760fdab8c25", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99f45f6-61ab-4d58-81e3-342b2b8de405", "sighting_of_ref": "indicator--c7e4c4c0-a21c-4343-86a2-0422335ed823", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d4d7da-021b-4655-a937-47daa614c537", "sighting_of_ref": "indicator--bcead422-052d-4404-8e5b-82dc95528844", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e13d9b-68ac-47b6-927a-8151a30482b9", "sighting_of_ref": "indicator--61d0b300-728c-4831-bef5-dad768664c80", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--936bbb77-2a02-41d7-b12a-20afdebb7782", "sighting_of_ref": "indicator--e15232f3-e4df-451f-a973-395a475ac238", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a069ab83-7032-4a80-8722-0e525991a28d", "sighting_of_ref": "indicator--8c5b985a-3d55-4ae9-978e-207a24307ef5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dca7498-698d-4847-9b44-1c4a32ce83d2", "sighting_of_ref": "indicator--96993773-9527-46d7-9d1e-3118081bf1b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30793ac0-a73d-4ef4-a2a5-249244421a40", "sighting_of_ref": "indicator--cb31b583-b180-457d-8308-91ecc4e8b18e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aaaf56e-ffa0-462c-9e03-f673d4badea3", "sighting_of_ref": "indicator--c77b3a58-e45f-47da-9466-a4b0253dce54", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24743cb-dbce-40d8-9a49-e1a4ea8de86d", "sighting_of_ref": "indicator--1f7a2b1f-7994-4490-83c5-b1dc5e3d2b15", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce6025f-9cc1-4071-87d6-96ff3763c97d", "sighting_of_ref": "indicator--dcdbeec0-9cfb-40db-8694-5bdf3d80bcf2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816f27df-54a2-465e-ba20-84344b771a4a", "sighting_of_ref": "indicator--8b718b73-742f-458d-93d6-fce9217d121d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5120da39-71d9-4456-b2c3-03aae77849d9", "sighting_of_ref": "indicator--4d081171-4fe7-4a02-96ea-438ea8d0d84e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1aa7fb-e051-4629-a88a-5f79964c53d4", "sighting_of_ref": "indicator--216ea31d-05dd-4856-a266-9ccb0db146d9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8d19df-f79b-412a-9be5-4515bcdf22e2", "sighting_of_ref": "indicator--3de3b05a-7ac3-4398-ae21-ad83fccb4390", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8890ded5-3a76-4a56-91bf-31fe0b599700", "sighting_of_ref": "indicator--76ed7323-4376-4278-aa5e-18adb7769290", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8cee2a-6ce4-4e2e-a0d1-dc1185621e1b", "sighting_of_ref": "indicator--26595e62-0298-404d-a94e-3ba95df47d4b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386ba527-3565-4056-a363-77f5c8ee3865", "sighting_of_ref": "indicator--4c73f199-d9f5-4493-84b5-9e46c61e10d6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4da367-e92b-43b3-9ef4-98666fb52ed5", "sighting_of_ref": "indicator--84ed9888-2921-4e40-ac79-7b49be2fce8b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d46dc2-6d25-4e87-81a4-6d38ca1ac921", "sighting_of_ref": "indicator--c532946b-3585-4818-8874-ea148cbcbaab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54ba36c-4b8f-40de-99f7-4cdada370e92", "sighting_of_ref": "indicator--75d87f95-c367-45b3-90ea-4fe469f6c36c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af23d692-42ba-4ec2-843f-f25bdcecc8c4", "sighting_of_ref": "indicator--9fa0c710-6649-40b5-b348-d8d32413ae67", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f7286b-f1d7-4e50-aad1-3038df0cf320", "sighting_of_ref": "indicator--b740aedd-32d0-4350-9551-c4675fc3a0bb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f754d66d-5a94-4ff0-b83f-0f6b8dd0b54c", "sighting_of_ref": "indicator--2f16ff2a-3c28-4e17-8ca5-2fa74cc9673d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e3b008-9d81-4028-b9c4-cec7bc1e6412", "sighting_of_ref": "indicator--c7c046df-1231-4262-a7d4-399107696d0c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c699a861-1457-4981-ac2d-064623aa92ee", "sighting_of_ref": "indicator--2cd68f37-b605-47f3-8c85-5bd6928662db", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c61222f-c287-4d19-b7aa-3b0d0b3b8fa1", "sighting_of_ref": "indicator--12ef8236-3398-4d7d-b251-8b5649e12513", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce67c5da-c49a-4b29-a41e-82ad2648672a", "sighting_of_ref": "indicator--2f359d2b-84b7-49bf-b34f-eef1a52e1e2b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c249e8-8b27-4716-a4f4-c28e8201041b", "sighting_of_ref": "indicator--4deeb601-3941-4c76-a78d-8152fd5a0423", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d567d9-ae18-4022-a8fa-33f3f4a446ef", "sighting_of_ref": "indicator--84ece812-f396-4015-af21-0be13ab4381c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c32352fc-a6f7-4954-b0a4-8c3eae46541f", "sighting_of_ref": "indicator--241c5e4d-76eb-4eee-b6d4-02bce99fe177", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92649482-82d9-45b9-b05f-08ced7cf2e04", "sighting_of_ref": "indicator--562b948d-3368-4564-965e-07cda1f8124c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c553879-a67f-4185-8dff-6a90a2e964e2", "sighting_of_ref": "indicator--34d513cb-15f6-4b5d-9660-4eb8bdab979a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02bb9915-4be2-4ede-bb46-6a080fe7ec45", "sighting_of_ref": "indicator--a9bec519-446f-4df7-af48-18febdb45133", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec22456b-25dd-42cd-8c7a-a9bc202cf6ff", "sighting_of_ref": "indicator--81379f2e-d4c9-4ea5-a02f-84aa00f64ccf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b61be77-d8e5-4e1a-968c-c81e5cfb82f0", "sighting_of_ref": "indicator--c769f928-759c-46e5-ad08-083d4c4052af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7975ab0-6015-4cfe-997f-7d0700199353", "sighting_of_ref": "indicator--c21ac530-6e84-4929-90fb-2597667aea71", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e0f666-c2a3-4df1-90a7-c887612459e8", "sighting_of_ref": "indicator--73d7017d-bded-40de-beff-333bb39a2046", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb4df5e-a62c-43d4-8a2b-1da47909a78c", "sighting_of_ref": "indicator--ed28842c-2f9e-429f-9121-9bcd2e276b0c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e716c1f-2d38-46e4-9647-c7f6a896200b", "sighting_of_ref": "indicator--ed28842c-2f9e-429f-9121-9bcd2e276b0c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c0bffa-596c-4576-af21-c55de39c4428", "sighting_of_ref": "indicator--f779dbf4-f98a-4d0d-99bf-21dc7ea933f0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a939c189-031f-424e-b42a-535c72b088b8", "sighting_of_ref": "indicator--f779dbf4-f98a-4d0d-99bf-21dc7ea933f0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e19331-a919-4ca6-bed6-75fa24256faf", "sighting_of_ref": "indicator--29250e2f-c066-4490-ba95-a62aa807458c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d272f191-f6de-40a8-837f-4b0f52e419fd", "sighting_of_ref": "indicator--2ddd0db7-e3eb-4f90-80e7-c5da19d5384a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c4d664-c20a-4630-8b82-6057e5fdf4fc", "sighting_of_ref": "indicator--2ddd0db7-e3eb-4f90-80e7-c5da19d5384a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5317d3be-1273-4fc7-9daf-d027ffbcec18", "sighting_of_ref": "indicator--6ee56566-31fc-4b71-b0d4-a52ba86b19c2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ccac55-f21c-434f-8377-21776b7d9e40", "sighting_of_ref": "indicator--6ee56566-31fc-4b71-b0d4-a52ba86b19c2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8428653c-c368-466c-b2c2-29e2e81d6b3b", "sighting_of_ref": "indicator--13fcb002-34b0-4968-ae98-25259cb8e961", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70e382b-2b47-4b55-9479-c1e82946259c", "sighting_of_ref": "indicator--13fcb002-34b0-4968-ae98-25259cb8e961", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f59d89e-5db0-4ad9-ab80-ba9d9f2ccf67", "sighting_of_ref": "indicator--65b11b37-f446-49b4-9450-a70c7b1dca0e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41bb1955-2d19-4a67-ac1b-d3c8a9783992", "sighting_of_ref": "indicator--65b11b37-f446-49b4-9450-a70c7b1dca0e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17ea09f-6bf3-429d-afc4-96f9a814d951", "sighting_of_ref": "indicator--ee156418-26c9-4540-8e73-61653f7b1cf9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77c4f26-cb7f-4cf2-a6ef-026d965196c8", "sighting_of_ref": "indicator--ee156418-26c9-4540-8e73-61653f7b1cf9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6be21c-d49b-4198-bc75-4c2293b9e9ae", "sighting_of_ref": "indicator--5057e2fd-541b-43cd-833d-f4da1fbb2596", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7214b1-cede-4f82-8b3a-2335153d3c01", "sighting_of_ref": "indicator--5057e2fd-541b-43cd-833d-f4da1fbb2596", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e7bfad-2f68-455b-97a3-5a49d07c3746", "sighting_of_ref": "indicator--ae7078e7-d35d-41e7-8e26-a799b5858de3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cfd865c-95c4-4189-b3e5-4cae6ac05b92", "sighting_of_ref": "indicator--ae7078e7-d35d-41e7-8e26-a799b5858de3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--736db33d-4bfe-4025-988e-13fa2a42ae15", "sighting_of_ref": "indicator--5d1929ec-5312-45a2-84b5-497bae0408d2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379cb01b-61c7-4b8a-965f-fe84cb8ea077", "sighting_of_ref": "indicator--5d1929ec-5312-45a2-84b5-497bae0408d2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b409aa-f1c0-457d-8b78-b2c6cf5b3a11", "sighting_of_ref": "indicator--03a4e4e5-620b-4cbd-a48e-c4140f3ab4be", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154ba927-bc00-4576-9c6e-e8f4d28f7bb3", "sighting_of_ref": "indicator--fcab2a27-2b80-4b12-83c0-0ede4654de30", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb32fbf1-f69d-4991-be8b-b5a0c7ca0280", "sighting_of_ref": "indicator--f490d910-ee28-4fd4-a936-fd9850935451", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555d809f-4f27-4b8d-9b50-35cdb456e898", "sighting_of_ref": "indicator--840e7e10-37c8-439f-a4d6-8d8d04b39c06", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6607144f-d326-4c93-b747-21ac39c1c048", "sighting_of_ref": "indicator--14745024-2a10-4cb5-8963-ab9bdb8d1e5e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ccd05d-e0d1-447b-8401-11d76979d3c4", "sighting_of_ref": "indicator--14745024-2a10-4cb5-8963-ab9bdb8d1e5e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9366c6-afcc-4218-b629-5de6bbc2a495", "sighting_of_ref": "indicator--00d260f5-a17c-437c-887c-b67a5fa56ee5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab5bb69-4d01-48c0-8561-bec4828fe2e6", "sighting_of_ref": "indicator--00d260f5-a17c-437c-887c-b67a5fa56ee5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b897dd5-f6c8-4062-8a71-77cfa2a6c797", "sighting_of_ref": "indicator--d990d8b9-f7e3-4cf8-8b44-e1fa633c3b57", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf06227-43db-4f27-bdc9-3763272bc2b5", "sighting_of_ref": "indicator--4a9583be-dfff-4bd1-8f99-94503ce2bfe5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18957179-63d1-4318-8acd-bb46f7a3c045", "sighting_of_ref": "indicator--4603aced-8fb5-4ae4-9e12-d40c9d7f9057", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31fc30b3-6c11-415c-99c6-8f7a9008ff18", "sighting_of_ref": "indicator--9d18cc92-14fb-4aa7-84c5-ca728a2d37df", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5885c8c-133c-4804-8fd8-57167183fe85", "sighting_of_ref": "indicator--87c4e576-f771-4c46-b5f2-6e6491b94451", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6616e88e-7dd6-43c4-9f4b-f4db19970bd7", "sighting_of_ref": "indicator--678a98e5-28f5-4840-979e-d1f6a5d30bae", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be7dd27-e6eb-4dbe-a871-34515ba8e323", "sighting_of_ref": "indicator--a4ccf822-3fe3-4108-8639-ebb46a740780", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d1d0ca-d9c6-43b2-a39d-dbb14c44670e", "sighting_of_ref": "indicator--3512598b-1123-4937-9d8f-d781f40659cb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2520a3ed-1b37-4558-a9dc-ce57cc05466c", "sighting_of_ref": "indicator--75d3456b-4000-4156-b5d9-b45b75533e96", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56aa517-0d3a-4e70-abd1-6b94120a74a0", "sighting_of_ref": "indicator--f8aab802-b53a-4d85-abd5-fe36f6704baf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7800da1d-e1c6-4c59-981e-ae437a815bdb", "sighting_of_ref": "indicator--27c8af57-5efe-4f88-bd61-91e567ba30e0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d95d2964-1102-4ee9-b2a9-8950368dcdd1", "sighting_of_ref": "indicator--4d1113e7-728a-42c2-88ea-47edfd26bd26", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1da43a-fd92-45eb-b665-201b7a9793ff", "sighting_of_ref": "indicator--260cf6f9-8b55-4932-8ae9-649d86fe5849", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab8994b-aa0c-4a72-8a21-79f00e456ec0", "sighting_of_ref": "indicator--72e83ce5-3917-4d0b-96d5-9163bedda236", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b048d690-5fe2-47ea-a010-bc2094938759", "sighting_of_ref": "indicator--1d6d85ef-749f-42b5-b28d-ef0951efffca", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63f713e-630d-4cfa-889a-b877205f0387", "sighting_of_ref": "indicator--d95c92fe-17be-41b5-9315-a59f02583bce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008442c0-a0bc-450a-8ea4-c7a837a9ada5", "sighting_of_ref": "indicator--d8181522-f55b-4f28-8df5-c6de57d8d1fb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3e5203-b855-4a45-8345-10b82d688e53", "sighting_of_ref": "indicator--9d975fda-4379-4d12-9140-8f816de253bc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1770ed5-8457-4bc9-a40b-76511631473e", "sighting_of_ref": "indicator--f2531357-efe2-46e4-81fe-ae8d1d901841", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f9c516-447e-4c88-bf01-9823096d1b12", "sighting_of_ref": "indicator--67af4b0d-bdec-4fed-8673-39fd82031dd7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01b587f-b098-47a4-9fd8-a942b0fa7dec", "sighting_of_ref": "indicator--0ce62c2d-39c5-4598-bddf-e601b323c064", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5362e1f-de02-43a8-a6ac-07a7b825698b", "sighting_of_ref": "indicator--22daec4f-cfe6-44d4-a2e1-85a33a2004ae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930bc4f2-e532-4fc3-9c9f-9a96dafc8723", "sighting_of_ref": "indicator--6b4a29ab-0f45-4f3c-aad4-379db2401c35", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d41f53-64cf-4a06-8f20-3a758e4318ba", "sighting_of_ref": "indicator--5d1cdad4-b021-43a8-be1a-a6358c1e8108", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d7d534-6eca-4f56-bc85-cc58765dbd6f", "sighting_of_ref": "indicator--60c2283c-3084-453d-a25a-b34122affc84", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d45c793c-76c6-497b-b7ad-028cfb23c81b", "sighting_of_ref": "indicator--13a4f6cb-725a-45ab-a095-c63311bf0ac5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22eccfd8-b77c-45c0-9f76-f86b016c217c", "sighting_of_ref": "indicator--b82b93ef-7693-4a19-9eb1-512f8af85538", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40cebb7a-ba3f-4b35-a1b4-e941ec591624", "sighting_of_ref": "indicator--3337d5a8-ebfd-4e05-bcc5-f26f3e3e9cba", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ca24b9-669f-4351-9831-8387605c52a2", "sighting_of_ref": "indicator--3337d5a8-ebfd-4e05-bcc5-f26f3e3e9cba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8fbac3-bd19-4aef-9078-70603034b7d0", "sighting_of_ref": "indicator--b4b9412d-0616-4abe-b8ae-5b3157924af0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605e91fa-4580-4e88-bdd1-395bfecace3a", "sighting_of_ref": "indicator--9ae1640a-3f56-4b6e-a163-c90cf28809d9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3d5613-019d-4b68-ad94-aeee8e7a7e4b", "sighting_of_ref": "indicator--5677d918-6c55-45a1-b327-efcaf9505b7e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac6685a-1cd1-4560-abca-49a117bee7d0", "sighting_of_ref": "indicator--34512742-4fd0-46a9-adca-3caed6813b17", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b891af-74e7-4aa5-b9cd-b0695472ba77", "sighting_of_ref": "indicator--6efa97a0-7bf3-4072-839a-834b142381a6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb21e30-5e6a-4100-8be8-b9d50aa42c55", "sighting_of_ref": "indicator--797096fc-6c6a-48d9-bb30-2a9fb616e7d1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7575e13a-12a6-42ec-8985-3ab03d7d3b60", "sighting_of_ref": "indicator--797096fc-6c6a-48d9-bb30-2a9fb616e7d1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a686b2-5853-476a-a74f-bd4661611591", "sighting_of_ref": "indicator--0bd0fd64-f265-4a42-b563-7ca4db40e613", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f08e33c0-516a-4301-837d-b82d137c27e8", "sighting_of_ref": "indicator--0bd0fd64-f265-4a42-b563-7ca4db40e613", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a2901e-1b35-4261-8847-1a772983e249", "sighting_of_ref": "indicator--280b5e8d-5568-42dc-bbb3-839ba3f771df", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d977496-ac4c-4120-9d4b-2c71674418d0", "sighting_of_ref": "indicator--10d7052c-837a-435e-9e74-9e5e1ab96592", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee8254e-1959-42dc-828f-2701cc07c5d3", "sighting_of_ref": "indicator--10d7052c-837a-435e-9e74-9e5e1ab96592", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e59220c0-42ec-43d6-8af8-16f9ff89b746", "sighting_of_ref": "indicator--e1562873-8287-44f5-9fdb-52519852c655", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8e0d47-7e96-4e54-a2af-4e6608902011", "sighting_of_ref": "indicator--9692adcf-106b-44a5-8710-b4de5cf19874", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c892fa66-da62-49db-9b43-41f84a5968c1", "sighting_of_ref": "indicator--8ea16b7c-019a-4c15-b0f3-07491cbbdb56", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7545a5b-c9ea-450c-8272-39083bdc549f", "sighting_of_ref": "indicator--534dbf84-674c-4ff3-803a-8c15794a6e62", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0963ed79-7c5f-4cf0-9df2-beb3d49afb14", "sighting_of_ref": "indicator--8aa28a85-d09a-4352-8d30-571e8b0f96dc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b3a3c4-2623-401d-9b9a-a1b342a1ceda", "sighting_of_ref": "indicator--eb903742-b0e9-4436-bf86-d2d42e102df8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c53ad5a-7377-411c-9d25-69209c9c5562", "sighting_of_ref": "indicator--fbbff6ee-3a0a-4b79-80a3-cfceaf48d378", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642e2a63-9eee-4156-99f0-e850d5805717", "sighting_of_ref": "indicator--b5cf569c-2db2-4787-bd2f-1a9663f25676", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e04e925-1453-4b17-b76f-f8b072d330cf", "sighting_of_ref": "indicator--b5cf569c-2db2-4787-bd2f-1a9663f25676", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31c3048-e51e-4f9c-91d5-14a8407f0740", "sighting_of_ref": "indicator--a3e87767-e138-4601-8d6d-fb75f3948ee8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab94abc4-b697-4157-9f2e-414b46c820c4", "sighting_of_ref": "indicator--62ff2a29-fd43-436c-a362-9c85c559427f", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b848464-9765-48c9-b4ee-cf6905cc5178", "sighting_of_ref": "indicator--02769ab6-5282-45c7-800f-a527ea552c03", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a53566-9ff9-4702-9d9d-f312d2787bec", "sighting_of_ref": "indicator--c2caec35-0c91-4549-8f83-eaf3196033aa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7c9be8-5c4d-42ea-8001-3af32c3e3c37", "sighting_of_ref": "indicator--7824c601-0ff8-4a04-b15f-4486a766d9cd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fbcd00-01fd-4224-8a0f-1be55d9caa3c", "sighting_of_ref": "indicator--cbb62551-4b7b-4bc0-92fc-2d4cf9110c47", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f20770b-ace8-4c6e-acab-618459922b66", "sighting_of_ref": "indicator--4aeb8dd0-e0f2-4891-929c-485ea4fdfb80", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a52af5b5-4fd4-41f3-a6ce-9d8bb6424f27", "sighting_of_ref": "indicator--00e83dfe-dbd0-48b8-b4fc-813ec229c68f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cbc8442-42b4-4f54-8452-287a5247202d", "sighting_of_ref": "indicator--ac5c47f4-9232-41ed-91bb-3de682bd5c6f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559fd17e-8f3d-4b85-aa03-d03949b7cbc5", "sighting_of_ref": "indicator--1ce955dd-aac2-46c1-9fc2-3f1ccff7cc52", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--035a6333-4002-4205-b179-fe109b5230d2", "sighting_of_ref": "indicator--f5f421f2-9638-4fea-a9df-dc5e7cee29bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bebc7662-4595-4592-bb85-736c8323dc7e", "sighting_of_ref": "indicator--5a9fb640-2071-4a88-b1cb-a1d592479f85", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3958d6cd-3ab2-43dc-ac46-c69f63777231", "sighting_of_ref": "indicator--ce49f06b-1736-42a8-aa4a-46393630ccad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc15e08-73e1-4dd4-b24d-17f6f40e2dd0", "sighting_of_ref": "indicator--bb02feac-aa8e-4165-be5b-f621ed6f4623", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec356e9-df04-4132-9c18-5686021d11f8", "sighting_of_ref": "indicator--5aae59c2-cfbd-4f5a-affa-ea638e5bb5b7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ccd0b9-31c0-42e5-97b0-2a06619d9e26", "sighting_of_ref": "indicator--340373df-46ef-4c11-82c3-5f7c97585eb5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7ef69e-4e59-4f06-a7a8-0051ada492f2", "sighting_of_ref": "indicator--9a50ec1b-009e-4650-939a-33040e74516f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39d5524-3c38-47b5-84a6-5e09eb6be2e3", "sighting_of_ref": "indicator--daf25900-ce26-458d-8b99-0dc5ba7ef798", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27debfda-3c0a-4439-bc1d-bb3961af0c82", "sighting_of_ref": "indicator--26c92972-7ce0-4890-bcbe-fbf99ad89a0c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708ae431-65b1-452c-ac0d-a81fb1eb5b46", "sighting_of_ref": "indicator--4765a99b-0c7d-4a58-86ee-ecf336257953", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6301a6-a8cc-4cef-9650-1110b0dc5cec", "sighting_of_ref": "indicator--fd833a5f-6331-427d-8fcb-8e06ea66da40", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9162e495-290e-4adb-b5b3-198634078f3f", "sighting_of_ref": "indicator--0a6d5bce-eaf5-475b-8faa-386cbcc18ef4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad647b8-a120-4927-bebb-9b29cd524c5f", "sighting_of_ref": "indicator--1047b8c9-cb2c-45e9-aaf0-24772f23f0b7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6cd58d2-e243-4f80-95c8-6cb2ba5247fc", "sighting_of_ref": "indicator--ffca8679-de59-43a3-86b2-7b8d83d35303", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0cd6ecb-584d-488f-b1db-24f6f54c72d9", "sighting_of_ref": "indicator--ffca8679-de59-43a3-86b2-7b8d83d35303", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5950f953-a396-4d7d-bc17-9bbaa948be2b", "sighting_of_ref": "indicator--7effbcbe-c833-4c57-9ef2-679b6a3d3076", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf6ff29-db2f-4803-bc55-de7cc3dd4156", "sighting_of_ref": "indicator--7effbcbe-c833-4c57-9ef2-679b6a3d3076", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1bbec1-6b79-4295-aced-ccc2d54ef81e", "sighting_of_ref": "indicator--ebdf6128-66db-4bdb-80aa-11154a7a85ee", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1793600-75c8-43d0-af53-66b4c8e5923a", "sighting_of_ref": "indicator--ebdf6128-66db-4bdb-80aa-11154a7a85ee", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896e1708-03e7-4853-90f9-51f8f22717e9", "sighting_of_ref": "indicator--1ae3d362-31d4-4425-adbe-9a03c6d291bc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5552164f-a2f3-488c-b684-8b062045143e", "sighting_of_ref": "indicator--0c08f302-3591-4ec4-a903-664bcda9a911", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a3eb61-9fad-4053-b25f-6a05b24cd0fb", "sighting_of_ref": "indicator--76531e63-3219-46e1-9076-751d406aa55d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884765a4-f71a-4262-aeb1-fdf450459b28", "sighting_of_ref": "indicator--88af5c21-edb8-481b-a0b7-1e03e9b816a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce8f18fb-13a2-4668-9ce4-70442563a490", "sighting_of_ref": "indicator--a9005288-fa76-4617-8215-b7d91a1612c4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36d7710-e604-4157-aa78-dbbe09b4f2e4", "sighting_of_ref": "indicator--a9005288-fa76-4617-8215-b7d91a1612c4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f7a35f-235f-47f5-949b-cc1882e00d2f", "sighting_of_ref": "indicator--c258b1f7-21c2-4017-9d6e-1382704c4069", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea66467-e9bf-4f49-9ba9-0d3d184ff56f", "sighting_of_ref": "indicator--22c698dc-d4af-4a75-99b9-551c937449ef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862f47c2-2062-4e5c-a5c1-578f312d68e2", "sighting_of_ref": "indicator--46ce97cb-db8e-4e0e-bcd4-a6e0b09e2528", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1d6724-3ee1-4f82-99f7-8888d640180b", "sighting_of_ref": "indicator--6242ee31-fefa-4239-83d1-c272b1ac4c94", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d00fb24c-f187-4930-88a1-0cd7bf0d0ecc", "sighting_of_ref": "indicator--ea8a0e9a-666c-4d67-a1a4-0c1acfade69d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b15b27-a9bd-4def-a564-d16ddc14daef", "sighting_of_ref": "indicator--ea8a0e9a-666c-4d67-a1a4-0c1acfade69d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41970ed1-fdc6-4d48-a0bd-acee2018e46b", "sighting_of_ref": "indicator--95d7d3fe-8ad8-4b57-9bc5-2e615d146456", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa00ca3-9fac-42c0-86a0-7de12462e12d", "sighting_of_ref": "indicator--962db4a2-5dca-437b-a16b-84292d8c5db2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed185ca1-5a7f-446c-99b6-a80da73aaf75", "sighting_of_ref": "indicator--9406589e-c590-4374-b3e1-daf70c439021", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d189dd0-3c04-4751-96ce-ff09f70cdf4a", "sighting_of_ref": "indicator--9406589e-c590-4374-b3e1-daf70c439021", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f36069-de83-4e76-940c-858fe4001f48", "sighting_of_ref": "indicator--50e5d322-f9e8-41c4-8cab-e676d782d571", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb85569a-e354-496c-8c6d-d378bae099de", "sighting_of_ref": "indicator--50e5d322-f9e8-41c4-8cab-e676d782d571", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83abf68d-edc0-47f7-bf90-5e1ef6e13afe", "sighting_of_ref": "indicator--d418b680-ffd2-4c4e-b742-b5f17a1ea405", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c04e9c5-41f2-4d38-ac2e-3ea25a689421", "sighting_of_ref": "indicator--b254dd65-673c-44b8-95cc-75de6b306722", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b4c0dd-1be9-4a22-8508-24326356056e", "sighting_of_ref": "indicator--0b0f8ea9-7f16-4adf-a8bc-f4c67e2eab42", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1304cb-cdb1-4485-ac22-a653cdc5ee2b", "sighting_of_ref": "indicator--af46f980-c9f4-465b-8bc3-1df8d1a4f3c4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e224f9-14f3-4663-973d-c8dc0a31d071", "sighting_of_ref": "indicator--af46f980-c9f4-465b-8bc3-1df8d1a4f3c4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a52397fb-9395-4237-8bb3-2717c7c7a931", "sighting_of_ref": "indicator--a83f3e42-3f3f-4c99-9ac1-41952de3e919", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda9b84a-414b-4c57-b368-a0533a0f8ec8", "sighting_of_ref": "indicator--b8bc21be-ffa1-4f76-bd3b-f39d45147967", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa05d98-57a4-47fa-bf2a-a014c70ffef8", "sighting_of_ref": "indicator--b8bc21be-ffa1-4f76-bd3b-f39d45147967", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534bc708-4650-49a2-b18a-2fa1d4e37a1f", "sighting_of_ref": "indicator--f7d438e5-d8f6-4125-a0b5-17882c303190", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d23f4e-5db8-4a2d-a432-e3d345fb24ef", "sighting_of_ref": "indicator--7c2d026a-8191-4b8b-a1f1-f57099233b7d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b2b543-ed73-4369-acc5-90a13eae2cab", "sighting_of_ref": "indicator--488555d9-cef5-44e4-a349-ce2dba3b226d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f7bb0fb-4c4a-49b7-941d-ef78953d0397", "sighting_of_ref": "indicator--39b867ae-8f76-4043-8aa0-bb5a9537017c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60576e29-469b-4975-88fd-773cd06ea887", "sighting_of_ref": "indicator--190fe6a2-4c45-4366-a008-8d9cadc5638b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2512499-f93a-4b95-9bbe-53a24e67c2d0", "sighting_of_ref": "indicator--3d4af46c-11c7-441b-848d-fb50b5d03cad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7d7d4a-7a75-47f2-9d09-a5df1b77cbec", "sighting_of_ref": "indicator--b6c3ad98-fcc4-4ecd-9992-0ce77fd42f8f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb7f8e0-9dce-4349-a09d-441f5c52bad7", "sighting_of_ref": "indicator--8149e7a0-8669-4119-be9d-0de22bb66a7d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce50b9a-8b5e-4b1c-877d-91aa2e66c37d", "sighting_of_ref": "indicator--b7a222b7-bd5a-4489-a7b3-8bef56352580", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7470082-abdb-4138-9acd-b01140bb3965", "sighting_of_ref": "indicator--b7a222b7-bd5a-4489-a7b3-8bef56352580", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c860d155-b98f-4755-8d3f-d7917e90b58f", "sighting_of_ref": "indicator--21a3cc50-f474-4334-b592-1dad53408c6f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304c169e-3589-4e31-907d-d612c9bd0f21", "sighting_of_ref": "indicator--21a3cc50-f474-4334-b592-1dad53408c6f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7135e5be-1c56-45cc-9a73-c4b4f6f32922", "sighting_of_ref": "indicator--1ecb7cf0-cac2-416f-a34e-a91783336450", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb10c58d-90e3-489b-8371-e75c1f155589", "sighting_of_ref": "indicator--7d0e3d1c-b30e-497a-a497-3314f9a847b8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc512199-c903-4513-9d1f-5ffcc90fc8ad", "sighting_of_ref": "indicator--27dc2ab2-59ea-4ebe-b7be-26f9a2b91c90", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba269a2-23aa-4dfd-aa3e-3396c63fe1eb", "sighting_of_ref": "indicator--61d48985-5df7-4837-8365-0874ceb77e82", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefea6d4-42f8-4cdf-ba74-1a9f6985717d", "sighting_of_ref": "indicator--61d48985-5df7-4837-8365-0874ceb77e82", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dfe499b-e6e5-4f54-b20a-ef6aa56c0910", "sighting_of_ref": "indicator--bb68f38a-e7a5-44a6-9ddc-c83f53b590e4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e918fb6d-0509-4c1d-a9db-997e733076fc", "sighting_of_ref": "indicator--bb68f38a-e7a5-44a6-9ddc-c83f53b590e4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4bd8d9-c982-4bcb-b6c6-f4813cc1d358", "sighting_of_ref": "indicator--a87904f7-5840-4105-9b25-95f2b524601b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f107c6a7-2d61-449f-b5c2-10d3ed4aa7cf", "sighting_of_ref": "indicator--004b6f7d-e330-432e-884a-4d983340ce18", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ccff0a-90ad-4839-a53e-bddac6502a48", "sighting_of_ref": "indicator--7af871be-9c8e-428a-a998-6923af228b9a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f3f7a36-447e-44a6-b4fb-14a26869a4ee", "sighting_of_ref": "indicator--149063ed-c5e7-40f8-95a0-732b49fcc1c5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e9bd195-087b-48b7-af3e-2196cae72eba", "sighting_of_ref": "indicator--ce4c590e-b1e3-4fb8-a91f-b6402ed42dd3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a188b82-5159-4598-91dc-055b1d81ba8c", "sighting_of_ref": "indicator--fa1da0e4-6696-4c20-b31c-79fc2965b949", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb17e43b-b829-444a-9cad-240d83db8af2", "sighting_of_ref": "indicator--fa1da0e4-6696-4c20-b31c-79fc2965b949", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b70cc0-00a4-4869-abc6-779dd58293de", "sighting_of_ref": "indicator--e86ec77d-b75e-4843-b226-dfae62f18ca5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b1b16d-b3e9-4543-a246-7efec4e7bd4e", "sighting_of_ref": "indicator--e86ec77d-b75e-4843-b226-dfae62f18ca5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--319f61b7-abbf-42dd-9190-9b9c75ded3d2", "sighting_of_ref": "indicator--66f767d3-bb1b-4a7e-acc8-3c3215df606c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6a116c-286e-4429-89b2-6cf57c21977a", "sighting_of_ref": "indicator--75d2a5cc-1438-4d6a-8608-cfa93ca10588", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19767767-d339-4834-a4e7-ce17455247d3", "sighting_of_ref": "indicator--ee324a70-0a9f-411c-95b3-9c492131f068", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af20a72a-6d92-4058-bd88-117d9bd27e79", "sighting_of_ref": "indicator--210f4fc3-0a02-494d-9f77-164478c09275", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d05adb-6473-4567-b06a-794dcb92693f", "sighting_of_ref": "indicator--99def90e-f1b0-4905-b585-ca055ec21e03", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dce8863-4917-4250-821b-73102273b2a6", "sighting_of_ref": "indicator--862ec29c-1129-4401-9200-c1fadffc9700", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b7170c2-1f16-4fb7-ae84-0f3e21ba45df", "sighting_of_ref": "indicator--545fc1ad-c9b3-4dc3-8f62-d1a3b1cdef39", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9955df0-22aa-4eaf-9ca0-81fe85ea5622", "sighting_of_ref": "indicator--3158a861-c240-473f-b98f-75330f9583fc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87dbc10a-095a-4dac-a450-90da71ae87e6", "sighting_of_ref": "indicator--0a75ff9d-ec42-479b-aca3-1fb870dcc4e6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9343ee-220b-4e16-920c-515ce3a71a08", "sighting_of_ref": "indicator--6b339aca-2ed7-4481-8fad-c84a7b965140", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cbb4db4-8f92-438d-af57-0e32cd768d99", "sighting_of_ref": "indicator--2dbb4660-9998-4369-9084-9cba880addd5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f2025b-7daa-48b3-ac44-607355acb176", "sighting_of_ref": "indicator--78fd366c-aa3e-40e8-a3f1-4dc94799720e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04f87fe-5995-47fd-863d-dacd570f1e24", "sighting_of_ref": "indicator--770d8bf2-149a-4c19-b272-3b192009a203", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09d7f39-aa3f-4137-b1df-b4a40a822797", "sighting_of_ref": "indicator--e0ba3088-d490-46c2-8b95-7ad637fad851", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7c288e-da20-4565-80a0-5959a1d47a00", "sighting_of_ref": "indicator--5a074320-b308-4680-9148-31eae5975f1d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e011c455-5a45-43f3-91df-a931579c83f9", "sighting_of_ref": "indicator--5a074320-b308-4680-9148-31eae5975f1d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762cd627-66d1-4544-8e38-333981eaae57", "sighting_of_ref": "indicator--d61650b9-bb2c-4fac-a6ed-7b27b4616d41", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca558a4-a143-4f41-af9f-73823ce0d2d4", "sighting_of_ref": "indicator--72e2e86b-47d6-4c63-8711-f10107006a43", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7930d534-21fa-4b39-8c79-d99a7ab302b8", "sighting_of_ref": "indicator--c3d16b8f-fb23-4d2a-8926-fd56eb9d07dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2f72b8-1fe5-41ba-bc38-feed2956f191", "sighting_of_ref": "indicator--dc79b74d-00d7-42f7-95a5-0ffb1730b7c7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786683d9-9737-47d8-a2f5-1bb8d3c4d28b", "sighting_of_ref": "indicator--1aac0d13-b003-4315-8b45-6461baf3f90f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e234f2-b52d-4f61-bbb0-202066456e1f", "sighting_of_ref": "indicator--06ef800b-f2df-4323-9063-37d01beb6492", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9bce90-87f2-41a8-8c4e-13864a7db8d9", "sighting_of_ref": "indicator--7c06cd6c-b11b-4008-a570-fdae4c9fa7d8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c47e813-3937-499a-b784-7939822d308c", "sighting_of_ref": "indicator--4466e45d-d5bd-4b8f-990c-e0701e8a184b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29dc0a3f-0f57-486a-b421-ed3a4ca1f4a4", "sighting_of_ref": "indicator--b5346d81-b7d8-4722-93c0-3a4f8d83acd2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06cf04e5-fa01-4582-9f58-6e87593c2705", "sighting_of_ref": "indicator--b0b6ad51-3175-4285-97c9-46078c66e242", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779babee-2c22-42a1-8440-e6328f6ddc3b", "sighting_of_ref": "indicator--7526fc23-5c22-451d-b3d6-f0d628d26337", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f5619f-0ff6-4841-b129-51eefcb2f5ad", "sighting_of_ref": "indicator--542209d9-3a18-4dba-92a0-bc2808f6a931", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6f7e8d-6293-4fba-83b9-da844285269c", "sighting_of_ref": "indicator--48f9f7f0-3328-41d0-b4ca-f19310917474", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30d28a7-581b-4db7-88d1-b4946363b9f7", "sighting_of_ref": "indicator--8a786bcb-4b02-434c-b8e3-365a5dc946f3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c750f503-144a-4dbe-bae5-8d7ff5696c8f", "sighting_of_ref": "indicator--5bc0a31a-2ee4-427a-a3ac-6fedd2b2c3ac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f7e96c-6445-4abd-b426-7e02b60b5524", "sighting_of_ref": "indicator--a73d8c58-1c6d-44d1-a173-01c8ea8ec525", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7fd76e-1ee4-4644-b141-db2d1a468796", "sighting_of_ref": "indicator--6d1be441-34d6-4af0-8b13-e8b0f1e3dfa4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9c4236-e304-4594-8ebb-4b644f1b626a", "sighting_of_ref": "indicator--4e50d17e-ddf2-4212-a089-64757a199bd8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad76e7a9-dcb1-4769-b35b-a9f5472b5514", "sighting_of_ref": "indicator--8d0aa855-be14-4df2-8f41-6e495aadb670", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0fb0305-ff4e-45cb-a408-bdb5e9631bb8", "sighting_of_ref": "indicator--67f50446-08aa-4369-aec6-d35621fdd88d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20b5544-2670-4568-bb08-80caacb93925", "sighting_of_ref": "indicator--18a7d426-702f-481c-8cea-81b6debb503a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b63c1c-ba17-410e-a140-203d95562492", "sighting_of_ref": "indicator--e5046a35-a276-494e-a286-4ff08a5bbdc2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6420a87e-e25b-4176-a317-18ea65e51684", "sighting_of_ref": "indicator--be0c74d0-f0b3-4255-a56e-4d68ef5958c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff0ab1b-5854-4b74-8884-5eae087c4d72", "sighting_of_ref": "indicator--5c3f5948-3379-4f4b-9a8a-274ff0d1245f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d0678a-bba3-4d91-b2c1-4cf89250ffe9", "sighting_of_ref": "indicator--fc582cc0-8723-403f-8e81-f080639b4271", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc19e23-516c-42db-97dd-e4f10d86afbd", "sighting_of_ref": "indicator--800e92f2-a815-40ce-9f05-35e29ad86814", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c80ac3-e018-4ccb-93aa-9ecc605e289b", "sighting_of_ref": "indicator--3d7fbd96-7340-4c7b-9a4c-9319b3d373b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0426e20-75c6-45c7-9482-030a218a9d9e", "sighting_of_ref": "indicator--a81e5f36-45d4-48c7-84e9-dd9b0defae29", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555e04e2-fffa-4009-ae5e-bb7dec7bc9d1", "sighting_of_ref": "indicator--d90853ea-836b-4142-937c-7cdcbeb0cd3e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545206cd-b5d6-4c0a-aa03-38f8ffdedf72", "sighting_of_ref": "indicator--18f7838e-e46a-4d05-a901-bdc1ff5aeb64", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25eb97ba-e2f9-41a6-b512-f9e291d5b6a6", "sighting_of_ref": "indicator--05be8b5a-8c0e-43cb-97c4-45dc080bb59b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72dc4afd-b794-4ad5-b4dd-32b2aa279631", "sighting_of_ref": "indicator--9554a217-f36f-4bd4-acbd-b7db78e189d5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ed1b9a-ae33-4c9d-8c6e-bac2befb65ac", "sighting_of_ref": "indicator--3437b9d6-0eda-4dbd-9439-0051388439cc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f7fa95-f3ef-4b9e-98b9-fb638f0bf213", "sighting_of_ref": "indicator--90f15569-ea6a-4f88-baa0-ee6345f048d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a640b7-e854-4485-9254-ae7679ef84b1", "sighting_of_ref": "indicator--6f918f61-bfa0-4b72-966d-72f8829f6197", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b011345e-7845-438d-8386-357b5bbe1fce", "sighting_of_ref": "indicator--25b411f6-6e33-4560-b7f5-639ad569e9cc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec2e32d-f483-4f51-b61a-f6df294df829", "sighting_of_ref": "indicator--15a5203a-8f37-4708-9042-13582a062736", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef61a51-17b0-41ab-a186-c5e6410ad975", "sighting_of_ref": "indicator--4e224181-5607-4ca2-a174-9b463daf1c1a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e90b9ea-ba1c-4b94-93fd-01b022182cc3", "sighting_of_ref": "indicator--14dc9a94-b7a1-4bec-86f8-ed890057fe07", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd58761-bc2c-4858-8ec3-8d2294f947e0", "sighting_of_ref": "indicator--1d827f84-fdd0-4202-b565-8b7f89326237", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458b40f0-578e-40b5-b396-2e0107da1ba9", "sighting_of_ref": "indicator--205c3aa6-3938-413f-9e92-8ae944ac4f29", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b09e35d2-9f9d-4e66-8d35-6ee8ac7f3b49", "sighting_of_ref": "indicator--033c4d2e-d359-49f6-b38c-6324d3541e8b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a60f1ca-0dfa-4dd6-a7a4-2b407324b41f", "sighting_of_ref": "indicator--ce658194-a594-453a-bb9b-8d698aba89dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca7f481-98d0-447c-abd9-4786aaa272b6", "sighting_of_ref": "indicator--4b33121b-7770-4bd6-919d-fe5346d600ef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa86e7dc-3dc3-4540-9408-0a4d0647977c", "sighting_of_ref": "indicator--13169b36-028b-40be-b4d1-77ef0aff2c15", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eed8c77-3b34-4f3e-b5c2-09e0853ee7d0", "sighting_of_ref": "indicator--731b81ff-4af0-4c30-b07f-0e9236af2f97", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314e23d5-ef55-44bb-b0a4-5f3a6ec54dbc", "sighting_of_ref": "indicator--a0c76114-154a-4717-8fee-7d0fe5b7e900", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79682ed5-7030-4746-9785-d05296725846", "sighting_of_ref": "indicator--3dbf6d1e-953d-4c6c-a9e5-309901882c92", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a82d1ae-d4ff-4e91-ac7a-ac5b25a305e3", "sighting_of_ref": "indicator--b5833dee-5504-4658-b241-3f49db22dadc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e193353c-58f9-478a-b919-9e64fcab9f06", "sighting_of_ref": "indicator--6a057e77-155d-4719-9bcd-d309b2a2ef1a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d8b19b2-0c26-45a3-8388-bf3396b4eb4b", "sighting_of_ref": "indicator--ae9404f1-666b-4c33-8203-7a8ef61f6564", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac3988b2-5ac6-4513-ab80-6a8bbb28b260", "sighting_of_ref": "indicator--f7a4127f-3bc2-4640-a408-4656160b6ca3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275cefbd-4c85-4a9b-b25c-5d2a94ddf811", "sighting_of_ref": "indicator--54f29ed8-0166-4067-b6fd-3fadf53dd781", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa5f798-21d9-4f13-947c-2515138cb2e4", "sighting_of_ref": "indicator--ea8c5570-7b60-43b4-8916-1e454e72f6a5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed3b999-b354-4510-b014-2d10911a7422", "sighting_of_ref": "indicator--d63fa3e7-0e6c-4318-82d9-449d0b7bb523", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de5dc8c-2f9b-4490-af3b-eee85320fa99", "sighting_of_ref": "indicator--8d9470cc-8ff2-457d-8dbe-1b7148478c4c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41cf663e-aa85-4db0-b18f-39d120a41a7d", "sighting_of_ref": "indicator--8d9470cc-8ff2-457d-8dbe-1b7148478c4c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cedfedf1-46cb-4bb3-b56f-b69da1964bfe", "sighting_of_ref": "indicator--ad89edf5-8ac2-4c26-b090-70640890943e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ba3da8-0dec-4517-b0a4-5a82a018640e", "sighting_of_ref": "indicator--9cef932e-16b3-47b4-8635-fbb0be9f2767", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f33c87-4da2-471f-a37b-6fe480a533e9", "sighting_of_ref": "indicator--aa8ef566-2cf6-4ea1-8846-4d3c9b4c05ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81891e80-6846-4432-9a59-6922be6f7d01", "sighting_of_ref": "indicator--00cbb940-7915-4ba3-97ed-873c98c964ba", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c06f305-826a-4063-8efc-51cbe42b6278", "sighting_of_ref": "indicator--ba3f761f-9e16-453e-a12a-044314983f9d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da815e18-a9af-4094-a854-f6a8f456fc40", "sighting_of_ref": "indicator--82cb4011-78ce-448f-afa5-70071f9bc3b3", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6187073a-eab9-4c93-8062-afa67f3c4f9d", "sighting_of_ref": "indicator--d549d2cb-f6e3-44ff-9cd2-abe4071c88ed", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0527e6c-11fe-4deb-90b3-0c040b52c165", "sighting_of_ref": "indicator--69090c8f-3984-4d59-b230-c08b2ef424ca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f942b65-1821-4fd8-9a8d-19eac695204f", "sighting_of_ref": "indicator--97117c85-cc4f-450d-9e64-bc9248cdeba8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d239ca-ae82-447a-9dc5-8b1ac7f1385e", "sighting_of_ref": "indicator--01c5f855-2a3d-4360-9405-7ccdc71a5d83", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4258240-7524-41a7-ad44-321a4b8f6215", "sighting_of_ref": "indicator--d66bf004-ce10-4f9f-8e28-216a14de1f42", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e63e74-1a1a-45ea-b5ae-b69be00b8231", "sighting_of_ref": "indicator--e6405523-bb30-4bc2-8b8a-2af295850174", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5490e36-81fe-4158-ae85-d6ca9584344f", "sighting_of_ref": "indicator--0b690ced-61a1-4d54-8c7f-1f1ab8ab27be", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd1441fc-aaf0-4543-aebc-c3842013ab9f", "sighting_of_ref": "indicator--758b263b-4b9a-4e25-b9ad-c30fcb6cd26e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d268724e-31b4-4869-83d8-f71ca2f7a955", "sighting_of_ref": "indicator--c2dd6aaf-3ac3-487b-88e5-f916c32486ad", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2509a9-52ad-4866-b21a-6620bbc0bf4f", "sighting_of_ref": "indicator--b1268399-3e17-46af-a5c0-d3882eb704b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd6f131-7c75-4c70-b97f-5154a78b67bf", "sighting_of_ref": "indicator--c8819a92-5ee5-46d1-a83e-b774660c8900", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fce3e0b-51a3-47be-9cbf-89073ee5cbb2", "sighting_of_ref": "indicator--7ee7e68e-eb84-4494-92fc-a07a6eb2760d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a1c85d-05f6-4b94-ad0b-783ed89b1ede", "sighting_of_ref": "indicator--38fa1234-1cd5-4c77-982c-af66a6a44d4a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a356034-c820-49bf-a654-a12683d0ca48", "sighting_of_ref": "indicator--f36a7114-6a54-4077-b923-fd86fa9ad0cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973464aa-32e7-40af-857b-5b47588cd909", "sighting_of_ref": "indicator--024d8628-35be-4ce8-a03b-1c0300566085", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cfe2c4c-0023-4b69-83eb-acf54f3b777e", "sighting_of_ref": "indicator--fe6587d0-1519-4918-b423-58b88b12712c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e8abe1-c8ed-4838-8538-6183e207d1c0", "sighting_of_ref": "indicator--fe6587d0-1519-4918-b423-58b88b12712c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3afacfa0-d642-49a7-86f9-d8065fce1107", "sighting_of_ref": "indicator--3f251731-c52e-455f-9c2c-b0b33f33a025", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b7cffe5-f254-4043-b5fc-91e3a4c3a75a", "sighting_of_ref": "indicator--6bfc1e1f-615c-48f6-a168-2e6111fda1c7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3ce72c-b997-4004-921e-71d132d53729", "sighting_of_ref": "indicator--b1500560-3765-423b-9e9f-e7e5ead11bb5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00895c8c-69ae-4407-9b52-a80d9411cf9c", "sighting_of_ref": "indicator--9394e7e7-56ca-4c15-a560-fc5c37cb408a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c2dc7d-7796-44b2-8243-51858a5ddc56", "sighting_of_ref": "indicator--f660c3c2-895d-439b-bc80-1f7709e3a222", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05904207-d6a1-4031-9205-3db65d867770", "sighting_of_ref": "indicator--e9208648-6a34-4549-b01f-6d9b370ab180", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e98189e-6a64-4ab1-b126-651f8b9f3299", "sighting_of_ref": "indicator--56ac84eb-e419-4a4c-8c35-3475edc5d8eb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c0197c-3224-4151-82e3-9af832d33746", "sighting_of_ref": "indicator--4df5fc44-aa32-4b48-a632-7b8c743ba64e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240e4757-109a-4f4a-a22d-4533fc2dd830", "sighting_of_ref": "indicator--8b099f1e-6f98-4bf5-a4d7-4433568ff08f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c346213-8871-48c5-9092-353502bc6155", "sighting_of_ref": "indicator--d4d142ac-3151-472d-b3d4-c292e8310eb9", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc51b631-2122-408f-890d-ffcc2b1ff068", "sighting_of_ref": "indicator--a65132a3-a953-4b11-b5c2-124fc17aa67c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e89a69-0030-49b9-be95-8d1fb2d623d4", "sighting_of_ref": "indicator--75d7b345-fc07-4f04-8046-163caaef0bda", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8610438-1f1f-4d05-b7c8-a351af328a58", "sighting_of_ref": "indicator--1ad46ca1-adff-41c2-8a25-bc1c09d53e6f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a88a64d2-4d63-481e-b577-61ff1507fec7", "sighting_of_ref": "indicator--96be15c8-7fcd-46dc-9c78-fec81202275d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb411d2b-ea85-4760-8565-16116c1fcd07", "sighting_of_ref": "indicator--48c5ee64-c299-4282-8550-bc93ab395e91", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--497d8576-01eb-4150-8111-6a75b68a46a3", "sighting_of_ref": "indicator--76405183-1dea-43d2-a7a4-68f64bebe3f6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f866f23-008c-4847-8bfd-ebe7225819ca", "sighting_of_ref": "indicator--6f1ede9d-5e9d-452e-9e40-bb2636ffa65f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7535376-fa92-4563-8e9a-e1cc91170bdd", "sighting_of_ref": "indicator--b969cbe0-b721-4d5e-b2cd-04ac156f67ab", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea82473f-72b5-4036-9dae-d842c464c89c", "sighting_of_ref": "indicator--754dc543-670e-469e-ac50-c806c0792b4b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b21f6a0d-025f-432c-b236-72f7cdc81338", "sighting_of_ref": "indicator--e7e7be31-1800-42c5-a120-520c73d08748", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc254a7-3a66-4c11-b27d-c8ec1f74451f", "sighting_of_ref": "indicator--9105759d-dfdf-4705-84c6-543a1cf10990", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e44742c-758f-430e-93b5-e1b940cdb9c7", "sighting_of_ref": "indicator--2d636c42-dd09-40f1-8863-f28bf556fe1b", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc8c99f-ba6e-4be7-b088-601c227c798f", "sighting_of_ref": "indicator--8a5782aa-5ef1-4e53-95f7-6ff1e8de1d26", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c54f4293-6e61-4a36-823d-2e40c6223ea2", "sighting_of_ref": "indicator--8a5782aa-5ef1-4e53-95f7-6ff1e8de1d26", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac05bcbf-b8f1-4b92-be6e-d33114de3ea3", "sighting_of_ref": "indicator--1c69e496-d237-4d08-a0c3-a66c8e44fc9c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678f0853-06e3-4314-9afd-f22b55836bc1", "sighting_of_ref": "indicator--eaef993b-e430-40ff-ac18-260a7162289a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1583d51c-e281-4676-bcc6-e3d8d039e615", "sighting_of_ref": "indicator--4b7de2bc-1fc2-4580-ad85-9f55ad8a9cd8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a096c04d-2e49-4034-8fe0-9fb578595dbd", "sighting_of_ref": "indicator--4b7de2bc-1fc2-4580-ad85-9f55ad8a9cd8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648bd71f-1a6c-491b-a5bb-b4b28da834fc", "sighting_of_ref": "indicator--397108b1-1651-46cc-a317-8e4da243e0d4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f0f102-4b1e-437c-86ec-f65b3a4c935b", "sighting_of_ref": "indicator--660027a3-9b4b-485a-acde-9049b5cbac83", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5610ba3c-b9eb-4722-a6f7-7dca8a77e45a", "sighting_of_ref": "indicator--4a9c02bc-1601-4a8d-8a3f-7f0bbde3569c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f233f3a0-c0f5-4ba4-8786-4bced6ae8eec", "sighting_of_ref": "indicator--63e927f8-3217-4c3b-9185-838b05d81563", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082ee029-fb68-4d32-b58f-f523d09436fa", "sighting_of_ref": "indicator--8ba865f0-1d15-4135-a118-545d71848b95", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48dc8fbd-b01a-4d56-9f58-de1c76bf74c0", "sighting_of_ref": "indicator--fc3acd8a-5dc6-47ff-9fcc-9acff3052e07", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af3f9d7-7a71-4885-987f-3401c0c1a5bc", "sighting_of_ref": "indicator--349c4de6-c7ea-4310-817a-9edfa1f1f1a3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62088bea-9420-49cd-86e3-dae03d15b82f", "sighting_of_ref": "indicator--0e4c4da9-7421-48dd-b55b-37eca5f3b5e8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9181df98-9817-402b-b998-a88c1cdafdc0", "sighting_of_ref": "indicator--b66cbd7f-a186-479a-9dd7-cec47cf69e75", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7ee7d9-4e0d-45f7-b3e9-d3fb38fbafa7", "sighting_of_ref": "indicator--f18aa4b1-11ca-4d95-9d19-d269e6c14e5a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0574b529-529b-45af-b43d-6beab5a71457", "sighting_of_ref": "indicator--f18aa4b1-11ca-4d95-9d19-d269e6c14e5a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1173d3df-10be-4338-a14f-812d10a098e1", "sighting_of_ref": "indicator--f3c8d242-7b82-4a4e-91c6-5208444b20b7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5004d28-87bf-484d-8057-c87bad261564", "sighting_of_ref": "indicator--537366bc-5e3d-41ae-b18e-4c8ae7b63160", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009558f8-203d-43fb-9c7a-47440bf019c9", "sighting_of_ref": "indicator--8a2ddb67-e5cd-4b3f-b25d-8d844ec3305f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca48890a-58db-4851-b546-b7546e0e45e1", "sighting_of_ref": "indicator--eaf6875e-7c33-483c-9eb1-06f791311800", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42571bfb-ad69-4ccc-93d1-0437ff697784", "sighting_of_ref": "indicator--16bb6f76-c65b-4ff2-b47a-1421bb1d4b87", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085216f2-fb41-4218-9a68-f8458a297bc4", "sighting_of_ref": "indicator--16bb6f76-c65b-4ff2-b47a-1421bb1d4b87", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3cd907-752f-4e38-bd0d-09946c18c9c4", "sighting_of_ref": "indicator--46033ca3-3c63-40f8-89b6-405e596763b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4b3a0f-306f-49d3-b7eb-31b02dcea8f6", "sighting_of_ref": "indicator--ee7d6448-b4bc-4d30-9e62-fb567743122a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c7864ce-ac33-41bd-9a99-46e395a991ec", "sighting_of_ref": "indicator--f4539fb4-c01b-47fc-a0e1-2b1d459cfc88", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98aef01f-7e57-46ac-9c32-d9225e9c3223", "sighting_of_ref": "indicator--f4539fb4-c01b-47fc-a0e1-2b1d459cfc88", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f82b4cd3-3015-4ad6-9c98-5ff113198021", "sighting_of_ref": "indicator--a62e5fa7-5268-4d14-882f-b6465c2b1e2e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c09474-5eda-4eab-b8ea-41786136cb98", "sighting_of_ref": "indicator--817ed557-483c-4b57-99d5-1208005d3927", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c077d349-cb3f-432f-b319-7c7794bc5011", "sighting_of_ref": "indicator--73361544-ad29-49d8-bb4a-4fff173a96ec", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39957523-bafc-4e83-ba13-72edbae79b88", "sighting_of_ref": "indicator--39e4f6ea-59f0-4757-a599-0b4f002beb06", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fde9d7e-93fd-4fdb-bac9-85138c803e7d", "sighting_of_ref": "indicator--4d68820c-43af-400a-b066-c6ae6dc00635", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b8d79a-3917-4ba1-a8d3-70844a0d1cda", "sighting_of_ref": "indicator--4d68820c-43af-400a-b066-c6ae6dc00635", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a038ea75-f93c-464d-9efd-f48c6b0afbb0", "sighting_of_ref": "indicator--41889182-a266-43eb-b8ea-ad11e57602bb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28bfcd6-174b-4fec-9c65-60318226d955", "sighting_of_ref": "indicator--c8fe6e2b-d55e-4dc3-b980-22f77c40ce87", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0668a29-aeb3-4a0f-be54-3107b37e34f6", "sighting_of_ref": "indicator--7b379ec5-4eb0-4b2d-bb21-0b56f0dca608", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f817a4d-57c3-4503-ac41-39a10b614a45", "sighting_of_ref": "indicator--7b379ec5-4eb0-4b2d-bb21-0b56f0dca608", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f41a06-bac6-4743-9b91-97ea2327f6a8", "sighting_of_ref": "indicator--c43fd606-dfd5-4928-96da-57fb06b18732", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8f4c6f-fb25-434c-8daa-1d56c14fa080", "sighting_of_ref": "indicator--c43fd606-dfd5-4928-96da-57fb06b18732", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8619ce-734e-4ddd-b2b3-bad8360d82b6", "sighting_of_ref": "indicator--42023dc1-ef47-40c0-84c3-12cca02dda9e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d52ae35-58e3-4922-af15-3070e3ce0aac", "sighting_of_ref": "indicator--42023dc1-ef47-40c0-84c3-12cca02dda9e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd946471-dae5-4794-a065-cd647a0b4ba7", "sighting_of_ref": "indicator--5a95ff53-04d6-49cd-ba9e-d6ca728e0990", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f240e5-15a8-482f-a0ca-babcf4ac1d68", "sighting_of_ref": "indicator--d1874740-a8e9-4e91-949b-17ba3f635d3c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd903b0-337c-442c-a6bf-1afb81c5bec5", "sighting_of_ref": "indicator--42bee68e-3624-4107-a43c-3cd6319e9c41", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ee46e3-15f1-479c-81b2-42497366f13d", "sighting_of_ref": "indicator--8faf11ce-ed68-474a-bcd9-3d18f91f5b9d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f1200b-b854-4411-9e3b-6c841213b24d", "sighting_of_ref": "indicator--8faf11ce-ed68-474a-bcd9-3d18f91f5b9d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a4b1ad-116b-4695-9776-685d93738a5b", "sighting_of_ref": "indicator--b3c99451-193f-4bfa-ae52-e0b39cb095fb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4133f397-70ae-4581-a0f7-65d46394b3c4", "sighting_of_ref": "indicator--13a2d564-d53a-4bbf-9122-cc81138958e5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba91fc0b-ac9c-4c8c-99b4-f221070ff066", "sighting_of_ref": "indicator--40a93f28-751b-45e2-b047-11b97af0a365", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0827df76-9855-4cea-aa66-8451bf47bcdd", "sighting_of_ref": "indicator--40a93f28-751b-45e2-b047-11b97af0a365", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93fc99e-390e-485b-bf3f-7b2dc84f0355", "sighting_of_ref": "indicator--3c8ac943-b025-4e12-bdd2-30870a0e89a7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b00373-8358-4fca-8938-19d746ba9d06", "sighting_of_ref": "indicator--3c8ac943-b025-4e12-bdd2-30870a0e89a7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6352ccb8-d694-4826-a7c1-90604d99ad05", "sighting_of_ref": "indicator--ff4f607d-13ad-4849-a650-8178c1792c32", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4077951f-b85e-4ae6-ab77-0da651f8e78b", "sighting_of_ref": "indicator--2e825e02-b3af-497c-9211-eed7de35ae88", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8ee39c-4d9f-4513-bcaf-54b95f27377f", "sighting_of_ref": "indicator--28b991e4-9085-4669-b84a-7020298b309d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d63c654-48f8-485c-b43f-b852e13225a8", "sighting_of_ref": "indicator--6d4a3467-144d-4a24-b09f-45dbe7a30939", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b585a0bb-3a4f-4899-a9b6-24356b66445d", "sighting_of_ref": "indicator--8bfefdd8-e2ca-4b3c-b974-496de339acd7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524b6dbd-787b-4863-b0ab-cbf04fd7d9b4", "sighting_of_ref": "indicator--5eb1bcc6-cbe3-45cf-b61f-b5cd7effce47", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8636d0-492d-4b83-9d4f-e077d09ad974", "sighting_of_ref": "indicator--29f9385d-820a-40cb-b0fa-fc28f261d44f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf573ac5-51e1-42e9-9c06-7a8d3f044877", "sighting_of_ref": "indicator--f11ef2ee-9a1a-4738-8176-33e0b337f160", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5cb6a9-7094-4edb-a22e-90bd12617664", "sighting_of_ref": "indicator--518429f5-7e4d-49f3-b7c9-15b6c399865d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337d3eec-2351-4bc2-b591-53468f3622e9", "sighting_of_ref": "indicator--9998e8e1-275f-4de1-ba91-59f4c82ddb67", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76307c15-8b57-4094-b56b-3e1480394619", "sighting_of_ref": "indicator--cfc125c5-ca7b-4497-9958-f7dde0e18fbe", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc04d5a5-1166-4fa9-8dd1-dba082862244", "sighting_of_ref": "indicator--cfc125c5-ca7b-4497-9958-f7dde0e18fbe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2a6dda-5e40-463d-871d-2aa746d6409d", "sighting_of_ref": "indicator--1d16c3c6-7650-4754-bfa8-22de7a1ff005", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85bbe97a-0ef0-4598-8b26-6c50d17e1103", "sighting_of_ref": "indicator--98f36e20-12aa-420e-b472-9835341fc7fb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e997f4f-6024-48d4-9556-dc81733acdb2", "sighting_of_ref": "indicator--14a03de6-76e8-4b53-8116-aaf888804fd2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf9d80eb-6041-4dd1-9ae2-6dbb0c799a6a", "sighting_of_ref": "indicator--5f87900f-8f74-4d80-b97d-d144296b6c27", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2929acbe-96d0-438b-ad2e-6312449bdddd", "sighting_of_ref": "indicator--fdc0ff2d-80b6-4fe6-adbb-0f2705cfb606", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b922231b-188b-4a61-b7b8-d4b3be9eb291", "sighting_of_ref": "indicator--e74f79eb-52c6-484e-b189-96c7c8c8e47b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015036cc-f718-495a-a3f5-0b0ff1360910", "sighting_of_ref": "indicator--6669010f-82f8-4dfc-a990-bcdb1db86491", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71fc5a7-7cca-4679-9d5b-3148d5191aee", "sighting_of_ref": "indicator--88f998b4-c543-4eec-bdba-33757d4f5907", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765d8077-7f50-48eb-a0f0-24f1ec29de22", "sighting_of_ref": "indicator--2dd9f2fb-c34d-4699-8b3a-7541afad4931", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03cace8-cf1c-4204-b98e-35fd98d0668f", "sighting_of_ref": "indicator--35e23669-afb9-4a37-bf50-f309358d0fc5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e1ec7e-d1f5-486b-b062-a57b4e629d6c", "sighting_of_ref": "indicator--7836bf3d-6b57-420c-90b0-5826cce1f83c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf1034a-65e9-4060-8e49-b68830a8050b", "sighting_of_ref": "indicator--21238085-427c-4ac8-93ef-9add0b191a2b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7796b40e-e127-48b5-8d81-e674b65a9870", "sighting_of_ref": "indicator--9a7c5cdb-07bc-4473-abc7-01545c91a855", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca9de9c-4139-44e9-bcf1-bd8cec12c946", "sighting_of_ref": "indicator--fbe14019-55e4-4b88-b3dd-e891ea969682", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc31422a-6197-45ff-828a-7c46e69d1f36", "sighting_of_ref": "indicator--1aa88167-3019-4585-9881-e41f606c9e5f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ff7107-ae28-4276-8cbd-8987168ec3a6", "sighting_of_ref": "indicator--bf890179-5c12-443c-91bf-9895c2062ae6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c54727-2996-44a8-853b-e441e311ffd2", "sighting_of_ref": "indicator--7025f7c4-a209-4989-a09b-c9dfaca60a3f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--737468ca-e71d-4a90-8826-bb96a1edf17b", "sighting_of_ref": "indicator--91f16643-f3ed-47b1-95b5-22fbb9608191", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca7050e8-a184-413b-8077-0d782bd7bb2f", "sighting_of_ref": "indicator--91f16643-f3ed-47b1-95b5-22fbb9608191", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0856f08f-c748-4bb3-910a-0e38528c72c0", "sighting_of_ref": "indicator--c9be3986-e359-4239-9127-38a696b754ec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c2eb59-ef7e-4811-adb6-771949184cd7", "sighting_of_ref": "indicator--27610d5f-d52e-4613-8252-b1e5a18defdf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83441ff-cb03-4380-9c10-805a69e7a590", "sighting_of_ref": "indicator--43ebd0cd-fcbc-427c-bbc0-e14fb38c0eb0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed07aec-18f5-44cd-a82f-26bcda88ec96", "sighting_of_ref": "indicator--ff61fa75-c2f1-40ed-b9e9-ef5d2aa5e28e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cea6000-12ae-414d-bb6d-17912144cae1", "sighting_of_ref": "indicator--226c40f6-b736-437d-abf3-8da31b96c04f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b81777-8d7e-4424-ad03-43848a64dc4a", "sighting_of_ref": "indicator--db867d02-8eeb-4fcb-b994-52299ec8c40f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faeea490-7980-4fce-a47c-7b1bcf60f597", "sighting_of_ref": "indicator--faf488e7-7da9-498e-bcdb-76d64b93dc6c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23999ab1-d86d-45cb-afb4-8bfdbd76647c", "sighting_of_ref": "indicator--8ea706d5-0657-4dff-8782-266fcf895461", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c109ac-bfae-426a-92a4-541a7f66a268", "sighting_of_ref": "indicator--d68311ca-eb66-4958-92c1-5ff26f621b50", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ff39df-8050-4221-bdf2-0d618c1938b4", "sighting_of_ref": "indicator--c406e0a0-f089-4bee-be15-8ecd40837d34", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f147b5c-bcc8-46c6-90f1-5e532503eaaf", "sighting_of_ref": "indicator--2dabca89-af5f-4039-b009-1c7d88772b8e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1992281a-46dd-4ac4-8eeb-cb41e99bd407", "sighting_of_ref": "indicator--1b930c7e-b882-4f47-817c-858f8653adcf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb03ab6-0d8b-4473-87ed-425f3d2df66b", "sighting_of_ref": "indicator--26372f5c-a1f3-4b05-ae18-d6e9af2b0532", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60cc4b62-093e-4a01-bfd7-eda8a0b6fd08", "sighting_of_ref": "indicator--084494ed-d385-4d6c-979d-e4167ec20a00", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20ed2da-0354-4888-8446-6126fef28945", "sighting_of_ref": "indicator--1324a24e-08a5-4201-9334-6198b78e909e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7749d27f-939a-4c45-8541-3e43954f523b", "sighting_of_ref": "indicator--31a887f2-a1a8-4320-83e7-3626be14158b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93e09f2-dd44-4a86-9084-476e7cfe749b", "sighting_of_ref": "indicator--0eecfe51-b892-45ea-ac90-ea251b9f0a17", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56fc92a-ae42-494b-a54a-f8fb4777a0b2", "sighting_of_ref": "indicator--ed5f44b5-3fba-4b91-a0ba-501d82b7de31", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0689f6-f45f-4528-affe-71beddccc3ac", "sighting_of_ref": "indicator--d42e3df6-5a4e-4eec-8c0a-5049be85b018", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252d2cae-ad5d-4166-9daa-e6b811b36ec3", "sighting_of_ref": "indicator--b509849c-9076-46d6-9189-e70ff105bf1e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8038d7f1-8af2-4dcb-bdc8-fd9f0bab65be", "sighting_of_ref": "indicator--2c1f8fa0-d5b0-42b6-95ba-0627b727c581", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f4d4be-300a-4298-b75c-9e308c19d9ee", "sighting_of_ref": "indicator--7fe495cf-d1af-4d27-a173-29837ec2270f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef807107-f593-4868-898d-32209621a1d1", "sighting_of_ref": "indicator--b353cfd3-96e6-4cd9-acd3-d2da8ea7a7c3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b35255-470e-4a80-9dda-ba2cba433c45", "sighting_of_ref": "indicator--13bed36f-2109-4224-ae71-c8e2a5910715", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5305fa3-c84c-4039-af61-e7f943f09966", "sighting_of_ref": "indicator--79294b79-6350-4549-900a-8bc03b3da3eb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52afb6ab-753e-4238-bf6b-55deaaa5c0a9", "sighting_of_ref": "indicator--b8c9c64f-1fd3-4b94-9a0a-a5847c1753e1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd78b94-d7c3-4060-84a9-61bc8edf9148", "sighting_of_ref": "indicator--30ddbe11-08c1-4206-a4c4-c6d28b3195fd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9661b1-ffde-4341-b869-eb8bcf3224a9", "sighting_of_ref": "indicator--62208122-4869-4aff-905f-f91e24c9ac31", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95396aa3-081b-46a6-b377-1628d418eaa4", "sighting_of_ref": "indicator--91c329f9-6dfc-4b5f-82e9-6a0152fa7acf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d9502a-5806-4c08-a40f-96456b928bad", "sighting_of_ref": "indicator--398c6a89-8e2a-4e32-abe0-c9f2eedb18fa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55b981e-f2c8-4cb0-84e5-763616668ce7", "sighting_of_ref": "indicator--816d4f6b-331b-499a-b4d2-bfd2f3ab277d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b8cc07-9507-40f8-acb1-72408318aa12", "sighting_of_ref": "indicator--625b3641-b5a4-452a-9268-bc3646448818", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--338719ab-96b4-4b83-8f5d-fbe3df51878e", "sighting_of_ref": "indicator--13ae72fd-e7fd-416f-ad30-61c8b306966a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1602eb-b2ba-43ea-83cd-ed2aeb857794", "sighting_of_ref": "indicator--4986fc11-44cb-41b8-ae55-206d69062643", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c513fc2-ab30-4420-beb9-c711f228533a", "sighting_of_ref": "indicator--bdf0caae-6ce1-46cd-9eaf-c889485a88e5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4996407b-4662-4e1e-b8bb-4eadd4ea3282", "sighting_of_ref": "indicator--bdf0caae-6ce1-46cd-9eaf-c889485a88e5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da2f0b1-e52c-4240-9151-1b59198d89d4", "sighting_of_ref": "indicator--c20a968c-d8c4-4dfd-80c4-d0db0ea61297", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4820311-708b-4c18-b548-1af7dfbeedaa", "sighting_of_ref": "indicator--6aea0531-7ef6-4e55-9d2f-16522c75601a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ce85c7-c9a4-4bff-8de4-2943d912fa6e", "sighting_of_ref": "indicator--749f8385-126f-489a-85eb-a58d5222959b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d1c6e9-e21c-449e-95a2-c76196d5b516", "sighting_of_ref": "indicator--df4d11af-a3c1-4913-a287-b705433dea5b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1746a99-f145-4802-abe0-f86f8902478f", "sighting_of_ref": "indicator--8577c74e-35b4-4ef0-9883-cea7136ee244", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a599914c-4719-4955-9bbf-b22ee1ac6334", "sighting_of_ref": "indicator--4b4dbbbf-bef4-4a58-9486-d64fff2660da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302c70fb-7978-4da5-abfd-4c6ee79567a6", "sighting_of_ref": "indicator--56d55da0-4513-4bda-8370-a4b7ed7ada03", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17ce8fe-1ba5-4cf5-b11c-db0727bad38b", "sighting_of_ref": "indicator--38b28414-bfae-491e-899e-e28d2147a876", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31fee9f4-ebc3-4f01-9725-767954fe3059", "sighting_of_ref": "indicator--e48710a5-52ae-431d-98fd-d6395929e69a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5835f27-5352-41d9-8110-4e1401540518", "sighting_of_ref": "indicator--f55d7976-7ff0-4a1a-a14e-0dc4682177ac", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f585d519-10d3-4114-bf2b-ae4f17776fc2", "sighting_of_ref": "indicator--9945d5ab-1477-45b9-9f40-af22050dc021", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce76ddf6-9b67-4218-bf1a-f632a16f699e", "sighting_of_ref": "indicator--aad1ca11-6e44-48c5-8103-a7db960d50f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941d0d3c-2f57-4c8e-897e-ba0ace7f88fe", "sighting_of_ref": "indicator--8b5bb9fd-ce86-44be-a141-47cb7c121b4e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e24fea5-e77d-46f5-bd55-e9ce6229697a", "sighting_of_ref": "indicator--8b5bb9fd-ce86-44be-a141-47cb7c121b4e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d1bd5b-3658-4ec8-8868-e9095aa3a11c", "sighting_of_ref": "indicator--098b2a5f-8658-4efc-a6f8-b406c4c83442", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec0322c-9b5c-4ecd-b880-0ea101062f23", "sighting_of_ref": "indicator--2ea40a1a-0bd5-410d-bc18-6d71617bda9b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9f8746-03b6-4909-b388-e08d511d1575", "sighting_of_ref": "indicator--bc817207-17c3-419a-adac-064bf389571a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e10e62-1252-4a58-9f07-1a24b9448f61", "sighting_of_ref": "indicator--bc817207-17c3-419a-adac-064bf389571a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e2af4b-07f4-4985-9aa6-d7317ef946d5", "sighting_of_ref": "indicator--2f0e8686-b3e0-47d2-a3e2-c7fc4bf0b137", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02fe6c6d-1494-42d1-97b2-f4a45da61b3d", "sighting_of_ref": "indicator--0a9a7171-577c-487b-8da5-1afb133aecfa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a157dd-c5f9-4339-a83e-f61750333681", "sighting_of_ref": "indicator--b81a8296-5a51-405a-ac17-11f16dd6ff00", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9e47b5-8efa-447e-b704-02ef9443b156", "sighting_of_ref": "indicator--03fef043-79ea-46cd-a1c5-d2d10df88904", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5c792d-0ec8-418c-bcc4-bade6aa35aba", "sighting_of_ref": "indicator--b2a162f9-7deb-4f60-b2da-733a7f7e5a75", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797cddbd-e69e-40f3-b64d-5c1986a8546c", "sighting_of_ref": "indicator--aff73f0d-bff5-47cd-bc5b-30b917ceee9f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e9f4ac6-3f8c-4303-9d54-8a79c005b8dc", "sighting_of_ref": "indicator--70e3f5ed-9ccd-49d9-9da5-9f945d24e222", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b09896-3e9a-4d7e-8e39-2db9508e1512", "sighting_of_ref": "indicator--8c7f9ce2-5b43-42ea-a132-4475d600a81f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3238ed30-4418-4a1e-95a0-de1046a68672", "sighting_of_ref": "indicator--a95bfe26-daa9-41ca-a381-40ed731ca7ab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cdfcc4b-ef8a-4e94-920c-7333326dadf4", "sighting_of_ref": "indicator--6851121d-ffd3-4eea-9509-1d499221edef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6fa4494-57b4-4495-9476-0c26b56d4051", "sighting_of_ref": "indicator--d0794b82-7c31-4f5c-9f2d-2d5ca1188fb2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b1d5eb-e084-458a-9429-40c0ab463cc2", "sighting_of_ref": "indicator--f905aae0-3a6c-4569-84a1-4c7f781ab116", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a28e19c9-8c07-4301-aee8-accda00f4b94", "sighting_of_ref": "indicator--a92ffeb1-992a-434d-93ec-fa0c72a83313", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b609bcd0-d8c8-4e91-86ed-f4e57de31ba9", "sighting_of_ref": "indicator--6cf71f53-b87d-4d59-8ffb-2129bc6014d3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9400b6-8d77-430d-bc04-ba4ca24300a3", "sighting_of_ref": "indicator--3c125460-d969-42a0-9b9c-9893e4168fc6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab9c187-9b56-4d8d-a6ff-cb2dcc74ee3a", "sighting_of_ref": "indicator--9b595d1b-73a7-4119-a1ad-eff8584c47f6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8c04e8-c439-446b-bc16-780ac6131cb7", "sighting_of_ref": "indicator--9b595d1b-73a7-4119-a1ad-eff8584c47f6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a5a910-4a2b-454e-9fe6-a945aff91349", "sighting_of_ref": "indicator--146f253a-912f-4d87-b1df-74152aec1d85", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067ff6be-e964-4586-a580-6d4dbab230ce", "sighting_of_ref": "indicator--8a6ffc5c-1237-4851-bc6a-5c2b6df245f3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d0c88f-925e-4001-94e3-ea2265d69042", "sighting_of_ref": "indicator--ebc1b868-9397-4a2d-8e00-a1512d84f212", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b899c3b0-ae86-434d-a196-490cda2612de", "sighting_of_ref": "indicator--5eed6220-136a-4ccc-941f-a04f083b6179", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e70562-4e38-4e86-94a4-bf82168db642", "sighting_of_ref": "indicator--28bda4ad-8f5d-4d4b-a047-d819ad305b28", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--198e77bb-f013-49c6-8637-f3736adf76f0", "sighting_of_ref": "indicator--da4f5bfd-9b16-4d31-9da6-55a6443dae14", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcec7dd1-b5b8-4952-8fdb-16a0198c32e4", "sighting_of_ref": "indicator--2a60fd81-25ab-4b60-a201-d4190702cbc5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed33da01-4683-41bc-841f-4e64b596bb9c", "sighting_of_ref": "indicator--576a9bcf-3d75-4347-b617-47c5ed818bdf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b94d1a-5cea-4f23-8b70-3fce870f5fa4", "sighting_of_ref": "indicator--576a9bcf-3d75-4347-b617-47c5ed818bdf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aca455a-0d89-4a6a-945a-077f8c33b573", "sighting_of_ref": "indicator--187cd8f4-216a-4ee7-8403-86e03fc23c40", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e3ed70-76d4-4dee-bb9a-8ea21e947449", "sighting_of_ref": "indicator--187cd8f4-216a-4ee7-8403-86e03fc23c40", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deff949a-0c21-4496-9e34-7d20149f8390", "sighting_of_ref": "indicator--213a1a8f-510a-472c-9187-9ecd0873fd48", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4a6293-307f-4d6e-a6c3-da6f834fe871", "sighting_of_ref": "indicator--eb7d1a46-29d3-4a3d-bf5f-f478775d0fb9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b014047e-c88d-4023-8da3-6e28c201b0ab", "sighting_of_ref": "indicator--a24adf90-3e16-4228-8528-307526bdb735", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f214bda-1b1b-4be9-9f8c-4578a29dfd2c", "sighting_of_ref": "indicator--4ba7d388-cc7f-4199-bcb7-f0bd2fcee226", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116cfabe-2c2d-471d-b0f1-eba87cc8bffa", "sighting_of_ref": "indicator--4ba7d388-cc7f-4199-bcb7-f0bd2fcee226", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d289371c-0360-4db6-ac5b-2ecbce8388b1", "sighting_of_ref": "indicator--f28aec57-275e-45e0-b70c-89ecfc566db4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a614a1f5-fc0b-4124-976a-2755b3b49cea", "sighting_of_ref": "indicator--f28aec57-275e-45e0-b70c-89ecfc566db4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--960427e1-e904-4822-96ab-4feb7f2a5dec", "sighting_of_ref": "indicator--35640a0c-19fe-4b82-aa34-35b87a0b71f0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39957f64-16d0-42de-bd50-b95497734438", "sighting_of_ref": "indicator--35640a0c-19fe-4b82-aa34-35b87a0b71f0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c64863-7108-4e05-8a52-998470c45930", "sighting_of_ref": "indicator--2a1ac940-7dce-4246-9abd-fbfe599bed75", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9bd8ccf-7240-4029-8a26-9ff5d1f6b095", "sighting_of_ref": "indicator--2a1ac940-7dce-4246-9abd-fbfe599bed75", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe6a580-840e-45b8-8ee5-3297a9e83a5b", "sighting_of_ref": "indicator--72f92b2a-ec55-4342-bd2e-ea700edba642", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6f64c7-396d-447e-ba16-d899148c27fd", "sighting_of_ref": "indicator--b3a7b273-b924-4b5c-8abf-73ce373b8710", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdfa149b-659d-4d36-9fdc-1648d2a10b90", "sighting_of_ref": "indicator--4308193a-7967-4d36-bd25-7714fa6d92ac", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07098329-8945-4ac8-9969-de478878bf7d", "sighting_of_ref": "indicator--4308193a-7967-4d36-bd25-7714fa6d92ac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d41bc3-bd01-4e06-a57f-1601b8666ffa", "sighting_of_ref": "indicator--eda64224-21f4-4177-8245-24e39a767df6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55862651-8138-4715-a736-a6b043574d9b", "sighting_of_ref": "indicator--23e1a127-3f39-4166-a9b1-84a7f92ab169", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a547e564-dcb5-4e28-a5ff-b57182cb3616", "sighting_of_ref": "indicator--23e1a127-3f39-4166-a9b1-84a7f92ab169", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19dc83a-2c3e-4e58-950e-164731bdf70a", "sighting_of_ref": "indicator--07031135-5dd8-40a2-ac95-4d85b4a53056", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b16056f-273c-44c3-9df3-623a84d3c144", "sighting_of_ref": "indicator--81c0b117-ee1a-417c-a82b-f5bc05980926", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a51ac03-219d-4932-8b0d-2e4ee8b8f373", "sighting_of_ref": "indicator--94ab29ab-0857-4469-b3bd-e61f1bd8f295", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea354fd-3249-48fb-ae53-aab070335432", "sighting_of_ref": "indicator--ab36002c-8475-41ec-9740-92195f2ef030", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f86f1b1e-574c-44db-ae4b-f78dae7742f1", "sighting_of_ref": "indicator--32580c12-5e5d-47b9-8e71-456e6b4d24f5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51eeb102-0824-49b4-b28a-dd2a397ac532", "sighting_of_ref": "indicator--7f94f6d6-b550-4518-8c8e-ca7fa645c6e2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e90d68-57a9-466e-a87c-3571f5cdf717", "sighting_of_ref": "indicator--5d32ff61-df75-4d5e-a1b3-421e2755501b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3249cbad-b826-4126-9267-d2fbb3b896d5", "sighting_of_ref": "indicator--a96d59e1-77b6-4c29-b0c2-1ef1eeacf2fa", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e4468f-c78d-4fcc-99e9-093ab7cb57ab", "sighting_of_ref": "indicator--d539b159-7fed-4ae2-8aa9-ce7c8265995f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1518e72c-1059-4bde-a584-82ca2cefa0f4", "sighting_of_ref": "indicator--bfcec0c0-fc55-458c-956e-93f23b7c7659", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd70da56-5a8e-4e4c-9ddf-1a586997876c", "sighting_of_ref": "indicator--3c060d2a-5717-411a-a09d-fb729d524bb5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd8c61f6-d71c-459c-959f-7aba6122fac0", "sighting_of_ref": "indicator--3c060d2a-5717-411a-a09d-fb729d524bb5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df88eb9-ce14-4ddc-81ba-498b278633d2", "sighting_of_ref": "indicator--51e891cf-5977-43c6-a301-3ec78dea5e5b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d3abc4-1bcc-4644-b67c-84e0c2f57b69", "sighting_of_ref": "indicator--ef31cc29-8c04-47db-84f1-12f87052f2ee", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c355f21f-bc83-44fb-a92b-7317fdebd529", "sighting_of_ref": "indicator--452edbc4-d6cf-4898-90cc-4b6bbd4bd59a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964661d2-198e-4ca5-85c0-623973b1c82c", "sighting_of_ref": "indicator--27612fc9-3f0e-4dec-a1d1-3e1872dbbb8f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2ea602-1066-4083-bb3f-4a11798fbfdd", "sighting_of_ref": "indicator--ad87d6e2-3d75-459f-a2bb-240734c91b43", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46f8f58-7ab1-44b4-91f8-be9563220bbe", "sighting_of_ref": "indicator--ad87d6e2-3d75-459f-a2bb-240734c91b43", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2bafd4-e3c4-462c-a815-f7e0afcaa382", "sighting_of_ref": "indicator--b91176ef-2497-47c6-af79-8e80595f8e2b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93fde0c-1b41-4534-9f69-0dcab93addc0", "sighting_of_ref": "indicator--085bf436-9ed7-4ffe-b260-e66968242b08", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf9806f-f24b-4cbb-bc6f-d898f04381e2", "sighting_of_ref": "indicator--5ddbb454-2b45-46d5-9143-63f9fd347248", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb0d5e51-811d-4802-91fa-14ee4d288022", "sighting_of_ref": "indicator--9459946e-5b3c-4835-9b85-1199f39b24df", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30471d2c-9c7d-46b3-8d3e-befe9cdeb429", "sighting_of_ref": "indicator--0fec8a5b-70a0-4855-8400-aff1bcc68a16", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0798a27d-192b-451d-83f8-bb73a215b64b", "sighting_of_ref": "indicator--ad9426d4-e900-409c-8191-257ddcd086b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81b462c-522b-4a22-959b-1365a2c50a38", "sighting_of_ref": "indicator--56ea0107-eb2f-4bdc-81a9-6888180db9f3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0edbdf8-df13-433b-b2d4-28f0276cdcb7", "sighting_of_ref": "indicator--020cfc94-6bb8-4b68-944a-91fbd5fc1972", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a663708-03af-403a-8726-679100db0c38", "sighting_of_ref": "indicator--aeda8e8c-1a7d-4f40-846c-2fa85be10c77", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c890524-71d2-423b-b481-c3e5451611db", "sighting_of_ref": "indicator--4bb11bb5-2c3b-4412-bd63-2391febd5a14", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a565814a-eb6a-448c-b1bd-827ea69dec6d", "sighting_of_ref": "indicator--7e750afd-17d6-4c2b-a8f4-e049b89c70b6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c378ece-0875-4fba-9356-6a0ce6fd6b7e", "sighting_of_ref": "indicator--7e750afd-17d6-4c2b-a8f4-e049b89c70b6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d3ea03-2e72-41ec-8f71-9f8f5e96f6d6", "sighting_of_ref": "indicator--e90684ab-b57c-438b-8794-e06d2ad33fba", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf3285b-0160-4a42-9fe8-17141a548a0f", "sighting_of_ref": "indicator--e90684ab-b57c-438b-8794-e06d2ad33fba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394d5673-baa5-499f-b0cc-d5a1ffda1cd3", "sighting_of_ref": "indicator--a50af935-d9c7-4c1b-94af-948a6257c015", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b9654f-b6b7-4277-8ea4-282be2090e19", "sighting_of_ref": "indicator--18c92526-e7bd-4579-9d0d-7a051a9a7ffb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d678fdf-d33b-4663-8c96-51795f9ed176", "sighting_of_ref": "indicator--18c92526-e7bd-4579-9d0d-7a051a9a7ffb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5eb12a-d272-45ed-87d8-d7b28c15de2f", "sighting_of_ref": "indicator--b2713232-eaff-4dea-8096-605860224a7f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda366b7-b3a3-48eb-bdd2-31696871a4d7", "sighting_of_ref": "indicator--388b149a-e302-49c4-9d94-437c11c6b427", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4f65ec-1cd7-40dd-9ec8-ce51c72fd0a0", "sighting_of_ref": "indicator--63add85d-6aa1-4852-8611-531a8809c8eb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4340781c-c5d5-464a-8729-d61f0e893e23", "sighting_of_ref": "indicator--f78cceee-e6fc-43cc-8d28-afe1c88d4d02", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5552e47f-2e6d-4be7-b63b-b0e49027a693", "sighting_of_ref": "indicator--58dcbf86-17d8-4469-9ad8-6e989802e3a5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5389aef4-c467-4b34-8c1d-5d64c865e2ff", "sighting_of_ref": "indicator--80530cda-648d-4dd0-98d1-5a002145db99", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234c03ed-e162-48ea-b15c-b7bea7cc6112", "sighting_of_ref": "indicator--c35a173f-05ec-4f2a-80b6-7cde778b965f", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c670e8ef-eab2-4a6f-9618-de79775db1d2", "sighting_of_ref": "indicator--e25f855f-a153-420c-a4ee-dbfedcbecb87", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a072d5-0369-447a-8cc5-463904ed7374", "sighting_of_ref": "indicator--bcb86a56-559d-46d7-b484-313bab162e08", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27dd02e-b531-4ea2-90ff-0472492b4208", "sighting_of_ref": "indicator--2a997891-a3d9-4505-a6d4-9f239a97533a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3727be2e-33d7-448c-8aab-11f820e3d8e9", "sighting_of_ref": "indicator--9b12debc-9df2-4a74-b697-5ed031f34f8c", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49697fbc-fab4-49cc-a59f-7d32729f1fdc", "sighting_of_ref": "indicator--185fea89-1fb1-4b32-95a4-f71df9e3339d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7974cb29-8640-40f5-8658-831d83e3907f", "sighting_of_ref": "indicator--44e1af4a-0f77-4948-b9a5-2436a7d7d525", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6fbce1-01ee-44ce-a32a-4c331900457b", "sighting_of_ref": "indicator--9355bff1-f69e-4268-b699-5b8cb959ff42", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11d3aa5-4e6a-4e77-b3c2-4df1b473c4a3", "sighting_of_ref": "indicator--7f6ffebc-e334-425a-b6cc-1c7e69db05e5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e0d38f-f78c-495b-91ba-049d4f9e9a00", "sighting_of_ref": "indicator--79619e04-52aa-4cc1-8844-0fb13d7e2d81", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ca9bb4-3a8f-4ae0-b4e6-35cb1b89a903", "sighting_of_ref": "indicator--ffaa838f-a3bc-4cbc-97c6-5f7ae032607e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde9cc74-8b98-4799-8881-f4895e3e67d6", "sighting_of_ref": "indicator--42230f62-3ac2-4c27-bbcb-d96fea0e07e4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e6be67-0193-4b95-b843-e891f586668e", "sighting_of_ref": "indicator--bac7b402-5ee1-404d-9a41-0ba69e61da0e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2cf7906-d097-497a-9e24-b5f32f629fd6", "sighting_of_ref": "indicator--0177faa9-66fd-4153-9fc6-2eec4d46bb07", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2df3457-96f7-4641-8d1b-05ba79fb8170", "sighting_of_ref": "indicator--5c931bab-400b-42c2-9121-ebe1a09de2ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8c7e68-4c0c-4c93-8ed6-40ed5ee440bd", "sighting_of_ref": "indicator--97442212-da29-40ac-a18b-a640bd11e52e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa58e04-3111-42fd-a03d-fcb7c3d7186a", "sighting_of_ref": "indicator--08310a10-b718-481a-9986-32b9de63b0ca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76757291-b31d-4505-8220-89988d5a0f19", "sighting_of_ref": "indicator--22f77a2d-8c27-4d45-b37e-8991500242d9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c1f01b-89bd-41fe-bd08-26cbcd7b0c23", "sighting_of_ref": "indicator--c77c99e0-d330-49c0-88f9-41a811031682", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d147bf17-df29-4e1e-9634-e3e9cd695d02", "sighting_of_ref": "indicator--c10b21b3-a103-444a-87aa-241d31b2acf9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ccd25c-ad44-4dd5-8ca6-9eacbe670eeb", "sighting_of_ref": "indicator--c10b21b3-a103-444a-87aa-241d31b2acf9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbf84e9-c6aa-4c25-8b16-e7c2e09419e8", "sighting_of_ref": "indicator--45211329-d0ab-40e5-b55c-2f1cf1544330", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2991ab42-0804-4f0c-8727-c4c8f53ee382", "sighting_of_ref": "indicator--115c8b23-b1e9-4229-879f-12932fbc20c2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337d01af-6f7a-408c-8183-fce0e3b54381", "sighting_of_ref": "indicator--f45f4749-ed3e-4116-8d30-51a21faed646", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec216fb-e484-4556-b38b-bf2d52eef404", "sighting_of_ref": "indicator--a9e51ec6-3e19-4ded-83de-6d844f16f53d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d427ba52-2ff3-4de5-b9a9-bf91045931c5", "sighting_of_ref": "indicator--e10538ea-bc82-4c74-81ee-3afc479e13af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a1a34f-5d79-454d-9efb-4c41f826b177", "sighting_of_ref": "indicator--78b291d1-fb3e-43c6-bdd8-d200400d7979", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4044bc-052b-4568-be29-7a94753ca067", "sighting_of_ref": "indicator--3361e9e4-345d-4873-8b03-e426751e2ff8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee63fa87-c44f-4448-b3a5-8fd5f58ce4c7", "sighting_of_ref": "indicator--b4b08d2f-8e3d-4316-80e0-bfcadb6b69d6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd614ba-72df-4cde-b29f-7618a57f3074", "sighting_of_ref": "indicator--e96e8611-96cc-4d1e-b4a8-e5084541ad30", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e39e1d0-5cdc-4b72-8404-24015b03b7ad", "sighting_of_ref": "indicator--d591c847-5507-4d2c-83dd-adcc220b436a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dccc8e6-5eb2-4bf0-864e-d9e02ead4ae0", "sighting_of_ref": "indicator--9e27fd7b-9b57-4b96-b146-837ff2b5697f", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc130b0a-7e30-4110-8005-6e92da181f6d", "sighting_of_ref": "indicator--5511e77c-118f-4c9b-b142-4d5aabf7606b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0831cd-7f86-4c59-96e8-4f16b96ef2d1", "sighting_of_ref": "indicator--5511e77c-118f-4c9b-b142-4d5aabf7606b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a82225-1ead-493f-a7db-1b672548fb5f", "sighting_of_ref": "indicator--135b1093-212d-4af4-8945-1c315271fed5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95fe7a7-b233-46ac-b631-f8d41f96de5a", "sighting_of_ref": "indicator--74d9d258-7737-466c-8817-7771ccb379c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea119db7-5ede-4ccf-ab8e-67dd9bcf7814", "sighting_of_ref": "indicator--d143e3ad-f61f-436c-8ea4-ade484269dcc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fee7dbb-2eb5-4cf3-b39c-d010d7254bbf", "sighting_of_ref": "indicator--60c2b4c2-ab3c-4dde-8160-704419833b02", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9254574c-c8b7-4ea1-84c3-fb789116aa35", "sighting_of_ref": "indicator--df4e8939-07ad-4aa5-896d-4ca0228e9d73", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b509789-d333-4c0f-bc1d-621604401d74", "sighting_of_ref": "indicator--ab995363-927f-467d-b56c-7fed3176d0f1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78da18b4-d483-401a-ac94-e1ae7cb90aa4", "sighting_of_ref": "indicator--1dd31d9a-3202-4111-9256-d9995517e328", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6573cac7-1c4a-4fc4-9213-7ffd67e9f017", "sighting_of_ref": "indicator--ea17478f-4bbc-4410-b57e-4182879225c0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e090f37f-6e64-43c5-ba8b-d0f6e1821578", "sighting_of_ref": "indicator--16feb7c4-d245-4dac-94f2-0f8613c3d92c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0f03de-6523-4cac-a150-e56e62c72370", "sighting_of_ref": "indicator--9e9748f1-0df9-4948-8a2f-b28b3a8ea033", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ec98a4-72f3-4f1c-b397-fd4b15841277", "sighting_of_ref": "indicator--ec297772-e1d7-4ee0-90ac-c72f43d6f8d9", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c53ba9d-0946-48b6-90ea-3b839a7e5338", "sighting_of_ref": "indicator--98d61795-4b23-4593-ae33-2cd93eedaa0f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cceb917-d5fe-425f-903d-36bae3007356", "sighting_of_ref": "indicator--32387496-7b6c-4b55-a57e-dfa91b15ded6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd8b809-2010-4c9a-a5fd-54a5ff89aa9d", "sighting_of_ref": "indicator--32387496-7b6c-4b55-a57e-dfa91b15ded6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcde76a8-42f7-4fd2-b0e4-b98bbb698a2c", "sighting_of_ref": "indicator--be40ab1e-7933-43f9-a8cd-b1721ef6bce6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70af7c52-075d-41d0-8ed6-2e45264c41de", "sighting_of_ref": "indicator--97c6171d-dd00-4296-b6f1-d4585ae2b0d9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c7a223-e43a-47b1-9aec-a09efeb4d56e", "sighting_of_ref": "indicator--181f5a6e-702f-4897-8669-01931edbf6bc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5467f621-ecb0-4b7a-a4d4-f92f3dace06d", "sighting_of_ref": "indicator--c27518af-f469-4976-8b1c-f9d2699918c2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822e0ae0-5520-4efd-bd69-65837e34828b", "sighting_of_ref": "indicator--41043b15-6061-4b82-b66b-99f685c8a79c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191fa9b2-c366-48a6-af52-7461aea6c875", "sighting_of_ref": "indicator--f5f74d5b-cee0-42bf-ade7-542aa6a03790", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf1680b-52b7-4486-92aa-de87ec97311f", "sighting_of_ref": "indicator--f5f74d5b-cee0-42bf-ade7-542aa6a03790", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262eca84-f1a2-41c7-80d9-b65a654a66e5", "sighting_of_ref": "indicator--1d09fccb-7e9b-4e78-bbf9-d567dc0c7d0c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2871e24c-5f91-4b2d-87fa-d1659f97d7f3", "sighting_of_ref": "indicator--1d09fccb-7e9b-4e78-bbf9-d567dc0c7d0c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16111ee1-d8d4-47e1-bd46-44a08de09dfc", "sighting_of_ref": "indicator--3b6107b7-8f4e-4ac6-9d4a-193fb7756476", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e3e735-9fea-4d7b-a8dd-43a9e1ed2f2a", "sighting_of_ref": "indicator--dd93b7c1-d5e0-4148-ba49-4ef34f946afe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc21e1db-7125-418b-a65a-653629e0f788", "sighting_of_ref": "indicator--cb46ae2b-288f-4a22-86d6-05514f6ee185", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40613779-9ba1-464d-981a-8125d91cc2f9", "sighting_of_ref": "indicator--cb46ae2b-288f-4a22-86d6-05514f6ee185", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9cf390-8874-4276-abbe-7cb9fe2ba9bb", "sighting_of_ref": "indicator--b7e8c2b6-5a4b-4af2-8be4-d6f19396470f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380e7198-2110-46db-a64f-3274f2456ebb", "sighting_of_ref": "indicator--b7e8c2b6-5a4b-4af2-8be4-d6f19396470f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c7b1d2-3b48-44b3-a198-b568a7f0ccb5", "sighting_of_ref": "indicator--1ad2b489-f940-48e8-801b-a992a30c3d30", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b016d00-8b8d-47e8-95ab-ef9f02a60823", "sighting_of_ref": "indicator--1ad2b489-f940-48e8-801b-a992a30c3d30", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c20ade81-6322-438e-8c27-77c110c879cb", "sighting_of_ref": "indicator--8eef2468-9b91-4e1a-b329-e55749361576", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01d0b58-8ad8-4e8d-9e43-01e0e0d11849", "sighting_of_ref": "indicator--0a530eee-a955-4a33-ba2a-b9f89053b38b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8dc566d-dbcf-4e61-b91f-6b8475f3a283", "sighting_of_ref": "indicator--4c1b7085-809d-43cf-8d5e-21c498ca3396", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c297b825-98df-45a1-8fca-4391a94261ff", "sighting_of_ref": "indicator--ddaaf6b1-cf67-48c3-86cb-8fc91400b702", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8917646-c601-43e8-bc18-24cbefa9c838", "sighting_of_ref": "indicator--0ae987ad-d1e2-40ee-9472-4048315900f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb581b7-1db4-4842-a8b8-fe7ec1d14be1", "sighting_of_ref": "indicator--2c6e28fa-5ed1-4b65-83c6-b17c279ee84f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81224c4b-6ed8-47d4-88a4-23bd18b7a1b1", "sighting_of_ref": "indicator--24c3a4a5-c882-4074-834b-24cf120d7977", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4842ba66-03cf-4013-90cb-9c96709999af", "sighting_of_ref": "indicator--a0b9d275-a3da-4825-9e55-32dc2fd6d4db", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbbd1dff-758f-4444-834e-faf5ee69d661", "sighting_of_ref": "indicator--fdd8a638-10c4-44de-a532-4356f92288ff", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e94629-aac7-4acb-9698-4d24af1700ea", "sighting_of_ref": "indicator--fdd8a638-10c4-44de-a532-4356f92288ff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6529924-c769-44a2-82ec-6b68a3407437", "sighting_of_ref": "indicator--2ed3f7b7-504b-4e9f-8de1-6884fb8a02a3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890fd4b4-c270-4769-ac40-0b16bc12a853", "sighting_of_ref": "indicator--ef4117ec-8bc9-4fbf-84d8-728afe3d7411", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b0c97f-ca63-454f-9ce3-1010e838648a", "sighting_of_ref": "indicator--fd6289eb-c85e-4ecd-9fa6-6e5314a32bfd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff1b488-79d8-4b8a-8a12-7648ce0953c0", "sighting_of_ref": "indicator--fd6289eb-c85e-4ecd-9fa6-6e5314a32bfd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76cdb048-9662-4ae6-b804-a38004fbfc8e", "sighting_of_ref": "indicator--73dfd035-315a-48fb-8185-ce865939bd3f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--155509f1-7c55-4b9b-b320-b77bf82cf1e9", "sighting_of_ref": "indicator--b4bda4cd-19a4-49a1-b27b-c5542140b7be", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79c6e3b-d796-4055-9858-6ac4a34a8e72", "sighting_of_ref": "indicator--d7c39c3a-fde8-4723-8eec-b262cdbc127d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7b5920-354f-42f6-818a-2a4411fbc9e8", "sighting_of_ref": "indicator--cb712f55-94b7-4c37-8e62-a6a8c12a8fa4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5b97dd-8186-4039-91d9-4921defc3892", "sighting_of_ref": "indicator--cb712f55-94b7-4c37-8e62-a6a8c12a8fa4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad85409-a1fe-471c-a4dd-da717f720cf3", "sighting_of_ref": "indicator--3f11b43a-0065-42f7-ba8f-e6399c8c367e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fac115d-386c-490c-8fa2-80a38cfc2fe0", "sighting_of_ref": "indicator--b8121556-58eb-40a5-9459-8bb8f6c2a79f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ca2b87-9aa4-460c-9ad2-0ec2608046b3", "sighting_of_ref": "indicator--d2d4f886-295c-4bb1-aec6-c954ed61c042", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb515d0-6728-4ffb-8962-54e01e889caf", "sighting_of_ref": "indicator--bc0c1367-5514-4fbc-9732-356d0a3e0e93", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0225603b-c169-42ba-81aa-ee6b9a496445", "sighting_of_ref": "indicator--3b1cc022-ae5a-4f1a-8c03-6bbdec0c2c68", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a20c3a-c001-447b-8e85-8c5be6d1eb61", "sighting_of_ref": "indicator--41cb5de0-26d6-4f76-947c-d4bc345df01f", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3dee86b-61f5-453d-b56d-590fcac6bdb1", "sighting_of_ref": "indicator--2c50865f-ce0b-4d76-bc33-65da367fd00b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d73bc35-ed8e-46de-82cf-c2f5f2e6baec", "sighting_of_ref": "indicator--0f97d007-58ee-47ff-89c6-4293a6efa23c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01b4c48-8b7c-49d0-9c40-1633d4a0165e", "sighting_of_ref": "indicator--70beef87-031c-4392-b8cf-c60425bb046c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d2e3fa-db33-46db-8a56-1b654a449a75", "sighting_of_ref": "indicator--fc3fdedf-b5b5-423b-b842-f525a69245d6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c67831-6435-40b8-a870-e0a95b3c074c", "sighting_of_ref": "indicator--fc3fdedf-b5b5-423b-b842-f525a69245d6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2accf83e-bf0b-44f4-a077-bc71722a055a", "sighting_of_ref": "indicator--be99eb98-f489-43fc-895b-5a648deade8e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f659747b-555d-4348-8dae-464cb08815f5", "sighting_of_ref": "indicator--02275c78-2064-45e3-849c-db4c21df25f3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--badb7ef9-9cb3-4673-bb7b-5560e7c70e4d", "sighting_of_ref": "indicator--02275c78-2064-45e3-849c-db4c21df25f3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6da7a40-623d-4015-9460-b212121befa6", "sighting_of_ref": "indicator--272a828a-5304-4a04-bcb4-f10846fece47", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0132409d-c7b8-47aa-9512-f4b4d425cd13", "sighting_of_ref": "indicator--e767f7d1-02f6-4250-a804-0e183e9c8e2f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d2a7a67-c116-4ac1-b368-369d75b55bf6", "sighting_of_ref": "indicator--e767f7d1-02f6-4250-a804-0e183e9c8e2f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212b8eb4-53e2-43d9-a38f-b923be0b6565", "sighting_of_ref": "indicator--64560741-a072-481e-911f-1a491a4554ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80244d8a-ed0e-4d0e-8ef9-eb945f5b3f73", "sighting_of_ref": "indicator--25252271-71ea-4f72-9964-7a29348ff45c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5fd096a-2944-4ec9-9208-3fe6a7e17f5a", "sighting_of_ref": "indicator--72d9c0cc-1218-4dc3-bf16-9a810fcbbb23", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad2f15f-dd13-4822-a6f7-129e17c17b57", "sighting_of_ref": "indicator--19b9e925-aa25-4458-9b40-1c182fbe6f07", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8421bc13-5165-4f2f-9113-3fcd0ff86c34", "sighting_of_ref": "indicator--1178b2e6-51e8-407c-9d79-34d65284d0a4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8eafb7-de77-4fd8-ae45-bf5abd76bce3", "sighting_of_ref": "indicator--1178b2e6-51e8-407c-9d79-34d65284d0a4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa19b83-1fc0-4633-8194-eace620c34f7", "sighting_of_ref": "indicator--d1678257-0754-4e7f-8246-c03b6042185c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd471972-6f6f-4d1c-b471-477077740c80", "sighting_of_ref": "indicator--002c43c5-4bb8-48c3-9c5e-e64edb23303f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce57c7f9-ca60-44ae-b30a-34ca52257d06", "sighting_of_ref": "indicator--72a85d71-479e-4f87-a1c8-b0914f2e3b7f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac0444a-36c1-4bde-b8ff-96875b32040b", "sighting_of_ref": "indicator--2f8b23de-653b-4133-9d06-eca61c2b40e6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb028f5b-d2e9-461f-946e-85f895c5bbe5", "sighting_of_ref": "indicator--a8fbd2ea-8740-48c1-8c11-f4ab61784e12", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59123456-16fd-4669-9205-8a69e747163b", "sighting_of_ref": "indicator--67b795d1-7c5f-4c05-86e5-ab11eb2dff35", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2280ec1-22f3-4bb3-8c9e-6f2bbd14e642", "sighting_of_ref": "indicator--26195e16-9bd5-4350-ab08-aefbc5946dbd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de32190c-5d45-4de0-be7a-30503f587b48", "sighting_of_ref": "indicator--d445621a-b52a-4e43-8836-aef5680e6996", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8b931c-44c0-4fa8-b4d5-5f484b65a2dd", "sighting_of_ref": "indicator--387e8271-786f-4002-9e75-4a17e95e0c72", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba687efd-77e0-4e72-b470-fcab3a9e3737", "sighting_of_ref": "indicator--2d88ce91-b523-4321-a79a-1f97fa823038", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17564e5f-ddaa-4cfd-aa86-96d63a256101", "sighting_of_ref": "indicator--b3a3eb5f-7b92-46c1-9399-3024f4f021e3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52a4667-ecea-4450-9665-42f0c67d8a7f", "sighting_of_ref": "indicator--540a0b2a-221b-479f-a6de-eb599242b82e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55096ac-9bef-4328-bac8-9aa39db55e19", "sighting_of_ref": "indicator--440285ab-be12-4f79-b7cf-1016b77d6d8a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16d8856-8e5d-4f59-a134-994e9d086830", "sighting_of_ref": "indicator--04298a9a-e387-473e-9d80-4eee9fa01a9a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3346850d-899c-4e4e-8ecc-0d26d50496c1", "sighting_of_ref": "indicator--13029742-874a-451a-897a-f51139ee2c8b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fab06f8-4f6d-4b42-ba70-58905bc14bcd", "sighting_of_ref": "indicator--c6ddad0f-38d1-4b6c-a8d1-2cd095ae6f87", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5bbe9b9-b8e0-4708-9d54-264acc995da1", "sighting_of_ref": "indicator--63b6a26e-732a-45b5-a45e-77baba88bc7e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599cdd72-0b6b-45c4-915a-45edd16a4321", "sighting_of_ref": "indicator--1bb16366-65e4-4a14-b09d-fad39073f4ce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e722a01-b201-4563-bf51-ed1b12663ec6", "sighting_of_ref": "indicator--ee603bdb-96b6-4ebf-82b1-89a4a7036436", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ebb841-4ab5-421a-a740-1cfe114355d9", "sighting_of_ref": "indicator--53b6f949-03c0-41b4-bcbd-21141228e231", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f07cd6-89f8-4e9f-9c11-2fe4de4fafb1", "sighting_of_ref": "indicator--1ac4f6be-a48c-4c59-bfb2-3cddb8a512a4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22dffcd-af92-4f25-be9a-d968e0cf177f", "sighting_of_ref": "indicator--ff39e535-f80a-45cb-b92e-f5920e6ce323", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0949adb0-ff4d-4ab0-b550-73644850111d", "sighting_of_ref": "indicator--3cf203c1-9df8-4528-8310-636f6c5160b2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3279039d-df46-4b85-adef-341328bb989a", "sighting_of_ref": "indicator--532d88d2-b97c-4ff0-a9cd-8afc238a001b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc84625-6c74-4dc4-8e0e-93c9ba86e037", "sighting_of_ref": "indicator--c9ff326e-0ffa-42a8-afae-434f5b61ca1b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3012f342-99a1-4256-9c8f-05e8b6955a40", "sighting_of_ref": "indicator--61f5da00-6abd-4955-a6d7-5d161ef9d59c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7936f920-226b-46c3-b71a-6b6e3de9beac", "sighting_of_ref": "indicator--e59bda1d-6fe7-47c9-8546-81591da6960a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1417243-e8e4-4740-a84f-6df4930c2b6d", "sighting_of_ref": "indicator--00f41c81-ef85-4250-9202-edb2398bd4bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4a5850-e29c-44ef-b82f-5553d23c1106", "sighting_of_ref": "indicator--acb6a3c3-3fa0-40f8-8210-5a16ca402a72", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d031b67-a4c0-4868-8d19-e8ebcb890f4f", "sighting_of_ref": "indicator--4fc65c03-f012-4ab6-9939-24b22b4aad91", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29a460b-d068-4b04-8ec3-6a2e9e46e365", "sighting_of_ref": "indicator--b94d3b81-6770-4730-b223-97d70bb50012", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c198c893-8204-49c6-b126-610c4d55733a", "sighting_of_ref": "indicator--0890911f-a086-41bf-a632-088598f54f99", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b997b80-11c0-4f5a-931d-6bbd8993c353", "sighting_of_ref": "indicator--bbb88959-e020-4867-958d-28d447fa25e7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b707f12a-6a94-4957-b6a5-a31581429aa2", "sighting_of_ref": "indicator--f15fbaba-617a-4f81-b2b1-05dd93863ec5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0795c51-06b5-47c3-83da-b31d37e273b4", "sighting_of_ref": "indicator--c3e9a4f1-d0f7-461f-9d74-1258168d5bcb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4a7b07-2d93-41df-b4f6-a2352593467c", "sighting_of_ref": "indicator--23a8e6aa-035e-43f4-96ee-e0efb2ca7e9f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2953433a-00d8-41f5-8d58-8cf087a78347", "sighting_of_ref": "indicator--744aa8d6-2549-492f-afbc-396a635b965b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e745b19-44cd-4808-88db-1952bba89586", "sighting_of_ref": "indicator--06af5663-0e5a-47ac-9543-24c5a4bf9e29", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6de6c52-998e-415b-975a-05c12c101eac", "sighting_of_ref": "indicator--1de46edf-5349-4f3c-a114-ca487bcd6147", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--756a4638-9f28-46cf-ba51-75e23975c17d", "sighting_of_ref": "indicator--5863dc56-a565-4071-ac9c-d2642b7badbe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71850b7-bb9e-4b89-bf5b-51b02c052946", "sighting_of_ref": "indicator--87066363-b0b3-4030-9bfb-23b8c7190635", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594dfabb-afcf-4f61-b8bd-920ebb1a0247", "sighting_of_ref": "indicator--04ffd5d9-bb27-4490-98bf-b8b1be0926a4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb0c899-304d-4d5a-ab0d-8e14e8bca644", "sighting_of_ref": "indicator--1b50da51-7a86-47c7-9aa0-c851602ab632", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca991315-4285-4468-901f-329ac036b635", "sighting_of_ref": "indicator--b5c87119-bb70-47ea-99f3-fcf8260abe52", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8c1406-8e89-47c7-b0ad-e536ed6ac335", "sighting_of_ref": "indicator--bb0e6834-c882-4ce0-91d8-546b6919d07c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4c486b-61a5-42ca-b889-4016c453477f", "sighting_of_ref": "indicator--63153ac1-e37c-4f62-a04c-414d3ab94b15", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f8943d-63b3-4475-a003-d2d1413e5d44", "sighting_of_ref": "indicator--4e61874a-faa7-433b-989f-febc060b71bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d946d01-cbda-4b6b-bc18-c77c6900952d", "sighting_of_ref": "indicator--ed1cc665-1aa3-483d-b599-28cd58cc9e1b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6976d325-f2d1-4c20-9fb0-7a374a42f003", "sighting_of_ref": "indicator--531f6aeb-ad6a-4f25-8407-c9949a2f3bbc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be2b0c2-af1c-4bbd-873c-0e1471ae7a72", "sighting_of_ref": "indicator--4dda3b43-a44b-48cd-925e-beed16ce9c7a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2af0f99-01d6-42af-9c6c-fc8b641208cb", "sighting_of_ref": "indicator--7721f7c7-d0a0-4f9a-9648-c3a08fbdf73e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3682d97-7cda-4cf8-be46-58c05f6760df", "sighting_of_ref": "indicator--c037d578-ce9d-4824-bf37-c881d0827cf5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9394fb09-d0fb-4f83-8402-fe474ddfc845", "sighting_of_ref": "indicator--7006048a-b4ed-4905-aa7d-ce6e31b998f2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fcb52c4-4143-40ea-a219-9ccc830361f5", "sighting_of_ref": "indicator--6331dabb-9661-4393-ba67-7132884d0cec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce476a5a-b4e1-4cd7-be1a-ba6d0f812a7b", "sighting_of_ref": "indicator--768c92cb-4c6e-46f2-ae96-c43ca793c8f8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--441ec176-a355-46cc-91cb-6c800d40da29", "sighting_of_ref": "indicator--7f0d8f4c-d207-482c-ace0-44a415cc678e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498855d7-4281-4a99-b174-2e0f574a1914", "sighting_of_ref": "indicator--67fdc11d-e8c8-4942-b2cb-3aa20b0594ba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f35cd200-f489-4760-a259-05f4ebff2492", "sighting_of_ref": "indicator--e03221e3-2434-4584-a3fe-774a97e270e9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e596c09-9237-4f18-9180-88ed2f1ea4dd", "sighting_of_ref": "indicator--d3c09f6f-cd33-4d34-a9e1-90a25a386d9e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e27bbec-4eb7-4886-9f01-50266cd7fe69", "sighting_of_ref": "indicator--cb0b1b2e-9bae-453b-9108-7551863449a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--238d3a5d-ded1-43c4-9260-0855c241b9d2", "sighting_of_ref": "indicator--37b16d77-dac0-4b9b-a52a-17b545acfc08", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee95bdb-2d11-421b-b8c9-e2a506ac9a7d", "sighting_of_ref": "indicator--1027bf29-acdf-44b0-a25a-06857d909e46", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd356a7-d0d9-4583-9f4a-9ebe01dec7f1", "sighting_of_ref": "indicator--f5f36330-d4bf-404a-ab7f-2eee15ec65f7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4542fbad-dad5-404d-a6f3-8d14329175bb", "sighting_of_ref": "indicator--7144b0c4-6322-4485-a645-bef785854a78", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722461cc-c752-4914-8a3a-0bb8f661dec6", "sighting_of_ref": "indicator--e34c7cfd-fcf0-4fba-8944-dc9d1f933c32", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f12fd3f7-db6b-4a96-8643-defd7e9537f4", "sighting_of_ref": "indicator--8b0917cd-0deb-48d0-9520-8c5ea11e4d90", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7773a168-3087-4682-a01f-1e1759f933d9", "sighting_of_ref": "indicator--c24acc47-2458-4407-aabd-305fcce67f16", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7028c31-395f-4b77-a775-037ef293196a", "sighting_of_ref": "indicator--c28575bb-dadc-4518-bba6-a7541a9258c4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6de7faf-ca00-4a5c-afaf-637c731a9bfe", "sighting_of_ref": "indicator--02003fa0-e31b-4da3-9299-587091c74724", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db136f26-2153-45b2-a769-8e5528c8c1dc", "sighting_of_ref": "indicator--97830733-e137-46dc-bd83-480a4eb3135d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1beeba-7a9b-47c3-8e68-cb03682e3a45", "sighting_of_ref": "indicator--5e259c58-a84f-4dd5-bac2-2be3b0d30ea5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9f40e8-465f-4c21-9938-b9cb35dc5d7e", "sighting_of_ref": "indicator--9ffdf0ef-3395-4eec-a586-b37a5431095c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6727bc32-5b62-4a9c-930f-6fbe8ae14361", "sighting_of_ref": "indicator--0cefcb21-3e54-4d29-a6be-8dbb23a10ab8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c0e40b-ece7-4459-a884-70960ddd5b45", "sighting_of_ref": "indicator--6087eaed-a986-47cf-b186-fc62b55d8d40", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5433104-e618-43a3-afa6-e2e0071d045b", "sighting_of_ref": "indicator--0f54767e-97bc-4a65-93ed-5e185811ba9e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e6ad2f8-7dae-4496-a054-594011e121bd", "sighting_of_ref": "indicator--3d88f43b-3337-4f99-8370-18d92aa05c93", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6468d7-5d4f-447d-9359-0d495058e97d", "sighting_of_ref": "indicator--fe2726bd-79f0-41f4-9a56-492b250935dd", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f0aec72-03be-43b5-9db6-22026c96480b", "sighting_of_ref": "indicator--5e778911-b93e-43ef-bbfb-c3fe20b23b93", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb5166b-d27e-482f-8719-f4682c0c8e04", "sighting_of_ref": "indicator--04138a33-7629-4fcf-989a-e3d4a215c90e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e269aef-de59-43c6-9850-c7ebedaab632", "sighting_of_ref": "indicator--4a8eccbb-78e8-43f5-b89f-e52c3e6cb882", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f4d007-afc1-4f93-969b-16171e269942", "sighting_of_ref": "indicator--06c6b6f8-4b7b-434a-9f89-b75a198cd9ca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0446a0ab-aec8-4dc5-95c5-130874d69f23", "sighting_of_ref": "indicator--858b24cf-e215-46dd-a12d-b84f0cd9b0df", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a294f1c-081c-4067-92be-c9600373d15e", "sighting_of_ref": "indicator--aae7c8d5-f37f-448b-b8a7-b0869d2fbd23", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5292fe-cb67-4498-8456-528d456acfe3", "sighting_of_ref": "indicator--ab55cd84-007c-4644-8bcd-0ddb8be8d62d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e87f83d4-de40-4c94-8a0a-c2d4068c3a55", "sighting_of_ref": "indicator--eeaa453a-03a9-49d2-b207-930546f79fc3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643b737d-41f4-45d6-9f9f-8c04779d5752", "sighting_of_ref": "indicator--2c9d5b62-3ad6-44eb-8557-1897dd1086c7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4246dab8-9e51-411a-83be-18b7ef405c6b", "sighting_of_ref": "indicator--49260478-5096-422d-aef2-22a2e9d2a6d9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69490808-152d-4b04-bef7-22788cb944ed", "sighting_of_ref": "indicator--e96daa2b-43e5-4d56-9116-5b79e2bec6a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d16f750-5752-421d-a53f-091a72d6b46c", "sighting_of_ref": "indicator--6cb91e8d-ca97-4265-8485-719bf2428580", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18fcaec4-b9a9-4d1d-aea9-db67e581aa46", "sighting_of_ref": "indicator--f8266eb8-67a9-4482-9ef8-825bab18ab8b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aef40e1-dfd6-4b82-beaf-2ec3bb460322", "sighting_of_ref": "indicator--2fbda629-3c6a-4379-918e-1cfeed894985", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39dd9eff-433e-4390-87b1-eb1f8c80d0c7", "sighting_of_ref": "indicator--5ffef505-4085-4456-8d6a-720f89709270", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a70dd6-8b8b-4e92-a56c-f0b606edbb65", "sighting_of_ref": "indicator--d53b31fd-004b-4d6e-b5d1-c5425517dd31", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64dda286-1564-4343-87e6-937b28b1bada", "sighting_of_ref": "indicator--bdd8b38b-851c-4ac0-9bd0-62d3d27b582d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4b4606-412c-4480-bf13-152538a50839", "sighting_of_ref": "indicator--bdd8b38b-851c-4ac0-9bd0-62d3d27b582d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc5c7ac0-df95-4dff-9407-8112d0d26ba5", "sighting_of_ref": "indicator--010e6dd2-f7c5-4630-971d-d9e5fd53b6b8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413295df-f9d7-4429-a78f-4fe823a496d7", "sighting_of_ref": "indicator--010e6dd2-f7c5-4630-971d-d9e5fd53b6b8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307874d9-9e2e-4752-8acd-b37224362ccc", "sighting_of_ref": "indicator--b5a08352-3cc1-4727-80ba-9cde5ac44d2a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6098c179-e14a-4a47-90f5-5b511fd026c3", "sighting_of_ref": "indicator--011a908b-56e2-48ce-ad26-c08a8bb60f44", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93aa6187-7bab-4aba-9ad5-1ef2177acf4d", "sighting_of_ref": "indicator--c3bf548b-ba37-40de-b766-c42cc4940b8d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df657a6e-4e64-4d01-8bdf-3ba5ea32f42e", "sighting_of_ref": "indicator--4e0fc4d3-fd08-40e3-a0b5-07155e5a7f12", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec197ca6-eaed-4ac7-8e0f-ca4fc08a9fb9", "sighting_of_ref": "indicator--0b549844-98d6-4138-aaa2-62e5f32007a1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ffff11-8028-48c8-b281-f613536a9689", "sighting_of_ref": "indicator--f5bbfb56-58f5-40f8-8c64-84274b6b2145", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96dd334a-3065-4705-a53a-aee3d45e6290", "sighting_of_ref": "indicator--f5bbfb56-58f5-40f8-8c64-84274b6b2145", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7fa4ab6-adbe-4557-8594-34289717a9ef", "sighting_of_ref": "indicator--6c200c00-1b8d-46a1-a438-daacb3c939f1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b789a7ad-8c0d-4315-9875-aa630ee845fb", "sighting_of_ref": "indicator--6c200c00-1b8d-46a1-a438-daacb3c939f1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a225c2-c56a-48d1-8b43-e937e6617999", "sighting_of_ref": "indicator--67ae72e4-1eb7-40c3-ad77-b4ebcac90332", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7419943e-3711-4155-97dd-1d801e5a8439", "sighting_of_ref": "indicator--4ff09c3a-8eaf-49fa-852d-64949fef9506", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59eb3c0b-b24c-4c64-a427-3ad87f7b8b9e", "sighting_of_ref": "indicator--4ff09c3a-8eaf-49fa-852d-64949fef9506", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca288174-f82a-4806-904b-5cd38a78a7eb", "sighting_of_ref": "indicator--844d751d-301c-4c6f-8db4-5fb7635eacb5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf60bbd3-2f36-423b-af6a-a64b16cac3a3", "sighting_of_ref": "indicator--5f258af4-90ed-4df5-a754-99b9f403a3e3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c5c4f6-01a4-4c30-9875-9d3eef3a059a", "sighting_of_ref": "indicator--5f258af4-90ed-4df5-a754-99b9f403a3e3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc65a1ae-6fbf-4431-bb03-1e1dc0995d19", "sighting_of_ref": "indicator--3b5db694-84f4-4a1d-8ee4-afc99dfb1147", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4f6707-ee04-4b4a-aded-319a80633c56", "sighting_of_ref": "indicator--3b5db694-84f4-4a1d-8ee4-afc99dfb1147", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf1f1ad-efcf-43ed-9243-d321a26502d6", "sighting_of_ref": "indicator--86b602bc-1630-44d6-b452-3aefd746a241", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4db1549-84fc-4cbc-be63-dbab04f4e59d", "sighting_of_ref": "indicator--86b602bc-1630-44d6-b452-3aefd746a241", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44f18f5-a0b8-41ca-8138-0fad74927366", "sighting_of_ref": "indicator--96f47050-fef7-4cdc-bc37-b2c095ee43f6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fbdf5a5-7c69-4064-9c1f-7de538db2b9d", "sighting_of_ref": "indicator--96f47050-fef7-4cdc-bc37-b2c095ee43f6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec762ad-64a5-40ab-bdba-00bca6e4fefa", "sighting_of_ref": "indicator--8bbaca7c-fdc2-4690-9843-1bd1d63a0fe0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd972e91-568b-4469-b546-679e80e005e5", "sighting_of_ref": "indicator--a9420ab8-5919-46f9-a897-ce946d986911", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb3f944-b6a5-4776-9474-ee09851c2a3d", "sighting_of_ref": "indicator--dc399f47-fae2-46bd-b846-c760ab7d3bea", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9fd2e9-8f02-49f7-9444-c410b6a9d898", "sighting_of_ref": "indicator--dc399f47-fae2-46bd-b846-c760ab7d3bea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8351c493-33e4-461e-9408-7d83b1e60273", "sighting_of_ref": "indicator--2ec0191c-8aa7-44ef-9f11-3dc2134610f8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f3e576-8c6d-4f38-8125-1da8c675ca12", "sighting_of_ref": "indicator--2ec0191c-8aa7-44ef-9f11-3dc2134610f8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320e019a-2824-4bff-af2e-ffc0feb1bc1a", "sighting_of_ref": "indicator--18548ead-2782-4688-9601-1bd0e3255e5a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46022a6b-27d1-4e9b-abde-437ce1254288", "sighting_of_ref": "indicator--1eb77c4c-e981-4ecd-a6ec-5b594a79d977", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d44d0f-c8aa-4375-9b9a-30b93b322ae8", "sighting_of_ref": "indicator--69d51ebc-2168-422b-9236-421622861a61", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88fd1334-3430-4745-9d8e-1429adef5859", "sighting_of_ref": "indicator--5160af72-1c55-4506-bcb1-619247051364", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd75ba4-8518-4066-9d2f-b7e02a17d798", "sighting_of_ref": "indicator--ffc5fda1-8193-4bde-9261-f92ca0e176b6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a7aa88-c244-4512-9b35-28a6948f5238", "sighting_of_ref": "indicator--0214bd42-14b1-4de6-ae1f-de1e35da71cc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a04c843-5c9b-4445-83c3-e01603a8a9e3", "sighting_of_ref": "indicator--da082836-4b06-4357-8980-09db2802b6cb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295d6739-11d3-4024-91b3-c8c0b65aa4fe", "sighting_of_ref": "indicator--5bc25c90-0c68-45c7-9e28-02aefc102173", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097d6a5d-1f58-4880-8256-acfc17a21221", "sighting_of_ref": "indicator--ebaefccc-dd38-4a9c-b5d1-2a46aeb987a3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e17ce3-e900-4bcf-bcff-ec3e740b96f9", "sighting_of_ref": "indicator--6fde1116-549d-4b8b-9752-2b55829757cc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72b4a79-5769-491d-ab99-eff11be0f093", "sighting_of_ref": "indicator--7f46fae1-2d3a-48cb-a8f0-befc3b3658eb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca24767-6291-4ce6-a809-97e9226a1eb3", "sighting_of_ref": "indicator--b24a3f39-71f4-4ba0-8281-e69207086c1d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c65e93-3280-4200-b3a2-12f1b0f7049d", "sighting_of_ref": "indicator--98ef2b64-1e6f-4554-bab2-1b37a5209f71", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b62f7fd8-38f7-4b3f-9016-de7df13b0b7d", "sighting_of_ref": "indicator--98ef2b64-1e6f-4554-bab2-1b37a5209f71", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213839b6-4a0c-484c-96ac-42329428df98", "sighting_of_ref": "indicator--ddb4c5b0-6f68-4f9a-b262-84c96795261d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3402a6b-bcef-41e0-bec4-4bb224464e30", "sighting_of_ref": "indicator--e2f45b96-d81e-4f80-8d89-bff9aa96d22d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db22735-4c2f-4e08-8f08-835fbd2a98d3", "sighting_of_ref": "indicator--93f2b917-7f41-4d91-b1c4-10c24ed146e4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444e7978-8f55-41b8-8a12-53710dd28656", "sighting_of_ref": "indicator--0dac975c-6aaa-4a01-9bdc-68343a316640", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28ca44a-305d-4583-b682-810eebf0dc0a", "sighting_of_ref": "indicator--8f5b0671-254c-4646-bfe7-5aff2f3a8253", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da55ee1-d62a-4baa-94e7-e915873c7b1e", "sighting_of_ref": "indicator--e86b2f61-97db-4381-8ad6-ae95edefd87b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08717c1-41f5-40ba-a5ef-8a8affffe6f9", "sighting_of_ref": "indicator--e86b2f61-97db-4381-8ad6-ae95edefd87b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb00d10-1ca6-4655-9259-b66e9fad9344", "sighting_of_ref": "indicator--6a5e57c7-5442-4a8f-abd5-35af684e013d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376a3410-ab70-4edd-a533-413335a079d5", "sighting_of_ref": "indicator--2ceb05e5-e6bf-40fa-be34-382d12bac6c7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570bc9c8-d08c-492e-a076-fecaded96378", "sighting_of_ref": "indicator--4c215b06-5db7-4fbf-904c-d17ac0f1a282", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a48bbe8-d33d-45a9-89fe-a5e8e10d6a6c", "sighting_of_ref": "indicator--73404316-582c-4a0b-8029-0afa369cc9db", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a1f00b-84c1-486f-b2ca-fb68572c7899", "sighting_of_ref": "indicator--db8613cc-c657-4ac1-8ee4-f6a6519f1835", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8c5e15-f31a-40a3-8d31-829c758edd73", "sighting_of_ref": "indicator--4793b6de-f084-49e4-94dc-5f6e82dad356", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1cba2f1-d00e-49f0-ae35-6c8f548d8893", "sighting_of_ref": "indicator--33baf3ee-88a7-4eb6-9081-b1469dc1c97a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5570934-e0eb-4b74-98f4-832d4416ee44", "sighting_of_ref": "indicator--87bd514d-a2ce-4e45-9f33-5e8b111492bc", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4225fe-0b80-4a89-aae5-8cb1bd70dd30", "sighting_of_ref": "indicator--ad1bff05-53f0-4f78-9cab-843c6634b6d3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847e581e-54ed-451e-8e23-44b8f8d47519", "sighting_of_ref": "indicator--ad1bff05-53f0-4f78-9cab-843c6634b6d3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5bfeed-4df3-42c1-a5fa-c820eaca3f37", "sighting_of_ref": "indicator--b47fb843-a50c-485d-b648-b65cfab947f0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee48752-78bb-4dc0-ae29-f8a30a59b3d9", "sighting_of_ref": "indicator--b517f4cb-4d1c-435b-a070-79a1014ed621", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece78410-16fe-4689-8f7e-5d7766871474", "sighting_of_ref": "indicator--b517f4cb-4d1c-435b-a070-79a1014ed621", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95f9243-0325-4ba1-a476-45abf904c5bb", "sighting_of_ref": "indicator--3e6db08c-549c-4657-9cd5-c2a35979d0ea", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02fc4214-49c7-4b2a-a969-9ee492ca3d42", "sighting_of_ref": "indicator--3e6db08c-549c-4657-9cd5-c2a35979d0ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ccbc9b6-cff5-43a8-9432-91f541912955", "sighting_of_ref": "indicator--16f1672b-186c-479f-9235-857938a8aa33", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2ae52a-3852-4e5f-8bc6-d541a1531816", "sighting_of_ref": "indicator--d840027e-4858-4fee-850f-da54ab7a6d33", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e253322e-0c77-4db8-939b-a30c5617aefd", "sighting_of_ref": "indicator--0dab0b36-6d99-4fa3-894c-6a92280f7502", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6fe06a-0a1e-4856-b04e-1e356fb39e28", "sighting_of_ref": "indicator--0dab0b36-6d99-4fa3-894c-6a92280f7502", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617512e1-433a-4f76-96ae-1978a8b82d24", "sighting_of_ref": "indicator--9450ffa9-5421-4c61-b6c2-364c8a0afa3f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9986a736-555e-4758-8e69-ef65fcc76420", "sighting_of_ref": "indicator--262285fd-98a6-44e7-80f3-2fe5070ba69d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b59d391-410c-4a88-9c9d-910a61318275", "sighting_of_ref": "indicator--40607264-ad10-455c-828f-556d9421a8ce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113dbabe-3295-4e7d-9c0f-aa9dc7ce6954", "sighting_of_ref": "indicator--ac7d6857-d8b0-4960-aa89-aa3ee0f16da4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1a7b9c-d38a-435b-9f37-050a9a7cfd53", "sighting_of_ref": "indicator--033339a1-00ce-4007-9072-184e04654a46", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63444f9-b179-46b2-915a-84b0e831e1c2", "sighting_of_ref": "indicator--033339a1-00ce-4007-9072-184e04654a46", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255ed236-4ce9-4626-8cfc-3f2e386dff0c", "sighting_of_ref": "indicator--7c675997-8778-4041-a5ad-6e79184e16e7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee29108-eec6-4c84-ac93-0f3c389d8164", "sighting_of_ref": "indicator--4a10f31d-65c6-46df-99c6-f76c0c030f9d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984ad271-7e80-440e-a5ad-1185d8b50eb1", "sighting_of_ref": "indicator--a9cd2113-cc0a-43cd-b134-3bcfe8782188", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8905eba-c7f5-442b-9438-8c8ab25a63d6", "sighting_of_ref": "indicator--93aea0f8-d579-4779-85c9-6b8f3c1793e5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a408124-f738-4bb6-87e7-d58ee95dac68", "sighting_of_ref": "indicator--93aea0f8-d579-4779-85c9-6b8f3c1793e5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b4c2dc-a943-4447-9888-8a451b63f4e0", "sighting_of_ref": "indicator--19c61059-26f0-4c70-9aea-7118873c6f36", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b74fcd1-c342-44ca-8a05-d0ac63310f19", "sighting_of_ref": "indicator--ea050612-9503-4a23-9c5c-07c72899b813", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473cab55-f8c0-412d-934a-1d6fd71c41e5", "sighting_of_ref": "indicator--72a8e1c4-105c-488a-8355-577f8eb17eb8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce472f80-6bf4-4c24-a604-4346f4d6460d", "sighting_of_ref": "indicator--72a8e1c4-105c-488a-8355-577f8eb17eb8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d699f0b-9966-45a1-a30f-0a2c3e4f723f", "sighting_of_ref": "indicator--68bed126-2dbb-4bdf-bc83-90a7db64b9bb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9c1256-a8a7-4917-a228-46df699380f1", "sighting_of_ref": "indicator--624c13d6-7c65-44e3-ad8e-2b887eef7ba4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2da8b6-c780-4aec-9578-965f0a17fae4", "sighting_of_ref": "indicator--36aa0f1b-0e60-42d2-86df-c36d4b797f6d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26edbb63-bb88-48aa-ada1-78e7053d254e", "sighting_of_ref": "indicator--36aa0f1b-0e60-42d2-86df-c36d4b797f6d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b521dc91-b6ea-4a09-b243-5a69b8ebb82a", "sighting_of_ref": "indicator--9ee7ed58-3ba7-491d-a185-df1afbf053c5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44edebf-0d6f-460e-b804-175532aff7cb", "sighting_of_ref": "indicator--39835579-66dd-4311-824a-6db52d72d3ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420cff5f-df5f-4433-a5b9-f7a7a6358b42", "sighting_of_ref": "indicator--709e2652-f124-48dd-a979-709953ee649d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a58ef03-9a62-4f5a-844c-ad0dea03789e", "sighting_of_ref": "indicator--37b59ac4-fe5c-4c8e-a620-ad81eec66130", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733207f9-32d1-416e-9c95-4c08a01579ea", "sighting_of_ref": "indicator--37b59ac4-fe5c-4c8e-a620-ad81eec66130", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83576aae-bdca-4fd1-9e47-1890c5614859", "sighting_of_ref": "indicator--8b523750-bc9e-488c-8615-1f361825fa5f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1724172d-8023-47fe-9a79-785434e90129", "sighting_of_ref": "indicator--30490850-d3d8-475a-9a29-4c90f0e50f63", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72c2489-b9aa-427f-b7d0-21c0715ada7e", "sighting_of_ref": "indicator--b36862cc-60eb-4976-98c0-ffbb65abac82", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d73370d-5a96-416b-9cdb-6eeaa45cb985", "sighting_of_ref": "indicator--06c1f41a-5445-4569-9b4a-cf9f0980398e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b95fa49-9053-4b5b-b9d4-44de82544fa1", "sighting_of_ref": "indicator--044074cd-3732-4c15-a314-40d09c2d701a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb57d963-5a63-4b99-ae95-832d03a59794", "sighting_of_ref": "indicator--5bad332b-add1-49b6-9a56-ad227067f2e3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a94685-daaf-4d46-bd33-1afb9d613415", "sighting_of_ref": "indicator--5bad332b-add1-49b6-9a56-ad227067f2e3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1266188e-3753-4145-9e8a-3bf20fe07c17", "sighting_of_ref": "indicator--49e91797-a134-4f00-91ef-d895d515787a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d84cd4-3ed1-47a6-a8d1-b9bc94b22d1f", "sighting_of_ref": "indicator--737bd8a2-8d2a-422f-b6ea-bc14917094f9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70cc166-b7ad-42d8-8e7a-ca0081890277", "sighting_of_ref": "indicator--abbb2c7d-03c1-4dca-bffc-fbbf1c73cd78", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eda25a0-f778-4080-a5b7-5454b7951ea5", "sighting_of_ref": "indicator--586d9c4a-9d21-449a-845d-b82aefad8e10", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9079d6aa-63d8-496b-b873-e306fca5d9e3", "sighting_of_ref": "indicator--586d9c4a-9d21-449a-845d-b82aefad8e10", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10536ac1-b9db-4482-bd47-baa240078af6", "sighting_of_ref": "indicator--a7bf912c-64f5-45f2-8e63-ebdb7ed3f08e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b30d0a-a1d5-4651-aa52-5ed7ff05ccb6", "sighting_of_ref": "indicator--c8ccbea8-58df-4061-a3f7-61018ff1781a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73490c13-761d-4d24-8ef4-f613d75d282a", "sighting_of_ref": "indicator--735f3140-e5bb-48ba-b3c6-2e98b444a405", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e858a7-348e-42b5-a3eb-b751e825afc8", "sighting_of_ref": "indicator--735f3140-e5bb-48ba-b3c6-2e98b444a405", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3173a35c-b929-45fb-b185-d8bd42da2a96", "sighting_of_ref": "indicator--0cc080ed-fd16-4876-bc04-8ca2e5e654a8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de56b1a-4f54-4fa0-9628-c3a2999954ab", "sighting_of_ref": "indicator--0cc080ed-fd16-4876-bc04-8ca2e5e654a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e615cbb1-29a5-4ca7-9a0d-faf0f5e511fd", "sighting_of_ref": "indicator--9d471412-a45e-46ac-87ba-e8431a3ef474", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf480c9-f6fe-48f7-a847-6247686863ee", "sighting_of_ref": "indicator--99a9c8ff-be7c-40cb-85c3-49798cd0ae3a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b58ae7-ad00-4922-a699-89830dc93a16", "sighting_of_ref": "indicator--77e34e36-b24e-4b4c-abcb-04ce7700d982", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ab5239-dafa-4522-982d-f22cc7dee801", "sighting_of_ref": "indicator--d5d6951c-b21d-48de-bcc2-57c83d32920e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39625fb0-59f0-47eb-a7d2-ded24719f3a7", "sighting_of_ref": "indicator--b2a961c2-41df-432d-8aef-4b2060fd9ac6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b604203-cd41-4eda-a3a7-2f7374b7c484", "sighting_of_ref": "indicator--24b007dd-6ff5-4893-9202-784c42da7bfe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7ad47a-2b5e-4651-b44e-3a54f7e493be", "sighting_of_ref": "indicator--052fd914-f051-48f8-b911-f77e8365fd0a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da5ac826-2f64-4bfe-8e41-ec0acad0ca81", "sighting_of_ref": "indicator--7b8f71e3-2899-4caa-acc9-888291245253", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f926d7ba-120f-4fa5-8132-855fb73a4e29", "sighting_of_ref": "indicator--7b8f71e3-2899-4caa-acc9-888291245253", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08018602-4b04-4826-926d-d04ee1342b5f", "sighting_of_ref": "indicator--d68fd14c-4107-46eb-abae-854cc64ec133", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cba3746-84e1-4096-9a27-9ea8366860f3", "sighting_of_ref": "indicator--a3fb1617-0927-4dff-b1cd-d662043c88bb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a14433-9227-4c9f-b47e-ce2ed96fb31a", "sighting_of_ref": "indicator--a3fb1617-0927-4dff-b1cd-d662043c88bb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f8f2ac-a94d-4d37-87e8-f83af0df3482", "sighting_of_ref": "indicator--024341f0-884b-4d20-bf3f-3cc05061b5e0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e79d723f-e2b7-49a0-80bf-0dc97c9c5fa6", "sighting_of_ref": "indicator--c7a33926-cb16-4bec-bd3f-3edd0b79098b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be961c45-f443-4c3b-97ec-3fdd2c1f3dec", "sighting_of_ref": "indicator--2831fccf-192d-426d-ad73-acc0a8d96cb4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa38e0b5-67f7-4d42-b908-587b32ccf581", "sighting_of_ref": "indicator--6ef9e471-d1b3-4920-bc11-98844eb44545", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412c50bd-f8cd-46b8-9f72-2c3bb1d6dde2", "sighting_of_ref": "indicator--6b24fa5a-2f20-419a-97a0-aa9935704d96", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e916dfa-3fb0-42fa-bce1-571efed9b461", "sighting_of_ref": "indicator--32a9352e-3865-4fc7-aad6-52e517debdcd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb14677e-18d1-4692-b493-b870544c2c87", "sighting_of_ref": "indicator--57c94e10-daa7-4cda-a292-1cc2b20dcdd8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614c06c9-8e66-4918-9134-e65ed1b4e0cb", "sighting_of_ref": "indicator--57c94e10-daa7-4cda-a292-1cc2b20dcdd8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07280734-6c9e-4f5a-b458-66ee454d8a0e", "sighting_of_ref": "indicator--c3450fde-1874-4737-a3e4-0437effa927a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b43e4d3-28cf-4291-b7b9-6d132a6597a4", "sighting_of_ref": "indicator--15005282-94a8-40f0-8ddb-0752c72f28cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3092c48-4895-488a-915b-01d5a8afce4e", "sighting_of_ref": "indicator--2d0ff446-d52a-4e88-ad76-39d21b7b0901", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62321bc7-6e42-4ab8-88cb-6991ae1cb5e1", "sighting_of_ref": "indicator--7b14aa82-c883-4d5b-8b7b-2f8d1436cd62", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24233bf-f522-45e5-8b2d-3f6770abe102", "sighting_of_ref": "indicator--7b14aa82-c883-4d5b-8b7b-2f8d1436cd62", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce34569-0b5b-4f29-ac49-76bf77ca381b", "sighting_of_ref": "indicator--5042f642-7a4d-4731-9d6e-76fbf7a59218", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ca712e-09c2-4da2-8532-4dab178604bc", "sighting_of_ref": "indicator--ddf23656-662e-41bb-898a-a28fc0fdfbdf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f9b60f-bc28-4fe5-a1b8-7b5223e93593", "sighting_of_ref": "indicator--40eaced9-d076-40c9-bd15-a9fe8f526760", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9507e02b-6641-49f4-9bb6-e5e1bfb985fd", "sighting_of_ref": "indicator--cc8d3626-74b1-457d-81e3-e388c299c2da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86559c57-06f3-493a-a2f5-ed94b64005bc", "sighting_of_ref": "indicator--56b6c0a4-fbf6-404e-89a7-b408be3ab6c7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6760444-c7b3-47a9-a3d1-3c0e36b033fe", "sighting_of_ref": "indicator--56b6c0a4-fbf6-404e-89a7-b408be3ab6c7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1dbdc0-0ad8-4ed1-b462-ffa0788d437f", "sighting_of_ref": "indicator--d52e7e30-b1e8-4682-a8fc-fd3caf03617e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1306e3a6-4f92-4d09-a6ba-9a9e4233f277", "sighting_of_ref": "indicator--d52e7e30-b1e8-4682-a8fc-fd3caf03617e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07cd9481-a4fb-4506-bf31-278cde64eca7", "sighting_of_ref": "indicator--22b86936-b872-4d21-8ff8-2dbae9c4bd57", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf90060b-316b-4b28-8d8c-10d4efcaadd9", "sighting_of_ref": "indicator--d5a39860-245e-4b35-a231-e72095489a26", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724547ed-5e5d-43d3-b060-fea6ccc37f1f", "sighting_of_ref": "indicator--d5a39860-245e-4b35-a231-e72095489a26", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2658684-46bf-486f-beed-d797851f8d86", "sighting_of_ref": "indicator--b29770da-6b2a-412e-a95d-fb9522ac3bc5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d8bb67-77d2-4f71-98b9-19f18f78f308", "sighting_of_ref": "indicator--51f37b65-2086-4505-9a5c-279aea5fd960", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1f5a2e-0da3-4af3-a434-7af2788b8d1a", "sighting_of_ref": "indicator--d5fc904a-b237-4859-9c63-cf5246a1b7b3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb85701-98aa-4a29-8b61-38573ebda364", "sighting_of_ref": "indicator--7292cc96-7da5-4e78-a329-768b280c5b4d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9492f0a5-c939-4624-bafd-bc8c05837e15", "sighting_of_ref": "indicator--ed7c4419-de63-47b1-9a06-d16fadcadbae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c53b9ef-bb96-4fbd-acb0-b2a1fd528725", "sighting_of_ref": "indicator--302d9e5c-345a-4538-b016-a1a9d516701e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1cc2f3c-c283-46cf-b6f3-b4a408f4b1c4", "sighting_of_ref": "indicator--302d9e5c-345a-4538-b016-a1a9d516701e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c79e85a-e8f5-473e-b2c6-199f7643db7e", "sighting_of_ref": "indicator--60058903-a874-4603-815b-3a61101abf28", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c39fde1-54fd-4473-877a-c57254df6a1e", "sighting_of_ref": "indicator--08207eea-d36d-4750-85e7-e364845066d8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1556470a-2592-4042-ae05-b3296bbee4e0", "sighting_of_ref": "indicator--d00d8f4b-bc09-4a58-bce7-94eec6384bd8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c5b78c-3542-4b1d-a7bd-e384e57453c2", "sighting_of_ref": "indicator--ddaf20c0-89d3-419d-96df-c4f304c625f1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad1daff-fd04-4049-ab90-c31bfe4ead42", "sighting_of_ref": "indicator--9526c3a3-4afa-414e-949d-51449462f730", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52bed755-eb2e-4bad-a06e-d44976422e20", "sighting_of_ref": "indicator--a3a833f3-73d4-4e09-8a01-1b12d828d2ef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd6edbe-8916-47ff-8472-f0f4c09d0859", "sighting_of_ref": "indicator--53d66ebe-d27c-45cf-a241-e39c98b2ded9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6abebe19-1fcf-45b4-b8eb-5c68c7a9180b", "sighting_of_ref": "indicator--4415a384-8b06-4265-a611-77c26a3cf736", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93076d6-efee-4ba4-a1ca-cc4e0acded2e", "sighting_of_ref": "indicator--4279f8b5-68b7-46b9-af6a-8f5f6f551187", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a6c2ab-ea3d-4d87-b1f4-2f753746acb9", "sighting_of_ref": "indicator--4279f8b5-68b7-46b9-af6a-8f5f6f551187", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b2a1ef-5899-474f-8869-c68d11ea0995", "sighting_of_ref": "indicator--bec9bb61-d876-4a4d-8faa-cc4fe449ae90", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e1ccac-07a7-402a-bcc7-0118b2e85c03", "sighting_of_ref": "indicator--bec9bb61-d876-4a4d-8faa-cc4fe449ae90", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82bb37f2-39ff-4956-b8ee-c112ebf1b493", "sighting_of_ref": "indicator--33544155-763a-4b61-9c6a-b1d7df9de4ab", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded0726a-5395-45ac-87c9-5c4ff1dc165c", "sighting_of_ref": "indicator--5f8bd06f-c38a-4090-9042-fe8efd2a3092", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd7bc3cb-03f2-4086-b6fb-9c956588df88", "sighting_of_ref": "indicator--e8303def-996e-4f2d-beed-111e549fdfc4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b258e4d-5880-4ee1-957a-28071a0fd40b", "sighting_of_ref": "indicator--00f4356c-ec41-4008-8978-c2825c4c9da1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7e3b57-7bac-4c29-8c28-fe0990f85d3b", "sighting_of_ref": "indicator--bc4ab4b8-0f9c-46fd-84ac-314f90f1fa38", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e0ebb4-d8f0-4a59-94d9-9d326f8ea513", "sighting_of_ref": "indicator--835d83c4-ac37-422b-936b-17099cbcb9d8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ecf308a-2193-45c4-a787-1a84cc7100df", "sighting_of_ref": "indicator--9f77ae35-79aa-458b-8394-2688968ea875", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c1b969-cc6c-4630-a6f0-2fc43dac8fd7", "sighting_of_ref": "indicator--e296ca0d-09b1-4493-b499-e11460cb2226", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5085efe3-c9f9-4d8d-93bc-0f5ca4156de7", "sighting_of_ref": "indicator--9703c779-6836-465a-b243-8fef76912141", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ec9235-8b3e-4ef4-b4c5-1f3250a471d8", "sighting_of_ref": "indicator--67b834cd-8006-408a-af9e-337e032c23cd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0727f46d-0c0b-4f0b-a4b8-d52cd3ac054b", "sighting_of_ref": "indicator--67b834cd-8006-408a-af9e-337e032c23cd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e188d40c-2c0f-4e06-a3f8-21c3a32f6c2d", "sighting_of_ref": "indicator--2d153a6b-82ac-47e1-b307-245fd60fe370", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49209ce-e052-47a6-862d-a38e2e0beec6", "sighting_of_ref": "indicator--2d153a6b-82ac-47e1-b307-245fd60fe370", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0deee593-596d-4016-b02a-ad2b414ad279", "sighting_of_ref": "indicator--0ee303e6-2961-477c-8c15-00404a1fd207", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4930b9fd-fe9f-4f98-a3b2-43d22a946a24", "sighting_of_ref": "indicator--29889901-9c8f-4428-8aaa-149343814818", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6be9f44-0fc2-43b3-9360-3d14bda8a549", "sighting_of_ref": "indicator--0f06a467-7296-4a95-885c-e13a0f042fe7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1636cf-56c9-47db-8df6-222a3d0d1d0e", "sighting_of_ref": "indicator--0f06a467-7296-4a95-885c-e13a0f042fe7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca9e1c6-4923-4274-b4be-bdb60c4676fa", "sighting_of_ref": "indicator--bb98495b-7b96-4c77-9fa8-1c67c75db36f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb0cbd1-579a-4e2b-b8ed-c6cf8c4d7aa9", "sighting_of_ref": "indicator--6c317a16-4cd0-4692-aca9-608964ac9d6d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4510d0b6-7b9b-478d-bdf5-0102edc17ed8", "sighting_of_ref": "indicator--c9c72679-243c-47ca-b290-c7c4f3a63b43", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6278d1-9d84-4909-beea-7185ee3fb8d7", "sighting_of_ref": "indicator--c9c72679-243c-47ca-b290-c7c4f3a63b43", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11db5d72-3f4d-4eaf-a2c3-632c9bbfb9cd", "sighting_of_ref": "indicator--9da85ab8-da98-4600-923e-f54f288b6c60", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6592b22e-1fad-4297-bdab-a6bfdb872688", "sighting_of_ref": "indicator--35bb510b-2cca-42d5-9438-fa3f44969dd4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b2c140-e916-4494-ac56-4c4dd5c55c45", "sighting_of_ref": "indicator--ec71bad7-5173-4c53-b403-264666f6e09b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc36d265-031c-4068-8f65-5e4434b74b56", "sighting_of_ref": "indicator--ec71bad7-5173-4c53-b403-264666f6e09b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a77858c0-00e7-464a-b22c-3980838771f8", "sighting_of_ref": "indicator--d1655cf0-978f-40c4-9413-2a5d24aecd39", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d371166d-6b60-40bb-ac12-677543a7ddcc", "sighting_of_ref": "indicator--b62498a2-e58d-46b6-8a89-fee177b727a9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80794d24-1294-4a1a-9f8f-3f2062468d3a", "sighting_of_ref": "indicator--b62498a2-e58d-46b6-8a89-fee177b727a9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ad5911-e6d7-4870-9ad4-95c19a183171", "sighting_of_ref": "indicator--80c3d672-c673-41d7-b7df-0b7d413492cb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e0f7651-531e-4e36-aae2-0f1906ea8cf4", "sighting_of_ref": "indicator--982b696c-ee30-44ff-94c0-9df8d7f47f32", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734c9ff1-fa75-48b9-abf7-f72cc0d3e3b2", "sighting_of_ref": "indicator--982b696c-ee30-44ff-94c0-9df8d7f47f32", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d88d7d74-10d3-4a38-a702-aafaf0989f9c", "sighting_of_ref": "indicator--06af6305-cbfa-49bf-8b5c-66282d1f067e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95916aa7-de5e-45b4-9817-53c7d147ecc4", "sighting_of_ref": "indicator--06af6305-cbfa-49bf-8b5c-66282d1f067e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e55efd-0be0-4111-85f4-d97f7d50a820", "sighting_of_ref": "indicator--433c2f00-a5f0-496f-9b33-112e64167fa3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dacf4be6-2ccf-4ba1-9e4c-b8b606b88b54", "sighting_of_ref": "indicator--8b6ec643-14f4-448b-a7c0-f1ae627afcb9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48db00e7-1be6-4972-9fbf-68fad701e95a", "sighting_of_ref": "indicator--306d9327-5b45-4680-acf0-9458806de359", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0667ee1-e61b-4cbb-9261-f7cba2c855a8", "sighting_of_ref": "indicator--306d9327-5b45-4680-acf0-9458806de359", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf16e655-6ccc-483a-bfe8-3046200acbe5", "sighting_of_ref": "indicator--66a86814-e4d2-46cf-9a76-fbe2cdcbff50", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf5898c8-132c-4dbb-9f5b-d290d1e4c30c", "sighting_of_ref": "indicator--c3e59a5b-a363-4901-badb-17c14b9724e0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf01be1-8cb9-4ba1-9abb-91f72785dc2e", "sighting_of_ref": "indicator--c3e59a5b-a363-4901-badb-17c14b9724e0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c05ac5-c5e6-4be0-8f98-b96de005ef01", "sighting_of_ref": "indicator--0037c8e3-8d4f-4130-ba9b-aa58d9ccba50", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f35c97-4add-47cb-8832-4bc4a8a6e4fe", "sighting_of_ref": "indicator--357bc532-ea58-4c20-81c4-6d22dad977b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--580ffd4d-9396-463d-9b33-7c6041633e1d", "sighting_of_ref": "indicator--e3424daa-94ac-459f-acf1-429656ebcd4c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d844c348-3e76-4323-92ba-05416b5be9f0", "sighting_of_ref": "indicator--165b0377-b225-42a0-93e3-5530cca0dc07", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79bac360-48f7-40b9-8f34-a19cccde8190", "sighting_of_ref": "indicator--070a4e76-1ce5-45d7-9516-cdda3754b397", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c84177-483c-4a0f-ad93-fcaee65093de", "sighting_of_ref": "indicator--f51af7a0-0c42-407a-9273-e57340ad25a4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca58923-4ca9-44f9-b8ae-db06e141e118", "sighting_of_ref": "indicator--7e5d5fda-f297-4c45-af86-a027ac0d8c58", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820edefe-c3f3-4eae-8b41-5f983f25f593", "sighting_of_ref": "indicator--54c94d4f-90cc-4d92-bc31-402fe8ae03b8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63f3e4ea-8270-4e23-8d4d-c56a8106db6d", "sighting_of_ref": "indicator--ff4671f6-f2c2-46f0-80f7-1d5d51a4a387", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc98ddd-d43d-4201-88d4-e2783ae9f119", "sighting_of_ref": "indicator--ff4671f6-f2c2-46f0-80f7-1d5d51a4a387", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d267c0c3-584b-4000-8dcc-4d1dbf5c5e93", "sighting_of_ref": "indicator--c323ce7c-3a20-42e2-bd45-c70ca8111c14", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ebd311-590d-4eb7-a978-a3d6bc5f0daa", "sighting_of_ref": "indicator--f4ebef8d-eb9d-450c-9ef2-c6e1ab541bde", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b72f7d8-c32e-4e42-a06c-bc0bff64f021", "sighting_of_ref": "indicator--0c3dca1c-078b-4dd5-8d7a-331a601b9017", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41f4774-9a9d-4a91-8d07-677aa14e3d45", "sighting_of_ref": "indicator--54c4e230-bb4a-4789-9f0f-ff1dea587ebb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb8ede4-468e-4d4a-888a-7ba20ed7f01c", "sighting_of_ref": "indicator--54c4e230-bb4a-4789-9f0f-ff1dea587ebb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38386fd9-46fb-4f1f-90bb-cf52aa91e508", "sighting_of_ref": "indicator--97ac2c8e-a5ca-435d-9207-0948a1b960d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6315d912-8a52-4455-a5e4-5fd9ff5a9341", "sighting_of_ref": "indicator--e4bdd24d-0f75-4c74-ac08-739796f49aa4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a43f23-e7dc-4d7b-a406-21ffade904fe", "sighting_of_ref": "indicator--35b4549e-277e-405e-9da4-b69077903f21", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b7836a-e273-40f5-beb9-9a106bc4dd5d", "sighting_of_ref": "indicator--da83bba8-2ae8-498d-91e6-f3250e2d2fd2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd911cd9-97d7-40d4-8cf3-801bd3ed6147", "sighting_of_ref": "indicator--11cc006e-3e5c-40c1-9652-b33d2991ef06", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa689525-97ce-4c4b-81bf-a91dd6da55c6", "sighting_of_ref": "indicator--618a7f65-2a10-48c1-86f2-81382c32055d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f6aafa-8241-4aeb-b17e-ff5b177398ff", "sighting_of_ref": "indicator--618a7f65-2a10-48c1-86f2-81382c32055d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--245eeb84-63df-4320-891c-3277dc69e15d", "sighting_of_ref": "indicator--ef93edb5-70ba-429b-98db-33b69417105d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac4af41-975d-4b3e-93b5-2c27ea6e227a", "sighting_of_ref": "indicator--ef93edb5-70ba-429b-98db-33b69417105d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ed467d-b4b4-4bd3-8a61-5a1d39fe8b06", "sighting_of_ref": "indicator--e283b19f-0e72-49fe-a67c-e4d11d6fe024", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee719820-6377-40b6-9277-9b6e1af7f873", "sighting_of_ref": "indicator--e283b19f-0e72-49fe-a67c-e4d11d6fe024", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3deccb-adce-42c7-b86d-0c53fc30aba8", "sighting_of_ref": "indicator--d97fd57a-530c-418c-b8ae-b4edae409f34", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecda43f6-064d-4019-841e-18affd417214", "sighting_of_ref": "indicator--3eed2086-9d71-4342-ba0f-e076852731a6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037365aa-6092-49c7-b2e2-6124dd4c9110", "sighting_of_ref": "indicator--7fbb13e6-139a-4262-ba18-27a669227151", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e2f18b-4fd3-46fb-8dce-9a42ed01feef", "sighting_of_ref": "indicator--12ad3f88-2c0c-49c4-8857-b3afab2375f9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef76ff9d-ef9b-4937-ac80-08904efaf16f", "sighting_of_ref": "indicator--12ad3f88-2c0c-49c4-8857-b3afab2375f9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17257a06-6dda-4450-9757-26afd5e8df87", "sighting_of_ref": "indicator--1af0e345-69dd-46a8-8607-6c3ee71d07a0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b40bbf-dd5c-44ae-9e37-89f92a3c96aa", "sighting_of_ref": "indicator--87d08c03-6d72-4644-9e7d-60d705372bde", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9bb3412-0dc2-4421-8199-212fcaa6d9fb", "sighting_of_ref": "indicator--6bdcc072-59cc-4205-ab08-987249ea263a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283caff9-a760-4da2-a9f1-635155b6cb90", "sighting_of_ref": "indicator--6bdcc072-59cc-4205-ab08-987249ea263a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac510a0-28ba-46e4-952b-07d9e4ec8b40", "sighting_of_ref": "indicator--30b38ad8-a255-4942-83d6-8bf02317a3c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4204274-c629-41ed-8894-3f36ddf00b5b", "sighting_of_ref": "indicator--4505228e-d1aa-4075-8dbd-2a47704fcb99", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cda10dd-0ab6-42d2-a442-b189f8057474", "sighting_of_ref": "indicator--b15deef3-60ca-43bb-8aed-081eb85f7f57", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb8ed3f-1833-40c0-a8dd-f0d5aa99db84", "sighting_of_ref": "indicator--4deda907-fe8b-470b-972f-770dd667ac24", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0018cade-e7b0-4a31-95ac-c9c9fc4c8789", "sighting_of_ref": "indicator--c31dc8c9-d2fc-48f9-aa25-208acbac36d3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6650c19-7190-42cb-a90a-b76603b9d5ff", "sighting_of_ref": "indicator--035ac037-6c21-4be3-a3e1-3cf6015d7bcb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36542993-caef-45ee-b0db-02c71679536f", "sighting_of_ref": "indicator--035ac037-6c21-4be3-a3e1-3cf6015d7bcb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2164ed6-fc59-44f8-b5b4-8c1ddcf93bf3", "sighting_of_ref": "indicator--805d5b90-aa47-4efa-8445-b1152c2346fc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63993d38-5f90-4da1-a5d2-9b07ef6b9099", "sighting_of_ref": "indicator--400bfc5d-170b-4505-8626-fa33396469bb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3eba35-00ed-45c7-a467-9139e0eeaae5", "sighting_of_ref": "indicator--400bfc5d-170b-4505-8626-fa33396469bb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d27433-ff52-4102-8f82-c1e0f5fd9ab0", "sighting_of_ref": "indicator--a2028741-ff72-492e-af74-e3f607566cec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70b4655-8ef7-458d-b6c6-1eb06767abbe", "sighting_of_ref": "indicator--de1141f7-552b-4194-8916-29c834400b10", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e507da-889a-4d13-b6e9-1079ab187021", "sighting_of_ref": "indicator--6f5283c8-cba1-49da-8506-828a1b6b395d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13374681-c702-4795-850a-9b53ee4a70dc", "sighting_of_ref": "indicator--4d5ac7f0-3cd7-43b0-8163-498ce0b977e2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6379cc-bd96-400c-acb4-af0a2c321385", "sighting_of_ref": "indicator--fe8358a4-a04e-41cb-ab78-017f0a9b2dbd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3389891-1764-482a-81d0-763b3833f831", "sighting_of_ref": "indicator--36875a0a-608f-4449-8f4d-8614e75cfd0b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f872e500-fbfd-444b-8557-59193d43e434", "sighting_of_ref": "indicator--c40ee619-3418-4076-a857-d38b87e656da", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9e4e4e-1f4c-408a-aead-053c475da1fc", "sighting_of_ref": "indicator--40308e24-4b6d-4a17-8801-8e8799ab3c11", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ac4877-1e21-4b06-b02a-44e07cc7bb17", "sighting_of_ref": "indicator--39a964f6-cad7-4b4c-8c3f-2dcc5e4ffa7e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84702fbe-f88c-48cf-802c-bc036610ce07", "sighting_of_ref": "indicator--11f1b8e0-c2fa-4886-9610-106909bf4ebe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1ae957-edfa-4d86-8dda-aad508e77c03", "sighting_of_ref": "indicator--c0feb2b9-e878-4463-8834-1bfa812683ce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72076514-2c81-416d-801e-d76616e27d3c", "sighting_of_ref": "indicator--03a59eea-26bc-49f1-8b89-78b57de534e8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b0f252-4e22-49a0-b4ca-f0c387a04091", "sighting_of_ref": "indicator--06ac22e2-34fa-4422-b875-3510decef9e4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6376bb85-5c50-4a97-bdb6-2ba02a8202b9", "sighting_of_ref": "indicator--87f7d5ec-decf-48eb-9727-0625c8f7a7cb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56ab13d-8373-4e2b-93ab-c21e9dd8cb67", "sighting_of_ref": "indicator--87f7d5ec-decf-48eb-9727-0625c8f7a7cb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe44e4d1-45be-4a87-afad-f9e2e19f2326", "sighting_of_ref": "indicator--584e145a-f26f-4628-bbc2-36357ab82015", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499e6696-1f34-434c-8e92-d14e18053ba1", "sighting_of_ref": "indicator--c08b0608-16cd-416b-b180-cbb051c28bf1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e3d505-582d-42ed-b21d-ae6523be08e2", "sighting_of_ref": "indicator--bdf4fb56-a8ae-457e-be2d-ba2053abf2a9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--164a6fe9-1c73-49ee-ab80-c07c4e871a04", "sighting_of_ref": "indicator--0d4c296a-3263-4dae-bf56-ea902d10cf64", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b72c8808-e600-4126-9d34-a6fa0878d015", "sighting_of_ref": "indicator--51faaa2e-b145-4949-be77-7e7e31f443c0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c69ff5-75bd-422e-9fc5-745047e3faaf", "sighting_of_ref": "indicator--436eea2f-dc2e-4a11-9a05-49d5b50d0c49", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ef671e-b810-4e81-9789-5c48efdff10e", "sighting_of_ref": "indicator--886a668b-3c84-4372-825e-cb1a273540fb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeca52f4-1870-4e53-ae41-cbdcc9eed9dc", "sighting_of_ref": "indicator--bcfa3cfd-ed40-4f10-a1fa-8dfdafcd34ac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ff66d3-41cc-473b-b724-a60eb5447e19", "sighting_of_ref": "indicator--dbafe3ea-ae7b-49db-8593-5fe132c6dc9b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ede4da-7603-41fc-8e21-bba1d0aad1d5", "sighting_of_ref": "indicator--b300b51b-8988-4c99-90df-a75ad4cee0ba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450a3d68-6ef6-4f2b-9949-199ebf46f53b", "sighting_of_ref": "indicator--95999f08-dba0-40a4-9347-3a548193171d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af566313-8edc-4f58-ae48-46d66026aefa", "sighting_of_ref": "indicator--391913ef-4a6d-4cb8-bd03-f80b43048311", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3d46f0-230d-41a5-9304-005a64699aa0", "sighting_of_ref": "indicator--ee835cb3-cf10-4cd9-bbbd-6fb4ef11766c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9be06c-6676-4983-8f88-4d0ee6df6e4b", "sighting_of_ref": "indicator--ee835cb3-cf10-4cd9-bbbd-6fb4ef11766c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1d408d-eb67-42f2-a560-5e017df4034e", "sighting_of_ref": "indicator--3b5c40e1-af9b-4fcd-a6b3-f1d94dcf7cdb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11239e4c-9f41-4da1-a774-2e7b6772e3e9", "sighting_of_ref": "indicator--fb3ea852-0085-4b52-829d-4d78cc0edc4c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30e98bd-799c-45fe-a0cc-5d156607bbfe", "sighting_of_ref": "indicator--f08f18a5-4df0-4475-b790-8e28ad9882f8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e710cc0f-7ce3-4a62-918c-42f7c5e33e2f", "sighting_of_ref": "indicator--3a7dc041-aa8e-4887-be76-c759835516c1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc7a78f-d033-4033-ad75-9d6e2c3a12a8", "sighting_of_ref": "indicator--3a7dc041-aa8e-4887-be76-c759835516c1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc067b6a-ae4f-4cdf-8f1b-ce60b8eee532", "sighting_of_ref": "indicator--3a404c47-bbc2-4ffb-94c6-067c3d7c8197", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7699e064-ce60-4ac9-b98e-7042efdb8cf9", "sighting_of_ref": "indicator--71c21b20-ccc1-4f63-9509-23b6fd9b6f01", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd3c85b-97be-4a7b-884e-10495fcc17a8", "sighting_of_ref": "indicator--76f25caa-4e7b-4ac9-91cc-838aed0acb42", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f10c4ab1-8fb0-4226-8177-45377f1046ff", "sighting_of_ref": "indicator--5eae141f-1a01-4a1f-9a6c-e1cacc0518d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b1372d-8de3-4657-b928-b93041332ef2", "sighting_of_ref": "indicator--a5084f77-3aa5-4bb4-a86d-9704e86c99a4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b23b257-56b8-4d59-a213-236cb67fb52b", "sighting_of_ref": "indicator--2cabb147-f24c-4bc9-ab09-cc1bf80ded1c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0012f062-9c19-4543-a9cf-6748e1175d80", "sighting_of_ref": "indicator--f26bf892-fc19-4bd2-a44f-8fb4113c6bc7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e98ed33c-21ad-4eb1-9ae5-ff4bdb69e341", "sighting_of_ref": "indicator--ebbbabcb-8067-4c60-8824-3690bb4cf5dc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03d16ce-efb0-4d0e-8589-c896fabd8c4b", "sighting_of_ref": "indicator--452297d8-62ac-4447-a70e-3f9ed32a1177", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18bfc3de-0224-4c53-9b47-09e5844d7ea5", "sighting_of_ref": "indicator--f373b9c7-4080-41d2-b75d-e20f44753e35", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5d67e2-31ff-4b27-bc0a-2f58bbf86be4", "sighting_of_ref": "indicator--f373b9c7-4080-41d2-b75d-e20f44753e35", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808e4d1a-f7a9-48d8-acd5-c1b7c6f55564", "sighting_of_ref": "indicator--2e73fec2-ca10-42d7-ba6c-21634034cde6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf80266-6568-413b-910e-ace5e4dd2a9a", "sighting_of_ref": "indicator--b0a26e4f-344c-422a-8a0f-7ce89f4e37d9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff86ca1-f7d7-445f-be3e-f080a2d620ae", "sighting_of_ref": "indicator--3093bf31-249e-4e45-b7ef-b256df2ebfb1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68fcc9a-5223-4f09-97de-44fa1a74d3f9", "sighting_of_ref": "indicator--af661dfd-83a8-4a79-b4e9-4f35ee86cf63", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a76dec-9ab5-4c13-9af3-ab58a5d0b2eb", "sighting_of_ref": "indicator--c12b9728-b552-480f-957e-1ae9fb7bc4f4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a664a14-f1d4-4a17-9c90-73d1fabf6097", "sighting_of_ref": "indicator--c12b9728-b552-480f-957e-1ae9fb7bc4f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab26d22-95bb-4326-b744-561fdaf053d8", "sighting_of_ref": "indicator--5f2780b4-9ad6-449a-9fde-54b72b9821de", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471f4c85-2918-4e58-a602-8a3a7c3ca2cc", "sighting_of_ref": "indicator--68c39e2b-5548-46e1-9d92-ec5d74226d18", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4453f2f-e471-48d6-8b87-91847f18cb08", "sighting_of_ref": "indicator--a8d56223-2bec-481f-9b31-bf6ccc7c4b54", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c048b9e-ea4a-481b-8fbc-11baeb605c07", "sighting_of_ref": "indicator--cf7eb801-b9a2-430e-b9f3-0bd552ed631b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61cf8304-d96d-4463-bfb8-349a2306f6cb", "sighting_of_ref": "indicator--d6db1448-93be-44ac-8b4a-013e5324dccd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6836c3c-aebc-4a28-a26e-73acbeaefca1", "sighting_of_ref": "indicator--50e6e3ad-7e80-4f1a-873f-ec351e8d9b43", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64dcd8e7-c974-4153-a74e-94950e1dadfc", "sighting_of_ref": "indicator--c4e21e09-6e75-4761-a2fb-e307c3db4b20", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be6cf74-692b-44b0-8515-730196dc3d55", "sighting_of_ref": "indicator--c4e21e09-6e75-4761-a2fb-e307c3db4b20", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446962d0-6376-41a6-80f0-53e9614d2dc7", "sighting_of_ref": "indicator--b28b8849-7e12-4034-b855-7082655a3e84", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5515a4-e9c1-40a7-b05b-47257258c35d", "sighting_of_ref": "indicator--a3d7c2f9-b36a-42e0-9eac-f1de7014ced5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4cd093-e390-44c4-abe2-a537c4139e07", "sighting_of_ref": "indicator--a3d7c2f9-b36a-42e0-9eac-f1de7014ced5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42633c0-8187-4037-ab73-af34d8c5f017", "sighting_of_ref": "indicator--c9ff3850-eb27-4547-a62b-1a7fbe4bb5a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc600bc-9f5b-4356-a0ef-e7b21cd23f8a", "sighting_of_ref": "indicator--98853153-fb59-4d5b-8b40-cac42b709cb6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e02904-cae2-405f-aa34-84a9b4b82904", "sighting_of_ref": "indicator--e9500cf2-d4ac-4f31-bbd8-ca87bc4d7446", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3b3c25-52f3-430c-81bc-2c2e7ebd18d7", "sighting_of_ref": "indicator--e9500cf2-d4ac-4f31-bbd8-ca87bc4d7446", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e5f6e2c-32ad-4e70-ac53-3ee9ad38106a", "sighting_of_ref": "indicator--68626521-e6a7-44d8-ae32-9b8371f39d71", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5355e494-8299-42a5-b191-146b8f5d355d", "sighting_of_ref": "indicator--68626521-e6a7-44d8-ae32-9b8371f39d71", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575322c0-ab56-46e3-9add-fea6ff9b50db", "sighting_of_ref": "indicator--17c2bf6b-77cf-4c12-869c-c7240fab6223", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9b37a1-5513-4d8b-9d17-24ba6c7f7981", "sighting_of_ref": "indicator--bc74c0bc-27a6-4014-b0f9-2694e083ee9d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0485c84-3b41-4ef3-99e3-d2695cf26910", "sighting_of_ref": "indicator--b948ffa8-dadd-419c-9429-da018a635ab7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd9b3db-6ac8-4341-bdf6-76fc31530fc9", "sighting_of_ref": "indicator--48eeb957-98e6-4858-8db9-e11febd42873", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e321b738-8d3b-468c-b9fc-297a414cf450", "sighting_of_ref": "indicator--48eeb957-98e6-4858-8db9-e11febd42873", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997f3bd5-4a56-46d8-a559-792e12af963c", "sighting_of_ref": "indicator--92cb3669-280e-4650-a4b5-97a0babff01e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e1f8ff-c3b0-46b7-8a41-505cb6897343", "sighting_of_ref": "indicator--fdfeaff3-7eab-46f4-9906-65807e50b76b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ec889c-a8f8-43bf-8073-e209f0e79fe6", "sighting_of_ref": "indicator--9638c9f6-e8c2-4c28-a852-7c2a2257827b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d4b201-422c-44d8-b9c2-8973b8a19cb9", "sighting_of_ref": "indicator--e03fdb59-268d-49c3-b7f4-071f826c37d5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbba7cae-f2a6-42f2-b2e6-68fb530c3395", "sighting_of_ref": "indicator--e03fdb59-268d-49c3-b7f4-071f826c37d5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b3a1b1-bfa4-4b57-8c20-b8cd8173a40c", "sighting_of_ref": "indicator--f7a7174e-4026-4ecb-9af4-bfecac2005ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cde593e-a05b-474d-8849-c11817483eea", "sighting_of_ref": "indicator--950aa9fe-9a3c-4e6b-a36e-b950e9184533", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f33e5beb-0947-436c-a6f9-a76164df0325", "sighting_of_ref": "indicator--0f6d1722-eef9-4641-b3ab-345354d10df7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d880a23d-6b55-440e-96d4-a5b3578e139e", "sighting_of_ref": "indicator--208145d8-6b3e-461c-b736-323e6d869224", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3192e950-5829-45e1-a446-1506b8e3a6d6", "sighting_of_ref": "indicator--deb0f790-9e76-41eb-aaaf-38ef97b127d4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f679d73d-86db-4c38-b17a-2634678b9837", "sighting_of_ref": "indicator--db6a837b-aa62-423a-8ecc-11108cbca306", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8ac149-acb3-46df-8d11-c02b54abaf90", "sighting_of_ref": "indicator--19a378e2-125a-49bf-9968-c6472a33dae4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa32726e-5adc-49e9-9c06-36c6d78b1e9d", "sighting_of_ref": "indicator--ecd8272c-3f99-4a11-a73c-060e7023a8b6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbccc262-6e4d-4bda-9e91-4fbb731e2e16", "sighting_of_ref": "indicator--235cfab9-e34c-42f7-832b-3006d953454c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1110bb-b799-4134-bc44-ca40e505a86a", "sighting_of_ref": "indicator--5b314c64-a749-45dc-8d47-e46a983b76f2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a36d54f-d629-40a5-a922-d153cd9f2780", "sighting_of_ref": "indicator--5b314c64-a749-45dc-8d47-e46a983b76f2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f27255-bc69-4a65-9d26-bd0b070cfa4a", "sighting_of_ref": "indicator--aa756984-5bdd-4baf-bac9-804afb0b4fee", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d1783d7-021e-453e-a618-f5b65b168c26", "sighting_of_ref": "indicator--6dec5b65-5e07-478f-824e-f2631850b0e7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ef8b34-4d37-4ed9-9d8d-61e76e4188df", "sighting_of_ref": "indicator--eb3cc186-2f4e-4de9-8e62-cef78c888ddc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7460e45-79bb-4f7d-ba5c-6aa6eb3c7918", "sighting_of_ref": "indicator--0215796b-c8be-4b9c-abc7-4987170fda8d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1437c1-9e73-402e-80a9-aa124279447f", "sighting_of_ref": "indicator--82cff1cd-7962-486d-90ba-04b453fd38a2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13fd03c8-c213-4089-b994-d8be69d7f123", "sighting_of_ref": "indicator--c9ab76ec-fd9d-4ad0-a6de-36644acfd642", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5261652-09a9-44e5-b018-4e2c365b16ff", "sighting_of_ref": "indicator--5de59d2c-8c68-4e77-9b77-2502784a4c3f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8c74fe-8fab-4a17-923b-23625acb85f6", "sighting_of_ref": "indicator--408afffa-e0ec-468e-b649-1710fca3018c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6708d4d6-eba8-40d5-927a-a62a56baf944", "sighting_of_ref": "indicator--c8caaf93-db9b-4e87-9fcc-d001c8b19efd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1039d438-3492-4b78-8a3c-8469fc1c860a", "sighting_of_ref": "indicator--caf77915-1944-475f-852c-197d038a7e9c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6995ca-15b9-46cd-8c3d-83a4d08e21db", "sighting_of_ref": "indicator--3f68d885-fbfe-4904-ba40-653ae9446ee4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe05ac4-b90e-48c8-a253-5ec7c53b1738", "sighting_of_ref": "indicator--2410e893-9b51-46e1-a34d-53afe81aeba5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ab35c7-725e-40f0-8964-fc2544e202f9", "sighting_of_ref": "indicator--b465e900-53e3-47ff-86c2-b0b167bffc3e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733783f7-ee4c-4857-a9d5-e9b24509dc37", "sighting_of_ref": "indicator--8687e21d-533c-4e6d-b778-c7a23c2c742f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c04968-6a1f-458f-93b8-c4c038c8ee2c", "sighting_of_ref": "indicator--cb13e3c6-b0c8-4565-84c6-e6c7a7211e5d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ed0767-d9d2-4b06-ac32-f9c16323c99d", "sighting_of_ref": "indicator--bd176a8e-c341-40b9-a391-9e73de09a0a5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5446527-8981-4e3d-bb9c-7e50eb8fb17c", "sighting_of_ref": "indicator--a2a9cba1-de9e-4be8-9ba2-b416ea976de7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d757e2-372d-4142-90c9-90dcc01d248b", "sighting_of_ref": "indicator--a4259ea3-79f9-44fd-8082-cead9c5dcbaf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--568574d1-ca7e-4dd9-9606-0159937a594f", "sighting_of_ref": "indicator--d21ee5bb-acad-402e-8cdb-d6573c7aec0d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6819623e-6082-4d95-a9ef-82a6aca675c5", "sighting_of_ref": "indicator--3bc23c47-1360-4284-9b1f-46ce5be565d2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48fc6ce-6234-47a5-8600-00731aeef8e9", "sighting_of_ref": "indicator--6ca9a9f8-96e3-4318-ab3f-398ac311d0d5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71f6c04-dc61-47bb-b7f9-bda0a56f38ff", "sighting_of_ref": "indicator--28485764-c768-48ed-acd2-09df6ad3d7d6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--362412cf-fabf-4ddb-91a2-8ae5d7a56010", "sighting_of_ref": "indicator--2387c6d6-3113-494c-9f65-30b93fbe34d2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87262fc3-e171-4a78-94b1-41870d85306f", "sighting_of_ref": "indicator--b62ac6f3-2009-4c01-81a7-fe2125a5f8f0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de7c062-5e4b-4d83-9c2a-3a0625d54fbe", "sighting_of_ref": "indicator--0cfa6b4e-963c-432e-9dda-21fb5f0b4897", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9bc6ff1-a074-4e67-93ef-ba35c01e875f", "sighting_of_ref": "indicator--11576e5a-d158-4746-99c7-45a95ddb905e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792ac25c-e2cb-4d2c-834a-39ae8a88052a", "sighting_of_ref": "indicator--666dd8d9-f339-48ad-bad6-2052b59e2a57", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538121fc-ec8f-46bb-9c26-ce39d7b85830", "sighting_of_ref": "indicator--2da329b6-a46e-44e8-8cc5-7f180cf3d7d5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272f0276-0489-43fe-a81d-fefde423dd50", "sighting_of_ref": "indicator--2d838ab9-b58b-4405-a7ef-304e134ba46d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5970a05-de42-4e2a-bcba-80d5fcc2ba10", "sighting_of_ref": "indicator--c208c120-23c9-4985-89fd-2fbab4bc70ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bab19b9-9aa8-43a9-b2a1-f7468cf315e4", "sighting_of_ref": "indicator--0e077968-1775-4643-bdf6-739e32d1bfe5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c08b8b-8449-4fe4-a05c-96fd10c9e3c9", "sighting_of_ref": "indicator--e3b3c2ca-9598-4c20-ae8c-8884e38b130c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c625b8-1c0c-43c5-8fbf-29e6a6ce7d81", "sighting_of_ref": "indicator--92b144a8-5c3c-47ad-927a-e26e4c803137", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea534bed-d187-4a8f-93e2-86bec1afc90a", "sighting_of_ref": "indicator--bf32aea1-33c3-4ebc-862c-2b5cecb8553f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1121a42c-6167-4a80-91fb-d57b3310ca30", "sighting_of_ref": "indicator--60cc689a-c4f1-4ff9-aa6f-03eade3ee33b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc6632c-d7b8-4ee6-8326-c1df6a3900b6", "sighting_of_ref": "indicator--89d9f145-b5cb-4963-b582-855857f88236", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e1f0f4-3a8e-4f7d-bb71-ee1d507a331e", "sighting_of_ref": "indicator--46deaf34-189a-4aae-b73f-9130f550137d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e692ee-f19d-48e4-b9d2-eacafd5abad1", "sighting_of_ref": "indicator--1c8788e0-d5d5-40f6-a52c-a0ffaf5e6bea", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9edb1cb9-1999-4bd3-92d3-6954f73cd53d", "sighting_of_ref": "indicator--1c8788e0-d5d5-40f6-a52c-a0ffaf5e6bea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef7d54f-1882-48a2-b650-539dd0520a24", "sighting_of_ref": "indicator--5e56190d-e7f3-477c-9d23-bfcb275ef06b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d9fe4f-7df6-43c5-ba67-041856091256", "sighting_of_ref": "indicator--e723d7bd-5829-4e97-8859-139321c381a6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aaf99cc-50d6-4707-9927-8a4d90e8da76", "sighting_of_ref": "indicator--4bc6071f-e9a3-4879-a6a2-0bcfbe5161d7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f51a8b-ae3b-44aa-8c9d-cf9c018ad6ec", "sighting_of_ref": "indicator--7c9b9e5e-cd14-4ee7-bec9-38ad61edc2f3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04942a31-ff54-4753-bef0-1ba85912da4f", "sighting_of_ref": "indicator--5eb5b67f-c989-4219-bc04-225283c9654d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac27e45-573a-438b-b764-7aeda5663e12", "sighting_of_ref": "indicator--7385c375-7736-4508-974a-bf2ef9c360ee", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b13a01-1416-49ff-8b39-817522fec383", "sighting_of_ref": "indicator--b3985b6e-f25c-473b-a6d1-4eca2871f14a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12aeee0d-6f4d-4b56-8f95-012888fc8519", "sighting_of_ref": "indicator--1a9ea21a-e1d3-4e92-aae0-f1a004098f20", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc6b6228-a182-469e-9051-c6fd7ee787f9", "sighting_of_ref": "indicator--5916d040-b92b-490c-adef-1ad1681d0d85", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b332538c-bc23-43c4-88c7-53ef21d46f87", "sighting_of_ref": "indicator--4cb581e3-7524-4ae4-b27a-59b9d989c16f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e689bfc6-40c4-4c08-b490-80a001887a87", "sighting_of_ref": "indicator--923e078f-095a-4cd3-9e7e-5ab406a2537f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a64686c-1e78-4982-bc80-d158a6efdadd", "sighting_of_ref": "indicator--b21bff73-0a02-4b23-b29c-9fc6dc920501", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ee27c9-980e-4789-9763-2c60aa5548a2", "sighting_of_ref": "indicator--8648cd52-7347-43fe-b142-427546a76dad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37126903-c0a5-4cb7-bb47-6b1de93ff560", "sighting_of_ref": "indicator--b7736651-c0b4-4b93-96d0-3ecc861eaed7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fcd81bd-e329-463b-abac-e742addbec26", "sighting_of_ref": "indicator--1cfa7586-eeff-436b-9296-8670cd1b86ca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdeb1d85-e2d3-4933-8ba4-93290b748a4a", "sighting_of_ref": "indicator--2eaff579-8d89-4db3-9e22-b1ea36ee203a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fea9a93-e573-46c7-9407-30b53cced088", "sighting_of_ref": "indicator--5581c1dc-350e-4a5a-91d1-9b51543a3514", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d8d9e2-daf2-4d42-bde7-c9c2ad4dc8ac", "sighting_of_ref": "indicator--5581c1dc-350e-4a5a-91d1-9b51543a3514", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d9f8f4-019d-4355-b461-60d889dc6257", "sighting_of_ref": "indicator--b5a8385a-a85f-4610-be56-ef960bfdda20", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9432073c-cbc3-4e3e-b941-93d4e74b62dd", "sighting_of_ref": "indicator--b5a8385a-a85f-4610-be56-ef960bfdda20", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ff3744-e1f9-4166-b6bf-49d9f4530f63", "sighting_of_ref": "indicator--5f402078-cc9d-40fa-ab9f-76b668b3ed58", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a15e6ed-62f0-4bc3-ac14-47a29bdda35a", "sighting_of_ref": "indicator--5f402078-cc9d-40fa-ab9f-76b668b3ed58", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed40b51-f577-4713-b00f-9959a8b0d829", "sighting_of_ref": "indicator--5a591125-0461-4cc8-98f2-8b80b4ef6dc0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f01a79-0b5a-4a88-b30f-2c69a512965e", "sighting_of_ref": "indicator--0d7fb51a-2422-4957-83a3-c231c3110a11", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d35e779-ad12-428a-be51-ed8354162755", "sighting_of_ref": "indicator--0d7fb51a-2422-4957-83a3-c231c3110a11", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51066fde-2601-4da5-a471-d82e828d2274", "sighting_of_ref": "indicator--bc073094-01f9-427b-9499-c06e431300f6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b0715f-82d2-4e9b-a856-28e2e28b007b", "sighting_of_ref": "indicator--6b94139d-a1c1-4a4a-bbd7-b7f848e05ceb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f959f82f-bc1e-4e94-abaa-08204e4d54d0", "sighting_of_ref": "indicator--d9aa3df0-6952-4a47-9a8a-87049b387612", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7422f52f-9721-4342-be43-2c6bb873b8d0", "sighting_of_ref": "indicator--014dc1f5-5ea0-477f-984e-abe217cc914e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385fca05-9be1-484e-8946-bd704fa3adde", "sighting_of_ref": "indicator--4ea2982b-10ef-48cc-8c3f-4d221a704004", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf233d3-709d-41f7-8f01-dd32ff87c775", "sighting_of_ref": "indicator--4ea2982b-10ef-48cc-8c3f-4d221a704004", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8bb3ce2-1467-4ef9-87b9-7e96f495c678", "sighting_of_ref": "indicator--70c6fbf8-c47b-4ceb-a621-8a394482123c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b42cad-a126-40d9-9bfb-3db48a48b8fb", "sighting_of_ref": "indicator--42ee13b9-1107-404c-8936-a3ce541e4d80", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98bcac5-e46a-408e-9f4f-2e31d4c0eaea", "sighting_of_ref": "indicator--1e824327-c64b-49a3-bf50-10e7bd069592", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a4ddf7-5aab-458c-876d-491c3018f719", "sighting_of_ref": "indicator--87ce73b6-45d9-43d7-9823-2413d2cf934f", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02fcc36e-dd74-49b7-afde-17ccdb8c504d", "sighting_of_ref": "indicator--8b6665fb-3a9e-4148-8a03-be3432f74c3c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ffbda8-b578-4add-bcf7-545cef6d3c8b", "sighting_of_ref": "indicator--99bdfa5b-94e1-4d67-bc43-de70422b1f84", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4386cc81-4e14-4aa9-b79d-1d25d26b851a", "sighting_of_ref": "indicator--f93f5a84-7070-4dbc-b32d-2ae3c4fa1eca", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f5f180-0e70-420b-90ff-d52355d1ac36", "sighting_of_ref": "indicator--f93f5a84-7070-4dbc-b32d-2ae3c4fa1eca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f4b4d28-f9ac-4098-9d8b-606cbd765c8f", "sighting_of_ref": "indicator--32706951-ab15-4459-9d30-5680d34b5b9d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f5f17b-49a6-45be-8dd7-9d224110517e", "sighting_of_ref": "indicator--32706951-ab15-4459-9d30-5680d34b5b9d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6cbed2-aaf5-4064-90d4-e96afc728df7", "sighting_of_ref": "indicator--43d6092d-744e-4aa0-9a23-94d2b535a101", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de2b1051-2b41-44a0-ac48-df77be82f07b", "sighting_of_ref": "indicator--7906b742-ecb3-4782-9315-947ff322a042", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5597f710-9986-4334-af06-50917afd441f", "sighting_of_ref": "indicator--a99c1c6a-2b2f-4358-9394-a1c026ccac2a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b31d5f-bda4-4973-8ade-14a69eba51c0", "sighting_of_ref": "indicator--2e0e4cdb-f819-4c82-a085-7b87f1a5d9e1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55e500c-426c-459c-b888-ac945f6b6e83", "sighting_of_ref": "indicator--84ca4b55-8060-49a8-bff7-9bdcdc2b5083", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097bb9cf-17b7-4921-9f97-41da7f26eeaa", "sighting_of_ref": "indicator--84ca4b55-8060-49a8-bff7-9bdcdc2b5083", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328c455a-5b4a-4d1e-a386-36dc9bf65a40", "sighting_of_ref": "indicator--e9deee8c-f52d-40cd-bc9f-87bd786cedb0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c32a44c-76f3-4052-99b6-678845664048", "sighting_of_ref": "indicator--47dd2209-3a6f-43e1-812b-713c312662d6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56da3b49-3c6f-45fc-8303-32561e358a1a", "sighting_of_ref": "indicator--cdc281a0-110f-405f-8abf-44b714f1a186", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752abc0e-80bd-40f6-98c6-0adc8124c0a3", "sighting_of_ref": "indicator--1e005f82-a2e1-49c6-a777-b1386df944b2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5b760e-e118-4035-8f36-b000598d4aee", "sighting_of_ref": "indicator--1e005f82-a2e1-49c6-a777-b1386df944b2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62898d36-a745-4ed3-8203-efb13e227fe0", "sighting_of_ref": "indicator--faa874b3-d34a-4a6a-900e-2e0bb1862065", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92451ff-8ad8-4157-a380-7469e9257859", "sighting_of_ref": "indicator--7b644c06-50d3-4c81-b08e-bf3c0eb91db5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a19fa4-3513-46c1-9c5d-c878cc6cba8c", "sighting_of_ref": "indicator--cba4b1a9-4830-4a90-82d1-0d65f8724a3a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a78a326-98ef-4c9c-9774-1e5f364b4efa", "sighting_of_ref": "indicator--cba4b1a9-4830-4a90-82d1-0d65f8724a3a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ad36bd-11ff-4d46-a5a6-2758f3ab7aa4", "sighting_of_ref": "indicator--0f8b1f95-18c1-4e9e-b899-be321b77d4d4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27253415-f1f7-4512-a499-ed5e275fbc98", "sighting_of_ref": "indicator--bf6b449f-929d-49fc-852c-d6eef8bd310a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac51a457-cba4-4ac8-ae1a-8498fb56718d", "sighting_of_ref": "indicator--a0d0cd98-411b-496e-ac17-40c720579592", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba59828-8be4-4e06-b182-b0f2c5363dc3", "sighting_of_ref": "indicator--a0d0cd98-411b-496e-ac17-40c720579592", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4835b9a5-4c72-42d7-9d7d-2ce5d6eec2dc", "sighting_of_ref": "indicator--ffc0f518-62e8-40cc-957d-6038a08bbb7a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ab931b-e887-4b60-8a98-03a80de18003", "sighting_of_ref": "indicator--ffc0f518-62e8-40cc-957d-6038a08bbb7a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f84105-1555-4dbe-923a-61d1bbc01ebf", "sighting_of_ref": "indicator--b67b5d7d-a823-4b05-818f-07c182694fd0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--956e4df2-014a-410f-8361-674d220a5765", "sighting_of_ref": "indicator--b67b5d7d-a823-4b05-818f-07c182694fd0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffbe962c-8584-49d8-8950-90437c850d5b", "sighting_of_ref": "indicator--96c4a4aa-5481-4616-ad90-dda5ddb45c1e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97dd627c-1a79-4257-94c6-a762b59eef8e", "sighting_of_ref": "indicator--96c4a4aa-5481-4616-ad90-dda5ddb45c1e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb1a40b-4dd2-4fea-8a28-ce4e666ee382", "sighting_of_ref": "indicator--970a272e-52a2-46be-99ae-56cc87d23f59", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27abdaa-d6b7-4d26-b482-ade5d6449097", "sighting_of_ref": "indicator--970a272e-52a2-46be-99ae-56cc87d23f59", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc5fc43-160e-43a8-a3aa-37836cd13a36", "sighting_of_ref": "indicator--d1bcb345-02db-4f68-aef5-517663189ec5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--482744bb-246c-4205-9eea-beace11e8305", "sighting_of_ref": "indicator--d1bcb345-02db-4f68-aef5-517663189ec5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025dd346-0814-496c-8565-e5b048a5e66d", "sighting_of_ref": "indicator--674304f0-fe7f-4b1c-ab73-47052f86d039", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d9d338-cae1-4f09-8acc-094762e77097", "sighting_of_ref": "indicator--674304f0-fe7f-4b1c-ab73-47052f86d039", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050df01c-a749-48a4-9644-520895c11de1", "sighting_of_ref": "indicator--4d063a0f-a183-42d6-9a64-eaaabe63d07e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa9e006-1c77-4b78-981a-76bff3372b5c", "sighting_of_ref": "indicator--4d063a0f-a183-42d6-9a64-eaaabe63d07e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500dba0b-0240-47d5-98a3-69be017b6292", "sighting_of_ref": "indicator--0e1a610d-ba10-4783-bb5a-db23ad4ead2c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a8b963-0392-4b46-891f-1abfbcc17b43", "sighting_of_ref": "indicator--0e1a610d-ba10-4783-bb5a-db23ad4ead2c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55a30b1-e11e-4f1f-9e07-2ffa838e0e5e", "sighting_of_ref": "indicator--96935c6c-42ab-4a72-9de5-c8d3ebd044ec", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb21390-cfb1-44e1-9509-9b7e998b0a37", "sighting_of_ref": "indicator--96935c6c-42ab-4a72-9de5-c8d3ebd044ec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d4cf3a-c50b-40d7-b682-2ee4eac05faa", "sighting_of_ref": "indicator--f0d0b938-86c3-4483-84af-f0ce37136da7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd50bef-3b0d-434b-b024-a6c936508a72", "sighting_of_ref": "indicator--f0d0b938-86c3-4483-84af-f0ce37136da7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60135a85-8ed5-4a74-b50c-ee93c889b315", "sighting_of_ref": "indicator--55a21b46-dc47-43f3-a8d1-ca29d1ee223b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d3cdf3-b4d1-4b8a-81b7-a7d433a1ff1d", "sighting_of_ref": "indicator--55a21b46-dc47-43f3-a8d1-ca29d1ee223b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165b7ec0-ebeb-45fd-824e-4d57d53d4f46", "sighting_of_ref": "indicator--39110716-7f7e-4498-b964-23240a1e8153", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3d02ea-f442-4c3f-bf56-340362e221f9", "sighting_of_ref": "indicator--39110716-7f7e-4498-b964-23240a1e8153", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3be56a4-410c-4d49-8439-f62fe0d2c116", "sighting_of_ref": "indicator--1e5be31b-41e1-4327-b461-7a746467935f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9bc6e98-cf3c-46df-bde0-e5b9a756d751", "sighting_of_ref": "indicator--1e5be31b-41e1-4327-b461-7a746467935f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f90400-20a7-4e80-9828-16c507488c12", "sighting_of_ref": "indicator--c9c9158e-8448-49b1-9d57-30eda527f9f6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c91929e-ccbc-47e2-900d-e4b57e0f4396", "sighting_of_ref": "indicator--c9c9158e-8448-49b1-9d57-30eda527f9f6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ffabe6-476d-43ae-aee8-f3121edb034d", "sighting_of_ref": "indicator--241d166e-ca47-439e-8a4f-409427ba7a4f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1a2775-f48d-4c0a-9a03-7afe484e6538", "sighting_of_ref": "indicator--241d166e-ca47-439e-8a4f-409427ba7a4f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09bb532-6f0c-415a-9710-e317a98393ee", "sighting_of_ref": "indicator--5f2d5720-822a-4f4e-916b-20c5b05968fd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418eb099-c609-4799-a342-8b30a1ae14ab", "sighting_of_ref": "indicator--5f2d5720-822a-4f4e-916b-20c5b05968fd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc9a280-aa58-42a8-925d-759a71ec6ab1", "sighting_of_ref": "indicator--58a77da9-2228-4cb6-ba43-f42c28e0fb06", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a4e596-d9ac-4d84-8cf0-b2486c512ac0", "sighting_of_ref": "indicator--58a77da9-2228-4cb6-ba43-f42c28e0fb06", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188cd74e-6e6b-43d3-9623-ca50932fdd5f", "sighting_of_ref": "indicator--349e4b9b-3ce9-4f2e-9477-9d32cc12b277", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b907103-ffa9-4354-951b-675f25a5087e", "sighting_of_ref": "indicator--90156863-5430-41fa-8f44-22d08321d895", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c510ed-56e8-4871-942c-96d777a102cb", "sighting_of_ref": "indicator--90156863-5430-41fa-8f44-22d08321d895", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb74344-e79c-4849-8f7b-c2359f8f118f", "sighting_of_ref": "indicator--4a51f9a4-8619-43fe-bdbb-a86786b30f4b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c6758d-5d2a-44b1-8b58-fe5ffb83c0af", "sighting_of_ref": "indicator--e41fab60-5eeb-44a2-bcb9-fb97f2ef184c", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a986b1-e2c7-4837-b4f7-fe10d8588eff", "sighting_of_ref": "indicator--5adc9f9d-60ef-4e3e-abcf-17c8df81b451", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb816180-0740-46fa-aad9-5baa993fb7e4", "sighting_of_ref": "indicator--b4463689-2e4a-4724-a9d9-e227777d25d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c4ef09-109f-4779-a8d8-8dad2a7b7f7f", "sighting_of_ref": "indicator--7cb5c3fc-357e-48cf-a134-4edf666748cf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a44c582-397f-4466-8ec0-bcb84fb87f87", "sighting_of_ref": "indicator--7cb5c3fc-357e-48cf-a134-4edf666748cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd3c5a3-a4f8-498d-b402-6c24be5f0f55", "sighting_of_ref": "indicator--3d8a21fc-df69-4ea8-9c7e-8dac2b9c9370", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b683a6c2-ea2c-45db-9e30-a0d2dc4e8258", "sighting_of_ref": "indicator--5408dbea-d685-4624-8ee6-d5ece3593b1d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5404f3f2-4c20-44b1-94d2-f3df66f978d7", "sighting_of_ref": "indicator--5a139500-c006-4c6c-a121-b11c00aaf29b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b85804-d5dc-4804-955b-cd12fec947e4", "sighting_of_ref": "indicator--8a408290-fd38-4092-98a9-0c3bf5dc5720", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b352a8b-9b90-4c70-86ce-bc6d44e46bd1", "sighting_of_ref": "indicator--8a408290-fd38-4092-98a9-0c3bf5dc5720", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee7f948-60e9-4f2c-8986-f8f0adadc241", "sighting_of_ref": "indicator--1cb774e5-7527-4d05-9b73-916da754920d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd94c67-d9d9-4bc1-8656-dec1ed131948", "sighting_of_ref": "indicator--c879b146-ba33-4499-8734-f307a829d2a1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a02872-8e9a-4c0c-82ab-867e985ee918", "sighting_of_ref": "indicator--d7fa81d1-7d1a-450e-a115-cbe8bcc2d22f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b872cb2c-0266-47b0-8541-8a1ea84345ef", "sighting_of_ref": "indicator--8e9959bf-12d4-45b4-8a24-a0682d65fdbd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88577c83-cee7-488d-a522-8dd1063bfc60", "sighting_of_ref": "indicator--67b805e4-539b-44c2-88b3-32a18e374d1b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e99a668-425a-4f9b-80d9-1652713293b3", "sighting_of_ref": "indicator--67b805e4-539b-44c2-88b3-32a18e374d1b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60cabd28-de6f-4e03-9a4d-99b574591340", "sighting_of_ref": "indicator--b82bc29b-580e-4ff6-82d3-9bce7959f596", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a5495a-dec5-4c70-9727-fb385406e6fc", "sighting_of_ref": "indicator--43b612f2-810f-4513-a726-5063df4c2835", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d7ba3f9-0c79-4893-9804-adb61032d9ae", "sighting_of_ref": "indicator--7bea53ed-7342-4d02-83fa-eac4ae3e79d1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c8789b-c485-4baa-93ed-94fa369b16fd", "sighting_of_ref": "indicator--4cdfa85d-6d45-4816-8c4e-56ee4dd97cec", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6a8c28-0314-4b9e-abb6-215f4d62bef1", "sighting_of_ref": "indicator--4cdfa85d-6d45-4816-8c4e-56ee4dd97cec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8f61d4-ea20-4acf-b953-88f06cbbb27c", "sighting_of_ref": "indicator--afbce668-7c6d-4106-ad26-93427f200cbb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea44da9-157b-4095-884c-6d5c566e1fb9", "sighting_of_ref": "indicator--afbce668-7c6d-4106-ad26-93427f200cbb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc21a44c-254c-4245-bc8d-85f5d12ed63e", "sighting_of_ref": "indicator--2aab8c54-c6e9-42c6-a08f-aee015877378", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abd9e62-d1a1-4323-87fd-1dec11dccd42", "sighting_of_ref": "indicator--797c4fd9-5151-4835-9b13-894d901129eb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a959d2-5dec-43d1-aafe-63dd0a2abfc2", "sighting_of_ref": "indicator--b9114226-004c-43a0-892e-dd4a11f45cbf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ea4c19-1f57-4376-8b93-92b8dcb1d481", "sighting_of_ref": "indicator--b9114226-004c-43a0-892e-dd4a11f45cbf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eab13de-6204-400c-a0ed-a6dc79f8f92e", "sighting_of_ref": "indicator--1ecfbc0e-a1e6-4c50-a447-ac7787c47feb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e8b35b-ab8b-4360-8f1d-0b9ceff2ccf5", "sighting_of_ref": "indicator--9204e5c3-59b1-4058-9bdc-c40b08c75740", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--281c147f-f64b-493a-9776-b76a5078c8e2", "sighting_of_ref": "indicator--6c87101f-3d57-4c70-a3e7-e3cfb74ab41f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c1303f-d95d-4061-b641-3045c30b1f61", "sighting_of_ref": "indicator--7d76cee2-2632-4687-a0cb-5254b6851c80", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e806c2c-f8b4-4e14-b5a6-e1ede8e337be", "sighting_of_ref": "indicator--092d01e8-294a-4e06-9384-249257a42fb2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b417d271-6fb7-4463-b9dc-765a830ba2f9", "sighting_of_ref": "indicator--092d01e8-294a-4e06-9384-249257a42fb2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5803dec2-31de-4f77-ad27-3b4d6465a186", "sighting_of_ref": "indicator--fa018302-2e53-45ed-9258-e6c25948c9dd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8a307a-8e38-4e6a-a141-56070c1a892b", "sighting_of_ref": "indicator--fa018302-2e53-45ed-9258-e6c25948c9dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387a2806-c24c-419d-8517-7306069d4264", "sighting_of_ref": "indicator--2237d27c-a98a-4fea-acfd-00d0f89b7852", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ba20db-e21f-467f-a246-dc3e0ee32d66", "sighting_of_ref": "indicator--842caeb5-7458-4f44-926f-776595adb8c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08eaa51-e7e8-4129-b4e7-d0f7508e5c94", "sighting_of_ref": "indicator--0ce2668d-fe66-4037-a594-411d13e34d88", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8555a3-6ccc-4538-9b9c-999e92c42cd2", "sighting_of_ref": "indicator--984bed33-69ca-459c-8eb7-2a9e3151effd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8b31b0-d3af-4127-bc52-6a8c31d00e80", "sighting_of_ref": "indicator--1b045d6a-f07e-4628-a529-087d7e95bba8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99747f2f-a964-41e5-ba98-08b23ce549e2", "sighting_of_ref": "indicator--9965a3a8-5279-4a7d-8ab9-e04db43362de", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30331523-cb36-49a2-b7cb-e162afb3291e", "sighting_of_ref": "indicator--9965a3a8-5279-4a7d-8ab9-e04db43362de", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa68587-1860-4325-80be-1d304d994fdb", "sighting_of_ref": "indicator--93bc9476-c660-4d27-bf1f-b2b2850f1d78", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06d2555-fc38-4b1f-9c83-e83c3ac4c879", "sighting_of_ref": "indicator--46b64040-e920-4076-b210-47114d273253", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ed398e-f9a8-405f-aa61-b763ff4da4e2", "sighting_of_ref": "indicator--46b64040-e920-4076-b210-47114d273253", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a25f7e29-fc82-4671-94f0-2558a930e5a9", "sighting_of_ref": "indicator--ff972154-5770-488e-b8dc-66ea5ce67338", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af00ecbc-f48b-4857-9afc-779e9e5e5003", "sighting_of_ref": "indicator--165e8bb1-184d-44bf-a114-761f10033e7d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8689a268-752e-43ad-9651-9837ace95b0e", "sighting_of_ref": "indicator--165e8bb1-184d-44bf-a114-761f10033e7d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31105c09-7a91-4561-acfa-6047877b1dcc", "sighting_of_ref": "indicator--5cca9827-549b-480b-a6c8-8739e69b2876", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a96910-240c-4eb8-a36f-16bff255d642", "sighting_of_ref": "indicator--43e9731d-72e5-4ed9-a2cc-ba21696a42ad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60c7f45-e31a-4c17-b8a0-a91f8874d75b", "sighting_of_ref": "indicator--32842133-6ca4-4971-9a8e-6d37e0f6588f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54bbb0c8-0378-419c-b3ff-40efd3f06b50", "sighting_of_ref": "indicator--fe471647-922d-4d01-9dac-58cd9d759215", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf5510b-0d9d-4bb7-87e2-1c6826ea4a49", "sighting_of_ref": "indicator--720cf87f-1271-4c5c-a917-148690561bf3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2a66b1-d236-4d87-8175-eef20c3477d1", "sighting_of_ref": "indicator--720cf87f-1271-4c5c-a917-148690561bf3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb935924-b2d6-4fe6-81aa-4e96795dc68d", "sighting_of_ref": "indicator--08c48224-0613-4c93-80b9-f5184b106d3e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e88a01cb-18d8-47f7-81a9-07070fd09ca0", "sighting_of_ref": "indicator--9a3307cd-ad22-4667-bb24-bc38133ba313", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dffe685b-d010-419d-89e9-bbb044bfe765", "sighting_of_ref": "indicator--ea93e0ef-4c8e-4de4-91fe-8014d8f0de8f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c16843-badb-4ebf-bf19-ddc220a9d029", "sighting_of_ref": "indicator--cb9c1784-5557-4693-a160-4541072501bb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5beead-cf41-46e7-98e0-2ed0e38725ce", "sighting_of_ref": "indicator--014c9118-63be-4c2a-ab5f-ba305ba0a014", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0e6e58-53bd-49f4-810a-c9a5085258c9", "sighting_of_ref": "indicator--c74ad132-f4e8-4e99-9a96-f75f483d963b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c5da4a-b892-4545-b341-85ce7fe21dd6", "sighting_of_ref": "indicator--192ef44f-103a-4405-80bc-1a7711ee8bd1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0afaf5a-640a-4504-be58-ef3af3ef00b8", "sighting_of_ref": "indicator--192ef44f-103a-4405-80bc-1a7711ee8bd1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743a7c88-0a53-4612-a761-fcfd2f9e7dfe", "sighting_of_ref": "indicator--2832c207-ca39-4c65-9d50-084281024e38", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbff1666-697c-4394-967c-940e5b4292a5", "sighting_of_ref": "indicator--928a4ca2-0af7-4786-96e0-57b1a801088d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2047a54-d02b-4469-82ae-32f8f558d485", "sighting_of_ref": "indicator--8314e73d-608a-4e0e-a660-b32d49c9e4a8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266b59c1-28bf-4175-a48d-761bf3e5500e", "sighting_of_ref": "indicator--8314e73d-608a-4e0e-a660-b32d49c9e4a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabf8423-ee4a-4610-8585-f6dffaa0ab3f", "sighting_of_ref": "indicator--5d4c8a48-26b8-400f-b24c-f0d33df09ed7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7596032b-0e94-4908-a1b1-680a67185f86", "sighting_of_ref": "indicator--5d4c8a48-26b8-400f-b24c-f0d33df09ed7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff8941d-9295-47d2-8924-2da45d8d7fc2", "sighting_of_ref": "indicator--9b70860a-7c43-49ab-a3cf-c94531dad49a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f35b94-e344-42bd-b93f-da982004459b", "sighting_of_ref": "indicator--49bde9e2-91e7-46da-8692-82180e04983a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--292d6fcc-a6c9-4719-a09b-75c238fd441e", "sighting_of_ref": "indicator--a26edb5a-0747-4e14-889b-88b25eb83c02", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f07aeda-7e33-46ea-a48b-721407f9a7fd", "sighting_of_ref": "indicator--b2b7c2d1-d78a-430c-91aa-63588531c2c3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b8ea0a-339d-4105-a066-f63494c2b624", "sighting_of_ref": "indicator--b2b7c2d1-d78a-430c-91aa-63588531c2c3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9673e88-5046-452c-b487-7e35786e458b", "sighting_of_ref": "indicator--ba3b0cc0-85e6-4a4d-844d-d6c2d26cf22b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de08737-a3ad-4c11-add2-a0ac8668ab75", "sighting_of_ref": "indicator--ba3b0cc0-85e6-4a4d-844d-d6c2d26cf22b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9825c399-85a8-4ce4-bcac-ebba909454ad", "sighting_of_ref": "indicator--4988e6df-2ee9-431c-96d4-060343d9fd1a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e589551-f034-40c2-872b-929a7c258951", "sighting_of_ref": "indicator--d7bb306c-a8fd-4af0-a396-d9d79401c37a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58691763-194a-4034-90d9-932c4c8c37bd", "sighting_of_ref": "indicator--d7bb306c-a8fd-4af0-a396-d9d79401c37a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66463860-608b-4e38-a744-0545ca16eeb5", "sighting_of_ref": "indicator--634e88ea-cee7-45db-802a-d9a107b37809", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bda64ea-c9e9-435e-b332-b45a462f3188", "sighting_of_ref": "indicator--634e88ea-cee7-45db-802a-d9a107b37809", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ad57b4-aeae-4a26-bbdb-4d698fed98ff", "sighting_of_ref": "indicator--2a48fd9a-bba5-4af5-b675-c6f5536adb81", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583df072-d5ed-433b-9151-771c73d6b751", "sighting_of_ref": "indicator--2a48fd9a-bba5-4af5-b675-c6f5536adb81", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfccc510-a562-4513-81cc-0a375f406917", "sighting_of_ref": "indicator--f35b5b28-5540-4e66-aa84-2029209f7f66", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5115a2-8ab6-4517-8fd5-fb7f45a2e11d", "sighting_of_ref": "indicator--f35b5b28-5540-4e66-aa84-2029209f7f66", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf9bbe1-682b-4f4f-85ef-e54f6004f22a", "sighting_of_ref": "indicator--697f02d8-dae1-47a8-8627-923a3144d62a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4250715f-e933-4c5b-8ff4-e8109ddd6a79", "sighting_of_ref": "indicator--697f02d8-dae1-47a8-8627-923a3144d62a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3612e6b-0f87-4b8b-83e8-a3580343c476", "sighting_of_ref": "indicator--9ae4c0c9-fb33-4dab-bbf6-aca4bdd89b9f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20ca408-6f75-4fca-b2ad-efea9c821022", "sighting_of_ref": "indicator--9ae4c0c9-fb33-4dab-bbf6-aca4bdd89b9f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dba119b-78cf-4aea-94ea-3fb36c40a16c", "sighting_of_ref": "indicator--1f16fbc9-bee5-4366-a5a5-f9936857a734", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d6174e-0370-4885-9923-05f435877448", "sighting_of_ref": "indicator--1298af58-8621-4829-bc54-19cac3b0d57c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc848e7-c5f8-40ce-83f4-a28c4b3d3afd", "sighting_of_ref": "indicator--d2982f1a-aa20-4592-9326-f1fdcd926830", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ebf989a-e49f-4176-92cf-edf8f08e6c88", "sighting_of_ref": "indicator--1860fcfa-bc64-48ea-b4ee-a8e960766307", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9092653-97d6-448d-a1cc-8fdbedceea36", "sighting_of_ref": "indicator--1860fcfa-bc64-48ea-b4ee-a8e960766307", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d87f7f2-ff98-44a2-a8f5-a812c88edc7e", "sighting_of_ref": "indicator--d969e77e-908f-41ef-9332-13810e54d993", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7447c6ac-42ef-45be-96fb-8bee2f222581", "sighting_of_ref": "indicator--a7816623-3652-4429-bbf8-97cdc3eef0d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6060bc1-d1e4-4dfd-9af1-3a3f2b216327", "sighting_of_ref": "indicator--c270bab9-1bb8-40e6-9a2e-9ffb603f4175", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc1a18b-ea74-4222-839d-01fbac9f6990", "sighting_of_ref": "indicator--8838f827-4a1e-4ce7-a103-5a060dfc7cbf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0e0912-f355-4565-bd24-e311ae093e92", "sighting_of_ref": "indicator--85dcdb9d-db8e-4707-8d0e-86a5a878bdb0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1639f87-c262-48f6-8eec-6589dd3ef51b", "sighting_of_ref": "indicator--eb651010-e20d-441e-9b3e-e432d3176a38", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564c40a4-665f-4252-928c-9cba69c5d527", "sighting_of_ref": "indicator--5ef7a54b-516d-4da5-864b-56e977f91d92", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13087aad-435c-4622-b6be-397648001336", "sighting_of_ref": "indicator--7b012530-513b-450c-a271-bd855835908f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1ab609-1c0c-4581-bfb2-3a5ef9035b24", "sighting_of_ref": "indicator--22876bf9-1080-4478-af5d-ac627e7244e3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c902a11-4e9a-4b0f-9f7b-20f86f53a9e8", "sighting_of_ref": "indicator--22876bf9-1080-4478-af5d-ac627e7244e3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600a9ca7-4ce9-4a85-b3bc-0940117f7e62", "sighting_of_ref": "indicator--8d78fdd0-6512-496d-ae65-e7a54e692570", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa3ed08-d04d-4338-a358-73c1e988f136", "sighting_of_ref": "indicator--f53e0f17-de99-4d19-ba63-4b48b7801eba", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2f17c1-d6ff-4b2a-b976-34b42cb76862", "sighting_of_ref": "indicator--f53e0f17-de99-4d19-ba63-4b48b7801eba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--699ccdd2-29ca-4e04-a95f-8ffc49f48ea9", "sighting_of_ref": "indicator--a8f829fb-2116-4749-9326-b8d13e92335a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b878c2a4-381c-4585-9942-551ee9b53956", "sighting_of_ref": "indicator--b5c7005e-59e4-4ba6-8da4-0fffd32a5732", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9022c46-5f10-4fa0-abb9-6328c1d18040", "sighting_of_ref": "indicator--d86f276b-a70c-41b3-8fae-bb4695dccbba", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b914208-8a27-477c-89e1-a39a8c185c65", "sighting_of_ref": "indicator--d86f276b-a70c-41b3-8fae-bb4695dccbba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3647eebe-3213-4eb7-9178-f646b8aad920", "sighting_of_ref": "indicator--298beac9-2ee2-4899-8043-1a3469426a66", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659d15e7-62cc-423f-ab83-fe6610ab3726", "sighting_of_ref": "indicator--803ea4c5-d3ce-4709-a071-da26aa8934e1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac988d9b-f19d-4acb-96f6-a35fe9ce5141", "sighting_of_ref": "indicator--803ea4c5-d3ce-4709-a071-da26aa8934e1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77fe4d8f-c9fd-422c-ab0c-570978be076e", "sighting_of_ref": "indicator--2dd7ed8a-645f-4fa5-abdc-54522e63140d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919841ef-afa9-4ac9-86ba-679ea77b78f2", "sighting_of_ref": "indicator--500ed352-a08f-4484-9033-0c4d1b339dd2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f857c2-1c0f-4bfe-bfb3-4a98caa80814", "sighting_of_ref": "indicator--47db7ecb-a8b1-48d7-b044-b7efe80ed182", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db738db6-2409-48ea-b219-69c94c5c793f", "sighting_of_ref": "indicator--47db7ecb-a8b1-48d7-b044-b7efe80ed182", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1c5831-d365-4f83-a5ab-9e3cf9c619bb", "sighting_of_ref": "indicator--2e30d5a4-ea8c-4732-823e-c3ae69290998", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b0387b-f017-4fef-adaf-a92a91ac4c0b", "sighting_of_ref": "indicator--2e30d5a4-ea8c-4732-823e-c3ae69290998", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc47d41-7af8-4a36-a456-9c951030e905", "sighting_of_ref": "indicator--46d9cbb6-4ac5-446e-b60c-9dd223a96b15", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02dcb394-700a-43c3-ba69-c532f0413b5e", "sighting_of_ref": "indicator--98e92d3c-8234-40d3-b6a6-bd83db832a64", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cab5406-e3d4-444b-8a56-cd588ddc4ebd", "sighting_of_ref": "indicator--2830d41f-fd8a-4583-bff1-8864674d0e26", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87990107-81da-4c9d-a893-f2e51dfca545", "sighting_of_ref": "indicator--c176e090-420f-4eea-be1e-c2dc0f633792", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0c1830-b612-4bdb-b018-dbdf363b26ac", "sighting_of_ref": "indicator--c176e090-420f-4eea-be1e-c2dc0f633792", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0dc963d-47bb-4df5-8375-79ff1ac78f1f", "sighting_of_ref": "indicator--583c5cb9-e195-48e3-ad5b-b4418010ce47", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d524ff94-714b-4ebf-aa9c-eb67be4828a1", "sighting_of_ref": "indicator--c0d641c1-f56b-4183-a2ef-b7898fa50bd1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d96898-a18b-450a-8df4-b6244d1fd8cb", "sighting_of_ref": "indicator--dd467bf1-bec4-458e-87e8-e5b22e74b48b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e1ff26f-a115-430f-907a-bd88755b3467", "sighting_of_ref": "indicator--2dc94b7d-e63e-4ff2-942f-f4249c621f8d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a5cca8-1db7-49ba-8b20-744e5f5d57a1", "sighting_of_ref": "indicator--9d48faee-e6de-4a20-afd0-610887a6b186", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666ba599-fc4d-484b-9b11-2cb53a57a164", "sighting_of_ref": "indicator--9d48faee-e6de-4a20-afd0-610887a6b186", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d3b390-fe40-47f1-8e8e-ffa32cb8679a", "sighting_of_ref": "indicator--a291740e-2719-4313-b408-45a6e85ac5a1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1802425b-04e7-4247-8180-ab7ac37efc58", "sighting_of_ref": "indicator--78da9b99-1a4f-4657-be19-b369bfcb7df6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcdab136-d226-484e-bdbc-d074e0554469", "sighting_of_ref": "indicator--867a5484-a754-401c-8e7a-feda13ad23f8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55368f63-f987-4f9c-8dd3-21e7b9fd591f", "sighting_of_ref": "indicator--867a5484-a754-401c-8e7a-feda13ad23f8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8963ba7e-ee61-4128-8107-1644e3ef2a12", "sighting_of_ref": "indicator--540272fc-b865-4420-9004-ceea9361f802", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--656d112d-8ac6-418c-8f02-8eb6a3d68660", "sighting_of_ref": "indicator--2fb3ea2f-1e47-4b64-ae16-fe1fff16780f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71b86f2-772b-4117-8b03-c6d02cf6691d", "sighting_of_ref": "indicator--636213cd-4e6b-4f68-a0f4-5c004185d0d0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad57ee25-ff12-4d17-a6c7-d120c0ca8414", "sighting_of_ref": "indicator--10729522-b445-467d-9f12-47b34d963c86", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789f03b2-7a60-4142-a2f2-2e9741565bc5", "sighting_of_ref": "indicator--193b12be-9fac-4b96-8905-8304ecaf7a8b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aedce85a-3757-4869-a210-4e98e0bee62d", "sighting_of_ref": "indicator--5ea7f924-bc3d-4228-8630-8d8438cbc516", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c9a488-78c9-42d7-af24-517349cb684d", "sighting_of_ref": "indicator--60d1c8d0-f763-4ae8-b49a-e88ba6fc07f2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2d064c-a301-47a5-b0ee-b001f63ce0ae", "sighting_of_ref": "indicator--2fdf6457-b86b-4bc5-9cf4-8b54bb17f18a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a38d2b4-101b-413b-af8d-44493078d5ba", "sighting_of_ref": "indicator--2fdf6457-b86b-4bc5-9cf4-8b54bb17f18a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bdbb9da-13a7-40f6-8d8d-e3b83f95e05f", "sighting_of_ref": "indicator--6b84cead-71d4-434c-969d-fd5b4267fb17", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d115382-0231-4b49-9d5a-a68f4db2bf3a", "sighting_of_ref": "indicator--2e2ea166-3a84-402d-9421-40edecdec45d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d04f98-d293-42c4-8c1d-9b3da1eae824", "sighting_of_ref": "indicator--5ba11413-13cf-440b-9524-094fbd46f8d0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6282461d-e420-479f-a562-18183c7aa42c", "sighting_of_ref": "indicator--a3aac7a7-005f-4deb-abc5-87a77a07b4fb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00cd8f92-670f-416d-b029-293241409ae2", "sighting_of_ref": "indicator--173f8e72-bc01-412c-8682-d13a687e4905", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7658276d-3806-4945-8461-fd448936bd4c", "sighting_of_ref": "indicator--2b489ff5-0588-409f-8616-b47fdc7d1dfe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b758f12e-ca3b-4955-a7ec-4eaebcc01e9f", "sighting_of_ref": "indicator--b8d3dbbf-e78e-49fc-a8cf-2f00c2386cd9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c167fd84-d8e8-4883-8766-198ce7c53a51", "sighting_of_ref": "indicator--f14944d2-c852-4b99-8491-29a28e379706", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6849740-1fe2-46d1-8e4f-c9afa547e234", "sighting_of_ref": "indicator--5d427afe-1479-4b20-9f92-2e9c400863a9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd61c4c7-4511-40b3-8616-e41f07a4d0c9", "sighting_of_ref": "indicator--3726641d-fac8-4ed9-9488-b3bb483e5c82", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8106b9-9951-4a90-b930-10f5846fb963", "sighting_of_ref": "indicator--2661f5a6-c54b-4733-a6b3-828609009e01", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--960ed025-dfd4-48b7-ae2f-45668a4ccbdd", "sighting_of_ref": "indicator--3f0e6387-89b6-45db-958e-105661e08f37", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0bc1936-d835-4874-9acb-950fa2714c65", "sighting_of_ref": "indicator--3f0e6387-89b6-45db-958e-105661e08f37", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8242dc7c-c57e-476c-8ed6-46cde9af07fa", "sighting_of_ref": "indicator--ad33cb0a-1b67-4f19-a5c8-6289f2f65a22", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c72b08-a462-4df9-ada9-e42464a2c425", "sighting_of_ref": "indicator--258e1199-8034-471f-97f3-9560a8020572", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2cac71b-dd20-4382-b3c4-26dfbc63dfd7", "sighting_of_ref": "indicator--7277baf5-65b5-484b-b0d3-40055ccffcba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b37a5d0-5aee-4470-a33d-41c41f6af2ef", "sighting_of_ref": "indicator--664c45c1-671a-417c-963c-ef639e67714a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641b4c9b-4725-4e4d-a274-2593f0b1874b", "sighting_of_ref": "indicator--d4c9d21f-7f25-4e63-9580-52b11df0bb04", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edcf5933-e8f0-453f-ace0-e4a33b90517e", "sighting_of_ref": "indicator--cfc31db5-f0ca-49f0-a89b-e9645cd6d413", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db90a17-c803-4bba-92a7-9013ba31810d", "sighting_of_ref": "indicator--3a67d6ca-8e83-464e-8d43-2ee81c08dea9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb31b0db-2abd-4b48-bdea-4e316fb255bc", "sighting_of_ref": "indicator--f6265888-a385-49ef-bb4e-f3761a6490b7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a914a1fa-ddbb-4bdd-be52-e8c7652849a6", "sighting_of_ref": "indicator--f6265888-a385-49ef-bb4e-f3761a6490b7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e615055-d3f4-42de-ab92-d6ce5afedbe3", "sighting_of_ref": "indicator--746f1594-64fb-43b9-b891-945d277312ec", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2796056e-3cc1-4de0-82f3-e318bbd42f9a", "sighting_of_ref": "indicator--2ce1ba0c-e21d-45d7-9fa2-4e2da4866756", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb841e7-8f47-4bee-bf9e-269979c43adf", "sighting_of_ref": "indicator--2ce1ba0c-e21d-45d7-9fa2-4e2da4866756", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f97223-fe57-40a3-8eb1-567c23e0684a", "sighting_of_ref": "indicator--0a4a5b09-6571-4d7d-9276-a71ace121186", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc228ee-59ce-4da6-89cc-5d90c97cc5f2", "sighting_of_ref": "indicator--cb31be10-b2a3-4c5e-b7a5-c9b52b175c87", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f24f6a0-a645-4698-936d-922589b976f4", "sighting_of_ref": "indicator--cb31be10-b2a3-4c5e-b7a5-c9b52b175c87", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e475c77a-29bb-42c6-9357-e363fc6d2639", "sighting_of_ref": "indicator--4433496b-4378-4b54-bb39-465a724e1ed4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a8f73ad-3613-4220-9643-add9f87bb192", "sighting_of_ref": "indicator--05dbe49c-45f5-4f8b-a88e-d680dcaaf4b6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee187f4-0fd5-4d55-ad25-4a3e2db0c6d9", "sighting_of_ref": "indicator--05dbe49c-45f5-4f8b-a88e-d680dcaaf4b6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c8d875-f294-4596-a3b8-6933bc20f8a2", "sighting_of_ref": "indicator--c2e7c6a6-9a45-4863-a9a6-d982fee467c8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3a33ab-666f-4bdd-a9ff-ab00c5525a4c", "sighting_of_ref": "indicator--c2e7c6a6-9a45-4863-a9a6-d982fee467c8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f3a3857-ed6c-401f-91f8-ac02230b3e0d", "sighting_of_ref": "indicator--007cbe46-1aca-4f66-8c1e-0b69d811d91f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff4a8b9-ab1f-4f88-b14d-c4d00fc6db27", "sighting_of_ref": "indicator--007cbe46-1aca-4f66-8c1e-0b69d811d91f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3220b9-a86d-4b9b-a5c6-10cc58b5c465", "sighting_of_ref": "indicator--2f330939-aa62-49ee-908e-6a3c776936f7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c7f28ae-8ff6-4617-9db7-df62fd3c0994", "sighting_of_ref": "indicator--2f330939-aa62-49ee-908e-6a3c776936f7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c50c05f-86ef-4612-b703-db1d824a2d38", "sighting_of_ref": "indicator--f2f7dee7-c210-40a7-8c61-6e7c64f7fba2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75a78fe-f1be-454c-af7f-69c424064841", "sighting_of_ref": "indicator--f2f7dee7-c210-40a7-8c61-6e7c64f7fba2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1264e81b-7ee4-40ff-a104-08c676624608", "sighting_of_ref": "indicator--6e01ef99-276d-49a9-82f0-cdbfaf6b0153", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6c2811-892b-4de6-ba23-3517e8a529e7", "sighting_of_ref": "indicator--2081877a-0285-4198-83fc-ae78db5d4803", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc898c5-4c60-47ef-97d8-a37f694e04b7", "sighting_of_ref": "indicator--173c5a26-6bb2-4af4-b1c7-10e2858421be", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe11922-fc2f-4b0b-a922-44a6b577110b", "sighting_of_ref": "indicator--8846b406-8ae0-4f73-8f3a-c5d580546608", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03472740-a5a4-4ade-b7e3-665600b2e382", "sighting_of_ref": "indicator--9f363860-f855-4f55-ac6a-d73dc9f7b093", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4807ecf7-c6da-42b8-a7f9-91ebd06774de", "sighting_of_ref": "indicator--ff2d3407-61d9-47a5-ad1f-5cb3dc642e73", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--644e5397-f085-43b5-95d4-452eef380751", "sighting_of_ref": "indicator--341facd1-1f1a-4bf5-93ff-1fa7591d007f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3856c4a-960e-4ade-a495-ec6f295989c2", "sighting_of_ref": "indicator--68a923f7-36c6-48da-98eb-6e1a988044ee", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e1968c-9a0a-4a72-a21f-72c683a2be3b", "sighting_of_ref": "indicator--d1d21365-3e01-4f98-9852-5affad8d6d40", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d707105a-23c5-46c4-96be-7a856a1e23c5", "sighting_of_ref": "indicator--cb4c4673-ab11-486c-b2b9-88398de138f0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3db8c7e-69a2-4a05-9e6a-151766183731", "sighting_of_ref": "indicator--cb451dd1-e370-45b9-bb9c-10439a9fa939", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d5cbaf8-3ea5-4e51-8b9f-868b143f68be", "sighting_of_ref": "indicator--e76a765c-98e4-4edf-b491-a6fed3a96952", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a46d0d29-c991-4b7b-b96d-58be90012e42", "sighting_of_ref": "indicator--9996e579-d06a-4ef1-9459-3a46bf5462ff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5958d6-3834-4ee5-8ef2-5683d3138efc", "sighting_of_ref": "indicator--e201d7f4-7295-4441-9064-3ab3de9585ca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e8c36f-105a-4952-8d4f-e29acbacb2a7", "sighting_of_ref": "indicator--fc71d426-1110-4882-87b8-851665333b95", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a529ea06-eff7-464b-a328-a646ddbea957", "sighting_of_ref": "indicator--a3eeb8e4-0930-4d8f-83f8-a5efdbc44ed4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beef58da-8716-485d-9f1a-4d4d16a4574b", "sighting_of_ref": "indicator--6e7967c7-63f0-48af-b1b0-40ac3f740ee4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0464684c-304d-4577-86f4-c657c8ca3d76", "sighting_of_ref": "indicator--876f3018-7723-41c0-bf5a-cbc9a8342bb1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a696da2e-5258-4cba-8cb6-0b82a0ca7432", "sighting_of_ref": "indicator--f1798ae9-3678-4281-80ef-65e21ec56749", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c71f70-bb21-4a44-9b22-1f643952b741", "sighting_of_ref": "indicator--81dca7be-ed54-40f3-9845-98ac65f74fcf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4164369f-4d23-4afc-8288-faec7ca88bf1", "sighting_of_ref": "indicator--f3c5cc7a-9b52-4619-8ce6-6bfa91e3dfb5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e7412e-81f2-43d0-bdae-2eb5f695b409", "sighting_of_ref": "indicator--462c2668-49a4-49bc-8242-cb07caea770b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a4be023-e970-422b-a936-0dab933f3640", "sighting_of_ref": "indicator--dc33fcd1-b61c-459d-be9b-73bbf467a380", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318d19ad-eb91-4a49-906a-fd113311ce84", "sighting_of_ref": "indicator--454a6bfa-724b-448b-a414-3adf534f98c5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1df26ea-2ebe-4b64-8ffd-e7a44b7935d4", "sighting_of_ref": "indicator--454a6bfa-724b-448b-a414-3adf534f98c5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00da24d4-8e18-49ec-9b77-4ab1a26c58aa", "sighting_of_ref": "indicator--d65545a5-4718-4d08-87c2-4a73655a055d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6d63a9-57fa-4bfa-88b4-0485975aa17c", "sighting_of_ref": "indicator--21b63aed-8e49-4b10-ad33-e77060801eca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01181a8-1838-4149-ae0d-e407a2a43bec", "sighting_of_ref": "indicator--8cd3a11d-e37e-418a-93fa-5e2bb801eda0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b13f87-b163-4ac2-8c95-e99ec4838266", "sighting_of_ref": "indicator--8cd3a11d-e37e-418a-93fa-5e2bb801eda0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c54f3f-e224-42b7-8283-e3dacf605bbf", "sighting_of_ref": "indicator--71b23fe4-ae8f-4c58-8dd4-f16b6884c206", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--940af360-646d-4152-91b5-5702332ce1fe", "sighting_of_ref": "indicator--71b23fe4-ae8f-4c58-8dd4-f16b6884c206", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880a5bbb-d9ff-4d39-8190-f748bcec4c99", "sighting_of_ref": "indicator--c5abd64a-7d97-473e-8540-4c377ced16c7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c4ec2c-debf-469b-b190-778c77daf678", "sighting_of_ref": "indicator--c5abd64a-7d97-473e-8540-4c377ced16c7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0dab392-5f00-46ff-a36c-d890b8c4e310", "sighting_of_ref": "indicator--61342971-6a0e-44c6-9195-194dc3a45acf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da33c1e-73a5-4723-800f-062fe60a768e", "sighting_of_ref": "indicator--453d5141-55f1-4a6f-b87c-6dd061ca1388", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d78bbb8b-c2e1-43ce-b441-19f3136b42a2", "sighting_of_ref": "indicator--453d5141-55f1-4a6f-b87c-6dd061ca1388", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6632d496-7033-4116-b4d7-1edab36ddf95", "sighting_of_ref": "indicator--676390ce-d591-42c6-aa73-a8ac45bedbfa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d49420-0369-40d3-94d3-ab1f1c27e6b0", "sighting_of_ref": "indicator--39c60b65-1bef-40ac-8439-96c372f47f84", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3213fe5f-10fe-49fe-819f-584da4217217", "sighting_of_ref": "indicator--ce804815-fd66-46d8-9b97-244f1e122230", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c17606a4-4201-40ce-8a23-8bf6259022de", "sighting_of_ref": "indicator--ce804815-fd66-46d8-9b97-244f1e122230", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8fd12e3-2f2e-44a9-aea9-d41dce846356", "sighting_of_ref": "indicator--cd82f441-c5bd-438f-bb1f-3f403b22fe01", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec8fe72-9058-4125-b552-98b7a269eb1a", "sighting_of_ref": "indicator--cd82f441-c5bd-438f-bb1f-3f403b22fe01", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf0d3ddc-73ca-4431-9bc2-a3bc4a440e85", "sighting_of_ref": "indicator--60bb7c1d-6739-4d07-825a-c5eb8cc81a1e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c201a4-9365-4bb7-866e-313126b48edf", "sighting_of_ref": "indicator--60bb7c1d-6739-4d07-825a-c5eb8cc81a1e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54c4416-54b1-41a6-8627-f81dbef895b3", "sighting_of_ref": "indicator--0f06a9e1-e2a9-4889-8e1a-a139b3f634a3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb506d23-fa39-4e58-a910-2b0f7f9bc97d", "sighting_of_ref": "indicator--0f06a9e1-e2a9-4889-8e1a-a139b3f634a3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46829a97-9074-4c8d-a60a-289efcabe9b6", "sighting_of_ref": "indicator--02156d27-9343-422d-ad2f-33f04dbb15b9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beab63e5-f959-44a2-bc19-e8645731e2e0", "sighting_of_ref": "indicator--02156d27-9343-422d-ad2f-33f04dbb15b9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee746b2-9b1d-4a74-8571-76fa8f9099d1", "sighting_of_ref": "indicator--ed2c1dc6-c115-42cc-be05-77a2638fcfbe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66952d01-95fb-4149-95b2-93d31ec16222", "sighting_of_ref": "indicator--e17444ce-f33c-4f3b-923a-25f1f5874514", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f20ba75-c7ac-49b4-9079-b57abace7ef9", "sighting_of_ref": "indicator--01354cba-0fb1-4417-9870-8a7849ec7313", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5586fc7-e963-464d-a3c5-4db6d478a0ab", "sighting_of_ref": "indicator--b0c1fd19-88bb-4979-b3eb-fb06dc46cc2e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cff4112-cc55-4af5-99b0-0950ec0b448c", "sighting_of_ref": "indicator--858aa624-8905-4fe0-a94a-4e9350751dd7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd2898cd-313b-4992-a637-d3598f7905cc", "sighting_of_ref": "indicator--dfdad440-8550-42df-8c46-4e5fb2c8a3fd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00da7d75-b88a-41ea-a415-047274dcef72", "sighting_of_ref": "indicator--ea341f04-54fe-4fa2-933a-3ddbd91884b4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee114ee6-4a8d-4647-90ac-e4e6bb780fa8", "sighting_of_ref": "indicator--a7eff1f9-b788-40fa-9b49-83d063b702ba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbca347c-3c35-4e05-bcd8-76dd9bb47df9", "sighting_of_ref": "indicator--92722f23-2226-408c-b45b-14b524e86171", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da28c2d1-4b48-4f4b-8e81-c3e6dc5d380f", "sighting_of_ref": "indicator--92722f23-2226-408c-b45b-14b524e86171", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765fa457-a44f-499b-b445-94176608ffc7", "sighting_of_ref": "indicator--46e2410e-5de4-451d-b103-17ac65380440", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--029cbc72-c18d-4fe9-93e8-cda93c3a460d", "sighting_of_ref": "indicator--b70e7a4e-c8a8-4b65-9bfa-2b0d584e59af", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93189944-763c-4c20-af5a-620f43a4ec4a", "sighting_of_ref": "indicator--b70e7a4e-c8a8-4b65-9bfa-2b0d584e59af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6971451-9f76-4e47-b6b1-345723bccf59", "sighting_of_ref": "indicator--ba04d9e7-5960-4ff0-8974-2dcb99e3fd5c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7119c88-e00c-4f61-bac7-a8851d6654eb", "sighting_of_ref": "indicator--144b0bc5-7472-44df-96dd-494eb4ce26b7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f0c5bd-180c-4f43-932a-fcc6442132e1", "sighting_of_ref": "indicator--3692733b-1c4c-4bd2-b1ca-a0310061ebcc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8d2eac-b73d-4346-bf76-d350dd34f256", "sighting_of_ref": "indicator--8f3fd198-824c-40b6-8f39-3bd53b2a8fa9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4b58b3-928b-4569-91f6-7ab24fd46288", "sighting_of_ref": "indicator--aa4831af-e359-41c4-b6dd-5df0ea3f0dcf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--540c12ab-5734-4e58-9160-c109cebd4609", "sighting_of_ref": "indicator--5acaf268-a40b-4fe2-82ea-d8dfa362000d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45306263-38b9-4bd9-870e-4015a3272bfa", "sighting_of_ref": "indicator--521260f0-f685-4b78-b1d7-c228a9f8df70", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b002172-98e2-4857-9bd5-5fb16a750118", "sighting_of_ref": "indicator--bcf926b6-bbde-48d0-9652-ed2ea682d72c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ad36b2-59cc-46a9-91db-c2a41b57c218", "sighting_of_ref": "indicator--1c2dd415-ca55-45c3-a87b-afb780d48f03", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af9eb91-43fa-4b6b-bbe4-003460b6886d", "sighting_of_ref": "indicator--680c0cd0-6726-4076-8bf3-c8497fcbabc0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3037746c-4c9a-44eb-b7d1-f73523aa8715", "sighting_of_ref": "indicator--046d91d8-6cb3-45a9-a7ab-f342aba7f6ea", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e2d7d7-b38d-4fff-bb2a-f94d3accff14", "sighting_of_ref": "indicator--efbf4ef5-da30-44d8-a1fa-64b8c2fd2497", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a105ca08-7de4-449a-ae03-8f53a1954245", "sighting_of_ref": "indicator--b66f14c9-a170-4050-9708-f84c733f9657", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc5aa7b-e448-42a3-8bfa-c37ca3baa42c", "sighting_of_ref": "indicator--4b1b1335-4a14-4d0c-a773-b1777bd2ebdf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32970b45-c47e-4d1f-bb61-50da681f86d3", "sighting_of_ref": "indicator--1ae4ef2d-e212-419f-bf4a-bf51cfbe18e1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74fcea60-063f-44d5-8c11-83019d6d7ea8", "sighting_of_ref": "indicator--44a83a0a-890c-4c93-b05d-1e9bc066aba4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7535b0d4-f637-4f4c-93a3-dc6fe098b289", "sighting_of_ref": "indicator--e9262578-4851-48c1-be4f-7f872bcd2947", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf61d5d-1517-47df-8dc2-248f1e204127", "sighting_of_ref": "indicator--03c3a1b3-5f9e-4595-ac53-0668870af4bb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30cc7a98-49a9-4309-893d-a470805a2ace", "sighting_of_ref": "indicator--63c110c0-8e2d-4d45-81af-7286167e946d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f75a950-6025-4459-8dea-f7a0b8631675", "sighting_of_ref": "indicator--4d327fbb-dfe8-403e-9600-316fb094c968", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f8a49f-23aa-490c-ae26-749452cba222", "sighting_of_ref": "indicator--f79c6af8-d66e-46aa-8268-c4090b3c6d4b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8424ed2d-2f6d-4d31-982f-796424e68760", "sighting_of_ref": "indicator--55ced7e2-c150-44c6-a6f7-8a448eaf5401", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38dff9ed-845a-4839-89e3-c35e06a36b6d", "sighting_of_ref": "indicator--5ec8f535-3ac0-4dd0-ac71-d3f0fcba23fc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45aaefc0-cfe3-4c9a-9608-d0242d28076b", "sighting_of_ref": "indicator--16d029e1-c71e-4b45-867d-8a526e5478f4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc03ee1-68a8-4e36-8102-cad77a4bc7c6", "sighting_of_ref": "indicator--0ea1a56a-bea5-4794-a0cf-c79a4ca999ef", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ee40f8-7934-4305-bf20-1fef8bde3e4e", "sighting_of_ref": "indicator--ca217827-0181-49d9-bcb6-96003f6b09b5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4883e705-e418-41a3-b807-c1ae66ec3eab", "sighting_of_ref": "indicator--5049ccc3-eed4-4f93-a911-5e07e4316129", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eac0763-7127-46cf-99d0-8b7f328d9801", "sighting_of_ref": "indicator--1942bdde-d1e9-478c-af94-4bd9e836afcb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5330d2d-05af-4730-a78c-e063de623a3c", "sighting_of_ref": "indicator--ed79a72f-9be4-4d5c-b86b-77dba9b18455", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5b68aa-9e02-4116-ac33-6638bc5b8498", "sighting_of_ref": "indicator--428487f4-d160-4f36-80e9-159371a5465d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd769319-c88a-466a-9a2d-3208e7e56adb", "sighting_of_ref": "indicator--70c528aa-cbeb-4909-9de4-e706eab8aece", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccab058e-ae64-4bc5-a71f-e10cb54291fa", "sighting_of_ref": "indicator--57b6ff41-6944-42da-b21d-d996644e0292", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591a0de8-10b5-4ae2-be51-dfb95672b0a2", "sighting_of_ref": "indicator--ba87ee0a-ba77-4aef-aaa1-5b42f019d466", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a69b7a7-d14c-433d-9a36-38c7f596f2f4", "sighting_of_ref": "indicator--933b9978-8c4c-4ef8-b997-85d5b59cb511", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f4f2e2-99e5-4f09-8df7-5bf8dffcd43e", "sighting_of_ref": "indicator--14984807-34e4-4e1f-9652-7378506692f1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce33c2d0-f442-4408-978f-13053a6a0aca", "sighting_of_ref": "indicator--427c306b-b8ed-4271-ad28-99d3b97f0e66", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8673c831-48ef-487b-a2b2-ffc2d5c98684", "sighting_of_ref": "indicator--4fe7fbb1-6d8c-49ae-883e-2b8a70f59124", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824f9e89-361f-438c-880b-e1dc2dfef3df", "sighting_of_ref": "indicator--2966c341-b8aa-45e9-b8ed-37c1b28f70b5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7433954a-039c-446b-b2ce-c1392758d116", "sighting_of_ref": "indicator--3a50053b-926e-46f0-b8f1-2527f5729c4a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49085537-b960-4988-b248-7d737011b5c5", "sighting_of_ref": "indicator--3a50053b-926e-46f0-b8f1-2527f5729c4a", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5795b0a-b4b2-46e8-9eed-fa08577b7071", "sighting_of_ref": "indicator--3a50053b-926e-46f0-b8f1-2527f5729c4a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f9bb08-eef0-41ac-a7a3-d40e743ad5be", "sighting_of_ref": "indicator--0e02df12-4966-47d6-9509-11fa57e975d7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b93b21d-7447-4fb6-917e-03a00534c0b6", "sighting_of_ref": "indicator--0e02df12-4966-47d6-9509-11fa57e975d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e8795b-b64a-4d52-a292-c976b8a241c3", "sighting_of_ref": "indicator--282d9ba9-3273-4846-b835-1cd6b79c32f4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--961f23a7-a640-4aab-b8e3-b747b6914540", "sighting_of_ref": "indicator--282d9ba9-3273-4846-b835-1cd6b79c32f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c03993-cbdf-419b-b0ad-38a67c78c447", "sighting_of_ref": "indicator--48471b2f-7a3c-471d-9c06-f5beb7f36598", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d573df54-fc1d-4a61-af48-881ff1a93cdc", "sighting_of_ref": "indicator--3b600ba5-8831-466b-ac52-6c5a9436801f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa391f4-355e-44c1-8f0e-49cbc640ffaa", "sighting_of_ref": "indicator--3b600ba5-8831-466b-ac52-6c5a9436801f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0634490-4938-42f1-80f1-ce55a6e0b2fa", "sighting_of_ref": "indicator--986241ba-b981-4d94-94c8-f390ee200175", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a84830-716a-454b-a409-c93b9a61f059", "sighting_of_ref": "indicator--7ad8f2c3-4bbb-4110-817c-be1320244e6e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f700d6-ca19-4749-bfe7-853d150a6f7c", "sighting_of_ref": "indicator--7ad8f2c3-4bbb-4110-817c-be1320244e6e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7a5ec9-6910-45b4-9caf-8a403345fb93", "sighting_of_ref": "indicator--1f799988-82cb-4e4c-9fe0-ec97a04f8475", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5666bfb3-9f0a-4d10-a2d1-380587dee030", "sighting_of_ref": "indicator--1f799988-82cb-4e4c-9fe0-ec97a04f8475", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb0aa1b8-2954-4dba-b4d8-4baf5c770413", "sighting_of_ref": "indicator--69cf18b9-7a4c-4d91-93cf-45c54f90d537", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff784362-aac4-4324-99b0-48f3c546b5aa", "sighting_of_ref": "indicator--42c6a2d6-5c85-4f28-b3a5-422872c3a20b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f053c4-d8cf-4168-8985-d00f4d679d81", "sighting_of_ref": "indicator--42c6a2d6-5c85-4f28-b3a5-422872c3a20b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e96b81-da18-4b7c-965c-9c0ca41cc603", "sighting_of_ref": "indicator--28360489-874f-4de8-9270-8c030319ee1f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--445632a4-fe5e-4f62-a8d6-bcc36792e2da", "sighting_of_ref": "indicator--f29503a0-ba11-417f-8066-84bf45f572ca", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103527e1-c901-44ec-ae2a-e07056e8dd55", "sighting_of_ref": "indicator--d01f9e50-4d90-47bd-8128-c96cca7a4f36", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf468fb-723d-4e93-973e-612b1839bfce", "sighting_of_ref": "indicator--7760a5f7-2e43-4364-87c2-6578063f5a28", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66cb04ab-ad41-4ac0-80fb-6ad58e297696", "sighting_of_ref": "indicator--bebae84a-b137-4565-a118-fa4da61785df", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76333fb-6209-47ff-8ece-9f31c20fd680", "sighting_of_ref": "indicator--bb7b4888-1057-4332-8cce-733ff9571c7a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf0f8c9-f949-41da-ac15-3f5ad22c06b8", "sighting_of_ref": "indicator--bb7b4888-1057-4332-8cce-733ff9571c7a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a872c61-0878-45a7-8341-bba7e3ecf806", "sighting_of_ref": "indicator--79ee2f2a-9626-4c18-836b-2371d1766c20", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d45dc8e5-3664-4ed1-9e23-75ab65682f32", "sighting_of_ref": "indicator--d65cb67a-c1c8-4cb1-b62a-f899fe5be788", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9801d0-23a5-436e-bea7-c8da9ddc425f", "sighting_of_ref": "indicator--c9ede593-6196-4ef9-b09c-8c563f7c341f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb9eaf2-710c-4db4-ab7a-5367adec2cf5", "sighting_of_ref": "indicator--f9c2462e-7f42-43d3-94b0-fd20c55ef42b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1654ff05-88a6-4eb2-8405-62068cc861fd", "sighting_of_ref": "indicator--35e5ce2f-a57c-4aa4-a590-d5a48dee3198", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5284fa8-1c4c-4c64-bc6b-dbc9d93250ef", "sighting_of_ref": "indicator--36273801-4bde-4c09-8cc8-df0ff7859c70", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ed25d4-f5f3-42d0-8033-e8cde7a858d7", "sighting_of_ref": "indicator--ea5bfafb-6f78-4c3a-a388-20505068f5fc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0313078-e5d9-4531-923a-1009ccc5b25b", "sighting_of_ref": "indicator--ea5bfafb-6f78-4c3a-a388-20505068f5fc", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d48b3529-e61d-407c-930c-714d482c231a", "sighting_of_ref": "indicator--ea5bfafb-6f78-4c3a-a388-20505068f5fc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e944833-c661-473e-820b-82f1953e12a7", "sighting_of_ref": "indicator--2808d0bc-f4e5-4639-8cbb-ea769697ade5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9994ef83-3f1c-40be-a289-eee10537b5ab", "sighting_of_ref": "indicator--2808d0bc-f4e5-4639-8cbb-ea769697ade5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74158ec1-4cfc-47c9-a9e8-f735434441b2", "sighting_of_ref": "indicator--d581b21c-420a-4497-98c2-08cba8ef4338", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7aae04-a8c3-43ce-9548-ab6d08d3b01a", "sighting_of_ref": "indicator--d581b21c-420a-4497-98c2-08cba8ef4338", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6419a20e-aab6-429d-a095-d56d98839e5f", "sighting_of_ref": "indicator--add0a5f8-c7a0-4313-91d4-ced8ed284423", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea633ab6-1811-4685-b00a-5d552bad78aa", "sighting_of_ref": "indicator--7ba13014-168f-4515-ba27-1c44b8b0433d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--290e1383-5733-4ec8-a4b5-fef467610dbf", "sighting_of_ref": "indicator--b9e31658-5bb6-4ea2-8364-ef2c32ae7357", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f663ecc-d492-4ac3-a5b5-aade129afa63", "sighting_of_ref": "indicator--1a6e026b-6cc1-4ada-930b-b57401fc8a52", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfb7421-5a6d-4619-8ee9-74f538f0429f", "sighting_of_ref": "indicator--a87c6c97-02cb-44c7-af61-bef4c81f8505", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f63cd0a-54b4-47bd-8694-3ed783126e38", "sighting_of_ref": "indicator--3f84d5a2-df53-4293-bec3-597ff16eeae3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e76621-3c4a-4632-b7c9-2027912f4a8a", "sighting_of_ref": "indicator--d291080e-354f-4e2a-86e6-adf0c3dbe178", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1277b794-6925-4c34-980b-e38e351f3d60", "sighting_of_ref": "indicator--f5b3c3a3-ffb5-4ed7-93a6-552e1a74e2f8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe3444d-9c98-46e5-a55e-95f6f3d8754a", "sighting_of_ref": "indicator--c79157d6-808a-42ca-9827-52f4ae33e695", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61205fe1-40a6-4508-b1c3-f3f190743efc", "sighting_of_ref": "indicator--9b59bbc4-275f-42ef-839a-eef5af6c354c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b74b151-390a-4756-93f8-5939c6d06070", "sighting_of_ref": "indicator--9b59bbc4-275f-42ef-839a-eef5af6c354c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93af632e-804d-4bf6-b89e-1b32e0ea30dd", "sighting_of_ref": "indicator--8d79f54c-c074-43af-a1c9-75b8e5ed7e3b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8a2f51-12cf-4771-9c36-30d6dc4713a5", "sighting_of_ref": "indicator--46575fb3-80be-471f-be70-af707a920b43", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e3852c-8dc2-4cf8-9449-369f1d6d57bc", "sighting_of_ref": "indicator--bcf57c3e-baa4-4f09-93e7-e5a5c32eeac5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--215e81a0-aeee-41d6-9889-092a40001a77", "sighting_of_ref": "indicator--2f052d43-222a-4b17-8cf0-9a190c76dbff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b148c5f1-4f9a-46b0-b872-0f22007feea8", "sighting_of_ref": "indicator--57b9c50b-5968-4189-b76b-4a8501f85a82", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615e0cb4-ce7d-4da1-a2a8-dfbcd00038e2", "sighting_of_ref": "indicator--9cd3be32-e4e4-4292-a992-afc2f3114f90", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c3dd62-61fc-4393-b636-64c59c7e60ac", "sighting_of_ref": "indicator--1d42feb0-0ead-4d04-9ed4-696f9ff3b7b3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc30cdb6-dbf1-43ee-b42f-4edfa70bf31c", "sighting_of_ref": "indicator--7d54efce-c19f-498a-a5c4-594623aa2286", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b936077-2119-410e-ae92-4f1273820efe", "sighting_of_ref": "indicator--8198966d-1ee2-4404-a614-6228c49e67a3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93cf96dc-650f-416e-a639-2528a8c4e665", "sighting_of_ref": "indicator--e7c6bc39-a53f-4d3f-861a-7cd0f9ec08b6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d69ddba4-bd27-485b-ab05-d54f4df02c19", "sighting_of_ref": "indicator--e7c6bc39-a53f-4d3f-861a-7cd0f9ec08b6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ab70a6-1db5-4a1c-9c97-4f6af804992b", "sighting_of_ref": "indicator--bc8e9cc7-a4b8-4bad-a956-a560e1346aa1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1336ea91-c7ee-46d8-8fd5-4577ad75d80a", "sighting_of_ref": "indicator--bc8e9cc7-a4b8-4bad-a956-a560e1346aa1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213e9c95-b9a3-47d7-8a20-509fb6bfab70", "sighting_of_ref": "indicator--cb55a503-71ac-493c-bf66-b6af1aba0f7a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82091707-b365-4f54-9310-867bc19cfe92", "sighting_of_ref": "indicator--ca420998-f275-4674-a152-e825a8f44bf7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0cd50c-051c-4e17-bc35-c50d6ecae801", "sighting_of_ref": "indicator--22a52d16-c80d-4d67-a64a-3e8f84fce6eb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf23c955-5d85-49e5-9d5f-ac5dfcffddc4", "sighting_of_ref": "indicator--4f347f50-465b-4ab7-80a8-d807691fedcb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04df2f5-0f14-41cf-9b15-3936f1b15cd6", "sighting_of_ref": "indicator--adef7bda-91e3-49fe-90cc-60d3cae1e6b8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394c07ad-9803-4e9d-ba7b-508f3bde1f34", "sighting_of_ref": "indicator--b599c27f-a72b-457b-b89e-9e68460c12ec", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2c64d7-b1ab-4420-a8b8-d8e0f6a97e1f", "sighting_of_ref": "indicator--b599c27f-a72b-457b-b89e-9e68460c12ec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242bf769-2d41-4d1e-b569-fbbbf23ac80a", "sighting_of_ref": "indicator--9f723a41-e306-46a0-aef8-3684c22d7812", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05eaac67-b3bd-442f-ba62-72335c5bdef2", "sighting_of_ref": "indicator--3394d1d4-b6a9-4e61-8f82-bc2510450544", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6288ed6e-0eb0-4642-b19e-6cd0152f303f", "sighting_of_ref": "indicator--5d083146-c8d2-4a7e-ac15-59d490b422f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288db28d-0f2c-4f3e-b5ab-faa70586d7bc", "sighting_of_ref": "indicator--725475f9-beb8-4c9d-b076-70e01e91d20c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4cf9d0-0012-42ed-8a38-e4ac95a5671a", "sighting_of_ref": "indicator--5e94718d-4a57-4fef-8488-4c6e7ce9fe74", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ddb140-6ad3-4f7e-ae97-abcf0f256e92", "sighting_of_ref": "indicator--6c8008e6-3dc1-4db3-8bb1-73b64d2bc1ba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2483b9b0-2130-4cb3-b9af-de556ef5b1aa", "sighting_of_ref": "indicator--64de8e43-4fb9-4203-a020-78cb1f1169b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88600a20-5535-4f56-9b16-5d7e573c4606", "sighting_of_ref": "indicator--e81caf38-1de7-4ee3-acf9-cceaa5fa7b5c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c765ec2-bd10-4873-ae99-b79b6a5c3df1", "sighting_of_ref": "indicator--065295e2-9166-4738-bed2-bea94776e90c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3bc6f4-251b-4735-b0b6-390f34456d1f", "sighting_of_ref": "indicator--3f372b27-e472-4205-8393-463ccc18adf4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142a27dd-7afd-41c6-a982-f57ef3755178", "sighting_of_ref": "indicator--78594ad7-aff7-4327-83b0-1f6100ea5b6a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bcda3ba-62b6-4e7f-9b30-92e4837c00e5", "sighting_of_ref": "indicator--4de427bf-86db-42c0-b36a-952db9604153", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff0ce22-9703-41ab-915e-998dcb8ff916", "sighting_of_ref": "indicator--1d39f698-fea3-41a7-b627-7c2ed3ea5abf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9e68cb-8473-482f-986e-50d8cc3506d0", "sighting_of_ref": "indicator--1d39f698-fea3-41a7-b627-7c2ed3ea5abf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e2d26c-4f8b-4207-b2a4-a5ad7379a54f", "sighting_of_ref": "indicator--28178ae7-e112-4c86-907e-1fc39f3cacd1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c7d234-dbee-4234-89a2-6099ca34ca17", "sighting_of_ref": "indicator--7956bccb-3654-4412-a929-927326916ad7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1caf87-80c3-4914-b11e-10d545c1b1b8", "sighting_of_ref": "indicator--5b96c858-8387-431f-a125-8a0dcf7abb73", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998d5b15-235a-4ab9-ad26-e10e3e07688f", "sighting_of_ref": "indicator--3f7cf9e3-b41e-40ca-a06a-21ec542c7a37", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a1b68f-6ff6-48de-9ccb-4fb6b41f50bd", "sighting_of_ref": "indicator--71c14607-3d32-4801-931a-f07033c22ac0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f02696-f105-49be-8bd5-d777f7425ee2", "sighting_of_ref": "indicator--e501861a-5ddd-430d-aaab-8bfec6058e54", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda907c3-fd39-4269-9253-565f9aa88a48", "sighting_of_ref": "indicator--e501861a-5ddd-430d-aaab-8bfec6058e54", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f7cf94-3d41-4403-8262-e61146f62701", "sighting_of_ref": "indicator--f317b49c-f83b-4bf5-a10a-4aefdc9d3a84", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a77577-3654-4589-b87b-4f354685eb45", "sighting_of_ref": "indicator--cc659a8d-dbc9-40e5-8dd9-760a5fbf5d4f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373b74d3-8003-4252-aa84-28438bad3bf1", "sighting_of_ref": "indicator--ef09994e-1ade-4a00-a5ce-7bcc904fa444", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f415fea9-79d2-4766-9050-640a529eb0ee", "sighting_of_ref": "indicator--ef09994e-1ade-4a00-a5ce-7bcc904fa444", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c0549b-033b-4c37-9ad0-d2b7c263d189", "sighting_of_ref": "indicator--d29b8ceb-be29-4f48-ad05-f3d0bab6d2c9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15089ed1-ff53-43cc-9979-2cbff4139617", "sighting_of_ref": "indicator--abad78fe-ae05-4ee9-8dee-b13628bb733d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8253ae0-a96d-43ba-a68b-07d0ac9e9452", "sighting_of_ref": "indicator--ede015e6-2fef-4d60-b233-e6ce28d35229", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--705916ac-f8e7-4b9a-8626-165fdd7df12f", "sighting_of_ref": "indicator--339c63ce-4be4-4a6f-b8a2-138c8f29c73e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be1ee9a-7866-4a53-b355-87fe9a23796a", "sighting_of_ref": "indicator--339c63ce-4be4-4a6f-b8a2-138c8f29c73e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3de1ab2-29f2-4696-bd27-eacd432c993d", "sighting_of_ref": "indicator--c184bec2-dc35-445f-b43c-9db628fe9af8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d878bf-1f3d-41ca-bcb6-7dabb6e3e6fe", "sighting_of_ref": "indicator--5723075e-e92c-4145-87f3-169c86ff7e30", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554290f3-0c33-480d-b83d-b5365683e317", "sighting_of_ref": "indicator--8104645b-c163-4a7d-b9b8-e3c786011308", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad440b7-9730-4770-8033-7e50e6b388ec", "sighting_of_ref": "indicator--753c0205-38b3-4697-89f5-ca10a3ec5fc0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--956e799a-7bdc-47cf-9c13-cb2df6967e66", "sighting_of_ref": "indicator--a4d0d429-06eb-4b0f-a7a9-bf99c683c2ff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84ff4e6-ff90-42ea-8d83-17426de76521", "sighting_of_ref": "indicator--be5e3f38-a3d5-4267-b1e1-442ea9e2f4da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f31dd64-2c22-4475-9d2a-50d91550fca2", "sighting_of_ref": "indicator--fbd3eaf7-4c98-4a12-821b-a1bd9d218c84", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d78a32b5-b110-40d4-9a43-60629eddf792", "sighting_of_ref": "indicator--17a3caa7-cb6a-41be-a0f8-0bde078376f3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5126ae6f-d9d0-4576-8625-4c621fab819d", "sighting_of_ref": "indicator--95b1cef1-f785-408f-82e1-c9b57278ae8f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79977355-871d-49e3-a56a-7919ce1e09df", "sighting_of_ref": "indicator--18c88a3b-04c8-41af-8c46-8d7e04d8d5a4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e2d3bb-76fa-4576-a10d-21b0d5d04c40", "sighting_of_ref": "indicator--0f24ec6e-1778-4824-ac27-948a5326e02d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5edbeb39-2bea-4632-ae92-cb39b9cd5fb8", "sighting_of_ref": "indicator--0481d6b3-8521-485c-beea-2a2cb1116dbc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec56209-9bed-4dbc-9451-a741eccf2bcf", "sighting_of_ref": "indicator--7a178686-0458-41f7-aa86-ea66c0811dfc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aefeb71-448b-477e-8cae-66b96acdea29", "sighting_of_ref": "indicator--f434ebed-8dad-46f2-86f2-d6c369dc4958", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c675c1-9236-420c-9717-02405a2bfd86", "sighting_of_ref": "indicator--5527ba08-519d-4073-bc7e-d37b9387c38c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9261a78c-ecfe-4f85-beed-b251612308f7", "sighting_of_ref": "indicator--806e30ad-cce0-4c5e-b678-942963692fd5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d4787c-77f0-4e62-86be-1c15b4ed2e28", "sighting_of_ref": "indicator--e1549c87-51a3-48d3-a22b-16668a48cfe1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79fa8268-1301-4039-b707-04da0d8db5ff", "sighting_of_ref": "indicator--83e78129-c128-4668-9b0d-5413a3f5b3d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d708303e-cedf-4f14-8982-60311fcd6115", "sighting_of_ref": "indicator--b0a577cd-c635-4d3c-9040-742f826a4e12", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7edf0d83-1a12-4b9e-b889-0533a9a3d6c7", "sighting_of_ref": "indicator--b0a577cd-c635-4d3c-9040-742f826a4e12", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7326762e-5950-4abd-98ef-36b84e219ff2", "sighting_of_ref": "indicator--2b065fdb-9d04-4b97-8a25-bbaab71ed186", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c40ff61-b56c-436a-ae02-24f75f5db7ad", "sighting_of_ref": "indicator--2b065fdb-9d04-4b97-8a25-bbaab71ed186", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d84914f-81a9-42ab-88e3-e75a0aebcd50", "sighting_of_ref": "indicator--9ff01328-e489-46af-a030-864eca62f656", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585237ff-0056-4828-a5d8-8e9cc34a6f19", "sighting_of_ref": "indicator--5c0a6b61-298f-49f3-914f-440dbb08f072", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8009d8-d7d4-4093-aba3-b81d5c23543a", "sighting_of_ref": "indicator--0ec88eb2-1bad-411a-994d-12588eaa1007", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4139f0cf-1821-4b4b-9e3a-03a614fc95f0", "sighting_of_ref": "indicator--0ec88eb2-1bad-411a-994d-12588eaa1007", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2526006-16ea-41c5-bfc2-48935c57a603", "sighting_of_ref": "indicator--5a7d7ebb-55fc-43bd-bc27-68c3780eec23", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f2cb00-656a-4c1d-9e68-9c560ffd1a29", "sighting_of_ref": "indicator--604014ba-6c89-4463-b86b-9dca6087090e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b67f2047-f82b-44a4-8e9a-3c5092280025", "sighting_of_ref": "indicator--e1f27aec-43f3-45fd-a710-08386cddd261", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f411c3fd-f0fb-49b3-9a5a-1acf0bfbf442", "sighting_of_ref": "indicator--a6b6db7e-ac73-4779-b386-6fa9320179e3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54db164-c615-4cf5-ace4-0d9852850b6d", "sighting_of_ref": "indicator--5dd8d1fe-0a36-4738-b8a8-9a2b3f7dff88", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca1b885-2854-47c9-8430-05f2a30722ba", "sighting_of_ref": "indicator--adaf5a19-5161-4936-b572-d3dfdd7c4c7f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31cf958a-896f-4e6e-8d7c-d444c1874109", "sighting_of_ref": "indicator--ba8f14da-ab89-47bb-afd6-c4160d6aebee", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92124d50-a157-42d1-af16-414756efe94c", "sighting_of_ref": "indicator--6dfcbc88-c2f9-428d-9ce3-a94023b04825", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a502c672-fa78-4f3d-a47f-7da9b6f1710e", "sighting_of_ref": "indicator--c97a3b8a-49b8-417e-9167-8607afd522b5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea31c55-7017-43f2-8023-1afe5eee04f4", "sighting_of_ref": "indicator--c4dba3c4-1435-49e6-a163-4a7eabd961d4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67111421-5024-4273-8230-61c80dca0a44", "sighting_of_ref": "indicator--d872dd02-3122-4f16-8757-d7e10871264f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a739902-25ca-48e9-832b-9153ea7d1ad5", "sighting_of_ref": "indicator--d872dd02-3122-4f16-8757-d7e10871264f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec9e6835-de27-4fe1-8524-7800d5dfc460", "sighting_of_ref": "indicator--7a53f059-1c20-4bf4-8199-66b33706cb3a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a6b50e-190c-4389-82bc-241a5c0bfe9b", "sighting_of_ref": "indicator--6a4b079d-1955-46e5-b02a-84baecc32036", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbbee870-25c1-49aa-bdf0-4ebeea8ca85d", "sighting_of_ref": "indicator--ebc970d0-0af0-4abf-a6f7-07bd72fcf0c5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a95825f-71be-4f78-934f-d2194d151998", "sighting_of_ref": "indicator--ab633deb-cf74-4306-bdee-194be4697427", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d851eec-d4e3-4fa0-b830-8479ed69d234", "sighting_of_ref": "indicator--4d1ff0ac-5498-47d3-99c0-22fe291b6e02", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e1d712-60dd-414c-a179-4d47acb58673", "sighting_of_ref": "indicator--05ffb7d9-f106-47db-8462-92af133c8103", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c9bceb-0711-4eae-8046-94faaae168eb", "sighting_of_ref": "indicator--76a8922f-ef50-4c78-b50e-fd44d64aeaaa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d9562c-8fa7-4e4a-a417-1955b31277f9", "sighting_of_ref": "indicator--e8b8bca2-f7d3-43e3-a808-4bc07f6abc51", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d622501d-6b63-4613-92d2-3fd41abec25a", "sighting_of_ref": "indicator--2262302b-c19d-44c6-b471-327799b9c69d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb88959-a026-4788-9d91-8b893537bf8d", "sighting_of_ref": "indicator--c45549c8-e398-4064-a38c-d48c381df1b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a653ae8e-55ba-4dcb-8139-de174c93d4f3", "sighting_of_ref": "indicator--db1f8352-5d49-4781-abc5-0a5d6f107a8b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2674d9-bb31-44f6-9ba3-858df6ae1103", "sighting_of_ref": "indicator--a7b27318-7fa1-40ce-a991-e64ba9a08b1c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ce5540-c090-409b-88ed-f6aee994e339", "sighting_of_ref": "indicator--aa77b825-d293-494f-97c8-f7ea1bd6121c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2716fc1-d87b-43ba-bb17-8ebb131dcf42", "sighting_of_ref": "indicator--03ba7d67-de22-4e44-8a39-1f62d05e0d84", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a288119e-24d6-4d56-8f45-d8552a6d1d3a", "sighting_of_ref": "indicator--9cb031cf-cff4-4495-9020-cee1090656cf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7f43b8-3e37-4c53-a5cc-bc6e6fc95dd9", "sighting_of_ref": "indicator--96a96f6d-18c0-4e00-8b7a-14896efbf670", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc82e11-d593-499e-8fd4-803cf4c86119", "sighting_of_ref": "indicator--24835755-3c1a-4800-9113-41814d44652f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9fc3ad4-1f8f-42e6-8b50-d37a3487eb67", "sighting_of_ref": "indicator--725171ef-ca46-47bd-85fd-e73d2ff85444", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ffc7708-2d4f-4e07-b6d7-848c8e78d176", "sighting_of_ref": "indicator--9dffaf62-1ab3-48f6-8cf3-5451a5575ee3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfdfd922-987a-448d-a114-9016f9d70626", "sighting_of_ref": "indicator--8a76bc03-3495-4f44-b380-f59fcd725b02", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85a6f98-845b-4d04-bb56-68697c7956eb", "sighting_of_ref": "indicator--23c2aba1-a63e-4883-89ea-7f6ca9917cee", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da074aff-9c04-4a05-8327-21dd329d662d", "sighting_of_ref": "indicator--3696da0f-6aa1-4eda-a30a-3616f9af5293", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efcb56c0-b26d-41c4-9f3f-3980075f62d1", "sighting_of_ref": "indicator--92723fef-6357-4461-a3fa-5e939917234e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f68e803-d1b7-403c-bc1c-ef677f1d2530", "sighting_of_ref": "indicator--92723fef-6357-4461-a3fa-5e939917234e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752897ed-d6a5-4ff6-bf1e-b45797b8e897", "sighting_of_ref": "indicator--e61b295c-da19-45ce-9529-78a1a66caef0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811a91d9-21b8-4659-8128-a2bfc6ab1301", "sighting_of_ref": "indicator--9220099c-4240-4670-bbe7-2235b63bfd6e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18878c95-2ecb-46f5-9fe4-6afcc9c3fbf5", "sighting_of_ref": "indicator--a3cdc96e-9b24-484f-80a1-d0617bc037bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd1a580-471d-47b1-9831-12ca62d81114", "sighting_of_ref": "indicator--33bddd58-413d-4ca2-9b79-709edcee927c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c84888-d10d-4456-ac4c-608034677037", "sighting_of_ref": "indicator--32c4c9e6-2282-42a1-8d48-85876591b749", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2201f727-7812-4904-b45c-f085a2724912", "sighting_of_ref": "indicator--5f583afb-25fa-4edd-9ad9-2fc215b3b5cd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590a85d5-fb35-47b2-b4b8-914324330a33", "sighting_of_ref": "indicator--ddb1ea6d-937c-4269-99ef-fa938edc42eb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888066d6-b854-44ad-9fc0-092e341ecba8", "sighting_of_ref": "indicator--440e2d53-eba9-47bd-95cd-4504a118d822", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76f95ec-9a0f-478b-9fa7-143b58944fc2", "sighting_of_ref": "indicator--838c4bba-982c-42a2-852f-29baff8c4798", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9974e0e4-75a3-4ccf-908a-2d27d2772b70", "sighting_of_ref": "indicator--59f00d93-d652-4874-bc49-35f4dfabdb47", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--359bf42c-90a0-4be6-97cb-a194c3f748c8", "sighting_of_ref": "indicator--3dbcb1ce-a31e-490c-9898-5317aec90438", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd7a1027-cba4-4f58-bca1-0674f96dc50a", "sighting_of_ref": "indicator--f1670ee1-15ae-4623-bbba-069f51dd3cea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--916a24ef-3ec9-40ee-a900-1fdf9fc961b7", "sighting_of_ref": "indicator--3b44ec71-1b0c-4adb-920f-d27e82fb4e42", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c4147b-2ee5-4508-89ce-c5b4452eeccc", "sighting_of_ref": "indicator--4e4b695e-a526-4993-8aaf-3610e24fe871", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c78d8b-530b-48fd-8f00-1cc4b62a50f6", "sighting_of_ref": "indicator--7862b7ca-93d1-4519-a14e-1e87c3732433", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8933fff9-456e-4821-8099-e1b56f630c51", "sighting_of_ref": "indicator--bfec0582-9815-4b8e-b831-ad0ccc3898a4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c7c863-1ab6-45c5-a529-d1bdd3278aa2", "sighting_of_ref": "indicator--825b18ee-b888-44d7-bf46-fbe80afe321e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6dd9d5d-0ad5-4228-b79c-a1bb3c7cb35d", "sighting_of_ref": "indicator--9a7d361c-e03c-4dd3-8e77-4b76bcd17381", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e0b14e7-a1de-4df5-b135-39d3d34d2064", "sighting_of_ref": "indicator--6d540b64-b11f-49b8-bec7-ae9e2ff42ac9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd2b6c0-e409-460c-800f-97642ba1f6b3", "sighting_of_ref": "indicator--6d540b64-b11f-49b8-bec7-ae9e2ff42ac9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1616edd-35ba-43fb-a192-655d65e092c5", "sighting_of_ref": "indicator--b6ab9a48-5275-40ec-aab2-561a835e17f9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe5ddce-1dd7-49d6-8e48-a554fb68a81e", "sighting_of_ref": "indicator--40994c6e-96f4-49a2-a1e8-0f1f115d3c96", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66aaa34-4d84-4bb4-ade2-bec91112a42b", "sighting_of_ref": "indicator--2f355759-d22d-434f-8225-2a4c44d9f45c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb129605-6f6f-4562-bd2e-c979404c587e", "sighting_of_ref": "indicator--7f108846-638e-4743-b8d7-5b43876c9e95", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1e0c84-61a1-446e-a1d4-82bcb4a6e73e", "sighting_of_ref": "indicator--c2c0d631-f0cc-40f2-8568-1964c2797fa2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a957039-1d67-4b74-9f0d-64ef74a3c7a1", "sighting_of_ref": "indicator--7d2a2c9a-08f9-426a-ae40-03393e9b80ac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d8d1d20-f0a0-4688-954d-1a0079b35338", "sighting_of_ref": "indicator--5ac90095-a787-4be4-b734-d6db885acdcd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f32d016-7b22-4cf6-9a8e-7e900c729507", "sighting_of_ref": "indicator--902f7d6a-575d-4e51-8b0e-a0fe1066ccda", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be8a73d-912c-43de-9a04-335ca2952392", "sighting_of_ref": "indicator--9b9086b4-f6e5-4db7-b959-952e0793c021", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7a8075-2f22-45a2-9576-c48579f8c62b", "sighting_of_ref": "indicator--d2282b00-926a-4afd-9496-e03ee751997a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ca321a-d9f7-4cfb-ab3b-a73cb71a69a9", "sighting_of_ref": "indicator--d2282b00-926a-4afd-9496-e03ee751997a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba297e80-a8b6-4d94-8bc2-4ade51a5e3d9", "sighting_of_ref": "indicator--67e2cd2d-a634-43d4-ac84-c7bee8defb62", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765a5f6e-148a-4f41-bed8-e8ab8b957241", "sighting_of_ref": "indicator--67e2cd2d-a634-43d4-ac84-c7bee8defb62", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007b39b6-be93-4536-8044-07fd4b528ccd", "sighting_of_ref": "indicator--cb1764fa-594e-4de3-8fdb-3910cec2cfd2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c0e2d5-cef6-4638-a16d-967d5a000e39", "sighting_of_ref": "indicator--5302c48a-4bd6-47c7-a989-732c03f27649", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416e6d6d-9cf8-4ee6-977b-11df9e882823", "sighting_of_ref": "indicator--05612d48-9deb-4987-9f6f-2f39ff2620dd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b129fe-ec29-480f-b1f4-ceb5af813572", "sighting_of_ref": "indicator--c55fe0cc-9884-4bfb-a6ce-159b102421a4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b318cdcf-bfb3-4e4c-baef-52b3e1995cd4", "sighting_of_ref": "indicator--070f26ef-406c-418c-bc7e-04739d5d357e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ddcdbd-c57d-49d3-97a4-e755d5d6b5e9", "sighting_of_ref": "indicator--070f26ef-406c-418c-bc7e-04739d5d357e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f728c1ee-5bf1-481b-a601-02dffbc5b345", "sighting_of_ref": "indicator--75d95742-c226-4881-b072-72cea0f4b644", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2db9c83-8fcc-486e-9b85-d34b1090a6d7", "sighting_of_ref": "indicator--22d999af-dba4-4e5e-a9db-becf82f1dc17", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590c59ba-c4d3-4162-ad89-410b8272d890", "sighting_of_ref": "indicator--d39d4e5d-7452-4740-84da-8bd40899c3d3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77501ef-a21d-46d5-af1b-3aa202fff99d", "sighting_of_ref": "indicator--77fff072-4548-4fec-b4e6-6fb02eeeac8e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc860ab2-c940-4abd-a3a1-6f770395bc0c", "sighting_of_ref": "indicator--77fff072-4548-4fec-b4e6-6fb02eeeac8e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066adc88-0a67-40e5-a659-b9825c725006", "sighting_of_ref": "indicator--0ce1c3ab-c661-4c79-9cb0-f20e4e2604d7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5511f30-e488-4dad-b1dc-27f73f76f539", "sighting_of_ref": "indicator--0ce1c3ab-c661-4c79-9cb0-f20e4e2604d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1f9b1f-5b30-4b3f-8ce7-95473ccbb587", "sighting_of_ref": "indicator--a8f43b82-e6f8-452d-b108-aaa085b844de", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47edcd16-ae22-4625-a8ef-dd4db8b6d973", "sighting_of_ref": "indicator--be8be7ed-35fa-4d26-8a03-14302304b84e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed12c528-4212-4717-9cbf-c7feb4044b1c", "sighting_of_ref": "indicator--d709259b-e2e9-4d3a-953d-fa2a9bcfd763", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1248adc-49f9-40c5-811e-f55746fd9a02", "sighting_of_ref": "indicator--d1dcca36-e809-4021-8aed-1439b4d29915", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b387d9-7abb-42b4-a512-9b00a30e695c", "sighting_of_ref": "indicator--7618181c-8521-435a-b486-05e7ac230021", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896fddb1-f974-4710-9ba9-f45aabd70a23", "sighting_of_ref": "indicator--ab254127-bdc9-450b-b7e5-8d4c3fb7a56a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9487d164-52d9-48d6-b7cb-d267f461407d", "sighting_of_ref": "indicator--5e5b0dd4-139e-47d4-b4e0-64a94a27423b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11048801-988f-460d-8648-55022423b80e", "sighting_of_ref": "indicator--9278ae50-7ec6-4be9-af45-670158690c25", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e84966-df36-4bea-a7d8-a6e973fa2e1c", "sighting_of_ref": "indicator--5d621d10-80ba-41a1-a167-4c18b190913c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a580667-17ab-4536-a406-b63ab16380d1", "sighting_of_ref": "indicator--32bc4134-06aa-4033-afdb-49629591871f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32dca70-1931-49a9-92f4-7340d01d3f97", "sighting_of_ref": "indicator--05b3ae89-27b4-4985-85f5-530c2166eff2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90741172-798f-4059-9e28-df050512b57f", "sighting_of_ref": "indicator--96fd8eeb-ee97-4b35-aac6-6c75763e090a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f9f4bf-311c-4288-b785-3c5e8a19c70b", "sighting_of_ref": "indicator--e5ec5113-fce5-449d-8fde-cac3908afe96", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc5d5a1-9c53-49d7-9593-55969e9296ed", "sighting_of_ref": "indicator--7251ad0e-ab6f-4927-b4c0-22865f6f3cb3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914fcd41-bb33-4d41-b9d5-a794fc6a8475", "sighting_of_ref": "indicator--934c148c-a88a-4ece-a952-5aecd6ea3803", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba97bb0-ffad-4266-9b9f-62eecb18c4fe", "sighting_of_ref": "indicator--0a3aad0e-908a-4f5d-9241-99e7ed7116cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636d29f7-1065-4fc8-8b1a-aec1e88ca251", "sighting_of_ref": "indicator--6ede996f-94f1-4ac2-8db0-60c27dae6c94", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36b38ec-ba24-4fe0-ad73-e7e14b183842", "sighting_of_ref": "indicator--3ec47f42-2131-4bf9-87a9-d477369ec614", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2708929-038a-4fa7-96d8-748061f79f1b", "sighting_of_ref": "indicator--9646b513-f153-49ac-a2a1-ecee6d41e587", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e95e9e9-814f-4be8-a5f4-8b16315fd513", "sighting_of_ref": "indicator--ca7c5417-a2cc-41ac-ba3e-4a2a9b6df87d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4cadd46-8ac8-424c-ba75-80eb2714df4a", "sighting_of_ref": "indicator--ca7c5417-a2cc-41ac-ba3e-4a2a9b6df87d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1823ba92-cf41-43d7-9fc6-93ed747c532b", "sighting_of_ref": "indicator--2ef8a18c-4534-4394-a16a-2c303697d520", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3eefd7f-c833-4f9f-b93b-04ab4b952ecb", "sighting_of_ref": "indicator--5f6fb892-705e-4e36-b875-0a1d1fcd2032", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887d75f7-c00c-4e8b-94a9-76f4d10debd3", "sighting_of_ref": "indicator--5672d00b-6026-4998-948c-5f61b6467e09", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd24ac7-08a1-47aa-88cc-e156489ecee6", "sighting_of_ref": "indicator--d6ece326-8941-4db0-814e-131fb07e3cd0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6bf3e3-ebad-494c-bd38-4e5cbbec9153", "sighting_of_ref": "indicator--eaa79aa9-13cc-4d23-bed2-fe4ce8b10fb5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aebbec4-11c0-4236-b8c4-9ee683e1e278", "sighting_of_ref": "indicator--1e569ce7-9bdf-4bb7-85eb-703f87388157", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d8d9ff-be1a-49ea-b748-e9330bb27e50", "sighting_of_ref": "indicator--0b8482ad-31f6-4ecf-a764-6dedc0d12c82", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6210392b-43da-445a-b26a-5f33f34d10e1", "sighting_of_ref": "indicator--d9413eea-d272-41a2-a5f9-a5c33b93b7b9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17893aa6-16dd-46e5-a8a1-d3e4035e1a8c", "sighting_of_ref": "indicator--6a5cb2ed-530d-42d0-8d9d-734a01cbd992", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ea4364-b9b6-4c28-b7e3-ee73e629f2c6", "sighting_of_ref": "indicator--6a5cb2ed-530d-42d0-8d9d-734a01cbd992", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--649b58bd-608c-49f6-9d98-5f1066a6efe4", "sighting_of_ref": "indicator--ab13fb59-e7f9-4e95-b622-59a486d12e66", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681de981-89bb-47dd-9b54-321070b27888", "sighting_of_ref": "indicator--50f882ab-e47c-4301-acbe-0646ae152558", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25bfd0fc-53bd-42d4-ac9d-fd2f6b226556", "sighting_of_ref": "indicator--879f2306-a933-48cf-8ea8-96c38ebd5ac9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd2cefe-c844-44b9-af39-df7f9859941d", "sighting_of_ref": "indicator--20023945-7915-4d34-a395-7584dc56421c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d781739e-cbbf-4a78-8393-91786dbba610", "sighting_of_ref": "indicator--e57befe1-5584-485c-be57-bf62f3d0bdc2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a58e776-5f1b-49ae-8627-b253df00f5ba", "sighting_of_ref": "indicator--3643e5f2-ff6c-4109-a45e-1256360b557c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f288fc39-8a94-4e84-990d-4955401bd4e5", "sighting_of_ref": "indicator--ec98be0e-3a8c-4666-9771-5643954178dc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e81eeda-32ae-4f50-a2d0-622459884479", "sighting_of_ref": "indicator--67c2b7ae-5e00-4a1d-8437-078e193d0f65", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e45734-c7a5-40e1-9d7d-ca7154994ac0", "sighting_of_ref": "indicator--10fa4fd9-1eb5-4400-a29e-aab9081095ec", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84db6166-f2fb-44a0-87bd-1d891477e7db", "sighting_of_ref": "indicator--fc47d225-377b-43d0-817d-5a095ab7bf74", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638356a7-047e-40d9-9b57-6666e3fa3b72", "sighting_of_ref": "indicator--b575ffa1-bb39-49de-be30-f601c4723a54", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adae95d0-2ab1-4d19-be45-5bb0e7168e9a", "sighting_of_ref": "indicator--6e1a7b09-d9d9-4256-9e90-0f0805ddb4d1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258b85d7-738c-4e6f-a555-f0aef5a5c704", "sighting_of_ref": "indicator--6e1a7b09-d9d9-4256-9e90-0f0805ddb4d1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe020d80-d6e3-48c9-9c17-b2b43286efc7", "sighting_of_ref": "indicator--a6638e54-7008-4ae4-b49b-7477420abd5a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c458bc4-aca0-4284-a198-9f3402b6b5e1", "sighting_of_ref": "indicator--3c7f6bc7-d79a-491b-994f-994d4e9710e3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3b931b-080b-4ff2-9eee-6b2f65746b31", "sighting_of_ref": "indicator--3c7f6bc7-d79a-491b-994f-994d4e9710e3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c42d909-b211-442b-b24f-39dc93b00edb", "sighting_of_ref": "indicator--e6c481d5-859f-4c7b-b922-8b70260e796c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab97b91-b360-4eca-8060-dd094297a483", "sighting_of_ref": "indicator--23163028-1788-415c-a001-d32488598569", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da73a2f4-2b75-4223-854d-1028ede0d066", "sighting_of_ref": "indicator--bae79ce3-a283-451e-a332-ecb82fc210eb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfad941a-294a-409f-8c7f-29f67b487bd3", "sighting_of_ref": "indicator--b73b574e-edc2-43d5-9c1c-3a69090a8b28", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7ace7f-a8f6-4f21-b48b-0ed520122cb3", "sighting_of_ref": "indicator--f83d314d-84ed-4fa9-84e2-161c8828995b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1d058a-13ea-4f73-855b-765bf0fbd62e", "sighting_of_ref": "indicator--b8fa57c3-b4d5-4fa6-88e9-ad2357a42c71", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57e232a-a35e-446f-9247-717d66534d7f", "sighting_of_ref": "indicator--2569c756-1934-4f3d-8dd1-405028d1c7a1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b23b2434-f708-4459-ad98-0f1b65f8a7a6", "sighting_of_ref": "indicator--9303eef7-2750-4825-b049-1440fbcf2956", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a55936-b8a8-4eb3-86b5-4843b47b12f9", "sighting_of_ref": "indicator--5d132d7e-b5fe-4bed-a782-ff5fb6543452", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56bd5e6-cccc-43b1-a20f-2fd3dd2fb7dc", "sighting_of_ref": "indicator--6c439a90-6dd0-49bf-b88c-67f85a4ad37b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c4ad7c-e0c3-43da-8264-b69ee183129b", "sighting_of_ref": "indicator--be179200-df9f-4502-93ad-654298a7be25", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6e0ba5-b433-4606-9d51-d2aa384b8d77", "sighting_of_ref": "indicator--be179200-df9f-4502-93ad-654298a7be25", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ef96cf-95c2-4a35-b6b2-50cf506a74df", "sighting_of_ref": "indicator--7d1f5adc-0551-4ae4-b646-bac2cf05278c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e916c6b3-ba8d-4921-ba4a-63821c1bf460", "sighting_of_ref": "indicator--56f7a111-da9b-4ce4-9973-cfa116616341", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb5a6c1-97ae-4175-8a3b-5ca1b08e5cf3", "sighting_of_ref": "indicator--91b83a58-e701-4c02-83f4-6c4286cd2d15", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b8c1812-5acd-42a5-bc33-8947a940a34a", "sighting_of_ref": "indicator--91b76ca0-99fa-4589-9316-a9935b4f9f77", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--625ef422-ce94-4fa9-a813-09b5380b55fb", "sighting_of_ref": "indicator--e339ced6-b56c-4a1d-bf1c-33777d4f02ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c15114-dfbc-4e6c-afc4-0faa8689660e", "sighting_of_ref": "indicator--a6e92602-681d-4c8b-bc7f-851681a3e941", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ece6830-0b5e-4836-9f55-d20a6ad052be", "sighting_of_ref": "indicator--3cee66f1-5519-47ed-b7bc-d532932b8ce9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ca46ad-0ae8-4450-9682-6d7845c9aded", "sighting_of_ref": "indicator--85517047-d047-4af1-97a1-670957fd1255", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3db6a6-cc9f-4f64-aa9c-19a04cf0ce00", "sighting_of_ref": "indicator--63865369-6d8e-4b70-a5df-abb97fee52bc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5d4a3e-6557-48cf-afdc-ba9d0d37a14e", "sighting_of_ref": "indicator--c16e6cd4-4800-4572-b73a-2d28198d82f1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d565ebaf-49e5-42b1-b8ea-b6296875cf12", "sighting_of_ref": "indicator--3d5303f6-5bb1-4174-adea-50e01c65a9dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b2a157-60ae-4864-bf9f-f835bdd3d1a7", "sighting_of_ref": "indicator--06bb9bba-ad19-4704-88e5-7b6a312bfc58", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce59551-8ce3-4be6-8702-58f2c163dd48", "sighting_of_ref": "indicator--06bb9bba-ad19-4704-88e5-7b6a312bfc58", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533250bb-848c-4f13-b0bf-1f43dbf9666a", "sighting_of_ref": "indicator--2be283ff-b842-47c7-a91a-b0471ecbed3e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf02dd1-d9eb-4003-b06a-ab3973c396a8", "sighting_of_ref": "indicator--b4d097fe-654f-4e96-afca-f595f7647671", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--006aaba6-a442-4184-a0e6-c9d51ea9ec3e", "sighting_of_ref": "indicator--8e4957aa-796a-4891-89e4-0215c3801715", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96481cf0-cc24-4b19-b942-7b52a1998758", "sighting_of_ref": "indicator--17171d71-dbf0-4fc0-a89d-ab94135e95a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b033b6-6a8c-4dc6-ab08-cb3056bec2f9", "sighting_of_ref": "indicator--b19eb87b-4667-4a51-a312-217f8a9836c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89755d2f-810a-4d31-b71d-3892c290a1c7", "sighting_of_ref": "indicator--dfea7af0-6e13-4859-bc18-759cdcaec869", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a34f052-0071-4942-b888-b3916295f9ec", "sighting_of_ref": "indicator--ebb8ab9a-0c0a-4277-8cba-04bc7c5441b2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4241bce-bb63-4489-b260-18ac097a0127", "sighting_of_ref": "indicator--ab0f058d-06de-45c2-a805-67489864b2da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5290589e-4661-45cc-bd8c-d963ebb0788d", "sighting_of_ref": "indicator--91d2be06-16de-40ad-8f9b-b5ff400b7df9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cbfcc4a-8776-420d-a510-5dd9fc673b96", "sighting_of_ref": "indicator--2dfa90dc-48e2-457d-ad71-ca414e816a41", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--663d3ead-8138-4d7f-996d-9964a1133b59", "sighting_of_ref": "indicator--c11d84e5-5241-4bf6-a2cd-717d4788964b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89de734d-43fb-43fd-90fb-e03132b383f7", "sighting_of_ref": "indicator--c11d84e5-5241-4bf6-a2cd-717d4788964b", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1295bf29-6d29-489c-9593-b7b395c52507", "sighting_of_ref": "indicator--c11d84e5-5241-4bf6-a2cd-717d4788964b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce7571d3-0a51-454a-bb77-d17a4e2e1f68", "sighting_of_ref": "indicator--7425a9ed-fcb2-498b-8b79-f522655b3842", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634fe12e-1c1b-4480-90fc-7e44ce9c8e02", "sighting_of_ref": "indicator--ec1ad9ed-917c-4d2d-8fcc-599656b498c2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa03071-fb6f-4d72-942a-5bfb3d647e6b", "sighting_of_ref": "indicator--ec1ad9ed-917c-4d2d-8fcc-599656b498c2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ea2694-a4dd-4604-9abf-1dede1c90708", "sighting_of_ref": "indicator--804d16be-b60e-48a0-ade2-fc46e3bd8f1e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34e0dd30-99c5-419f-ae4f-22c18e382a32", "sighting_of_ref": "indicator--804d16be-b60e-48a0-ade2-fc46e3bd8f1e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e529b8-67f7-4665-a4d0-1920dda41a17", "sighting_of_ref": "indicator--03b8eaec-d3bf-4e80-ae00-7bb478b86a5d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c8eb79-4e1b-43ad-af5d-6bb0b1310197", "sighting_of_ref": "indicator--f7f692ad-2625-4e7b-9a09-e7dbaf3b5716", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd692d2-2d38-4ebb-9a1f-13a1efbb8ddf", "sighting_of_ref": "indicator--092c080c-6577-48f2-bddb-a667aceaaf0b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e38ab3-2c56-46f4-b481-4ecde5222536", "sighting_of_ref": "indicator--e78c11ad-c0d8-4d55-86d0-a7002f19f011", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f56309-c8f6-4c99-8a6c-f44e94e29bb6", "sighting_of_ref": "indicator--fdc349a7-fe73-49e5-b73f-e39c147aba2f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93fddd0-d201-448f-80f2-620b623cb4f0", "sighting_of_ref": "indicator--73752150-e001-4eca-b413-acd5c8740083", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a93ece2-fabd-4684-9109-11427d3f5dde", "sighting_of_ref": "indicator--25004236-c693-4f51-ab02-f37ff9faa097", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37f294d-4696-476b-955e-69ec49b9c2c3", "sighting_of_ref": "indicator--0b9d34d4-3099-4c74-9d95-4dd706727375", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d209ea-2d53-4e0b-9970-46353d57c41f", "sighting_of_ref": "indicator--ae72c0c3-4ae0-4d1d-affd-409c6b5bd693", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d584ff2a-6281-4f36-a659-c08a4ddff28b", "sighting_of_ref": "indicator--d34a6af9-9f69-4448-ae95-aabe37fe9d33", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef487fe-e13a-4c1d-8230-094ea4d658a8", "sighting_of_ref": "indicator--62b1a78a-729e-4ecb-babe-31aa51db2427", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c23f43-b64c-4a0c-86cf-f8b8fc6219da", "sighting_of_ref": "indicator--1b5a2d2a-b20b-4037-8fe1-1cf3b1770279", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06273e3-c844-49fc-b6d2-b091c3618a83", "sighting_of_ref": "indicator--d0ab42d7-e700-493a-803f-a28d2d6fb29b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e021fb8-20c8-4985-bcb9-3012f4f8c47f", "sighting_of_ref": "indicator--7297d491-147c-4cdc-88e7-ae7f3ee1769f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a544df9-01de-4f33-9fb3-e46a1753d0ce", "sighting_of_ref": "indicator--95ca4299-4b04-4b4e-af61-cbed66ce645e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93750f23-554d-49c2-8897-f5f86638c677", "sighting_of_ref": "indicator--56a9cb27-b0cb-42d8-8f33-b0b28e1cd3ac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74fdc6b3-2d2c-40cc-b2a7-f1b7b7aa9528", "sighting_of_ref": "indicator--d3ae4c53-ff81-41d7-a34e-8687543795cf", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2603e4cc-b581-4df5-81ec-9204ef9fd1ff", "sighting_of_ref": "indicator--10b9fe53-b53a-4076-8d32-70aa6a1acf19", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc64074d-88e4-4ca6-a2ec-8f8bf37b42ab", "sighting_of_ref": "indicator--affc0efb-878f-4eb6-9391-699f73a02cec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373720e5-8bed-4979-ae6c-32ed2563c86a", "sighting_of_ref": "indicator--2ebd4357-f419-42d7-87b1-f6d96ec2b131", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d9f378-0252-4f47-a69e-c0b5e6c00b66", "sighting_of_ref": "indicator--51fd0e66-13ee-46c6-be81-9ae50213b029", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d16e2529-98b3-4710-94be-de009fd826a3", "sighting_of_ref": "indicator--ea71904f-9ca3-426e-b57a-8d29d9bf2ef7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b2f950-0444-43c0-a489-5e0f783a4298", "sighting_of_ref": "indicator--1effdb00-f263-4df3-9916-83e37e9cf603", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f87860-b948-4654-9fd4-155395945e6f", "sighting_of_ref": "indicator--7cc42524-84bc-4b1b-be92-e8d3449ad868", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3b01f0-c2b7-4556-bda4-cfefec43b1eb", "sighting_of_ref": "indicator--266ea21a-b8af-4973-b3e4-f865ddcd57b5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7484dba-52f9-4413-91e5-f242f93d5377", "sighting_of_ref": "indicator--af956f47-ed3c-47da-925a-75eb4018b533", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d3993f-c548-4226-8e74-64b95310089a", "sighting_of_ref": "indicator--768c1cec-d589-4d17-914c-8bc3b449d9d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce1f67d-44d0-485a-9095-972ec085597b", "sighting_of_ref": "indicator--25cf8343-c201-49b9-ab0d-078cd370100e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8981bc6a-dbfe-4388-98af-87e4f8a25a5b", "sighting_of_ref": "indicator--a6b59114-259c-4159-8ba9-39949dd2d190", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1fb6032-8cca-4018-bc5d-db4c5a60bd33", "sighting_of_ref": "indicator--a6b59114-259c-4159-8ba9-39949dd2d190", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6170bfdc-0f4b-4818-b124-94286a801ce6", "sighting_of_ref": "indicator--94565676-8e3f-4989-ae45-46f730facf66", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af5724a0-a9f6-46e1-9e28-db20e5a38fab", "sighting_of_ref": "indicator--673f0f37-6918-4743-b44e-7e619cba169a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ad79bc-bc70-4257-acea-e83d0ad4d655", "sighting_of_ref": "indicator--0df6337f-352f-4c9d-83fc-a2882b515b4a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440b1728-bb8c-4905-b089-b734228751b5", "sighting_of_ref": "indicator--41cd3703-857e-4621-9a85-40f19555d333", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c4e779-0428-4600-a47c-8b2578bb0e07", "sighting_of_ref": "indicator--7f92ae9f-c8d2-4f57-9765-dbf5ce5862c1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ea7e61-4394-4b3a-9a75-3b4d8e334ef0", "sighting_of_ref": "indicator--6a4f4a76-398d-4d78-a8db-458dc83d43d9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b777917-5308-42ad-b011-913eb128bb59", "sighting_of_ref": "indicator--df0f4ec0-5faf-42ee-af40-5c489f43b6de", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7456a445-f1e3-4ef2-8199-80e49e590992", "sighting_of_ref": "indicator--cd2afac9-c843-45d5-8cf8-1b6a6df3f7e4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7233ddd9-2ca7-4ea6-b04c-bb710a5fbccb", "sighting_of_ref": "indicator--4e0a5f07-efce-4941-97fc-2a7739536f7e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a950613-fe80-40a8-b59b-cab4513df5e4", "sighting_of_ref": "indicator--97f1c5f4-02f5-4259-90ec-96d1e31faa96", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5416e15-a0b1-461c-8bb7-2258164c182c", "sighting_of_ref": "indicator--edc0709a-01ff-4648-9aa9-d6643a2b7b02", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58dcb810-07b7-4e86-96ee-950215c21a57", "sighting_of_ref": "indicator--e7b8f3ed-b90a-460c-94ee-7df682a4635f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e878f8c2-d933-4cfb-8bd4-d7b9ebd8ac63", "sighting_of_ref": "indicator--4bc57ed5-db8d-4872-ae65-28e0c62f6f0f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118eb3d8-3cfe-4a4c-b803-db724815d26d", "sighting_of_ref": "indicator--9f044267-7e75-4c9d-90d7-3ab2da5ae8d9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3925bb5a-6e33-4997-94fa-cdf93dca00c7", "sighting_of_ref": "indicator--9f044267-7e75-4c9d-90d7-3ab2da5ae8d9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947a3f22-3761-47c3-8006-cf738c1659a0", "sighting_of_ref": "indicator--73987b74-6515-4bf9-8d4d-bfe9c287b4cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--232a8cf1-2922-41e4-bd24-2cfa816e3251", "sighting_of_ref": "indicator--eaf07f71-bfb4-4dec-8196-d4cc25726722", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df516c4d-cfc4-4568-861a-001308cd008b", "sighting_of_ref": "indicator--9c489726-a6b7-46e3-8027-a8897b164ece", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8850c7-aae5-4169-96ac-7f6b00a5238a", "sighting_of_ref": "indicator--340bfa47-4a4f-48b5-8863-5bbb0e3a15a0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--727ac9b8-c10b-4500-8975-6f009aa1a670", "sighting_of_ref": "indicator--c9c606c5-9f36-43a1-8ccc-29bd18ee0963", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8966c290-22c0-4058-90d0-d5da7b6a173a", "sighting_of_ref": "indicator--37af10ce-837d-4a1b-9559-e3fe759543fb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16f8b89-1880-4509-b5f5-b7d736086d99", "sighting_of_ref": "indicator--ddc3f7f2-ce78-4124-ab87-8a711a6de74d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f40499-1291-4233-b2da-a4b5db4eabb8", "sighting_of_ref": "indicator--6405ab4c-4cd7-4ff5-8630-a6108478967a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34f35fe-e9e5-40d5-8734-35afa42a1746", "sighting_of_ref": "indicator--3d045f3b-5c15-4dc5-8e91-1e85e32bc539", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d9fe44-e455-4d9f-9cd4-1beda08849bc", "sighting_of_ref": "indicator--3d045f3b-5c15-4dc5-8e91-1e85e32bc539", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db19ef77-1c2f-4814-bada-da526b9e67e9", "sighting_of_ref": "indicator--95c7031b-26cc-4735-a65f-62e9386080b3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1aa14a8-2820-4727-821d-d4c10700c2e5", "sighting_of_ref": "indicator--95c7031b-26cc-4735-a65f-62e9386080b3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d2582f1-42ff-49bd-8043-ae7f1199c321", "sighting_of_ref": "indicator--04af4b6e-ceab-48f8-bb0a-07deab746a4b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8dcabf-94b9-4ff5-9ccc-5a68cbe2b5d9", "sighting_of_ref": "indicator--7874feed-2391-416f-b9ed-0bd77eb6aaeb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f507f61-14ba-430f-af91-b28ed9f17342", "sighting_of_ref": "indicator--13e791c5-0e95-4e17-9533-83f2cc35e8a5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13701275-8baa-4d17-a825-5ae2e985e8bb", "sighting_of_ref": "indicator--97da200c-f83e-47e5-9b61-ac2ca4ef87df", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2b718c-2870-4ccb-95d6-26330b968807", "sighting_of_ref": "indicator--58033c88-76de-4e58-83d8-29f209824b32", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0488725c-8cd1-4abc-917c-0a25a331694d", "sighting_of_ref": "indicator--4b1603fd-cb8c-468e-9153-b1782e8a60d6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b85616-274b-4e46-ba6e-76bc489fc87e", "sighting_of_ref": "indicator--6d31047c-b733-4326-a80a-d3694c611a72", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82437b2-ffd4-407f-9b04-10a5734961b8", "sighting_of_ref": "indicator--c649834a-ebce-49f1-aa29-795f402f63df", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f250438b-6e0d-4c0c-bda3-d7e8d0168990", "sighting_of_ref": "indicator--fe911677-dffd-41de-9d37-f9ba69196a22", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c093450f-35f1-4d06-ab6b-110e78e5faaa", "sighting_of_ref": "indicator--fe911677-dffd-41de-9d37-f9ba69196a22", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb24869-56f6-46ed-879b-89c6e4bc3bc3", "sighting_of_ref": "indicator--59cc6335-5e66-422e-9962-a7816e17b716", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0071f69f-3990-4be1-92dd-d71a99a94533", "sighting_of_ref": "indicator--83bfe9cc-c615-4aeb-b3a4-ed5daa8944b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d615243-5c1d-40b9-b001-c95e277a7f09", "sighting_of_ref": "indicator--3944ef1f-a4e6-4afd-8a1f-2dd19e89283d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1882067e-b401-4f96-b41d-d059971ff547", "sighting_of_ref": "indicator--459f2959-2062-4930-b912-10e2adfcb420", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff4fb13-aff5-45cd-a6a6-ffcb6558d7c5", "sighting_of_ref": "indicator--d04be774-a1c5-402e-a1eb-13f5894c10f8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6933636c-b5ab-405d-97c5-781011ca1102", "sighting_of_ref": "indicator--11760a89-342f-4cdc-9d7f-808c113cd895", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269325a0-8de7-4d8c-9369-8136d64e1b37", "sighting_of_ref": "indicator--11760a89-342f-4cdc-9d7f-808c113cd895", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19fccda-5fdc-4906-9566-30bcfbc71bdc", "sighting_of_ref": "indicator--4d6dfd6a-e33c-459c-bd6d-7ac43e600e8e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0186c2d-f264-4fa6-bd6a-31a1b879da1f", "sighting_of_ref": "indicator--c489b2df-297d-4b78-9857-97570ab13397", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba0afdd0-4f5b-42b1-acad-323e76542c1f", "sighting_of_ref": "indicator--f5be6d5e-7491-49fc-a488-6f55766ce969", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4357643-8cc1-4ead-aeee-bf36aeac88a8", "sighting_of_ref": "indicator--8d15fe90-b9a0-4e93-af08-6635ef99c38b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f890d81-365f-4408-9638-c2322499f503", "sighting_of_ref": "indicator--2af109cf-4990-4305-8d8a-69d3558eb608", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b018622e-e7ad-4666-9893-662f9e7e416c", "sighting_of_ref": "indicator--c85da2e0-0ed7-4ee8-b6f2-9632e24d63a9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b16439-256e-495c-9111-ac0bd2b6f492", "sighting_of_ref": "indicator--0a2fd494-c8d2-40b1-be1d-37549d6e43a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00618ff-d7bb-4a45-8d07-b7d9cf9611c0", "sighting_of_ref": "indicator--19b184fa-26f5-4ff3-bf47-b1ee281e9678", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2cd366-ab64-4aca-b360-7c771e1b9b4d", "sighting_of_ref": "indicator--43d77f64-9e14-4455-aadb-1dfe8ff1f680", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287f60af-572c-4505-b265-e23575b8d12b", "sighting_of_ref": "indicator--43d77f64-9e14-4455-aadb-1dfe8ff1f680", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd59eaa-8cc3-4208-aee1-7e4fcc5482fe", "sighting_of_ref": "indicator--04b7cfea-cb3b-4343-a8a0-13840b908621", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6907943-4f61-4f5f-ad66-979997d02c91", "sighting_of_ref": "indicator--5f37ef43-2cf3-4ea4-83d4-3a43a6d5aab1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb35a9b-dd61-47c4-bdbc-285004a56212", "sighting_of_ref": "indicator--5f37ef43-2cf3-4ea4-83d4-3a43a6d5aab1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e839b918-6c14-42ba-b301-10943aa443b8", "sighting_of_ref": "indicator--6d3f789a-8b2a-46e4-a3d6-80d8a83d4fe2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942b7193-4cdc-48c4-92b0-39ab3d81cfa2", "sighting_of_ref": "indicator--96c22606-36dc-4634-8c7d-49c93f8a6950", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9104db3-99a2-407a-b895-5ada2928df32", "sighting_of_ref": "indicator--778cf0dc-4451-4ebf-8ea8-f407ade260e3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d191d6-3143-49d1-bab2-eebe7d7b9e4b", "sighting_of_ref": "indicator--f8106c31-a673-4fbf-81ae-89187af31f2f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b350c47-e6ab-4591-9361-edaa76b7c6c5", "sighting_of_ref": "indicator--58375f7a-a7d9-4971-9b48-e2ecda77aac9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248d448a-2811-40b9-9943-17ed2d29fc00", "sighting_of_ref": "indicator--bd74f831-343c-4787-8723-845541186d9c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc86e3b5-3615-4fbc-bb2f-411329128507", "sighting_of_ref": "indicator--ee02f298-c9c6-4b53-94be-c1d8de2bc96a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3092bcf8-c127-42dc-ba71-16dcaf44edc9", "sighting_of_ref": "indicator--ee02f298-c9c6-4b53-94be-c1d8de2bc96a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc9731d-65ef-4a5e-ac57-95e469047423", "sighting_of_ref": "indicator--3d75ad53-3e25-4b36-9879-6a787cf664c1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e5f50b-b770-47fb-bd9f-59c05a8e79b5", "sighting_of_ref": "indicator--3d75ad53-3e25-4b36-9879-6a787cf664c1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7254048f-b318-476a-9655-961ae26876a7", "sighting_of_ref": "indicator--7cd86c3d-984e-4a90-94e1-7b1105bffd63", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7141353f-f069-496a-9f18-ddc096ee923b", "sighting_of_ref": "indicator--6c3762be-ad9a-48c1-b1d9-ccdaaaab7115", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c435984d-d15e-48e6-b1e5-060fa1b7c332", "sighting_of_ref": "indicator--5035fc80-6f39-4a9a-8b4f-fe620a83b415", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a721b2af-a25f-4a1a-8fee-3350e59ea392", "sighting_of_ref": "indicator--f315c564-4cb8-4c06-a308-d882527b000e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5755c4f5-700e-499f-84b0-fedbdb8a3465", "sighting_of_ref": "indicator--7f55af59-a7d5-48fa-b77f-4b8b4f8decd3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d837ec93-fcfc-457d-b39e-a1f3a235e36a", "sighting_of_ref": "indicator--56d1e2b3-d31d-452e-9122-288bc3d5877c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b0c251-d127-4b6b-bfba-b5454a5d7c7f", "sighting_of_ref": "indicator--56d1e2b3-d31d-452e-9122-288bc3d5877c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a26f320-0361-4a04-890a-f1f7f31aa6ab", "sighting_of_ref": "indicator--d46544de-c1fb-4424-b1b1-c48eb5f89c93", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30021573-3628-4eb6-843f-d0d027a1e1e0", "sighting_of_ref": "indicator--d46544de-c1fb-4424-b1b1-c48eb5f89c93", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb18bae5-e964-4cbb-bc32-aa2ca3137fcc", "sighting_of_ref": "indicator--fa141a29-44f8-4d6d-ba85-6deb4c41a350", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3912e525-701a-483f-b749-8ea8e598f790", "sighting_of_ref": "indicator--5da0b18f-b754-443a-82cc-3a4337db8024", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1309071e-6386-46d3-a49b-4fda80732c2f", "sighting_of_ref": "indicator--16e55e2b-8236-4fe1-b502-7fa1f9a38697", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec0f0d77-0579-40b8-87d5-1a71f07eb303", "sighting_of_ref": "indicator--b4ff751a-b609-4b1d-94b0-7c6977741c10", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78565d5-1609-447e-96b7-1d04457d766b", "sighting_of_ref": "indicator--25ac6351-a3ec-4f47-8ebb-18e3d942bbe8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e6a657-080a-4d6d-a851-0e60eb686556", "sighting_of_ref": "indicator--6fb6ca7f-4871-4f21-a86a-8b69a4d61473", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea95d86-2703-4472-b7e9-625e447f075e", "sighting_of_ref": "indicator--e1011f1f-1378-4140-b2ba-f4ede8ebb2a6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0941e79-ac04-46f6-a799-7b206f86a9fb", "sighting_of_ref": "indicator--d2cfa67d-6df7-4896-9632-6add8201e72a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074ad8e1-9b3a-4c9c-bbdc-d49692d6ea14", "sighting_of_ref": "indicator--d2cfa67d-6df7-4896-9632-6add8201e72a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d760efed-9ff9-4ddb-9f2f-a8b06cd40e73", "sighting_of_ref": "indicator--27cf1a73-42f8-4277-b699-04ebcf3f7bfb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf5b994-b98f-4b38-afd4-5bad27e08b04", "sighting_of_ref": "indicator--27cf1a73-42f8-4277-b699-04ebcf3f7bfb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c70b3f9-fdef-443f-a520-e32c63d6996e", "sighting_of_ref": "indicator--9cf5af21-c5bf-4815-822c-3e09ec246ae7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0fa744-4d1c-4500-844d-44de43d89e54", "sighting_of_ref": "indicator--d953a876-886e-4e0d-aa9e-2d7c3663c581", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a497357c-a357-46c0-8096-7ff4f8d63147", "sighting_of_ref": "indicator--277fd1a0-e3c2-446a-8456-045cac0bfc41", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc61c77-c895-490f-8cba-e9de2ae37ad6", "sighting_of_ref": "indicator--c9fe194d-b6ff-4ee5-9d06-b2181f202980", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6081d3-2648-4385-b2fc-fed16e077844", "sighting_of_ref": "indicator--3bd60456-0b73-4e58-a337-79cfc6c7eae6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04691037-4f79-4e45-9247-8d31cd33512d", "sighting_of_ref": "indicator--a5924a80-178a-4fe2-a9aa-f05cb17a906c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e8a4c56-0a27-4e06-9b45-e49536353168", "sighting_of_ref": "indicator--4a4cb947-4016-4e97-b518-75aab5d70723", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ca0f7d-4a92-49d7-946c-ce76348e6c5a", "sighting_of_ref": "indicator--a96266a7-ecb6-42e3-97a5-3e07662e4ceb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c55d98-b69b-47ce-b4ea-aaa01bb4718c", "sighting_of_ref": "indicator--ca04bf61-3c3c-47f4-9dcd-2e49d49e25ad", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95c7dd3-f965-4102-937a-13c8ad961924", "sighting_of_ref": "indicator--82b42257-c5ef-40ee-9754-4df9c53d0c6a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d44cc8-57d7-4020-a8ee-c760b0347241", "sighting_of_ref": "indicator--fa8b26cc-42e8-470b-9f53-299534edaf7b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab4143a-3c07-4985-a3d3-23bad8130f29", "sighting_of_ref": "indicator--d256de04-be6b-4ae2-898e-c05ecaa4b3f3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34e1539-55e8-4b17-af7a-5dd2da3e2fd2", "sighting_of_ref": "indicator--a0147a10-ce07-4c66-864f-c67a0583edf3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceab568f-f9b3-47d9-81e6-ac1e48b6fe87", "sighting_of_ref": "indicator--887cda1c-c80e-4827-8073-d9a3438ae1a6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1cab11-f6a7-4d35-bc8e-295482227e2c", "sighting_of_ref": "indicator--1d89465f-0b23-4acb-8f3e-0f99c3817ecc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f808bbe4-c9f9-48fd-a086-135500151ba0", "sighting_of_ref": "indicator--85a2f4be-5fa3-4645-9c02-edbe8633cf06", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d493c2f6-dfeb-42f1-b92f-c6840a4674f3", "sighting_of_ref": "indicator--7f177c24-bfcb-41cc-8325-25454bee8c3e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a6645b-70da-42c3-8971-f43388114539", "sighting_of_ref": "indicator--379a5137-40b8-42af-9c49-dbb74ee77544", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39663f5f-2516-41c8-b177-22c7221165af", "sighting_of_ref": "indicator--96298797-aa62-45e4-abf8-64886fa19e38", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec483a0-664f-4218-bb78-dcb606428763", "sighting_of_ref": "indicator--83adf0eb-9b70-4eae-9742-238e490be928", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c90fbd5-2da5-4eec-bad1-4510c15e95b2", "sighting_of_ref": "indicator--a3be3249-215d-47b2-9c6f-e74d878e2828", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d2bd22-cce1-421d-ba81-b64a2bcfce33", "sighting_of_ref": "indicator--5ed35a60-7c9b-490f-9c78-17edd8c9ff39", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ba1739-7216-4d86-aff8-90a57def05cf", "sighting_of_ref": "indicator--601d70b8-aaf5-440c-881c-26b322e35234", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65dd17d0-676c-402d-b789-170e66ccfa48", "sighting_of_ref": "indicator--f00c4966-845b-4c7b-95f3-ad088a974d79", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0fa798e-c085-47d9-9606-d571501bab1f", "sighting_of_ref": "indicator--82bf62c6-4591-4c76-a554-2ba02b6cd226", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c6f842-b817-4f5d-9aff-214dcb84eaf9", "sighting_of_ref": "indicator--59d50f11-f5a9-4613-93d6-3860cce2de96", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb0b9865-576a-437a-b501-30344afc9b32", "sighting_of_ref": "indicator--59d50f11-f5a9-4613-93d6-3860cce2de96", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab32cb0-2f9d-42c9-b040-f383a5b3bc2a", "sighting_of_ref": "indicator--5755a3cb-4e00-4e0e-badd-f87e32a296e2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa06cdfa-1e95-41f9-b6d7-e2070d196a0f", "sighting_of_ref": "indicator--5755a3cb-4e00-4e0e-badd-f87e32a296e2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2b36c5-cd6d-4788-b3b6-152f19f8babc", "sighting_of_ref": "indicator--3f0404c8-c4e1-4596-8938-bd39f598b27f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d1a8d6-19d9-4029-8818-87ec0f38e373", "sighting_of_ref": "indicator--721f3424-6412-4b38-bc49-26b3863dbf70", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ea2833-ea9d-4d21-9b20-1f82ac32d2f5", "sighting_of_ref": "indicator--721f3424-6412-4b38-bc49-26b3863dbf70", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44077d63-a457-4d6e-bc41-ae15a6625c66", "sighting_of_ref": "indicator--40ab2274-ca43-4c10-a8fe-26748b5838d2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e368de08-e351-4866-a7c3-7a80361e291e", "sighting_of_ref": "indicator--3c28e8df-3685-4f11-b3d8-fc273ec74c63", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59f0aa0-c9d7-498c-82e4-44c7a818bb27", "sighting_of_ref": "indicator--3c28e8df-3685-4f11-b3d8-fc273ec74c63", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac5ee6cb-9dab-445e-91dc-68fbad5a25fd", "sighting_of_ref": "indicator--7470fcf5-d2ce-404a-8b98-74f4d0c582b8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be9b61a-38b6-4e25-b2cb-9d577d5afa51", "sighting_of_ref": "indicator--7470fcf5-d2ce-404a-8b98-74f4d0c582b8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c554ac-e645-4893-bff8-e898477c50ca", "sighting_of_ref": "indicator--39209b52-fc70-40eb-bcd3-a991bba31079", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d746657-6c68-4fa7-b81e-739739612606", "sighting_of_ref": "indicator--39209b52-fc70-40eb-bcd3-a991bba31079", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e705be5-4e43-4b50-9140-3cac39712e84", "sighting_of_ref": "indicator--d98cf6ec-ad7e-4c2c-bf72-9c3b81089b75", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--826e0381-48c3-4392-96ae-37246ffa4a31", "sighting_of_ref": "indicator--1f58f6ae-22bb-4269-b913-bd47df5088d8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e24386c-3f40-4a75-beb4-68b70b35e4dd", "sighting_of_ref": "indicator--1f58f6ae-22bb-4269-b913-bd47df5088d8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b1f26f-6848-44c8-a354-96ea50d4793b", "sighting_of_ref": "indicator--39353e0e-5f07-4a04-8b98-a64867db819e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4489551d-3082-4a33-9bbf-81378cab1243", "sighting_of_ref": "indicator--39353e0e-5f07-4a04-8b98-a64867db819e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b21fb92-cb0e-4587-81b2-6439819a65e7", "sighting_of_ref": "indicator--9fd06513-2f90-4e9d-865b-f1c4e06ed225", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e710e18f-37f2-4375-a50e-bec03ac07318", "sighting_of_ref": "indicator--9ebbd231-36a2-4407-af56-3525673d2ac4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5199e6-c917-4058-b6fd-4500cf54ae5a", "sighting_of_ref": "indicator--9ebbd231-36a2-4407-af56-3525673d2ac4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96df1022-7877-44d1-b5be-10f874e46f1e", "sighting_of_ref": "indicator--c02cac21-181b-4659-a6e7-2283ff466612", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433a36d4-1030-4ca4-bbec-a4a847bd037e", "sighting_of_ref": "indicator--4a260a00-49aa-40e6-b1f4-9521087418b5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3417d4d-9a12-48c3-9278-02ed17d14db8", "sighting_of_ref": "indicator--6b50a5d6-f364-4912-af2a-d9c5d22dd3b6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc23423-b1a8-4e6f-9cfe-ef72bccb36ed", "sighting_of_ref": "indicator--afaaa082-1359-458f-b13b-ac2d0a92ac62", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a4ac40-fc2d-4579-9e61-83485b8305b8", "sighting_of_ref": "indicator--a7582b85-cac0-45e6-a79e-9718eace170e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a09c24-3ecc-4648-89b1-97a847cba559", "sighting_of_ref": "indicator--3f79f069-ea00-43ef-8b46-05cbd9777638", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5d2c6d-3839-4bc3-bfb5-c0c3464f0b79", "sighting_of_ref": "indicator--bd63d6fb-f7aa-4012-b18e-26b9ecb8b8df", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f6f016-3dbc-4991-86cd-789b2489231e", "sighting_of_ref": "indicator--cedc0a6a-6b27-468d-bde0-f2b29e3af32f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e3d89d-61a0-49e4-b117-91d30fdce39a", "sighting_of_ref": "indicator--b55be105-61b4-46ac-b709-185aaf08fd66", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--686ebe56-c741-440c-85fe-ef9574d61099", "sighting_of_ref": "indicator--6b0e3ff7-fa73-4b33-a5a8-99594920573b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6108e0-fa44-410c-b9e0-12e9f64cd8b5", "sighting_of_ref": "indicator--5057d11d-1a1d-440f-be5a-2bbe9c8c918a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beedf40c-357c-4f99-ac57-f372973a2f56", "sighting_of_ref": "indicator--5c67beb8-d34d-43f4-a94f-14f54362505c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--125e1bc9-794e-45e6-acf1-f1c0131d9562", "sighting_of_ref": "indicator--495c3cb3-b742-4ddc-84fe-387f03f374bf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a320e76c-eea6-4ee1-8250-ab1a6f4f99c5", "sighting_of_ref": "indicator--7d7eaf56-94da-4d09-84e3-9692f58dfbe0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1728e7cc-ebe7-4991-a00f-7390f4565fc3", "sighting_of_ref": "indicator--0c78feb5-c162-4086-b3a6-ee658e1e98bb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c747a51-8b4a-486d-971e-036e61097014", "sighting_of_ref": "indicator--0683c6c4-a6df-4eed-b5c5-5a9d4540c3ed", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af5754af-24ca-4154-88df-dd21e4354878", "sighting_of_ref": "indicator--1ce71854-298f-4d03-b3a0-a97bd687c210", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df1a4df-e694-475e-a6b6-39a2e3062ecd", "sighting_of_ref": "indicator--ffdd6c69-a28b-469c-8af9-d5ecb1fe0452", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72f1854-925f-436e-93ae-091b8b829b22", "sighting_of_ref": "indicator--e0a510aa-1bc0-4cae-aa6e-939c891af804", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec9910e-9936-44d6-8d2c-5586df1b38f7", "sighting_of_ref": "indicator--18a312fd-1803-419c-b71c-7413276eb722", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2cafb2-7dfa-4c66-927f-0a08dcd3db6f", "sighting_of_ref": "indicator--705ad80c-305d-4a04-a9e1-0c162ac068fd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebac4fab-905c-4f7a-99b7-53325e55a24c", "sighting_of_ref": "indicator--55fcb3e3-41cb-499b-8e28-9002305455fe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db08556-526d-45c5-a054-d06727fd0759", "sighting_of_ref": "indicator--f4b48eb3-5926-4590-a5a2-b755bd2d7155", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8266b7f6-5561-45e5-86ec-1d9a74fb9728", "sighting_of_ref": "indicator--187d65b0-999b-426c-8498-18a70aaa0ac9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18513e2c-186d-4b5d-b2cb-b4fbc8a0e002", "sighting_of_ref": "indicator--a84dd91f-e177-44ab-9a5f-a60b642ecb70", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116cd3a1-cdc6-4c0e-81f2-b2f8cbc43160", "sighting_of_ref": "indicator--a84dd91f-e177-44ab-9a5f-a60b642ecb70", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22146266-396e-47ed-9e53-8a038e081555", "sighting_of_ref": "indicator--ca80f638-6e03-4a55-a84e-e1477826ba17", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b391657a-ffe2-4968-83d8-2f89c3b4e71c", "sighting_of_ref": "indicator--c1c4e4c6-4e42-4a81-8d0e-480503bfe567", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2782399-afe8-4962-8ebe-6aad4f6de9d6", "sighting_of_ref": "indicator--d59f121e-ee15-4be2-95f6-64a1ffd8c7bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ccc6788-5e3c-4037-8eac-96ff64fb93b4", "sighting_of_ref": "indicator--548ca02f-0d30-4dd7-ae91-5d9f5a45b4d5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60231f9a-5391-4a96-bd64-78a1a28eff84", "sighting_of_ref": "indicator--548ca02f-0d30-4dd7-ae91-5d9f5a45b4d5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c122b584-04b7-4c6f-a893-941620f08ccf", "sighting_of_ref": "indicator--f195c327-5d7e-4ce3-9693-d548f94c4d9f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d37aecd-fc21-425e-a292-2e1b44c9e3db", "sighting_of_ref": "indicator--d9bc2583-374d-426e-a19b-c340ff7a2b19", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bcf608e-94d7-42c9-a4f1-746a8d9bf6b5", "sighting_of_ref": "indicator--3be2cde0-d1ce-4838-8b0e-cbb6dc9bb6a9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9133357e-0a88-40b1-8c2e-cf9f0b490791", "sighting_of_ref": "indicator--8d978069-1b3d-4012-8c94-11d4cec90f1d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a37c8198-1541-40a8-9e11-d6af93d26953", "sighting_of_ref": "indicator--8d978069-1b3d-4012-8c94-11d4cec90f1d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f436042-7447-4a39-a6cb-4af1e1f284ae", "sighting_of_ref": "indicator--67ff05d9-725b-4c89-8987-99152b3cf531", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6040e914-63dd-4389-905a-c7b30bef5695", "sighting_of_ref": "indicator--67ff05d9-725b-4c89-8987-99152b3cf531", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30740ce2-f71e-487e-acae-2849908d65a5", "sighting_of_ref": "indicator--e857075e-b8e7-41e8-a928-94aa06c6f27d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00e37af-c724-4f38-bae2-1e6065c215bb", "sighting_of_ref": "indicator--3d4a0358-2a4a-4a24-a5d5-d8a8f64bce40", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa88d26-d372-41a8-b351-f2f9c942962e", "sighting_of_ref": "indicator--229e2189-1ff0-46a0-bcd0-c602cbab8488", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab0a9ba-7be3-4332-b847-b16ded8f1b19", "sighting_of_ref": "indicator--229e2189-1ff0-46a0-bcd0-c602cbab8488", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5260eb18-0e3c-44e1-a8de-37b5c23341c0", "sighting_of_ref": "indicator--29af063c-f064-40de-a669-3aab61d3895b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b16928-dabd-43c1-80f6-3c520931b1eb", "sighting_of_ref": "indicator--955d1dda-17eb-4fdb-bb5d-33025a0a05ca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c62cd54-ed05-4868-8500-5bf0f5886bfb", "sighting_of_ref": "indicator--66dead6a-2961-49a0-a7a5-737746a4e861", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b24988c-5a06-40eb-9e62-be8460e51c92", "sighting_of_ref": "indicator--66dead6a-2961-49a0-a7a5-737746a4e861", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a36cd4-4a18-4df2-bb6d-bd524a599492", "sighting_of_ref": "indicator--00f9364a-0c00-4384-944a-80e6fd8a4019", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e947ff7a-857e-4d07-9ef5-958f560584ba", "sighting_of_ref": "indicator--0defdec7-4610-4d46-b66c-f93a7eb82254", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f33e8d37-baed-4989-95ca-452d71b71328", "sighting_of_ref": "indicator--e1707fc8-a350-4d59-9e9f-78039f4ca2e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce7dda0-ee73-4001-bc74-0a26d1aba822", "sighting_of_ref": "indicator--402333d7-4315-4e7a-a966-9f0e6a8afefd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a2ffc8-21dc-49e5-ad9a-20f0d9246feb", "sighting_of_ref": "indicator--cc5e07af-12ab-4f59-bf26-43aa9329323e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0940e916-8f29-40e7-892a-317cf61d849a", "sighting_of_ref": "indicator--cc5e07af-12ab-4f59-bf26-43aa9329323e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce58e1e5-b9a0-49a0-90a5-853b1064655b", "sighting_of_ref": "indicator--ccd500e0-d04f-407d-9b51-090220941dcb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a157318-c9dc-4f55-9b06-2f8ab790f8b5", "sighting_of_ref": "indicator--2b0a3e03-9b07-4972-be11-26edbb7f1232", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201384bb-2ee8-4300-8804-c775211b65e8", "sighting_of_ref": "indicator--2b11c472-792f-4ba4-a46b-b7c28ee001d0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a52af633-21e3-4023-a46c-fe2cbc145f88", "sighting_of_ref": "indicator--cc3a6f28-21be-4264-a45a-128f73a9873c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2afd09-8645-4894-a7a8-dad1c79b3293", "sighting_of_ref": "indicator--d2c8f686-c2d8-42f9-910e-04a0a414fe0a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c741ef68-19f6-4806-ba12-badfba48ff9d", "sighting_of_ref": "indicator--0ce1bf06-a907-40be-ad97-2521ca9bf645", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153379f6-982d-4369-ae6f-5ca88ab254c9", "sighting_of_ref": "indicator--0ce1bf06-a907-40be-ad97-2521ca9bf645", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017e055b-da44-445d-b7e9-aebf057b4e3c", "sighting_of_ref": "indicator--34835685-2659-444d-af7f-7e6fd04f54d9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b8b2b6-2067-4790-95bc-0b64881d4662", "sighting_of_ref": "indicator--de5e5acc-5b13-4f8b-8474-6ee7306796ac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03f7237-1b66-4b6d-8659-b9b3b6148868", "sighting_of_ref": "indicator--52f4a4b1-e174-4ca3-9112-2c581b15fbeb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7a6abe-b206-4d16-a7ee-f01152a67b2c", "sighting_of_ref": "indicator--e5a83cb1-b406-4ceb-9d5a-e1a9067707c0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08bd506-d6c8-4a89-a602-92a72961ca43", "sighting_of_ref": "indicator--6e818870-2114-4ab4-88f3-1e16060c6ee3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40099ae8-d5ab-43b3-815a-7d80a8aabc81", "sighting_of_ref": "indicator--ee19e656-6219-4b08-8a64-4c0c10f98599", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba495d1-6ded-4814-af72-dd8b7a6188da", "sighting_of_ref": "indicator--fac47dc6-ea36-403a-9500-2148c9e9690e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5f9c6b-5f87-47b0-898b-96d9d5b72a93", "sighting_of_ref": "indicator--a9caf2bd-8a87-4b55-9ddd-27e61519c8a4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edef8769-83bb-4d86-b0b5-96fd495648b7", "sighting_of_ref": "indicator--a9caf2bd-8a87-4b55-9ddd-27e61519c8a4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c92e434-69ec-42f1-96af-767859eeb5e1", "sighting_of_ref": "indicator--a174ca8a-bcf4-4098-bfe9-5501510de13b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd2c16c-59e2-462b-a386-97e7de2e7624", "sighting_of_ref": "indicator--a174ca8a-bcf4-4098-bfe9-5501510de13b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf436c0d-1cad-4938-9a1f-566e174afe4a", "sighting_of_ref": "indicator--ca012f62-d411-4a0e-bc68-7b5e998d6d6f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584b822f-4eaf-4c7e-a26e-2608324d95fa", "sighting_of_ref": "indicator--ca012f62-d411-4a0e-bc68-7b5e998d6d6f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a9af09-155c-4788-9adf-4b55691121c1", "sighting_of_ref": "indicator--136e55c7-b227-4e31-8184-622f5c43cdae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba304fc-d800-4ecb-b490-dfadcdbb2c79", "sighting_of_ref": "indicator--d6ec640d-eada-4e9e-aeb3-5e4d14a83980", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8052fe8d-7335-4b2d-8fb3-8dc37465de25", "sighting_of_ref": "indicator--d6ec640d-eada-4e9e-aeb3-5e4d14a83980", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--657a7d1e-7c9e-4d84-a310-0fbf7ea9e6bd", "sighting_of_ref": "indicator--fdcc2307-9995-427a-beea-950c968c5b2c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80323f18-6111-48cd-8fdc-479a54921159", "sighting_of_ref": "indicator--fdcc2307-9995-427a-beea-950c968c5b2c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa793538-b5a5-4d2b-b089-41b86aa971ed", "sighting_of_ref": "indicator--56189c8f-d33f-425b-9d09-5286cc7f771a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73afb280-22da-4501-b94e-b8753a666d43", "sighting_of_ref": "indicator--56189c8f-d33f-425b-9d09-5286cc7f771a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6595eb0d-688f-45e4-a075-506770f03064", "sighting_of_ref": "indicator--01c46e10-57a1-4bfe-84e6-cf4ddbdb46a4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a21044e-734a-497b-a173-4834d35cac63", "sighting_of_ref": "indicator--01c46e10-57a1-4bfe-84e6-cf4ddbdb46a4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--106afe64-46b0-41ee-9421-cbdbcc980208", "sighting_of_ref": "indicator--4cf95f0d-5bd6-4587-8656-9651162de4cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521119ac-74c5-4155-a2e6-6496ca4ea572", "sighting_of_ref": "indicator--ff44f69c-2cf4-4839-8737-2b58c1e7be35", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20e6c6f-b351-4c59-9f8b-88ca61dd55bb", "sighting_of_ref": "indicator--77ca82e3-61ab-4f50-b327-cc847d473ebf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0080e0c4-e5b3-49d6-919b-71989c280c71", "sighting_of_ref": "indicator--77ca82e3-61ab-4f50-b327-cc847d473ebf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2027962f-32e3-48ce-91c6-afd3d8779b6f", "sighting_of_ref": "indicator--5029dd60-e0b3-43ec-ae0e-a54b286a75a7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3003db-a53b-4357-be7f-705d194b2d2a", "sighting_of_ref": "indicator--7815d86d-922a-4e2d-9cf5-4d92814cee4c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0623977-1aba-4987-b5d0-467a1db45bab", "sighting_of_ref": "indicator--55ce0d88-1a4d-4752-aa84-5c1acab195b2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b62e4362-eb67-4f61-be7e-9f8ee2c382e5", "sighting_of_ref": "indicator--ab321c1f-58c6-4ccb-83b4-9a4b07704f08", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c92bb6a-ce1e-4ff1-9918-ccb175c02652", "sighting_of_ref": "indicator--4001b132-b590-43d5-a72a-71b154c117e1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53bcadd8-57ab-4e49-9f32-b6631d41f073", "sighting_of_ref": "indicator--4001b132-b590-43d5-a72a-71b154c117e1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67fb02e5-8cbc-43ee-888a-ce9d0e30cad0", "sighting_of_ref": "indicator--e182ef33-b291-43ab-8457-7845d083da1a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae202d05-8b57-4d39-b136-6ff6cadfbd6f", "sighting_of_ref": "indicator--3caba01f-9a82-459a-af9c-61d27bf9c25e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3912c9-cbcd-43a9-b73a-1f09d96e1968", "sighting_of_ref": "indicator--81b58956-3238-44d6-b71b-54411400cb29", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74230d9f-e45a-42c3-a695-51bb7c09b12a", "sighting_of_ref": "indicator--e5a46be2-c26e-47b2-81b1-31d247a08fb4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7807b52-a9fd-4abf-91d9-361964914879", "sighting_of_ref": "indicator--618fdc53-cc3d-4455-997b-c8cf4304de21", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca804f31-73da-4bde-a802-07b0b37f1175", "sighting_of_ref": "indicator--f1d2dc67-c68d-4572-8bee-f36dd164c307", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f42f1d-eede-49e4-84cd-13fceb120672", "sighting_of_ref": "indicator--85c60f5d-2023-465e-b767-b55ce36613c2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5cafb7-4d18-4919-828b-ed54f7237119", "sighting_of_ref": "indicator--eaafe5b6-27ad-4200-9cd2-fd18c6b5335c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d43d79-0f91-4ba1-971a-e90f957c44ac", "sighting_of_ref": "indicator--0f8fa3a4-6129-4c88-87a3-badd07c022de", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d584a09d-19ea-4d0b-84ff-0e392c7bd798", "sighting_of_ref": "indicator--41798e48-b87f-4ee9-92d7-e900763f5789", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba125804-e2e7-4aa7-b256-20f72103d35b", "sighting_of_ref": "indicator--2a137ceb-aae8-46dd-8981-ad9d5175b125", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ff972e-cebc-4248-bf69-afb28b05b06a", "sighting_of_ref": "indicator--2c7debbe-000d-4eb8-a285-900f9dfe0ba8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4d1711-a018-40b1-8aa8-1c80146d0c1a", "sighting_of_ref": "indicator--f2f5a8aa-f54c-438e-8775-e1addef063b9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8a7f1a-1e69-4d50-91d6-422d8779e53b", "sighting_of_ref": "indicator--10a952ae-1bfe-4ae5-990b-9eae76ad59dd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8f5def-e1e4-465a-bee3-66a8f5a4a9b4", "sighting_of_ref": "indicator--d970419b-9711-45a5-b205-64ad1213b7e5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--961450f0-6d78-4ea2-a8e6-2811f071f8c9", "sighting_of_ref": "indicator--56442a89-c36c-4b60-8386-015b2628ec49", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f0c413-ad7a-439a-a0f8-be0013d01306", "sighting_of_ref": "indicator--5cd47a51-982c-4f77-ba75-0f36c5e4bfab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6a32eb-23ba-4f3f-b2c0-177510a857d6", "sighting_of_ref": "indicator--900b05d5-d44c-49a4-b787-4a0b4835464a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aeb7eee-bbca-496b-be2e-956f62768381", "sighting_of_ref": "indicator--a93de466-9f25-40de-80df-2e8ff96714c4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93497685-9010-44dd-908f-20084f490add", "sighting_of_ref": "indicator--108a3e38-d250-45fc-bdbe-4861d75ef969", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880c2c00-d94f-4ea9-b85d-e9b15a94eb5e", "sighting_of_ref": "indicator--4b3e84d7-f6d4-48c7-afc8-871be1f27d87", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb478dfc-fba2-4966-a56d-d24bf9340690", "sighting_of_ref": "indicator--61d615f7-b3cb-453f-8b5d-4ed67ae56058", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d7c1f9-8e47-45dd-85b0-fa049d77d16b", "sighting_of_ref": "indicator--f2bd3579-3cb0-4c01-9ff1-eb3330eb75d2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4b9b8f-a938-4c5c-a41b-696bbd290e29", "sighting_of_ref": "indicator--0950ed78-0630-4f93-b0d4-be3c5464d40a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--293be96d-ccdd-4f4f-9d16-619da38488dc", "sighting_of_ref": "indicator--0950ed78-0630-4f93-b0d4-be3c5464d40a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58819d3a-982c-4547-9920-2d23915f9638", "sighting_of_ref": "indicator--89abfaa9-8452-4ca5-9e49-bc8f680a3d19", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c65ba22-aecd-4c3c-8915-497437b22b65", "sighting_of_ref": "indicator--ccf0f754-0019-480c-9485-162135cc762a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e2a033-953a-4608-9586-f50e21c36d3c", "sighting_of_ref": "indicator--6bf80f5d-c57b-4ed2-82de-e595e3d488fd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1124f0e3-e94c-461b-84cb-116b5d883d64", "sighting_of_ref": "indicator--0c709818-5a14-4459-8054-781adea7602e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b82f38b-ca11-434b-8028-7f6e162a1c84", "sighting_of_ref": "indicator--e9c707b6-6ae1-4d3c-86f7-1c927a31d25b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cbcd360-e155-41ec-99fd-1610f2fd5b00", "sighting_of_ref": "indicator--e9c707b6-6ae1-4d3c-86f7-1c927a31d25b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c57a1d-3ab3-4a5a-807a-a6c5ad781c5c", "sighting_of_ref": "indicator--a8b9e7df-dd39-42e2-9ae3-28d455762173", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329bf2df-50b7-43e3-9c23-0105fa4689e3", "sighting_of_ref": "indicator--cdf53d9d-0adf-4ad5-9bb8-ec1f7cda8bcf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02b02c5-c10c-4a8b-afcb-1f12d75982a6", "sighting_of_ref": "indicator--3f92d5ad-6cfb-421f-b4da-a72e39ca708b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1adbd6b9-bab2-4a38-9081-cdba20fad45f", "sighting_of_ref": "indicator--102e61e5-6be7-46cc-a9d0-46e52cd615f1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9855b67-1b1c-48df-b7b6-9eab3abd3940", "sighting_of_ref": "indicator--95d75721-64eb-41e0-9e37-7706fcc7ac9a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9bcef7-0315-4d4a-a576-509d4dad0405", "sighting_of_ref": "indicator--450bf4b1-d272-4d08-9bb6-14f5ac144114", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141cd30d-42d9-4455-8663-58d876eecb50", "sighting_of_ref": "indicator--e46d466e-b62e-418f-90b7-1211532e9274", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe20a9f-c849-4ab5-9b1e-8a05fad09d73", "sighting_of_ref": "indicator--a6da39f3-d2bc-4415-81f5-e7826af31449", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1220a986-ec85-47fb-a08f-b5ff875c4070", "sighting_of_ref": "indicator--1c9a67e1-9c40-40ac-b86a-5aecf2088f4a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c826cde5-7f3b-4426-aa8a-7d51f3320f6d", "sighting_of_ref": "indicator--ea411791-36bb-4d09-8221-ffec79421068", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab259946-5813-48b0-9146-37b2bd6be8c0", "sighting_of_ref": "indicator--486df806-9329-4600-b244-816033e935ee", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c982202-8fae-4c39-8bf0-0ba19281dea9", "sighting_of_ref": "indicator--ea6aec09-e750-4f28-94ec-cc8e49011c75", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8225f5-5a1d-4dc6-9199-c3af491c438c", "sighting_of_ref": "indicator--45b35b5b-f7bc-4347-8b62-4040cbf184fd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7155ae34-150d-47bb-99ea-113cce92f56d", "sighting_of_ref": "indicator--c6618b60-7a08-4fea-8489-7c0712a1cab1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3afa5e-5712-4acb-adc8-086e310d4ca9", "sighting_of_ref": "indicator--64455ec8-d0b9-45d7-899a-185247208a64", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b137c0-71db-4b3e-b2d3-f01714f48469", "sighting_of_ref": "indicator--611d8d36-8141-4af9-809b-525902c22960", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a8640b-57c5-4edf-9076-7322f2519fd4", "sighting_of_ref": "indicator--611d8d36-8141-4af9-809b-525902c22960", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c230159a-225a-4f70-8cc1-a5bd98cd7f81", "sighting_of_ref": "indicator--611d8d36-8141-4af9-809b-525902c22960", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c11c28b2-d64f-48cd-ba1b-e8aa73da543f", "sighting_of_ref": "indicator--d8f3971f-c52f-44b0-8b13-37cf9d3dddd6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89acf975-0903-48fc-97cc-000cd0127d9c", "sighting_of_ref": "indicator--d8f3971f-c52f-44b0-8b13-37cf9d3dddd6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6334481e-4e3d-4416-9549-9d4bd8edb393", "sighting_of_ref": "indicator--00a0ba2a-5098-48c7-bd70-789dbf4864f5", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b1d830-9a55-43b6-87d1-31d98bab70e1", "sighting_of_ref": "indicator--00a0ba2a-5098-48c7-bd70-789dbf4864f5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9e1f1e-44ba-469a-ba0c-b11989bab6ef", "sighting_of_ref": "indicator--209caf5f-1e25-4661-83f4-ee629ac3a8b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af59e42-4d1d-4f54-958f-af5612daa4a2", "sighting_of_ref": "indicator--662d68f3-2fb1-4eaf-9958-5e36bf969963", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1414376f-d3a5-43e1-9866-53b99cf8645a", "sighting_of_ref": "indicator--662d68f3-2fb1-4eaf-9958-5e36bf969963", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba255fa-4fb2-46c7-a177-d312116ad73b", "sighting_of_ref": "indicator--f0b7878a-6ac6-42e1-8e6b-77b6447b579d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff3d686c-5bf6-442d-af46-05f1253fa58d", "sighting_of_ref": "indicator--b5b77736-476a-4f48-8257-03d21909493f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc51c2fa-04b4-4f23-8b03-d9acc90e0a4d", "sighting_of_ref": "indicator--f8144e81-a240-4f0e-b9fd-44ea081784bb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e72bbd6-2a6a-4dd4-9586-9e44f7e73c7b", "sighting_of_ref": "indicator--b2df9f8f-c1e7-4c0d-8b9a-4621f69158cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3590f215-15ac-405c-b0ae-0f44ab61ab79", "sighting_of_ref": "indicator--e6d6aa77-2976-4295-9245-348a2795d0c0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38390e64-9151-41fb-a4a1-a6fae00113fc", "sighting_of_ref": "indicator--419a9a6b-5190-4d44-849a-e8ba5eceab8e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09ad042-6d88-4ce6-87b3-a5bf5c0d7c00", "sighting_of_ref": "indicator--2d466958-c8d9-40ad-8973-d6745492a695", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ec074a-e958-44ff-ab69-c3f60030eda3", "sighting_of_ref": "indicator--86276350-71bc-4e20-8856-e69f8af5320a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf11a586-2b65-42c0-ba54-31c72cdfb965", "sighting_of_ref": "indicator--59f0ca27-c95f-4bb7-a902-78325cc4224c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2250f2c-01a8-4c1a-ab2b-fbc372eac789", "sighting_of_ref": "indicator--58dad14b-db9f-48bf-9a1d-165f1caecb6e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--014dfff5-35e6-4970-99ab-e3cdaa78458f", "sighting_of_ref": "indicator--bbad4b2e-bce0-482c-b94f-2c954f0e215b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0825ab-4030-4da2-967c-7f10cab655b1", "sighting_of_ref": "indicator--ffd3ee38-f2f1-40a9-a4e3-2fbdf443d458", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08ae110-eaac-4956-aaa1-ba47b41dda95", "sighting_of_ref": "indicator--91d25fda-a07e-44d0-a8b8-94e48092eb39", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738e27f1-c65d-49d3-8d8b-9fdbcfdb0bc8", "sighting_of_ref": "indicator--f52a08b1-62cb-4599-a80c-14193016c0df", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7286282-4f19-4556-975d-17c4c82741a5", "sighting_of_ref": "indicator--aed61f2b-57cb-4092-933f-b277aeb2b320", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab9763f-673c-4814-91fb-5084f31c1c61", "sighting_of_ref": "indicator--a2e48573-8945-406f-aa2b-65ce664b5860", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e34a61f-7285-46e5-bbcf-e9072ac73126", "sighting_of_ref": "indicator--da99dc68-1075-4caf-8416-7ea84d02193f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87fa359e-6447-49c8-b5f9-5cb8459b4287", "sighting_of_ref": "indicator--8fee24a4-64f8-467a-b3f7-2a3d8893415a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8fb86c-4eca-4548-a489-ecb161bc658f", "sighting_of_ref": "indicator--b99f2388-99e6-43b7-be74-5e778d2135ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8b9923-e8a2-450c-8fb2-abb11203ebef", "sighting_of_ref": "indicator--f1f271e3-a18d-43f2-b686-d5f47ea2e59d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70793a95-3e0e-483f-8951-a85d086ee2c2", "sighting_of_ref": "indicator--1b8a6f30-a235-4c15-84f6-88ee929bffda", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f95d41f-029c-4ec4-b9da-eed3b8731a4f", "sighting_of_ref": "indicator--bcdffbbf-f54c-47a9-8564-e774112ff5e3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad457ae-5d2f-4023-9690-6a2f2a7f3dc1", "sighting_of_ref": "indicator--36a54c2d-750f-490b-9f4b-26a27b4379fa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68dc276c-9f64-41c8-ba28-b818f80df7eb", "sighting_of_ref": "indicator--95b246a9-a1d6-4f66-aaab-e91e4a2dc82a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6f0a70-a5ac-4e24-92c8-344c2bdb68a7", "sighting_of_ref": "indicator--d47a38fa-7017-406a-8001-ed8471776e3a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05140d46-a292-48c4-bed9-4aea3459dc5a", "sighting_of_ref": "indicator--95beb5be-552a-4845-b011-3dc5e12399bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696257b5-8e96-4d0a-85e4-c8de53ecf8da", "sighting_of_ref": "indicator--fa8f8abb-1a8c-4978-803b-a3d360758afe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeecaf2a-e79e-4890-9812-bd22d950f55a", "sighting_of_ref": "indicator--c4803a44-686b-4a38-b85a-1dbfe3ca0d50", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d03b909-a977-4a2d-b08d-aee32e2a9ff0", "sighting_of_ref": "indicator--a7c76609-5e5e-487a-b362-ec1ccfe05fbc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549173d0-bb97-4733-aba5-85d901f58ab0", "sighting_of_ref": "indicator--9f6c7e38-74e0-4461-8dea-ee4faec99812", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2835ca62-9a64-4c35-8dc6-134a4d7dcc86", "sighting_of_ref": "indicator--9f6c7e38-74e0-4461-8dea-ee4faec99812", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--febee5c8-0ad0-455a-8d18-73cdebe4ef2a", "sighting_of_ref": "indicator--19dc0c9c-636a-4f9b-8a1c-00cb1e522fd0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f48f295-e9f7-4f9b-b9e2-eb449eff5f05", "sighting_of_ref": "indicator--57c01043-94b2-494e-afd7-c480243f8ee5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c250d08f-64b3-43b6-9c97-e45371d4080c", "sighting_of_ref": "indicator--b7e3a2f8-8eab-49a5-94b3-c022c0af5dd0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--705909df-93c8-455f-b923-297dd0660849", "sighting_of_ref": "indicator--73421a6b-c17e-47cd-a2ad-6ecae9d5b557", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1536de65-4f32-41a1-859c-b26382c6a31f", "sighting_of_ref": "indicator--4de31786-e443-4918-8130-db1cabbda5b7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f12c92ca-3857-4043-80c9-a906589eccf3", "sighting_of_ref": "indicator--3475bddd-14f3-495c-b71d-bdb87eb101e4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc2b002-216b-4bd3-8203-7e7022442731", "sighting_of_ref": "indicator--7519ab17-2e34-4346-8c1a-f17bfb39241b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1305812-2873-4464-b66a-11c04ad13a42", "sighting_of_ref": "indicator--3b5f1652-c651-4d72-8ad9-ccd456795472", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7872f21a-8e01-4953-b6da-97aa0ae2d35e", "sighting_of_ref": "indicator--1a41dcf9-8562-478b-bbd8-c76aff0d48f3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a6ce5f-cb9c-4dce-bd53-29b8d12c609f", "sighting_of_ref": "indicator--a3ceaf1b-aa69-4a3b-8b79-48ca0bef662a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ed4c37-0772-4810-b91b-1b5c2ca4262e", "sighting_of_ref": "indicator--c6748644-a519-4846-8c10-cb9608a7c3ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de18e3f1-dcd9-4e07-900d-5b85df4311b4", "sighting_of_ref": "indicator--9feda630-e694-4f4a-a4f1-7af1cf69a8e8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85716cd-3d62-4511-aac5-731a696703d9", "sighting_of_ref": "indicator--d81e11c6-df53-4b82-8245-780f69f45b88", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3da47b2-43ce-41fb-9ff4-9a41b8a5ce12", "sighting_of_ref": "indicator--be4a6935-ebae-46a3-b579-6fa6db865a8b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f75359f0-95f9-4fdc-8e17-6fa4a6ada594", "sighting_of_ref": "indicator--accbb401-c5c3-4ca3-8576-1a91037e5ccd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e67894-eb7b-4146-b5d4-3a97493330dd", "sighting_of_ref": "indicator--db94989c-a90b-438e-8619-224bb9b852cc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03351df7-8055-4b32-8393-2b575adaa4ec", "sighting_of_ref": "indicator--6dc51513-5009-48a3-a1cf-49c79bad14c4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed92cf37-1e7a-48f0-b1f5-ab8992372b15", "sighting_of_ref": "indicator--8fa4af7f-313a-4252-9ade-7ddaabf5e1a8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e037063d-5354-4178-9652-a6fbc3eac0ac", "sighting_of_ref": "indicator--8fa4af7f-313a-4252-9ade-7ddaabf5e1a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23eb3e2b-cd40-43ec-bede-fbbf572a17d1", "sighting_of_ref": "indicator--d1acc41e-0fa5-42d2-a212-517a4bc05848", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce7bfd88-6bf6-404c-9634-1b3ebd09d455", "sighting_of_ref": "indicator--1adf31de-4698-4926-9d83-e5cdde0426ac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf68ba8-0e9a-4a9b-b77f-3534cab8d6fe", "sighting_of_ref": "indicator--d193b608-e170-47e5-87df-0384eb930baa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc359be-ad10-4fe5-b7ea-8a44a4dbf512", "sighting_of_ref": "indicator--8120d17f-ea08-4bc4-bbd6-599123f763c5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e92afddc-910b-479a-92f2-4cc800e997bd", "sighting_of_ref": "indicator--2ebfdd70-29e9-4023-b882-4c574454da06", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df2f51a-630f-42bd-a0c1-51901e014cc9", "sighting_of_ref": "indicator--b5fd3a2d-c40e-47b9-af2c-dd2d4280ef73", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f2c713-0785-43a3-8091-85df671cf809", "sighting_of_ref": "indicator--7a2153c1-1262-4f1b-93f3-306c46139a12", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aad4d53-dffe-4624-b0ad-ad624e311bda", "sighting_of_ref": "indicator--61873d1e-e220-4bde-8b08-8e2ed424a1f0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec406f9-2c3d-4af9-8edb-641d07a79657", "sighting_of_ref": "indicator--61873d1e-e220-4bde-8b08-8e2ed424a1f0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9bf7cad-0394-401d-b1cd-734f0d66a621", "sighting_of_ref": "indicator--d7367b17-b086-4314-9b93-0405b91dd413", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1940366-ebd0-45ea-b91d-3d0ba004a38f", "sighting_of_ref": "indicator--d7367b17-b086-4314-9b93-0405b91dd413", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f63b8595-3962-44a2-a1b8-80a823ba7549", "sighting_of_ref": "indicator--cd9f2e29-297a-470d-808e-1360e799ee82", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7002de80-2b45-4384-88d7-3f0db739d448", "sighting_of_ref": "indicator--cd9f2e29-297a-470d-808e-1360e799ee82", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ca96ad-6c9e-48b3-a3a4-62fb808dbc76", "sighting_of_ref": "indicator--8f1b0b94-20f0-41bc-8754-aa58598e7610", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43b24db-b14e-42cc-ba02-d7d411dcc452", "sighting_of_ref": "indicator--8b4886f5-3bdd-4384-aed8-4726b8bda0fe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6975cf97-4c0f-4dac-8129-9b29709c7d1a", "sighting_of_ref": "indicator--d6b2de05-2d05-4855-af5d-93ed3788386c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d858aeac-f7fd-4ccd-b718-0e6838efccce", "sighting_of_ref": "indicator--d6b2de05-2d05-4855-af5d-93ed3788386c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8dde19-a5d7-459f-9319-b194a3a6e925", "sighting_of_ref": "indicator--0ca4c1a2-14df-4b98-8812-2203a485a712", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73bf8647-c720-4e93-a049-f511d5b618cc", "sighting_of_ref": "indicator--0ca4c1a2-14df-4b98-8812-2203a485a712", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291e4187-4449-455d-9fe3-23adbbfe1fad", "sighting_of_ref": "indicator--62dc78d6-8f4a-42cf-9a95-765d96ffaed5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b74d31-a7f6-4450-ba09-1785c2bd127b", "sighting_of_ref": "indicator--62dc78d6-8f4a-42cf-9a95-765d96ffaed5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88053968-ac14-4bee-8433-f67eb5882ab5", "sighting_of_ref": "indicator--1065f41d-5fab-4482-976e-39fba11454b5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc8111da-e419-4a8b-8502-eebc856e73fc", "sighting_of_ref": "indicator--1065f41d-5fab-4482-976e-39fba11454b5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f469658b-aeae-4ae5-9dc4-a8b573e1d4e8", "sighting_of_ref": "indicator--16b5d007-c8bc-4017-b350-e00c7a20a66e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331ce897-dd42-487a-8c3c-eb4fb87a62e4", "sighting_of_ref": "indicator--16b5d007-c8bc-4017-b350-e00c7a20a66e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcaab202-f5db-4043-abd8-295c82a5031d", "sighting_of_ref": "indicator--7084b74a-a3ad-41e1-9adb-04bfea6f42fa", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416091a3-2f68-4986-8a2b-63f82bea7ab9", "sighting_of_ref": "indicator--7084b74a-a3ad-41e1-9adb-04bfea6f42fa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e64094c5-3ea2-4888-b8de-da6205058950", "sighting_of_ref": "indicator--55aa52d3-2512-4b40-aaa5-4b6bbd25ea2b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2edd4e-be5d-41da-88c0-9c504a5e00ff", "sighting_of_ref": "indicator--55aa52d3-2512-4b40-aaa5-4b6bbd25ea2b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5154b1f-cb57-42d6-a9cf-60b3ee4d2884", "sighting_of_ref": "indicator--9b72b211-aa44-4e8d-9429-ccc44f0471af", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a33bd8a-e6ce-4a36-962f-37b2a14af8b5", "sighting_of_ref": "indicator--9b72b211-aa44-4e8d-9429-ccc44f0471af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0721bb25-798a-479d-96e2-5db1426a6069", "sighting_of_ref": "indicator--fb93987f-ffb8-47b8-8d98-8163e44d4ea0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31519a38-8f79-4bf6-b7c4-1006098beff6", "sighting_of_ref": "indicator--454e9bf4-46a7-4dfc-9b54-4005678c6447", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ba0526-714c-4150-86d4-ee42a4eaa9cc", "sighting_of_ref": "indicator--454e9bf4-46a7-4dfc-9b54-4005678c6447", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b4f2bc-5a92-4f9e-b52b-41a8ac7925b5", "sighting_of_ref": "indicator--aa2acbae-63a2-44e2-96ca-d5073fdce8cd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85aac31e-4b77-43ef-a7bd-f51bd31172d2", "sighting_of_ref": "indicator--aa2acbae-63a2-44e2-96ca-d5073fdce8cd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0edc3e5-0db6-4554-8801-241b359c6263", "sighting_of_ref": "indicator--7cb79ff1-5d1f-43f7-b56e-010905a9ee95", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd2ce0d-7d4b-4047-9cec-7469e8a00b2d", "sighting_of_ref": "indicator--7cb79ff1-5d1f-43f7-b56e-010905a9ee95", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e17612-255a-4428-a10b-70ad7fc31010", "sighting_of_ref": "indicator--2105e537-724a-4bbe-ba19-ffb5cc7962d3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e18f21-a2e4-4dd6-a611-ea1d46cd4436", "sighting_of_ref": "indicator--2105e537-724a-4bbe-ba19-ffb5cc7962d3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298ec3fb-4af8-46b0-8ccc-7c9a965ec5e6", "sighting_of_ref": "indicator--4ce67f41-670f-4aea-930f-d23522ce0bbd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596bb904-4da7-423f-82fa-9b05da6afae9", "sighting_of_ref": "indicator--4ce67f41-670f-4aea-930f-d23522ce0bbd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7247f32c-d05f-4a22-b4d3-c6492df3c253", "sighting_of_ref": "indicator--a937d597-8740-4289-89dc-6341ddc3c881", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3a0ac9-9e07-44a3-9427-b611e1b67e72", "sighting_of_ref": "indicator--a937d597-8740-4289-89dc-6341ddc3c881", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bcf8cc2-54ef-4415-bef5-84f378275eb5", "sighting_of_ref": "indicator--3cd0e599-e228-4385-b545-bf3484bcfe5e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b311902c-1f0c-4a6a-948b-598ec9a57b96", "sighting_of_ref": "indicator--7ff745e6-9de5-49b7-8832-b06ec5c07de5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385c850a-864e-44dc-9b7e-0e6672c0485e", "sighting_of_ref": "indicator--c6ca894b-6e29-47a5-bbc1-6a37fdfe1f77", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f841bf95-a23f-4427-b17f-3e6d5f4c27c3", "sighting_of_ref": "indicator--c6ca894b-6e29-47a5-bbc1-6a37fdfe1f77", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d21d5b8-bb53-4b68-9871-1e144cd9b1bf", "sighting_of_ref": "indicator--b46483fd-0971-445b-b337-6903aaa2d8a0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50232e8a-415f-42f3-a43f-5bcf9e83e7e0", "sighting_of_ref": "indicator--b46483fd-0971-445b-b337-6903aaa2d8a0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebfb2517-8288-444b-874a-71f7879753cc", "sighting_of_ref": "indicator--9790e7ba-4a20-4663-8a65-06afb9ee53da", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e41992-a20c-477b-82af-e1a178bfa47b", "sighting_of_ref": "indicator--9790e7ba-4a20-4663-8a65-06afb9ee53da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c027f447-e7bc-4ecc-9c20-0f8a8891c6c2", "sighting_of_ref": "indicator--c43f861d-228e-4ea3-9e21-6f9f08a800ff", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdc2a08-114a-4a12-8b8a-5b6fcbbeecb1", "sighting_of_ref": "indicator--c43f861d-228e-4ea3-9e21-6f9f08a800ff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da0b29f-e49a-4997-962e-db0a7f87a1cd", "sighting_of_ref": "indicator--1359d066-fdcd-4535-9c99-854453b72a3f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd18350c-7037-42fb-bb6d-112822999cd6", "sighting_of_ref": "indicator--1359d066-fdcd-4535-9c99-854453b72a3f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175e97cf-506b-449b-83b3-6408dbfc13dc", "sighting_of_ref": "indicator--3fb30646-f4c3-4414-bea7-ced8b0f5b283", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5526339-29bb-4db0-a600-2cb721cdd2f0", "sighting_of_ref": "indicator--3fb30646-f4c3-4414-bea7-ced8b0f5b283", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08eb2673-e88c-4a80-9564-1dafc1950a13", "sighting_of_ref": "indicator--1b74f99d-1874-4889-bc0e-cc3ac8bc43f5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e167f473-df85-4200-8280-ce4821e8e963", "sighting_of_ref": "indicator--1b74f99d-1874-4889-bc0e-cc3ac8bc43f5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--810b3e8f-2605-47d4-a4b7-5d99f87d45e5", "sighting_of_ref": "indicator--52b1a381-9581-43ec-9951-9dc18cd5943f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01474578-f618-4ccc-980a-fc1ba82312cf", "sighting_of_ref": "indicator--52b1a381-9581-43ec-9951-9dc18cd5943f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4785067-513d-413d-b3dc-1ab1fa79c865", "sighting_of_ref": "indicator--fe02e6a3-8746-48d7-8677-ff566bd10816", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef3d9ae-7f83-4911-aaa7-abd6005eeca4", "sighting_of_ref": "indicator--9d044b44-8b67-40c4-a03a-47347a523ca7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deee494b-ad27-4c58-8b6c-4ee732d3c52b", "sighting_of_ref": "indicator--9d044b44-8b67-40c4-a03a-47347a523ca7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc4b72b-37d4-4186-8017-db3d79f9d928", "sighting_of_ref": "indicator--6502d744-59db-47df-842d-7e3b527d9eeb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a1d7d5-3aab-4cef-a948-2086dcb7192d", "sighting_of_ref": "indicator--6502d744-59db-47df-842d-7e3b527d9eeb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a58f53-490d-4ea2-abfb-434e92ed1310", "sighting_of_ref": "indicator--28de5234-543c-40e4-b797-358b31dc1c11", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b268246-fb0c-4aee-8fdb-8d0fb6e89ecf", "sighting_of_ref": "indicator--95b6a00f-7cdd-44e2-bea2-f17d6716db2d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411d3239-6b54-45b2-948d-1667065e98b8", "sighting_of_ref": "indicator--95b6a00f-7cdd-44e2-bea2-f17d6716db2d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f90170-79c7-418a-90d7-7d791ebdad89", "sighting_of_ref": "indicator--6191e277-2b09-4dab-88e6-695efe585ef8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2d1dc8-3f09-4a54-a46b-2af19774df60", "sighting_of_ref": "indicator--0e39a9b5-bf75-476d-8001-d597cfde8e9a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9efd9770-1bf1-4544-b136-c3a5da5360f2", "sighting_of_ref": "indicator--0e39a9b5-bf75-476d-8001-d597cfde8e9a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4118c58-15a9-4752-a8f9-63ab1ff21fd4", "sighting_of_ref": "indicator--4d5aa7b1-3add-4e97-9922-c9b951dcd050", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e20270c-93be-4e2f-ae6a-4245cf24e1fd", "sighting_of_ref": "indicator--4d5aa7b1-3add-4e97-9922-c9b951dcd050", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7aef81-5cf6-44e8-89f5-5123b1460f28", "sighting_of_ref": "indicator--5799b979-0d47-43f9-b4e5-f45b54d9853e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df2cb6a-2895-4453-a5b0-7071775cb1f0", "sighting_of_ref": "indicator--5799b979-0d47-43f9-b4e5-f45b54d9853e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990ba8b2-52c1-4d3f-8465-748b71d91f1e", "sighting_of_ref": "indicator--a824f285-4c98-4476-9774-db96d1c24d53", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba27e9ad-e3e4-43a4-b112-a781f9390d5b", "sighting_of_ref": "indicator--a824f285-4c98-4476-9774-db96d1c24d53", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--657e5dfd-95e4-49e7-b676-3b84f6f1d13b", "sighting_of_ref": "indicator--249fa953-88a6-41df-a292-9911facd18fb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18fb7ef0-9f90-44ca-8f2c-10cbb4006ec9", "sighting_of_ref": "indicator--8fc54e8c-a036-4366-b385-593a04bef107", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1771e0-a272-40f7-9828-ef4bbedd7bbd", "sighting_of_ref": "indicator--8fc54e8c-a036-4366-b385-593a04bef107", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24680ce0-2577-4468-96d2-a1033666e923", "sighting_of_ref": "indicator--f603acf8-1acf-46bc-b8ae-56cb255cffd5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25f84e8-9d56-41fd-8d4a-4b92616d88f6", "sighting_of_ref": "indicator--f603acf8-1acf-46bc-b8ae-56cb255cffd5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--876f47d3-8c9b-4219-9c7d-350e572aa336", "sighting_of_ref": "indicator--401b5887-a18e-4e00-9f81-f1ea6d75b38b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94001ab7-7b8f-4ac2-8ed8-c5c5d1a9b37b", "sighting_of_ref": "indicator--01568bcf-fbb1-40ce-a921-2a746ebcd66b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a82a42b1-aa37-49c0-a32f-204f00dd00e7", "sighting_of_ref": "indicator--bb84f5bc-15f3-43a6-bc3b-c13c28c9c110", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bdeddef-5ee0-474b-8152-a93f3a1a59cd", "sighting_of_ref": "indicator--bb84f5bc-15f3-43a6-bc3b-c13c28c9c110", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e49e150a-a75a-4150-b400-5a787ef1ab80", "sighting_of_ref": "indicator--8d949d38-f4c5-442b-8a33-bf313623c3d5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa93bac-c69c-4719-8ea9-b4a425f111be", "sighting_of_ref": "indicator--92ac4f2d-ea47-4d43-bc8f-abd0bc4d97fc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81c2eb3-e37f-4506-aca4-d0000e8d67bf", "sighting_of_ref": "indicator--92ac4f2d-ea47-4d43-bc8f-abd0bc4d97fc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e6acde-0297-4a52-bbe9-200f6a0b849e", "sighting_of_ref": "indicator--448b596e-94c8-48f4-b218-b8d0854eab6d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f35adca6-44f5-4681-aa30-c40f21bdde77", "sighting_of_ref": "indicator--448b596e-94c8-48f4-b218-b8d0854eab6d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c7cecb-6666-43dd-8fe7-a624cdfa949b", "sighting_of_ref": "indicator--3463acc3-14f4-44ba-920d-36171057f83e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02173277-5a26-443a-95d8-8c3a44927366", "sighting_of_ref": "indicator--3463acc3-14f4-44ba-920d-36171057f83e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea5b9b5-2e1f-4909-bc0a-2a296a11629d", "sighting_of_ref": "indicator--eb668ee7-1653-4191-8671-f04463bdc2b1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c72c4c1-8fa4-4cc2-987d-f91933e39117", "sighting_of_ref": "indicator--eb668ee7-1653-4191-8671-f04463bdc2b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43cb9bc-5857-4241-9027-48ff5a4b900a", "sighting_of_ref": "indicator--36be2401-039e-4a1d-87c1-648ed12b8b90", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd76618-f155-43bc-9882-6baf421bfc11", "sighting_of_ref": "indicator--36be2401-039e-4a1d-87c1-648ed12b8b90", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--580b0671-641f-4600-a659-1ecbcfd764d0", "sighting_of_ref": "indicator--d611c620-5852-4aa2-b169-df352313ab23", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2701011c-d6ab-4068-a585-5b70825bd104", "sighting_of_ref": "indicator--c8c852ee-580c-4b5c-92ac-fd37ac862364", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46612279-9016-4b42-bac2-a46a7e8762fa", "sighting_of_ref": "indicator--a56e36a1-6323-4ed7-b71e-1998a7ae0c01", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6218a9f4-000f-4bd5-bd5f-e098d3451294", "sighting_of_ref": "indicator--a56e36a1-6323-4ed7-b71e-1998a7ae0c01", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6fd6b6-3e97-4be8-b919-1a80964c4d39", "sighting_of_ref": "indicator--8bc37ec9-3436-44b6-81ce-3be6182e2f85", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c33bd1-5cc3-4e66-8505-1dae79b84210", "sighting_of_ref": "indicator--8bc37ec9-3436-44b6-81ce-3be6182e2f85", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c05e6e-7c8a-42a9-822c-8e12d2378189", "sighting_of_ref": "indicator--6897856a-fd1c-4faa-be4f-cac989fcf838", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1644e9fa-e42d-40fb-a6ea-12e8aa2b3b1e", "sighting_of_ref": "indicator--6897856a-fd1c-4faa-be4f-cac989fcf838", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f796adb7-b9d1-40a2-abee-029f5762733e", "sighting_of_ref": "indicator--3cdfff4d-6fe7-44d5-8783-2090ede9ed40", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c67a5c9-b081-4103-89da-cd2064e9e560", "sighting_of_ref": "indicator--3cdfff4d-6fe7-44d5-8783-2090ede9ed40", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3ce0a6-6515-441f-84ce-e66c504e17a4", "sighting_of_ref": "indicator--82a334e9-f20b-4270-8919-ae124d04b02e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a91aae9-9a40-4e6a-9983-79e1448e16f9", "sighting_of_ref": "indicator--82a334e9-f20b-4270-8919-ae124d04b02e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4edae27-ca28-451a-9cba-e09fb27523f5", "sighting_of_ref": "indicator--f7a2669f-0ed1-4c47-a611-c1dbf5407df3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72358728-a150-45c3-8c5e-3ec9b7f2f83f", "sighting_of_ref": "indicator--d606d4d1-a25e-4ed2-b474-005dbaa2c60b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90876d3d-e74f-4dc0-916c-ae84fc72d1e9", "sighting_of_ref": "indicator--d606d4d1-a25e-4ed2-b474-005dbaa2c60b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f7c471-bd80-4bd0-a7cc-08a83082665e", "sighting_of_ref": "indicator--cc13fddc-81f9-4ce0-b2ac-966b46b49fdc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767230ef-80ac-4d54-8c33-59168e36c3de", "sighting_of_ref": "indicator--cc13fddc-81f9-4ce0-b2ac-966b46b49fdc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e778e795-99e6-42bd-9e7c-4043f5ac453d", "sighting_of_ref": "indicator--579e0379-b0ca-41a5-80c8-086b6d09fd95", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4317b0a-f0b6-482a-9bdf-41daec4f5138", "sighting_of_ref": "indicator--579e0379-b0ca-41a5-80c8-086b6d09fd95", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71e461e-ec4a-4ed9-88f2-90d197a8aecd", "sighting_of_ref": "indicator--80f40719-7f09-4cda-af26-784ab6ca1736", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e338fa99-303b-45b7-9e61-75f0eeba1064", "sighting_of_ref": "indicator--80f40719-7f09-4cda-af26-784ab6ca1736", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72b6a51-bc20-428f-83bc-12bbb518f435", "sighting_of_ref": "indicator--2629bdc9-6dec-48f4-b5a7-f239b4c8c6d1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3112629-91b5-4a9d-872a-8121c0282879", "sighting_of_ref": "indicator--2629bdc9-6dec-48f4-b5a7-f239b4c8c6d1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0353d4e5-97c5-4f7d-8b62-ba8a747ba072", "sighting_of_ref": "indicator--113bdc93-6001-4a17-9f1a-6234eb73bfc1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2982fdda-971d-433c-9740-b61052bb6c16", "sighting_of_ref": "indicator--b8d38581-6c49-47a2-8bb7-b0f65d5304f5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b390e3-e7bd-48ea-8b73-c0075f24b8ab", "sighting_of_ref": "indicator--b8d38581-6c49-47a2-8bb7-b0f65d5304f5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7167b9a9-4ab2-45d9-8022-54ae5b8dab95", "sighting_of_ref": "indicator--12ea9acf-a740-4b31-90bc-57c475730134", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9b0a2f-af51-496a-8a17-c79ad5333052", "sighting_of_ref": "indicator--dfe8d221-64da-420e-8ab8-da5e75b88c7c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a16bca-86d3-42ff-a9dc-4eb6df14d097", "sighting_of_ref": "indicator--a45d9b48-10c9-4585-a54f-48aa4856c256", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854726b9-831e-499a-ba13-a4d8d2d0b271", "sighting_of_ref": "indicator--836978ca-e835-4a1a-bc6c-391e6c2b7c89", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70847595-2940-4790-88f5-014df00bde42", "sighting_of_ref": "indicator--a4f4046f-6e15-403d-923b-34578fa4e708", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0761d5f5-de08-48e8-ab05-e3e5d87159af", "sighting_of_ref": "indicator--4913bc5f-7091-49c5-9eb6-e7e112dd4370", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cede22a2-12b2-4db5-a87b-deca3212a26a", "sighting_of_ref": "indicator--11822147-9c84-4282-8d9a-bb2bde2af29e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2fa00b-070b-4e42-96fc-b7099d784c99", "sighting_of_ref": "indicator--11822147-9c84-4282-8d9a-bb2bde2af29e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4e112f-f047-4b48-97c1-cc8cfc51cc16", "sighting_of_ref": "indicator--05803487-02e8-4c73-b40b-3e0bfbf581bf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ffdd36-8e18-4a60-8d9f-a81273b39703", "sighting_of_ref": "indicator--cffe0cad-fb22-4b06-86fe-e6072bcbe219", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6d531e-7073-4ddc-b158-1e8b569c5872", "sighting_of_ref": "indicator--df398243-f510-4094-bb88-8dacd91aa26a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f4d382-6d8a-4cea-a7b7-e733a198a4b3", "sighting_of_ref": "indicator--df398243-f510-4094-bb88-8dacd91aa26a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--249c5cfa-7f0a-406d-880c-590bbe9d5cb0", "sighting_of_ref": "indicator--cc2d3768-f858-4474-b100-a116f21bf3ef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1883e95d-0e8f-4271-9924-3f3ea1063a90", "sighting_of_ref": "indicator--f099b774-9299-44c9-b490-067294548854", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6a1566-f1d2-42eb-acb7-16a5c9aa8f51", "sighting_of_ref": "indicator--f099b774-9299-44c9-b490-067294548854", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d6391c-f06f-4a93-b647-cca40cd297ca", "sighting_of_ref": "indicator--27781db4-e87e-4ce3-9bb7-1c137206c780", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac7e646-37c0-43f4-a73a-9be04a4eb3e2", "sighting_of_ref": "indicator--27781db4-e87e-4ce3-9bb7-1c137206c780", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48ebbc3-f961-4d53-aaf9-e7cf9b0b4895", "sighting_of_ref": "indicator--30d6f065-6bb2-48f8-8703-e7d6edb523f8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7a70f8-223b-4afc-b057-cea8e87a7725", "sighting_of_ref": "indicator--30d6f065-6bb2-48f8-8703-e7d6edb523f8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ca84a0-78f7-452e-8c1c-ad8bafc5380a", "sighting_of_ref": "indicator--faa646db-e45b-4e36-9840-f45df55a136a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee7430d-2608-4ce3-a5df-57215acc2ec8", "sighting_of_ref": "indicator--2464ddc5-610d-4c1c-a494-d2bcea39bca4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f59c43b-6dfb-4e73-93b7-eb84a730c042", "sighting_of_ref": "indicator--bd961372-1f02-4b90-8fce-3f9be9bbf858", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1b1147-8b64-4856-a47e-93fa093af39b", "sighting_of_ref": "indicator--bd961372-1f02-4b90-8fce-3f9be9bbf858", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc6141f-79ad-4c18-9d0d-d3894d6884c0", "sighting_of_ref": "indicator--fa023f1e-988b-4923-82d6-de6ad539f837", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3294a8-ae48-4cf2-89d0-0e967de8dc7e", "sighting_of_ref": "indicator--fa023f1e-988b-4923-82d6-de6ad539f837", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488612c0-d9e9-420a-9457-e1f94535855a", "sighting_of_ref": "indicator--e36cb49b-c0aa-4db3-824c-80d2a5e3f4eb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7d57c5-7113-4659-b1d8-419fa24cbaf4", "sighting_of_ref": "indicator--e0580adf-e21b-4019-be63-877d025c2b75", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07068a87-35c9-420f-9934-69bd61bccd4d", "sighting_of_ref": "indicator--e0580adf-e21b-4019-be63-877d025c2b75", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e3660a-e656-4b6d-b70e-93314ca1b760", "sighting_of_ref": "indicator--cd89e768-08cc-42dc-8d59-ded32711c0da", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0019df-b8c8-40ed-ac4e-56687a3d1276", "sighting_of_ref": "indicator--cd89e768-08cc-42dc-8d59-ded32711c0da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7790036f-a140-4497-8aee-a007863bba34", "sighting_of_ref": "indicator--7f5402b4-e7c9-42f1-bb39-16c478aa4497", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a6e14c-e1c4-4d5f-a7cb-73e3c8be6e88", "sighting_of_ref": "indicator--7f5402b4-e7c9-42f1-bb39-16c478aa4497", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a39bf0-4532-4acb-adcb-3fde3f991e43", "sighting_of_ref": "indicator--967699bc-500a-4664-84a0-659a5d8be8fb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6103538-21eb-47dc-bbbd-4580d093bb82", "sighting_of_ref": "indicator--42a96b7f-6420-4ce4-b10e-2f9aad9ca282", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2d0a05-4d69-4758-a129-66d4491587a7", "sighting_of_ref": "indicator--0525ce33-8786-46cf-af5c-86099ffdf522", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f836c54-1ee2-4887-bba8-97967a16ec36", "sighting_of_ref": "indicator--0525ce33-8786-46cf-af5c-86099ffdf522", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7126d5b2-5929-48f4-91f8-9fff77f677ab", "sighting_of_ref": "indicator--3925e8e1-ce15-44a8-bc0f-86e60ec339d4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc95ac6b-457b-4774-abd4-3a22845301a1", "sighting_of_ref": "indicator--3925e8e1-ce15-44a8-bc0f-86e60ec339d4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e400d981-94c0-4969-98bd-b8ad24246fbb", "sighting_of_ref": "indicator--9a7394ce-cf6e-4f4d-b182-a1b0b200a059", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e1f561-9236-477b-a20f-e068e1dc672f", "sighting_of_ref": "indicator--4d975c93-23a5-43b0-9d6d-dee2d408b419", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1962534f-1f00-4a87-a39e-cfd1ab620653", "sighting_of_ref": "indicator--4d975c93-23a5-43b0-9d6d-dee2d408b419", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00122f54-a89b-4aa5-a7cc-2f19de038e10", "sighting_of_ref": "indicator--f2aced3e-d940-4941-81ff-4cb772aba552", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b3b0f5-9f32-4a89-91bf-417bbece0314", "sighting_of_ref": "indicator--393672db-c26a-4352-b8d4-5b12e55e7a8f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82204739-8a4d-4786-b06f-5e76938381a2", "sighting_of_ref": "indicator--393672db-c26a-4352-b8d4-5b12e55e7a8f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603d0ee9-bda9-43da-9a78-310b9fbf9c05", "sighting_of_ref": "indicator--f46c07a1-2674-4c43-906d-ae361abf1826", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe466091-6181-43df-93ca-9c86ba86c7af", "sighting_of_ref": "indicator--f46c07a1-2674-4c43-906d-ae361abf1826", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d17b804-e808-4728-82b1-58be0da5b0b5", "sighting_of_ref": "indicator--db8ae661-42d7-4aeb-9440-7d3d002936e8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bbc8827-5b78-49d0-b4de-9c090b423217", "sighting_of_ref": "indicator--55609235-4e1e-49a7-af57-2e894e1a0196", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ff9b5f-0fb4-45c6-ab70-3dea828885dc", "sighting_of_ref": "indicator--b3c76d9b-932d-4a79-9615-a7e60ff6e623", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42608a8a-5e93-48f4-af31-6b9480abdc63", "sighting_of_ref": "indicator--8ffc8ced-6746-4567-81a4-db7b589a67db", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567944e1-22a5-49b8-a94a-5aead4e7af88", "sighting_of_ref": "indicator--bcd3e518-ba58-4eb2-8f82-898fafd95401", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce4f05c-e982-4985-8116-f0743227752e", "sighting_of_ref": "indicator--f7ef8d18-fa9c-4805-976c-0d9e1e6f1a09", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d708bc8-791d-409d-be2c-2f4f743bbaee", "sighting_of_ref": "indicator--e41b6d17-5271-416f-b512-1f71c98f1e10", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b980fc-0f75-4bf3-9d9c-75db6cfe767e", "sighting_of_ref": "indicator--dc0317f3-0ab7-4d71-9b9c-f0c70104af86", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b142d7-5fe6-42eb-a561-c9d48546ceb0", "sighting_of_ref": "indicator--2ed91095-70a8-45e5-aa46-56aec3bd72de", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a688378-22ef-48c5-a234-2f58994d842b", "sighting_of_ref": "indicator--37fe7c70-828d-4682-a263-16580fa06705", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf99cef-f096-4c55-87d4-183ce3fd81b7", "sighting_of_ref": "indicator--ff1dc6cf-c238-47f3-9453-f95cf3c4700e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f755ab81-d870-47b8-9067-1f4f5f1c82eb", "sighting_of_ref": "indicator--df672465-ee62-471e-9812-525bd951b16b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb74892-cda4-4222-804c-fff8c0cc1c08", "sighting_of_ref": "indicator--5fcfdad7-5915-49be-8d73-25d83b2eb35b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970552e0-3a62-4027-8966-817f4c406220", "sighting_of_ref": "indicator--a9a4b8f2-dd3c-4b2c-9fca-b1ad3b9cd784", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edcadd31-d5f3-4b67-97a0-51d0b43fa280", "sighting_of_ref": "indicator--64faa14e-6af6-42c9-8ce4-22ebb4e0804b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927f8eac-24bd-401c-9bf7-cb6177ba02dd", "sighting_of_ref": "indicator--885683e9-8b1f-45b8-8c1d-064f5942ebe7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a4453d-e0a1-468d-92a0-d1b01ae67cfe", "sighting_of_ref": "indicator--284bd52c-e210-42e1-b0f6-48f375edeb0e", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9966c599-3553-4d30-b7c4-28f8e3d0c7d9", "sighting_of_ref": "indicator--553b0509-1ee1-4811-be10-9ecd88139bd5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0b0bfa-e7cd-439f-9fe1-9240c8582c22", "sighting_of_ref": "indicator--7f0513e8-cc28-4725-b022-edd6bfddc4d9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1cc6cf-8f5d-4369-94c5-f3895bd576a3", "sighting_of_ref": "indicator--12246c2a-a9f7-4047-9bad-bd8226fa6d3f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcfac587-5ec5-4822-bf79-ba5b79ec5a83", "sighting_of_ref": "indicator--12246c2a-a9f7-4047-9bad-bd8226fa6d3f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bab1616-a59e-4d58-af9a-f35e18e2d6f4", "sighting_of_ref": "indicator--141f0405-d765-47fe-bd0b-ed4ee0b3079c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5aeb75-b911-4771-9b82-c2599371f676", "sighting_of_ref": "indicator--2795b5d9-df79-4a95-b4dc-f73dd7522b49", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70bac5a9-0b49-4172-8e97-03582a4c0e3b", "sighting_of_ref": "indicator--784edbaa-bc9a-4bdc-9c7c-649df98bc149", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4ebee8-463c-49d2-9a7a-56edf1fd29fa", "sighting_of_ref": "indicator--f97d8190-893b-4f38-a638-375adee9067d", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f3d321-5ca2-40c2-be59-a943d17f9d0a", "sighting_of_ref": "indicator--6613b089-9253-405f-ab60-841e8638fcbd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cecf802f-3126-4608-a2b6-cb9d0913655a", "sighting_of_ref": "indicator--79e8e180-d08a-43c2-82e5-747747c3c404", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6e654e-fc86-42e7-a912-412ec8f828f1", "sighting_of_ref": "indicator--7b21cde5-b6c3-4f81-829c-f18d4d9eb931", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06874213-99ed-48b2-a59c-f7b83a473002", "sighting_of_ref": "indicator--659b974d-4706-492e-b7eb-28c186c7ea8e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa011c90-7c28-48ab-afd9-df0a9b08ec6b", "sighting_of_ref": "indicator--2c6c349a-79ef-4ff7-bc65-d2aeccb90029", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49ed267-0c8b-4eca-9bde-e2f2eac87d08", "sighting_of_ref": "indicator--0091b97a-d915-486a-bf88-e8c2cb0f9226", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad360cac-c420-4a84-8289-f9ba2ff00541", "sighting_of_ref": "indicator--5d228170-d3a5-48de-ac02-0fe70dfbaba0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed11165-1bdd-4bb4-bffd-51e67b6992ff", "sighting_of_ref": "indicator--de0b0ec5-830f-47ba-a7de-63d68a2b9ab7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2753a37-75e9-4160-a63b-716649112028", "sighting_of_ref": "indicator--0062e079-8d05-4674-8bca-f48734986d69", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7efa538d-0ebb-493f-9464-a96eabfae9a1", "sighting_of_ref": "indicator--f43df0bd-6ab1-4f4e-b1dd-f37466dfce9e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b0833a-419c-45ef-b2d0-a7f1588cc5a4", "sighting_of_ref": "indicator--8b19f195-ae52-4ea3-aab1-0b281f9c8511", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97d1523-6378-42c8-bfcc-b33d98591bf4", "sighting_of_ref": "indicator--f1d4c916-0141-49ef-b3c7-e165cd078aa3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a20f1e-78b9-4c5d-92bd-4c4a64d64901", "sighting_of_ref": "indicator--9c5fe3f1-39bc-49d9-8b89-bb916f87c35f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5dafd74-023d-4da6-8fca-2e51d4310dda", "sighting_of_ref": "indicator--72e967ee-3682-4afd-8fbc-942a76f2449e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6fc69e-4423-41ca-a04d-6ef214ccf814", "sighting_of_ref": "indicator--406906d6-d9ab-4c96-a7e9-8308cd7d0ad5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587c8f8b-339f-4e84-b5b0-636f7f301682", "sighting_of_ref": "indicator--30e61f0d-dfd9-49e2-8d15-22da71796951", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2abe9fcd-6bb5-49ec-bdeb-730d7d289196", "sighting_of_ref": "indicator--398bd1b9-4f43-491e-b9de-bb3e6ce78737", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a4f912-4c44-44a4-bfa3-e5efae333772", "sighting_of_ref": "indicator--f27b91fe-9cf4-42ed-a0b8-be025e2732f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9def53-2c53-4110-a3b5-bac2de2c0c6b", "sighting_of_ref": "indicator--d895a234-03f8-4529-a3bf-97b549f677d1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b436b6-7547-462d-ab47-3bd28caac599", "sighting_of_ref": "indicator--2fa7682e-d5dc-4e37-bdf4-57881174972b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710c9bd6-4544-468b-bf5f-8c3979d0064c", "sighting_of_ref": "indicator--b8d44c93-c945-4fcf-8011-1255ccc48db5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b82b85c-7e63-4250-b9c5-571d71e7bd1f", "sighting_of_ref": "indicator--d3be700b-6e35-476c-bce4-2f946e161adb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca68410-91ee-475d-8cc9-0085f9ec64cb", "sighting_of_ref": "indicator--f8a7bb37-2ff6-4f96-a086-88c93a965263", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b446b37e-f880-4eb8-be66-593c1623c2fb", "sighting_of_ref": "indicator--2a1a751b-1504-4395-8225-24bbc1055c50", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e945f887-1407-44db-88bb-3cbfbd3d82ee", "sighting_of_ref": "indicator--6dd322bd-796f-414a-8fcd-ce2ccb6618fb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e051dfac-8606-453c-96aa-9d134a1bddfe", "sighting_of_ref": "indicator--9b41028d-9550-4a19-b8aa-5d5856b969b5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58d6b85-3d8d-4a7a-bb4b-b48e9868a6e1", "sighting_of_ref": "indicator--395eee7e-4d2b-4623-95cc-627f0a838049", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab59c592-fb68-461e-81b1-bde1467762db", "sighting_of_ref": "indicator--d749b9b2-3f39-4bf7-8c2f-f11f731cd4c9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9750438-bf30-4eac-86c7-684f1e85ced3", "sighting_of_ref": "indicator--387463eb-ed75-4545-abd3-3bb109522a52", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d0c59a-ff41-47f0-81f8-44e1c8cb9a2a", "sighting_of_ref": "indicator--acd6c1dd-6901-43ca-9fb3-4fd099dbd6c1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a19497-9371-46c7-9417-da5cabe706bd", "sighting_of_ref": "indicator--08e1f26f-599c-41da-8b4f-c187440b9284", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67fa746-1512-4bdf-b397-2d45afc0e5d7", "sighting_of_ref": "indicator--2958ce25-2fa2-4670-800b-7d3d0bc2b506", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b1871e-8cd7-4fb8-a178-968145aa8af4", "sighting_of_ref": "indicator--8d0cf6a6-5231-4d85-9373-f0a8f2c788b9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4864baf6-db35-40c4-9cc2-d5542ec5c4f2", "sighting_of_ref": "indicator--c8bd4d18-d891-4c75-b326-3e59b5e9c504", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b5bd9d-0714-4dca-8e17-311927d0cb76", "sighting_of_ref": "indicator--ddabc2d2-33d2-4be9-9d2e-b8dd8643d509", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2b2a2d-7b2a-423b-9bd1-70e160e971e6", "sighting_of_ref": "indicator--191b8435-b032-4237-8a4c-ebed3458c585", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ab9977-f303-4dcf-8403-246ad6b7dd03", "sighting_of_ref": "indicator--d7af100c-c5ec-4691-b672-638a2ceb6afc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cec6468-d187-4243-ad96-b10ad3efdbd0", "sighting_of_ref": "indicator--9a5a285d-7c4e-469d-afb3-cc69900542fa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb1da0d-7833-4c34-af42-76b567a12207", "sighting_of_ref": "indicator--55b3198e-2c52-4292-bbb8-c933677e853a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8fb3f3d-a4a6-452b-98d6-e1d4a96240d3", "sighting_of_ref": "indicator--32da0c0c-153a-4ada-b3b3-2a2417e2ce68", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3e38eb-bd27-4286-bf74-40153c853f1c", "sighting_of_ref": "indicator--9e81f2fb-5cdf-4aa6-9389-cff59816b3a7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b11c0b-145e-4ac1-a65e-2d0db4b54d29", "sighting_of_ref": "indicator--5e1ecd0c-7151-4b8e-bdfd-bd3f91e06466", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b3a787-95d1-41ed-9877-2a0de8ff6762", "sighting_of_ref": "indicator--9ee85784-10e5-4323-ade4-ca09ffd6b6cd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce52690e-4f47-4059-8cd0-0bb7fc1e3d82", "sighting_of_ref": "indicator--da74731a-45a3-43d0-bac1-7686739fe545", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb9214a-62fd-40bb-8b50-335afa9700e8", "sighting_of_ref": "indicator--9a9c67cd-9443-42d7-8134-cadf03f206f0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f12c3e06-b2c0-40ae-b69e-4a670495b425", "sighting_of_ref": "indicator--fb5e9139-a817-4637-ba73-0a6b81055270", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98655f7-39a1-47fc-a2f7-220fd8ecdfac", "sighting_of_ref": "indicator--0b84a8e7-2248-41d4-9e57-f49790d1e1bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073bae6a-0e4b-48e6-b323-5dc59f95dc89", "sighting_of_ref": "indicator--99f8c054-3fb7-4fa7-affe-6ef742de21a1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268f6e2f-c7e4-4bcf-82d5-4e9b854a3d51", "sighting_of_ref": "indicator--f1a18261-0f6e-47a4-afe2-242f4deec070", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f370c6-fb50-4358-b956-f915281ce99e", "sighting_of_ref": "indicator--491c8336-f671-4be2-81da-345cc68b99e4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98cc2b3-c5a8-4364-9767-202a40cd7a73", "sighting_of_ref": "indicator--05465061-5f11-4412-b575-01087f39df6d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e643a241-314e-4b4e-9be3-412e031ef10c", "sighting_of_ref": "indicator--4a729c32-0513-4fb7-9f13-ba208bc5ff87", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6be43c9-cc05-44c2-b124-c72225e6d8b0", "sighting_of_ref": "indicator--88418b47-7959-4ed2-8994-f80737b55138", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb503df-8a50-4b0d-a773-e70b3ebba86b", "sighting_of_ref": "indicator--ae81eb82-c5a2-4b64-994a-5a0b7f03987c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e924c96a-4dcb-4894-83d5-0939b5210868", "sighting_of_ref": "indicator--bc51b348-c119-4fe0-b50d-955e5d6d057d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91e3034-4106-4755-82b9-ec11ec591c8c", "sighting_of_ref": "indicator--65a503cc-5bd1-4ac0-bbb3-7be9b40b278c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1524d7-89cd-49dc-8ec3-7b01f4b11191", "sighting_of_ref": "indicator--551e7a36-27ef-4c7f-b85f-bcc0a9152c66", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b80f1ac5-7176-4e27-b7d6-5a06c51a043c", "sighting_of_ref": "indicator--e236a615-327f-4c43-bf6c-ac41ce87b07b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44eba65f-1d93-47cb-82df-f5077951fb94", "sighting_of_ref": "indicator--9ea831cf-d76e-402d-b569-4d4351ae7ebb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8772c4-e991-45ea-b439-90ad405d12a8", "sighting_of_ref": "indicator--a2c297b1-6368-44ca-a1e8-b4b4e11788f9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41dcd644-0aca-4d8f-8bcb-8fea54048001", "sighting_of_ref": "indicator--d8a19ce0-e824-49f7-bce3-79ea515bc439", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd736944-e466-4274-a41a-9e8923e05714", "sighting_of_ref": "indicator--96214268-b208-4e1c-a9f9-ee0ba811b455", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63f934a5-137e-4b23-affc-22b60c1d4fd4", "sighting_of_ref": "indicator--0ef370f3-b5c7-469b-8f82-dd470f0ebe2c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2cbbaf-d1df-42f6-82c6-eab4400165a5", "sighting_of_ref": "indicator--4f3c2ccd-b2b4-43db-a022-ef56f0509109", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a30b43-6a7a-4833-8446-1713f6db2e83", "sighting_of_ref": "indicator--6b8299d7-378c-4ce3-83db-3f7f996c1c61", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54184099-77f9-475b-88a1-db34f68e8d63", "sighting_of_ref": "indicator--6b8299d7-378c-4ce3-83db-3f7f996c1c61", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8cfc933-52f7-4129-8fdc-663bb765e01a", "sighting_of_ref": "indicator--48933f03-7a3c-4e14-b389-7c992c052c44", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d644af3-a12e-4085-8333-bf9041c453d4", "sighting_of_ref": "indicator--53e4e05f-7e87-4b02-8d62-d147033a3230", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3886bda8-5e8b-42f9-ae5c-3fc8ea20b6b4", "sighting_of_ref": "indicator--32f2e684-93bc-4aa0-b67e-e936e1613349", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ff0f7e-3ffb-4dea-82cd-c986757e2d41", "sighting_of_ref": "indicator--7fee036a-2e68-46ee-bacb-77b286b47783", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc2ec36-6662-4da5-b25c-6e05238de01f", "sighting_of_ref": "indicator--5b905896-1ca6-4b93-b9e7-043ac485705a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adfdfb82-5062-4eb1-954f-948501038fd9", "sighting_of_ref": "indicator--b36cea20-c770-43b8-9c56-24fb72cd5569", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a011c9-287b-4a82-8230-9ab090b4abdf", "sighting_of_ref": "indicator--18c360de-12d4-4a3e-a488-6f6bdc86eecb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd489bbb-7f39-4522-b201-39aa35c3354f", "sighting_of_ref": "indicator--a9b59b3e-e3d5-421b-9612-b8dac4e03b3a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf7a6dd-7bc3-4db1-91af-9b658eb3a9b3", "sighting_of_ref": "indicator--bac12993-48c9-40cb-9fdd-1fddeb962ea8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b0f73db-1225-46ca-b5ad-ed663e3bc19a", "sighting_of_ref": "indicator--e9885ff2-b87b-4c76-96b8-53ad9e3a65ae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf91993-85e6-4c3e-bbe9-b0bbd4c58f97", "sighting_of_ref": "indicator--a157f99e-3ba8-444e-9a5a-9ab6f968a36c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0222a64a-9be7-4917-b738-27166a8f93f7", "sighting_of_ref": "indicator--f1c75fb5-c31d-49e2-878b-e750a03aefff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0d5c94-e533-4c62-b5e6-acbf27b2d3a7", "sighting_of_ref": "indicator--25f022af-9801-4640-85f5-aadd01360be7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d566eabc-016e-4122-a97e-4cc6172f80fd", "sighting_of_ref": "indicator--ac698007-c6dd-4636-9a98-5324268137bf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e33eff2-b71d-4c85-bc92-b8fe2b7964b6", "sighting_of_ref": "indicator--05541406-6ea3-4e27-bb83-0311346be149", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93da3197-9c99-4cd2-bfc9-188ddb6d3edc", "sighting_of_ref": "indicator--52de06f1-4bd3-41eb-a68f-e6b40a667309", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f900a124-2fde-4941-9398-46d2de385654", "sighting_of_ref": "indicator--76c952e9-fe46-4dd3-bc9b-373618be9359", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41201b5-692f-4a3e-8ae0-ee82d0e26bed", "sighting_of_ref": "indicator--74b7ccb5-e78b-4ad6-a4d8-896aead1c340", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8ae95d-bcea-4e01-8456-8401ad6a3deb", "sighting_of_ref": "indicator--5526dc35-1ead-40a4-981b-fb315cbe9695", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf3f8c23-30b4-4a35-9247-a39add8ffc51", "sighting_of_ref": "indicator--c73e73fa-8060-4983-955e-a2780a84bb2a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877eee74-bc90-47bf-8f4d-dcef57a65127", "sighting_of_ref": "indicator--12fa3f36-bdd1-4ee9-aeb1-61ad61a2ae40", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044a36f9-9398-4968-bbd3-724da85f03f4", "sighting_of_ref": "indicator--6c890da4-f298-4290-ad68-287c77b56016", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ea4936-65e8-473a-9113-b48c4611276f", "sighting_of_ref": "indicator--92f80dbf-b1de-4b1d-80f8-b027327288b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef1b5c2-2def-40cd-aebc-4943cb2a733e", "sighting_of_ref": "indicator--3d5bd4e7-487d-450c-b0e3-e33c3f0b8549", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d7494a-24cf-495a-9c1f-6c61744c69c0", "sighting_of_ref": "indicator--208ae6b3-1f77-4824-9c9d-5e72c36cc539", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0df0ae-70e8-47f2-b518-c6e6c8e46ff9", "sighting_of_ref": "indicator--28081713-4b48-4e6d-bb05-2df47174f952", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8776d183-2df1-45cd-9bc2-3d6ba861060a", "sighting_of_ref": "indicator--20816532-66ce-4e7b-944d-6afdf07cc620", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67638ba1-f99d-4eed-9c57-a1b48c927073", "sighting_of_ref": "indicator--50d3e04a-d8d9-4a9f-ab96-a35f6572861b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388bab96-efc9-40f0-8e3b-71cdfb3c5b05", "sighting_of_ref": "indicator--3d217f24-6c4d-4e36-a4e0-89d7dec022a1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5970adc-ec25-40f6-9fb1-b843405dc630", "sighting_of_ref": "indicator--564efe6a-1c04-43b3-a6a9-d056880d430c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd402e11-827f-45ec-b4d4-c8ef59cdb832", "sighting_of_ref": "indicator--d2803476-6a88-4867-8998-523dee170978", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2461c2a0-d7c0-4dd3-bc4e-3098d2b66a85", "sighting_of_ref": "indicator--25f2a432-1c6d-4981-be34-44b8b312ae53", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a644e6-1ae6-4189-8ab6-89de7323c5fc", "sighting_of_ref": "indicator--ec74ba5a-0b89-4590-a4e5-03324bed6437", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf82684-1427-49f9-a56a-bf965d452fd4", "sighting_of_ref": "indicator--7c158ec3-dea4-4960-82fe-5ca0d7921879", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc99057-8954-429d-89a2-f6c5a957eb56", "sighting_of_ref": "indicator--2cc0e916-690e-4f2a-87f9-906a0fe31d9e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa1e012-c880-4d5b-88eb-a77d97bbdbdd", "sighting_of_ref": "indicator--5623bbc0-36cd-47cd-98b1-a03667749d26", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213a29bc-2048-4de2-badb-ce29fa8ff097", "sighting_of_ref": "indicator--3870f9f0-985f-4242-ac8d-4a44f10d96ab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfcfd9cc-4038-4216-86c7-54d71494a663", "sighting_of_ref": "indicator--2aa36341-3927-4982-a146-c632bf6be2dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f72664-e041-4ad0-a10f-181b0e66bf08", "sighting_of_ref": "indicator--e652d70c-3669-4681-95c2-38ce0baafa69", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10ab5c0-647a-4ab2-8cfd-fabeda4c78b1", "sighting_of_ref": "indicator--065c4d14-bc5e-4ff6-ac15-85109a31e0f7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86df8af4-c5d4-4850-a12d-2edf261ce6de", "sighting_of_ref": "indicator--e741bcc0-f2fc-47d4-a4e7-f636f1309bd6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa3d989-c871-4eee-ac28-f9eba2874bdc", "sighting_of_ref": "indicator--6a7476f6-1b4c-4200-84fa-9aa4ccd0bf3a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d2c6fd-219f-47b0-9bf7-053bc5ea8022", "sighting_of_ref": "indicator--9b5bd146-473b-4090-b881-2b08ab98cc7b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6096e04-8a25-4019-879f-5e4b6de94eff", "sighting_of_ref": "indicator--34e80261-2556-4699-8fe4-1386f354d245", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--454ca0b0-b68e-466e-aad2-a050311c39cf", "sighting_of_ref": "indicator--3a2633c4-ca37-4cb0-b903-1fcfe87fbff9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1873b4-7693-4c37-b456-01e112e6ac35", "sighting_of_ref": "indicator--927bbcd7-607c-46f8-ab17-4dcdae1f95e6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45b8b08-b6c6-4b7b-9be4-d59c551f2168", "sighting_of_ref": "indicator--22a0f887-7ef4-418e-ad59-ed3d7d09cfcf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392e7c65-73d1-4265-8bc4-1d65e5441aa5", "sighting_of_ref": "indicator--e9505b89-7152-4f6a-a9da-307ab2bf999b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e575498-7ea2-4358-bb25-22c42cccc164", "sighting_of_ref": "indicator--47d0dffd-2001-4ac5-bb54-9e728aed2ec2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d8cc6eb-6a17-4ad8-960b-c6f6d42cdc5f", "sighting_of_ref": "indicator--8b98f3d8-9a06-41e3-8b8a-2d62eeb5cbcd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47291623-aae1-43f0-b069-8df60705942c", "sighting_of_ref": "indicator--b03f3c50-bdf4-4fb3-b16c-b1581c46cdbd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912253f6-5645-4114-9ea2-995200c89fc0", "sighting_of_ref": "indicator--838834d7-9a1f-47d5-bf0f-d28a093d4ab8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d989b0-d1db-4490-98ae-a5c1b172356f", "sighting_of_ref": "indicator--83883af8-93e1-4b64-9e2b-d37963c38098", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d27644a-7dec-4906-a437-ed3676a853f1", "sighting_of_ref": "indicator--4ae825a7-5e60-4731-b9ad-31cbc0fde586", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17766752-e45c-434b-bcf6-1884dc693ef3", "sighting_of_ref": "indicator--abe4b564-0673-4cae-9b3d-e1bf652d2125", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c37646-5410-4310-b816-e61ad2507893", "sighting_of_ref": "indicator--823fbbda-b649-47ea-ba1e-c3134eab9366", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d30806-d56a-4996-8dff-7f6ad3a19061", "sighting_of_ref": "indicator--c278d726-094d-47a4-85aa-3dde43015e89", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a329a1-4339-42c6-bf2a-ddd05e2a3f0f", "sighting_of_ref": "indicator--7247a99b-3a36-445a-8a45-a5ffce1df76f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36641f0-916e-488c-9009-b82a87e36f58", "sighting_of_ref": "indicator--47cba9d7-4a94-4ca7-b7bc-e7f67dbb2abe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce53446b-f765-4071-ba48-29526d61f2fd", "sighting_of_ref": "indicator--990030aa-8b17-4d50-91f8-4927886c8808", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e06afbc-b77a-42de-a147-16d2e7e3c833", "sighting_of_ref": "indicator--5aa9adc5-beaa-4fc9-a7d4-cb3d48a3c3d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0ab34f-5a70-4c97-ab51-e7f7be9c5b8c", "sighting_of_ref": "indicator--a29fcce5-652e-4778-a9f2-50be9e38b09c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0807c4f-5a30-43b3-83ab-4b011506d7c0", "sighting_of_ref": "indicator--d30047bd-4939-42a5-865e-462ed4e8064b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2de4f99-6c03-4c63-ad4d-1eaddfa7586a", "sighting_of_ref": "indicator--eb204d11-1e28-48cd-8c03-5c0e6bbc4c9d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c00c09-be4f-4397-8f37-ee304b5fe0d2", "sighting_of_ref": "indicator--cd6f696c-cd47-4d35-8c00-61cd66fb7538", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b91bfb-0656-4d5d-9f0d-7c3e05af2fe1", "sighting_of_ref": "indicator--5ad9803f-31ea-4212-87f9-ec72a1f5dc38", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313d6579-3e3a-406d-aad0-e136141bbfd5", "sighting_of_ref": "indicator--e20fd2c8-b3cf-469a-bdb2-7810aa6dc347", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79c0478-db6a-4a08-a4cd-ea2df51ef563", "sighting_of_ref": "indicator--a80efa0a-73ea-4457-b5f2-562a497d5068", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0f3627-de2d-4bd0-b1de-5a1f9c10a3e2", "sighting_of_ref": "indicator--183f1aed-b442-446f-9c1e-606a9a6a2b57", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ec197c-82c2-49c4-ae08-475b0d85ec63", "sighting_of_ref": "indicator--7501569a-d165-4654-8270-9e81b1054a08", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d273b7-ee0e-459d-82e0-752e15aa099b", "sighting_of_ref": "indicator--7067f4b5-c209-44a2-bc59-f29c84f164e4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9961efa-e646-41f9-9d9e-35df4f354111", "sighting_of_ref": "indicator--9966cac3-c20a-4183-8d67-85bee30c47c9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806891bb-d278-4b8d-9f66-4209180bd8ab", "sighting_of_ref": "indicator--20f26b46-3149-418e-8480-5d9b1710f686", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e38aba-caec-4acd-aac9-8222d4959b89", "sighting_of_ref": "indicator--f1397495-fc28-4140-8315-8d94a30b5149", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30424866-2b69-43f3-b353-701009008d39", "sighting_of_ref": "indicator--acad942f-30d8-46a0-a5d4-ab02b4dfbb5d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3240bf4-ac5b-44ef-a663-0961503079ff", "sighting_of_ref": "indicator--cc1d0afc-ec68-4c3b-b9a2-498f5eb41f1f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450f170c-1f15-4ad5-8e61-e3eecc305357", "sighting_of_ref": "indicator--634dc3ab-9760-4910-9d2a-5c854c0a02d0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa7c028f-79dc-4f48-9ca8-12e70cbe7ea6", "sighting_of_ref": "indicator--b413b38d-5d46-46cd-b7be-1d708387a34b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1460ca-8dfb-449a-b46e-918706a98903", "sighting_of_ref": "indicator--7f0308c1-5891-48b6-be94-e8edc4853c8a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a897a4b3-ebd9-46f6-8863-c009f741e5a7", "sighting_of_ref": "indicator--8c37b89b-382b-44d7-9a5a-19a79866b5ee", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92e9df0-2f68-4d93-ac9f-f10fbc659195", "sighting_of_ref": "indicator--8744dcd9-a243-4011-8d3f-804f5b50634e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f20c32-6929-4e2f-ae59-ac82ee21cf12", "sighting_of_ref": "indicator--75d41219-b643-4541-9216-95e5507a3e95", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45e440b-72b5-4e3f-8164-8ba34aab9234", "sighting_of_ref": "indicator--cff18d93-0431-46e8-9761-6be885107056", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db3ea3b-8f1a-477f-b8ae-fdf1d2544f50", "sighting_of_ref": "indicator--714ea43d-f3ac-4a17-93c1-9fa49bf6c3d1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d1207d-bcb3-41ce-839f-ad293acdac18", "sighting_of_ref": "indicator--b55d9538-8a3b-4e80-9f39-60388f12e901", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--181567d2-df4f-4a24-8446-4a7e379c1530", "sighting_of_ref": "indicator--0cc01ced-2138-4090-8ce8-0cb24ddfdb34", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c740761-0607-48cc-8fe6-6c8a3c79c8a3", "sighting_of_ref": "indicator--8382910f-a5e6-4523-8a12-5065a2046793", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ed2a63-3968-4f01-95db-9afb5b3c4cc8", "sighting_of_ref": "indicator--7f975bbb-a82e-46fd-ac56-488029206fa7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c8215a-5ad3-4135-9409-5f43a01f5d7e", "sighting_of_ref": "indicator--23c3ef67-b980-4d7c-9e63-574bcc3d7473", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b04f1c-515f-4c7b-b0c7-b4d5f8c810d2", "sighting_of_ref": "indicator--b2183830-87ff-48af-b76a-13a8179c4ca1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba90a7a-a6f0-4b3c-8454-7427faa93d63", "sighting_of_ref": "indicator--541126af-15f0-4473-ad32-626bb9b35aa5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5458b595-0b25-41b7-9830-af678f76735e", "sighting_of_ref": "indicator--e7e0b10c-a8cd-4d6e-92a9-d20fafd48a7e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a16a02-7894-478d-a30a-9f418fea9483", "sighting_of_ref": "indicator--e62aad20-6ab3-4312-99a7-6db709870925", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2aada7-1142-4a9f-858a-7b8318c4c5d7", "sighting_of_ref": "indicator--9505c30c-0f31-4631-ac3c-9ae533c401ce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79b307dc-3175-4ab7-a8d0-fe9514c51f7a", "sighting_of_ref": "indicator--f509f3b1-9505-4f55-84f6-3a373fe64aae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c87f0d1-4c2e-420c-ae19-c77690962ab2", "sighting_of_ref": "indicator--20a73e75-b01b-4c3a-8522-ae9023b668e6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597621a0-7110-4c4d-ba37-4ad0fe7f79f3", "sighting_of_ref": "indicator--44e821e6-5c13-4fea-b19b-572d16804ed8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8920ad33-d3ad-40e1-ae35-bab713d76e0f", "sighting_of_ref": "indicator--66fdf396-819c-4ed5-8120-14ea68badcbe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959ed220-53a0-4ef5-9d9b-977341266c9f", "sighting_of_ref": "indicator--2a32e61d-d3ae-41d3-8831-17a22a0ec306", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c480b358-a235-4fe5-9983-d87cb2daa390", "sighting_of_ref": "indicator--c09c4fa1-3536-4492-a209-4fa7ec5582dc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176bfc76-897f-41e9-a1ca-e32de75bcdcb", "sighting_of_ref": "indicator--59045e84-4177-4241-838b-46adf7041549", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78443245-5136-42e7-a32b-d0c882f006da", "sighting_of_ref": "indicator--c45ec1f0-d518-480b-a1d3-742d6bdc2663", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387b01b7-173b-4da8-a6c9-6582230c1e4d", "sighting_of_ref": "indicator--f2b19cb8-cea5-4231-befd-401149dd68f1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90aa162-c17b-4439-812f-dda082284ec6", "sighting_of_ref": "indicator--dbde9838-4bce-4f45-8947-d58cba7431b9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e960fb-b459-4e86-99a7-c434456f21d9", "sighting_of_ref": "indicator--0fbc8c06-ccfe-45c8-a93c-54b73c19ac4e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e17b0d-1ff3-4176-98b8-1bd8c57bbdd6", "sighting_of_ref": "indicator--2b105f44-3e0f-48ac-874f-52ccc935c9cd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5307ca5-43be-4acc-abc9-bce134ba7e3d", "sighting_of_ref": "indicator--4d784932-9f34-4722-b0e0-3b0ef13e56db", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce83c992-9b22-451e-8f37-c80114427629", "sighting_of_ref": "indicator--8335e7d9-63a8-4a1d-9a35-e0e094cf9fff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--133f2abd-da51-4f52-ad58-9727cac3c859", "sighting_of_ref": "indicator--536f7388-a682-41a4-9f91-69fc785110a0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5050f842-6a9d-4be0-9bbf-dde204c0459f", "sighting_of_ref": "indicator--2a55ed1e-7939-44b5-b2f8-dd2d593ba985", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99cc78a-f5ee-472c-8faa-6c8fac1b2f21", "sighting_of_ref": "indicator--c12cc18e-1c73-4785-89be-54d6ac93b1c7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad79d7e6-469f-4196-940f-ece33dd04539", "sighting_of_ref": "indicator--0e767126-e413-413f-839f-038cab161ad0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a85a74e-e91c-478b-ad41-6de147b67d34", "sighting_of_ref": "indicator--f12961de-4ebb-46fc-8c31-e425a8709286", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481bc1f7-7067-425b-b49c-11abe9a98192", "sighting_of_ref": "indicator--1815ac9c-0f15-4c4b-96e2-5f2d5776af29", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--035edbb2-0115-4ff6-b457-1741b7eb3baa", "sighting_of_ref": "indicator--544051ed-6b3f-4cd3-96dc-23b241704230", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fec6b4b-a0aa-436a-a9c8-bf98a1406cb5", "sighting_of_ref": "indicator--76058a0f-70b7-4c7e-a424-93f652b1ed06", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4e6738-a251-4beb-8d36-dd2f00609807", "sighting_of_ref": "indicator--c52040d8-b7de-4cb6-8959-6fd41f7e77bb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece3f7d2-4570-4d92-aa57-03e02dc4c248", "sighting_of_ref": "indicator--f47e957c-0477-431d-ae32-4fca5b1f6be4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451381b9-630e-4c6a-9a94-28cd7549c08d", "sighting_of_ref": "indicator--f47e957c-0477-431d-ae32-4fca5b1f6be4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4ecb96-8637-4ed6-9837-b5906cecd61a", "sighting_of_ref": "indicator--89f606a4-57e0-4d4d-9348-59b53c95d904", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82017f23-d499-4c70-9803-ac039b490401", "sighting_of_ref": "indicator--de1e54ec-da35-4e27-8dde-8082c025307d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60581fd-c7ba-4c6f-bd8e-832209edc49d", "sighting_of_ref": "indicator--de1e54ec-da35-4e27-8dde-8082c025307d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be0b52f-3976-4eea-9d71-5a8520e26530", "sighting_of_ref": "indicator--c0b8725d-9ad0-448b-86b0-0173aabf21d7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54e554b-afac-4a5f-b547-d40aeaf550dc", "sighting_of_ref": "indicator--c0b8725d-9ad0-448b-86b0-0173aabf21d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c579f4-9204-4c49-97a8-2ffbd5b3c30f", "sighting_of_ref": "indicator--05eafa9c-99d8-4412-a6bd-e00ca86e12a5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fbc1977-6605-46b4-aa56-2f4bf1a5fbea", "sighting_of_ref": "indicator--05eafa9c-99d8-4412-a6bd-e00ca86e12a5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa008d0-f8a9-409c-aac9-cdbbd020362c", "sighting_of_ref": "indicator--56121460-9c14-4b45-8826-26caf0d2ce95", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07957787-ee6b-4937-b24f-bada68ea922c", "sighting_of_ref": "indicator--9f7e446c-c251-4ee1-872d-448f5994a386", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb3ec8b-a136-4fd7-bdc0-1f7a4be183bb", "sighting_of_ref": "indicator--254675bf-6aaf-450d-b351-7543f05e50b8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8728d980-c647-492e-82ae-f67736920fb3", "sighting_of_ref": "indicator--254675bf-6aaf-450d-b351-7543f05e50b8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ff9905-4877-4bc8-926d-6b954abc4381", "sighting_of_ref": "indicator--229727fc-2ad1-4e65-b8bb-c04e5ba6e5bf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f19db5-c66c-4536-b1b0-e032678c3c9b", "sighting_of_ref": "indicator--c75290a5-a269-453b-b076-8d72c9487da9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db4d8052-700b-43e7-8d4a-9657c665b93f", "sighting_of_ref": "indicator--33262c75-616f-41b9-8f6c-81e9bc7f3f6e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6251cc-6776-4866-b6e6-b878391adc30", "sighting_of_ref": "indicator--257ded19-7a5a-4fc1-996b-5d13df110be8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52bcae49-157e-44f1-948b-2b552dae1418", "sighting_of_ref": "indicator--ce3843f1-8cda-476e-8441-905680e79b5c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f27ebe-9eae-4aa2-903d-78f09b0eecbf", "sighting_of_ref": "indicator--39bbec9b-fdd0-41b4-8317-1d579fddef73", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef948efc-5051-4e0e-a5a5-36d709096926", "sighting_of_ref": "indicator--a35eb8c2-c239-4215-967f-8ae767882e55", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e59202-9c5b-4e06-9762-733f72622fb8", "sighting_of_ref": "indicator--fdfb9db0-5f35-40f6-8eff-41a618985ae8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fbe4ba7-f09f-4288-aecb-fe4eb435456c", "sighting_of_ref": "indicator--fdfb9db0-5f35-40f6-8eff-41a618985ae8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7a6c2c-9542-483a-b919-5e13483f0606", "sighting_of_ref": "indicator--8227d43f-334b-4c35-ad0c-e391920654c9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6c7d96-5072-446c-8643-be9de9f06528", "sighting_of_ref": "indicator--c7e13f7b-ed4d-406d-9152-662e5317d8de", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d704bf0f-e6e0-49a5-812d-84f5cbb6aaf5", "sighting_of_ref": "indicator--05aa664d-5f0b-4ce8-b36d-265f50351bd8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070840f4-201a-48d0-9d22-ce8bf9fa434f", "sighting_of_ref": "indicator--4f988cb1-ff7b-4e62-8ec0-57299bfd907d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d65b42-9c0c-474e-b81d-f085c1784de2", "sighting_of_ref": "indicator--9f820809-b7cd-4322-9963-320090da10f1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6869a7b-4e87-4444-8d50-495fbe7810c8", "sighting_of_ref": "indicator--4430ed4d-0fd5-4343-9134-a4416ed83f71", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe33c654-ae16-4c90-91c2-a6eeb4d2e169", "sighting_of_ref": "indicator--ac8f1c45-1d14-4230-88bb-e64734d5a6b8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73bb4c06-0f82-4a84-b5e8-6c0b2feb484a", "sighting_of_ref": "indicator--cc511578-b20a-42b0-9b45-23deb4b5c0e3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d513e381-a188-41b0-a214-7d4ead8a4211", "sighting_of_ref": "indicator--03f853e7-8c07-4442-b311-9d0cef494064", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6799c12d-70be-48ae-abfd-960a47ffff7d", "sighting_of_ref": "indicator--d0c6467d-f7cb-48e1-b0a2-38f836136be9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4de7c27-960a-4603-b641-102cd7771904", "sighting_of_ref": "indicator--a1283377-28cb-4cde-9326-e3cfc45641ea", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69c8cca-6344-4ae9-b37b-8d7860b3ee34", "sighting_of_ref": "indicator--28f3ac5d-c45a-434c-9cc3-722abf920f49", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf017389-3489-4051-8aac-f72f67ea79a9", "sighting_of_ref": "indicator--309fe9cb-9c42-4684-957b-792e46352c57", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5772f8e9-45bc-4002-85f7-ccbbe90fe3da", "sighting_of_ref": "indicator--309fe9cb-9c42-4684-957b-792e46352c57", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5580fc10-0ef9-465d-aecc-29b47ead0dfa", "sighting_of_ref": "indicator--e27bfb58-6645-42c3-94d3-16f0ee4518a4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d115c0-7bd3-4ce1-8576-4743eabdd746", "sighting_of_ref": "indicator--e27bfb58-6645-42c3-94d3-16f0ee4518a4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76cf98d-00fd-438c-b5ba-fc220f011376", "sighting_of_ref": "indicator--c3dae822-d052-4ccf-937b-f71a96cd2424", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b3ed0e8-75d4-4a7e-abde-d9e9bcc34e99", "sighting_of_ref": "indicator--0d138a61-5b7c-4432-bcc5-8119981b4aa2", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a24c5b-e54a-4bfb-b158-16763db59ba9", "sighting_of_ref": "indicator--495fb601-b72c-4847-916c-4a3966ca74c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365651ef-272e-4e2c-9b8f-8ad17fdaf874", "sighting_of_ref": "indicator--6c9e4f2d-bd7a-444a-a1b4-9a1a9c59704b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de23d6dd-63d1-4d89-9ff8-da9f8c789ab4", "sighting_of_ref": "indicator--17a9b604-e0a0-41b1-9250-5eeede6eb8a7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b92808-e751-4ccc-abc3-444dbd700350", "sighting_of_ref": "indicator--17a9b604-e0a0-41b1-9250-5eeede6eb8a7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80270e1-bdd0-4047-9b22-37395be6fcb7", "sighting_of_ref": "indicator--595651c1-6bbb-4b66-b24c-226f7fc0ea46", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83fa9d4-822f-4554-935b-802147403fa1", "sighting_of_ref": "indicator--595651c1-6bbb-4b66-b24c-226f7fc0ea46", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa2ac63c-28b0-44f5-99c4-fec889c2b368", "sighting_of_ref": "indicator--b83d8665-4faa-4660-9883-eb04061b987a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0324c75d-cd07-46da-a4a5-ecc1c26c4ac2", "sighting_of_ref": "indicator--90dd560d-cd2c-45d4-b7bb-934105bffe3c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc451b2-831e-4bdc-ad9b-ac0d9e48bae6", "sighting_of_ref": "indicator--d8cc5f3c-4240-4420-91a6-d260fb5f6b8f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d256b91-bd9d-4555-be03-eebdcc9c1ab4", "sighting_of_ref": "indicator--5970a12f-d3b2-40c2-a314-a79ec56ea22f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560feeac-f7d5-47f6-9882-4673fbd9dd7f", "sighting_of_ref": "indicator--3c7acbeb-e452-4661-a79d-3e8a4955e6a6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be607e0-38d5-4444-8ab4-ff0b54df9e14", "sighting_of_ref": "indicator--f13096ac-55fd-4fa8-afc9-622227bd7992", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021b59cd-8d53-4421-8975-7856ab53351d", "sighting_of_ref": "indicator--2a0fa11f-0448-43d4-a04b-972bcb5f9085", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fba929c-9eda-400e-87a9-22fe10fc2654", "sighting_of_ref": "indicator--dcabedbd-e743-4ca5-b3e3-8eb124f88ccf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c7c16f-f917-478b-8c39-a247868b6a43", "sighting_of_ref": "indicator--3cc51271-97d4-4ebd-b570-4719388af71a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9f0eb0-5b3a-4589-8eda-6241c86dfd69", "sighting_of_ref": "indicator--1ea66711-ea43-4ee3-a00c-ae0a3fb0122a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6560f10a-2b79-4938-b77d-b873abc183e6", "sighting_of_ref": "indicator--26c3564e-49ea-41c1-9b59-481ecf11018d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13603e5e-5b4d-4ec0-b1b4-a3fed5bd9263", "sighting_of_ref": "indicator--984c3632-1074-4722-9150-15bde8a154f6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ce501f-df3b-4fc3-8224-8e376b96c3c3", "sighting_of_ref": "indicator--0bbc0ef0-906f-433d-85c9-1a86797274e4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c09658a-ac4a-40c9-ac5a-62e959e66fa5", "sighting_of_ref": "indicator--5c71915c-0e2b-4d95-b5dd-6d87826691ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8abd316d-88fa-4294-a1c3-aeeb298582e8", "sighting_of_ref": "indicator--2c6b9c1a-f6cc-41a4-bbd0-51872622039e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6ea5953-d3e8-4ffd-ab01-8fd019d0ef4a", "sighting_of_ref": "indicator--e2d6617f-2100-435b-8d5d-1fe27132664b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c430ca4a-2e2a-459c-9fe8-f80c772fc6cf", "sighting_of_ref": "indicator--aba72164-45b9-4a50-9917-0cd30e80b304", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dee063b-5161-4c0a-9937-9ec2968af947", "sighting_of_ref": "indicator--eb753532-b5b1-4ef7-9c18-f96b54160adb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba92408-aa7a-4837-b071-b265b309a35b", "sighting_of_ref": "indicator--eb753532-b5b1-4ef7-9c18-f96b54160adb", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b163053-8a57-42ec-9b9f-93003d1a29b5", "sighting_of_ref": "indicator--eb753532-b5b1-4ef7-9c18-f96b54160adb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60794b4f-013b-4fc6-b70e-f12c4989f6cc", "sighting_of_ref": "indicator--7f07f59e-099d-4ec5-a495-86b6b67ed363", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b530b829-1ad5-4a4f-8617-8cac933e018f", "sighting_of_ref": "indicator--7f07f59e-099d-4ec5-a495-86b6b67ed363", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c0fd9b-43bc-445f-ad7d-0508c808c0cf", "sighting_of_ref": "indicator--23cf0c85-882b-499c-95bb-8df847fe242c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f240afd7-49ea-49dd-a330-cc986aa6f3a3", "sighting_of_ref": "indicator--81ef3a37-2fe7-459b-81c9-d1b9d2b47485", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51851a71-29bb-4c18-9a56-f63b4ad2f057", "sighting_of_ref": "indicator--1d68575f-5015-4d2c-97ab-9d701fb5fe1f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b304ca7a-ce5b-4447-9e5e-692c4d663ebe", "sighting_of_ref": "indicator--1d68575f-5015-4d2c-97ab-9d701fb5fe1f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d6a601-01b5-4436-80d6-55508a549b16", "sighting_of_ref": "indicator--d218ffc5-0978-49ac-b12b-fcaac50a9d89", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a14367-a184-4281-a74e-10ec2913525f", "sighting_of_ref": "indicator--1245b71d-243a-4768-9255-b7bca1dced73", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97bcf5f6-344f-4922-a861-68a5ebb55b33", "sighting_of_ref": "indicator--1245b71d-243a-4768-9255-b7bca1dced73", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6684a4e-f0f4-4306-adf9-b8b8da5b5301", "sighting_of_ref": "indicator--98f359a0-bd68-465e-bb56-113262d0161a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a2e365-5b09-4149-9b33-0729843edfe2", "sighting_of_ref": "indicator--98f359a0-bd68-465e-bb56-113262d0161a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023b97ae-2e6e-4fd3-8010-3ef1ee604f40", "sighting_of_ref": "indicator--a4053646-047c-45e8-946b-87226beadce0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a938f0a-06c6-4580-97b9-ccc336120eca", "sighting_of_ref": "indicator--a4053646-047c-45e8-946b-87226beadce0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc26384-ec21-42d5-aaf0-f0b7e357fd18", "sighting_of_ref": "indicator--d0d057fc-0d7a-4319-8309-37751028b442", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7b0831-b1b8-416c-9cb5-18a32fdb8ab2", "sighting_of_ref": "indicator--408e4897-c742-4d03-8231-fbf11fd3f819", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c89cda-45fc-4554-b200-fe33e1dc3a2f", "sighting_of_ref": "indicator--16c13427-467a-4cdb-8c64-bc05758383f1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad24c943-bb1e-475a-a4f7-9311534f3ee6", "sighting_of_ref": "indicator--2653b5c4-a0a2-4b84-9b7d-2a38bdd0f6fd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e36e313b-7150-433b-b32f-dedc02095b41", "sighting_of_ref": "indicator--2653b5c4-a0a2-4b84-9b7d-2a38bdd0f6fd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e170276a-5b54-454e-be0b-fda15f153b41", "sighting_of_ref": "indicator--810d18e1-d2a2-48be-9345-f3c4363eeb2f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a74b1be-47ef-4189-9ea3-3236499fff66", "sighting_of_ref": "indicator--de3b2731-c2e9-4221-bb3b-e2a6d95cc54f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da7a18a-f15b-4fb8-9364-e90933af0cbc", "sighting_of_ref": "indicator--c810abed-1990-4eb0-882d-30e8749acde8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c4b0ae-7dc8-4219-ad34-a2c82951191d", "sighting_of_ref": "indicator--342f84df-27d8-41a6-90ba-a4b44cae3002", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0aa9677-3757-4c44-b480-2d1d6b344ba1", "sighting_of_ref": "indicator--a4b66667-80a3-4e2c-bad9-21b49d4538ff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d677db-fc02-4213-838e-7c6ea3ab8345", "sighting_of_ref": "indicator--e211b602-2a10-47fb-b8fc-143996c9829c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4dfd6b-2ca7-44e6-8e61-dc5455e37184", "sighting_of_ref": "indicator--a47e15c4-4485-4cc6-acb5-931515ec54d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e4bfe2c-b7ec-4edc-b5f4-865c1a35476b", "sighting_of_ref": "indicator--59995bee-7fe3-411e-b400-0d3dde940be0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60ed887-427f-4f32-9243-cabd71400d7c", "sighting_of_ref": "indicator--6c48275f-d50a-4241-8ebe-f94a9fe6225c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1061d648-2b0e-455d-a327-c2c1308a3d2d", "sighting_of_ref": "indicator--9aaaed4f-f745-45af-a7a4-5cec7e3d43b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a5e9f0-ca46-4af2-88c2-96cb99af30af", "sighting_of_ref": "indicator--486b9b94-2550-459c-a272-ff7dc16eafd0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5d92c3-0e3e-48cc-9382-5d4fc7def446", "sighting_of_ref": "indicator--75d7f686-f635-4ffb-9d81-2b86c43cc9c6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffeaf576-d346-4bc4-bc7b-4cbef9090106", "sighting_of_ref": "indicator--272e52f5-571d-4769-b561-5f784678b6dd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fffa9d71-846e-4942-a5de-664ca61385e8", "sighting_of_ref": "indicator--e134bbd0-2887-4eb2-b875-836a9ed7907e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9c9a0a-4871-4b4c-9849-a70169488841", "sighting_of_ref": "indicator--22fb3434-79da-4bfc-b7ed-f931e67ce344", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03399bc-9a1e-41d6-aeae-819c1b423053", "sighting_of_ref": "indicator--34c81c60-a467-43cb-b56f-0d4f18d0adb7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0533c301-f051-49cb-b2f6-bcc137b9206a", "sighting_of_ref": "indicator--895571c5-e6f3-43eb-9a91-83d48bd114f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed78da3c-d557-4e5c-9c48-9151650f4c5a", "sighting_of_ref": "indicator--f054ae0b-7aef-4435-8e08-3fc342875cf4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800b1bf4-d04d-4e5e-94df-988fd1139727", "sighting_of_ref": "indicator--a923c90f-eb60-4960-84e4-efcd06a89633", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739cfc20-0afd-4f79-9059-be88a7e864a9", "sighting_of_ref": "indicator--37405b83-a732-47b6-817d-f19ee373b097", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db18737d-42a9-4cfb-b0e4-f4d2fd41f525", "sighting_of_ref": "indicator--33e447c7-f312-4735-851a-6e545b8533fc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1812ae6-499c-4487-8131-08d042df7c89", "sighting_of_ref": "indicator--d0c2a628-397c-4a4a-9ba3-fab77b9a8133", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598a452f-d086-4d9d-8746-14a0520e221d", "sighting_of_ref": "indicator--28709c66-6e9b-4bbc-83a7-1db182d5830b", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488c728d-2809-4009-b72a-b96805eccfdb", "sighting_of_ref": "indicator--f785b56f-be92-4d55-88df-be2c32a45d2b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64aca519-6a2e-4e37-94c8-d7a3bf511362", "sighting_of_ref": "indicator--123c5872-6416-425c-bfac-77a0af634350", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d46f2a9-248e-4ae4-bc83-118d2cbc70de", "sighting_of_ref": "indicator--f1631a41-3fa3-4f82-af5f-c4feca93fa11", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de532d92-c98f-42bc-87aa-4cfb33f04b11", "sighting_of_ref": "indicator--a7849de8-c2f2-45bd-8bf2-4f46d1a13089", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1a958b-aff5-4826-b702-e816f163dede", "sighting_of_ref": "indicator--6971aa74-cfa1-467b-bd66-09a42cc0c5d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c628f088-299c-4ce4-891d-b6e1bb1bda37", "sighting_of_ref": "indicator--c09e67fe-ee3f-4def-a48e-5424ac715462", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c546bdd4-3052-4f21-8859-b69a5c7acc05", "sighting_of_ref": "indicator--261776d4-e35a-42df-aa9f-bc387760456d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b6d46b-cafd-4400-b447-1663b44068d6", "sighting_of_ref": "indicator--6bfa8445-31ad-4108-af44-e45c9b32a61a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edac40f2-4c4e-445d-b5d0-46638d7ce6e0", "sighting_of_ref": "indicator--ce0277c0-e702-441b-8d80-c306313d7874", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5b12ec-700c-42d3-bd80-02eb66852bc7", "sighting_of_ref": "indicator--8744b203-c737-4fe0-aa9b-acb30dc0d0e7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d5a0ea-b774-46a7-8cec-fd3229e10217", "sighting_of_ref": "indicator--a0bf8be2-963f-4dfd-ad3f-d98601866f91", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77e567e-ef11-4200-94fa-74951642fba6", "sighting_of_ref": "indicator--f1b5c09f-c188-427d-ac13-682410d77067", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566c515a-ddf5-4524-b52d-f7c35f25add3", "sighting_of_ref": "indicator--cc0f5422-1f5b-4b55-86c1-74418f3f23e4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce54e95-7cf3-4ed8-b998-dc08acbbb43a", "sighting_of_ref": "indicator--cc0f5422-1f5b-4b55-86c1-74418f3f23e4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf8655b-09d5-4dc9-839f-e2d34f8d1b61", "sighting_of_ref": "indicator--5bc8cde8-5ad5-483b-aba1-6e72f0662121", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--441f83ac-1755-4434-83fb-ffb97ba04e86", "sighting_of_ref": "indicator--5617f8e1-00f5-430a-b2bc-74b4efe49283", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83887c12-109f-4358-a24e-db7a1f5e9b43", "sighting_of_ref": "indicator--89ac0437-b1cd-45b8-a0e0-953197819ab9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c539b42-0f5c-4192-be91-888bbea3c6b8", "sighting_of_ref": "indicator--1e6c734b-8314-4ae4-ba06-a20fc9fc989c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ec4157-6c60-43cb-b6f3-36570ac37c82", "sighting_of_ref": "indicator--8bbec2c8-5c42-4906-bf35-e05c8df6c342", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb859cb-c7f8-4e2f-9f04-b7819db371ca", "sighting_of_ref": "indicator--f55b1386-5c6b-4567-9459-2306a67e82a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c90aa01-9fdc-4326-be5d-ef389e0457b6", "sighting_of_ref": "indicator--f3b7e2d2-bf92-4675-9ff6-84427177ea5e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ebbf912-7c6b-49aa-8bc4-dccb7f6cd137", "sighting_of_ref": "indicator--b9b06299-9ac4-4cef-8f41-bd7fa9141b5a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60f9448-a605-4245-a2e1-f99712a4fe9f", "sighting_of_ref": "indicator--38b28ac7-0f2b-48a5-8812-ffb8963c5d15", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7be1b1-2465-4225-9405-8a086b2ac55e", "sighting_of_ref": "indicator--d1c1123c-22c6-4f0c-968a-eecf35611854", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e6573fa-740b-48c2-afab-1ad7fb24e180", "sighting_of_ref": "indicator--8173a101-7dfa-4d6c-b73c-baff7e6622ce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7753dae-2458-43c4-b4ab-d40846e09a87", "sighting_of_ref": "indicator--977f5fef-37eb-42c2-adb4-12fce8a240ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5af7ef4-7136-42b7-a8fd-deb83f1a89af", "sighting_of_ref": "indicator--5008a6c5-00b8-45fc-b226-f56079e878a6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820af81a-c9bf-4c3b-91d7-442cbd602047", "sighting_of_ref": "indicator--44742801-7754-4232-ae8e-ddf68e948c23", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd24ad8-dc61-4f32-b2e3-2e376c179963", "sighting_of_ref": "indicator--eb2230cd-df08-4547-ac0c-9d93004b7a44", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179288db-1aff-477e-ad55-85a66bebe0ae", "sighting_of_ref": "indicator--a791de8f-5897-474c-9bca-901c755c3710", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df619ddd-e61b-4754-8a2b-5897a7013149", "sighting_of_ref": "indicator--90da93dd-1074-4c97-beee-7dba8c00818a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf8253f-f57f-453e-a2ae-cabbae7fbd21", "sighting_of_ref": "indicator--8a801461-a277-4f9b-96e1-f595818c7ed5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1f214b-b4ee-41e1-894d-ead088f10e02", "sighting_of_ref": "indicator--89a0d92c-ef69-4df1-b60c-b397b3097d74", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c01d67-472e-4c58-8866-dae30f7b6a7a", "sighting_of_ref": "indicator--37c3f05c-235a-4821-a186-2d891229bb85", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfebc53f-abf5-442e-bf99-ffe8fc481ab0", "sighting_of_ref": "indicator--a9678928-2999-4743-bdcd-ff70efbe5f9b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b08d0e6-ea5f-414c-b58e-5a580edfc679", "sighting_of_ref": "indicator--e7d63cc1-a878-4d05-b4ed-ef29997cef50", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56329985-7f19-4bc0-b7c9-6d220b78087b", "sighting_of_ref": "indicator--4e1f40de-080f-42f0-b667-bb0dd5a20f4f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--651bd09c-510e-418b-97c4-3f791fff037c", "sighting_of_ref": "indicator--bec12817-87cc-449e-add1-b97be1a18872", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5add9499-7405-41b6-9152-f1e1ec6d7dc7", "sighting_of_ref": "indicator--a492681b-fa94-49bb-b921-0659c18848ef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79565af-83a4-468f-ba1a-57bb758e15ca", "sighting_of_ref": "indicator--ebec92db-93c0-407b-8bce-98364c21b400", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79342753-a8fe-4a3a-bf3c-7218dc543323", "sighting_of_ref": "indicator--055204d8-ddc5-415a-91f7-c7dd65257698", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e539e5-9e3e-43a8-853a-41c8e8499797", "sighting_of_ref": "indicator--681cdca5-813f-4fc3-ab17-cbcd07e337a0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed0fce2-944a-42b6-8301-39ca09e1cf0b", "sighting_of_ref": "indicator--681cdca5-813f-4fc3-ab17-cbcd07e337a0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49380d0a-be33-41b2-8a5b-834408d8bb6b", "sighting_of_ref": "indicator--408eb925-147c-4d14-b00e-b087c6b89e23", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf57ec9-ae7a-4fad-acff-8119677fcb7b", "sighting_of_ref": "indicator--6cab12a1-e713-4624-a493-15c679589ade", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef3d702-e7ee-47bf-ae56-4a4bed7cbd8b", "sighting_of_ref": "indicator--60ed360d-66dc-4bbc-aba4-e93d941a3096", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6013144f-6cae-45cb-8091-aab6a9a67f2a", "sighting_of_ref": "indicator--ac17cbc2-aa53-4596-9806-ce88cf3aefe2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc616091-008c-47ac-a190-f01db50c784a", "sighting_of_ref": "indicator--6d729d9d-34e4-433c-b8ff-844d8f4600fe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a0c4ea-9386-4514-98a9-66bf75884e67", "sighting_of_ref": "indicator--7aa889d4-d75d-428e-b0d2-11e46cee5640", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4a94ae-70a2-469d-a720-58261ecf40ef", "sighting_of_ref": "indicator--7aa889d4-d75d-428e-b0d2-11e46cee5640", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c788d6ca-54ae-43cd-900f-52927aeb8726", "sighting_of_ref": "indicator--71ab08da-b747-47bd-9470-f019fddd74a7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f551974-acbe-439b-8d93-e1a7bf873f51", "sighting_of_ref": "indicator--1bfc34da-fdb3-4bce-9844-a0d50c32206a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e2dff6e-06ab-4115-bd78-e20e2cce6ad2", "sighting_of_ref": "indicator--996cad45-fae1-4543-93cc-487b4f016ff7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4335d040-3d9e-4b8d-bf79-196a223a8735", "sighting_of_ref": "indicator--3619e524-ceed-48fa-8698-074813a8008f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c51cfc2-f301-4a01-a1dc-14fed4fbebbc", "sighting_of_ref": "indicator--ea26cbcd-894b-4d5a-92e1-7093890a04f0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b39375-1722-4243-ba6f-7ee08f714f32", "sighting_of_ref": "indicator--26486097-0db8-4c2d-b058-b39d241b1f95", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f05246-0194-4940-8d3a-560835885ffe", "sighting_of_ref": "indicator--15975779-e6b5-49b8-801c-2fed44970237", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a034b07-039f-4964-9e73-201966b46126", "sighting_of_ref": "indicator--60e084a2-7c15-4c1c-8bca-ddd0350bbdfa", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09938fad-13aa-44b6-a18b-f5c1adc432cc", "sighting_of_ref": "indicator--60e084a2-7c15-4c1c-8bca-ddd0350bbdfa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7216a30-477e-4800-a121-51fbc5f9553c", "sighting_of_ref": "indicator--c92592b1-a3c1-4d32-82f5-22ed73af9bcb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c781a70-30f9-4e2a-a388-5b28363dad1c", "sighting_of_ref": "indicator--8d602e4f-76fc-4048-a6ac-8363754643dc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc66e67-33ac-493b-8c3f-ecb43c95743e", "sighting_of_ref": "indicator--14e8da2b-bce8-429a-9f45-9447218e9e28", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823272fa-5164-4675-9cb8-c773ba075a2e", "sighting_of_ref": "indicator--14e8da2b-bce8-429a-9f45-9447218e9e28", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5fef9cd-c819-418d-bde1-c15e16e3caee", "sighting_of_ref": "indicator--2938c157-df80-419b-820f-025b6445d19a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d11107-3a18-4c59-9f81-57e641b5919a", "sighting_of_ref": "indicator--aaf0572d-21d2-4bbf-bc93-c0414a0c396f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ebc9cd7-9a9c-47b5-a8a2-5812de14c7a7", "sighting_of_ref": "indicator--bf5ee12a-0241-4321-9392-91fcbc173bc5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a291a514-c469-44e2-9a47-0175f0f3724b", "sighting_of_ref": "indicator--bf5ee12a-0241-4321-9392-91fcbc173bc5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837a7361-d2a3-4414-9250-8d2a33ea8607", "sighting_of_ref": "indicator--eaae871f-b61d-49f2-860e-00f9627fe518", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59532160-1cbb-4fff-8246-1e7103833604", "sighting_of_ref": "indicator--eaae871f-b61d-49f2-860e-00f9627fe518", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb56683d-4867-4628-b2f8-55979d2230cb", "sighting_of_ref": "indicator--057dc7b3-20b0-46b7-8169-ed6a8e0f7f17", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20fb015b-2b2e-4245-95c7-5fd1c867a321", "sighting_of_ref": "indicator--057dc7b3-20b0-46b7-8169-ed6a8e0f7f17", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b749645a-63fb-450f-9b86-b168de912d05", "sighting_of_ref": "indicator--6e6a0a46-ecce-4bd3-8d01-33153c02bfef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9e0f8b-1553-41a9-b1b7-225bb59fa310", "sighting_of_ref": "indicator--e951a97a-e797-4054-a00b-f251ba0c8c60", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe3256f-deba-4c8f-b5d7-728c4f043571", "sighting_of_ref": "indicator--e951a97a-e797-4054-a00b-f251ba0c8c60", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41f5f7d-0289-466c-80de-91de9e02beff", "sighting_of_ref": "indicator--6157e2a6-e415-40e0-9a4f-f120f8b6be8d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8835b915-9363-463f-a4d3-033fcbabb598", "sighting_of_ref": "indicator--08f09974-89c3-442b-897c-4043a44980f5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e55dc0-c485-4230-b06e-7d388f7b6997", "sighting_of_ref": "indicator--08f09974-89c3-442b-897c-4043a44980f5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7fd434-3f26-4bfa-a9b8-138bdb041e38", "sighting_of_ref": "indicator--200fc2c8-9f76-4e77-b15b-a0f6fcbbe896", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dae9621-0afd-4825-b74b-5beaa59f8fdf", "sighting_of_ref": "indicator--ee50b701-fe26-4f89-8e92-bec609c4e97c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e96578-3887-4de5-aa4f-4729f1ed3bbc", "sighting_of_ref": "indicator--4cc7b699-f15c-4f91-a7cb-52823d891711", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d568fd2-8158-4775-97d0-a6d0f10d99ad", "sighting_of_ref": "indicator--4da6ef5a-9980-4e94-afa8-4e4359140e20", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3865859-2856-4cd0-aa39-763195a85fdd", "sighting_of_ref": "indicator--ceb47530-fa9e-49d8-b654-232abe4bc2fc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196eabbe-f115-4f56-b446-8ca1904c10db", "sighting_of_ref": "indicator--febac9d6-c3c0-4ba5-974f-3e370fc69c55", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc679a5-29fc-4836-aaaf-90aa654baac8", "sighting_of_ref": "indicator--febac9d6-c3c0-4ba5-974f-3e370fc69c55", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f249a08-dbdc-4b12-bdc8-c9f5044a55fd", "sighting_of_ref": "indicator--c297ea1b-425b-408c-a3a1-65a8971910d8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1cb9e68-9b66-426d-80d3-7ca2736059d5", "sighting_of_ref": "indicator--c297ea1b-425b-408c-a3a1-65a8971910d8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe1e273-18fb-46ee-9af9-ddcf5f407713", "sighting_of_ref": "indicator--9ef0a844-092b-478c-8ab8-755de5577d37", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15c1f8c-d510-4980-912e-9386192b8c6e", "sighting_of_ref": "indicator--9ef0a844-092b-478c-8ab8-755de5577d37", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d920ae9-c189-4b49-a090-c60e845b064f", "sighting_of_ref": "indicator--d8432b6c-5448-47c9-9126-3678ddf95fd8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8df96e-4fda-4258-a3e6-ab3979c662d1", "sighting_of_ref": "indicator--d8432b6c-5448-47c9-9126-3678ddf95fd8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0801c74-d86f-4c60-9f2b-7117a5768518", "sighting_of_ref": "indicator--3d7f5cb0-adc4-4429-872d-34595bcce50e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f14ce03-00a0-41c4-b325-0d1a311d3616", "sighting_of_ref": "indicator--1aba759c-bb8d-4331-9175-d443f9ced89f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c62a90-71ca-4d13-a6d2-c2235d04f49e", "sighting_of_ref": "indicator--1aba759c-bb8d-4331-9175-d443f9ced89f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6331218-91f9-4dfa-bba5-aa04478c9ac1", "sighting_of_ref": "indicator--3f7c344e-d974-4ca4-8bc4-0c336ae04696", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1f58b3-3e57-4812-b30f-5d23a8683cbf", "sighting_of_ref": "indicator--394a73e0-8eba-4a09-bf73-7af7acf3fe99", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3456e0f-17f1-41b1-8ca1-6477e06695a6", "sighting_of_ref": "indicator--de0ce1ca-f19d-4751-a934-3c6c2bf82a30", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e7b589-4c34-4fb9-9ee4-e1e6d9021e6e", "sighting_of_ref": "indicator--c072741a-272d-4554-9b44-b59120f0fdd4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32725a25-1d5a-4268-8a6a-4d709ef564a2", "sighting_of_ref": "indicator--69eb1c8e-ecbb-45ac-9130-cdcad46d4105", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9973a712-b954-4b99-820b-53275f2fd448", "sighting_of_ref": "indicator--7be0341f-5d90-4f94-9e23-64c4b7fa472e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd0ccd4a-b115-4ff8-b8f4-a9c0a4f60374", "sighting_of_ref": "indicator--e65098da-da9f-4f71-9c39-09eab8db6ba9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47aacaa1-f789-4ea1-8a20-e95750caa579", "sighting_of_ref": "indicator--30e91501-d903-446c-8896-40c3777aa2b2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b2bddd1-6cbd-4312-9f1b-127ed2661311", "sighting_of_ref": "indicator--22be140a-400b-4235-9452-d499b00c6363", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b732d5d-0bbb-498d-8ab2-0b86ee5f3554", "sighting_of_ref": "indicator--db5a8081-7ef3-4285-a966-52c81102453e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2ee990-60f0-473c-9a24-5375ee747e3d", "sighting_of_ref": "indicator--db5a8081-7ef3-4285-a966-52c81102453e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064e251e-a447-48ec-8b6a-0bdc02303e8b", "sighting_of_ref": "indicator--78df5fb3-7120-42e3-b806-b6e98f7f5205", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4250a55-d2a4-400c-8b9e-f3b8df9a0aff", "sighting_of_ref": "indicator--78df5fb3-7120-42e3-b806-b6e98f7f5205", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf0f881-eae6-4331-80bc-dd88dc09f8ac", "sighting_of_ref": "indicator--6723286f-b783-4a8f-8ba8-a52b25b1b64b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90a045c-53ba-4c9b-9d26-a42c7d6d40d5", "sighting_of_ref": "indicator--6723286f-b783-4a8f-8ba8-a52b25b1b64b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1c1cde-e335-4490-b97d-18af500514e4", "sighting_of_ref": "indicator--17c49656-d36e-4f85-a557-b1f3cffd743a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102c57ea-411b-4442-9809-2b7d1ec69969", "sighting_of_ref": "indicator--fc25a741-7e24-44e4-88e2-132b98936d21", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb53eb19-ea8c-469c-b93b-f63f015464ba", "sighting_of_ref": "indicator--fc25a741-7e24-44e4-88e2-132b98936d21", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c32603cc-7c33-463a-af9d-115496a4542d", "sighting_of_ref": "indicator--8d681a61-0d7e-4805-939f-fea3e03d7ff6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e71919-e4e2-4384-95d2-1eaba109f20d", "sighting_of_ref": "indicator--fc7c82aa-1548-4860-8b46-543ce0298e52", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6414077a-57a1-47ed-8c30-efd761ab5adf", "sighting_of_ref": "indicator--d537978d-1a65-430d-a34c-5ee57704b327", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279c893b-a2ce-496d-8e4a-2c5b42bab5e7", "sighting_of_ref": "indicator--e5af9f09-b156-4451-af95-f38c42b113c3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a47480eb-f55a-435a-b2ba-ba5caea2a429", "sighting_of_ref": "indicator--cbafe52b-9def-4e27-8d17-0c4f349a4d02", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d581e307-f1eb-4010-a01d-0e27b7a183ea", "sighting_of_ref": "indicator--fde95f5a-ab65-48c4-a4bb-360f55a58404", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ac6378-5437-4db9-929a-7e2ea0b0088d", "sighting_of_ref": "indicator--782e6a30-80ec-40d4-8f97-2007653b80df", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--befaef85-b133-45d7-b314-6c971a6805ab", "sighting_of_ref": "indicator--be19bc8b-4b37-4d36-857d-c8782806fbda", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e5c32a-668b-4d37-a932-723c70c3a02f", "sighting_of_ref": "indicator--a8c07a5d-1798-4f21-844b-fcae59b9efe4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399bcf28-7d98-4267-9ae1-9ea03b7f0b71", "sighting_of_ref": "indicator--06055c0a-d1b1-44bd-9b2b-56a5c4c7492d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a58fe2-6e71-45f9-bc52-91136b6d247d", "sighting_of_ref": "indicator--ab4613b2-8e88-418a-bb2b-bd764e5cc808", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f40150-8223-494c-a4ae-499b16ea58a6", "sighting_of_ref": "indicator--9690a18e-c4db-4c19-8f84-99dd876e8f9b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb77afe2-e0ef-4363-8264-efae0a4a5942", "sighting_of_ref": "indicator--8def93b2-a02a-4a3c-b5d1-2a3ce453be40", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6efacdc7-cb2f-4aba-b99b-d2b55a3f2bbd", "sighting_of_ref": "indicator--897180bc-40ae-4ae6-adad-cb13e6d5255d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ed90ff-4714-4fe5-a59e-e95f3df68c03", "sighting_of_ref": "indicator--9457dd9e-3cf3-4fbe-9bcd-1e345ccdd68b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b121404d-b1d9-4631-902a-6c1a06825af1", "sighting_of_ref": "indicator--9a4b1464-bfde-460d-b136-1e2e55116e05", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d93b12-a5bd-4cc9-90ab-d562c3cef5bb", "sighting_of_ref": "indicator--5bb8185c-dac2-498f-b76d-cba8750a4f22", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52dac52e-64a1-4a81-abd5-67a0792856d0", "sighting_of_ref": "indicator--9494edbd-9fed-406f-8974-51b5d99241c3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b317bff-8b3c-460c-a97d-bdf6aa9b1ced", "sighting_of_ref": "indicator--499c639b-0cc9-4070-a17f-b47468103bbb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a588657c-5f3f-4978-b058-f05b231b0d67", "sighting_of_ref": "indicator--9b55a2b2-f4f6-47c4-935f-2adb80639033", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59fbc7b1-3fbf-41c2-b382-696cb5d5804f", "sighting_of_ref": "indicator--e533bb18-1523-47e5-a913-b81ff78fe8c7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6cd3a15-eb9d-4dd4-893a-db7757b708d0", "sighting_of_ref": "indicator--e533bb18-1523-47e5-a913-b81ff78fe8c7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f6dbc5-76a5-4e56-b9a9-7f6d2c4ade8c", "sighting_of_ref": "indicator--ed2b5619-7bc7-4576-be6e-154f50abe5ce", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a927c3-4c9e-4298-9f86-8d206c5e69a2", "sighting_of_ref": "indicator--ed2b5619-7bc7-4576-be6e-154f50abe5ce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a369c9a-c251-4420-b11a-fbf3b214ac4c", "sighting_of_ref": "indicator--11be33bd-831f-466c-9f08-ba505adb7f43", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f63b666e-9a75-4d31-9c0f-14d79d311792", "sighting_of_ref": "indicator--b6707834-3ed2-47c1-b865-96ca5dde592e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b150849-c208-4b3e-bd3c-75412a5596df", "sighting_of_ref": "indicator--b6707834-3ed2-47c1-b865-96ca5dde592e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e64914ba-3545-4329-af43-8693ecca777f", "sighting_of_ref": "indicator--de59578c-0db5-44ac-b86c-a64deb86a196", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3575c958-31f1-47e6-a45a-b770bd5ef847", "sighting_of_ref": "indicator--de59578c-0db5-44ac-b86c-a64deb86a196", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0cf8bc8-3f8f-4f89-b74f-6e00c0b67f93", "sighting_of_ref": "indicator--693c823a-fbf1-4cb1-a5b2-1d54d89cd03d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6427183-f9e9-4d89-a47a-c29d3c945dab", "sighting_of_ref": "indicator--60724481-0c22-4d36-a701-c6c3e369b7d9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b59798-1dd2-4dba-8ba4-6941a0645b11", "sighting_of_ref": "indicator--60724481-0c22-4d36-a701-c6c3e369b7d9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2989a6-a7b9-4a7d-810e-e6231949f814", "sighting_of_ref": "indicator--b9ce8830-8f1d-44c8-9468-f3727fb91ed6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834f6624-bf7e-445b-a6c6-90fdacae3f2b", "sighting_of_ref": "indicator--b9ce8830-8f1d-44c8-9468-f3727fb91ed6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f201096-835e-4ea8-973e-92531c2a79be", "sighting_of_ref": "indicator--16dcfcef-6285-42b5-b112-e7bb794f596f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cfad817-38fd-4cbe-bae3-dfd1a4927e62", "sighting_of_ref": "indicator--a5a088f1-9555-474d-8f50-ceac07f0bc3f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad55652-7477-4113-a551-29554e7ffaa8", "sighting_of_ref": "indicator--430f7bd6-b15b-465a-8c95-9b63fcf6584c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f2a81a-87d0-4f4a-9676-2874fb3d30c0", "sighting_of_ref": "indicator--430f7bd6-b15b-465a-8c95-9b63fcf6584c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f84fa43-b2f4-4c7c-a38f-68768f0294b1", "sighting_of_ref": "indicator--448f72c3-bd67-40b3-b85f-5863e15516c5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45090bf0-09b8-433d-89c0-e3f2d61d0ba7", "sighting_of_ref": "indicator--73adbe35-e57d-4332-ac2b-814a3bbdbb6d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0e6c8a-4ca3-4340-a958-eee949a8fcf3", "sighting_of_ref": "indicator--19f21237-4eee-4125-be90-b2c9d6931f51", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387b5880-d348-4d6b-8acf-36b593f52149", "sighting_of_ref": "indicator--5c96d0ab-c189-400f-ae36-f7903abc411a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e40459-aa88-47c1-aa50-fc1259df55d3", "sighting_of_ref": "indicator--a44d7361-092c-4b64-9f08-112825661e2c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56c5e1a-8d51-4d40-8e46-6efa50a80fd2", "sighting_of_ref": "indicator--a44d7361-092c-4b64-9f08-112825661e2c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9dde06d-ea2a-461e-84b2-fcddb3959e65", "sighting_of_ref": "indicator--0cab212a-0a05-47ab-9a8e-89d0cbec61fb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1493a0d-03f7-4c98-abf2-23908a78e40c", "sighting_of_ref": "indicator--7f5bedba-3f57-4a4f-bb17-245aa7b15a08", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be260f27-974d-499d-b5ad-098d881cbf04", "sighting_of_ref": "indicator--87810a41-fa48-4a88-8d83-eb251138a125", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ded2b6-cd40-450c-8abb-031fe64393b9", "sighting_of_ref": "indicator--8ffd9dee-819b-44f5-840b-4a7e81f004d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d25e5a-7b5b-4bf6-b790-43004fe24cfc", "sighting_of_ref": "indicator--e04a8107-953c-4055-b7ab-c6a2e900cbd6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf44f96-4866-42da-9a78-aa1d9c0a2545", "sighting_of_ref": "indicator--c44efc96-bebf-4b3e-bf9f-322d9c044580", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473eb49f-0ded-4843-87fb-495bdd30d134", "sighting_of_ref": "indicator--8646d3a1-6dea-42d3-a516-502036019570", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5521b0-1546-4740-b7f4-68d0e40b8317", "sighting_of_ref": "indicator--b48b86e3-401a-4ce2-8813-9663d4b8bf6b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00d714c-e29f-46ca-9a0a-c6f3fcd845f4", "sighting_of_ref": "indicator--a012d228-3271-4fe3-8e33-c07f608c7a63", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35efc9e3-b82a-44c7-b1c9-86c4b369b5ee", "sighting_of_ref": "indicator--ca363609-2b9a-439b-b273-7ed81ddf6456", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af072002-0dc8-4a78-ae71-57e6daf6dd8a", "sighting_of_ref": "indicator--f3005831-fb02-401a-a6e5-aaaf7e915f2d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22abba5-7ee8-434d-aed5-42ab5d0634c6", "sighting_of_ref": "indicator--f3005831-fb02-401a-a6e5-aaaf7e915f2d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eedc8de1-68b2-49d6-979d-f6b338065e7c", "sighting_of_ref": "indicator--6c966082-5dba-44ba-acbf-81c6690aafd3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6035c585-a7ca-47f7-a235-706ac601e97b", "sighting_of_ref": "indicator--28854e74-ea8b-42e9-b95b-f9eb0d955b86", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd37b2d4-6c8c-4042-b665-dc566ff93e63", "sighting_of_ref": "indicator--f19b957e-3146-4c45-85e9-4aef35b512bc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ad1297-7f65-405d-b85a-08e25ec5c407", "sighting_of_ref": "indicator--88921856-c8e8-4005-b2bf-8bf15a921fc2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9372bf82-fcb1-444e-b6cc-866625a5b632", "sighting_of_ref": "indicator--671cc436-f61b-48b3-ae43-e241ce74f94b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6313d20-cf61-48a3-9c03-ac9d34bb5f21", "sighting_of_ref": "indicator--cbab7260-5909-476a-9e76-95bd78c87d7c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5677f783-ed36-47c3-b1b6-8d8c63cb3099", "sighting_of_ref": "indicator--4fcc0228-5844-422a-bae6-bc1fa8ec7461", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab09d9f-c08f-4656-a0db-8fb5b6501ccd", "sighting_of_ref": "indicator--d3c7792a-cf4b-4339-8c33-29160e9ef8c5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53968b8-cba6-483b-a975-3f3419e50636", "sighting_of_ref": "indicator--591ffdc3-c1e4-41d3-a07e-0bf470acd1c1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3ff5cd-d740-4c23-bd53-b7c720a74e10", "sighting_of_ref": "indicator--591ffdc3-c1e4-41d3-a07e-0bf470acd1c1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9807f0a4-deec-4c9a-9476-134e9c13c298", "sighting_of_ref": "indicator--2c4f679a-4eb7-486f-a57c-473287f48cbb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c5f5b9-0dd3-4b98-84ad-be758018232b", "sighting_of_ref": "indicator--cb326708-92a2-4414-acec-ce734b712393", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d443dca-cd47-46d4-81e4-e93900d87487", "sighting_of_ref": "indicator--7f57cbb4-6f2d-470e-8a04-4f2ebcd9568a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1130294c-1547-468f-b710-4561cf1cf30d", "sighting_of_ref": "indicator--7f57cbb4-6f2d-470e-8a04-4f2ebcd9568a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040d0648-2df8-4fd2-8249-92e40147213a", "sighting_of_ref": "indicator--e5b3be7c-9e89-4d66-91b1-334fcf83c5ff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7575c21f-5ee7-4eef-ab48-d13b19a5b7db", "sighting_of_ref": "indicator--84300933-3698-43bf-912a-0bdb9a95fb63", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14dc71f-f917-475a-96f6-ac461582ae4a", "sighting_of_ref": "indicator--6fafb87f-9437-470f-beaf-97c810167770", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1164818f-dc34-4164-88f8-5eba1c67a2e8", "sighting_of_ref": "indicator--6fafb87f-9437-470f-beaf-97c810167770", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb77421f-ca34-4af6-a12c-cf6eef935408", "sighting_of_ref": "indicator--a2945e39-393a-4336-a5be-5bc4b4dca644", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7dce57-2f8d-4c55-bca1-2b6121a66edf", "sighting_of_ref": "indicator--d00e9c19-636e-40e4-a2bb-15e79daba602", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b625c0-8aad-4d15-838d-0df40532a708", "sighting_of_ref": "indicator--d00e9c19-636e-40e4-a2bb-15e79daba602", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9257af9-c01c-4e8a-9d88-841558d66414", "sighting_of_ref": "indicator--53ae7c24-59fc-492f-a1e2-ccbb74b5549a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b401dc37-71ca-4b02-b290-1cbb3a3cc853", "sighting_of_ref": "indicator--38ce76e9-c97f-4278-987e-b2e8c2617f57", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a8acf0-cb1e-4bcf-baa0-54a98f815925", "sighting_of_ref": "indicator--24b42ab3-cbc0-4fec-af82-b726aa693583", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f4772c-2ca6-473b-9fd6-972af56c0ccb", "sighting_of_ref": "indicator--2efde58d-f42f-45ce-a645-38cbd3fbc312", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8d4224b-e9d3-4238-b2bb-a2202838148b", "sighting_of_ref": "indicator--5c08b407-a2f8-477e-a4c9-dd22274a5f68", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ea9d13-e703-41f9-b929-cfe55bebf7a0", "sighting_of_ref": "indicator--1eb1744b-002a-4e59-8129-0d13f14d407d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76828cc-be95-4007-8fb1-33b70fb2a7fb", "sighting_of_ref": "indicator--1eb1744b-002a-4e59-8129-0d13f14d407d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7757b8-1cf7-4964-9ff1-a2bbd5693bf2", "sighting_of_ref": "indicator--be73d5b7-84f5-4deb-b239-70b0035d7b72", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f72877-c9e4-4575-850a-8b74f5d5c48b", "sighting_of_ref": "indicator--be73d5b7-84f5-4deb-b239-70b0035d7b72", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60de8350-4d32-4045-bc5c-c3ea1e32f53d", "sighting_of_ref": "indicator--388025b9-6de3-49b3-a221-409a05839a58", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1780e623-d49c-412e-bd4a-4f8f5c578d96", "sighting_of_ref": "indicator--9513ddac-ad70-4c86-8b87-dacc5fea2f1a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b8db2d-9004-43a1-b7dd-1be112c61401", "sighting_of_ref": "indicator--3b76e4a2-4c2a-49d3-9951-9eabff4dae71", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6850bd-6bf4-4e38-9939-c3e9567666ba", "sighting_of_ref": "indicator--41f2a386-3ca0-48bb-b27d-5dfa3bba5e28", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b0eaf0-cb18-45e7-81ee-eba5b6a304cb", "sighting_of_ref": "indicator--2aaf1537-5dc1-45b8-8ea0-a3a13782ed5a", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e971d27a-6b50-4c84-97e1-eaa5ba586304", "sighting_of_ref": "indicator--7ad7db10-ac27-442b-918b-1983b7aa8d08", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fbe2dd4-ba4e-4989-87cc-4fc87e8a9150", "sighting_of_ref": "indicator--05997a6d-5250-4dfe-9ccc-36b6b2eb738c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1cac1b-a134-48b8-b078-5f22424395ff", "sighting_of_ref": "indicator--05997a6d-5250-4dfe-9ccc-36b6b2eb738c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36be25c-bd74-48ab-bf0e-1e01d20a3975", "sighting_of_ref": "indicator--0116cb9d-6b01-4539-b635-70f956bf555d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c461b803-1d5d-4ed3-aa45-c007417e6422", "sighting_of_ref": "indicator--c868b2c2-3b94-4b38-9438-e248fd0b6b65", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e9199d7-6d31-4af4-9b7d-10fd78e92b1b", "sighting_of_ref": "indicator--c868b2c2-3b94-4b38-9438-e248fd0b6b65", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f843bf-e7c4-454a-8204-3ea378f31145", "sighting_of_ref": "indicator--dc147fef-b5e4-4ae4-be8a-39b4940bbf9b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1500eb19-d00c-4d27-a084-e16b53af81eb", "sighting_of_ref": "indicator--5eb904bc-27ac-4c8f-a3d4-e81243b892f8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf99d9b-16a2-47b4-ac38-ad2c231e398b", "sighting_of_ref": "indicator--5eb904bc-27ac-4c8f-a3d4-e81243b892f8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0c1dc6-4e1b-4b25-8249-440c7b27c23b", "sighting_of_ref": "indicator--a336cccd-cc66-4e1d-a991-058011fbe685", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cbd0f87-5d9c-4032-bbee-a956add61e9d", "sighting_of_ref": "indicator--f3e2661f-ddcc-4072-893f-37c42e51c252", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af22e09e-766b-4eec-9836-b64f142892a7", "sighting_of_ref": "indicator--e0d98297-cf29-4c8e-89c5-714ce7226cde", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d47208-4446-4e15-bdc0-1b7de8f06636", "sighting_of_ref": "indicator--e0d98297-cf29-4c8e-89c5-714ce7226cde", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776ef224-f136-438c-a589-2c812127a3f0", "sighting_of_ref": "indicator--a0ba8d73-8600-4a98-8a72-729244f1c5b8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe252b10-b4fd-417f-a58c-c83b1e409518", "sighting_of_ref": "indicator--6bd81de0-9290-4f78-b13c-696d3178b546", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282df9c3-cdfe-4155-9e90-1a9090e8682a", "sighting_of_ref": "indicator--6bd81de0-9290-4f78-b13c-696d3178b546", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4bdd825-7579-4444-97ca-b63c3329380e", "sighting_of_ref": "indicator--31457f3c-7b3b-456b-b6f8-99ebd0e2980f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5e0acb-ba56-49b8-b628-c9d53453579c", "sighting_of_ref": "indicator--00b13cb0-4319-4ad1-85d2-99b33f7ab65c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9055d755-9c34-4bb1-8b1b-1a2504cc4a48", "sighting_of_ref": "indicator--00b13cb0-4319-4ad1-85d2-99b33f7ab65c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a266e4fd-3a9b-4619-935c-48285f8194d5", "sighting_of_ref": "indicator--6dfc0c7c-b5f7-4ea4-bb73-9ffe04ea235b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ad792a-b380-4b0b-8fbb-25484671620c", "sighting_of_ref": "indicator--db1c994c-4d4e-4cfd-a357-67c6f2f28ac6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40735a5f-5cd4-4ca9-9c41-74af9ca45713", "sighting_of_ref": "indicator--eb65b4af-28be-4756-921a-0e63bdf72291", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ed548a-9300-43ca-a207-aeecbcbf152d", "sighting_of_ref": "indicator--d965615e-6195-4565-8a84-74745421695f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77adeeb1-8a6a-42c8-a25e-b976196664cb", "sighting_of_ref": "indicator--d965615e-6195-4565-8a84-74745421695f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1ea3b3-15f1-462b-a110-620c5d83fa90", "sighting_of_ref": "indicator--05c726e8-bc90-485d-ae4c-c424fac8ef35", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a5433c-be88-4d29-9275-a19ffdf54673", "sighting_of_ref": "indicator--c46dfe98-fcaf-470a-9cae-be14633a4cb9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b44a25-f88c-4c54-9c6a-4d2a5a8cec41", "sighting_of_ref": "indicator--b5687502-aea1-4f3d-9586-3746af5e252f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a83c04-217d-429f-a1ec-8c4bd7294458", "sighting_of_ref": "indicator--b5687502-aea1-4f3d-9586-3746af5e252f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e977c17d-36ff-40b5-b208-8a8bc19e17f9", "sighting_of_ref": "indicator--7478baa3-6b15-45d5-b02a-66444afeacf2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afdec6e1-5fee-4a15-84bd-844b132194d5", "sighting_of_ref": "indicator--ec41d59d-c5f9-47c4-8cd8-94ca83ce1f31", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80532a31-d069-433f-950c-e5fb9ffd86fb", "sighting_of_ref": "indicator--ec41d59d-c5f9-47c4-8cd8-94ca83ce1f31", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0607a6-0570-4b2a-9482-b3d9ecd74c7a", "sighting_of_ref": "indicator--5328296f-2d70-4b7b-bbfa-d486ffa4e1b6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed4b40d-93fd-401c-a941-73463c633e95", "sighting_of_ref": "indicator--8a750a6b-e9b9-4cc0-b3f4-0ab35493447a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c02bdc7-d85a-4640-85ea-915ed24d15c9", "sighting_of_ref": "indicator--6844cb96-41d6-4e12-825b-e0241c011e67", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9b5581-4b35-4b7c-a23a-ef3a697184aa", "sighting_of_ref": "indicator--717552f0-8e56-4fa1-94d0-947ab1b29cc9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb5d990e-920d-4d53-8bc5-fa42fab9fb3e", "sighting_of_ref": "indicator--f0e7a496-b16b-42e9-b66a-0c7f0ce95af7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5f2994-f9ab-4029-81f2-47f8f49956a9", "sighting_of_ref": "indicator--6d2311a2-517a-4967-a466-ca14d80a192e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de78e33-e6f0-40d9-8991-99e5349b7df1", "sighting_of_ref": "indicator--0cb6b0c4-633b-4086-af75-1ff676a03b57", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a624e87-d6ad-4379-92ba-9bd0ad65e043", "sighting_of_ref": "indicator--9b022f2e-356a-4cbd-b408-33dfbb26bf09", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0af05b-3b9c-49e1-91d6-813d8a931536", "sighting_of_ref": "indicator--77cffca9-357d-435f-b1ff-0c5ab0778740", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd1fe0c-e311-4aa6-8176-da265935b8fe", "sighting_of_ref": "indicator--03a3af53-0221-4897-b84f-cb34ee30cf13", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f7c16b-3bc6-454f-85a6-04af97873c79", "sighting_of_ref": "indicator--13548799-61a1-4cd8-945d-c51850292a27", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec7de8e-449b-462e-a661-89a8f22d87b4", "sighting_of_ref": "indicator--2ce7c5a2-237a-4ddb-a8b7-0008a334b97d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9cca4b-b612-45db-9443-6dbdc735564c", "sighting_of_ref": "indicator--332b1e58-dd52-46ac-914b-c84898e0b144", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c354211-46ef-49a5-bb0e-18137ffaefe1", "sighting_of_ref": "indicator--2f5a97f7-6b97-4121-bcba-bf32cc975e3b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--712036e6-3ffe-426c-be05-fbb7d82d5cf9", "sighting_of_ref": "indicator--77501db8-4e65-4656-bf73-a2c1b12e5386", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01a8d5b-b670-4b05-ad5b-4f600a299e3f", "sighting_of_ref": "indicator--7f58863c-9a91-4e8f-864b-fea65bfa0bed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee16b2b-8f59-4b07-9bf2-8f6101f42107", "sighting_of_ref": "indicator--26672aab-642d-4beb-b55a-3824dc3682fb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c3d040-3243-43dc-bc6d-5a5f5f756ba4", "sighting_of_ref": "indicator--c5afdae3-7d16-4805-9c51-8f22dccd23af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834d7949-c8d4-4fbd-ae5a-8a2cc8083891", "sighting_of_ref": "indicator--79d75ffd-c891-4edc-aada-3d7fb71b9a6f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94991b3b-0034-4d47-9fba-7abd4be14dd7", "sighting_of_ref": "indicator--92d60c55-2887-4871-a5f5-7f08fd575df4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe95531-993f-44c3-bdb0-768cb4cb86e8", "sighting_of_ref": "indicator--a7272054-1f09-4791-a984-2c5efee09013", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710f7647-ed6a-4d42-8b90-346148d8d397", "sighting_of_ref": "indicator--98ea9e1b-44e6-42a6-b43b-f39cc4d82988", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e79f53fd-dd0a-4f3a-9569-f5de64106220", "sighting_of_ref": "indicator--92a06d06-56db-4c3a-ae17-cdd4e7e41595", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc61f41e-0486-461b-af23-7edfb519548b", "sighting_of_ref": "indicator--b12c4754-1c2a-449c-a33b-b5ad86a2624f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6761637-7205-4a65-bcaa-c590b75e0025", "sighting_of_ref": "indicator--b878826d-e547-4533-ba18-ec2a38bed283", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23da119d-72ef-41e5-b123-f8e74640d990", "sighting_of_ref": "indicator--9e12ff65-e0fb-485c-ae89-cea994d21e4a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--702de5a0-eeea-4447-ab86-51dbe52f47b4", "sighting_of_ref": "indicator--2d5f00dc-5cc2-4781-a0b8-62816acb5ca1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5c3660-9b5c-423b-9c07-01a1d880a0d0", "sighting_of_ref": "indicator--aa11cf22-16e3-4ad2-b16f-f1ff942850ec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f96c51-dd59-452d-86b4-0b0060a9e20e", "sighting_of_ref": "indicator--435ebb01-e115-4e6f-abc3-a1444d60bacd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63f45847-6a18-49ad-82b7-63dc0b948f91", "sighting_of_ref": "indicator--ae558ee5-a4f5-4d3f-8321-54b2ff6437d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b957b908-85bb-49d9-945a-f430d8886789", "sighting_of_ref": "indicator--c0dfb7f4-1ae8-4bc2-b590-4d8f62dd5cc4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585241a0-3d4d-4516-834a-7b2949d8c367", "sighting_of_ref": "indicator--902f9ade-f8de-49e2-973c-b7a8c23f2e7b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10292b5b-7604-4224-84ce-6d1b581771b6", "sighting_of_ref": "indicator--2b100559-13ea-47fd-bdb5-fb92636ed093", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2044f8d-a280-4896-9cbb-b8560d95fadb", "sighting_of_ref": "indicator--ce5af255-e517-4fff-b360-688662eb605f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4afbf82-1b56-4a2c-a1b4-9dcefb315269", "sighting_of_ref": "indicator--eb20e450-2d3c-48a0-a13b-ce5778bbae1c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57eeab9-1cbd-4031-bbfa-22251bf82808", "sighting_of_ref": "indicator--f6665ac4-db0f-46c6-addb-889fa4450da3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a697d25e-5bf7-4916-821a-214b3c7013cb", "sighting_of_ref": "indicator--3a6fed18-afeb-4420-8a24-7ea003e6bdb4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd4d15d-b675-475a-a066-af301f23da87", "sighting_of_ref": "indicator--286172d7-f887-448c-8631-3f1397cb7df0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f34eb7-cc0d-4177-afbc-a1685a564a58", "sighting_of_ref": "indicator--f2b379e8-ac43-47b8-ad90-d4a81994b43c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843b485d-8d51-44aa-ae2f-85dbed4a9bed", "sighting_of_ref": "indicator--d475872f-2d1e-46b4-9d05-d2f4a5b98354", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4e8619-12d4-4485-8864-ccaebbae4ef8", "sighting_of_ref": "indicator--d9a301b2-28a7-4a8c-9faf-e6afbdfe5cff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a94f05d-056f-44fe-b139-9d112b6e9885", "sighting_of_ref": "indicator--cb661d26-ab8f-41dd-9a04-4af883107a16", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3efe17f2-6ee9-4733-a8e5-87abb46e8c16", "sighting_of_ref": "indicator--fbb98a94-640b-4ffc-adaf-9fc9d8a7bdb4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d7f675-4623-44e8-97b4-8155147c1047", "sighting_of_ref": "indicator--df1c6510-dc38-4a7d-8d53-8b37f60abbe5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7254db-6c4d-48f8-bc91-79dfeba4b397", "sighting_of_ref": "indicator--23de2821-8393-43bb-b411-350681d2e08b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdfbea86-e297-42a3-9731-46197a3aa185", "sighting_of_ref": "indicator--a643c1f7-30e4-4de6-9598-bad46850a721", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6c3b96-9efe-4dc7-96ab-7b9f86258ef3", "sighting_of_ref": "indicator--674e2019-17ef-45e8-ac5a-8397e1b8476e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd1c61a1-9e32-4798-8404-11b8818d34f0", "sighting_of_ref": "indicator--9fa719ab-0a98-4227-8ad0-45b48b896d88", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6353872-a6f7-457b-946b-c455e0ee3b19", "sighting_of_ref": "indicator--f08c1d5c-7c26-48f3-b3da-5772d32102df", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b560bb9-cddd-4088-a0a4-6a2a7b1fb79f", "sighting_of_ref": "indicator--d8fde169-5569-4dc9-b0fd-c8942d6a7fdf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c443253-b3fb-47cd-bf69-c015ed7d1b22", "sighting_of_ref": "indicator--5560ac16-69c6-44e9-9961-b4500078f65c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eaede6a-ea1a-40e2-a307-fad52dc54ef0", "sighting_of_ref": "indicator--81033bc2-631a-4644-a0cc-5b12dae4eedd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab96cadb-e446-4fd1-a373-50e934ce938c", "sighting_of_ref": "indicator--43672b63-5381-498f-92b4-f45d03168f66", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779133f0-84bd-4ffd-86f5-71620281ef9e", "sighting_of_ref": "indicator--18a11512-3c04-43d3-b2f9-2ab0a2484bdc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2571243-29b0-40af-aaab-d57b2b54b74b", "sighting_of_ref": "indicator--56f26655-0df7-434b-9c5b-81d24009b176", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53128cbb-6ff4-4651-8498-323bcb6aae25", "sighting_of_ref": "indicator--53b21720-5479-47db-9edf-665e6d7c9d41", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212cf32d-2a30-4f29-a3e2-6d8fd3c5562d", "sighting_of_ref": "indicator--d32457b6-1908-421a-8de0-9464bb0b72cd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ce9909-422d-47c9-b84d-4cc33763d439", "sighting_of_ref": "indicator--6508fd38-8c1f-48a5-a022-0399da13f48d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98206e4b-a68b-4f7d-ae54-5f6598bc5271", "sighting_of_ref": "indicator--301a6357-0a39-4ef4-8bd7-0ceba6a76385", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3406f6c8-4b04-40fa-96d1-16c893d0e937", "sighting_of_ref": "indicator--37cb1ccf-1302-46bd-bb16-6b610449475a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab937139-df06-4ee9-ba07-ab7d1c043e1f", "sighting_of_ref": "indicator--ba507ed7-6556-44a8-97e9-f0ec9ca934a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eceafecc-dc83-4051-9a01-29351a4934d3", "sighting_of_ref": "indicator--c7876a9e-2566-43b6-af59-ca7a3fe79819", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5b0e64-8721-4811-ac05-c03355f8d9b3", "sighting_of_ref": "indicator--ebefbb91-2985-48b6-ab4d-46f96969bc65", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa62958-f0eb-44f2-98bf-978b1b846969", "sighting_of_ref": "indicator--d01a5d13-6f65-4f9d-b783-52c962452909", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d32c12e-7db8-4ae4-8c59-3be09d1ee09d", "sighting_of_ref": "indicator--c8598708-4e23-4eaa-bf85-0c5b80ceb4de", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa043a26-79eb-4408-8014-c914196c5115", "sighting_of_ref": "indicator--a862fb00-15f0-44be-87d6-e9021b21d0a2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5eda696-5d25-4006-b9b1-63fbefe110a8", "sighting_of_ref": "indicator--5ff23bf3-cb1e-4eb2-aad8-954d438a2e9b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5600f2-f531-4c64-bd8e-cd49c121bb56", "sighting_of_ref": "indicator--9c182992-f1db-43d6-a24a-2c3f0f1f9608", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--362050bf-1975-4f25-8ee4-928e056ae346", "sighting_of_ref": "indicator--19e87038-6300-4eb0-b932-83644e7a8713", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--184e38c8-de27-4128-95a9-34d98e870a1e", "sighting_of_ref": "indicator--d1f811ab-7d36-4b26-a417-aec2234b7039", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515fa5aa-32e1-4346-ad2a-39e413785799", "sighting_of_ref": "indicator--27baaf0b-dd93-4b18-a767-01f1165d23d5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2439d7-81a8-4d56-9a05-1bc0e5c0506f", "sighting_of_ref": "indicator--ec8b64fb-3b4b-4c2f-8b13-6f1db5fb38ef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51b614d-04c7-4b53-9ab6-9ae49033a901", "sighting_of_ref": "indicator--2058fe55-64c2-4b27-85bb-4bffbd4a0a89", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1d1849-00b3-46bd-a14f-150adfb14c13", "sighting_of_ref": "indicator--8c88ac40-ba52-4ac2-b01f-34f4f778ecce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a35a8d2-6c77-402b-a88f-9a674e676806", "sighting_of_ref": "indicator--7917575b-80cb-4f6c-822a-6db1ef4f7baa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372b7671-2edf-41a9-a824-befbaf413a7e", "sighting_of_ref": "indicator--c7a50854-2bd3-4c13-ba59-610e5f2f83c3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ce1c1e-7ed1-4818-9abe-1cf906b76c6a", "sighting_of_ref": "indicator--94c10974-481a-433f-9833-eca38e6cdd8d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9847faa2-ca6d-4129-9cb0-f71e7043bf04", "sighting_of_ref": "indicator--df422e11-6433-47fc-9476-6ba9c3b835e3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78fb85de-8775-4135-8598-c29096788fac", "sighting_of_ref": "indicator--eea877c8-a42c-4dce-bc1e-3cd8508c7da8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b70ba5c-cbd3-44cc-b43d-ebf6422c6bf4", "sighting_of_ref": "indicator--b71519ba-a599-41e8-92e1-ce73178891a7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f357e009-53fa-4e5b-b826-c4ea45b6b796", "sighting_of_ref": "indicator--fd82b8ac-bbe6-47ca-9319-e21af5f854fa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78de0a1b-1089-49d2-a396-4a16d4944f4e", "sighting_of_ref": "indicator--d2f602c5-c24e-469f-82e7-3e5c2343b9f0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac46624-9b78-4df4-b9ee-6b387171e427", "sighting_of_ref": "indicator--265ea51b-a9e2-4ad1-a0b5-98a16c039593", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d0a929-8625-4834-b380-e8664b436975", "sighting_of_ref": "indicator--fcb34b4b-82b1-43f8-a81f-85a52f8d9006", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58bf8d7a-83d2-4058-bd1b-992f523e5a06", "sighting_of_ref": "indicator--10e1d129-545e-43b5-9b98-6c529d77f3af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a86c661-454a-4754-961f-88b93d9738a4", "sighting_of_ref": "indicator--e4d2db4e-8c05-4f9f-affb-197052d18341", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14f73e4-0fc6-4ad0-864f-53d417ef20fd", "sighting_of_ref": "indicator--73ba8ee1-1587-4e29-8303-9eed5db2a588", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3527edb4-7fbf-46af-a440-89ee6c29f2c9", "sighting_of_ref": "indicator--b0b03ec7-5d6c-4be8-ad7d-c315a9440db0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e887802b-8720-411d-b1d0-76cdaec60cd1", "sighting_of_ref": "indicator--1b3c434b-7478-4de5-8b3b-745f57ccf94b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62823a8-02b6-4ee9-9df9-b4fca3eac24a", "sighting_of_ref": "indicator--8f88bd12-5ec2-4388-aecf-900b883566b4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9154772b-51f9-4dc1-a60b-e929f9a3cbd3", "sighting_of_ref": "indicator--4995a25b-8fa2-454a-bbeb-de1aaa7ad5a3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bfafbd3-1650-485c-a9c8-7ef44c96c827", "sighting_of_ref": "indicator--3b60901c-bf46-4f41-9625-dcc7760ba2f3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a324243-08cb-4176-ac01-387bc1644ab4", "sighting_of_ref": "indicator--082b03ee-8d83-48bd-bcd2-46a181d40011", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd837ce-5d6b-4791-b9cb-cccd4fea7610", "sighting_of_ref": "indicator--9fa88b52-dff2-4557-b1b2-d5422a247c40", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d59c45-ff44-4dbb-b6bd-cab90d20aac8", "sighting_of_ref": "indicator--493d8313-2ec5-4cd0-9d76-ca4a9e58fa0a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73142160-2690-45fa-a685-d7df9288d62b", "sighting_of_ref": "indicator--372d1855-b774-4cb3-b4a3-a452ad9274af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560bddca-ed30-4513-8971-9f501a904326", "sighting_of_ref": "indicator--eba410bb-1ee2-474d-bf2d-6c6e09ac5dfd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129a64cd-b2b2-440d-9ff6-0aac21f4ecb8", "sighting_of_ref": "indicator--10c5277a-299f-41bb-b417-5e8d29d33dbb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21972bc-cf1f-4c91-bbfa-1ba6e3e6bc52", "sighting_of_ref": "indicator--a81f4409-e0a3-45eb-876d-7442f0da3d05", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f54e33-0ea0-44e3-b67b-e20adc30b176", "sighting_of_ref": "indicator--171d676f-e203-4c74-b0d2-42ee7c9fb68d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe93d36-0bff-4d3b-a1a2-6685cbdce23d", "sighting_of_ref": "indicator--7aa8dd73-1229-48bd-b069-1e2ee88191cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722fd9d4-7d83-4245-b53e-7075825d4870", "sighting_of_ref": "indicator--19527239-0da5-4f23-a4b7-e1df3c3f38c8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa43504b-729c-4ac5-8d2a-d41c0bd472cc", "sighting_of_ref": "indicator--d9be53e1-0386-41ed-a154-ea6cfadb3582", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56019e56-49f4-4f4c-b44f-872234a245d1", "sighting_of_ref": "indicator--cc649c4d-4b22-4b3b-ae5d-4317fb2377aa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d355a1d-0e3b-4c3b-bbc2-d0c97f02e0aa", "sighting_of_ref": "indicator--ddeff5ac-5828-4a41-a6ae-d532b2457a76", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8beda574-02c9-43e6-a030-515c7d817623", "sighting_of_ref": "indicator--849635c6-7ab0-4ccc-b99a-eea0a0bf3cbb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01b2acc-0c5b-466c-9b76-408714bb6340", "sighting_of_ref": "indicator--bbacead2-962a-4c86-b68d-6a82472ce01f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67dad571-3ab2-4ce0-b1fa-a58d624e6a91", "sighting_of_ref": "indicator--01f9af16-2079-4df2-a60d-bb4d5a171582", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250c592d-ce1e-4dbc-bff8-89a5f338463a", "sighting_of_ref": "indicator--d328f991-338a-418b-befc-44f045b742aa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f64fe00-9ec9-499c-9ff3-ae3d9972a4cb", "sighting_of_ref": "indicator--fc9ac723-ec58-4856-b618-d139035b9880", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec761e7-9d1e-441b-a9e8-d9e8c66120cb", "sighting_of_ref": "indicator--0b848b22-6e24-4666-babb-e7695d69a787", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff87060-e418-41a3-876e-2ccd055cc4a5", "sighting_of_ref": "indicator--2ec56be4-5bd2-4a36-8019-9318ae45ce35", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b5b031-cd35-4976-bf9a-3fd7372b228e", "sighting_of_ref": "indicator--37e50588-0489-4d81-8e24-9b029e8b29d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d07ee2-f127-4e7e-8995-2d022cc55554", "sighting_of_ref": "indicator--aea8b42c-be84-4310-9eb8-39750e5dbffa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45202104-0ba4-4256-898a-41772caef6f2", "sighting_of_ref": "indicator--a2c7b007-cb5a-46c3-8edd-4389710eaea7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3cca998-ca02-4bee-986c-2214fbc045fa", "sighting_of_ref": "indicator--2b428b6b-724e-430f-a0d4-879d82be03d6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebab8c64-ec6c-4f64-8a91-76a4c6e328f7", "sighting_of_ref": "indicator--17f3407b-520e-4dcd-95a9-daee44d90863", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d224b2d-9727-4bd9-a619-fa8ab09b8e6d", "sighting_of_ref": "indicator--be6e525a-c9b8-425d-92fa-19d4ae242441", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a5bb354-8e93-442d-b9ec-d6aef138bafc", "sighting_of_ref": "indicator--32343de2-816b-4df1-bd36-66a47b207a15", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caffc1a4-a0c3-4f6a-91fe-d8a1dc8d730c", "sighting_of_ref": "indicator--12e909f3-117c-4ce4-aafe-523794b6c117", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b880b608-de9c-4c9c-bb25-3e8a1b37b541", "sighting_of_ref": "indicator--e7fadb14-cc08-4b4c-b55c-5c71c73ca9f1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80ffa7c-6d74-4b09-8638-4fad2a128840", "sighting_of_ref": "indicator--130a925f-dec7-4ab1-830f-9770679c02f6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45661e4e-245c-4da6-9e24-a78de8e31e92", "sighting_of_ref": "indicator--0173c137-a573-4fc8-99fc-27977e6272dc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e9da1a-0ac2-4711-9686-ee2fed12f9ba", "sighting_of_ref": "indicator--915c9c6f-f694-498c-96f6-a5e5d6d62bc4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6cd2820-be65-407e-80ff-2cfaf7e4649f", "sighting_of_ref": "indicator--d0e71b32-84da-470d-908c-aa3eda4ca706", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73849cc9-c119-445d-a418-ba62f90cd89b", "sighting_of_ref": "indicator--ad012ceb-edf2-4650-94ab-1cc3f4ef77b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdb744f-d86c-41c7-9a93-e0586ca31dc4", "sighting_of_ref": "indicator--3ba1898d-ebcb-4d29-ab5e-1b350b18defd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f542b7f-f50c-421a-bbb3-5e1bf8cff556", "sighting_of_ref": "indicator--08de0e8e-6cb8-4de9-ab34-3ffbe6bbe208", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16e163b-372b-4708-b909-4a955f3f9b43", "sighting_of_ref": "indicator--0266f7f7-38cc-4507-b792-e6cefd93357b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153982b9-4740-46a3-a959-3c47b396f73b", "sighting_of_ref": "indicator--45a8947e-8fb5-4078-ad53-60c5e564926b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587e10d7-37d3-47f1-8947-9e2f93119c2d", "sighting_of_ref": "indicator--7c83c12b-950e-41ae-bd4d-eeba9193430d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d607ee95-73d5-4e5f-bf47-0bff1f8a7646", "sighting_of_ref": "indicator--a8439b6e-547d-46f4-ac1e-b3dd7069a8f8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac13f87-a7a3-49e3-bc67-1179cef49f40", "sighting_of_ref": "indicator--3e4e0870-8cc5-417c-b76b-23b1fa3151c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7bd4a8-927c-47d0-a833-42a0941ee388", "sighting_of_ref": "indicator--0086a6ec-985b-4947-9d68-dc820982adce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e78d84-c9e2-4113-a0df-df5f261fae4e", "sighting_of_ref": "indicator--41329869-0d5a-41d2-afe1-6a314c55fce5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e36cf9-79bc-4218-b158-793772600e51", "sighting_of_ref": "indicator--195b603b-c3cd-411e-8e49-b6bfbb225303", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac748645-a647-4ccf-9eeb-4da7aef5fd49", "sighting_of_ref": "indicator--2f17d21d-558d-4a4d-92b2-98273ef8fe80", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f92749-ffff-4dc7-a52b-64ab757cda26", "sighting_of_ref": "indicator--6d1a67f3-301a-4af9-b14a-382405016a25", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f479b32f-05a9-48ea-8be5-d8ba97cd2a4a", "sighting_of_ref": "indicator--a2b72757-63a7-449b-a23c-b3488c2da653", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10143a5e-35b8-4dac-9732-510f04b21e8c", "sighting_of_ref": "indicator--60f088f9-cdcb-4e80-b76c-3790170445c7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8743467c-978e-4bcb-8854-6d14954e15b6", "sighting_of_ref": "indicator--b9b25d18-c4f5-47b5-aa01-b465bb5cb0d1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e329de9c-7516-434e-9458-c475d65faf02", "sighting_of_ref": "indicator--b7b95a4c-6851-43b7-b377-e12160b63db3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4173579e-6851-4904-b8fd-c6f9d2da4024", "sighting_of_ref": "indicator--52b29959-e12e-4eda-83ea-c174fe0a5f17", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f12acc09-67b8-4f49-ba29-f886e40bb410", "sighting_of_ref": "indicator--a45b0472-a565-49db-b7e2-bfe92ac26f8c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40f55a1-75bc-42e0-bd41-6b6453e316b2", "sighting_of_ref": "indicator--895ce234-f43e-408a-ac1f-d89b25285d75", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723e287b-408d-4f4f-b1df-2f26acd7f007", "sighting_of_ref": "indicator--e54cd447-c6c5-45f3-b553-ceec2c9dbeb2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6ae545-8dbf-4c89-a917-427466893736", "sighting_of_ref": "indicator--2bfdc0cf-32d3-4500-aba8-6ef10ce29457", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59135132-2828-4302-915a-aa6549770b34", "sighting_of_ref": "indicator--00d404a2-4002-4619-bfe6-87d573251801", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a558936-b657-4f18-8272-83eee6d9506f", "sighting_of_ref": "indicator--fdd015a1-f3ee-416d-b056-b633e615f126", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb332faf-afc1-4fe0-b2fc-9ff3383bb6f5", "sighting_of_ref": "indicator--5c8b337a-58d7-4083-b475-61fefb7cdeb0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db90c20-a660-4590-9f35-fa78d6b744ce", "sighting_of_ref": "indicator--d043085c-5e9d-4eb7-8bd1-3b279415b295", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da5300a2-c8dc-4bba-aec2-593dd9c8242d", "sighting_of_ref": "indicator--ca319a9e-c6f1-4886-b556-2a2a1edc1a59", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb7719a-e5cd-43c3-9e57-b3360f75df65", "sighting_of_ref": "indicator--c6411788-f3c5-4dea-96b1-16c020ef0546", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75074b06-736b-4fd0-b7f6-e5270c6ff7be", "sighting_of_ref": "indicator--09051894-9ae0-4022-a3ca-b1ea6957fd4b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ac6a20-2517-4c70-9362-33f173f8fcbd", "sighting_of_ref": "indicator--99a3a40d-ea54-4802-9e25-f856cf9a35fa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5f454b-9218-4d7f-8b66-a1194ee01876", "sighting_of_ref": "indicator--ea301c6c-9dda-4e40-bd40-3b57f8c0ff40", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9dae006-1241-45d0-b8b6-02cc41f750b9", "sighting_of_ref": "indicator--d7059b87-2f42-49b1-a70d-03eb5a0fe158", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52749ec-d064-4016-90f8-cc97c50f0d97", "sighting_of_ref": "indicator--adf4998f-a755-46f7-8938-13806dec3317", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--971d8068-ed73-4cab-a7e8-699fa6c076dd", "sighting_of_ref": "indicator--e34ae60c-eaed-417f-b5e9-1de91a5d1252", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8249b440-ed03-4798-976b-ed212b6bd3ab", "sighting_of_ref": "indicator--ce93cfeb-030e-4e4d-855e-dad00b6850cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aaa9776-3689-4bde-9212-869020a44a1b", "sighting_of_ref": "indicator--f22ce05d-f1c6-4acf-b6eb-97c252963346", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac70761-ecde-47af-8d79-c89e6fd6a79f", "sighting_of_ref": "indicator--9726bd84-76ba-4cae-909b-cf57887f7992", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dca942f-9ae0-44f3-beb9-86d0eee99489", "sighting_of_ref": "indicator--1087f45a-f037-4b4d-bfe7-7537c1fe0b2e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb88fa7d-adc0-4c15-9084-ffc93d4913ca", "sighting_of_ref": "indicator--b97b30cc-a16b-4e46-8d9b-ef36d369c090", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696cc1ea-2646-46b2-8ec8-3ad468c0d700", "sighting_of_ref": "indicator--afe88042-4810-4210-bd55-e8f1279ff789", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd4763e5-19c8-4471-b8f2-22f1d019c1fe", "sighting_of_ref": "indicator--0778312f-58ed-4c06-befc-0e215d6dfe71", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6198d616-d7a5-4eec-9cd6-b3d4dafe04b1", "sighting_of_ref": "indicator--4538fa28-0577-4dae-ae35-70995dd90c8b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--936d8ee0-a8f7-4282-bf0f-215ca505a494", "sighting_of_ref": "indicator--e7330923-1ceb-4859-804e-6e5574a99081", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf8c01e-e831-405b-999d-eadb1bfe3be0", "sighting_of_ref": "indicator--afd23dd0-d736-418d-989e-18357964bf77", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9e9a4a-d21a-4f68-a28b-982e9413e57c", "sighting_of_ref": "indicator--a8869e4a-fc6e-4c4b-84fb-a2c79ae7dcfa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc5d9d3-9c55-4537-a257-e55b3e12ef02", "sighting_of_ref": "indicator--ebf19dfd-45fe-4d74-8a40-3c4516e3f19c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44e8521-d74b-4db2-9ea4-4831ee35fbcc", "sighting_of_ref": "indicator--c7129dba-5dca-4cd3-89e5-586a63479a49", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eccfec0-405d-4741-a3c3-c7c180b7e34f", "sighting_of_ref": "indicator--aaa6c930-a023-460b-bcb2-6ca431f06edb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741b3e45-e0c0-4e36-8ab8-57ea0a72ca23", "sighting_of_ref": "indicator--ad3799a2-a810-485f-ba30-611d7c1d95af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500a7724-d4dc-4b46-86eb-50c58c29c89b", "sighting_of_ref": "indicator--d2326a00-152b-41d5-972c-fdfb3705b710", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfaa5302-62eb-4c63-9be8-56299ccd1687", "sighting_of_ref": "indicator--56f5c610-5638-44b9-a5c9-1970615b8901", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--389360be-bebf-40f7-b14c-04818dc97c5e", "sighting_of_ref": "indicator--1df8feaf-835d-41f9-9dd1-319c6d5098db", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6c2f36-a93b-49e0-a101-c1af87b1219a", "sighting_of_ref": "indicator--f0713f4f-469e-4993-a8a1-28d212b566f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--705b1b9e-3844-492c-9284-b0d79c05ac64", "sighting_of_ref": "indicator--d429f9cd-e139-4566-afa8-5de8f19e7519", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--231d4c28-7cd3-4e2f-ad6a-dc0bc49b6c8d", "sighting_of_ref": "indicator--a32eac01-f287-4994-985f-495a2abfc399", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05383d81-91a3-497f-8658-8b7ecb88ce83", "sighting_of_ref": "indicator--6dcf529c-d93e-440a-b356-a3998d122427", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9afca939-f170-4ab2-8ac8-43644d956c46", "sighting_of_ref": "indicator--fb7d2938-f830-4b74-9cdf-6169aae32f81", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8440d1-8acf-4531-b40d-44721bcace40", "sighting_of_ref": "indicator--15f13db3-d151-491b-8e55-d430f75ba4fc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7104a78b-43e9-4a28-8bd9-7670e1537299", "sighting_of_ref": "indicator--a0e08776-b6dd-4553-9f9d-c154e2d71460", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd6574d-96e3-44bd-bcab-f8d2749d1f0d", "sighting_of_ref": "indicator--0774ef8b-bee7-44c5-9293-7b315f63e7c3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b705e2bf-9454-4300-80db-d0328614484c", "sighting_of_ref": "indicator--e4a7bebe-e4fe-4560-8970-2c4ea7926d53", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e905dff-c598-49e7-a24e-554185365d2a", "sighting_of_ref": "indicator--d84bbf47-54ea-4bd2-8a95-7179a374bf54", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e91e35-8f04-42f7-85bb-b19b3e6c864a", "sighting_of_ref": "indicator--154801ff-1519-4cc8-8323-ca066de13041", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f21f17d-9415-40f6-9464-ca0616812649", "sighting_of_ref": "indicator--ed2da661-b035-4604-b9a8-44dc6e2e5dde", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7837f525-5fbe-410d-8d3f-f239a5299277", "sighting_of_ref": "indicator--b59f4bab-5bf6-4be6-8131-04c5316bcc54", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5323a3-7292-4f6a-9b52-6efb5d43481d", "sighting_of_ref": "indicator--a4734c6e-1aa7-47c4-9644-e1026353b989", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b38c3c2-e811-43d2-b76b-a0645c91c431", "sighting_of_ref": "indicator--65912081-edc2-4efe-8de0-8d82d21b9e16", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--325e7c2b-9124-41f9-bef6-21e368676ce6", "sighting_of_ref": "indicator--53d5c1bd-98aa-466f-afc1-bd8c8cec0bff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8130a96c-7326-4c97-8a07-70eab85dcda4", "sighting_of_ref": "indicator--2dd2e95b-c45a-4cdb-9d3c-d71c72042af6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929d88fe-6c70-415f-a11e-906ed6e05a05", "sighting_of_ref": "indicator--3878f018-321d-4a93-a1aa-71e8d764412c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dcc9573-3795-4919-91d6-786ac9ac7e2e", "sighting_of_ref": "indicator--4ef6565f-b258-4aa1-a88a-7c6e39bbabb8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da8b9f0-801e-4dda-9fa0-dbd2b9657423", "sighting_of_ref": "indicator--ba4a51d6-094a-4995-8a09-6dec29f8419a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9480e17f-7d89-451b-8f02-a866fcec1529", "sighting_of_ref": "indicator--a6149586-9d6b-4523-84b6-255f1c230377", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742d9831-2dc6-44fe-8580-1082218826d9", "sighting_of_ref": "indicator--5ceb4e77-c454-447a-9fc7-52c1fb7a1782", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b83fb8-0738-43a8-afbe-cb98ae8e440f", "sighting_of_ref": "indicator--cde7315c-4808-4b1b-8385-9026419f9498", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86de2ec2-3c98-4447-8231-5e42292c6016", "sighting_of_ref": "indicator--487449b7-f0dd-4703-aaa7-1ed287f07e5a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7353cca-a159-4df3-aee4-17aef6d3c588", "sighting_of_ref": "indicator--2c36882f-7bc0-43bc-ab43-5a10866342a7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34e6b889-d88e-4672-be31-29f2a956e8e0", "sighting_of_ref": "indicator--39332e77-b2ea-4ef8-b957-3f6e6bc54210", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd3f06f-f70a-45ba-9d6e-8c084ffbdb38", "sighting_of_ref": "indicator--261f8439-7ae8-4782-9447-67b9a34ffd67", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193f7edf-6704-4b1f-b274-09c1608cdf2b", "sighting_of_ref": "indicator--dec3dac2-152d-4ebb-9e4b-aa39035966cb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ecd4a66-ff5e-4e48-bb5f-600833b7d0e9", "sighting_of_ref": "indicator--e405a5be-15c5-44cf-930b-e4c0803748c5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026fffad-3140-48f4-98fe-454dab80df17", "sighting_of_ref": "indicator--04e93fd1-5478-49bd-99a3-a9b8d6f484af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdea12bc-ceaf-4a94-8e84-afa1884e4134", "sighting_of_ref": "indicator--9d46570f-5126-4d6f-9274-ee2ef40528c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08073e60-76cd-40fb-9628-ce6d1063db5a", "sighting_of_ref": "indicator--ff6bb62b-76a9-4fef-a12f-329dabdf5d4b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f6c5483-bee5-40e4-b4c8-9d822e31fe1e", "sighting_of_ref": "indicator--f20602a9-32e7-4206-a08b-f5000b969c0d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9e79b7-e518-4d85-9fae-50fbd69f53b2", "sighting_of_ref": "indicator--b0d5b979-0c24-45e1-bced-084a9fc97c83", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7199f84-fc63-4fab-a5b2-e61bc13217ce", "sighting_of_ref": "indicator--7f765dcb-e285-4f44-bc5d-68bd94524625", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82be0392-6121-40bc-880d-f2fe0d559877", "sighting_of_ref": "indicator--96695bb1-1736-42b8-aa0c-20133584f92b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413027e6-ca35-4f8d-9283-45006049c75d", "sighting_of_ref": "indicator--e5f51ef7-d873-4cf5-a252-17f90ae4e94a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11231ca-3b25-4dd5-bd13-494e8b64acdc", "sighting_of_ref": "indicator--e83f69d3-d762-4207-9fcd-2a445cd68fc3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e0b4f2-3def-4f96-a84e-40d5b596302e", "sighting_of_ref": "indicator--c3ba7cef-7760-491c-9198-0d40c9acee38", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6303df68-466f-4927-881c-379cc766aced", "sighting_of_ref": "indicator--5e5cae09-8c81-40ca-8905-7e8891536013", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e08145-986b-42fa-9c66-93e6f610bc22", "sighting_of_ref": "indicator--e1c7859a-d204-489f-bb8a-2a9fdda342ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e312c9b-8b57-4116-be1c-c3a49a82f2c4", "sighting_of_ref": "indicator--ac32cbfa-1905-4f38-bf9d-f6c2decf9e0e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82a15da-68b4-4b8c-9301-03c6970128e9", "sighting_of_ref": "indicator--f0f58baa-e9fc-453b-a02c-449cdda51293", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d84905-2877-439a-93bf-2306d3152b31", "sighting_of_ref": "indicator--ddbb069d-8f77-446c-b18e-901239e058f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b06074d-63cd-4377-97c5-14178ff7a8e1", "sighting_of_ref": "indicator--141c1ee7-209a-4f12-9340-d561d2685957", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e060c2-ea89-4517-87d5-0345d4227884", "sighting_of_ref": "indicator--2b97058a-3a7e-40d7-8a26-c9c69f5346a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d4f878c-f184-4927-8dfe-9eaf67e71fb8", "sighting_of_ref": "indicator--4a1cc7ef-ddb5-4f51-86d1-415dc4757ced", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3330a9-0938-4791-9751-3bb3e3877b86", "sighting_of_ref": "indicator--fccd5469-c170-48d8-804e-bcbd196f426c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db382b9-123b-4505-9700-ae8369911a23", "sighting_of_ref": "indicator--21dd44d2-0ce9-4254-9e3c-89f99a7afc0c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246c3a98-bb5e-4d45-b227-f625ef088e24", "sighting_of_ref": "indicator--81bda6f5-cfff-44d1-a161-c20050ce2b5b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258c761c-851e-4f98-82d2-ea4119f9293c", "sighting_of_ref": "indicator--29db87b0-a696-4335-a713-f9093bd542e5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae2dc20-24ac-4d9a-aaf0-b274bab8055d", "sighting_of_ref": "indicator--ff282385-82e1-40bb-b804-d3212a268a4e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f597a7-634a-4d01-b08d-af0ddac53f4a", "sighting_of_ref": "indicator--1c06d1fa-4b66-4cc2-b03d-a0f2587298d3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef25fe35-498f-4578-9517-778363fa81eb", "sighting_of_ref": "indicator--b6385d5d-82c4-4d92-aca2-a8612330c7ba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1653636e-f905-4350-af38-3665f4de4c69", "sighting_of_ref": "indicator--8ab9bca1-f8c3-48ca-a37c-15307a774cf4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--982a6f72-c1f8-49cb-97f6-fd5a17f57354", "sighting_of_ref": "indicator--bc9f256e-b9b8-4ceb-ad4b-0da8581618c2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c8074a-bcd4-4083-b9c3-365f0f58d96d", "sighting_of_ref": "indicator--8dc02399-ce17-46a2-9a3d-1b7fe99d00b2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f87d5f-81c9-4de8-bc75-fe2f11c90949", "sighting_of_ref": "indicator--0de111a4-3f60-49c8-9e72-8dd0a49f2f72", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e805f349-efb2-4fea-a58c-4476bd313ce3", "sighting_of_ref": "indicator--b3ec4f84-8c2e-4c6b-9b18-8d7748b74938", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--653b2c2d-9f0a-4fac-a70c-99d7300089b1", "sighting_of_ref": "indicator--11e36f59-be45-4e77-acef-670c397cdfdb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c965ed7d-724b-4cd6-91fd-86cc45d68fdc", "sighting_of_ref": "indicator--43bb8aaf-fe98-4560-aa1e-71df1731efee", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db5e2a73-4314-4519-b44c-b9d0baec2a05", "sighting_of_ref": "indicator--c3f43958-e2de-4e5b-8f34-4725103fb5b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--319b1224-918e-4c42-bbc8-7f1a023d7c5d", "sighting_of_ref": "indicator--aa0e4fa2-0e2a-4728-b922-f1ef48f4d86b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3b4428-5e66-4b6e-a6b7-5450b636f886", "sighting_of_ref": "indicator--4b52d03a-c5f2-4b7b-8f0b-387433781c62", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c5423e-083d-4413-b981-084a4e251ef5", "sighting_of_ref": "indicator--a808e2d3-1748-4fda-a036-de599a4a9c04", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd5f4a8-652d-42af-883a-756e82ccecb4", "sighting_of_ref": "indicator--8e2934f3-4478-4808-8574-4da897bf9f42", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ebbea5e-a991-4bb2-ad85-b5a16345afac", "sighting_of_ref": "indicator--61f9f460-5d1b-4f08-a672-d42546172e5c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142af322-4878-4c38-9669-d575d8469d47", "sighting_of_ref": "indicator--6c9b1f9c-e9f5-423a-a59b-679a1e77b163", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14945467-0e2e-4a45-a5fc-f40fb768589c", "sighting_of_ref": "indicator--fe0dad0b-c4ac-4a63-acfd-90e96ebf4eea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc0d278e-18a0-401b-b089-32a7f6a36c7d", "sighting_of_ref": "indicator--3cbdcc28-1680-45dd-9f83-5880ede056c8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf2d132-ff77-4c43-a14e-ae1341742464", "sighting_of_ref": "indicator--e0d8fd52-8232-43e3-9a0d-bd09ebc8ff89", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484a1e4a-4c54-4251-98e6-8d56e5048c74", "sighting_of_ref": "indicator--e16f0970-12df-49f4-a962-4ee7ef79bee5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171cae85-e8b5-485d-bbd8-f3ef9bed5601", "sighting_of_ref": "indicator--929e0360-5594-4cd3-ac1d-56c4c4226905", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf1cbf1-75e2-420c-871c-247cb5c686e6", "sighting_of_ref": "indicator--643d6c80-af6e-4db0-a52d-956790deafff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d555e54-1d85-4185-9c2f-12608434893e", "sighting_of_ref": "indicator--acf12e00-0d3a-4926-8fe8-f89b02e3c78c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79efff3-0350-40f6-8455-bcd7bbeef57c", "sighting_of_ref": "indicator--86fc046c-9bf5-4003-8ecd-2ce35974e937", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad8275e5-5eab-4fc9-803d-eaafdbeb9aef", "sighting_of_ref": "indicator--d288049b-30eb-40cf-9552-aa6bc51b4aca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb962a9f-aa19-4938-9b8e-545bfbe1a724", "sighting_of_ref": "indicator--c019ce55-01ee-4135-8ba0-290af0e3fc2b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49ff0c1-1024-4287-9709-72914297c64d", "sighting_of_ref": "indicator--77c93881-c59b-4149-a431-2c0a669336f6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--403390c3-8eab-42d6-94e0-bc4c2ecce2b9", "sighting_of_ref": "indicator--987e8c47-d24d-42d5-89e6-cc9eb8f709ac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ebe141-cf45-48d8-a269-a032ea0348db", "sighting_of_ref": "indicator--866cd0a9-b085-462a-9e8f-357d0d24b342", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a2c5c9-7d37-4106-8e20-135ea5cb47e7", "sighting_of_ref": "indicator--4554c15b-d3b2-42ed-b749-94f4f8681968", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14de282d-d9c2-4395-9d82-887c002b9e72", "sighting_of_ref": "indicator--3cb426ed-58c0-42bc-8546-25de16898355", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca88eb6-0eeb-41d7-94a7-7c1cf5897411", "sighting_of_ref": "indicator--0bb962ab-52c0-4050-93bc-2b455d05e31f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021b1633-a8c6-4a87-b203-4ad08c389912", "sighting_of_ref": "indicator--d08d2d2d-9036-46ce-a499-8bc1050a680c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--686f6407-bfd7-4525-8c90-3644755e732d", "sighting_of_ref": "indicator--c0aa8927-9e11-408e-9014-1092a9c62ed3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d9a413-269b-4253-9a80-1cca71e6ffe6", "sighting_of_ref": "indicator--df44a195-0f19-4b1c-9fab-75a7a7a20b4a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b747582-14b0-429a-ac26-b1d55a32255f", "sighting_of_ref": "indicator--ee45eb1a-d9dc-4d31-bb87-3d83ee8126bf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e28c36-f507-4dfd-b32e-d1c86cc3e623", "sighting_of_ref": "indicator--34ef5137-0b1f-42ea-97b6-a9389f9181f8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21bb358-b237-4131-8ac3-8b1ce8c8dec1", "sighting_of_ref": "indicator--0a13cb24-ea73-4bf5-ad2d-2ebf52e48a01", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa67261a-248d-4b8c-98c7-f989dc7183b2", "sighting_of_ref": "indicator--e51b6f10-43c7-480d-92d1-6b0cb4d201f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09ca660-6ed7-4a49-a878-0e4a07e499de", "sighting_of_ref": "indicator--97687c0b-ffdb-400a-a04d-8d2229f88d85", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb57f72-9f6d-48e7-83fa-7175a5ff53fb", "sighting_of_ref": "indicator--4daf7012-c1c6-43a0-b1ca-a6db8dca9b7e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a2133c-ffb7-41cd-b253-fd29410cf8ff", "sighting_of_ref": "indicator--302887e4-ef73-43e9-ae2c-54cd80949cb7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea7a978-aac6-4e8b-9136-8a8a55869cac", "sighting_of_ref": "indicator--cef88424-43fd-404f-98ce-3e029d70b09e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755c5b63-651e-475c-968e-10b952be5c28", "sighting_of_ref": "indicator--f6ff861b-2270-4b4d-ae3e-cfee4bf26337", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d6cd0c-71e9-404d-9174-60ffe88dd0a6", "sighting_of_ref": "indicator--6d51c653-a1ab-4095-8268-fab9ff0b4845", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc5f71f-06b5-4ecb-8837-000e70bd73d6", "sighting_of_ref": "indicator--7b33c714-c0c6-4005-be1f-7def83919fc7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5521c87-eecf-4159-9f43-f19421ebe69a", "sighting_of_ref": "indicator--8024a2a6-8a78-4ed4-a7c0-5c086cd87c3a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54260f9e-e4f6-470e-9ebc-bd644cfa1421", "sighting_of_ref": "indicator--90a60b8e-8595-41e8-97a9-c7201307ff60", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466fc1d3-f68b-4062-98b5-6c5f000d5eb5", "sighting_of_ref": "indicator--29197df2-9a68-4d34-b46e-0b29eb7bae38", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75960727-242e-4bd8-b468-6b2245fd1650", "sighting_of_ref": "indicator--f45998cb-5a26-443e-92e1-276b1d3f6adc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09899a72-d78b-4544-9792-88b4373e9941", "sighting_of_ref": "indicator--9fdf812e-542e-455c-a865-0cf112a9df52", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ad9597-6e01-4b28-98ba-3efe340e0b50", "sighting_of_ref": "indicator--014e3818-a102-4dd5-9154-ee0be87dbd25", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a76cc4-b0b6-42ab-822f-26186712afef", "sighting_of_ref": "indicator--1d8051fb-a367-4e6a-982b-e1e395b7c613", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93520be-a6af-400c-bba8-872625b4baba", "sighting_of_ref": "indicator--0f8c41d2-2801-43e0-af6b-f3a4901b3432", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3141a216-5334-4ea3-910e-cde64b27e092", "sighting_of_ref": "indicator--e7f3e860-50b5-4763-9d8d-326c6bf6d489", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3362e7f5-9c8f-4860-b196-2dbb9a7af051", "sighting_of_ref": "indicator--d2900452-19c3-44be-9b29-a118d591e9d8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb08f371-5687-4a53-bb9b-a6eab4f4f315", "sighting_of_ref": "indicator--321c7e53-6a46-4f66-8f68-717c8c833022", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b6535c-059e-46bb-a515-43314b300996", "sighting_of_ref": "indicator--0f285bce-e3c8-47b0-919a-92564f5d0900", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25987994-2123-434b-9d60-3e97d1ac6fd1", "sighting_of_ref": "indicator--3bd02216-f24b-4f12-94b0-ee29481151dc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83fe2d1e-24f2-493c-afd4-8df68b0e3fff", "sighting_of_ref": "indicator--29ec8fb5-0e02-4632-a8fa-901b5c957cc4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e4d974-7539-41f7-a343-32d65cd884d0", "sighting_of_ref": "indicator--59721674-04d0-483b-8834-b13a86c42005", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b90281e-6739-4843-a6e1-d80649abb762", "sighting_of_ref": "indicator--0022aba5-d63d-4a8a-9179-9fc676b69ee6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d7876b-affb-4a07-85fb-dfe79682d974", "sighting_of_ref": "indicator--df0f4d6d-7ca4-4b01-988e-87888811e7e9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06ab570-d297-4d22-9abd-1b77ef2d8d37", "sighting_of_ref": "indicator--ee36a543-8180-481a-be9f-f91d4c6281e9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa42b5b-783b-45c0-b8e0-989b41275f6f", "sighting_of_ref": "indicator--b1b499fb-05de-4624-9f3e-0aa9426443c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c93f11b-a907-4a8e-8ade-00e636d3f90d", "sighting_of_ref": "indicator--106c04bc-0cd8-49fc-b371-0161b801e4b3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81e1bfc-6bd8-48a2-9710-5805614097be", "sighting_of_ref": "indicator--b59825b8-9e96-4352-ad92-82abccfd0e28", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d2e6d1-d333-45d7-99ac-46819bf469fa", "sighting_of_ref": "indicator--a0d128d2-58bb-4b4c-b8fe-06235e4c1f0d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967748cb-4741-4821-9f62-f6c4d91d9d39", "sighting_of_ref": "indicator--3b465506-a01c-47a1-b3a3-5598c15e449f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b11f1df-1069-4df9-83d1-46e226951c68", "sighting_of_ref": "indicator--d7801090-df09-4546-a324-0b686be417c8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f5009e-6079-422d-8c2d-bef55cc96c8f", "sighting_of_ref": "indicator--ebd9fba6-8a0c-4a09-a4c8-53ad784b9a95", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e6bcf2-4756-49d7-8346-7a5ad65aba28", "sighting_of_ref": "indicator--c4a85732-526f-452e-83cc-641de3a4bf41", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd868b9-b7fe-4aa2-bc0d-a5c0c1d7ef83", "sighting_of_ref": "indicator--1a9207cc-10b8-4979-abdb-2ea0772a91c0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d191bc-d446-4c9c-8d95-5b321ba5a4ee", "sighting_of_ref": "indicator--8582b2fc-18fe-4262-abcd-f73bd90ea08b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbba1e47-7649-44c4-acdb-7ceb69a57423", "sighting_of_ref": "indicator--f1480395-079f-4ed8-9277-0b4e7c5dc859", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8b635f-3c1d-4efd-aca2-efdad85ca1de", "sighting_of_ref": "indicator--2152b073-29ad-47ee-a01a-bbc0c0f3963b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0605e7cc-2e07-48ed-b53b-3876d244030c", "sighting_of_ref": "indicator--87d541a5-a9cb-4a07-8c11-2f919cde3121", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--787e4879-6877-49cc-a870-a9f68f5c8c79", "sighting_of_ref": "indicator--256b50bf-315c-4065-8486-f9c182800c02", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ab398a-25ee-41f9-9776-f217a155c2c2", "sighting_of_ref": "indicator--329b5f47-92b4-4406-811e-110be77680e3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d5828c-35d9-4225-8829-99003ae74fc3", "sighting_of_ref": "indicator--566246c7-3322-4baa-b2f0-14fe3c7fc828", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--befd8b46-8716-4fd6-8e43-0614b46a60f1", "sighting_of_ref": "indicator--5d812cdd-324d-4016-aaa8-0d2f711d6c56", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c94630-88c4-44d6-bfdf-dd05bc9bd89d", "sighting_of_ref": "indicator--2e90c02d-362d-4422-a605-c5175dd6a844", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f374e5cb-944a-49b6-b72b-7422f3ea7aca", "sighting_of_ref": "indicator--0ca0fdd0-5701-4ed6-82dd-49c0754728da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7dc4a8d-e055-417e-80ad-9da342fd7176", "sighting_of_ref": "indicator--470ce375-c234-48f3-a1d2-99cda7bb74c1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15eefc23-e625-4ed4-add9-35ad24bac9a2", "sighting_of_ref": "indicator--7ab1dc4f-4b6a-424d-99be-3bcb1a50ff9b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d7b229-0e66-4ef5-8ad9-8fd46607add2", "sighting_of_ref": "indicator--582f85df-3e2f-444a-9112-ffc25d8c595d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18fd94a5-b2d8-4863-b679-877e72365123", "sighting_of_ref": "indicator--cce4da15-5a93-4204-bdc0-fed5bfc42eb3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--231b2afc-99a0-455a-822b-9358a83ad8fd", "sighting_of_ref": "indicator--3e153697-4206-47ec-bdf1-1067bf3a84fe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac692a1b-dced-47ee-9ebe-b4e0697e8288", "sighting_of_ref": "indicator--9e72b30d-6ecd-4e56-a5f6-8b90c444d558", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060bcf89-19d1-47c4-a221-3e9f35897867", "sighting_of_ref": "indicator--a7f31611-c6b0-418a-935a-8dd569a16604", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4046c9-d099-4ac1-9e0c-7dc14fb6538f", "sighting_of_ref": "indicator--7c642d13-655d-478d-b07c-5de5cd3b3c18", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e67ef7-35e0-4b80-83ce-aeb8074718ee", "sighting_of_ref": "indicator--913774a3-82a8-42c4-9938-135bcf6ccf71", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e79082-8d83-4d0e-bcc2-84c6e9ab8533", "sighting_of_ref": "indicator--518c648b-b2b9-47c9-b895-35399dfe1031", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48b90e8-f999-4420-81b6-496516ca9958", "sighting_of_ref": "indicator--fd01e5c9-79a8-4749-a5a8-153651cd64d2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa8f7e7-dbba-4aa3-b50e-763de442b6a2", "sighting_of_ref": "indicator--8a66638f-29c9-4d73-b371-4a9f5db996ad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98036e0d-d8c5-42ab-8a1c-7a295f1fde1b", "sighting_of_ref": "indicator--06f5eff7-0099-46f1-a70c-ce15fdaa9ae3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24e085a-9ea8-4cba-8bd8-08d4f3ccd21d", "sighting_of_ref": "indicator--4c8d2b0b-0570-49fe-b47a-2602e75d2884", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9071204f-5459-4f19-9e09-0cadde299f07", "sighting_of_ref": "indicator--7cdd486e-07f5-4852-8bd3-8f0b01f05e50", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98748048-fde3-4334-b6c7-36b286126fe4", "sighting_of_ref": "indicator--c7b0865a-cc26-4aa5-849a-2172c3fa55b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b323e99-e352-4035-9b03-eabaa31fe1e1", "sighting_of_ref": "indicator--06f47c97-c50b-49dd-bb46-ecd6f05fa38f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3a418f-4415-42f8-b77b-ef15542da119", "sighting_of_ref": "indicator--be9d5385-5aa1-4150-8b64-d4318e72e8e4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--441a2095-49cc-445f-94f9-0a1c71dba08a", "sighting_of_ref": "indicator--e42f3023-cffa-4132-bd0a-47d720494e0e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e1cd87-90f9-4551-a08b-b850c115246b", "sighting_of_ref": "indicator--d5a91b34-59fb-44a9-b383-d6c06f5f432e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b499bf-2ab5-4e99-adf1-de244228a2d2", "sighting_of_ref": "indicator--6e44bf40-04e5-477c-a534-d9fbf9a2ed60", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d35fc1-5677-46f4-bff2-7c6ce4aac1dc", "sighting_of_ref": "indicator--1fd8737e-234e-4bd5-8a58-05624b32cc42", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb464fc1-03e3-4b9d-bbff-6a7d95a31ddc", "sighting_of_ref": "indicator--ac550cb4-c1ef-4290-b7c5-cb19aefa2fa4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eae1d4d-bd58-41f7-b4b6-334e5cb7ecb0", "sighting_of_ref": "indicator--42136208-2ee0-4d46-a095-a65c8b685d68", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f509cfee-08ab-45e5-a7e3-4e628690c786", "sighting_of_ref": "indicator--ae56ed88-2ef3-42a8-8232-5e5e7fb85010", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa2d86a-5b6f-4cd7-81e1-2021a27cbeb1", "sighting_of_ref": "indicator--b9961867-2426-421b-b141-794a633745d5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ce83ec-667d-4be7-9f1a-e922d1c7490c", "sighting_of_ref": "indicator--8d2ce8a0-96f5-4353-a2c0-2b995f3309ac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a8f2cc-1cc4-4b0f-b11b-964885fd5683", "sighting_of_ref": "indicator--b62918be-e6a2-402c-be2d-b8335ac67054", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00f6496-e549-49f4-a836-4561a3492bcb", "sighting_of_ref": "indicator--b0155ae5-0369-4cae-9c52-f40df159818b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7968d3a-bce2-4a15-bf76-44b2c7409d83", "sighting_of_ref": "indicator--d35bf04b-176c-41cb-bf4c-09fb4e8502d2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8fbc1c4-3fc8-45a5-a84f-3c356dba80c4", "sighting_of_ref": "indicator--a4af1de8-9ed9-44cd-9f9a-e2262cd6ce08", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56bb4599-8f71-4ac2-a086-72cb7ed9c299", "sighting_of_ref": "indicator--63c95e34-40f6-44c7-80f4-68754a52371f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65383868-7827-4825-b260-ae8690b67d73", "sighting_of_ref": "indicator--c7c048f2-8e2a-46f6-80f9-5ae72b9d63d5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7b3f62-e829-4343-99d7-b88946cf7c2d", "sighting_of_ref": "indicator--6227438e-7019-40a9-a54b-0175a863b4cb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f472e7b5-5775-4ed0-a484-5559f8c6a6c3", "sighting_of_ref": "indicator--f15e3e15-90c2-4bca-9924-7fd6e0e08ba5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db745ef-49d4-4b35-9a90-9cbada5c85cd", "sighting_of_ref": "indicator--19a1212d-1a8e-487e-adb5-5d4d8538b3f1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92865642-66bd-40cc-aa94-0d99c2cdbdee", "sighting_of_ref": "indicator--9064a3b2-603d-43e1-b9fa-3bc59169ca0a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fcf471a-7141-41df-b3a3-2824400dae53", "sighting_of_ref": "indicator--9340d84f-cdae-469c-8aef-ce4a4acdd5dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7eace1-6e1f-4a2f-956c-347f574ad7ca", "sighting_of_ref": "indicator--a6066403-bcc2-4332-907a-bf63fbedcb43", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42e3cbd-e5b5-43a3-ba13-5f7876aac47d", "sighting_of_ref": "indicator--82b8155f-9ddc-4200-ba1f-2815420e10ae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2274608d-2c64-4e89-8db1-1de824430876", "sighting_of_ref": "indicator--46a45d62-49b9-428c-af46-71a7acce081d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b87c97-c62a-4a07-afc7-f3a15f7906d8", "sighting_of_ref": "indicator--73b637e8-1086-43a8-abd3-5fdd5a551f44", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af2accd7-0dc2-4889-aff4-1c77103367ae", "sighting_of_ref": "indicator--2c5bf90c-f165-4611-b77f-965787929ac9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fed03bd-787e-4ee4-861b-509fadaed730", "sighting_of_ref": "indicator--091a1183-2472-4512-97dd-cd989d3f77e1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea5bcd5-146c-4c1a-812b-c66dbece5d88", "sighting_of_ref": "indicator--3ec03154-31bd-4ea0-8ad4-5f142435ccb1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c946d0-4dd3-4523-b8b3-fbf5d98ec8d6", "sighting_of_ref": "indicator--541fa9a2-3e41-407f-a5c6-d0d427b29ed7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92b7e98-f576-4052-b8bb-a48dc969e01c", "sighting_of_ref": "indicator--a5e5420e-36b4-425a-9e64-08d3bb875c11", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1680823b-55ce-42c1-8eb6-780bbe702ff8", "sighting_of_ref": "indicator--c2b53eb9-d1f4-4a24-82ad-8658b0c9f788", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda70822-4104-4463-9032-89e486520c96", "sighting_of_ref": "indicator--24bae0b7-d402-45f4-ad16-e4bdc9cc550c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1feb6ee6-76db-4355-8f34-bf95ed5ae386", "sighting_of_ref": "indicator--67e631b8-2799-4f96-9bcc-279f6cab081a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b517a72c-1bc6-4b81-b2bb-a55fcd4dae17", "sighting_of_ref": "indicator--0516454b-d299-489b-bf13-57b3819f0f1c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8648c1ee-a4c4-4989-93b8-91bf741ee22b", "sighting_of_ref": "indicator--9a3ab4ec-afbf-4f28-9de9-38d0fbad10ef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99a4468-fc4d-4179-b692-2121aeec4dd6", "sighting_of_ref": "indicator--75b4f96d-1344-4ab0-8c51-a10598f0a10e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c22d588-d4fe-4ea0-8782-c418584dc33e", "sighting_of_ref": "indicator--7e9d7b0f-4cb5-4088-b402-f1e4c6dea09c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573d1658-76b3-4a8b-b57c-26a5147ee082", "sighting_of_ref": "indicator--d639c305-3158-41e6-be1d-77059ab76942", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f569c4f-9bcf-4422-b599-eb16980eb54d", "sighting_of_ref": "indicator--50a3db06-0eb0-4655-af7b-da17b7283d17", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f812684-f76e-47d9-9b81-65e7054be85d", "sighting_of_ref": "indicator--48e66b78-4e61-404b-a7af-9d49fda51ad5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3dd93e-1f7c-40db-9d13-80639fe018be", "sighting_of_ref": "indicator--f62fabf4-995b-47ad-a161-36a1d3dfb10b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157c6b17-6526-490f-a5d7-29d38b793c24", "sighting_of_ref": "indicator--6d2c4027-1ec6-4a07-bcca-37f0ac9fff67", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d56dd5-a5c6-4b67-9087-fa1109f82c8c", "sighting_of_ref": "indicator--1532c169-ce2f-4ec0-a4df-c8c3a67a6ed2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a874694-2f7d-4b30-b9cf-7c619a05dd3d", "sighting_of_ref": "indicator--071c02af-016c-46ec-8208-5e413136b20f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d21551-e293-4cf7-9468-579c48e28fe2", "sighting_of_ref": "indicator--dbd41eea-fb08-47e8-9d07-8ba3a03c9d50", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993886b4-73d7-4817-8408-9f147125b94c", "sighting_of_ref": "indicator--ca3f51bb-d37a-40c2-8c96-97fbdd8b2806", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9173b657-d048-4a81-9683-8b4e4193f1fb", "sighting_of_ref": "indicator--1174b27e-1bbb-40de-9656-7521a0e73149", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a038dd92-cb8f-4cda-93b3-b66873621902", "sighting_of_ref": "indicator--a4a6ff66-2777-4f6c-bd5d-9936d798ec81", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf6ecf6-e75d-4914-b523-f7e6992f110f", "sighting_of_ref": "indicator--7c7c4382-054a-4811-a026-6c3a92b9b2d1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6316b1b-69d0-4900-b0e9-45c19adb8a68", "sighting_of_ref": "indicator--1b7c8c95-6119-4d7c-a5c2-97435b2bebb0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a208c8-10ac-4532-9666-55a7bd3e8c27", "sighting_of_ref": "indicator--b9b3e283-2274-4abb-aaff-3ef3c6083bac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e98b9f1-63da-4e9e-a920-d3809c224130", "sighting_of_ref": "indicator--e2447e6a-c5cd-431f-a100-957a5871227e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8067fbc0-5a11-4841-84b0-4405a68b6658", "sighting_of_ref": "indicator--0748ee5b-bcb1-4620-96ba-b69b7a64c413", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3273d32a-8d35-43e0-857a-772c50e1868e", "sighting_of_ref": "indicator--e42dfe1d-efa5-4cff-a326-555d93944c00", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41f77c4-7ca6-460f-bd23-78e4d6b086b3", "sighting_of_ref": "indicator--a4539dcd-0d1a-4684-9339-394609bbfae8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3fdf212-4cb2-4c00-b839-e59c15543ae2", "sighting_of_ref": "indicator--bf5f758c-4a35-45e5-9db2-41be3275b5f8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a46e5d1f-c77b-466b-aa22-5c114e2e09d5", "sighting_of_ref": "indicator--5ef430f7-419c-4ce6-93be-f85c92c8243c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc5c437-f2cb-473d-9a33-10c35872fed8", "sighting_of_ref": "indicator--c6586655-0a45-4f77-ad4a-1f3cef800f67", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3cebd96-1e72-4939-a1cc-2d39c777e966", "sighting_of_ref": "indicator--cbb1f1d1-dec6-4858-aee1-5893893c3617", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6742426-5477-4a0a-8375-cf96d48dabe2", "sighting_of_ref": "indicator--ba1b9510-a72a-4ebe-91a9-dbaae90e1dd3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1896fd88-b11b-45da-a253-5851db9a61e1", "sighting_of_ref": "indicator--249bd05d-4e3c-4e69-ae41-dcc61585b787", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0753f7-60f8-46b7-a0b6-ab89e1391997", "sighting_of_ref": "indicator--fa209cb5-1524-45e6-ac81-16e628b2b964", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d564cf64-886d-49a7-af44-45cc34f59e53", "sighting_of_ref": "indicator--e6241db2-da8f-4248-aed5-05844031f203", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e5c8ff-74c2-4b98-9cbf-a0a595f958ab", "sighting_of_ref": "indicator--de49d97a-ae8e-4f30-8512-94188eb90d54", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0eaf29e-d290-498b-aff7-1f03b359f17b", "sighting_of_ref": "indicator--95c2e6a2-8d20-4a45-9b90-785cf3dc52fa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf3984fe-eecb-4d4b-8af8-44cfb80e5f45", "sighting_of_ref": "indicator--0b37b8ab-d852-4a60-b521-1fb579d87251", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21537ece-5686-4c8c-bab8-a275072de910", "sighting_of_ref": "indicator--81e553ef-3998-4751-bc03-a2cc9168b448", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a56c9c31-ae8e-4a12-8d83-11d0bc12e1d8", "sighting_of_ref": "indicator--c61d1984-5d44-4d9d-ba7e-3bd662030921", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71f1f33-826d-4ae4-8d60-819024e2947f", "sighting_of_ref": "indicator--37c0335d-45dc-4f87-9076-8da3e1bf7eff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a2ec13-e78f-4682-a1d2-f6e64e485bad", "sighting_of_ref": "indicator--acfefaf1-d149-48bf-b621-b43eca88a10d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf035fb6-fe4b-4fd0-b7d1-3c6dae763d12", "sighting_of_ref": "indicator--580f5d35-4ff0-4ea3-b301-6260b23abb0d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c60077-6ba2-4256-9d40-1d379e1cab0b", "sighting_of_ref": "indicator--7eea7ec2-d6e9-48dd-8d0b-94f954fdb283", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7825a065-e012-4d10-8899-865601dd7748", "sighting_of_ref": "indicator--36c063be-69b3-45e3-94e7-fa95126b944a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5a28cd-e08a-474b-a151-6c807d34453b", "sighting_of_ref": "indicator--9f9905e9-f2ee-4348-85fc-980c513ebf56", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0af571-6ed3-45d6-93a2-525789a012e1", "sighting_of_ref": "indicator--a87d730f-6ebe-4e69-886b-95e9f81f6c35", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--391606f5-1655-4682-8c3c-43d59fffa72c", "sighting_of_ref": "indicator--42f470eb-a7e8-4076-83d3-a5da56ad6029", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77c1c70-eb6d-4de6-8924-cdd6138f49b7", "sighting_of_ref": "indicator--12d74841-d558-4033-8239-f048d849aa0c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa37e736-5023-44fb-8a60-0dd1980db82f", "sighting_of_ref": "indicator--fbbcf38e-d9f0-415f-9486-6729e69719ec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8425ed23-ba24-439f-9c50-86292e83f96e", "sighting_of_ref": "indicator--2a57ed7c-a330-42de-baad-b1f5d622d8ab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c580146-f6e9-4d33-b6fd-45e7850edc4c", "sighting_of_ref": "indicator--edc8a625-75a5-4022-9257-ecb627715dbf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eecf3f20-7de8-430a-b1a3-7d3353c06590", "sighting_of_ref": "indicator--9c79d6d6-469c-4b9f-aaa9-35421603c61a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fdb68fe-2fe8-464e-bbd2-94ce1156b21f", "sighting_of_ref": "indicator--03af6d7e-51a2-46c0-b687-25aa5e647bda", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d70cf3-38c5-4b74-a594-66e7873f987d", "sighting_of_ref": "indicator--c83de539-97a7-4d87-b026-87183f05ba67", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227f455a-c84e-4da1-a172-4c3163ad3ef9", "sighting_of_ref": "indicator--b7738322-b8d8-4dac-987f-a14a3b5424c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09ad211-a1b2-4a18-9078-d399134a4de4", "sighting_of_ref": "indicator--8429763b-4cd2-40ee-92be-6037a9a4c50c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e66f7c7c-521b-4951-8e2f-dce48639b620", "sighting_of_ref": "indicator--7335f2aa-f671-4a7b-aeaf-206961d66034", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1733a4e0-6f22-485d-ace2-4eedbd92aa69", "sighting_of_ref": "indicator--2506b9d3-e1b3-480b-be84-6e0862ca88b2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304a7b98-3010-4afa-92f6-4d3da0ec14fd", "sighting_of_ref": "indicator--24ff4a97-5c89-4ef6-a568-ee5720790d3a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--626aa548-894a-49ae-96b2-2df4932605fa", "sighting_of_ref": "indicator--cda85248-38db-4dd2-a85a-938a357b0b02", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d4110c-bff1-414c-835f-6470aa042da3", "sighting_of_ref": "indicator--e103415e-7d08-4ebe-9a6e-e15daaf7e8b6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92fec279-0519-4347-be88-960b408bad2a", "sighting_of_ref": "indicator--ee79e79b-a04f-4918-969b-ee159dfa846b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c475fb2-23a4-43ad-830d-b34b6baa3d8d", "sighting_of_ref": "indicator--53f6a74f-1ead-4f68-9496-309ad3bf0795", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a91ba4-030e-4c5d-9b99-a135b349e632", "sighting_of_ref": "indicator--a76d8a19-c201-4fb8-a78d-f90092b724f1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549cfbc6-0fa1-4412-aab2-3a144ebdbcaf", "sighting_of_ref": "indicator--7038d7d3-a2c2-4789-a9f0-e5c597e69cdf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baaa2d72-e341-4fa3-9caf-0db2873968d3", "sighting_of_ref": "indicator--5038a073-1f71-49f6-8bad-a43a2a7489b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec29ff4-0bec-4a30-a5f7-055ccf5ebce8", "sighting_of_ref": "indicator--acc7549f-dd4b-490d-9ff4-e333678cac34", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641ef3aa-80ee-4517-84de-95c43fc1e812", "sighting_of_ref": "indicator--105695f7-342e-43ea-bbb1-fc2a0f3ae040", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4fcb5c-e9b8-4df6-b3c2-425e2ba79972", "sighting_of_ref": "indicator--bb69e863-3b9f-4be9-bc43-041223899c81", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5254cda-8b36-4645-9e28-e622430739b6", "sighting_of_ref": "indicator--c579fe4e-7194-488d-8d3e-b6d6a5ee89dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2a24da-70e8-4251-bbaa-195b0928c0a9", "sighting_of_ref": "indicator--2d0be697-ebb0-475e-afe0-610201d7e814", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb71156-531c-4621-acfa-6bef9ddc4b5d", "sighting_of_ref": "indicator--0ba4275d-0955-493a-8a6a-0f4321026890", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1661c3a-cd78-4f8f-a1fc-aebed771c769", "sighting_of_ref": "indicator--6631792d-a15b-497f-8ebb-18dbf5ca8f22", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d528dc-532c-42d5-bb07-66047e749f2c", "sighting_of_ref": "indicator--444a04ce-438e-43a5-9336-289d2952f0cd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6883b98b-8cde-42aa-a70e-60fa2858ea36", "sighting_of_ref": "indicator--658d9c7b-260a-4f2e-b29b-3a67cbf87731", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e86524-3ebd-4f52-b9cd-c4bff7351336", "sighting_of_ref": "indicator--274c7a4d-de95-409d-9d01-08a6654b15c3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c292904-7b0d-41df-bbb0-6302b153e488", "sighting_of_ref": "indicator--16d539d2-ddf6-4cdc-bf98-ae0e6c2699c9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d58f883-7b7f-4519-943f-4a6577860ed9", "sighting_of_ref": "indicator--fe963bf4-06f6-4d56-a597-7eca94a0cab4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5776c8d2-e513-4106-bab4-04afd18c490c", "sighting_of_ref": "indicator--92796bfd-f1d5-4764-819e-0aa9c44cfe52", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca8ad01-72a5-44f3-bf0d-6549e931dabb", "sighting_of_ref": "indicator--02d2edd0-9e2c-48ff-848d-8d4cda9186fe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32628914-da44-4ec2-90f5-9dede49b9840", "sighting_of_ref": "indicator--54fd7ec8-69a7-44f7-913a-6065ea08a2a7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3e7071-bf3c-48ae-9bbd-baf5be5bc36d", "sighting_of_ref": "indicator--fa048d4a-3b50-4b3c-9468-b40a22e0b4cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86c83b7-add7-41b9-be09-4aed661c4261", "sighting_of_ref": "indicator--9228321e-d95a-4970-bd01-fff7ecef5642", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acdb987d-83c1-420b-ba24-c2df38312f22", "sighting_of_ref": "indicator--eb836f39-b907-4f9a-8912-43322d7ac29c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95aaa4b2-8cf6-4561-b80d-462e154ea620", "sighting_of_ref": "indicator--3a20acef-5e56-41f7-9880-034afd3de70c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f111e1f-5304-47b6-8930-f5d4ac07c25a", "sighting_of_ref": "indicator--c8af5c73-d25d-4ef4-a7e1-c0a7db498c1a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a8f154-cdc3-44a6-994e-c892a23b5d8b", "sighting_of_ref": "indicator--f7ccedf4-8d83-4d9a-bff5-1e7922b14219", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a1c3a9-9212-47ab-b345-3c95d4953b0d", "sighting_of_ref": "indicator--120a5607-cec6-4ba4-921f-d5d10d488c4c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b96f888-a25c-4624-8b36-823f73d1ddbc", "sighting_of_ref": "indicator--fa83c3f4-e62c-4331-9f99-790700632a71", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1daede0c-eabe-4211-bb9c-6234668565b4", "sighting_of_ref": "indicator--bb3715be-0bd9-4690-bfd5-6e3ce0ceb070", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856eb62c-b025-42a8-9c64-25b78eb8c1f0", "sighting_of_ref": "indicator--a38ce775-68e8-419c-96a7-6892f807041a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194a2db1-8894-4ce0-9fb2-1ee960849bbf", "sighting_of_ref": "indicator--f2f52b18-2500-4a3a-bcb0-fa3ad97738e5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851dad1d-5342-485d-9d4e-a89ea2f41853", "sighting_of_ref": "indicator--09400afd-708e-48da-a028-7cfaff622bf3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b07273-f15f-463c-af24-9260d44832ab", "sighting_of_ref": "indicator--e5dc9c4a-e95a-43b5-b257-5d22e64b0c9b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6572d0-1f30-49e2-9349-01b1257f506e", "sighting_of_ref": "indicator--286a68e1-862e-4762-970b-01bb662ce46d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f361d13-4162-490a-87d8-31f8d20f4667", "sighting_of_ref": "indicator--074e8f1d-ddac-4536-b1d0-324640d4059e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a97c23-17ba-406c-b7b8-9dbfe65e6556", "sighting_of_ref": "indicator--905dadd7-a5dd-42df-8c44-4e072332f3fa", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2886d3a1-0817-48d5-ad8e-538805604488", "sighting_of_ref": "indicator--47b96309-1b6c-40e6-b861-2aad3963ef81", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f1cc7c6-ce79-42df-aafd-44ac8c24a0f7", "sighting_of_ref": "indicator--71eae569-d5e2-4928-b6dc-82166f0c1c3f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2e79c13-7855-4b07-896d-b07fd45962e0", "sighting_of_ref": "indicator--90162bcc-55f5-4a5e-a814-a9c9a0f2a301", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c85a04d-9d0b-4389-8d47-582ad5266c8e", "sighting_of_ref": "indicator--9183878f-9dcd-4ddf-8aa5-be56d77c8fe7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69de9cf-4ab7-4fcb-b698-256bf9dcf48d", "sighting_of_ref": "indicator--b09aa6fd-e90c-40b1-b780-924a3076f257", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6838449-6d06-4181-badf-085c8fc51027", "sighting_of_ref": "indicator--90637d21-4f39-4e09-be66-ec08f0ddc286", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a488204-40bd-428c-bd4a-33200a0949f8", "sighting_of_ref": "indicator--4df43440-ea84-4965-8f10-cdcb55e50643", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043b9b84-d3f6-4f3f-8971-c4e0b4a1ce37", "sighting_of_ref": "indicator--edcdfe73-88ea-43d5-b6cd-cafbb9557587", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2de9666-915b-43d6-aeea-ba295ddf53c1", "sighting_of_ref": "indicator--a8c0aaab-042b-4f56-a22b-020d547534b1", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416d69db-4f5b-4d32-a34b-de9ca5d5526e", "sighting_of_ref": "indicator--736b876a-9987-46ad-9225-6806be52a8a8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be3128d-1054-4980-86ce-e8d43fac29c1", "sighting_of_ref": "indicator--3f541360-c78c-44b5-a457-1115fa782dbe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1b9b68-c62e-43af-a282-1cf552ee1b1b", "sighting_of_ref": "indicator--d49f45cb-c723-40d5-b117-e3bf1c8cdfed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c91123-0ce8-43d1-b1e7-b455eb4965ee", "sighting_of_ref": "indicator--7c7b8763-e4df-4658-9389-df95c0378236", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496a258a-7dc8-4157-b387-ef03b40fe677", "sighting_of_ref": "indicator--1c8132fa-90aa-47fb-b11b-3160d3457014", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2de3835-75bf-4b34-9dcc-a4b973545fd4", "sighting_of_ref": "indicator--33c42e25-7368-4a6e-acf5-95546a35522c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa76dc8c-fb95-4be5-97a8-b77a9f9bfdb0", "sighting_of_ref": "indicator--129b0650-525f-4992-b6a8-c9a47e9d7b98", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75f3f7b-7074-43d7-b75a-cea5f80a243f", "sighting_of_ref": "indicator--129b0650-525f-4992-b6a8-c9a47e9d7b98", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03698be0-8032-42be-b060-e8ca8e66fc92", "sighting_of_ref": "indicator--88cde3e7-c34d-47b0-93d9-c5fd8eb70255", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43eb626c-d458-48ca-9b2c-048c6912f2ed", "sighting_of_ref": "indicator--e8623b73-f837-4f66-b9e1-194c7911433b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d04189-9016-461c-96c7-75fe9bc138ef", "sighting_of_ref": "indicator--4ae9e257-9adf-41a9-b0bf-8c8939a225f8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990543bd-b154-425d-ac9c-0c3a230c085d", "sighting_of_ref": "indicator--35fbc098-8590-41cc-b97b-f38db3600954", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbbe61b0-17a2-4e4c-ab01-33ec7ade8789", "sighting_of_ref": "indicator--b498d2d2-5f74-42f5-8823-78adcb216c18", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594a86fd-fa38-4096-85ec-9178fff14a4c", "sighting_of_ref": "indicator--6ba41ebb-1e5d-4666-98a0-04cef611a0b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bfa5a93-850b-4167-9b1e-05d39b16dcea", "sighting_of_ref": "indicator--d762840c-0bb0-4b4c-96d4-7ef9b173cc89", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65165e2a-746a-462f-94fd-ddf90e2671b5", "sighting_of_ref": "indicator--d762840c-0bb0-4b4c-96d4-7ef9b173cc89", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b9973d-961a-4db9-ba56-cbd296d84581", "sighting_of_ref": "indicator--7d1328ab-da8c-468c-846c-922b5b290267", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1360d602-58bd-42e6-83b5-efa58fea2d7c", "sighting_of_ref": "indicator--3785f6d3-a9df-4f3f-8c46-bfa4e4f56951", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10691055-cec0-46a1-a4a2-dc91eb493022", "sighting_of_ref": "indicator--e3ae391b-b4d0-4927-92f7-94edfce786cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b7fc894-b377-481e-b4b3-3e637956ee6e", "sighting_of_ref": "indicator--47e7c93b-136a-47ff-967e-1b65924f3aed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412fb2fd-593c-4c63-9ca0-4308ee9744b7", "sighting_of_ref": "indicator--4d6e84dc-741e-4dc5-95e3-f346111eb848", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c121ddf-8ecf-4943-b5ea-127a0517b769", "sighting_of_ref": "indicator--3935fd4e-ebe0-4cf3-abca-7822d5c25653", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc1f7b5-3ee1-446b-9031-165a16e443b2", "sighting_of_ref": "indicator--a68c0b95-e960-486d-8d4a-a76104bc0942", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a8f33c3-fbc8-49ff-8885-da1be8a02c08", "sighting_of_ref": "indicator--1edc292f-bedb-4a9c-99e6-8673936c8570", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e31cfd90-881a-44db-a93d-7d8299839616", "sighting_of_ref": "indicator--85a3925d-0fa4-4903-b0b5-c063a0f1f31c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8c51f9-1349-4306-8c9b-7451ef59d400", "sighting_of_ref": "indicator--3634f5fd-a1e3-4c5e-8a3a-2a8d762eeab1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d980043-cfd5-4be3-921f-6fe92c6e9eea", "sighting_of_ref": "indicator--f2dc2261-d752-4062-adc1-79f4c0a3adcd", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f4c651-7835-4568-a58a-3b037943b8fb", "sighting_of_ref": "indicator--a1256c5f-8b98-4c26-baaa-a536d8d140b0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee0be21-9dc5-4dd5-b04d-3828ed014ff6", "sighting_of_ref": "indicator--0acbf999-f717-4ba5-b9c0-24ae44974c6c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b60305a-16ff-47c6-a1e3-e8b45bab2856", "sighting_of_ref": "indicator--cda7cc21-99df-4cfe-8d26-ef7d97b41f6a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f324403c-0e31-4164-8dd2-3fb8a79e2d3a", "sighting_of_ref": "indicator--02f552b3-7d28-4122-92eb-dfae857e82df", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbfbc5ea-68f3-489a-a0c3-ce54bd488f58", "sighting_of_ref": "indicator--20066b3a-b7b7-4744-8460-4ab70dee885b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d48f5e20-325c-4196-9bc6-15c983905459", "sighting_of_ref": "indicator--357a6139-525f-4681-80e5-ecf997e54043", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cac451e-d4f6-4b08-bc8d-6aac1168ec62", "sighting_of_ref": "indicator--292fe75b-0d46-4792-bb0b-6aa0003bd080", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b5ea14-80ac-4736-b71a-8d0a8918ce22", "sighting_of_ref": "indicator--1440e4cf-aada-4b75-bb90-4eedf4b78d49", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52aad0a4-ef53-43fa-a8ae-374339e6cc14", "sighting_of_ref": "indicator--d373b9d2-83e6-4715-93f2-8218e18386db", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ff25ac-f52f-4815-a102-c78c0b59aea9", "sighting_of_ref": "indicator--aabd1fb3-4ed0-4757-9478-42033972e9ca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2128ef41-9c31-4b96-a1eb-c03590783db0", "sighting_of_ref": "indicator--014b48dd-635f-4836-b243-85018e487f24", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2d6d50-d439-4914-9774-1086388781b3", "sighting_of_ref": "indicator--771f46a2-cf3b-464e-8c98-30e7bd067ecc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4bf737-c758-4cb7-a187-e17f24c869cd", "sighting_of_ref": "indicator--d2a2253e-ba2f-4a1b-9495-fc4285ffff21", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458ee864-8e3c-42b3-ad0d-e635d839cc83", "sighting_of_ref": "indicator--9d723c9f-bf3c-45a9-a7cb-ce7f459a9cf5", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e967349b-d7bf-4e6b-b954-6d850967f5b6", "sighting_of_ref": "indicator--ec60b9fb-cec4-447c-b0cd-9949eb5bc73b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17fb4354-997e-45e9-a3bb-3517f3b48416", "sighting_of_ref": "indicator--ec60b9fb-cec4-447c-b0cd-9949eb5bc73b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c172fb-5278-49aa-907c-35992fb1cd8c", "sighting_of_ref": "indicator--d8380fd3-09bb-494e-8b33-1267448660c7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8dcfb84-6d79-425c-8d4d-c35a7db3c30a", "sighting_of_ref": "indicator--d8380fd3-09bb-494e-8b33-1267448660c7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0731d34e-da37-40bc-b054-66e7f267a255", "sighting_of_ref": "indicator--ba2534ba-8bd1-42b5-ad67-20703a4bcd6d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba6bcad-1d71-45b6-b390-a19acec1853f", "sighting_of_ref": "indicator--e05af24e-3bba-4ac3-b12d-ca045cab3f84", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9e1d89-4c57-4e3a-8e3c-319332856a5f", "sighting_of_ref": "indicator--e05af24e-3bba-4ac3-b12d-ca045cab3f84", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ef1fd5-f5d4-423d-9fef-7fafbf596b12", "sighting_of_ref": "indicator--668665cb-fba0-4cea-974c-40068973e70e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed24927b-43b0-44ce-adc8-3826a203cfe1", "sighting_of_ref": "indicator--bf216672-354d-4f06-bce9-6e014b85d44b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6444629f-94c4-4e6f-bcea-cac4d146e7ec", "sighting_of_ref": "indicator--bf216672-354d-4f06-bce9-6e014b85d44b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ebf914-48e6-4fdb-a7a3-a2bc271cae9f", "sighting_of_ref": "indicator--bdf9a1cb-9160-4774-84b3-b3e75c626ac0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a08b9b4-2dfb-481a-9466-14eed43afe0c", "sighting_of_ref": "indicator--bdf9a1cb-9160-4774-84b3-b3e75c626ac0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bfc208b-7dab-4379-ad52-a48f00f622fb", "sighting_of_ref": "indicator--09524fd3-212e-481a-84a7-4f2071f62492", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5739d85-a3e6-4c76-9fa1-c5b89e7e8100", "sighting_of_ref": "indicator--a5a011ad-adfa-4a7e-bc33-d7c991821b2a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3418c6c8-3ca6-4381-acb5-11d7474126f4", "sighting_of_ref": "indicator--f930f0b1-8769-4419-b080-9b854f750b4f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c586100-9771-4e6c-a472-8a38d9d30d2d", "sighting_of_ref": "indicator--6334f1ef-ffc2-4a23-a9ee-5db66ad1fcb3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32fbe357-4a6b-4575-9e47-8d5c2079b829", "sighting_of_ref": "indicator--f7c717bd-a4dc-4080-be35-30ff7bfceaa2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae214d00-5dac-4ef5-b777-d0fa993bccc5", "sighting_of_ref": "indicator--064b6c8f-c4fb-4694-a231-adac262f2eab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e1edd0b-893d-464b-a32c-6be7dd6a9b00", "sighting_of_ref": "indicator--300b1da0-acb7-4fbe-bd33-3cd9f15ac477", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e49fc8-57f7-46b8-8ad1-e5061f8d6ebc", "sighting_of_ref": "indicator--6542393b-37c4-4131-8b2e-391575dd1b7e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1929c058-2990-47b6-99bc-64dd2ddd9639", "sighting_of_ref": "indicator--ce0e8e44-8db0-4fb7-95ed-c02b54f1261c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739e63fc-9a0d-4414-a166-0821259438e6", "sighting_of_ref": "indicator--e7f2874f-7b2d-40b2-9af9-fb447c481837", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546f8a05-0e7b-49f9-adf3-8400fb159955", "sighting_of_ref": "indicator--e7f2874f-7b2d-40b2-9af9-fb447c481837", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8093ff6d-9b67-4f92-8557-99fd8ebf3ddc", "sighting_of_ref": "indicator--688c2089-8be8-41f4-8173-ca7dba2972ad", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e234e41d-00c7-49aa-93cc-b16a9c07b173", "sighting_of_ref": "indicator--fdbf3b94-5e92-4402-bc96-52c2548f089a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f31fd95-43de-4cad-a871-cc01a0017b63", "sighting_of_ref": "indicator--03a44b2f-8fc8-4478-b73e-40ca0bbaa453", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f8ea0fc-956b-4200-ac0e-fb5ece2b2408", "sighting_of_ref": "indicator--03a44b2f-8fc8-4478-b73e-40ca0bbaa453", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0764cd3-3e47-4ed5-b243-c9f0e099e26f", "sighting_of_ref": "indicator--874f78b4-2361-43c5-a37e-3053334b1150", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89fff677-040b-4f35-96e3-c9f2d62f6e64", "sighting_of_ref": "indicator--874f78b4-2361-43c5-a37e-3053334b1150", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b3808d-8eec-481a-bc71-d65fa02637c5", "sighting_of_ref": "indicator--4a2c635e-2ed7-47d5-8a9b-a4fcdc27379e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1215b629-b633-47a3-ab9d-1646df3002cd", "sighting_of_ref": "indicator--7dd8023d-54c2-4855-bc51-566e4d872d93", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a704743a-8be3-41b1-bf8c-a0ebef0b92e0", "sighting_of_ref": "indicator--a8c25574-4c87-492c-906d-34afbc889e4e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0db09a-5a53-4d4d-9cb5-b0e1afaec2a4", "sighting_of_ref": "indicator--aff3fd53-9dbd-48e2-ba5f-70fc6e13ac6a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ef8615-9973-42e4-be95-d40448d68a4f", "sighting_of_ref": "indicator--494bb863-0b8b-4071-a4ee-7f140910180d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef0357e-5718-43e6-9238-3c91b452ae3b", "sighting_of_ref": "indicator--cb0b567e-e22c-40cc-abda-0e6cfcc27747", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a2709c-7254-468e-8d5e-9c160847f39f", "sighting_of_ref": "indicator--d86d98b1-e65d-499b-8167-915a946d0f37", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c75d13-c1e0-45a5-80a6-8e6cb8086d81", "sighting_of_ref": "indicator--1753e097-21ce-454a-84a2-ecb5e671dd20", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43191bab-2753-4bd9-80eb-c5a83824149e", "sighting_of_ref": "indicator--a5748af8-1ec4-4b61-b138-38e5216c3780", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e7d5c4-0d53-48fc-b0d1-9f710028b7d6", "sighting_of_ref": "indicator--5d0502ae-cdb2-4ab6-a0bc-3729531d1c5c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61f40ab-f190-4764-9676-70d21aaa887f", "sighting_of_ref": "indicator--251ee434-a12a-4baa-beaf-eb54e11d7f50", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7746b973-0946-46ef-8e66-c75f3a42e82c", "sighting_of_ref": "indicator--de225853-ee76-4f97-a17f-19411e3dc8e3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe13dd7-e511-4d36-9ec7-b0bf00f5d08e", "sighting_of_ref": "indicator--9e0da526-c658-4d86-883a-c374dc1b1ae3", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e843d25-6fdb-401b-a6ed-b83f16c942bd", "sighting_of_ref": "indicator--b6ddfcb9-4ade-4020-8973-5e976b13457e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71cd0d21-7f1d-4f8a-8471-65e67486cdd5", "sighting_of_ref": "indicator--fc8af92d-1278-4fcf-8356-837ea59fa329", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ae5959-4567-47e9-a5fb-3589e7b7fbd9", "sighting_of_ref": "indicator--d287532e-b588-45d1-aa10-0ff9f53f52a6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392fc51f-135b-4a4f-9da3-8243d36dddcd", "sighting_of_ref": "indicator--a7b824b3-ca93-48e9-9fb9-8633691dd833", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a4c73f-120d-4975-95b8-7aa85922ca30", "sighting_of_ref": "indicator--7c0cb9ef-680c-41b0-8b18-02611d1ab3c9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--645e5b41-75c9-4b33-8f3d-6d5c1ed8ce01", "sighting_of_ref": "indicator--9159110e-04d1-47ea-a9f1-ae4999a35499", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69094c84-9291-4fbd-9940-22d003841327", "sighting_of_ref": "indicator--2b4bb510-16c1-49e8-8e0a-71ce275fe9d5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b05fc4-603e-4a27-9324-62dbbac92632", "sighting_of_ref": "indicator--7f2f8469-937c-4710-8273-e2a55a28db96", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d370b1-afed-4cc4-aace-0095b8323b88", "sighting_of_ref": "indicator--311bcd8a-655b-49a7-adc2-3cf8bc65d601", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97803d2d-772a-4476-af0c-8189df827cb9", "sighting_of_ref": "indicator--1b901ffd-2ed5-4ace-afdb-27bf2b3174bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d0b9cc4-d4a7-46ae-9e0f-682baf1be3aa", "sighting_of_ref": "indicator--ba940c65-f63c-43ce-9826-9a896eee229d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518f994e-c195-4856-a3a5-83cf7980f4fa", "sighting_of_ref": "indicator--a65e5b9e-5bce-462e-bd31-28f9d5ab4253", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fdedc23-8f6b-4f43-844b-4fc4db3209eb", "sighting_of_ref": "indicator--31db3441-d9b9-4b3b-a3aa-04969debd3ce", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae6828a-ba4e-4de2-9e54-300e7866b083", "sighting_of_ref": "indicator--33a39a45-e471-4dd3-9f70-b67f320b392e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b3921f-9734-4eef-b706-a91519d476dc", "sighting_of_ref": "indicator--e78b8502-b6db-4eb2-8f02-0e066399050b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8583f4a-3725-43fa-bde7-5e83ee193fb0", "sighting_of_ref": "indicator--40c849f9-bec5-488f-9c55-16d8d0666a13", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7fb17b-039c-40f3-96e9-74a012ae7843", "sighting_of_ref": "indicator--5be4fb31-d91b-4b19-afa3-fe53e90ebc16", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b536690b-1fc6-4db9-a898-68402dcf0fff", "sighting_of_ref": "indicator--01e998b1-c69a-469f-8a26-5c8545464711", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9733716-39f4-4295-8282-70a74a68dd1e", "sighting_of_ref": "indicator--99afedb6-c689-4b63-bec9-f739546660c2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938db798-fa40-4729-9ee4-33b0da96bc6f", "sighting_of_ref": "indicator--b3919479-0210-4528-b264-1dbec3d2df2a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a22d49-af91-44bb-ab9b-aab29313738c", "sighting_of_ref": "indicator--e7af6e8b-f10d-44f1-b4ad-2f2d943202c4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905e293d-bd2b-4636-927a-c253aae31657", "sighting_of_ref": "indicator--fe0318ee-67c7-45e4-b6f1-4b1b5c599686", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54eeafc9-92b3-48e5-934b-53df02b12c56", "sighting_of_ref": "indicator--36b78cde-995e-4073-b0a9-ad9af024ee8b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0557eb93-467b-48c6-908a-ba932e830b7f", "sighting_of_ref": "indicator--40ee30f3-5f31-472c-b622-55097f6b250c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03d76bb-9dfa-4213-8d8c-92db8d58349e", "sighting_of_ref": "indicator--09ed7332-eff6-4a87-a2fa-9d750a52cbd9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648f4a5f-9fa5-4870-85af-b691179822a5", "sighting_of_ref": "indicator--0461b545-44c0-4041-a11b-88027889835d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76eb1853-3d80-498a-8b7c-6b77858ca1e6", "sighting_of_ref": "indicator--faa79c73-a736-468b-b4dd-9e0ba3105d05", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c885447-a0fe-48b3-9bce-3ea0f612032f", "sighting_of_ref": "indicator--72f4bf3f-ab5a-42a4-bf67-18177503a818", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e07107-7cd2-4e27-a73f-701066816e76", "sighting_of_ref": "indicator--3ddba85d-bcdd-491d-a51b-9a63412791e9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf332c2-fcd0-4369-8e20-805ed39017ea", "sighting_of_ref": "indicator--9393d8dd-4dfe-4000-8f23-cf28e16194fe", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb695751-77af-4ce5-b9a5-d027de960121", "sighting_of_ref": "indicator--52d7ed60-79f8-4109-badb-844c35e2859f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b59b40-a7ba-4171-8476-66ff800d8cc9", "sighting_of_ref": "indicator--8b6cbe67-79c6-4d3e-993d-a58268dc15f5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72046b44-ba11-44d0-8f4d-233ce73204c0", "sighting_of_ref": "indicator--956f4ccb-22ba-4d2b-9b36-401df29893a7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670c28bb-1b76-48d6-8d5c-9c2629675289", "sighting_of_ref": "indicator--1c69832d-a03b-4eca-889f-015d1379a00d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc24b26-f92e-4f0d-9853-6cd490e950f6", "sighting_of_ref": "indicator--1c69832d-a03b-4eca-889f-015d1379a00d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206a3daa-4e27-4927-abdc-ae98d9268eef", "sighting_of_ref": "indicator--8abf21a1-a434-41f3-b701-168f5d243ee0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77dfb2a-71af-425a-816f-2e73d78e8859", "sighting_of_ref": "indicator--1281b029-3d15-4c9d-bbd9-4b96f272b34b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd454277-bc8a-4eb5-8315-cec2636ffa70", "sighting_of_ref": "indicator--b4bd0051-d58f-480b-8a96-bc1116b4ba0e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dcce359-e9f5-4930-bf29-b6efa1389bda", "sighting_of_ref": "indicator--ecba38ee-3539-4f7c-9ace-bff7b03b3add", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804e0428-d619-4b6e-badd-e55f64d3c67b", "sighting_of_ref": "indicator--677416c4-d328-410b-9994-d866e5fffeda", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8832d48b-5bb4-4254-931a-7bddcc7c5282", "sighting_of_ref": "indicator--d7c24785-1c2b-4e3a-a3ff-a67889b0f879", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f43aad-452e-4640-ba5d-cc6f7e202f9c", "sighting_of_ref": "indicator--a728ab6a-957c-42c2-89f5-9c1c5ab9161c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbc10c3-7abf-44f0-833d-c8cb2dd40bd6", "sighting_of_ref": "indicator--7bd788c3-b245-49f8-b5cf-dd25433b546a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11132e78-e652-47c7-bf9a-8fa6ba900ca8", "sighting_of_ref": "indicator--1cffac8a-1ace-4340-931b-27d77bb904ad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdacf759-411b-4266-b3e1-24d562797715", "sighting_of_ref": "indicator--5d6775b4-389f-4838-ba9b-8cff0dfe4d57", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d704e9f6-025f-41ef-89a6-be0bafc0f4b1", "sighting_of_ref": "indicator--ff6f19e1-9281-46a2-afb1-7fb505c7fd32", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a371771-8866-4c21-b1cb-20b03c659d20", "sighting_of_ref": "indicator--5673e12e-0122-486f-8a0b-e0d5ba3dca1e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88bed51b-adf3-4f69-9b88-7e5a4d6e9342", "sighting_of_ref": "indicator--8e8fd9d6-fae2-4e42-8419-c1cc997063bf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a32d5af-1850-4acf-91f2-f0085ef72431", "sighting_of_ref": "indicator--1540980e-7b68-4d5a-b20f-a7d34a7f0f99", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b332b83-e7af-47c9-82b2-c5e68e95a755", "sighting_of_ref": "indicator--b2a2145b-a361-47b8-89c9-76f2c7c8dd9a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fc9b19-3d64-4788-b0fe-87a669d8a675", "sighting_of_ref": "indicator--841199ea-b292-4179-a81c-db156d0de297", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f7031b-d711-4b3a-87fe-27b44a8e1584", "sighting_of_ref": "indicator--88a4483e-fce5-4ae6-b607-9ace1491671f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf3365d-8ee1-41ad-a0e8-9a1bdfc899b4", "sighting_of_ref": "indicator--7b9c89d2-8b8c-483f-bd5f-cbc350c96408", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b12df73-97ce-4ffc-be14-5e72662f93b0", "sighting_of_ref": "indicator--bfd31490-82a7-481d-9c20-b15fc8942667", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2c3971-55b6-4c90-b2b0-ee1ebdf0f395", "sighting_of_ref": "indicator--743a312b-8d08-42bb-b439-acac2fd5c30b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c026db-9938-48ba-818f-fc0032cea356", "sighting_of_ref": "indicator--20f04466-a402-4d1c-92db-bed796136311", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e78b5a-26c0-48d4-888b-a95c4ad9d60e", "sighting_of_ref": "indicator--135928da-0ff8-4fd6-a7da-371e56f9fa86", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d048126-ab58-407f-9e0a-96eb6cccdc13", "sighting_of_ref": "indicator--f4644365-2950-434d-a09f-bf98db315d44", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aba645e-ffb4-46ae-9c3a-bd148a7c0428", "sighting_of_ref": "indicator--266782c7-c477-4f2f-bb82-2c9065d201f7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b70426b-b069-4ef4-9c3d-139eadeb2081", "sighting_of_ref": "indicator--714aba11-6ce5-4d90-aa49-4b5449e97430", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365d9e4e-4f2a-4a19-8ac3-7f18f1eb270c", "sighting_of_ref": "indicator--d9e407f2-7b67-4f38-a95a-714a2043960d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207c56fd-b404-4f5a-a0ab-76435cfe9deb", "sighting_of_ref": "indicator--d9e407f2-7b67-4f38-a95a-714a2043960d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f679e53-1736-4435-9af0-4220c89c5872", "sighting_of_ref": "indicator--719d1d31-8444-43db-a737-f8838bb69a05", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2722dfa-9ec3-4fcd-bb2a-f13a5d032647", "sighting_of_ref": "indicator--255b720f-531a-4b87-b65f-5dfb62f059cd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1139678b-4e30-4f3b-9ed7-157b52b565cf", "sighting_of_ref": "indicator--e2380e31-471e-4df0-a475-dfc5c7994496", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a8d075-9239-4bb0-b630-4e40af8104c5", "sighting_of_ref": "indicator--9e43549c-3186-4de8-b4de-10c3e7c7a8a2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1c5bb1-054a-4324-9de9-8ffa756f528f", "sighting_of_ref": "indicator--3d04ab2b-2779-467e-8397-0b5ead53dad6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2e4922-07c3-4fa4-ae33-79fba01b6e9c", "sighting_of_ref": "indicator--3d04ab2b-2779-467e-8397-0b5ead53dad6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c11d6225-97ae-4530-90ca-b6a90d7b9afc", "sighting_of_ref": "indicator--8109c187-9c77-4b86-981c-81d51627114d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb135ca-e795-419b-9fa4-1fd4ade46eb4", "sighting_of_ref": "indicator--8109c187-9c77-4b86-981c-81d51627114d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127186c4-f53a-40ed-a03f-6193d50fcff7", "sighting_of_ref": "indicator--155397b0-f190-4d05-98e8-8416f2df4b99", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5179c11c-0b0b-484a-a451-e0419235cba2", "sighting_of_ref": "indicator--155397b0-f190-4d05-98e8-8416f2df4b99", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c92c6f-a53a-4a1d-bd18-fca3c790b8be", "sighting_of_ref": "indicator--c5a3aa29-2583-4c1c-ad65-f505c7045785", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82494c83-8797-4efe-9b11-8ebdadfadf3f", "sighting_of_ref": "indicator--c5a3aa29-2583-4c1c-ad65-f505c7045785", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24259230-0663-4b0b-8189-a5eb9444db90", "sighting_of_ref": "indicator--9e173fe8-3570-4281-a2f5-a1fe8162cb12", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4908c9b5-e06a-4808-a75b-f8f3c05f00d4", "sighting_of_ref": "indicator--9e173fe8-3570-4281-a2f5-a1fe8162cb12", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2baf73f1-2985-4b9f-8301-415903301cc8", "sighting_of_ref": "indicator--72f0e305-f402-41c2-b547-f591fa7cd744", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ac5138-c668-478d-a31e-e33172f6badf", "sighting_of_ref": "indicator--eb5432cd-6fde-4632-8c6c-fff1ff90d360", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776e4c4f-ee7c-4936-85d2-eaa5babd4d42", "sighting_of_ref": "indicator--030e7463-6ae7-48e4-a67e-fd2930f2ab09", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7aad0c-79d1-4915-8c4f-6da8cadfc061", "sighting_of_ref": "indicator--7137011c-ffa6-4eb1-9aed-df4002b987c8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6354c8b2-ca3f-40b5-adc3-eef467dd3fda", "sighting_of_ref": "indicator--2a2e2f5f-8229-4530-83ed-23bc6a8a1eae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b27f0be0-714e-48e3-a18e-128dd9cda013", "sighting_of_ref": "indicator--af061f82-b8d5-4943-8ae1-9a1871b2e68d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3732ebf-a45c-42d7-b2c4-3af1f5a091d3", "sighting_of_ref": "indicator--7be12b76-6790-4087-be17-4379e8918cc3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16878c4-54b9-45ae-b5f9-56ddf50631a5", "sighting_of_ref": "indicator--be9e5b38-5381-492d-acf5-4b2a6283ff79", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db63e99d-4a87-4cd2-94ad-417f04f1ee29", "sighting_of_ref": "indicator--d6ae0fc3-1df9-4d5e-938a-978b3ae2fe50", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dcfc497-0807-442f-9921-84f4792dbedc", "sighting_of_ref": "indicator--d6ae0fc3-1df9-4d5e-938a-978b3ae2fe50", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47829a0f-f9ba-44b9-93f0-0a647513410f", "sighting_of_ref": "indicator--a048ad69-29db-43d3-a511-8cb9125bd308", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96cace70-e24e-4f3a-b2ad-bd49d6f39ed5", "sighting_of_ref": "indicator--2f4195bb-2cff-4c58-9273-d8066d94ea2b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37764207-1b69-4436-b4a3-ff99e5df6105", "sighting_of_ref": "indicator--7cca568c-bac3-43c8-8c72-eb2484f76bad", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4272bf00-4a8a-4353-9aa6-af18af219e43", "sighting_of_ref": "indicator--7cca568c-bac3-43c8-8c72-eb2484f76bad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3462167-4738-4e7a-8214-8a92af4b75a9", "sighting_of_ref": "indicator--91a1fb9f-4b62-4021-b372-4cb090508cc4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603b7cfa-0671-4b4c-8aed-33a9a43318d5", "sighting_of_ref": "indicator--9194b0c7-f9b1-4f2b-a625-f48b1e3d2e92", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650b306c-d6d1-4342-b0a3-8f99963b49c8", "sighting_of_ref": "indicator--9194b0c7-f9b1-4f2b-a625-f48b1e3d2e92", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afcd0177-cae3-4493-9c5d-e758eea85d9b", "sighting_of_ref": "indicator--dbe78983-e48c-4d4b-8212-d1cc11293a80", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9861fddf-c29f-4859-bab3-5d4a784dab35", "sighting_of_ref": "indicator--dbe78983-e48c-4d4b-8212-d1cc11293a80", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1edb97d6-413f-4ec8-8946-9640d4c9c51c", "sighting_of_ref": "indicator--414d8325-a373-4f35-8589-2358863d87c5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604e2474-b489-4ee1-b457-360efcb73d0f", "sighting_of_ref": "indicator--3e263c18-64dd-4fe2-be86-f9515256e47e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a58fc6-4cbf-4c48-88e9-1404b2907db6", "sighting_of_ref": "indicator--687cbb48-9ae4-439c-8736-b0faabdb18c6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--889d7156-fc66-4e78-b2f6-32ed6574605b", "sighting_of_ref": "indicator--240fb64e-0f4d-4c76-a340-9069d3d3e2a7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e301cb-fb1a-4679-a141-beacb374292c", "sighting_of_ref": "indicator--f04bc771-e992-421a-8612-5f8aeeaee0d1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62762f7-176b-47e4-b8ba-a2de195667c4", "sighting_of_ref": "indicator--71192cea-1f5b-4114-858a-4265ec7f1a13", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f932fb90-0c2a-4842-9986-216315edf3e4", "sighting_of_ref": "indicator--403f3cb1-0f1b-4f65-868e-584b874fdc74", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6141952d-803c-4e4c-a994-72cea383576e", "sighting_of_ref": "indicator--228cf7b1-b1fd-407a-9f91-f893622b065c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e5ee28-23db-42d7-920e-5f5065bb32f0", "sighting_of_ref": "indicator--79c136a1-b47d-46c5-8e08-fb1cb7cc7858", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c33ca0c-c17e-4c4b-8efa-7f1112b66acc", "sighting_of_ref": "indicator--26465523-88a9-4ae6-9833-3d645b5d2143", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ace493-fd17-4a0a-9898-f26c713a792e", "sighting_of_ref": "indicator--3eebfd0f-187f-4c6d-839e-a02bbfb845c0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae3dd54-d314-40cd-a40c-f67280e9c50e", "sighting_of_ref": "indicator--562f39d0-acdc-41e6-b023-17483cc5f9f2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63609374-9399-4206-865d-a0c56f2d53f5", "sighting_of_ref": "indicator--e6f311ac-d279-42e0-b7b2-9dd47a99560f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ac1931-ab7b-4dab-bbdf-8e37d66dfacf", "sighting_of_ref": "indicator--1093d7e8-3407-4184-85a9-11dc1faa3559", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17300485-27b0-42bd-bfd1-8b3be94836d8", "sighting_of_ref": "indicator--4f60118f-7243-4056-aac3-d55e0ee44e2e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb5a289-1697-45e1-84d3-92bf94d25e4d", "sighting_of_ref": "indicator--ba843812-9124-466f-8b72-221c4eb0ef12", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f44a8f-2789-4eec-b0f4-c9c6761cf58f", "sighting_of_ref": "indicator--6bb99265-30aa-4e3c-8e36-beb542ebe3e4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71d03e0-27e0-4a7d-9c5a-09d5476f05aa", "sighting_of_ref": "indicator--2f038836-4aad-4f46-91cb-ec5aee684fea", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9708b836-3537-47e6-8340-b0a890759fdb", "sighting_of_ref": "indicator--af71cb3d-88f6-4b42-a039-243c482385db", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--933bde1e-6af7-4532-9313-b6fb016dd31a", "sighting_of_ref": "indicator--9508fba2-ab46-4394-a33b-65778260b0d2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b45fc3ae-7e2f-4b19-90a2-17bba258efa4", "sighting_of_ref": "indicator--e42eed29-f290-42b6-8854-6c43c97757a4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefba515-2579-4738-b5fa-bda426ce564f", "sighting_of_ref": "indicator--1944d238-781d-4330-b32b-0e4fac2a9e20", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d5f819-fc76-4f04-a714-ae20ddc2136c", "sighting_of_ref": "indicator--1944d238-781d-4330-b32b-0e4fac2a9e20", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd2416a-c8dd-4b01-95f1-71791b99fafe", "sighting_of_ref": "indicator--c30ae95e-5029-4586-b7bd-23fcaed5bda3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4883c3a-867b-4f15-937a-52ae71fe60bf", "sighting_of_ref": "indicator--7f5ccbc0-608d-4400-82e8-b86bb6a8f241", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172578e4-e159-45d3-934f-7400e500e552", "sighting_of_ref": "indicator--d6b472f5-a2ce-4e21-adf1-2833aeb429fc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5b6da6-5dd8-413d-a0f7-bad9ed83ee4e", "sighting_of_ref": "indicator--c2fe1f97-ff6c-450d-bec1-e5f7d78d5cb9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad5ffa0-fbee-4a26-a482-2bb736329a0d", "sighting_of_ref": "indicator--ab76f81c-8332-4047-8e8a-bae68a412eba", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c5ca6d-3c70-4fc0-939f-9bec60742dd7", "sighting_of_ref": "indicator--ab76f81c-8332-4047-8e8a-bae68a412eba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031adc9d-0ceb-4004-bbcc-7cae65a313d2", "sighting_of_ref": "indicator--8b0603cf-6170-47ac-86e9-0f630b64f58e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6022a961-adab-437e-94a6-61b43c4057b8", "sighting_of_ref": "indicator--21e4ec14-9f60-4e8b-850f-242084c3dc7c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba2e7f7-ecf8-4c65-8dfb-174689ca7ae1", "sighting_of_ref": "indicator--dda48543-ce19-4f78-aa9b-cf02be33ebab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2551c406-e32c-451a-aa50-6b0a96db6c0d", "sighting_of_ref": "indicator--689b575c-d9ef-48fc-b00b-3ff2d2f5549a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392c2afc-afa8-44b2-add4-f09d0ba04781", "sighting_of_ref": "indicator--6ba0b770-e65f-43d5-a6aa-173cc951fa3d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7ef883-36a5-4e5b-beab-9df5e432bf0a", "sighting_of_ref": "indicator--6ba0b770-e65f-43d5-a6aa-173cc951fa3d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa92a731-801c-4f9e-b31b-8164e4a44518", "sighting_of_ref": "indicator--5732209e-c245-4d64-bfe5-57f808ac7335", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a5b6e6-e37f-468f-93a3-a889c1d71bff", "sighting_of_ref": "indicator--741500c5-d258-4ddc-a771-d59bfe52e347", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece114b0-4079-44b2-b049-6f8b9ec8bf95", "sighting_of_ref": "indicator--cee1e7e6-4c53-446f-9a6a-e01db08f0e3d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ff128c-727d-4a51-b47d-916af592ff0e", "sighting_of_ref": "indicator--88c866a9-48f3-473c-a9fb-60377b58286e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a841e417-aa0c-4cb9-ade9-11ac619234ac", "sighting_of_ref": "indicator--68e2bea5-48a1-4f1c-8578-6c50b4261eea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617aca8b-5c89-48b5-b139-1f075b267eb7", "sighting_of_ref": "indicator--3aba49e7-a6d4-4187-a653-c4b972e03812", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf4033e-96b3-4312-8b0c-9076f0bbf266", "sighting_of_ref": "indicator--212ccbd4-7fb8-4727-ac38-6951f7dfb1ca", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cacfdf1-495d-4042-85cd-480699924efb", "sighting_of_ref": "indicator--212ccbd4-7fb8-4727-ac38-6951f7dfb1ca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf34798-a83b-402f-83a6-d7c17f11cb7a", "sighting_of_ref": "indicator--60b3fa36-fe33-4629-9c50-38bf70b217a3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1bd48f-d7db-4dc1-9f3c-baeb40d42249", "sighting_of_ref": "indicator--64e3e86f-63eb-4f7e-90ec-b7ca8bada941", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--293b8890-208a-4d6e-8188-5495791fc10e", "sighting_of_ref": "indicator--eae09df2-3d58-4130-a059-f4b0716d425c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f7deb0-ed91-4660-92f2-31105fde1ac9", "sighting_of_ref": "indicator--eae09df2-3d58-4130-a059-f4b0716d425c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf883c76-bac3-48ea-898e-6855d58b917e", "sighting_of_ref": "indicator--5219f1d8-c953-4c0b-b9a1-d43a5d9e331f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eadc68fd-10e4-4c03-bec4-f71cff1ecc88", "sighting_of_ref": "indicator--b0ad111e-87f9-447f-be3a-19e5c1721a1c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb23f7c-025b-4748-aa64-d9a905dc1b75", "sighting_of_ref": "indicator--9f3e5759-3be8-470f-9ea6-d01ffdb31295", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7ab1d2-15c7-42f8-809e-da26d3b9d881", "sighting_of_ref": "indicator--9f3e5759-3be8-470f-9ea6-d01ffdb31295", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4c2d8c-e455-428f-943f-0d4be1d0bd5b", "sighting_of_ref": "indicator--81e78025-9d9a-434c-a895-3c5b393796ea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26be7858-592f-4e48-ad12-8e384d88f333", "sighting_of_ref": "indicator--a174b049-625e-4e5f-b39a-1708cc135f47", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68feb6a-c9c9-4c25-96fc-1a2ec1ad4e86", "sighting_of_ref": "indicator--bd3feb1b-1764-4ee9-b7cb-1b0010166469", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8d8022-0900-4737-9d34-dcf82b2cbcee", "sighting_of_ref": "indicator--94c65838-9952-4409-be7e-508ac4235449", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e09dcf7-4d1d-4562-90b1-5ba30762aeaf", "sighting_of_ref": "indicator--94c65838-9952-4409-be7e-508ac4235449", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d54330-0fbf-42b6-b4ab-a30de126ad69", "sighting_of_ref": "indicator--4a1d60c4-71be-48f3-9559-3e662792573f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9665b2-4937-4d81-8769-e91546779edd", "sighting_of_ref": "indicator--8aaeb588-c0f2-442f-847d-752c16ca12a9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26bed44-22c8-4f3d-bd8e-eb4d7ba4ba2c", "sighting_of_ref": "indicator--66000558-b635-4ae6-b524-346807c115a4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97f9e94-85ec-4624-a6d9-67432e13018b", "sighting_of_ref": "indicator--66000558-b635-4ae6-b524-346807c115a4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23641bb5-aabd-4cf6-8fb4-b1a82166cd81", "sighting_of_ref": "indicator--9c2b3be5-b982-4c2c-8591-73c47695c8eb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ad6fbe-b12f-47e7-b1a9-9dedfc0b1e58", "sighting_of_ref": "indicator--3727d9aa-54c3-489f-9896-dc5a1239513b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c8f41d-3d64-483b-9e04-d4ab8e4a582a", "sighting_of_ref": "indicator--b7b5774a-4ae2-4e94-8d07-c7ee89b4889f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0d28ea-f7f8-4688-a63d-f5a4373c2794", "sighting_of_ref": "indicator--c17fe27d-fad6-4663-b183-960219d7698a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df33eae1-42e1-46d8-aaac-49ab24e4b827", "sighting_of_ref": "indicator--3ba58ebb-1947-4dfb-8920-a5fd309f5151", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c03cddc-aa87-4e7b-ad80-c8309143e9a4", "sighting_of_ref": "indicator--5b1a5de8-3af9-4967-b606-9485947a0d9c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d7c0a8-1b73-4c05-a9e4-984c4318e3e8", "sighting_of_ref": "indicator--67f05223-a108-4ee9-8aee-64f424bd241c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93922284-f62b-46df-97c8-8c01f429be89", "sighting_of_ref": "indicator--cfb7d31a-6cf8-4499-a33d-4d9a43c16bd7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53332348-22f0-41ab-8461-a482a5b89b9b", "sighting_of_ref": "indicator--6eec7b7e-d8f6-4bdf-a6ca-2d607eeabf8a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665daeb8-b280-49bb-a4fe-d75f1e0ed723", "sighting_of_ref": "indicator--dad94ef4-680e-44ba-aa90-88e9dd41037d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e270587a-e9ce-4ac5-a291-f0ef2171918c", "sighting_of_ref": "indicator--881e6d6a-2448-43c0-b73c-9dabaebcb072", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e38b11-20e8-4e06-a5c2-6f9fb4383e72", "sighting_of_ref": "indicator--65426dce-e9a6-4133-91de-004a934e5e4e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ff86aa-6055-4ab8-a5a3-a1ec1fa9aa29", "sighting_of_ref": "indicator--a37d74b2-0065-4351-8d38-3bea635fa7de", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1aaf09f-682f-4db5-9dac-c4e979c01d5a", "sighting_of_ref": "indicator--9b9509f5-65e3-4747-9022-767f2bee7d1b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f71d77c-e353-47ca-8a90-6b3198a0ad6f", "sighting_of_ref": "indicator--9ad795d1-dd69-4f2d-8833-6cb6a407e083", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816b6018-d7c6-462a-9b80-cb21bb3817f2", "sighting_of_ref": "indicator--36e5044e-aad9-4192-8502-7d95b129fa96", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d30852-30fc-4a02-97be-688a4492962a", "sighting_of_ref": "indicator--4fd090b2-8e5f-4dcd-8839-a6c16e30bd59", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--845ee599-5ca4-4bbb-b07b-0b9395da60f9", "sighting_of_ref": "indicator--e527b3b9-f5f1-4bad-b454-c8f082722299", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8a4b27-ccd7-41ed-ad2d-8c9a6800d723", "sighting_of_ref": "indicator--ab4fea0c-51d7-4fb7-975c-3717840a3f73", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2ee064-a4b0-4c80-994b-5a6f7441141b", "sighting_of_ref": "indicator--f675faa2-88c0-484b-a1a6-c728f5d2fe50", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4a4e21-7724-4b71-9713-dc1e8d6e198d", "sighting_of_ref": "indicator--4e4de851-38c6-497c-ba9d-f0787ee2f6ba", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d473605-f8f9-4e66-aac3-dbac6a95e897", "sighting_of_ref": "indicator--696af0fe-640b-4be2-841e-c262109894a0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d8e15c-8b0e-4f16-ade5-c8135741c6c5", "sighting_of_ref": "indicator--abb2437a-b9ce-41a7-8c4b-007ab4ed430f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f82980-2269-4e87-b8d4-dcf07578efea", "sighting_of_ref": "indicator--41a3299d-8e07-4673-b3d0-c74e5bc2eb2c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a851b8-fb06-4efc-98f3-91182bde919f", "sighting_of_ref": "indicator--90524dff-306a-4230-9e95-7a9667f4ae7e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdae12da-1d8e-459b-ae10-3787f5f88b66", "sighting_of_ref": "indicator--b4f6f3d7-bee5-467c-adc5-d9d682cae85b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba35ff8-ef65-4058-93d4-648ee25b5db3", "sighting_of_ref": "indicator--8c5db92e-f1a8-4b5f-bdbf-012b605a12f3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92361029-f635-4d46-804b-46ac6cdf0fed", "sighting_of_ref": "indicator--5d9a2bdc-f116-4872-9a48-581720c31117", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd84112-3e6e-4b5f-bf3e-254823e6c894", "sighting_of_ref": "indicator--41293cca-27cc-4654-8b43-d3bd4dc0a28f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5f5b05-d2c9-4b17-9855-943d310dc275", "sighting_of_ref": "indicator--091e3bd5-2e74-4c3f-a0d9-48d5fd46bda2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7459d450-c05a-4124-876b-1d1051876997", "sighting_of_ref": "indicator--1291dab7-3f58-4fa1-abe4-8adb2844b2bc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a053cf-bea8-4a99-83f6-cdcd71827ef8", "sighting_of_ref": "indicator--7a3474e1-4dfb-4edf-8b27-c65866f592d3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab759d2a-15e7-4dd7-a319-16fff123bc8d", "sighting_of_ref": "indicator--9bf20d6e-b89e-4e35-923e-35f68825d574", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d675232-8dd1-4c0c-9fbf-4734736e2c15", "sighting_of_ref": "indicator--166eea1f-63d7-4f8c-ac43-742593989352", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df12942-a8da-41c2-b870-f6227abb0811", "sighting_of_ref": "indicator--0369e1d1-ba37-46df-85c2-7dd72d437f0e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f48d23-a6be-4fb2-b1cd-3b8de895822d", "sighting_of_ref": "indicator--ab9fd6b0-1697-4dde-a9c7-bbbb12088474", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62044abf-be0f-480b-983b-ac934b7e7611", "sighting_of_ref": "indicator--abb10a72-6b65-41a4-b48b-d7ef51c880f1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887320cb-dc71-4605-99c6-b06da94c521f", "sighting_of_ref": "indicator--14de34e5-5c62-4cce-932c-f2752fd1251f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f2c13b-eb56-4516-836e-1bafb53fb0c1", "sighting_of_ref": "indicator--74de4a3b-1b01-4270-bab2-acfd4cc79a35", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae92e00-0b0b-4252-8228-05669efb6462", "sighting_of_ref": "indicator--7d47d60d-d0b5-4a20-81bf-7ab7d76c1d6a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d01eacf-0473-4b56-86da-057ebf19816b", "sighting_of_ref": "indicator--ea83cd4e-8ba5-4611-9bea-3e7592662ec1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c4c0093-58f8-4590-a316-2519ec32ad76", "sighting_of_ref": "indicator--0df2a2da-01ea-48e3-be64-9e51edb82ce9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c71a0b-cc0f-4d35-b841-71e7f4a49aea", "sighting_of_ref": "indicator--0efba5d4-118f-4580-a8ea-fef484d1fa44", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e20efb-096f-4b51-bffe-ef3a8d44427d", "sighting_of_ref": "indicator--37883de1-0a22-4054-ae5b-ff5cc7727f68", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96236291-3a13-40cf-a3a3-2933f57d7ec4", "sighting_of_ref": "indicator--d8d8da29-dbb7-4cb9-b99b-e78384757db1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8401445-de76-4eee-b6c6-18450481248b", "sighting_of_ref": "indicator--83a5b766-4b94-4953-b58c-6c2e2ecde473", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5f5d5e-fae2-49f5-ae2d-caf49c46bcd2", "sighting_of_ref": "indicator--9b0f8887-b0c2-49dc-8721-a78f3ced6ab0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7858ec5b-0039-4699-b38d-17f3b504ac57", "sighting_of_ref": "indicator--c0bc5a02-cfec-4f73-bd99-b2ffaa0cb301", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fbf77cc-d436-4637-8703-b330afde56fb", "sighting_of_ref": "indicator--bb442dbd-5ee3-4b61-9682-6a41cd63adb2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f829a89f-8c15-451d-8caf-fcb24feffbb8", "sighting_of_ref": "indicator--e474bf13-4282-46ec-801a-88e18ee21a03", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b72affba-7892-4d8e-b5e4-854f6539141a", "sighting_of_ref": "indicator--e51a69d7-8697-4fca-9086-a63b2a773b99", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53227fb-e89d-4dd7-9438-9fedb759833d", "sighting_of_ref": "indicator--8c39c738-c050-4777-b8d1-c4e800486e69", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea0b1b9-b92f-4c20-9753-6fe79d1429fb", "sighting_of_ref": "indicator--bf59b9c2-b7d7-4ac7-9db7-fe3d2b710d62", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533af53f-4efa-4c13-b77b-6ef332978719", "sighting_of_ref": "indicator--6c26f333-6917-4df5-ae50-f033a2421e1b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e33173e-5cb1-4d6f-83dc-c1e8b759145f", "sighting_of_ref": "indicator--c1b35732-ba26-4d9f-849a-aef9ac0792dc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb23317-4aeb-4f9b-811e-e407b4443ad2", "sighting_of_ref": "indicator--e0c41f67-7fbb-47fb-918b-859a5fa8174f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842c16fb-9530-4f24-8c88-6deb52222ab9", "sighting_of_ref": "indicator--3d32dd94-2b52-434d-90e8-b8bd376ab6ec", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d557069-861c-428d-b175-613ec6dbbcb2", "sighting_of_ref": "indicator--f8897d54-fd05-4732-8878-b7aafe523038", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c92bdb-c214-4418-a84b-77b2c57d835b", "sighting_of_ref": "indicator--52a23945-96d5-4f77-98a6-e4d180d209d4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266f3410-6b22-4ad5-922f-68bdb47a65fc", "sighting_of_ref": "indicator--e1c6fd21-9d75-46d0-bd5b-98ad347a0ebb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b02b18c-b26c-401f-a1df-b0f710a57c03", "sighting_of_ref": "indicator--d334219d-df54-4030-87ce-68b64cd6ec5e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0cfc0d-3561-47f6-af26-acb11721f593", "sighting_of_ref": "indicator--3336d2ed-0d8a-4de8-8817-0b00d75411fd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760f5fd2-d8ef-47b4-9c36-c126a26c6cdb", "sighting_of_ref": "indicator--70e0df13-3eab-4de5-8f31-3725f5dda9d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206bf4f1-e330-4767-a94d-0aa63acbf36e", "sighting_of_ref": "indicator--3cb1975d-9fb3-45b1-8ccd-e2141d0d8bf4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160ef30d-671e-4000-92f3-c2cd6bfdc0df", "sighting_of_ref": "indicator--9ee5eb98-47ce-4758-9c2a-cc68ba9a1ab8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea110486-ad7a-4845-a0ee-5b103d27a004", "sighting_of_ref": "indicator--81f66f68-811e-440b-a860-7806d042fb40", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05afbdf-1e89-4df7-9ec6-91617f12749c", "sighting_of_ref": "indicator--2966252d-03cb-4982-927b-e11e30a89fcf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2635ccad-7974-420d-b5c6-548f335f1b5f", "sighting_of_ref": "indicator--e4d0cf1b-a2a7-40e9-91a2-bdf02500530f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4376a59-e1b1-4a0e-8544-f87053ff70f1", "sighting_of_ref": "indicator--c0de6ed6-f459-41fc-adae-c85a4fa129b7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36764af1-b74f-478a-a5c9-1fb677b5cae8", "sighting_of_ref": "indicator--2d4c8b7b-df84-4c2e-b147-61d277063db9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c55d43a-ddc6-4266-a654-178f8a4c8f97", "sighting_of_ref": "indicator--9ee14623-0845-4a40-91c2-50a90b1c7656", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb65e2c-5aa6-420f-8be0-d0e3dcd21a16", "sighting_of_ref": "indicator--8b58e79f-906b-4790-a5d7-5e513188074e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3783b7c-fc56-4385-b0bf-675f298dfc03", "sighting_of_ref": "indicator--924a6d41-0a36-4b96-8c95-9b675f651ac4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a360d3bc-4546-4660-b48e-46fd487adbf2", "sighting_of_ref": "indicator--ced1d87b-c044-4125-8fcf-003b5b2633e9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d923f98-25eb-4f4c-8c68-4bfea03cf02d", "sighting_of_ref": "indicator--4c78eddb-8fac-499d-8fc3-457233af06fd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03005b0a-b24a-4530-bef7-a597f7aadaef", "sighting_of_ref": "indicator--749174d0-383a-472c-9460-f703c7fd666c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8825b8df-1ad4-4a1c-aebe-27bd3c708c60", "sighting_of_ref": "indicator--52f12522-f74a-4502-b1a9-b8e6e05f18de", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d2de60-072f-4a4f-bf79-9c2866a65ae8", "sighting_of_ref": "indicator--250cb467-2323-4e64-a21b-91a6b0d336c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cdb9663-60b9-4fc2-bcad-5020009db62a", "sighting_of_ref": "indicator--a4df98a6-3fba-43b7-891b-1a9509481fde", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8964e1-fe20-4c01-b3c7-54ac49df77b6", "sighting_of_ref": "indicator--5a523ed5-f91c-45c0-9db3-c0c8d2c5be3d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2120a480-773d-4418-bf53-d1b8287b5797", "sighting_of_ref": "indicator--85ee8e83-9fa0-4909-b8c9-e8fd44685774", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c266dd-6ad5-4dd7-905d-af5d0b919b8b", "sighting_of_ref": "indicator--85ee8e83-9fa0-4909-b8c9-e8fd44685774", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30614c84-f5a6-4422-8162-54b0a2c15410", "sighting_of_ref": "indicator--c5d112b8-853c-4931-b36d-4045af72826f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c23ea6b4-e0eb-4b06-b774-fc2d735d90f8", "sighting_of_ref": "indicator--c5d112b8-853c-4931-b36d-4045af72826f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5378c919-7920-4e06-9a1e-88f815cf65bd", "sighting_of_ref": "indicator--c381b238-d3e1-4788-b37a-b0032735432e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490440e0-3a43-4f3b-adc5-4c9feaa73830", "sighting_of_ref": "indicator--2f91200e-7230-42c0-996f-b3fae180cac0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3bf0dc-b41e-473d-baf2-a235364810c1", "sighting_of_ref": "indicator--a1a7274e-6d7b-41a8-9928-e447fa7b334a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ccd25d1-d515-423c-ade5-b5c6853c2cf3", "sighting_of_ref": "indicator--5d893207-e553-4468-bc2e-9f158187a639", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6b9573-9553-44d0-a9e0-5d44cfab4c3b", "sighting_of_ref": "indicator--cecbd4e0-637f-4012-bf8d-dad39d68260f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cffd544-519d-4f9f-a914-4925ad1dd352", "sighting_of_ref": "indicator--71d50c79-8ce3-4765-be65-2ff25400282b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcbd744f-05d7-428c-b26b-37be5da921df", "sighting_of_ref": "indicator--4cadf7f7-4bf3-4fe7-9b62-2967dd665fd7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea86c01-0c48-4381-a772-8b63da281da9", "sighting_of_ref": "indicator--55ee0db9-b43e-40cb-9811-5ef185b8f365", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c432c323-1d4b-4831-8a2a-5d2f508a7ded", "sighting_of_ref": "indicator--d11c50ff-8c0c-4002-94e4-e65b143eaf03", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7144e9d8-b6d2-4c83-a831-7f2b0a6e5f94", "sighting_of_ref": "indicator--f16a5b5b-eb04-473a-9058-ed537e2e4e91", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fcf8044-a4e8-4751-9348-2b439aac3909", "sighting_of_ref": "indicator--f10bf47b-23a0-4fbd-b4e9-26a190270b90", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74bc9ebc-83e4-4b97-b4f1-84820c4d0d9a", "sighting_of_ref": "indicator--1489252f-6b9e-4bb2-b8e6-2dfaad86b886", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546948ce-8b12-4cff-a379-6008054d83c6", "sighting_of_ref": "indicator--aea765ae-a50b-4fa2-9a7a-86921ada762d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635d4195-5379-4ccc-b75c-75b0a4a2db15", "sighting_of_ref": "indicator--02a56e0d-caaa-4512-9bb9-77714cef46fe", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c47733-faac-4def-91da-6a7d221e3545", "sighting_of_ref": "indicator--2605c5ac-704e-488f-a39b-1bb16add2fc0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf8b5b06-7c24-404c-afcc-59b1ae47f1b6", "sighting_of_ref": "indicator--2605c5ac-704e-488f-a39b-1bb16add2fc0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1eb012a-1609-401a-a01b-54e9e1c6107e", "sighting_of_ref": "indicator--31797419-a507-4ae7-94ad-cc294f223d18", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba65dade-8dde-4db4-97cd-977128c83056", "sighting_of_ref": "indicator--b13dba48-f647-42f4-bff5-88a9e44e2306", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfd1c34b-bf0f-4316-b0cc-2099d1ed5115", "sighting_of_ref": "indicator--b13dba48-f647-42f4-bff5-88a9e44e2306", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546584bb-2be0-4204-be74-32148145c67b", "sighting_of_ref": "indicator--ad662976-5eaf-466a-81bf-c02dd90302d7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd0f1ed-8661-4dcd-8626-02ea3f9f60e0", "sighting_of_ref": "indicator--ad662976-5eaf-466a-81bf-c02dd90302d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a88f7fa-31bc-4d27-a826-412e8b8578e9", "sighting_of_ref": "indicator--3fe732ad-5ae6-4e6d-9697-d2aae0d9639f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33556dd-3d24-489a-bcea-330cdd38e19e", "sighting_of_ref": "indicator--3fe732ad-5ae6-4e6d-9697-d2aae0d9639f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8964193d-a555-4031-bf7d-deb0c25d5314", "sighting_of_ref": "indicator--3fe732ad-5ae6-4e6d-9697-d2aae0d9639f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1448fac-9ac1-4f46-8afa-db5281209eb9", "sighting_of_ref": "indicator--4c21468a-44c3-4f69-8af9-a1cac6fdf423", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ce2963-af26-4e27-8040-1b6332c3c7ee", "sighting_of_ref": "indicator--988a89b8-d0a5-4a08-8e2a-04bb2fcf221c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b6db0f-972e-4800-a7a4-876bb7af6d0a", "sighting_of_ref": "indicator--c971ecf8-6be4-460a-81f2-4ee0cb1e9f24", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcec01a5-6ab1-478b-8819-c7b727c29963", "sighting_of_ref": "indicator--8b2e33cd-34b6-4298-9955-adfdda16dd2d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff69054-85a5-48ee-99ce-3fa6824cb3b0", "sighting_of_ref": "indicator--31f0ff58-cdaa-4c63-beb0-954c3bba7de1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b986caa-8b3e-4ac7-93e0-00b0ede1b43b", "sighting_of_ref": "indicator--86b2a2bb-66dd-4421-b164-4854f4bacc7b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3acf7ddd-1f60-4976-bba8-4a4963a7eb1f", "sighting_of_ref": "indicator--86b2a2bb-66dd-4421-b164-4854f4bacc7b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fdc524-a5c8-43d4-930d-cc11922a392a", "sighting_of_ref": "indicator--77e17f94-4287-4068-852c-e481b8735d05", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f24709a-06e5-42b2-9f02-ee27ffd2a48c", "sighting_of_ref": "indicator--637d7ea0-779a-40e7-976a-891c795a53db", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--961b5ffe-094c-4ce9-b928-3fe4a4113174", "sighting_of_ref": "indicator--637d7ea0-779a-40e7-976a-891c795a53db", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e9d2b33-bd0b-4bbf-90cf-3b830a45d266", "sighting_of_ref": "indicator--3f9378a8-74f2-4ee3-b34e-67c6cf647b88", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78d0b21-b86d-4cfa-9897-76aacf7634a9", "sighting_of_ref": "indicator--f7dcefe8-2855-43ec-8380-9090cde92348", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3944d38-9179-4c29-b37d-f6ad0ffb86cf", "sighting_of_ref": "indicator--4271d855-c4b8-4e2b-a901-38955d460ab8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea099f87-448e-4fc0-9e2a-6aff2a3dae9e", "sighting_of_ref": "indicator--4271d855-c4b8-4e2b-a901-38955d460ab8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee11369-9295-4e97-aad4-2c7a69f615fe", "sighting_of_ref": "indicator--da4f9baa-521c-4ff8-90ab-f01a1a4d5a4a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1206d5eb-1618-4166-9b6d-f45ae296ea4f", "sighting_of_ref": "indicator--769acb74-da0a-4124-9141-4b6848168898", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654c253c-911d-4ecf-a1f6-097e4821d593", "sighting_of_ref": "indicator--769acb74-da0a-4124-9141-4b6848168898", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442f247a-0680-4351-86bf-67eae759f4a9", "sighting_of_ref": "indicator--d0083438-bfaa-4604-9a17-480685efdbf6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b5a2a4-83cf-4df6-8f03-8a00f20b040c", "sighting_of_ref": "indicator--fa61feea-d042-4505-bfb0-48495b619c0b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c636b3da-c4f1-47cf-b906-17496d34d3a9", "sighting_of_ref": "indicator--fa61feea-d042-4505-bfb0-48495b619c0b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d410a3-42c3-42ee-8e84-29617f8ac222", "sighting_of_ref": "indicator--1fa8de7f-89f1-4160-8384-3c5d5a07ca0a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca8c463-8c20-47c3-8562-d144e9ef9c26", "sighting_of_ref": "indicator--4254e3d8-419c-4b46-ba6c-877fa46a0843", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4c6f2d-46a8-4706-9a8d-2ae25e0e4e11", "sighting_of_ref": "indicator--15f69501-4f06-480b-b976-bd1747b2b272", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92821d6-fe89-4d25-918a-77a34348655b", "sighting_of_ref": "indicator--908c20b8-2f6d-4d75-9853-ed9b8c03e933", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da36c4a0-e03c-4ed8-aba3-87f8557a2cd0", "sighting_of_ref": "indicator--e40b6844-8922-415c-9814-c2373ca55323", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27aeecdf-27e3-4e69-ae0e-f45cb0ea2437", "sighting_of_ref": "indicator--3f8c880a-7d64-416a-937d-38eeba57668c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2f78b7-bfc1-484c-8786-5333af9dbc91", "sighting_of_ref": "indicator--fe026521-89d6-44d1-9a45-6aca872bb6a7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4037758-93ac-42d7-834a-ee5d98b8a111", "sighting_of_ref": "indicator--49212667-81b5-4b9d-abd8-d9d0481e06a5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c58701-4985-4f9d-82ab-930ee5b4b397", "sighting_of_ref": "indicator--49212667-81b5-4b9d-abd8-d9d0481e06a5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca257b7b-0b75-4e96-bbb6-76ac3480c547", "sighting_of_ref": "indicator--4af0d6c3-9cd7-4867-a94c-31b4ee02ae47", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882966ad-84e9-4cea-9180-f9597bc38092", "sighting_of_ref": "indicator--4af0d6c3-9cd7-4867-a94c-31b4ee02ae47", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88293929-36a4-4665-8fe5-91e011a5a68c", "sighting_of_ref": "indicator--1d97753d-e362-41bb-a6be-b2754495bd4a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ae23ef-72ed-49bb-93e2-4b0c433ce098", "sighting_of_ref": "indicator--a8007169-5129-4312-8988-6e0848344136", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b1c14ec-bc9f-4370-b5d8-5e2367dd7043", "sighting_of_ref": "indicator--7ab46708-ea65-4a7b-a6ea-31b89e588af3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43cf26e1-33be-4f98-a306-8e2315c6cb32", "sighting_of_ref": "indicator--24172f62-e24c-4a48-9c52-22bcfdc92454", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9705515-4d51-4c32-94d8-9ec3a9a4ab18", "sighting_of_ref": "indicator--24172f62-e24c-4a48-9c52-22bcfdc92454", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be8d24a-507a-49db-bec7-cc42b42c0e7a", "sighting_of_ref": "indicator--7b2c5112-5bc8-4582-8dd4-7557ebd245db", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20bab7bf-f20c-4057-9d6e-e007b2bb8ef7", "sighting_of_ref": "indicator--bdb04b3b-2c4c-4b85-9e67-ea2fcf550d0c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a3f7a8-6901-488f-905f-8ccb58c93e0b", "sighting_of_ref": "indicator--bdb04b3b-2c4c-4b85-9e67-ea2fcf550d0c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd8481e-1002-48f4-881b-fd4649398323", "sighting_of_ref": "indicator--f5aa6352-89d1-4556-b371-4391c16062bc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94d0399-5d04-4621-9622-686cf527cb76", "sighting_of_ref": "indicator--a843f2fc-dbd4-417a-b7f0-ed38f7ca723c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57003f1e-c101-47da-a301-5e1e8fa1454e", "sighting_of_ref": "indicator--31c1c2e1-bfb6-48ff-9ae4-b6351ce9efe8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442fc3c8-f198-4dac-b414-5034dcebb778", "sighting_of_ref": "indicator--35e28fdc-b1f6-4fec-b288-b1801515190c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf79fc1a-888f-49b5-bbe5-1b41a4274c3c", "sighting_of_ref": "indicator--fbd398df-38bb-4ae1-a518-daf247ad19e6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4bf064e-e7d6-42b3-bda8-d1e91b12e57f", "sighting_of_ref": "indicator--fbd398df-38bb-4ae1-a518-daf247ad19e6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ec3b00-3f68-4f77-96b5-a08be0f05639", "sighting_of_ref": "indicator--5215a070-252d-404c-9de3-391fe57d79af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--982b3f02-3599-4d80-8678-8e8c15b2985b", "sighting_of_ref": "indicator--cbb98db1-6767-4046-997a-15b3d620a969", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14cf59ed-40d9-48ad-af83-bfc0561423ff", "sighting_of_ref": "indicator--cbb98db1-6767-4046-997a-15b3d620a969", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648c5a9e-715c-4e6a-81d4-87e8f000916d", "sighting_of_ref": "indicator--cbb98db1-6767-4046-997a-15b3d620a969", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df87aba-70d0-4c41-a710-97317bd28a86", "sighting_of_ref": "indicator--78ae639f-be06-4944-bffc-ace7e649226b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24cf2dfb-ac3e-4893-8df0-2231c2a128ba", "sighting_of_ref": "indicator--5be46f83-8d0b-4b24-af8c-5c44aa35e8f3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d75aa6d-9424-4589-ae11-0cd10b7026df", "sighting_of_ref": "indicator--5be46f83-8d0b-4b24-af8c-5c44aa35e8f3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c8c5a8-580c-4f96-ac4a-b0743f79c0e3", "sighting_of_ref": "indicator--a7d76b71-5234-478b-93a5-04cc2acebbce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f997a7f-8d82-4317-801f-c7d6f3edb32f", "sighting_of_ref": "indicator--5b249143-0623-4445-a6cd-af92bbc3498a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4470d0ae-8426-459f-9c1f-6790fec9dea8", "sighting_of_ref": "indicator--5b249143-0623-4445-a6cd-af92bbc3498a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f000e7-8b8c-473a-98e3-dfae567117c7", "sighting_of_ref": "indicator--2a1af84d-27ab-45e2-a428-1e4c65b2eeec", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6ef0b6-7f65-429c-988b-3e1447b6ea58", "sighting_of_ref": "indicator--2a1af84d-27ab-45e2-a428-1e4c65b2eeec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83629f9f-c798-4160-8619-aad8fe9f7c3a", "sighting_of_ref": "indicator--a4762dd1-19c5-4d05-a315-0fe588e60ad7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a547bffe-f4d8-454e-a74e-2f75110e35f9", "sighting_of_ref": "indicator--89e9fbf0-b575-419e-9c85-c9e61c2d1865", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c329885b-8568-4b44-8e1b-a7673cf3da7b", "sighting_of_ref": "indicator--04385b05-6601-4a5c-9e73-25d81d259fb2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785f63e7-842d-4e9b-83f3-c3e746420c90", "sighting_of_ref": "indicator--04385b05-6601-4a5c-9e73-25d81d259fb2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4552544-a38b-4d1d-9228-d3fab57784a8", "sighting_of_ref": "indicator--12755e23-5ee8-4547-8269-5d85a533b2be", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a45be8-74f9-4577-a648-03c968b9f600", "sighting_of_ref": "indicator--12755e23-5ee8-4547-8269-5d85a533b2be", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8f3b3f-f07f-4b7d-b917-ab5f9cd8f56e", "sighting_of_ref": "indicator--f09c56a7-ba9d-4ec7-a7b4-8840044a01fb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff37756-4acf-4e4b-ac95-bda82f01d3a2", "sighting_of_ref": "indicator--a5e1fdae-831f-4b46-b00f-8a51a0c54774", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598e85cb-a54d-4cef-be6a-ef08423245cc", "sighting_of_ref": "indicator--6cf1c5e8-54eb-444b-a733-dbeca323c616", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f248af-d91b-4eec-a3ad-d351b03d7915", "sighting_of_ref": "indicator--4f07a9be-699a-460c-9086-067c290d0998", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6141117d-2574-481c-9662-6240582b69ce", "sighting_of_ref": "indicator--32b605d3-1df2-464b-8470-61175935c8e7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b74e754-2754-4a87-8e87-970cf0d029c7", "sighting_of_ref": "indicator--32b605d3-1df2-464b-8470-61175935c8e7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7f3d8c-2eab-421d-8f34-a0177e98e052", "sighting_of_ref": "indicator--0e272cae-db99-46b1-93f2-1d4aea23f577", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3819d3-b40e-449f-955c-1d53a85d5691", "sighting_of_ref": "indicator--56a65d3f-6553-40fd-9ed2-b1c70f887c28", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0cc0d36-1550-476a-8b7b-c7b8f9ac2f5a", "sighting_of_ref": "indicator--67126240-172c-4c4c-b16f-f3a7ecce3dd4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69551198-516b-400b-82c3-2df785a7265a", "sighting_of_ref": "indicator--67126240-172c-4c4c-b16f-f3a7ecce3dd4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0623fd67-0009-41f0-9e71-7ce6adb95b3b", "sighting_of_ref": "indicator--1ea061b6-e377-4d26-bc80-c4f0f9b4cc2f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--540b583f-4c2f-42c1-a0b7-f9abdeb798b5", "sighting_of_ref": "indicator--7039ca99-450d-4d95-a2d1-14e75b68a738", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f85f97-ec19-4d1d-8e1a-7c2bf223a8ca", "sighting_of_ref": "indicator--b53687d1-a2b5-4e33-b22c-0a8bcce1a875", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0712e200-5f68-4d07-b4a5-7c4e4285884d", "sighting_of_ref": "indicator--b53687d1-a2b5-4e33-b22c-0a8bcce1a875", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee98ec8d-35ed-4ce4-9945-844ffe160777", "sighting_of_ref": "indicator--b8e4be38-6888-418c-a090-00af4fbb2b66", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a874571-0f54-414f-b5c5-08fae93e26f1", "sighting_of_ref": "indicator--d5d9b87e-8b3d-4f70-97ce-bf076c3aee90", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--216581b4-3263-4055-96ec-a22a4b9067f4", "sighting_of_ref": "indicator--88fe032e-7f53-41cb-9109-af257227d6c0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7e9e0d-1941-4dde-8a9d-694792a57889", "sighting_of_ref": "indicator--88fe032e-7f53-41cb-9109-af257227d6c0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458cbe50-5864-4c84-aca3-e61000c07c9b", "sighting_of_ref": "indicator--a698c117-e53e-473f-9004-c643065ade94", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55afa933-0ee3-4768-a82c-53b74a374eb7", "sighting_of_ref": "indicator--a698c117-e53e-473f-9004-c643065ade94", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174a2449-1c8e-46e4-8d6a-8eb22e517ed0", "sighting_of_ref": "indicator--4df99e2e-9e70-49b8-9e06-3dbdd8b3ee01", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90cbf69b-e8a9-49ed-a1e1-d337818e7607", "sighting_of_ref": "indicator--0ac0e427-82f1-4e4d-8006-932d962ef2b6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854e21d7-320a-4d46-bdd4-eb226ccc6c7c", "sighting_of_ref": "indicator--c8853459-1231-492a-aed4-2712561bfbfb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c41e1fa4-0b09-407a-a254-7b9b7cfe4722", "sighting_of_ref": "indicator--5b8fcf54-b04e-48fd-b926-c88f29921ed4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c140cc-c95d-4e0f-a3d0-f0b54578ec2d", "sighting_of_ref": "indicator--5b8fcf54-b04e-48fd-b926-c88f29921ed4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304808ed-d241-4370-99a0-b163f9baa303", "sighting_of_ref": "indicator--e33e167e-1c8d-41b3-b14c-8dbe93778d99", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878fa9fd-a116-413d-a869-277602dea11d", "sighting_of_ref": "indicator--786808c3-04f3-4af4-a63a-810ca5ea6f60", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d7303f-e8ac-4ba0-8a43-7e8a058f53a1", "sighting_of_ref": "indicator--8665d785-63c2-4724-993b-6e1988e603e5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21350291-59da-490c-8f10-90aa03cbb743", "sighting_of_ref": "indicator--84a6a7e3-edd8-4f15-ac44-02274b872ff7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e71f2d-6f2c-4387-8f1d-8145fa812bda", "sighting_of_ref": "indicator--c9d05537-35f1-4377-b4a1-6f67bfe8e666", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7821948-d75c-4397-a94a-9fbe44264f6e", "sighting_of_ref": "indicator--f2e11346-745f-4195-8fc8-b22d1a3abc92", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--827d8982-074f-4373-a855-f1d909eb7610", "sighting_of_ref": "indicator--c1009798-a1e9-473f-8eef-70e43d7800d7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb3919f-7879-41ab-ae6b-7022117695c4", "sighting_of_ref": "indicator--c1009798-a1e9-473f-8eef-70e43d7800d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f98cc69f-2f03-4892-af56-4e7c96da16dd", "sighting_of_ref": "indicator--685da8b4-1da6-4493-bf09-f3173fde0583", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d63bd0-0453-409f-ae83-bf098df28db8", "sighting_of_ref": "indicator--685da8b4-1da6-4493-bf09-f3173fde0583", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5518d63d-2e76-465e-bba0-fa8fa564d1d8", "sighting_of_ref": "indicator--e91a958e-9179-4e17-ae92-2fbf33d9045c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eaa827e-3c8f-4415-97de-a21ae151f732", "sighting_of_ref": "indicator--083dd691-5522-4941-8c15-94cac52f5a29", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027b18be-03b4-41c3-8449-38e43dfba754", "sighting_of_ref": "indicator--92d2737e-8164-4d2a-b0c1-3794d77b0cd4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f9a56a-3fc3-4a95-afe6-fe3c23dfcf92", "sighting_of_ref": "indicator--496f9757-1e18-411a-bb75-45f578027567", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132235b8-9128-4801-ab62-0244a9b78d84", "sighting_of_ref": "indicator--496f9757-1e18-411a-bb75-45f578027567", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467d5484-5ea8-4d69-839d-d040e17f8ae7", "sighting_of_ref": "indicator--a822cb51-f58f-420a-8641-5b55774ef042", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0fe0b9-d082-4b4e-9f44-7d82e6d7a84e", "sighting_of_ref": "indicator--b263c23e-6982-477e-8c9a-079f42b09a12", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eabed795-8b51-4894-9cef-33f0ecd18969", "sighting_of_ref": "indicator--36863c11-a328-43b8-9caa-fe7d2e75ba8f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aee2727-fd5d-45cd-a97f-e541d133e47b", "sighting_of_ref": "indicator--60a99177-85a5-45e2-b485-f9faf2c5b79f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c6bf47-69c5-42b8-a059-561b0cf9ae5d", "sighting_of_ref": "indicator--b2cd0eef-9072-4461-9843-e423eea42039", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3ccb31-826e-48d5-9498-82b30686c6fc", "sighting_of_ref": "indicator--96da4c92-26eb-4f69-94f0-a56b82f8a504", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665dc858-6fce-4ec9-8c09-bc6f7f2d34ab", "sighting_of_ref": "indicator--781f51d6-3798-4181-bcf9-2bceac504098", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd14524-d1fa-47a5-8a99-ca960df62319", "sighting_of_ref": "indicator--781f51d6-3798-4181-bcf9-2bceac504098", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46eee186-4ffa-4658-b8ae-b4a3a878fad2", "sighting_of_ref": "indicator--02e4b58d-216b-4cc3-a5ab-b6e9c2fe0cf2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e259b63e-c29a-47b9-9ed1-acf2c56e077b", "sighting_of_ref": "indicator--0fadab0c-3b10-40b4-b8a2-b7cfee3015b8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe32d76a-6457-4f65-9e34-6ef6e51dd2c7", "sighting_of_ref": "indicator--0fadab0c-3b10-40b4-b8a2-b7cfee3015b8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb8866a-60bc-4016-8fcd-0c8c4c5a96ce", "sighting_of_ref": "indicator--906accdc-7356-48c2-9cad-f157bfa809c4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c8acb1-3d0d-408d-b7a3-b8ca7654bbe0", "sighting_of_ref": "indicator--70399272-c91e-4b7e-a8b8-1e19c5525b4b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e52eec-a124-4bb3-bf90-a9a8bbd51abe", "sighting_of_ref": "indicator--cd22fd8d-504d-42ac-a658-6bdf18d4388e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d4867a-5a20-44ac-ab21-a073e260d9a7", "sighting_of_ref": "indicator--5be1057b-72be-476e-b606-bc5ddcc5caeb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037302d5-7de6-4886-bd06-9639f189df23", "sighting_of_ref": "indicator--3023f9f2-2f2b-4b17-95dc-179221de7915", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--035c06f8-7a9e-4082-bb4a-bf01c0712947", "sighting_of_ref": "indicator--57e20925-d5f7-4462-92a0-64182604dc24", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0405a722-f34f-440e-bf87-4c72e237dde2", "sighting_of_ref": "indicator--1f969b8d-55c8-400e-a071-dbebe9a56ae4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5280cd-f9e9-41ba-9642-642f3c066c21", "sighting_of_ref": "indicator--831aa9c5-9057-466e-b335-8414903f4e8c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07bc595b-787f-4198-80aa-e24aa38ab4ee", "sighting_of_ref": "indicator--8691dbfc-391e-4c4d-b2e6-b07c03bcc6ee", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09209f17-c2c9-499c-9d53-fe227fad6d2e", "sighting_of_ref": "indicator--8dad91fe-5c09-40d2-8c5c-bf8f1b405f43", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c9338f-8200-40d2-8ddc-6180a0e5b971", "sighting_of_ref": "indicator--8dad91fe-5c09-40d2-8c5c-bf8f1b405f43", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb087c6d-889f-4d5f-adec-bb8266e9a4fc", "sighting_of_ref": "indicator--a3b93e66-5fa0-40d9-ae3f-01ba2367e4b0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aed886f-8922-480c-aaff-e44ccb3b0c93", "sighting_of_ref": "indicator--8d1ababf-2822-4f64-87f0-3c4503510f7b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae5d691-c89d-4914-9348-40dc5b41f453", "sighting_of_ref": "indicator--a2cdf496-2c44-42bd-80a3-97e4a2462011", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87cd60ec-d909-4414-a1c2-9af6419aa133", "sighting_of_ref": "indicator--a2cdf496-2c44-42bd-80a3-97e4a2462011", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc8f4a2-6cac-4c90-ac37-297ee24294ca", "sighting_of_ref": "indicator--f6a5137d-8661-4d96-86fd-65dd64161195", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e0d931-54a6-4507-bb98-6a0f7f81d7e8", "sighting_of_ref": "indicator--76bb11e4-6bfc-412e-8fb1-2dbd96c9dc9e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a3eaa1-54a0-4a9f-b36b-540b84cce756", "sighting_of_ref": "indicator--5d22a963-09a2-4cf4-9566-d55ccba145ab", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c77247c3-dc28-4430-9e9e-8ccda0a2b589", "sighting_of_ref": "indicator--5d22a963-09a2-4cf4-9566-d55ccba145ab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80b5579-bcca-4baf-accd-98cb8af38a51", "sighting_of_ref": "indicator--b8e446d3-ce9b-4316-a519-ff280a0c2a1f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47742ef-7b18-4fb1-9af0-2ab39cf4052d", "sighting_of_ref": "indicator--b8e446d3-ce9b-4316-a519-ff280a0c2a1f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--826266cf-ef61-40c7-a4f5-83bb1bd5a689", "sighting_of_ref": "indicator--fd9fbea7-2de4-4a73-9937-e5a351b239e4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21510b77-970a-41e1-8d82-48f424195cb0", "sighting_of_ref": "indicator--fd9fbea7-2de4-4a73-9937-e5a351b239e4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dfa7d48-85b3-4523-88c0-b586664d9cca", "sighting_of_ref": "indicator--15adbdf8-0560-4f71-b166-6061dfc0d24e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2785d6a-ac6c-4adc-99ad-f7d9b46673d5", "sighting_of_ref": "indicator--15adbdf8-0560-4f71-b166-6061dfc0d24e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025d364c-1462-4c9d-ad8c-85bbb6053b8b", "sighting_of_ref": "indicator--d5177227-3c7e-4336-adb1-d20875b79ea6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80391415-6d81-4ed5-8b97-82c67b153da5", "sighting_of_ref": "indicator--294b27b8-ccc0-4dbb-8e61-025e67fd1012", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af5ce6bc-c7ec-4608-b908-40a74307b984", "sighting_of_ref": "indicator--996ed72b-9e2f-4c0e-9f30-f89269b5170d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea0de36f-8566-40b7-b4a7-b9e50fad8e2f", "sighting_of_ref": "indicator--996ed72b-9e2f-4c0e-9f30-f89269b5170d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f70781-da1f-4e3d-99a2-7c9a30a77e17", "sighting_of_ref": "indicator--634f555a-66fe-4f22-b2ae-9f1865a2df16", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec543f2e-694b-4b20-bbbd-946a861b9adb", "sighting_of_ref": "indicator--634f555a-66fe-4f22-b2ae-9f1865a2df16", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6942a5d3-cf84-4a2a-8066-5e5e4d867da1", "sighting_of_ref": "indicator--634f555a-66fe-4f22-b2ae-9f1865a2df16", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99afd933-8293-4c01-8b0e-4212c4c59b4e", "sighting_of_ref": "indicator--e15bb5e2-d563-43ba-9329-be58db58d032", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd2f8a9-1db1-44d2-a14a-b8beb316a8c8", "sighting_of_ref": "indicator--f53ed74b-d923-44b5-af44-c8b4b3fd040c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7defbfb3-61fe-4022-b76e-0173f8e47234", "sighting_of_ref": "indicator--f53ed74b-d923-44b5-af44-c8b4b3fd040c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--505b039b-9e20-49d7-bd35-1fb56af21c19", "sighting_of_ref": "indicator--b6191e9f-baef-4b09-9ecf-d646e8d39773", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c99438-236a-452b-979c-ab208c3d1212", "sighting_of_ref": "indicator--b06a3d97-1397-40ff-8f75-0ee6fbc7278f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8254142-77b0-402a-82ab-466e1f118ff3", "sighting_of_ref": "indicator--63fae94f-73a7-4879-8eed-d52c98a60f50", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb72dab3-f700-4913-954b-da7de0a23db6", "sighting_of_ref": "indicator--63fae94f-73a7-4879-8eed-d52c98a60f50", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e5efb0-c0d7-44a2-a7ce-c24e585ae561", "sighting_of_ref": "indicator--f19fbb47-636b-4127-95e8-54148d4c9000", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89399b7-b2db-4e87-9637-f3dc6f77bebc", "sighting_of_ref": "indicator--f19fbb47-636b-4127-95e8-54148d4c9000", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52490356-34bf-439e-816c-a9beed8e3f19", "sighting_of_ref": "indicator--8f6e207a-e526-4ca2-86e8-39e85f1d06bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6734ff7c-cfb5-4b57-b341-c6d3c32f6a8d", "sighting_of_ref": "indicator--65e0e07e-f31a-429b-a91b-76ce2b3d6865", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--362082a7-0482-4a51-b264-fe7cb74ccf53", "sighting_of_ref": "indicator--65e0e07e-f31a-429b-a91b-76ce2b3d6865", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42df8d11-38b8-4274-92fd-aca522d6abe0", "sighting_of_ref": "indicator--5a10e775-548f-46a4-bf2c-9750207713b3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e0c911-5069-4585-976b-1c7983cd0138", "sighting_of_ref": "indicator--5a10e775-548f-46a4-bf2c-9750207713b3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c54bd035-155a-4dd3-bcc6-3fe0a5ed1a50", "sighting_of_ref": "indicator--a114bc15-6b1f-426a-9014-f91ddf99a8ae", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec7de82-1141-4022-8798-a6687d0d1cad", "sighting_of_ref": "indicator--3dd82ef1-d02a-4925-aa2a-efe50292fe24", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f233c917-ddc9-4bd9-bad6-e92f0bc0cf02", "sighting_of_ref": "indicator--2cee78c2-1632-4118-be1f-0af8d333d88f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7802db9f-5ada-4162-bbf2-2ba6ffc04746", "sighting_of_ref": "indicator--2cee78c2-1632-4118-be1f-0af8d333d88f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8764fff4-f7ce-4890-87f0-814a960c0f53", "sighting_of_ref": "indicator--c0d12162-8328-4b40-8bf1-435f3586d09d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b8ae7b-a13c-4568-82ab-95825f2e8873", "sighting_of_ref": "indicator--317160e2-0935-4ef1-b332-cfc36efb6659", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8d883c-31c7-452d-b8ef-0cf8eab8867b", "sighting_of_ref": "indicator--317160e2-0935-4ef1-b332-cfc36efb6659", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b06bcfb-9c72-4b67-a188-ed652b5b7bf5", "sighting_of_ref": "indicator--25626aca-8847-44b0-926b-5946d15b03ef", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28ffdb7-63b7-4bce-879b-ee6a6ca1cb32", "sighting_of_ref": "indicator--25626aca-8847-44b0-926b-5946d15b03ef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682d9d65-565c-4566-8b06-db969e18b5d7", "sighting_of_ref": "indicator--178e4436-06bd-4125-b653-f089929a6eb6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8a624c-6dc1-42e4-bbb2-fc3b42fb7b5e", "sighting_of_ref": "indicator--178e4436-06bd-4125-b653-f089929a6eb6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4b8bea-3708-4032-9ac1-66fc96aecde3", "sighting_of_ref": "indicator--4ce13324-7740-4ca5-bd66-2b9b1398007b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5460043d-2e26-4719-b217-23a377bd20b3", "sighting_of_ref": "indicator--4ce13324-7740-4ca5-bd66-2b9b1398007b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee36af2-d237-459a-8e5d-370149fca850", "sighting_of_ref": "indicator--5d5fcec9-f982-432f-8219-87902ef124fc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4623d840-ec25-4f1c-98e4-ad4debd277a5", "sighting_of_ref": "indicator--bc03cb0a-165f-4967-94f9-ca735b5a794c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98babb1-7630-4360-83d6-1b2e1645c42a", "sighting_of_ref": "indicator--822b748d-26f6-46aa-8f89-5f029210c980", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29635eb-3d4b-4e97-8264-61896baf390d", "sighting_of_ref": "indicator--822b748d-26f6-46aa-8f89-5f029210c980", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b96ea7b-9589-48f3-8750-0156a33ee060", "sighting_of_ref": "indicator--86d33f8c-bb4c-4265-8a4a-fa0191d2c93d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb677155-9ce7-4b4a-9484-5d7d8fcae573", "sighting_of_ref": "indicator--86d33f8c-bb4c-4265-8a4a-fa0191d2c93d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f25136a3-fdd6-4dde-bc32-c20265a04aa2", "sighting_of_ref": "indicator--cc66dc98-0e40-4723-8449-c6f2a7e79773", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb29fa9-a68f-4a2a-8078-9d5b27dc38e7", "sighting_of_ref": "indicator--3aff2eb5-cde1-414a-880c-65df6b75c4b0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe20c62-b510-4f11-a904-038f7655bc44", "sighting_of_ref": "indicator--e31a4867-e5c6-4394-a3d1-c319f16c1326", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0423539d-9201-4d8a-8ffc-9a121830ab80", "sighting_of_ref": "indicator--4ac663f3-4bc9-422d-aefa-2ddc7522cad2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f8baf16-2e60-446b-89f8-7124179606f7", "sighting_of_ref": "indicator--4ac663f3-4bc9-422d-aefa-2ddc7522cad2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7cec92-147b-4eab-bc80-ec6613046b7e", "sighting_of_ref": "indicator--4c8c0112-f23a-43e9-b60e-c6032a458b4d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53e6d32-0c19-4e5f-884e-1c20346cf834", "sighting_of_ref": "indicator--2737a4db-e5a7-4c83-aeb9-21abb745ceee", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9795a55a-d395-4e77-a73e-0cf594b0e33d", "sighting_of_ref": "indicator--eb96070a-e569-4d78-ab58-8939f31a2044", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4cdb39f-3f8e-4018-a32c-3c56a6c67d5e", "sighting_of_ref": "indicator--65196f75-91fd-4040-8b56-ebffee151e99", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e970e42-13e7-4d31-bc30-547e236b100d", "sighting_of_ref": "indicator--65196f75-91fd-4040-8b56-ebffee151e99", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f45ba1-81f4-44b2-9112-ce0c411f9ade", "sighting_of_ref": "indicator--9ff5abcc-e648-400f-8a99-67ecaefe58a8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c7ade4-84ea-4b55-84d3-db35028e16e3", "sighting_of_ref": "indicator--9ff5abcc-e648-400f-8a99-67ecaefe58a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b6fa62-f898-4b29-9be6-d6bf84676749", "sighting_of_ref": "indicator--c74b54d7-4c94-4d8f-895a-4e125fdb46cc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8cdd50-ea6d-4125-817d-73098ee14a54", "sighting_of_ref": "indicator--c74b54d7-4c94-4d8f-895a-4e125fdb46cc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25bccd87-d0b1-49b1-b549-ca0a233ad6e9", "sighting_of_ref": "indicator--c84042e1-c2ce-4695-8266-b79b35cb669e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718780f3-58be-45f9-8247-32293d6ba21c", "sighting_of_ref": "indicator--a4db4d60-3d92-41dd-b400-0691cf7242ba", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025e5ac0-0dd3-4ecc-ad18-81ff3e9e1bbc", "sighting_of_ref": "indicator--a4db4d60-3d92-41dd-b400-0691cf7242ba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65604bd-41da-4a45-a6ea-9bae998779f2", "sighting_of_ref": "indicator--98a187c7-2882-421c-b3ef-d7a696916222", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4a3ccb-2e47-4865-8854-2e7eda93e61c", "sighting_of_ref": "indicator--a6018e76-cd10-4e51-b4e7-8e5df84e5714", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3193e90d-9fe3-4a55-88ef-36f4a0e8af78", "sighting_of_ref": "indicator--a6018e76-cd10-4e51-b4e7-8e5df84e5714", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b247aa-cb12-47cd-bf73-4a9a345aca59", "sighting_of_ref": "indicator--9160d2d7-4c92-41f1-acc5-0f35260d0fc3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e5fb93-6e88-4485-8a06-49ff3dcf42ae", "sighting_of_ref": "indicator--efaefdca-81e0-46a9-a9dd-291303f2fce0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5f2a5b-2c46-456c-b887-2cab291055cd", "sighting_of_ref": "indicator--efaefdca-81e0-46a9-a9dd-291303f2fce0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cfa3702-bd4a-46c3-b030-a2da9a15dd5b", "sighting_of_ref": "indicator--3997c8c7-721f-4983-94b8-a448c99604e9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c848c3b-1e44-4787-a638-41bcc06c4658", "sighting_of_ref": "indicator--f4874f62-11cf-4efb-ad57-d096054b0c6b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef99cf15-cdba-4652-ab95-99fde5db14fe", "sighting_of_ref": "indicator--f4874f62-11cf-4efb-ad57-d096054b0c6b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f428ed1-98f9-4d86-a1e0-a7bd8d32c9a8", "sighting_of_ref": "indicator--6622a0db-3b03-4e90-b279-875c8ac1ee92", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9890c5d9-4dbb-49bb-b394-f21bdba25491", "sighting_of_ref": "indicator--6622a0db-3b03-4e90-b279-875c8ac1ee92", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032dfb12-bbdc-47ae-8836-dc17a3ecabd4", "sighting_of_ref": "indicator--69596178-8bd2-4d43-bdab-bcd3d03433c9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea79025-4378-4589-8613-8941b0199366", "sighting_of_ref": "indicator--69596178-8bd2-4d43-bdab-bcd3d03433c9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--845a375a-3bfa-456a-95dc-ace6d3057e37", "sighting_of_ref": "indicator--34ec8047-3737-423a-aa3e-491e9f1da6fe", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35839bf6-5c30-4f67-8e75-4667a35f5c78", "sighting_of_ref": "indicator--397ac733-34e8-44ea-8554-a0ce08ab1712", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b727b19-e472-49c5-b405-9c64602c7f30", "sighting_of_ref": "indicator--d3ac1cec-3647-4108-8689-e9af0a7d4fad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87edc76-5aed-4403-8e77-1e1ad12eab83", "sighting_of_ref": "indicator--5976ab17-7bca-47a4-b9e7-d97e2c2f617d", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e547f1b-3c45-4476-98bb-693fc080505b", "sighting_of_ref": "indicator--c875f8c4-dceb-4135-812a-b5aa1ded729c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b342cc3-43c9-46df-be7c-fa9af95a3830", "sighting_of_ref": "indicator--64e09e8c-4186-4341-be8e-f66d69b9b6cd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1099a70-9b09-48ca-8e9e-5fb87b135417", "sighting_of_ref": "indicator--c5501f12-da1b-4703-bac6-eb56da45dfba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3492dc5c-2914-4414-a2cf-2d7239eecfe9", "sighting_of_ref": "indicator--552b222a-817a-4605-a23e-075d32a88135", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c26d4c0c-c7e4-483d-b148-9f180e03382c", "sighting_of_ref": "indicator--4d96c5b1-97d6-4d4a-8d4f-7790ec63497f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3599b6-4fd5-4443-9bad-830f1d82e37e", "sighting_of_ref": "indicator--37641d9d-0b2a-4bfc-8fae-667512c4db90", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e1a5050-910a-4386-b6e9-bc06283c0e88", "sighting_of_ref": "indicator--37641d9d-0b2a-4bfc-8fae-667512c4db90", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530e30b1-772b-4436-b952-9623891dbd1a", "sighting_of_ref": "indicator--86902854-6d9d-46b3-96c0-05db97cf2b3d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aadc9ed8-c8a2-4e1e-ac3f-44979ea0ef6a", "sighting_of_ref": "indicator--86902854-6d9d-46b3-96c0-05db97cf2b3d", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d181958f-63d7-4ae4-aa3f-7a7e9efe4fd3", "sighting_of_ref": "indicator--86902854-6d9d-46b3-96c0-05db97cf2b3d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c34864-d395-4b26-8430-d78547e635cb", "sighting_of_ref": "indicator--043c14eb-19de-4f19-b7f6-c7b756e7e1a0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e894a3bf-cc31-4970-8d8d-2e6a88001dd5", "sighting_of_ref": "indicator--89e00a1d-06b4-4968-99a8-f61ef5de5a63", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c44a41a6-6a34-4271-902d-f83f703e1946", "sighting_of_ref": "indicator--ddfc605d-34e4-4cd6-8c3b-477a951dc707", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ad638a-54f5-45fc-ada6-47a991e882d2", "sighting_of_ref": "indicator--709e5222-a53b-48de-8213-0fe861339dce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1713d80c-6045-423f-ac00-f687e677fc75", "sighting_of_ref": "indicator--83680346-b129-484d-9d08-df446fdf0610", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e15444-44eb-4d18-8a11-6daa94d3a33c", "sighting_of_ref": "indicator--83680346-b129-484d-9d08-df446fdf0610", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1229da-c7ff-49ff-89e3-33cc79eff727", "sighting_of_ref": "indicator--80a01a6e-f00d-437a-ba17-d719dd92cedf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fff1b39-5a4b-4728-a685-2065918dc0c4", "sighting_of_ref": "indicator--80a01a6e-f00d-437a-ba17-d719dd92cedf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d63b57b-aed1-405a-a142-b7686fd68350", "sighting_of_ref": "indicator--347c72a9-e511-4ade-b251-65e517690f99", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be812490-4780-4ad4-bebf-4476eb810c00", "sighting_of_ref": "indicator--347c72a9-e511-4ade-b251-65e517690f99", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc739c9-1758-437a-8e21-ea756896c826", "sighting_of_ref": "indicator--28869e11-b515-4edd-ad04-19fd8fb9f822", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95017a2-b720-4e37-a284-6f1fbc71d85a", "sighting_of_ref": "indicator--50e53881-e321-4d65-9734-2bb28654c174", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a224355-55fe-477f-9b55-4bd14acc2486", "sighting_of_ref": "indicator--50e53881-e321-4d65-9734-2bb28654c174", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f58555-4ec3-4ade-9006-5820d055af91", "sighting_of_ref": "indicator--7007a00d-4e9e-4911-b23a-6b6e28d9f5e8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262a6e86-3043-4c24-9046-894a4b902e1b", "sighting_of_ref": "indicator--7007a00d-4e9e-4911-b23a-6b6e28d9f5e8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1adf47b1-298f-492f-89f2-48dfddd942f2", "sighting_of_ref": "indicator--625e7e17-0efa-41de-bf82-654fbc0bf524", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--931439d1-9a13-4b9a-ace3-292f469c0461", "sighting_of_ref": "indicator--625e7e17-0efa-41de-bf82-654fbc0bf524", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304273b0-2ee9-4b22-965f-fafc642104d8", "sighting_of_ref": "indicator--23b49f50-e89d-4289-9afe-5c7cd3c5077d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36157244-79b5-43e1-95af-b466644a2f3d", "sighting_of_ref": "indicator--23b49f50-e89d-4289-9afe-5c7cd3c5077d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899b7852-acd7-48f2-a4f6-9376cfac8d6c", "sighting_of_ref": "indicator--28a945f7-efb3-4075-9086-e50aa70a3d9f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe19559-543a-404f-ac2c-3fc781cb151c", "sighting_of_ref": "indicator--28a945f7-efb3-4075-9086-e50aa70a3d9f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b688226d-a994-40e4-b18f-0502e51f8d7e", "sighting_of_ref": "indicator--d855da53-7250-42e0-b0b4-c0f904a44be9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8a4535-e526-41d2-b831-c2c17d322612", "sighting_of_ref": "indicator--1395026f-59d9-42ad-9190-5e4a02997f2f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed5b900-450a-490b-a215-6374e638ae9b", "sighting_of_ref": "indicator--94b0fb41-b595-4b86-b1d0-d5740a310e1e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b115c2-60cf-4907-9870-f9b023b2e35e", "sighting_of_ref": "indicator--66e4db8e-1c92-49bc-a96a-65543377226c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed6d7a2-7de9-4c86-b97d-03c557113f38", "sighting_of_ref": "indicator--7d609a51-dd6e-402f-b49b-a275345ddff0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28f88a3-d416-4092-b923-36b4b0671120", "sighting_of_ref": "indicator--d205133a-c3ae-4e5c-9059-f507578fc753", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--916635f0-6793-4267-9f77-03a1e10c5526", "sighting_of_ref": "indicator--f66420dc-a360-4e4e-8b17-a321526ea565", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a753d8-a329-42c8-8d99-171e2e76648e", "sighting_of_ref": "indicator--0ed4da7c-675a-4028-9ebb-74f195ee5c01", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3243b312-af86-4679-8d59-daaaa6239f70", "sighting_of_ref": "indicator--2843468c-509c-4d56-ac57-3e05b214d8d6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--908437c6-b355-4a1b-8359-692fa7f247d0", "sighting_of_ref": "indicator--3e91a6fb-a345-40c2-9ef9-7978916aca0f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee231f5-500e-4c06-ac46-8cac0dc1a29b", "sighting_of_ref": "indicator--d25f7090-19ee-4ecd-8a3c-9714f9a9b19e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c442d5-7b5e-4ec9-be46-8a9245cc8782", "sighting_of_ref": "indicator--16209542-2927-4c83-91c9-d70075fed42a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba227a4e-76f3-4c55-b322-942351a4507f", "sighting_of_ref": "indicator--208a2c6c-93ca-4e88-a68b-2497ad07cc01", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b579ba9-96cb-4007-9497-1f0abe94b381", "sighting_of_ref": "indicator--e831a8b0-1edd-403e-9f05-6ec2cc3b1bc5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5530603-dc9c-48cd-8de9-2827f3d76c0e", "sighting_of_ref": "indicator--265b203a-0633-4c40-8a26-d8f3087823a5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3520b5ce-1963-4022-9115-cd96eb1a5607", "sighting_of_ref": "indicator--14ff7183-3a0b-401b-bd9c-2df2b7c01fcb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93047bc4-4644-4b93-9939-902ce956045a", "sighting_of_ref": "indicator--82945118-e44a-45c3-a232-6a075c3b2fa3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc46811-ca16-4e3c-8d49-0fd9eb3548ef", "sighting_of_ref": "indicator--5c8a95d6-acdb-4d4b-8091-b4d61d9705af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba62f04-d792-4b7f-b7c1-479000389482", "sighting_of_ref": "indicator--99c10acb-4851-4ffc-bad0-4638b7def1e3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b0869d-dc04-4a49-95cf-b2eae506f5b0", "sighting_of_ref": "indicator--0a99d580-d388-45d0-9932-49d0db579a7c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--395fb994-d41e-469a-a659-e0c2e640aab9", "sighting_of_ref": "indicator--6108f772-b1ce-4e67-b2ab-8572e1deda95", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9acafbc9-3edb-4e04-98ba-c9c80b1f48e9", "sighting_of_ref": "indicator--fcd3bff4-6397-4586-8f96-4843a24f8fb3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f354cbc-2f77-43e0-9075-9ffcbf367e72", "sighting_of_ref": "indicator--e09dd95d-4069-4d16-9082-e9259a1f8228", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b10d5a6-da1e-44b0-9720-0a6318e352b2", "sighting_of_ref": "indicator--d9e1e9cf-fe6d-4d52-ac4d-de529278a2f6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d9b361-6c49-4d10-b442-50b714ace950", "sighting_of_ref": "indicator--d15beec1-e009-4276-9577-1b00cb666805", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4061fd68-231e-430a-b8bf-d9166039efeb", "sighting_of_ref": "indicator--25496c55-7db0-480e-99d3-e46b3d0097f0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd3912c-a23d-4fb8-91cc-7af7d46eaca2", "sighting_of_ref": "indicator--6f9c7a5f-6e08-49e7-bda3-fbf11ee11c3e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194ab460-20fd-4377-b315-572604a52e11", "sighting_of_ref": "indicator--d00eff2c-aebf-4158-bcd0-e66350d508e8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aec7c4b-4f91-4bc7-8b99-07217117314b", "sighting_of_ref": "indicator--7b6fefdf-ba19-446a-875a-4410c9fa5a4d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6533df7-7b6e-41c7-aec8-d5f106d53720", "sighting_of_ref": "indicator--42aec68c-7ed0-442a-8158-b7068248cd59", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31f824f-5b61-4dc8-8901-3fade50b050f", "sighting_of_ref": "indicator--a753eb9b-bf2f-4e59-a31a-037d707f1266", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa5f86c-889b-4a5f-88b3-e80a7cae3c07", "sighting_of_ref": "indicator--bfb29508-5c9c-42c9-baac-e5689e757768", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c0cc43-4618-42b1-969d-41427048c085", "sighting_of_ref": "indicator--bfb29508-5c9c-42c9-baac-e5689e757768", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a162dc5-f26b-4ca9-b3ef-f34bc810e932", "sighting_of_ref": "indicator--f4ddb299-a553-4b6b-a8e3-888cd18b6472", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac7df8d-6626-49e1-8d94-6053ae2a3dd3", "sighting_of_ref": "indicator--07aa3c5f-c9a7-429d-afef-fed8f54a2760", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a5d345-e337-4e3d-bf5e-bce79b71c505", "sighting_of_ref": "indicator--6b2d8ede-5b31-4ae7-ab5d-97f430d5a5ff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca4cf63-d063-4626-9452-1ba624245595", "sighting_of_ref": "indicator--add0eaaf-efa9-4e33-8e14-572bd2d5c03e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47225db9-7940-49a6-9a6c-5ebb766fbe77", "sighting_of_ref": "indicator--06035ff6-c240-4451-80e8-d411e8421dd7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6dc158e-f89e-46a2-b206-7c1798f512b3", "sighting_of_ref": "indicator--06035ff6-c240-4451-80e8-d411e8421dd7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c449a7f3-a37f-40f4-9546-14b5776e2520", "sighting_of_ref": "indicator--042ae120-9410-4461-9916-dfbc5ecd7230", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866ece39-bf5a-40bb-8434-1fc8a4cbdefc", "sighting_of_ref": "indicator--aea68c63-5b0c-4752-bb7d-968e4471c64e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d21d3723-c96c-4389-b5a1-0514687dc9b4", "sighting_of_ref": "indicator--b74228db-3293-4b54-b0c7-eaa126d16eb3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9bdd916-6121-4c3b-b9f2-c0560b660284", "sighting_of_ref": "indicator--6e06f76c-f182-4472-b92e-21db65964444", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460b2d46-535a-4d15-bad8-74afa790dc5b", "sighting_of_ref": "indicator--52f4b76b-61aa-4820-9a04-1fc7cdc503a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84dbee4e-9f5e-4557-a407-737e3d82f7d6", "sighting_of_ref": "indicator--437892c2-7962-454d-a73e-04bf8abf029d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54cc31c1-09f6-4cc7-9220-52fcebbf871d", "sighting_of_ref": "indicator--4aa3f2b2-393f-47eb-a3c2-c17a37cbfb2e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990f0d26-bc7a-4fd3-a210-da387505fb0c", "sighting_of_ref": "indicator--2991416c-d85c-4b11-a544-36f78e7b98a2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af2e90a-2a12-4576-bbc1-5673b3df53c9", "sighting_of_ref": "indicator--4a955cea-d0e0-4451-ad3a-612976dc26bc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e4b886-4a69-4efe-8ac6-34f95067c234", "sighting_of_ref": "indicator--bc024494-0b8d-4f35-91bc-69cbc8de4ac7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d48086-cda5-4ac1-bf31-53de27320162", "sighting_of_ref": "indicator--bc024494-0b8d-4f35-91bc-69cbc8de4ac7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56fa65a7-ac57-4397-bf9c-ea5733b39de8", "sighting_of_ref": "indicator--a0477f54-5340-4360-b5ba-bab6ca9615cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5390806c-481f-452e-907d-99607c8cffe5", "sighting_of_ref": "indicator--c499c754-8815-4a0b-86f2-8ec26bae88c0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9bdb608-6943-4c5f-bbf3-c3f71592bca2", "sighting_of_ref": "indicator--336009bd-9564-45b2-a97f-3127e672dbb7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71328570-cfde-48e1-b680-26c9824982ce", "sighting_of_ref": "indicator--77056832-6246-48e1-934b-8225a0abc9ff", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a26dc7-e588-482f-b94c-5337e8e8179d", "sighting_of_ref": "indicator--ab29ef8f-46e6-47e7-80d1-462ad10707d6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7fd244-5847-4ae2-abe9-4f0e5a98718e", "sighting_of_ref": "indicator--f46eda84-d4b7-43de-93eb-f3b46a481896", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b72aae2d-1e01-43df-902f-b515fff421f9", "sighting_of_ref": "indicator--8fa88ec7-bfa0-489b-849a-472ef6ea03ba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fde0910-3b2d-48ce-9287-2c21e544a4c8", "sighting_of_ref": "indicator--2eafde6d-e705-4688-a992-86c5d6c4e3c5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad393d45-556b-4d56-b273-c96e1bb7830e", "sighting_of_ref": "indicator--b187439c-af0f-4653-91ef-06b9461fb211", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f32fc7-dcf6-40de-9b75-b116da2317cf", "sighting_of_ref": "indicator--29f7903c-ee00-4445-b2b4-f5758e5c9c1a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e88a7067-67f8-4af3-a8e7-acc1d419ce89", "sighting_of_ref": "indicator--82ebb8cc-4e16-4258-9bf3-173c4359d73d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f77db0b-59c1-4780-9aff-e1159fad54ef", "sighting_of_ref": "indicator--7e015229-f4e9-4e10-88a2-8b1fe64e5255", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c063896e-7472-45e9-8255-9936a430d2c6", "sighting_of_ref": "indicator--2b6cba15-b739-4db8-bdcd-3838b9b27136", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47fd1100-b7be-4e45-93be-b3b882d29b72", "sighting_of_ref": "indicator--35b1d234-6aec-45f2-9ccf-63ea38c5308e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e1b9fe8-4ada-406b-8d9f-dae28dfc2195", "sighting_of_ref": "indicator--202af74f-f5b0-4de2-87b3-b6737443902e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7e26c9-ad2a-48ec-a91a-bc9a0a3243ac", "sighting_of_ref": "indicator--4dcfa208-3317-42a4-a1f4-432c3929301d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--367d8778-fe53-4cf2-90a4-b200cfb81ff9", "sighting_of_ref": "indicator--3188db7f-3828-447d-9606-30aba9a45b9f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a49b14a-575d-4890-ae49-35ea6dc75111", "sighting_of_ref": "indicator--bff6dcf4-0fea-45be-ab7a-44c1b402a055", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad841776-9072-4ad9-83b6-a60262cf5b36", "sighting_of_ref": "indicator--092937a9-3d59-4af3-8102-683e76462af2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdcf0005-34ae-433e-be2e-4214275e9c1c", "sighting_of_ref": "indicator--ac531232-fe42-4f72-b1f8-af4e3d065bef", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb2fb41-0a55-408d-9576-371d77584d41", "sighting_of_ref": "indicator--c3b582dc-376d-41c2-a208-31e1d246101b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dddb9a7-f0bb-4b70-b361-00470d9b1ad3", "sighting_of_ref": "indicator--4146bd80-b1ce-47d2-95c6-64f0bef09d1a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bacf91a4-d92a-4124-ba37-ab5160f70a35", "sighting_of_ref": "indicator--9ec7c6dc-6152-4bbc-a36b-78c82167d29d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2033e2-43f4-4d2f-ac8d-5cd67873d702", "sighting_of_ref": "indicator--1c7f94b1-da39-4915-b38d-88f416e54f8b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154b50c9-ae09-4ae4-b22e-148e56df111e", "sighting_of_ref": "indicator--be53a39d-6fd4-4137-bfb3-51d683c79589", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08519808-3127-4ef1-8391-5dcef5b41d51", "sighting_of_ref": "indicator--b76cb7e3-bf4c-44e7-b8ed-6f1de91a3f5d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c79f05c-df0a-4c11-bd15-726e7fda1d1f", "sighting_of_ref": "indicator--b76cb7e3-bf4c-44e7-b8ed-6f1de91a3f5d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273b9f8b-d5e8-4d98-8811-0174cd9e7aa2", "sighting_of_ref": "indicator--cd6d7d75-6ad8-4e22-ac8b-4784a1fb72c1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f388342-f9e0-4e4d-8c65-5e883f002154", "sighting_of_ref": "indicator--67bcb682-4542-4e8f-8af0-0e6460680f2a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7494cc96-b8ab-4f51-afa2-72424c0d01e1", "sighting_of_ref": "indicator--c6f93f1a-65a9-4985-9549-ccbb4e23e95a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849f8cb9-808b-4152-afa9-65dbb940602c", "sighting_of_ref": "indicator--0485fa76-4ef9-4e9a-8ea9-968623f739d2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c879205e-4899-41ac-b090-eabb245771e6", "sighting_of_ref": "indicator--970bbd1b-7f20-48a9-a936-9dddf86e3957", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ae2c41-fc0e-4a63-9d13-df4f7fb42fa9", "sighting_of_ref": "indicator--cfb7b14a-8619-4c36-9e93-1c5c37f7bc84", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c96e809-db9b-4682-b10a-fedd7b3ba242", "sighting_of_ref": "indicator--4ea5141b-91f3-4c00-914d-bf6657bfcefe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948f402e-35a7-4f5b-82cb-baa0eb161416", "sighting_of_ref": "indicator--0df165d6-a151-49bf-9476-080cccf63f21", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59eeb2ba-e316-4878-bdc1-50ca68b2e6b2", "sighting_of_ref": "indicator--3c214a61-83b0-423b-819d-b5f4d4fb9b72", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7b45b5-18d0-41b8-8b46-17be804d780f", "sighting_of_ref": "indicator--bf0d2165-f8d1-4698-8bb2-92f5d419d86a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15ee0c8-26db-4384-8cfb-2f460d42e122", "sighting_of_ref": "indicator--9876d99c-ddb2-4830-965e-4db26bbc666c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d806bc-451e-4334-8e83-ae1dcdd27d3d", "sighting_of_ref": "indicator--5f40d34b-cc20-4e54-9360-d8e62b582c03", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3adcd6-7cd0-4d66-861d-8d6348d9e112", "sighting_of_ref": "indicator--859bf0d6-2728-4a19-bd1a-23fadf60d9a7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7965a656-1bf6-4ee0-a664-0a8b2b0da9b4", "sighting_of_ref": "indicator--d74dd596-940d-4f4f-bc62-656230a83530", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a2fd66-3701-4f94-bd3c-e1d9a0927ef3", "sighting_of_ref": "indicator--0161ed5a-62ed-429f-a27c-c24548a11687", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4593d6-8cc1-44ef-8e51-939f19a451af", "sighting_of_ref": "indicator--40eea41d-9c7d-4110-9884-627419520612", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01c24d8-e0f1-443e-ac9f-607dca9290da", "sighting_of_ref": "indicator--45ca02f1-5a76-4358-a454-dd0c757daec6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed047bb-98dd-4732-b0a9-10d865959735", "sighting_of_ref": "indicator--0d0d37d3-5af5-43f8-a36a-ed6b2c1aeb5c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ef78a9-681b-43ce-ad33-6b6467ad5b01", "sighting_of_ref": "indicator--f1331eba-2259-41b4-a946-3ca7c2c5188e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7caec0fa-bf93-465d-8c76-1f4fd09f0232", "sighting_of_ref": "indicator--9ffa3c82-cd2e-4591-8760-22f813d53f53", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ff4061-aca4-4d86-bb5d-65d26224f714", "sighting_of_ref": "indicator--9ffa3c82-cd2e-4591-8760-22f813d53f53", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a2c012-aa1c-4681-8c47-a1695fd81be4", "sighting_of_ref": "indicator--584337d0-d3fd-4388-afcd-c1bda6f6642c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2876cd8f-a2d3-42a9-89ed-43c21fe56bb4", "sighting_of_ref": "indicator--b4316408-3d15-4b08-9436-efbb0f8e03ab", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d86ff3a4-0503-42c8-a1e5-2058b37a5d6f", "sighting_of_ref": "indicator--b4316408-3d15-4b08-9436-efbb0f8e03ab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a489d4e-4e0e-4892-a564-4ce3eb404262", "sighting_of_ref": "indicator--7d9b9aca-97eb-4be9-b43e-dc83beafa938", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262843bb-fbf0-4505-b0a2-44e979669bbe", "sighting_of_ref": "indicator--628131a2-cbb7-4069-8251-c62247f2e8e1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0066a34-2716-45c2-ad60-7586d0c6eac3", "sighting_of_ref": "indicator--4ce6996d-d909-41e7-8a1a-ca279ac1a8ad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66ab70b-84bd-4f3c-a6fe-cafddc397c93", "sighting_of_ref": "indicator--fb693101-cb00-4860-ac4d-62cab1177b0d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77eed809-7949-4492-8ebe-1405b62bc858", "sighting_of_ref": "indicator--fc5804b8-7218-4efa-9a0e-cfae4c6706a5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb548a79-eaab-44fa-9b33-8f9c97394425", "sighting_of_ref": "indicator--7b6cbcf9-8204-4e62-b04f-a224327d5aba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973c940e-aee1-4a37-af42-57e5e6f3b870", "sighting_of_ref": "indicator--ad5c07ff-b5bb-487c-a484-83b53fc2d7be", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e09e3d-5325-4dd3-b768-41ca749f5e90", "sighting_of_ref": "indicator--97da6497-1481-449b-868b-cd08fcaf18cb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11070421-36d6-4306-b01d-4cf3806ce33d", "sighting_of_ref": "indicator--bffe2092-d215-4330-937c-fe7130bd59a7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a48fe2d-62fb-4fb5-a879-4e148bba9ca1", "sighting_of_ref": "indicator--21083830-b98e-4763-936b-c09ac5f407f5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a0da2e-174a-43bb-a10d-2110fe8fb251", "sighting_of_ref": "indicator--9bb7f0c9-27bc-4564-aab5-06706b7f0644", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa79572-db09-4bc3-b5b6-2cefd38e99ff", "sighting_of_ref": "indicator--e6ab19ff-017d-438a-85f4-719de17dee06", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ff4760-fbbd-4620-b5a8-e809f7198fc4", "sighting_of_ref": "indicator--8a705067-f9bc-4f9b-bdae-c18b053fcb0f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94ab41e-f8d9-49c9-8b03-30c0954f6885", "sighting_of_ref": "indicator--fd58bf1b-b23c-4097-855a-f4fdb23cc087", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2cdf49c-a15a-45ac-9f4d-dbc551330dfa", "sighting_of_ref": "indicator--23a379b6-ff10-4156-97fa-a2853026c2d9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476169e6-fa3e-4cd3-80b0-a33becd5f83f", "sighting_of_ref": "indicator--79398e0c-f688-4eda-bd46-c18367b326ad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa950b0-5d32-491b-ad3e-0dac24d292d5", "sighting_of_ref": "indicator--5ce58b89-8b35-445b-b684-b9372aa46539", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9445846-62d3-47a8-b084-f92021a5f37c", "sighting_of_ref": "indicator--c5c9c1c3-24f1-436a-9248-32346ac635e9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d96f77-ec0c-4667-b78c-3a48682733aa", "sighting_of_ref": "indicator--f591778a-7e07-49a9-abc6-d263e4878bba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c00794-526c-4963-b1ca-6ac10ce57a7f", "sighting_of_ref": "indicator--f48e21c3-94cb-4a16-84dd-0196f328ee18", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f73b6f-4ec4-4140-a1ec-bb05259bbd6c", "sighting_of_ref": "indicator--d2a74953-5238-4e33-86f0-9af7c1365f06", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274baad4-3ba5-46bd-99be-c01a1484b126", "sighting_of_ref": "indicator--51a24a2c-8d61-4128-8fd1-d61a4e5408ac", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af6fea4-a79a-4c34-9f23-f0d90f765749", "sighting_of_ref": "indicator--51a24a2c-8d61-4128-8fd1-d61a4e5408ac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcef5cca-a615-44da-9e01-c4ca7484d904", "sighting_of_ref": "indicator--283d402e-07a6-4992-b6a0-1a2e6ec10bf7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c26da16b-d70c-4262-aa05-e27ae99cb8d3", "sighting_of_ref": "indicator--b0a71f1f-c6a3-4ae1-a320-b823c13608dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10bf008e-23e6-4a2c-800c-0c4f7ad61645", "sighting_of_ref": "indicator--3b68c977-4d6f-4b0a-9e0f-ce0d7b630323", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f012f25a-b17c-4eaf-83b9-0c53d0fe91d3", "sighting_of_ref": "indicator--3b68c977-4d6f-4b0a-9e0f-ce0d7b630323", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c73fa4-2c32-480a-bc68-7dedcdbc45f1", "sighting_of_ref": "indicator--4095a076-0e02-4084-95a0-1997c196d801", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee1a376-7432-4c48-83d8-612e6a01e7dc", "sighting_of_ref": "indicator--ec1b2569-c96d-4f1d-873f-16eae3239369", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c9372c3-7c09-4323-9448-085f0f588e58", "sighting_of_ref": "indicator--40e02ed1-b52a-4d9d-b273-f8d3d2ff5522", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5931c34d-ed9b-4f80-a9e0-645bd5c9caa9", "sighting_of_ref": "indicator--2263bd52-fd8f-4cbe-be02-549635fc41ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3376b42-112d-430f-a30f-98e84620eac7", "sighting_of_ref": "indicator--2dfc7062-f46d-4559-9bfd-5285e028cf88", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4acadf35-2088-4ef1-a2d3-8aa480e22f15", "sighting_of_ref": "indicator--2991a6c5-45cb-49f4-afe5-d6a740fc3e51", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8cb4e3-412e-44a2-b6ae-51e5e920782c", "sighting_of_ref": "indicator--536e93b7-c4a8-469a-b43f-23350a36afbc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61579849-574a-43cf-9143-f552665ba70d", "sighting_of_ref": "indicator--0b588589-ed39-4f14-974c-8dffa6c46953", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a15df44-cac1-4d8e-b6b0-c01c0459f3fc", "sighting_of_ref": "indicator--c8e3abbd-e92b-49e3-b1a3-b6ca935fd295", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973f547a-acea-4c7f-866a-af71ffb85da9", "sighting_of_ref": "indicator--44107e47-3b21-499c-8673-423734b7de7e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1990bd04-e406-4878-b6d5-d55ad6c77582", "sighting_of_ref": "indicator--6583cf79-7db7-49d1-964a-e1ffcf15e86a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e3c1050-bc70-4cbb-a9ab-a70442d22581", "sighting_of_ref": "indicator--d3c735a7-eeee-48f5-9de2-840003f13fdd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e245ec0c-e3b9-4451-8c49-cbbc5ef4d5a5", "sighting_of_ref": "indicator--f76a0753-745f-4285-8648-a04272a38e78", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e523d18b-2524-462f-8c42-cff2823efa19", "sighting_of_ref": "indicator--0885fe62-75fe-4fed-80b5-baedc14bd910", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc6c42e0-8936-4048-a00a-371543955798", "sighting_of_ref": "indicator--71b59afc-482b-4b4a-abb7-0bdcb587a7b5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50110fd9-83cc-4766-8983-04481543cfc1", "sighting_of_ref": "indicator--0579e466-2b8f-48f9-8f1e-471261c4bddc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c17bd1-85b6-4786-b1eb-781d04267cb9", "sighting_of_ref": "indicator--e4e7ea57-b00a-4eed-8742-11edf99ab6b3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d063fa-5c33-4661-956a-c89cd727cd35", "sighting_of_ref": "indicator--b26fa915-9bba-4073-9e3a-9fca43c28b2d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7586e5f-44c6-434d-843f-921484a54954", "sighting_of_ref": "indicator--2054261d-1ef1-4061-b86a-22034f69ac64", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b57b1f-b282-4045-b640-6c5b38f88884", "sighting_of_ref": "indicator--bfdb7b1e-8d48-41fe-87a7-ecccd6625b40", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb72501-b787-4044-a742-59fe163a6250", "sighting_of_ref": "indicator--bfdb7b1e-8d48-41fe-87a7-ecccd6625b40", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29f7e79-f732-42f8-97bc-1e8b5b0ec7b5", "sighting_of_ref": "indicator--15ff7803-913c-40ee-819e-43f9784e9b40", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675ae486-aef0-47f3-96cc-5e362d314cfb", "sighting_of_ref": "indicator--d43169b0-55ad-4a0d-935c-d1d923abde47", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e085d19-6436-4f91-bffd-e98519157691", "sighting_of_ref": "indicator--22963feb-edc7-409a-9bd4-65d14fdabbc7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c18549-52a5-4286-9130-cf58d750bfda", "sighting_of_ref": "indicator--6ff5a47d-74ad-43ea-9cd8-b8af97fb715d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0585fb26-b065-480c-be15-420fa03351ed", "sighting_of_ref": "indicator--b17282b9-4cca-40b2-94eb-ea8ff97f36a0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a110c70-b71b-4602-bcf5-52e38ebbf30d", "sighting_of_ref": "indicator--272d96e9-9ffe-4d04-abc2-f2e326696418", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc6c4f9-d191-40e0-af5a-e5f7262b345e", "sighting_of_ref": "indicator--1c7ca280-a858-41ac-8ad2-ec7902f21368", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b6524c-fa42-4c36-affa-633d975037b7", "sighting_of_ref": "indicator--0c62426e-7336-4ab8-a2e6-95f0239119d4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daac02a0-9961-47c7-8fd8-eca33778c827", "sighting_of_ref": "indicator--0e23e424-c414-4f38-b7ed-db4c405ad60e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346f1635-66e9-47d7-9080-69ea27fde95f", "sighting_of_ref": "indicator--3fbf1782-4c9d-4a26-8591-3bc9e8811d28", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a14666b-fbbb-4249-954d-e101301b3974", "sighting_of_ref": "indicator--1907acc0-2600-437d-9c4f-2c8c05d82a87", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92866dbf-c823-4eba-b180-dc830e79d167", "sighting_of_ref": "indicator--1a5a8cb6-ae10-4805-8449-5e3977e48e1f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a388cd68-818a-4371-b739-7a1f521150ad", "sighting_of_ref": "indicator--acaca2a2-ab80-4a66-ab7d-20a411b54aaf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af63ca3-365e-4db1-81bb-803a8b0c3986", "sighting_of_ref": "indicator--7c0535e8-8081-4c7d-badb-3c098db5dbb6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93ca9ce-cc34-459b-a521-49caaf22b01f", "sighting_of_ref": "indicator--6a4e8504-9e71-46c8-a67c-a8d7bd6f593e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f3d0a8-98a7-4300-96ea-086870c33423", "sighting_of_ref": "indicator--41ffaab0-4f87-4247-9469-07426eabf44d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc0f478-ae8e-4836-b63f-d02cc71f95e5", "sighting_of_ref": "indicator--688f6a42-6ae0-413d-a1fc-d9a415134fc9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f3520e-483b-4992-9e58-9e209882ae91", "sighting_of_ref": "indicator--2a82b2f4-cc48-4aa3-903d-eb348f947eb9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a118d8d3-927d-4e39-9211-54fb84a7dadb", "sighting_of_ref": "indicator--419d7316-2465-4eea-8520-42bd5f0b20ef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74da536e-709f-4ef6-9721-14e63503b0a2", "sighting_of_ref": "indicator--26afa421-afa6-45a0-b8cf-fb1a4d1752b6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e54fdf9-681e-42e7-9421-beb9efe20252", "sighting_of_ref": "indicator--0c4b3882-1cf8-4e46-b6db-e84763a680dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725b6a39-5321-4b12-9e9f-1d77ca1ca410", "sighting_of_ref": "indicator--44e381bb-f7b1-4d0f-ada6-58112affe157", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4ea5ba-21a8-4b15-b5dd-d68a072b5047", "sighting_of_ref": "indicator--b0f1e6fd-1cee-4022-a5be-f39fe3a7702f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb96e7a-d595-4c6c-9573-b31950093668", "sighting_of_ref": "indicator--fa4a808a-b126-4411-92f8-59fd1e642939", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9fd5bf-1a6d-46ca-8ead-3272785fc465", "sighting_of_ref": "indicator--9950a2e6-bc36-48df-9ad9-07c07475359b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8ede61-5c04-47d5-be72-b930665ec7b9", "sighting_of_ref": "indicator--172e6b6e-cdc4-4a28-959a-6e759a2cef25", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5004aca3-1906-4cd5-bee3-be6f3364c1dd", "sighting_of_ref": "indicator--8b215c1f-20cb-45b2-a192-bafe506560b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ecf118-e4c9-49d9-b716-45d7a166bc5d", "sighting_of_ref": "indicator--92fece5c-6291-42da-a007-4a96c008acf8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4122f347-98bd-4fc9-9f13-c0d5ca1daf01", "sighting_of_ref": "indicator--994957c2-5259-4cf6-832e-340aa28f4ae0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094baad2-8648-474b-a8ef-48845f104c2e", "sighting_of_ref": "indicator--9e2bdd44-a6d9-4488-b1ee-b32ae2782fa1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e482ee0c-8c76-45b8-bda0-f691233b98ef", "sighting_of_ref": "indicator--8ae3885c-810f-4a89-8dab-dc8dcd8aa562", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1203969a-9bd1-48a9-a5d2-76d3a34d9e65", "sighting_of_ref": "indicator--6fd9f41c-0636-4f0e-a99f-0dd7b288cdb5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec261ac-f1b0-4f31-93e2-ce27cb830fca", "sighting_of_ref": "indicator--7022d6fa-4f87-4079-9497-8828c133536b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53af1f2-f12f-43ea-a12b-9a7c77486c88", "sighting_of_ref": "indicator--088a3c22-8697-43ac-9b7a-b04e0d3d19f8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1456409e-8062-4674-9728-e237eeca538a", "sighting_of_ref": "indicator--033a9c17-37c9-447d-bf38-124494bc16f8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7872bf0-c47d-4324-a004-e1107c5971e0", "sighting_of_ref": "indicator--d617287c-3a8d-428e-96fa-bc8ec8d05205", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb077589-1f72-46ae-9d4d-6197383f5b17", "sighting_of_ref": "indicator--3f535a7c-9840-4ef0-b69c-36a26be06f9b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d296bdf1-2f36-4b71-82e4-884b2018c1c4", "sighting_of_ref": "indicator--3f535a7c-9840-4ef0-b69c-36a26be06f9b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d620fb-e74a-4697-accd-7173b284d610", "sighting_of_ref": "indicator--83573fbe-2229-4c91-8d15-a374f532e1b6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51335bc2-dbe2-447d-8757-dd4c5d6a2457", "sighting_of_ref": "indicator--b8c5b3b7-1ada-487c-8c9b-d96faa538c22", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3dd26b-c3ae-4fdd-9b65-b2457c2fda5f", "sighting_of_ref": "indicator--c45620c1-ca0b-4341-962c-d6f0e5232cd4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--226ff60a-20d9-40a3-b6f1-899dc2efa94f", "sighting_of_ref": "indicator--0a43105d-cfe2-4058-a2ae-247f23441752", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9667eae-f3c5-49c3-bee3-1a13323538a5", "sighting_of_ref": "indicator--4dc4527d-7e1b-41ed-b8f0-3daffa6d9267", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d380ca5-5897-458b-9852-a5be0b37db50", "sighting_of_ref": "indicator--b58784f6-35ca-435a-b0a6-8d443f658579", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34c53e7-b705-42dc-86da-11a2b72736d0", "sighting_of_ref": "indicator--a803106b-7e31-46df-8890-04949318161c", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0274b378-7348-4d59-bd71-bc5d3d85c2fd", "sighting_of_ref": "indicator--1d1dd656-5cb2-4c9c-8c98-2218ac81f414", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a47ece5c-557f-4baf-824c-e43f384d0bff", "sighting_of_ref": "indicator--36a5c1e7-2427-4ce6-b98a-9fd486c49ab2", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e465fec-f305-47a4-a218-48ed113ee1d6", "sighting_of_ref": "indicator--9f6bc5fb-009c-4f6f-a9f6-1dd6f99f9178", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffdb6220-f191-4297-a5c8-4eb05c619e0a", "sighting_of_ref": "indicator--9f6bc5fb-009c-4f6f-a9f6-1dd6f99f9178", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--135e8fca-3937-4bc2-ae62-1b8f8172cf31", "sighting_of_ref": "indicator--9dcb25a8-9fb5-4376-b844-08613ee4f717", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34e76d6-03e7-48b6-8d0b-16f6a77fd688", "sighting_of_ref": "indicator--9dcb25a8-9fb5-4376-b844-08613ee4f717", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9be714-3e9b-4cb1-8b55-ac8761c8e2e0", "sighting_of_ref": "indicator--30f36bc0-09c4-47a5-8f5e-47a07fcc7428", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db67d9a-4d15-43b4-9be9-de6f8aa67a0a", "sighting_of_ref": "indicator--30f36bc0-09c4-47a5-8f5e-47a07fcc7428", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd92774-64e0-4e3f-a2f2-cfb8fbaa3604", "sighting_of_ref": "indicator--79a2fb43-a40f-4c24-83ab-ec246c842b02", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f27e218-3cc2-4105-b402-41b218916799", "sighting_of_ref": "indicator--1b227259-4d9c-4dcf-a5bc-18a786af06a7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09cd0d83-937f-4a9b-a58a-d346acdbad94", "sighting_of_ref": "indicator--beff18b6-c4fb-43c2-9a7a-de8ad4000c97", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa137f2-6287-4dc1-8b32-661863b68b0b", "sighting_of_ref": "indicator--8bfabc29-f9e8-4b44-822c-74e1f0854d80", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997c668f-24ce-4e18-80c9-de25c719a219", "sighting_of_ref": "indicator--48bdcc3f-8968-46fc-8441-ca27251c520d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97911ae6-f54c-4e11-83be-23776db80014", "sighting_of_ref": "indicator--1adee40e-37df-41dc-9772-7e4e141a5628", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8fd8e0e-aabf-44cc-a824-797f558cd8a2", "sighting_of_ref": "indicator--f4cad929-92dc-4288-b2b5-8e4b27d2b611", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8b8a1f-a2fe-4aa7-9991-0ac003cd7ecc", "sighting_of_ref": "indicator--55893e76-c032-4fd8-b7b9-ccde81ef1766", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb5621df-e32e-4d15-afed-34ff78677a12", "sighting_of_ref": "indicator--cd540a3d-4e58-400e-9c0c-fab652ad30bc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877c0f6c-973c-4ab8-80ad-f61822a1e0b0", "sighting_of_ref": "indicator--014cd658-6751-4a32-8c13-016650e703b8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c625b9-4ffb-478b-9138-63cb2b7c8ca5", "sighting_of_ref": "indicator--014cd658-6751-4a32-8c13-016650e703b8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5016c5-2585-4009-b0a6-9e23b90b4448", "sighting_of_ref": "indicator--bf4564f6-af69-41e1-b002-986503e864ab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51cc48b-c139-451b-9c3b-eddd388f7e6d", "sighting_of_ref": "indicator--bf4564f6-af69-41e1-b002-986503e864ab", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a878977-1e6e-4f24-ac0d-659963eb4503", "sighting_of_ref": "indicator--bf4564f6-af69-41e1-b002-986503e864ab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96478379-a045-40a7-b905-45f0aab85d40", "sighting_of_ref": "indicator--d851fdb2-6551-4cf8-880e-6fa2192fb956", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd7b364-2272-4ab1-b907-9e1148449335", "sighting_of_ref": "indicator--d851fdb2-6551-4cf8-880e-6fa2192fb956", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe8744a-f820-4feb-b84a-5e48cea88f1e", "sighting_of_ref": "indicator--7d9b7363-3246-4097-814f-b74d49e8f1c1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0767dfbd-8c70-493a-ade6-377d5bf6531e", "sighting_of_ref": "indicator--f8226717-b1e6-4d55-b188-020db0f86ae2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef18698a-31c4-4fda-9feb-93594133b33b", "sighting_of_ref": "indicator--3d67acb4-6243-48d4-8379-545ee44e151b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acdcbe5d-6b8c-41db-a8d6-4a9ec83e8f86", "sighting_of_ref": "indicator--c0bfe5e0-7ebe-4a1a-9944-e2cd61850edb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4156465-9d54-4b37-9c92-b54dc1446b07", "sighting_of_ref": "indicator--b914edcf-bd0c-451d-add9-826f7a45159a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d20e7c-993b-493e-9c3d-ed0ee97bbdf7", "sighting_of_ref": "indicator--b914edcf-bd0c-451d-add9-826f7a45159a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a132e0-06cb-4d31-8606-eceb715dd424", "sighting_of_ref": "indicator--aa121ca5-12d5-444d-b5ef-e135f48a45ad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f9c3c4-7703-4fa3-b0ff-c1eead74774b", "sighting_of_ref": "indicator--02b0a8eb-c01e-42ee-bf5e-ad2ef5b86945", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe76ad9-7811-43f4-bf4c-3ff3061aea6e", "sighting_of_ref": "indicator--02b0a8eb-c01e-42ee-bf5e-ad2ef5b86945", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42db0e89-2ca9-46fb-835c-45f79fc533f2", "sighting_of_ref": "indicator--7fb8a48d-ca35-4a2a-af42-ee958a5d665f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e8c552-f02d-4eaa-a67b-c255ac5ea5c4", "sighting_of_ref": "indicator--af651c4e-d1d3-48bd-84d3-52f3de36b339", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e04513-8309-47db-a1ec-267a357122b9", "sighting_of_ref": "indicator--caade7b1-8579-4a01-9181-60c585698ade", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e95f2d2-05cd-49b3-8fc3-d2769db6fd5a", "sighting_of_ref": "indicator--8ce00ebb-fc41-426b-9f61-21cff40bd084", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b32a0a-c2ba-4c6b-9133-4bc0eba3c1a1", "sighting_of_ref": "indicator--717f0152-0315-4507-9750-e2a484e30b90", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55c9382-994f-444a-9d0d-0c0fa5775ad0", "sighting_of_ref": "indicator--90442aea-39cf-437a-849d-97595f0e8b10", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b63944d-9649-4587-a1e7-d75d7e38cecb", "sighting_of_ref": "indicator--21a82259-e750-45c6-baa4-726190414f54", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6699c37d-6201-4853-b4ea-103dd7020511", "sighting_of_ref": "indicator--c78e60de-2f3e-49a1-a12a-5b1e79aec364", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1d852f-7f4d-4f5f-ab82-628a5ebaa75f", "sighting_of_ref": "indicator--d229e9d6-3e5b-4ab4-bbd9-daad8cc40f56", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c951883e-c352-4c13-9a37-9d80ae58c662", "sighting_of_ref": "indicator--d229e9d6-3e5b-4ab4-bbd9-daad8cc40f56", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ab99a4-b7b5-47f1-83f8-4df825c861d7", "sighting_of_ref": "indicator--0d956d0e-47ad-463e-b5e6-9c8646430830", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d188599c-3bdf-42bd-b79c-f0d392021872", "sighting_of_ref": "indicator--a9bf9b54-b818-4d43-acb1-9d21c96cc5c1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--006f5b1f-00ca-4042-a989-03d712a79f31", "sighting_of_ref": "indicator--2ecbe435-2aba-4099-9d4e-9f33951a21ea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de2326a6-1632-4d69-ac5e-e25d4873c194", "sighting_of_ref": "indicator--2ecbe435-2aba-4099-9d4e-9f33951a21ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d041cb-5b26-4ebf-8eb6-4890ed73422a", "sighting_of_ref": "indicator--38d963e1-5074-472f-8a8e-6ad581b762aa", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ce0e9c-7e38-4d79-9f70-fa2d7ff35ac1", "sighting_of_ref": "indicator--f7bbdb1b-91f2-4a95-986d-8945094d9c91", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ddf242-8030-41c0-9380-a89cedf9ac46", "sighting_of_ref": "indicator--f7bbdb1b-91f2-4a95-986d-8945094d9c91", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fcf6db6-fca1-43ef-b540-2a7b7533e497", "sighting_of_ref": "indicator--a6613077-a598-412d-8c64-714efea312f2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04bcb18d-afc8-4fc1-9114-59ee82a596c3", "sighting_of_ref": "indicator--7b84d974-f4d3-4a76-be98-6dd3d31b83a9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119b13e8-8ca5-488c-a367-fb0682608321", "sighting_of_ref": "indicator--bf74f59c-0b82-4cf4-9273-ca7613ae6fb5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c296209-ba21-42cc-9020-3f1c825af606", "sighting_of_ref": "indicator--771eea17-2e26-408a-ab61-d5a1906b6c92", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c00d35-3113-44df-b499-a1716340d83b", "sighting_of_ref": "indicator--6ddb0370-2d9d-4ebe-854f-18aa15229e84", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc043ea-0e4b-44ec-becf-af87a18d9f1d", "sighting_of_ref": "indicator--2fe94a95-dea0-4c8f-96ed-e46bb8ca0d8b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2679ddd2-3dce-4548-be0f-96f756957606", "sighting_of_ref": "indicator--a4ff293f-d09c-4222-bbb6-158dfda97b30", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c119b5-1eca-4c3a-b6a0-3b8b7c9c7e00", "sighting_of_ref": "indicator--a4ff293f-d09c-4222-bbb6-158dfda97b30", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb4caf5-8034-4fdd-baf0-d94f4c304455", "sighting_of_ref": "indicator--4a792f0c-ca42-4068-8094-211a276515ca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b467856-6615-4a74-94d0-eebcdc46ba74", "sighting_of_ref": "indicator--c35ffd58-28be-47cb-b6f4-9a6545c4da1e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b159726-cb09-4d52-867e-77a71d6049fb", "sighting_of_ref": "indicator--9cf9e163-c3e4-4016-a33f-db01b08e9557", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db14e971-4d16-41a8-9966-687ee074a845", "sighting_of_ref": "indicator--3ae294a1-d503-4833-b712-9f8d8085fe6f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd0088bd-0fb1-4252-ab8b-9a1b33eb10ee", "sighting_of_ref": "indicator--3ae294a1-d503-4833-b712-9f8d8085fe6f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496bfa12-7a64-4804-b725-123985803dc6", "sighting_of_ref": "indicator--0fa6baa5-70c3-4591-ad51-2494cc57ef98", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f089873-1f4e-4085-85d7-464bebd61b61", "sighting_of_ref": "indicator--0fa6baa5-70c3-4591-ad51-2494cc57ef98", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1237cd69-29c4-4c93-bd9a-a0eea20ae803", "sighting_of_ref": "indicator--53546f6d-0a7f-4b12-b244-c2cf979a44fb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6db3c91-8712-43c4-8f12-b80d532edc7a", "sighting_of_ref": "indicator--b38fd9bb-f02d-4e31-b781-f18b0918a6de", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5335f5-365f-4941-9dca-d892ad682917", "sighting_of_ref": "indicator--b38fd9bb-f02d-4e31-b781-f18b0918a6de", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6557237-18ce-49b4-ada4-1c8b03a9a649", "sighting_of_ref": "indicator--fa263881-26f5-4979-b974-4a591c9d805e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ce5c53-e9fd-4e54-a391-d31dee4d09fd", "sighting_of_ref": "indicator--fa263881-26f5-4979-b974-4a591c9d805e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b63664-90ae-4934-9771-fa0400fd5ca7", "sighting_of_ref": "indicator--2bc02493-5623-4fc9-8781-b75b9e8b7c79", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f186c8-3a12-432c-9698-05341b993cc7", "sighting_of_ref": "indicator--5d9f8272-9a07-48cd-aaf3-7fedea59d189", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8c0658-8439-47a7-a102-614e4948cea1", "sighting_of_ref": "indicator--2d039746-9397-4bb1-826f-8cb367803b72", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6648f4bf-f9c5-4735-9127-ba95d4d3b091", "sighting_of_ref": "indicator--a241b60b-999a-4001-8465-a7decae35cb8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f64761-9782-484d-b220-f06d9f7690c8", "sighting_of_ref": "indicator--c0a87e01-581c-45bb-90e2-28cd724db8da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41bf13b5-467a-4a70-8605-0b9e9c5134e9", "sighting_of_ref": "indicator--a2370af9-5aec-485f-8f15-91adeaeb5bbb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c7f3e0d-602a-4f72-bb8a-5ef00fa01e58", "sighting_of_ref": "indicator--561af05d-ca77-4a37-91ed-e2f0a798b107", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7136cbb-09d2-40c4-8cb5-76cbee3ef177", "sighting_of_ref": "indicator--cc7a37c0-e433-4266-a022-bb7ac7c63110", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e6f20e-8bfa-47d0-b15b-5eecbe7eceb9", "sighting_of_ref": "indicator--b9af58e8-b07f-43c1-8c3a-2377fa3d3313", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee3f1b6a-f0bb-403d-ad27-a7d81c79481a", "sighting_of_ref": "indicator--b7151871-7360-429a-b8bc-5cb6d8111300", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5edbd3f-6ef7-4176-bfd3-f0285057f858", "sighting_of_ref": "indicator--c2033159-eac6-41fe-ac83-45b7e0b7a0d7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5294fab-d08c-4dc8-9cc1-263b65f3ab3b", "sighting_of_ref": "indicator--95afbd6b-515f-4b61-9532-a9e9f77b0033", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12b64f2-9c15-4b3e-b57a-2a5e3f4b61f1", "sighting_of_ref": "indicator--95afbd6b-515f-4b61-9532-a9e9f77b0033", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2375dd-de4f-4bd2-b0db-c0962b494672", "sighting_of_ref": "indicator--6f04528a-f114-499a-8e6e-7eb0f93e3d58", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f99a12c-378c-4c06-b009-e8a41e0f609b", "sighting_of_ref": "indicator--6f04528a-f114-499a-8e6e-7eb0f93e3d58", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--441a6772-6571-4ecf-ab83-fa55ce39813c", "sighting_of_ref": "indicator--6248a7b4-5977-432b-8b94-f5648ed694a1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09a726f-d5f7-4902-b171-f2ec941ff9a7", "sighting_of_ref": "indicator--aefadebc-a742-45d7-9637-0c922d56fb40", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d18faf-4083-41fa-9ec5-8070796ad30c", "sighting_of_ref": "indicator--9cb1df65-85b2-470c-94c0-b0591ae5d56f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86eaf739-f917-413a-a916-c924c9451b82", "sighting_of_ref": "indicator--10ce35c2-c96b-466b-9203-247b42f4690d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0a03a0-916d-4f40-a669-4dca19518f70", "sighting_of_ref": "indicator--0430b2f5-2081-4768-965f-2421934f5f8b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96bde5cc-c2b2-4463-b10d-1d65d2479e2a", "sighting_of_ref": "indicator--0430b2f5-2081-4768-965f-2421934f5f8b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458c46d1-2b18-42ea-a8be-950b1a2dcc9a", "sighting_of_ref": "indicator--419f0584-9909-486c-8274-3eff5bd29cf0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8254859a-a90c-4b86-ad31-fe15bcae4c5b", "sighting_of_ref": "indicator--697b0222-9d9b-4162-a64c-85add7ec55e7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56811b83-c248-4421-bab7-4da46fbdef5e", "sighting_of_ref": "indicator--697b0222-9d9b-4162-a64c-85add7ec55e7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51939958-7eff-4ce6-8080-3e3f86e79571", "sighting_of_ref": "indicator--dc908e7a-80d0-4a5d-add6-f1364bd90ae5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3c55a5-f9c0-43cf-b350-a5730e885292", "sighting_of_ref": "indicator--dc908e7a-80d0-4a5d-add6-f1364bd90ae5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1752047-5be0-4d30-861e-871fd816041d", "sighting_of_ref": "indicator--862f5c49-537e-4484-bd5c-1cce8414e33d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1bf114-cd77-47e9-a106-2210f17237c5", "sighting_of_ref": "indicator--862f5c49-537e-4484-bd5c-1cce8414e33d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555d45b2-51b7-4238-a030-bb917a626598", "sighting_of_ref": "indicator--82f43874-5409-441a-97c8-4d00f52f8c17", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43afb55d-5e9e-41c4-9330-145b11011624", "sighting_of_ref": "indicator--82f43874-5409-441a-97c8-4d00f52f8c17", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09fdd06a-5ad2-4b36-ac59-d65088e78a93", "sighting_of_ref": "indicator--706a0361-0571-4696-befa-a9f3d9161b9e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f535f8e-b3e3-4940-b747-5d1569e0f26a", "sighting_of_ref": "indicator--706a0361-0571-4696-befa-a9f3d9161b9e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f80633-945c-4523-89db-fd3e1ac9870d", "sighting_of_ref": "indicator--0f69ba56-7b1a-4135-93fd-eb63c1d010e8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de26275-17a9-4343-be6f-00797d83da33", "sighting_of_ref": "indicator--0f69ba56-7b1a-4135-93fd-eb63c1d010e8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29cb4e3f-7cd0-48c1-bf22-85f53028f048", "sighting_of_ref": "indicator--6ed67bed-d75f-4539-949f-1487a8b7b953", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ecbdfa-bf0e-47ba-b0e2-8b87869d9c9b", "sighting_of_ref": "indicator--6ed67bed-d75f-4539-949f-1487a8b7b953", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c54b91b-60d6-410f-b5f9-5552ebba6652", "sighting_of_ref": "indicator--29306747-a74a-46c4-a4cb-296a82504b60", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d56d85-3386-4b9b-bc83-fb18a7e9a704", "sighting_of_ref": "indicator--40638f8d-4220-4a42-bdeb-a1dfe75c840c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c19f949-37e9-4564-a42a-56c0a4b40a03", "sighting_of_ref": "indicator--40638f8d-4220-4a42-bdeb-a1dfe75c840c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88afb0ae-1e52-4c8d-8675-81a9f660e74e", "sighting_of_ref": "indicator--c81c2c50-7f55-4aa2-97d1-6faa0d8e23db", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92638f23-99c1-41ac-a30f-38e15144b1ba", "sighting_of_ref": "indicator--73e738a4-4754-4cee-8056-3cfedfb3c28d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--748533e4-bc2f-497b-8648-cdb4bbbf86fd", "sighting_of_ref": "indicator--92763c95-6e1f-40e5-b9ba-28f9e0f6e5df", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6a33d6-3a7f-453d-b08f-641aa61b5ed0", "sighting_of_ref": "indicator--4c92cb94-df0f-4c8b-a09a-0aba13feed3d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5c6b65-8767-49f8-8ee0-d499ccf701ca", "sighting_of_ref": "indicator--e471a6b0-3228-4734-953b-3a1a212f6707", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611cc5de-25cd-4d5c-a3e4-db0eb385bbc1", "sighting_of_ref": "indicator--e471a6b0-3228-4734-953b-3a1a212f6707", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d813bffb-30d8-49e2-a13b-c9837b05a29a", "sighting_of_ref": "indicator--9c6a492f-3efb-4915-8f9d-3783bd38f0d9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3b05de-11f7-4cac-8790-5fe79cd2d9af", "sighting_of_ref": "indicator--9c6a492f-3efb-4915-8f9d-3783bd38f0d9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237c830e-6d29-4fc2-8895-f85fe9b17578", "sighting_of_ref": "indicator--ee9f108e-6ac5-4ff7-8ba5-75e81999a63f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969420e5-3ea4-4546-8ec6-ad7e43426a98", "sighting_of_ref": "indicator--ee9f108e-6ac5-4ff7-8ba5-75e81999a63f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e834e3-51d9-45d7-883c-7757bb09197f", "sighting_of_ref": "indicator--8bede3a6-be21-41f9-93b6-b9d34461f62d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c05addb-1aae-4784-8eb1-08a42c4cdf9c", "sighting_of_ref": "indicator--6672d74b-69a6-4ccb-b2b3-675b5b0a8188", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ecdae67-7f5f-445a-93e1-71a3290b7f2e", "sighting_of_ref": "indicator--aa156805-e6f4-4a7e-847b-49a2487320fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a963c2b3-925e-4734-b6f8-9041d58836c6", "sighting_of_ref": "indicator--4b95d0b2-215f-486a-947f-814556d19d52", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4692d929-ed6b-4af3-96f1-bea582e4fe32", "sighting_of_ref": "indicator--4b95d0b2-215f-486a-947f-814556d19d52", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a996c3-5f47-48c0-bb46-ec70e63446ef", "sighting_of_ref": "indicator--a0702636-87e9-4c51-8ca4-f0cc4cca08cd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cfb6126-c948-4d7b-9114-2cbd595220fc", "sighting_of_ref": "indicator--a0702636-87e9-4c51-8ca4-f0cc4cca08cd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81acd0f-42dd-43da-8e05-88ab459d0617", "sighting_of_ref": "indicator--69f2068f-0847-4ecc-a523-cbc93a488830", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f5f8262-662e-41f4-af96-323a8af8ce71", "sighting_of_ref": "indicator--9da2340a-46b3-4b70-b477-149d7077eff1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42568a9d-ee26-4548-9408-5337e4bb4c4b", "sighting_of_ref": "indicator--9da2340a-46b3-4b70-b477-149d7077eff1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5871648d-762b-474a-9ff8-d09c15f0c5eb", "sighting_of_ref": "indicator--906c19f1-9b6c-401d-81cb-9d92e9dcf305", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d18def-2840-4139-83fc-390f76a5ba30", "sighting_of_ref": "indicator--906c19f1-9b6c-401d-81cb-9d92e9dcf305", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f74030-3cf3-47c8-bee3-ef024fe4fde6", "sighting_of_ref": "indicator--c5bdd739-be15-4aac-8035-fad46debdc75", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6dda59-a2a7-4d7c-8f7a-150174bac431", "sighting_of_ref": "indicator--b8d5e446-d703-4a5a-b82f-a151902dc03e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9d8972-7e8b-4b10-999e-fb58952d7ec4", "sighting_of_ref": "indicator--da1952a8-b20d-4058-9eab-31a613d61338", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4b9a98-6ed0-49ee-b572-428165e7aaed", "sighting_of_ref": "indicator--6b7a43dc-54e7-4c31-890a-d69ec64f59dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e3c201-af79-46ef-b686-9c07e58157aa", "sighting_of_ref": "indicator--d0420ff2-445e-4bd6-8209-66fd5f08a3ad", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b64a25c-d31d-4084-ae8e-85e49f0dc66b", "sighting_of_ref": "indicator--d0420ff2-445e-4bd6-8209-66fd5f08a3ad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--979e35f1-d492-4e8c-bb1d-7595f4040152", "sighting_of_ref": "indicator--34c8248b-0376-461c-a900-191c28cffff0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107f36e5-94fd-4a41-a48c-c27b9be6b3db", "sighting_of_ref": "indicator--34c8248b-0376-461c-a900-191c28cffff0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0a89506-4c53-43f3-8e04-83ca71dcf2a1", "sighting_of_ref": "indicator--ab4792ac-bf79-4dea-85de-eddf9fb4bae8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59819690-8e78-4555-957e-56231ce87504", "sighting_of_ref": "indicator--ab4792ac-bf79-4dea-85de-eddf9fb4bae8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2badfd87-3a6d-4c1d-bd01-e1c985389923", "sighting_of_ref": "indicator--ab4792ac-bf79-4dea-85de-eddf9fb4bae8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc17d24a-6d37-44aa-b691-5bc99b0f2052", "sighting_of_ref": "indicator--df6ff305-1d64-48af-bafe-5fd9c4814a3e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f22e2d6-0049-44fc-b6a9-2f5b130936cc", "sighting_of_ref": "indicator--bb26fcbf-2dc1-4052-a43e-312b8adf4bbb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91bf716-3ef9-431b-9622-d35e1a0ea0ae", "sighting_of_ref": "indicator--723285e5-1288-4c72-99bc-d357d278f200", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99540c61-a823-4679-a3b2-9e5d38ba4456", "sighting_of_ref": "indicator--7fd83e85-980b-4721-be51-51eedf71b035", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23baa5b7-e049-4cd4-9346-54c8d229cc63", "sighting_of_ref": "indicator--1b8e2c10-f723-425b-a7d6-c26e9a45be5e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2420e8-5197-4d15-be6c-568edfcb8d59", "sighting_of_ref": "indicator--05548610-f90b-4be1-96c5-acab46671fb4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c33361-8f0f-4b7e-8012-ea858d924c75", "sighting_of_ref": "indicator--88b660c6-afbc-4b3a-b6a6-1b76e9cc99b3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--861746d1-4ea2-4b70-a37a-f9584699382f", "sighting_of_ref": "indicator--88b660c6-afbc-4b3a-b6a6-1b76e9cc99b3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d434119c-1715-4f8c-93b8-7f13e0a997ad", "sighting_of_ref": "indicator--ec9bf9ad-41ef-48d1-ac6c-1781ca796755", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02089269-c7b2-4722-b34d-7e1c29fec689", "sighting_of_ref": "indicator--ec9bf9ad-41ef-48d1-ac6c-1781ca796755", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f19f943-a530-427a-82c3-3c5eb15d1419", "sighting_of_ref": "indicator--94331c76-f6f1-4e65-96ce-9736960a0bb0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b430bed-c565-434f-a1e1-09a5a8e80ab8", "sighting_of_ref": "indicator--3756595a-2627-46be-a04c-7aeed05ec80a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe1b0a8-5c35-46a1-9989-b0a0575b7b5b", "sighting_of_ref": "indicator--2e2411c2-5cd8-4594-86b5-2c175f7d8a7a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87151fde-4a37-4277-b9c3-e6afc082b040", "sighting_of_ref": "indicator--2e2411c2-5cd8-4594-86b5-2c175f7d8a7a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485b94ce-61e2-4516-9091-965a5afa2b2a", "sighting_of_ref": "indicator--91e59cfc-3386-48be-8824-d7e87ad5589f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d040eafc-31c9-4367-91af-e71c65727030", "sighting_of_ref": "indicator--6515c32d-8c8b-411c-aba7-78aafefdf06b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f77c4f-1628-4a85-9a70-b3db54817352", "sighting_of_ref": "indicator--00b5a160-eaf9-4fcd-9005-c5ec2d58f074", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500b8cf1-ee8b-4f08-966c-d771d9479a7f", "sighting_of_ref": "indicator--d5d271fd-d34e-45ad-854d-07abab2c2ca4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c7f8a0-91b0-4e22-a287-d31239f43bfc", "sighting_of_ref": "indicator--e9c261ab-2924-4b9b-84a7-72f0d981210d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c18d98-0cf1-4d21-9e4f-f7909d9b290e", "sighting_of_ref": "indicator--6b9926fa-1cf5-474f-a0df-48aab854490b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53fffeda-a73f-4fc0-a7b0-2e5048068879", "sighting_of_ref": "indicator--02f1916c-282b-4d5f-9bff-e67b1ae9453e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1be5f8c-37fa-4bbb-89fb-75d8e6a6c108", "sighting_of_ref": "indicator--a7c91224-07b0-4f8a-a096-a0d699abbb98", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ba8d91-28aa-4199-8891-45459e58f4f1", "sighting_of_ref": "indicator--5b75452d-941e-4711-9310-e10adfc7d1f5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e399e2-d07e-4ebf-a494-0a728b9a2baf", "sighting_of_ref": "indicator--b3e565b1-96b7-4b49-9c10-a81fc84b1a27", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ff3d78-9001-4981-844d-7e18c0634fad", "sighting_of_ref": "indicator--2e59ede6-d92e-4b12-840b-e57d39a1f736", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7136e852-c1cc-4fa4-9a31-b782fe44d90a", "sighting_of_ref": "indicator--cfa7e1a2-99fe-4aed-b09c-5bf9d85d3f32", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f19bbd-2fd6-4908-9e92-d2c3c1126a03", "sighting_of_ref": "indicator--2bfd3416-16fd-4cd7-a194-95c5b0583e9c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d64e121-f2e8-4cdd-b9f6-ce0e645d0580", "sighting_of_ref": "indicator--9b2e4bbc-8224-4b13-a1bc-dd571bf52dc3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a913ec7-99b2-4fe2-b9d9-3d6222e767bc", "sighting_of_ref": "indicator--acd60f13-7d2f-4881-95fc-d1bbc689d763", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411c5b90-b5d8-44ea-af02-e74db6077c4b", "sighting_of_ref": "indicator--acd60f13-7d2f-4881-95fc-d1bbc689d763", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b0f4bc-cfb6-4ed9-b224-e83295ac7b68", "sighting_of_ref": "indicator--c9a80a2b-8e98-4000-935b-fc363594cfda", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ffe3028-f555-465d-b841-1492c34ad9ed", "sighting_of_ref": "indicator--c956cf81-fd1c-4599-8af8-67b276fa7dd1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f097fb1-97c4-4b56-8777-8ee4a13a51bd", "sighting_of_ref": "indicator--8e4e2d5c-e7ce-4c7c-8779-f23c8c3d2974", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c558ad1a-6769-44f6-8f2f-bbd52fc57133", "sighting_of_ref": "indicator--5d6b5a3b-f82e-41bf-838a-85d31bd5bbf3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75c4ccb-5d64-4321-ac99-5a8819e58ae0", "sighting_of_ref": "indicator--555783a3-8815-4871-be50-65c00ddb53ca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e082a335-08d6-4d50-a9f9-be81e9e13e02", "sighting_of_ref": "indicator--7ce95209-de44-49d6-ada1-36050968eed5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d46eb8-e843-455f-a898-1d091621c247", "sighting_of_ref": "indicator--73556177-0e04-4970-909d-d5b059ff6e7d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1471491f-d0ca-40a8-8b73-d83fa0183d84", "sighting_of_ref": "indicator--1101b95d-d352-453d-8712-ed4632d1afe1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa417e5-5e05-4758-b712-69504696199b", "sighting_of_ref": "indicator--322a3ceb-64ed-4a27-84b7-338ce959be12", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5940283d-cb9c-4d5b-8744-8833cbe5d1eb", "sighting_of_ref": "indicator--322a3ceb-64ed-4a27-84b7-338ce959be12", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015337c5-309c-4505-a873-422f7f9e488c", "sighting_of_ref": "indicator--265f48bb-efb4-4d80-9c85-c7ef8a58bde9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a4eecc5-4fa3-443d-937c-74c9887fd80a", "sighting_of_ref": "indicator--40bf7a34-1288-41e5-9e93-b6a97e1c91ec", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f409e8-86ee-4ee3-b176-10bc3f96c746", "sighting_of_ref": "indicator--05e51ab0-f3b8-47be-be48-288ab8ef70b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83fdd16e-bf7d-4676-9c81-136051c85d0f", "sighting_of_ref": "indicator--94bb7917-3df5-42bf-9278-7b4bc69c6187", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2e91ae-4bcb-49c7-a27f-43c54e7c891b", "sighting_of_ref": "indicator--aab75366-73fb-4193-a10e-81bb1c32a91b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3e739fb-5c45-4945-b3b3-b3060c0b4fef", "sighting_of_ref": "indicator--4df8a540-4ee9-456c-af2f-df5d84d81178", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7374fe-103c-456f-94ea-c8d64936f92b", "sighting_of_ref": "indicator--8f7e8330-c8f4-4d5d-8919-f6e0f16e3a80", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d71cff2-592b-4804-8549-3df2030dec5a", "sighting_of_ref": "indicator--8f7e8330-c8f4-4d5d-8919-f6e0f16e3a80", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970a5404-d438-4635-82a6-eee7c69f5ad7", "sighting_of_ref": "indicator--78392181-32a9-46a4-b675-568a75da6b6a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b80c4d-4c42-4682-8f3e-8f8d28696aeb", "sighting_of_ref": "indicator--c38efb3e-19b7-43e3-9b7f-78a04276dfe5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5123ba-1a5d-4730-b5c9-d1b078da8baf", "sighting_of_ref": "indicator--9d881470-b5cb-49bd-b4fc-c7ca4556c725", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8fc84e5-c637-4d64-b0c9-54d4279f63de", "sighting_of_ref": "indicator--0569ee28-5020-4fa5-b873-a6711951c38c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d845b97e-edf6-47ec-883c-6ca06b9cf820", "sighting_of_ref": "indicator--0569ee28-5020-4fa5-b873-a6711951c38c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49914a42-0bab-42d9-b272-f2e9f1063b85", "sighting_of_ref": "indicator--a7a177ee-7953-4f6b-8d94-c22c546e1956", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ff0591-6ff8-4000-8e49-5410577d2268", "sighting_of_ref": "indicator--93599bf6-4f5b-4cc5-86ce-cdb1ca90a5e8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708ece44-55e9-4399-a84b-06f14395ffae", "sighting_of_ref": "indicator--3da51291-2e47-48ea-860d-de5f6ff9e64d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3a8656-286b-417c-bebb-0d3a1671a071", "sighting_of_ref": "indicator--3da51291-2e47-48ea-860d-de5f6ff9e64d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b622d3c1-831d-49c3-89ff-7540d69fb7df", "sighting_of_ref": "indicator--3cfd25bb-5b99-4828-bb81-d5e36335402e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743bf77f-1a7c-466d-936e-cf77f8ec3593", "sighting_of_ref": "indicator--3cfd25bb-5b99-4828-bb81-d5e36335402e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f08794-703d-475a-81c5-9b3986b88417", "sighting_of_ref": "indicator--4a5e2a18-50f9-463d-92e6-2b25920fb8d6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc9a08b-0862-4160-80e3-2cb992042174", "sighting_of_ref": "indicator--4d349c5a-e6c3-45b9-87ea-d894cccf31e5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc501c3-65f3-45f1-8b90-0b025397b27e", "sighting_of_ref": "indicator--2a82d3c3-ab0d-498f-a7fb-ecf4faa2990d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc9df24-51f4-42dd-9e0e-d28e25acb2ce", "sighting_of_ref": "indicator--9572f843-f98c-4a58-8396-633f6c7bea94", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15795433-bc1a-4e12-ba1e-a0f8ca40f5d1", "sighting_of_ref": "indicator--33a603e9-7b96-45fe-a46e-0593b14c86f1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5311e8-0cc6-498d-b018-881aaf5d6e7e", "sighting_of_ref": "indicator--eba96077-3a3b-45b8-ba63-e93481dfa28f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb55ee7b-7824-46ea-a85b-c9555a055c15", "sighting_of_ref": "indicator--ce1b08ab-35ff-4027-87aa-898961e2dc4b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96164a18-1348-4b5d-b4ae-43436bbeb7ca", "sighting_of_ref": "indicator--cadaf0e9-1370-497c-bc79-97618d8baab4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7768b7fc-39df-4bfd-9ae2-c7007c49be44", "sighting_of_ref": "indicator--cadaf0e9-1370-497c-bc79-97618d8baab4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8001baca-26c4-4068-a258-d27793c1ce8d", "sighting_of_ref": "indicator--e90c2240-2b4c-4f54-abbb-01a3b4a1f2f2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02fb0ad4-83f6-4488-bf6d-9ef686cc87fd", "sighting_of_ref": "indicator--d7f776aa-0123-4312-9383-533c61b2bc4f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b68d5a-e8ad-4261-93f0-8aa8f3ea3f2d", "sighting_of_ref": "indicator--11cdc9e0-3fb0-4b55-8231-a061a071f809", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde86ea0-4edd-48ac-9027-838cb2e9fe28", "sighting_of_ref": "indicator--8ff1a5c7-3333-48f6-aca1-8685e8073506", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62406dde-c3fe-46c5-a414-b306e5d5d538", "sighting_of_ref": "indicator--8ff1a5c7-3333-48f6-aca1-8685e8073506", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0aca1c6-60e0-48fb-9896-8ab92d1a9b4e", "sighting_of_ref": "indicator--1abb0d64-fd25-4452-9ee1-b5baddb77719", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8254a577-a928-4eae-8c79-ba68eecbf94d", "sighting_of_ref": "indicator--3a8f846f-d2ff-4f80-9087-ed3b418857f8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f869a85d-6ad6-436a-9bc4-1e17213bd5f4", "sighting_of_ref": "indicator--3a8f846f-d2ff-4f80-9087-ed3b418857f8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8644a4-6d42-4b30-bf70-c47c46e5fed5", "sighting_of_ref": "indicator--3af70d5a-332d-4dee-a834-b8eb6c2c173f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831fad66-feab-4653-b1e4-a125bd41618c", "sighting_of_ref": "indicator--5ac35090-c460-498e-978c-e0ef2bd337d0", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce6d055-edbb-4be5-b76f-259d11d07e99", "sighting_of_ref": "indicator--5ac35090-c460-498e-978c-e0ef2bd337d0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbfa8fea-5886-4bfc-ad7c-3aa2735cbfbb", "sighting_of_ref": "indicator--f255369e-433d-4b1a-8dc6-13995d4bf7e6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5a7bdc-27ce-4806-b8a2-82eddcb38198", "sighting_of_ref": "indicator--7d84bd50-b19d-4a7f-8be5-2244c3975e6e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81977a62-0a30-45a5-80c6-8ba69c852572", "sighting_of_ref": "indicator--751506c6-0078-4092-8b78-1732877935b4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff94008-39d9-4310-a0b4-fed6dab83a8f", "sighting_of_ref": "indicator--cda5fb4a-fc17-4e57-b174-7d7069612374", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0642ba0a-faa3-467b-ba6b-0bddc9b59add", "sighting_of_ref": "indicator--448325cd-6d50-4b95-90df-eaee360ed5b9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb19d3a4-2090-493f-9829-7276627a9950", "sighting_of_ref": "indicator--bbebd8c4-31ba-4a36-9646-c5ea89c3f788", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093e218a-64fc-499e-b103-689370cceece", "sighting_of_ref": "indicator--bbebd8c4-31ba-4a36-9646-c5ea89c3f788", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6307118-be78-481c-a1f4-e1d043fb09f2", "sighting_of_ref": "indicator--84f64aac-c498-4447-9856-a154fd3ddfe5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--595321f1-fe85-4214-83a2-61551db1a948", "sighting_of_ref": "indicator--4785a0da-5fff-4572-a6bd-bb43f9463686", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529a8aae-1168-49da-ac49-90e5679b7cf3", "sighting_of_ref": "indicator--7c7dca09-25ce-477c-a189-50668ab7c855", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c4ee91-26a2-4480-b2f6-e446e7a70ad0", "sighting_of_ref": "indicator--7c7dca09-25ce-477c-a189-50668ab7c855", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71294b9f-d4be-4153-8517-ebde814eba2d", "sighting_of_ref": "indicator--efc08797-b57a-494f-83f6-3ae755ef7101", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266979c7-fdd6-42ea-9e87-96a60ac4d8db", "sighting_of_ref": "indicator--78806eb5-064e-4383-ad30-461de0b8a439", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1466b92-278f-46d0-b758-7d0e9200baac", "sighting_of_ref": "indicator--cf66c429-e01c-4379-a3dd-52ae561ec719", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5cef262-ddd8-4235-ab3e-aa362ed550bc", "sighting_of_ref": "indicator--cf66c429-e01c-4379-a3dd-52ae561ec719", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7bbd06-4835-4c7f-979f-74af5d266c11", "sighting_of_ref": "indicator--9fcbdb1b-02f5-486c-bf84-fd0205856623", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b85eb8-48a6-432a-9860-2423c8852544", "sighting_of_ref": "indicator--8cc154c7-0243-48d1-8f6c-451fc8e96868", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87007d3-0494-4f65-be17-17e00c0d8f59", "sighting_of_ref": "indicator--eb379c59-edfb-4a1c-9ee1-4ecbe4f3a1fb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb944b6-ef6a-440c-bc25-9fc27dd214eb", "sighting_of_ref": "indicator--784dbac1-5007-4c6a-8e8e-5cf5fe4ab334", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6490e51a-8f18-4ab3-8174-0c30999c9d34", "sighting_of_ref": "indicator--16e2b824-340a-4cae-a561-01507eb6f7bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73126e8-e48a-4d2a-b12e-edc2fa0ac342", "sighting_of_ref": "indicator--d9523c8e-3a16-4df0-851f-515288c2dc9a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58271982-41bb-4f1f-b226-092e6e26125a", "sighting_of_ref": "indicator--d9523c8e-3a16-4df0-851f-515288c2dc9a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00443995-80f1-41e7-b49f-563e7a67a25e", "sighting_of_ref": "indicator--c267034c-a734-4def-aa2a-785b611db39d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4fcf8be-a657-443e-ab07-5ee3b61be110", "sighting_of_ref": "indicator--c267034c-a734-4def-aa2a-785b611db39d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a3cfa7-fbff-417c-b09d-af2d2b68861b", "sighting_of_ref": "indicator--cf003bfb-da6c-4457-9982-9488f36f6e63", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78a183a-a4f2-4bc2-b141-b79d97eb8516", "sighting_of_ref": "indicator--136fc526-b1a8-4320-ae5d-d8c6b66e09b8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ace63cb-6793-4a00-9668-91af5ca991a9", "sighting_of_ref": "indicator--0962bc2f-ecaf-4bc5-a515-0531ca367b1c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c62cd47-438c-416d-8eba-2802b73d4e03", "sighting_of_ref": "indicator--f8cfe620-f457-408c-83a9-acabb10dfaa8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f754118e-c3c5-4c74-af40-064dcfdbdfc2", "sighting_of_ref": "indicator--d17255ad-825d-4273-a037-457802426f0b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfad4def-d21c-407d-b624-8ad4e611febc", "sighting_of_ref": "indicator--a94e2782-6e65-497f-8e1a-159e4f1d5e9a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c75fa0-d5d1-4c58-9b28-fa5da40eb73a", "sighting_of_ref": "indicator--51971d2d-0ab8-45c3-8d09-59f1dfca3b8c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14250924-39ef-4d8d-97fa-e2e51b386722", "sighting_of_ref": "indicator--be7dd3c1-80fb-4cbc-a538-2233d301efe4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ec7e5d-e829-403d-a9b0-ee009f72596f", "sighting_of_ref": "indicator--55c26476-c919-4e0d-8b40-fa9185676ee6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa8cadb-46b9-44c9-b4ca-2bc0dee3e324", "sighting_of_ref": "indicator--a511ece8-5cb8-4f04-8242-f64b7bc2e9c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a519f14-a88a-4af5-85c9-c889f4d288e7", "sighting_of_ref": "indicator--a8368702-7400-4fbb-8f21-27d14154f405", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065f143a-ed17-4a9c-b95a-550bd8c4cc1c", "sighting_of_ref": "indicator--568172ef-44ff-4be1-b2e7-10a2052e463f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318c0558-0fb9-4b8d-ab6e-74706fb01aae", "sighting_of_ref": "indicator--4227010c-a763-4196-a279-232abec71181", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c1ca9bf-553f-404c-9b4f-73f27f864f81", "sighting_of_ref": "indicator--6cc96a38-d256-4f17-8566-fdc14516a023", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f4ca9b-3b2e-42ae-9b77-4553b56be4b8", "sighting_of_ref": "indicator--33327510-26dc-43ff-ae52-75d1ca274cb0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69476167-74d0-4625-8fdf-740be626dce3", "sighting_of_ref": "indicator--b36e3d2c-1651-4664-a7a0-5eecfc326abb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b273cba-a9e9-4025-a5e1-7425d1989310", "sighting_of_ref": "indicator--d65bfec3-fe8f-4fa2-9e8d-c77afad22bb1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0cf5c3-ab25-4a31-a47a-fd81762967f1", "sighting_of_ref": "indicator--cbfbda25-8270-4122-8e2c-eb07a9aaa6bc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad11454c-af35-4a1e-918f-46258c86feb6", "sighting_of_ref": "indicator--a6f919bf-c0d9-4030-9094-0c051acc3d02", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d640baa0-0755-4bb5-9821-b3f075198135", "sighting_of_ref": "indicator--f7454b78-102d-4e92-a227-ea833f251ca5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e175fb1f-e2bc-4ad5-bacd-0fbda25524c3", "sighting_of_ref": "indicator--1bfa993c-401c-405d-adf0-faf2036c7e51", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd374839-fb96-4896-8121-c7cad001e433", "sighting_of_ref": "indicator--1faff667-463b-4eb5-be99-e6ae958c9715", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec48c8f-30fb-4e64-acc2-916a4ec944c9", "sighting_of_ref": "indicator--56db1eb6-c0d3-4da8-8bd6-802cd771006e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575d2326-3521-443e-8cad-b4422610321a", "sighting_of_ref": "indicator--76f70ca6-bff5-44bc-9604-0cda1089116d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5b4907-4a56-421c-bda1-cbafb0f883c8", "sighting_of_ref": "indicator--ae9262a2-a7b7-482a-84d9-a7ab8a7b3dbb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58251786-c190-43c4-87fc-a105576d821b", "sighting_of_ref": "indicator--d711fa88-fe06-4308-92a8-019b0cb46e57", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0175bdf-2ccb-4c1e-ba1e-042a8494119d", "sighting_of_ref": "indicator--e175051c-b210-4b44-926e-fb13cd2425c5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cfc6b12-5fa0-4a61-9e99-c88bce07fd56", "sighting_of_ref": "indicator--b3803ef1-78a7-49ab-b015-179be3eece0c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1186e1a-e24b-4490-b10f-e69cb36fc4ca", "sighting_of_ref": "indicator--de1704b4-846e-419b-af36-160553401e96", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99908d6-d2dd-4523-b53d-07dbde658679", "sighting_of_ref": "indicator--d07534b4-5e5d-49a2-99a8-bba100edb991", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b8ff29-74eb-4f86-9573-56772d4e95ab", "sighting_of_ref": "indicator--e8d2a78d-e408-4e09-9deb-587160cf6e5e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71da717-7c2c-4d62-adaf-a866f581c3e6", "sighting_of_ref": "indicator--be7b3c8c-62fc-41d9-bbdd-b133d4fdcd11", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef617b27-3cd2-4943-893c-23900c510883", "sighting_of_ref": "indicator--436c9b0e-0c45-4e12-ac73-49c4be5f7154", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313ce2bb-e225-4190-9ca8-83fc6c3184c5", "sighting_of_ref": "indicator--86553ed9-1acb-40f7-bcad-a86a18a07694", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dcc7408-ea0a-4616-aac9-ab6ad50b17e2", "sighting_of_ref": "indicator--694e6fe7-7496-4b0f-9f22-e705d674200c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027c7b30-a3cb-4660-b62b-d5d4b22a9915", "sighting_of_ref": "indicator--2c010ea6-73be-46de-9d62-04c9aa0c2737", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74131ac-809c-4461-b7d9-23f6c36786af", "sighting_of_ref": "indicator--314eef23-42ea-452d-a2f5-93f4c446462a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235dfe16-37fb-4547-9028-61f3092590d7", "sighting_of_ref": "indicator--1de601e8-ef1c-4092-a406-c7790b3a71f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2caece0-da00-4d99-8f15-fc8205e6a88f", "sighting_of_ref": "indicator--a0d8bc6c-a087-4377-b924-666b6e84c200", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e107b8ad-a172-4f06-9774-fc6f4dca218c", "sighting_of_ref": "indicator--2f1a0c66-ae61-4f89-8b3c-7c9a3005aec0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a6394c-b1e7-40db-b923-623e2978fd20", "sighting_of_ref": "indicator--836945cd-bc75-42eb-8e3e-cbae9dd5cf43", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb5eef7-706e-4bfc-bff0-88847b85c803", "sighting_of_ref": "indicator--93344c44-d5e0-4b2f-9223-597cdd919c6b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c0844f-4533-4a8d-a1f2-1ce69564a8bc", "sighting_of_ref": "indicator--d7d276e6-9c96-4a27-8cdf-2d3c8446c03d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ddc1519-a2ee-48b2-8315-4c8626e4bb16", "sighting_of_ref": "indicator--3db955eb-9ac5-40fd-a619-990b135497dc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7800bd-2b74-4938-b005-db5b19c074e8", "sighting_of_ref": "indicator--8617cb9e-5357-449c-9fd9-c8182dbde58e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6bafe0-e5c7-4e68-92e1-de605241f647", "sighting_of_ref": "indicator--e1b50693-aed7-490d-9366-49918066624b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459dc7c5-2b48-48c0-9b70-7757b76e738c", "sighting_of_ref": "indicator--a40df63a-3640-4b44-84a1-388a248b0f62", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0865abb-044f-4337-ada8-809cedfd8b02", "sighting_of_ref": "indicator--4355ab4e-b73a-4d3b-8d23-b1ecc31ba3af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5894beb-7d68-456a-96f4-5742bcaee671", "sighting_of_ref": "indicator--ec2e2b73-5e8e-45a4-b53a-7a8bedf67bea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc1dd5e-35b2-4c43-9423-13c902fac25d", "sighting_of_ref": "indicator--7964f9db-cfd0-419c-bf5f-c86d92827692", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e6ec48-08c0-4d84-9b9a-d11113170bdd", "sighting_of_ref": "indicator--ac3a1ded-e33c-429f-bca0-4cc18413ecc0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb97dd9-c0cf-43b4-953e-66784bb319f9", "sighting_of_ref": "indicator--4e00a348-d660-441d-86e3-f7d80ff2593d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7b9127-474c-4f9d-bfbf-95e826f2e7ea", "sighting_of_ref": "indicator--4e3f20d8-9d1a-492a-87be-d06a31758844", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71ab6d5-7cc8-4f34-9700-399fde2394c4", "sighting_of_ref": "indicator--d29928de-afd7-40f5-af47-0fb9117748d0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cec7749-a05d-49f7-bd83-635f4383120a", "sighting_of_ref": "indicator--c32731de-b1b5-4ad8-94d4-f7ceb00a4b90", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d465bcd-4a3c-4b48-a402-6a20a6e1141a", "sighting_of_ref": "indicator--42b37750-3e5a-475a-afd0-7dc758cc45bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165768cc-6c85-47f5-adae-2e3dc4c4fe26", "sighting_of_ref": "indicator--e9dc826e-bad2-4104-8706-042494cabd78", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c3469a-e7b3-4830-bb86-7e28d78d160a", "sighting_of_ref": "indicator--e9dc826e-bad2-4104-8706-042494cabd78", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0753c0a8-da68-428c-84f6-6a3fc80503e6", "sighting_of_ref": "indicator--2c023edd-2340-42a5-ab25-d6986d6417d8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4da07d4-dd72-4c40-8139-c9b0e46e1b2b", "sighting_of_ref": "indicator--f0eaa7f6-6fdf-4a7d-9628-43710e587dd2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29378070-f2b2-4e74-a3f7-6709cfd977aa", "sighting_of_ref": "indicator--06824192-515d-4d26-8851-2728f0273fdf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d419cfbc-e803-4601-a337-0bf133c4b22f", "sighting_of_ref": "indicator--e8929aea-8674-4f35-bfa6-e83a3505ae48", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c02dc3-eb21-4469-a7be-b024703dbf70", "sighting_of_ref": "indicator--e8929aea-8674-4f35-bfa6-e83a3505ae48", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d5be5e-df44-49f0-a31c-abce7ae0ea57", "sighting_of_ref": "indicator--b1f1dcad-1365-4354-8d04-0fac63ac7563", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf3190f-d3ba-4290-9134-26016fb6e661", "sighting_of_ref": "indicator--b1f1dcad-1365-4354-8d04-0fac63ac7563", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa2ee78b-3bc0-411f-8bf9-f0190b7d16a0", "sighting_of_ref": "indicator--a8191e00-1323-4c00-9200-64ed739e908e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869c4475-db36-4e5c-a8da-e6d80a740874", "sighting_of_ref": "indicator--6edfb4ca-b294-430b-9c68-0abdee8f94fc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e4036a5-3ab6-472e-90eb-65cb93c9ae2c", "sighting_of_ref": "indicator--c804ca5f-0612-4e84-a487-023257ea72fa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8d546c-0f32-4e42-b4e7-bd574f5e2d01", "sighting_of_ref": "indicator--01ae9184-c381-48de-836a-2828430cc2bf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e217fe5-354b-4428-b548-d7fa7eda9a90", "sighting_of_ref": "indicator--8a37d2ec-bdc0-4b9a-9a86-1bc739b570ce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65146619-7ff5-4fdd-8646-c9975e613e09", "sighting_of_ref": "indicator--e302ce87-d8a4-4bc6-bb9a-f811e3cdd338", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8717767a-6105-40c5-83dd-a62fc453cd3e", "sighting_of_ref": "indicator--a2f74796-9789-453e-9010-22098eafd24c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d49d73-e00b-487b-a25c-b6ccb8a40f0a", "sighting_of_ref": "indicator--b996ee0b-9555-4c29-b1e2-b89a0c873aff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be534633-36be-4c09-afd2-0ff50e961538", "sighting_of_ref": "indicator--0aafcffa-ed82-4af0-8796-fc1620132b02", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5033acc5-5668-4fa2-ae23-72c69bc7ca53", "sighting_of_ref": "indicator--80f6d487-1b4d-4c5b-a36c-9b361870ca67", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd611c79-277d-42a6-8500-a5012240ae23", "sighting_of_ref": "indicator--843d6df5-7141-48cc-aea8-7af04cdc4a2b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe937a6e-5e3c-41e1-aa37-73bdc71cfa76", "sighting_of_ref": "indicator--b625996b-cec2-4d13-a656-6b97ad64d00d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f98c8e-8abe-4147-8e28-477e78a9d9ec", "sighting_of_ref": "indicator--c701b9ca-21a7-4a71-a51e-9be08d25c28d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e6dba2-72be-4c3f-a1fb-20dc974ab5dc", "sighting_of_ref": "indicator--a03c8887-58eb-4edb-a214-c979b5190f34", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc77d87-267d-4a04-8df5-0c1d3c608a4d", "sighting_of_ref": "indicator--4cda401e-40e8-48c6-95cb-1861ce51b9de", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da73336-f613-4d3a-9e57-062d16c98999", "sighting_of_ref": "indicator--b7a1b943-a5f6-4fe2-8783-43eefa965bff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c85291-36bd-45c4-a015-308cc945196e", "sighting_of_ref": "indicator--73b156e0-b185-43c1-bd6e-25887c51b90f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13375888-73cc-4a37-91d0-1fc6b52c1e97", "sighting_of_ref": "indicator--62693cb6-5794-48c1-9535-6d42738f0d11", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b76787a-5004-4215-a0b9-f6a8f91b2c62", "sighting_of_ref": "indicator--be9aa2fc-4ba4-4244-bba3-b83e8048312b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9eecdc1-bd2d-40ab-884e-421adca0ab09", "sighting_of_ref": "indicator--17903580-597f-43cc-8728-f42777481647", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb2d45a-1abf-4383-acf0-99cad23fabb5", "sighting_of_ref": "indicator--f2ac5499-c567-4d76-8c8b-4d86f40b4f69", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79cffb71-53e9-4a13-8007-aa4f97ccf180", "sighting_of_ref": "indicator--f2ac5499-c567-4d76-8c8b-4d86f40b4f69", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14123c5e-9ccb-442a-8405-b1a9b24d0f6e", "sighting_of_ref": "indicator--7ae2fe5d-2ad7-43a7-9bad-3a45f01789f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce1e92b-9ec6-47e8-9646-7bd3fd3b7801", "sighting_of_ref": "indicator--258fcb26-c8dc-4616-b5d9-6238e2e125c5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63fc4c00-3bfb-496a-9899-580b6ea07b8b", "sighting_of_ref": "indicator--3d6b683c-63f6-46e6-8127-0095b1eb7ad8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02cfad4-33a5-4691-98b4-8c58184cf67c", "sighting_of_ref": "indicator--920ebc7f-a86a-460c-bbdd-dbbecb0919f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7526767d-de4a-431c-9766-9c743d99afc8", "sighting_of_ref": "indicator--c47202ff-4fa3-487e-9884-76fa3c18f7bb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a24b41-b308-409b-a83b-a877037b6a6c", "sighting_of_ref": "indicator--f5d25440-f447-402b-966f-c32119dc56f2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6512fe-69b0-4a6d-adc5-0c16997abe8e", "sighting_of_ref": "indicator--13638066-c236-4758-9b4d-84e514efb2d0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9809bede-55a6-452f-815b-22d6e540de8a", "sighting_of_ref": "indicator--99ca97bd-3a7f-4424-bb1b-e57ef157922b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d97b6c8-8b57-40e3-8d6d-6c9f368d164c", "sighting_of_ref": "indicator--99ca97bd-3a7f-4424-bb1b-e57ef157922b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e273ba-464c-4da3-9c62-63c8fcca4a8d", "sighting_of_ref": "indicator--00d2a052-ca26-4690-8ee6-f1cd5c0438b7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68320fe2-e1b2-48ee-bb0e-52fe07bc4724", "sighting_of_ref": "indicator--d8a58e5a-3479-4be7-a797-342cf67b6380", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6eed4a-7f25-4f28-b499-0dae754af4d3", "sighting_of_ref": "indicator--6d7a3ff1-5206-41dd-b8cb-ccd0c773a4bd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d1ed3b-617e-4727-862e-15288f910495", "sighting_of_ref": "indicator--6d7a3ff1-5206-41dd-b8cb-ccd0c773a4bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ff5a27-19d4-4b35-804c-5459d1eadddd", "sighting_of_ref": "indicator--414de09e-ad24-45e0-bdb4-04aabb7e243e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ac94eb-8b46-49d8-b868-87c25ed2fe74", "sighting_of_ref": "indicator--414de09e-ad24-45e0-bdb4-04aabb7e243e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a869a1f1-e219-45d4-aa96-ff0ccdf96bef", "sighting_of_ref": "indicator--ff1e3d13-7d8b-45f6-8366-f8e98b1a3a14", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--934ceac2-3705-425d-bf88-cf9aadaa4655", "sighting_of_ref": "indicator--aa7f1245-682e-4cd7-91a4-0e9ea828f20b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e071b8d-69a6-45f0-96e5-82c0f9b157f1", "sighting_of_ref": "indicator--1da776f4-378e-43f1-864d-38c94b67a7b2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5379e869-6443-448e-b4ce-8ffe22d9e016", "sighting_of_ref": "indicator--1da776f4-378e-43f1-864d-38c94b67a7b2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2cd97d3-6a3f-4553-9de6-5d1700e9ed43", "sighting_of_ref": "indicator--d7373a85-05c6-48a4-8611-1cd14e6a5947", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25aed5e9-79f4-424c-b2db-d5de2cde4ac3", "sighting_of_ref": "indicator--feeacae8-5504-4d1b-82cc-8e490c6accb5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--296042be-36e4-4c53-85b9-e3ac02ae28f3", "sighting_of_ref": "indicator--38a33d5e-f561-424b-8ec8-6313e1258463", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739159e5-a4ae-48a4-bbac-ddabe4cd95c2", "sighting_of_ref": "indicator--38a33d5e-f561-424b-8ec8-6313e1258463", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8805ea8-d3fd-49de-9f2f-55862e7eb7d9", "sighting_of_ref": "indicator--2d029cda-9674-494e-b67e-f7bd4d2f5cfd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae5218c-8ea9-4ecd-8150-6be2fbfc2772", "sighting_of_ref": "indicator--9ffa509f-1668-42f3-9953-3559ed3e0563", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aeba86d-67e0-423a-b92c-fd26d29706a7", "sighting_of_ref": "indicator--4d583eda-28ac-41fe-ad20-51bbb294de62", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7abb40-8df2-40cd-8872-116253faa595", "sighting_of_ref": "indicator--4d583eda-28ac-41fe-ad20-51bbb294de62", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc530507-382b-4e5c-94e1-e8995292e751", "sighting_of_ref": "indicator--993cca54-7ce5-4a93-a6e7-003c2027cfaa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5971067-a7f7-4355-bdd6-5be9972fc8e1", "sighting_of_ref": "indicator--0cede272-5cc7-447f-81e6-b3884c8fed19", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06c2efd-6285-40f0-8b43-33cf43709eea", "sighting_of_ref": "indicator--17f11b04-b5d3-468c-a249-d32223bfd26e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534bdd1a-296d-45ff-af5d-6454c41e9bd5", "sighting_of_ref": "indicator--59a15720-8786-444a-90ef-e8c91c955153", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9618c2d-6fc5-4c61-ae54-504fb0317733", "sighting_of_ref": "indicator--0a8a729d-c854-43a2-b3f8-77db64471f62", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d95a8938-46eb-4072-8b78-91e7eaef66ea", "sighting_of_ref": "indicator--2c822cf6-e229-4466-ba90-ca762e5041be", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929fada8-41ad-4966-838f-d798bd497276", "sighting_of_ref": "indicator--ead4b0ec-bbf7-425c-b030-e833f5087a5d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d354aa0-0972-44e9-9b1b-062f8abad39d", "sighting_of_ref": "indicator--0cf7869e-39fa-494a-9258-ad6e7ea2e70b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11a9d3f-53f3-4f06-9ab0-86aea941536c", "sighting_of_ref": "indicator--538f7f20-3d30-4cbc-b46c-e091783a2809", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a5c214-9871-4427-89f2-82b13dfdac07", "sighting_of_ref": "indicator--3e8cff81-6cc4-4799-8204-c825bfd0ae77", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814d3432-a61d-45e9-898e-72ef61c08822", "sighting_of_ref": "indicator--1313b5b8-99cf-4f26-b5e9-d1125ff6f3e9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75dd8310-2018-47d8-8ac1-0f76d97275f2", "sighting_of_ref": "indicator--9991101a-637a-4502-8fbf-86fd0e9e83bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df93882a-25c8-4d3c-b4f6-73af0f54281e", "sighting_of_ref": "indicator--06cafa64-d336-4f87-8396-ebc4ed971453", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd77a81d-cde5-4967-ba2d-f3866c05d4be", "sighting_of_ref": "indicator--da8356f0-2c57-4f21-a2bd-adbe0ced6d01", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9673765b-f1e6-4268-a6cb-c28e73b64eee", "sighting_of_ref": "indicator--8e588dbd-8e55-4e3d-a074-de590218eb0d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c06fb9-b7ec-408f-af56-596b5293d950", "sighting_of_ref": "indicator--dd1706c8-65f8-473f-9bdd-41d491abe7dc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239f464d-5c41-4687-84e6-9c9d7733ea00", "sighting_of_ref": "indicator--74266e51-6e2d-4b05-8526-310da6868a66", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8f803f-8636-4311-9220-6ce8b55b217a", "sighting_of_ref": "indicator--6a2c4ee4-4dc1-4eed-b20a-a69de41063c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4911490-ce4c-442e-bf5a-47e835fddc84", "sighting_of_ref": "indicator--981afeef-48e6-4bdd-80de-4ef69bc1ed94", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518e5f6d-bce4-4d5e-b94a-281b0622e177", "sighting_of_ref": "indicator--c3350fe0-529a-45ef-a88f-e0fb42068812", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cee22a7-7bcf-4c36-8844-8dcb8de76680", "sighting_of_ref": "indicator--c0abc45f-aa7a-417a-865a-3fc6a6fc4e06", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fcd2487-86c0-40e0-a183-3014af60575e", "sighting_of_ref": "indicator--a17609f3-b3aa-4593-ac78-18c6c41171d3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--362d5b28-8c46-4927-abf3-c6ef96297179", "sighting_of_ref": "indicator--3fb58790-fc4b-4526-907f-9e1ec57ebb29", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f7e5ed-b914-4528-88be-c009dfa19856", "sighting_of_ref": "indicator--1664ddcf-0c0f-492a-b5e3-7f3fbc66f909", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329cb9b9-8802-4932-a7d7-8adb10c8c4ac", "sighting_of_ref": "indicator--0dd3d5e9-ae37-474b-a757-b111167071fb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d4a17d9-4ca3-4165-89bd-a18464aad940", "sighting_of_ref": "indicator--e5a4b8eb-df23-44ed-8757-ecf163bc4972", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8025ced-7b25-4f2e-ac7b-5855119a7929", "sighting_of_ref": "indicator--b193ff60-6528-454b-af5b-bf00900c53c2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca0539f-8ec1-4d64-b507-8e09703023d6", "sighting_of_ref": "indicator--554d902c-845a-4447-adc2-67d38434e889", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--780247ed-0bd3-4795-8012-d031c556e15b", "sighting_of_ref": "indicator--1863d2be-f980-4595-9f4c-137c8038bc08", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f7941f-e784-4ba0-b107-0d8639fa3387", "sighting_of_ref": "indicator--5465b24b-8d25-4787-af35-5e61376435e2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3921a738-9e07-4644-b9e7-9900ac9b05e2", "sighting_of_ref": "indicator--7bcf2a2f-1c33-44bd-b69b-bf1363cfbff6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2637219b-a5ca-4e1b-98fe-3649c542de2c", "sighting_of_ref": "indicator--6d3daf09-52f2-4664-ba23-7f3c4547b0c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0114df2-e5a0-492b-a8d4-82e2c9c60593", "sighting_of_ref": "indicator--1c743ae0-d08c-411f-a841-c259f83d73e6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c12eac0-3882-4479-bc59-eab8fd0f9926", "sighting_of_ref": "indicator--7eeeaa91-4522-4edb-913a-8a10361c3834", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6357492b-1a61-4995-b0ff-fc4fbdc6ab3d", "sighting_of_ref": "indicator--86abb1bb-8e3a-4c8e-a7b4-255d02601dbb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7eef6f1-2a92-4089-8365-f50a8a179b1a", "sighting_of_ref": "indicator--853a4861-9391-45ae-b2a6-752585178e70", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5324cf1-2acd-4f1b-aebe-421e79222b5b", "sighting_of_ref": "indicator--9a9514b6-1118-45be-abd0-600bd489fe54", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa598da1-828f-48e1-925a-5563dbe495c7", "sighting_of_ref": "indicator--3217de4c-f385-4b92-b384-63fb7a0d586d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f2fc6a-5ffa-4ab9-8500-42119a0c7f1e", "sighting_of_ref": "indicator--452046f3-633b-4f1e-95e8-c9d28105b5f7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0bcd5c-c78e-4e29-b6c0-ec8a77f16d1d", "sighting_of_ref": "indicator--ff3cb4f6-a774-448e-ba1e-dbc3f4eb0a52", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d141dd-9774-46ee-9da8-e8559088a78c", "sighting_of_ref": "indicator--4a9171a7-2795-42e2-baa9-712bc2a07eaf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84de9f0-087c-476d-8ea8-deb06c34f154", "sighting_of_ref": "indicator--b3d9fb4c-0613-4c5b-bd43-004bf4875dc4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f1e782-1525-4ba6-bbcc-a48483237990", "sighting_of_ref": "indicator--417769c4-269f-4888-8138-6c19724d8f2b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6c5114-dd05-49f0-8f3c-a55e26e67c22", "sighting_of_ref": "indicator--8524ccf6-2ee1-4278-84e5-f9f2d44346be", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f4ed757-aa3f-44fb-bec4-7a965f10af0f", "sighting_of_ref": "indicator--adcf9242-eb4e-40ba-a73c-19db32e11376", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7476f4-60f8-40e3-864d-d844b8328862", "sighting_of_ref": "indicator--f1b11bc4-dee1-4c2f-bda1-6794aa0d7a06", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d608b0-99be-49be-b6f1-b16202b56a57", "sighting_of_ref": "indicator--3abfe3ee-c55e-4ab6-aedd-9d060ba7f582", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102886ad-d179-4a69-8372-5fd346391ccf", "sighting_of_ref": "indicator--3593edbf-0b40-4c8f-928f-3537a10d4397", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c659b2-7b34-4413-9454-02768d0f374f", "sighting_of_ref": "indicator--d0891b74-ec65-4858-bc27-d29420bdd7af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8751f18f-a511-444b-9538-d219b9c5e12c", "sighting_of_ref": "indicator--745a2a94-9f81-45f4-a93b-cdc3e6545181", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--215566e7-cf18-48d2-92b3-0f77720d31bc", "sighting_of_ref": "indicator--53b69a6e-bc89-4220-ab69-c7c242723044", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae1a2a7-5cef-4a60-83b9-940aed37b0a8", "sighting_of_ref": "indicator--e2cab8e9-fd0d-4915-944e-81ae6ec6b4fd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958fe072-4760-4098-95be-f89eb9600aaf", "sighting_of_ref": "indicator--10305804-5420-4ba5-a543-a566145a44c5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0d9a5f-4f05-4e89-8f64-46fee88efc57", "sighting_of_ref": "indicator--276b3c20-9b1d-4424-bfea-406c43d80b03", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba7a5adf-02da-4f2f-ab0e-d8a5cb7879d4", "sighting_of_ref": "indicator--2b8edd65-5031-4311-ba98-8e58acee2d31", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb9f0f6-b20f-48bf-b2c2-5cc761c33f97", "sighting_of_ref": "indicator--3d7952f7-63cb-4dfa-bf86-51360d1a309d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5915117-bef5-403e-bba1-a4f43faf6549", "sighting_of_ref": "indicator--eb75a097-96f8-42e0-a983-bcf433c6f4dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2bffede-6a0c-4c01-8b6c-cb4298507a6f", "sighting_of_ref": "indicator--e82c0f3c-b344-4342-b7c8-16614dda110c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5490cf0b-98e9-4a03-b23f-291064ca04c1", "sighting_of_ref": "indicator--c78dd2e5-2acb-427a-bed0-ac76247f0444", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64958177-7202-430e-af5a-252f182a4570", "sighting_of_ref": "indicator--8693b535-2840-459a-a908-bb533182e9d6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05f427f-1611-4893-98a7-d65249eecfb1", "sighting_of_ref": "indicator--48868a45-d693-49e0-9c70-5ec72255e0c3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6bdb2f1-303a-4745-b71f-c3be9fd03145", "sighting_of_ref": "indicator--02ba3f95-c4af-4a17-95b9-50e31caabdbf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01dd9981-dcbe-4678-823e-e5386c15bf0b", "sighting_of_ref": "indicator--d368c8aa-5a93-4479-a2df-9410c2517f38", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a060cc-bfeb-43ad-8516-77a20921866a", "sighting_of_ref": "indicator--83798a53-8e03-48c9-a6e0-3172ef2f5fc2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e67785ed-0da8-4c28-b8e5-d227d811adb0", "sighting_of_ref": "indicator--10fbf6dd-4b9c-4f7e-9e6a-a464f8eb482b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ea5f9a-293b-40c0-8bd8-6642f3d46e68", "sighting_of_ref": "indicator--a1f378aa-9359-4537-af11-1b63a1d6892b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6657727-f9e4-46b6-aa97-6496c302b732", "sighting_of_ref": "indicator--ac3256e8-c463-42e1-b483-0b060bc3a268", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07671b62-9d73-4cb9-a000-775ebb937743", "sighting_of_ref": "indicator--c98f1be5-26bb-4fe2-85d4-4ef994073fa0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ccf3c0f-7bc0-44eb-968b-9d3ab67e6f02", "sighting_of_ref": "indicator--0472ecae-58b5-4ef1-91ac-1758daa89158", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f12ff90-dedb-41c3-8136-8eadeaae8121", "sighting_of_ref": "indicator--baace177-dd65-4b34-a251-3dc80c8d7d08", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--788047ee-f439-46ae-a854-334523f3270a", "sighting_of_ref": "indicator--5c359329-cf23-4317-8c03-a81fe7379bf7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebeafdf-68f0-405d-ac97-ce6148cc2d75", "sighting_of_ref": "indicator--10a9645f-7485-45ca-896d-06538a2bb000", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a1c64f3-bdfa-4ee6-854e-b16bc7c9996e", "sighting_of_ref": "indicator--d5690470-a7cd-465c-8c91-7e968917cb71", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165e12ec-e8f3-4628-98a7-f9e00ea2f245", "sighting_of_ref": "indicator--b5585ff4-797b-4caa-8121-f0367d1b9461", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3742b02a-d64d-4fc6-849f-595c54b514c1", "sighting_of_ref": "indicator--72c0984a-4e9a-4b3e-8b82-e9669595536e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34987821-e8c6-47b4-a685-8dada588ebca", "sighting_of_ref": "indicator--169b2e6e-a6d4-46f0-a772-198b5cc07234", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--334049d8-53fb-4cab-9c3a-4b0ab725d91e", "sighting_of_ref": "indicator--d1ef27a3-0ba5-4b1a-9703-51da2324a6ef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e77b48-6dfc-4f8d-a85e-a934eb0fb0ad", "sighting_of_ref": "indicator--d9ea74da-7c38-4112-ac8a-72fa9545954a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ae1bd1-0522-4de0-8723-67655a89e364", "sighting_of_ref": "indicator--daf8a4f4-d573-4670-aa38-88f5cad23674", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1cf530c-0511-4709-96d5-ea97eeeaa370", "sighting_of_ref": "indicator--b5573b8f-f778-440d-84ac-54e7fe2b5d85", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34aca495-4661-4f59-b0d2-685ef072acbf", "sighting_of_ref": "indicator--dab01deb-e726-4540-ac04-ccc287355f94", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3054b95-3c10-417c-a24a-826f405948f0", "sighting_of_ref": "indicator--632b7dda-939a-4415-9fd0-6b951bff3cea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7329c12e-48f1-4f83-9e11-343da85a74fc", "sighting_of_ref": "indicator--765ab63c-3164-4f10-9993-5e19e86fe893", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c539b4-883b-485e-a5bf-8b7cba9a0403", "sighting_of_ref": "indicator--47bb1864-08f2-471c-bf12-1edcd01fed06", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f950c8-f8a9-4b85-8053-ad2622e85f1f", "sighting_of_ref": "indicator--36fb07ae-5bb0-44c0-930f-c3b5957a5e32", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4581dcb9-99ed-451e-b89f-3e9eafc78cf4", "sighting_of_ref": "indicator--71a84ad1-d5b9-4672-9116-2d81b82ebd38", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e7f1cb-5e08-4efd-a813-8c46ba877b2a", "sighting_of_ref": "indicator--6fecb6c0-f855-4680-9997-266c46977859", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb719d2-500c-4cf3-a212-4d26a2784665", "sighting_of_ref": "indicator--716d2d7b-988f-438b-9747-177c36ca83dc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eba9ecd-aa78-4cbb-9eb6-bb937d453702", "sighting_of_ref": "indicator--3ac14a9b-9138-4d88-8bbd-ca14d30b14e3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cbc6fde-98f5-4c25-a029-3eb49b364c3d", "sighting_of_ref": "indicator--9338db5f-6314-4e80-b277-10aa778b016b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19255f26-3891-434f-b348-c15b02717741", "sighting_of_ref": "indicator--269d3ead-e14c-4f36-971b-932da87b16ee", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f25ae5-58f8-4d68-8be1-23d6daac60b7", "sighting_of_ref": "indicator--33224815-e46c-4644-a457-9674344e676a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b152778-2403-4ac0-9358-d3200b121ff8", "sighting_of_ref": "indicator--69cbaceb-d24b-4cbb-a280-67ce4f7c6e21", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf7dc9d-e4bb-43c1-a16c-1824bbc2f54f", "sighting_of_ref": "indicator--a30c2812-67c5-4dac-9fb2-2369f4fe060c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9ebeed-8e66-4e2e-b79e-d37db881bd9f", "sighting_of_ref": "indicator--c6424dd3-3dc1-4dee-b11b-4b3e1c461209", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100bb6b4-d776-4717-8217-f939630759bc", "sighting_of_ref": "indicator--768c726a-887e-4834-b076-64c64d17e533", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f71424-e14e-45e8-8179-c89366faed44", "sighting_of_ref": "indicator--ce554a14-0f0d-4211-90d7-b3119eb2c909", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc354bb-5f25-45e1-9889-4544209572b8", "sighting_of_ref": "indicator--04478334-45e6-463f-b80e-38f2b0500b24", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e12b1b-2ca0-4bc1-8bf2-cb96d927f71a", "sighting_of_ref": "indicator--ae911315-6bd4-4148-a617-b705d05791f1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7278bba-7320-4060-9250-9356005ef51d", "sighting_of_ref": "indicator--587bce78-2836-40f4-9996-b824d3a449e9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62be639-b923-405f-a93e-16906cb1ee97", "sighting_of_ref": "indicator--77dd0ae4-0035-4584-8511-f1708a0bdd7b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b4e098-ff5b-40d8-ac66-2286ff69c4a6", "sighting_of_ref": "indicator--a3d2dbd1-383c-4663-a851-4e9df3346ad1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ca9cb8-336f-4bb8-918c-9a255d1eac24", "sighting_of_ref": "indicator--3f2d51e9-2884-4fda-82f8-e350cf07c0b8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7bae52d-0ff1-4906-9d1b-e2e66bee58ec", "sighting_of_ref": "indicator--c85158e7-6c61-47d2-becc-3d57c553a414", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab4716b-5738-47e3-a2ac-043e4aded8a3", "sighting_of_ref": "indicator--42b8ceeb-3099-4b57-9072-a6666c581b18", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1958f33-4075-4984-9f3c-216196a23826", "sighting_of_ref": "indicator--97bc799c-9de5-4173-825e-8c2fe1ee8aea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1731f83e-3a0e-4200-bcc9-3c12b0fab186", "sighting_of_ref": "indicator--3eaa888c-c18b-4b7a-a207-b7b5b909c090", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a002c4f-8504-4d46-8bb0-5d5a88597015", "sighting_of_ref": "indicator--5451d17e-cecc-4af3-b047-0b4bbfdea18f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7197ea00-89f3-47e9-8117-7c81af5efb56", "sighting_of_ref": "indicator--f69365b2-2400-4a3e-9c4b-6676fda6e2aa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e331c0b1-23e4-449b-89d7-6bdb897b8d8e", "sighting_of_ref": "indicator--2bdeb938-9cad-4c1d-b4c4-01bd565a0ead", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55eed934-5796-4dbb-a9e1-73a1951c1b29", "sighting_of_ref": "indicator--ce6faeb5-b832-4541-af2c-c88a477c7d30", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26f6c56-e01b-4295-9c1d-e58dd62c83af", "sighting_of_ref": "indicator--f5445b42-0ed7-47eb-acf7-d2bf0572d195", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec73aca-184c-4c91-ae46-361e5f923b56", "sighting_of_ref": "indicator--91a3fdef-73ee-4f34-9370-4ab47b0798d4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2cf1553-cbb3-4985-bf65-b5a4503ab3c3", "sighting_of_ref": "indicator--925b06f4-9702-408f-b0c3-8343ca2587cb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd642f3d-4380-45ef-89f2-43d2b358b44c", "sighting_of_ref": "indicator--af642313-c5ea-4ec7-98a3-032ba4165b9d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60284648-5dd2-4f45-b496-9acc210ba888", "sighting_of_ref": "indicator--192d37a2-6f64-4c54-881b-fb7bc46330f2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a559c3ad-8a1f-4b40-9fd1-8687ae85e5cf", "sighting_of_ref": "indicator--cecfb2e0-c372-4622-9863-e913d5ccbe9c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c21cbaf-2810-47de-abca-bb6661ee203e", "sighting_of_ref": "indicator--c1cbe96f-282e-4569-b4e0-c820f3d9ea70", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b681d4-b404-49ee-baa9-1d3f58bfc58a", "sighting_of_ref": "indicator--e733f0b4-4d9c-417f-89fe-146ed97b7e3c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16df7ba-973f-42b3-bb5f-c7a654f2fca2", "sighting_of_ref": "indicator--085ffeb6-df66-4ab4-b7db-702c5029c0d5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d347e263-d44d-45e6-9b3d-e23d7a268a8c", "sighting_of_ref": "indicator--ba1e1736-d185-481d-83db-a9d76fd15acb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--568f73a7-b5d6-4ccb-8b10-d24dcfe82f50", "sighting_of_ref": "indicator--0dd66fe3-4ba3-4cb8-893c-f581a750fa04", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442887a3-ebc3-4bf6-94ba-383d2797433b", "sighting_of_ref": "indicator--a76dd000-014a-4f30-b044-44755969fafa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7275b2a-40b8-49ce-90f1-eee5aebea85b", "sighting_of_ref": "indicator--dcc7348f-3928-4652-8f23-d51296162041", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58fdacc-b196-4057-9a1e-cf6fec15244d", "sighting_of_ref": "indicator--052a996a-299a-443c-a98d-8f4dd3cadf91", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3651a6e1-8f9c-4112-a8a4-e6b71b7c6444", "sighting_of_ref": "indicator--fdd8b367-8a9f-486b-a018-fff8e0c51ab8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120c2f7e-0d4f-4aee-9aab-a95f04d52603", "sighting_of_ref": "indicator--3e2277c6-653a-423f-bcfb-3375fcc33d8f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b3045d-fab4-42e9-9813-1e985c7066c9", "sighting_of_ref": "indicator--e3d5ddb6-4dec-4fac-87e3-bf76141af783", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a97f90-29ff-4ed6-9ccb-bb450f09da71", "sighting_of_ref": "indicator--8917df9e-5aa8-4ab8-9886-690b514b377a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6cea2f-ddac-4bf3-8560-9058d2c2ee51", "sighting_of_ref": "indicator--226ff93c-17eb-46cd-a6c8-8731e1827b73", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3a0072-5ce4-469d-8ced-48645798cad4", "sighting_of_ref": "indicator--c692807d-aa5f-47ae-95b2-49500acb96fd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5943fe-dddc-4849-b12d-ee6187d9a89b", "sighting_of_ref": "indicator--890a4bf2-1362-42b9-b8b1-8a9890fbd282", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377ea7d2-997c-4c39-a74d-94eb306a630f", "sighting_of_ref": "indicator--2089cfa1-4efb-4129-b783-7d9c395ca601", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36dacda9-ea8b-4231-bf23-d11690f1798b", "sighting_of_ref": "indicator--361ee9e7-55f4-4853-8efb-0a617a4ef2a6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee160f70-ded2-424b-b416-cded2005787f", "sighting_of_ref": "indicator--cc9cc706-5161-4faa-90a9-641a98df8e0b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39e4462-0238-42c4-8e8c-781253945860", "sighting_of_ref": "indicator--c12f8606-f6ac-4e4b-a3b5-c3f033f9a83c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef280b8-f239-4884-8c6e-a051bbaf8550", "sighting_of_ref": "indicator--38040ec6-e22b-4729-a01c-b5195038c315", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f2d353-8252-4c1d-a356-a5065363c478", "sighting_of_ref": "indicator--51911361-9017-4242-bd1f-2621c4c1de8f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60268b39-0051-4057-937b-37bc1e4cd1ff", "sighting_of_ref": "indicator--4ab8dc13-a03b-41be-a363-1065f49c6ff9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd1ccee9-69fd-401f-be3b-e5e4573213fb", "sighting_of_ref": "indicator--ce8fa208-c676-4271-870a-a1cb99797c8d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2071fdf4-d368-422e-8a10-0bf8bdb911c8", "sighting_of_ref": "indicator--6117781f-ce34-4239-ba17-20e88bf7353d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473055db-993d-4c5d-94d2-47d8147884ba", "sighting_of_ref": "indicator--70b5452b-f41b-4719-9ffe-3edd5d351718", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b09a43-27b3-461f-b1fa-839882dd723d", "sighting_of_ref": "indicator--14895529-1738-4b32-be4a-e7012e63c399", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c48cda7-e992-4fc3-91b7-c4b931d09f1f", "sighting_of_ref": "indicator--093701f9-f682-4135-87ba-c0e6554c4c8d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92e24e7-1fe2-43e2-aa82-a92913d594d7", "sighting_of_ref": "indicator--675bca25-aba4-42d6-bc74-744c4d5a213c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--facbb088-7fd1-4981-897c-c61992e48a02", "sighting_of_ref": "indicator--258496ec-7e92-4338-9361-e64faea2d54b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e656b9-93b9-4b9a-a5be-1a4e891d7c10", "sighting_of_ref": "indicator--7ded95c6-1d9e-4518-8378-59fc21d9b8ff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07182866-f8f4-47f2-8f66-3c8031593b25", "sighting_of_ref": "indicator--3ac0f857-8577-43e7-b2ab-38e74085efc2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7687173c-62e3-4d67-a5e2-0bc61fc66b3f", "sighting_of_ref": "indicator--dfff7273-d7e4-463b-8a10-54c995c481da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c2a148-e2ed-4ca0-b2aa-2d99ecf41d51", "sighting_of_ref": "indicator--cd75e4ac-d7ab-4407-8f5b-107cc1c17adf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5d13cc-43c7-4fda-b517-d4fe08cbb819", "sighting_of_ref": "indicator--3e1a9280-a8a1-495d-8c43-4b5c8d8baf6a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f8315a-db1f-49da-9001-2c87dca5a029", "sighting_of_ref": "indicator--ecc78d42-0b1f-4f3a-a2fb-f2433fdea51f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f137305b-faba-4a47-927c-08db498d86c6", "sighting_of_ref": "indicator--fa79f2af-fc87-473b-bb05-68b09606b1d5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de59bef7-02d3-4e8c-a603-6708e0c2ee98", "sighting_of_ref": "indicator--8c20b127-679f-40d3-b89d-dccded40c6fa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a1d147-28f5-4b53-be07-a1f4e8535f66", "sighting_of_ref": "indicator--6ef693e8-8805-48b6-b6d5-b0ac7a32c7ef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aeecdb3-d2ac-461f-8bf2-ed452675ba76", "sighting_of_ref": "indicator--2ca10a7c-37ce-4810-91c8-c0c6129e40ae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a7c1c1-e9ce-4c01-8706-574c136e8f03", "sighting_of_ref": "indicator--e9d71055-6227-46a7-a886-68b9f9c1ef68", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be243a41-d477-411b-a61b-fde527298d78", "sighting_of_ref": "indicator--4fbe57de-fad9-483d-9c34-4ae1a4886c47", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f815aa-fe08-4925-9beb-c5caae5b4c29", "sighting_of_ref": "indicator--5b9ba302-c39e-4fab-ad3f-0391984b2cec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2da7e8e-2da0-46d6-a03e-82452b74214f", "sighting_of_ref": "indicator--b249d7fd-8037-4420-98c5-cbb78cea21a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba9483e-31a4-4d89-a864-69eb761c76c2", "sighting_of_ref": "indicator--28d77863-c2da-45ea-8e5d-f0b488e3777b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d87bbf9-a56a-4e7a-8867-251b874767c7", "sighting_of_ref": "indicator--605ffd92-f500-499a-9b68-bd871706a780", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d11f1e1-fee0-4674-9796-943555e0789d", "sighting_of_ref": "indicator--3e8b314a-691a-4e19-9c5f-1d1b3fc13f0d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816d0400-75ec-43e1-9f86-57e0d6cacab2", "sighting_of_ref": "indicator--93bc3514-4141-4674-95c6-a6c141c2e8d9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a31bffd-bf4e-4ae6-8ebf-3af59b5a5a0e", "sighting_of_ref": "indicator--5d642d7e-bfb3-4842-91c3-8e27db137c7d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5548e18-cedc-4736-ba5b-4cc51d2968f0", "sighting_of_ref": "indicator--1d8493dc-3661-48bf-9502-7b3e3d06547a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4c441f-78ca-4b12-9f7c-0d426ceb148c", "sighting_of_ref": "indicator--bf5e7f96-ef35-4cc3-8d26-c153b263c1d9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b064e71d-ac07-4fc2-9d1a-299d3ca9fed6", "sighting_of_ref": "indicator--b8bd57c4-527a-4818-935a-f41303855eed", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48a7732-43bc-4a5c-a49b-2cc669c46d7b", "sighting_of_ref": "indicator--b8bd57c4-527a-4818-935a-f41303855eed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09024bfd-cea8-48af-af79-12d50e686e34", "sighting_of_ref": "indicator--e3da0df3-0ad5-498e-a8f9-dd03670c6b1c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda028ae-8e13-4d05-b8ca-57f9fc58909d", "sighting_of_ref": "indicator--78326054-cb84-4003-b791-863e9aa95f55", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37afd7e-cd22-42ba-ad55-24c0e31be786", "sighting_of_ref": "indicator--d245d853-190a-405d-ac19-9aa69e57dfc7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c6e1dd9-1b58-4cdc-895c-f94e466a156d", "sighting_of_ref": "indicator--d245d853-190a-405d-ac19-9aa69e57dfc7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9e4fe1-4040-43ba-b5bd-2259a3eabf65", "sighting_of_ref": "indicator--535c25a9-ecf3-4eba-8599-68d13469b143", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b817cf-4d68-4acd-b874-771270842208", "sighting_of_ref": "indicator--c37f1ba6-17f5-48f8-9a8c-d16f3a9ff274", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--701da2ab-9b7a-447b-9016-223d1d67fc13", "sighting_of_ref": "indicator--c37f1ba6-17f5-48f8-9a8c-d16f3a9ff274", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c959479-8721-4020-bd57-54268b3e8c65", "sighting_of_ref": "indicator--7d2bb58b-bb5e-413c-b6bc-8327cb965dbe", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98583d4-dbc0-4237-b2cc-d6455b705797", "sighting_of_ref": "indicator--7d2bb58b-bb5e-413c-b6bc-8327cb965dbe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7aee5e-df64-4e92-8595-87b482ad4799", "sighting_of_ref": "indicator--450a51de-3e25-4ab5-a1f0-f25bb7a2927d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd64ee6-8c1e-4df4-9e8d-f8c50d7c0aaf", "sighting_of_ref": "indicator--4c3b5fa4-9714-48c4-8230-8c716af7d9b5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba086101-8336-4c8a-b145-1ee7737adb14", "sighting_of_ref": "indicator--4c3b5fa4-9714-48c4-8230-8c716af7d9b5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48ebe74-1a71-44c4-8f04-32f91d679927", "sighting_of_ref": "indicator--b4369eef-4117-41b7-9703-d985dd7b34b9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c2ba05c-93af-4af8-909a-adf006f753a8", "sighting_of_ref": "indicator--b4369eef-4117-41b7-9703-d985dd7b34b9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f183578-f3c5-48b7-92f1-7badc74f0d44", "sighting_of_ref": "indicator--a508280f-c9ea-47bb-a48e-591e6b7bbbc1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7218c1-d600-4c1c-a28a-bffa28fbb5da", "sighting_of_ref": "indicator--a508280f-c9ea-47bb-a48e-591e6b7bbbc1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7effc48a-0221-45cc-a695-9c18bbd69251", "sighting_of_ref": "indicator--5d26d70c-866e-4103-9e52-f514a5ff2296", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828e10d0-6135-4555-b995-a7a1229df0cc", "sighting_of_ref": "indicator--64c36870-984e-4160-b8d1-e983c02dc94b", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56908e05-6d46-4839-abfc-5b4a834ec301", "sighting_of_ref": "indicator--8f24589e-e773-4c57-b758-d34f38023bcd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f151a94-867e-43d5-a45f-8d719604efce", "sighting_of_ref": "indicator--3e833832-cf1f-40ca-a0c2-db1c84161709", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e3a073-0df1-4488-ade7-415fe8b293e1", "sighting_of_ref": "indicator--3a3889dd-5ff8-4d09-b783-8826ac6ea691", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593b0254-8260-4c24-8e1b-1d04ebb2580b", "sighting_of_ref": "indicator--1aa00cd9-f6cb-4ad5-827d-fbfcdf858a4c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6c79e7-7880-4ca1-b25d-1de0e5a8d85e", "sighting_of_ref": "indicator--752f899c-0fdd-4eb4-be2a-6c2163fb3c87", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a053820d-b864-4995-96c4-61cc83faaf1f", "sighting_of_ref": "indicator--565ecf4b-fe91-4401-abd6-0f3f6212ace9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ffe166-bb37-491b-b96f-578bbf432c61", "sighting_of_ref": "indicator--9b0c2897-e6f5-4fe6-bddb-782f6618c383", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21dca0c8-fa7a-4045-9cc0-2eeb4a5cacc2", "sighting_of_ref": "indicator--b24147ee-9e7b-4b2d-b730-db39cdbf9efa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4880909-fc4d-41a0-93e4-e27dec443c52", "sighting_of_ref": "indicator--9731b8f2-b4b1-439a-a005-3842e37acfd1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3392f35d-c078-43a5-8e1f-200e316f07cb", "sighting_of_ref": "indicator--48cf988d-f64f-4440-a279-86c851dd9e7c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0435efa-aa5b-4040-8606-63b9fbe8e7a3", "sighting_of_ref": "indicator--864a01c4-e56e-4777-a765-18e82374a081", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1d7f04-197e-49f2-9afe-16d9e77141d7", "sighting_of_ref": "indicator--9d06b836-c3d9-47eb-a36e-d6500e869ce2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e82025-3dbf-4cb9-80a8-478459a1f74b", "sighting_of_ref": "indicator--0e960553-48b3-444a-9b2e-d79b943d6f06", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb4ea25-9bfe-4559-bfa9-5e90c4f73318", "sighting_of_ref": "indicator--cce4bf4a-0b53-4a37-8414-fb6733375303", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c5e0f3-3d81-41e5-9a66-f5801912d587", "sighting_of_ref": "indicator--b56f5683-fc52-47d2-8198-474bb6095798", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d059163-d088-47e6-8c0d-ae465c8c10d6", "sighting_of_ref": "indicator--b56f5683-fc52-47d2-8198-474bb6095798", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e42828-ea2b-4138-a1b1-d11b5faff151", "sighting_of_ref": "indicator--f3a458df-8526-4d52-aedd-0e30434b534c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82efbe98-b1d6-42e4-8823-7c5ead6106b2", "sighting_of_ref": "indicator--3e49a03d-aa08-47e3-b83b-2261ce204f55", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38896e35-1fcf-4a08-a412-f57fc0abb593", "sighting_of_ref": "indicator--41b2e6d0-7d26-4408-9e1f-25cb97b8cdb6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8143608d-ffce-4648-b0e6-c8f6d84d70b1", "sighting_of_ref": "indicator--dc076ed5-a5cc-40af-a789-2e715b640e5c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0208b85b-3bcc-48ea-9999-d09fb6c59fe0", "sighting_of_ref": "indicator--f497d31b-8fb9-4274-9108-60045bfde054", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ce39b2-cb0d-486f-8d06-3f2fa954ce74", "sighting_of_ref": "indicator--ce97e917-c988-416d-8b93-45b96576e53d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8c173a-7890-475d-b918-a6b01ad9839a", "sighting_of_ref": "indicator--168c7703-625d-4c04-b96d-b923c1de4a13", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f091b52-8ac6-44ce-b64e-93435332de14", "sighting_of_ref": "indicator--98983990-358d-4a89-90dd-c9c808575769", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4356ae0-c46a-4e37-971c-39e8bf2e0423", "sighting_of_ref": "indicator--8bff5620-be2b-4b3e-ad27-f2ea7b1d5a22", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7027bf-e202-4620-b0cc-0df43a224e4f", "sighting_of_ref": "indicator--8bff5620-be2b-4b3e-ad27-f2ea7b1d5a22", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b326cc9c-525d-4108-914d-bd3033ae89ba", "sighting_of_ref": "indicator--ed4e449c-86e0-4588-b791-a5c498f752c7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63955fa8-4b37-459e-9488-7f82e3c49d86", "sighting_of_ref": "indicator--ed4e449c-86e0-4588-b791-a5c498f752c7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd839540-05e1-44b1-acce-044223416ff3", "sighting_of_ref": "indicator--897f4254-0950-444d-b06c-096814d513bf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ee56fd-010c-4788-93e0-a4e26603d38f", "sighting_of_ref": "indicator--62881780-2d32-4d7a-85c5-5689325e30e8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec0bbf92-f1a7-4f00-bbac-1bb40c059c0a", "sighting_of_ref": "indicator--420b246c-c955-4cee-8cc5-c9007de1f9b3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157402e3-afbb-43ae-9177-030bfec41c50", "sighting_of_ref": "indicator--420b246c-c955-4cee-8cc5-c9007de1f9b3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44810e3-e7f0-485c-9916-3ef1f1cc245e", "sighting_of_ref": "indicator--2e180a0c-fc1c-474d-b068-f65a7ebbc1c2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4800953-3c1c-4980-b304-d910f940ee2c", "sighting_of_ref": "indicator--2e180a0c-fc1c-474d-b068-f65a7ebbc1c2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a513c71f-0f01-4349-8c3b-c73e9b99ec5f", "sighting_of_ref": "indicator--50cc7261-b765-4905-955f-ecf1627dce3e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d219ef-5617-4134-aca2-e8fe1cdba59a", "sighting_of_ref": "indicator--aca272aa-510b-4d39-8c66-f1811c71523b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--125e9977-1970-4408-a61b-4774fcb4df27", "sighting_of_ref": "indicator--876b8954-bf49-4023-ab01-ba0e0b90ad0e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7beb88bf-6e40-401a-867e-ac9d6c3f7540", "sighting_of_ref": "indicator--624e051a-58b4-45b4-a94c-c2a35495c862", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c248306a-3317-40f2-8a1e-b307888bd603", "sighting_of_ref": "indicator--51f2bf50-7098-4f97-8795-a5ae08b44f2a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c985af-aff7-4ff6-ac38-f87a204f0977", "sighting_of_ref": "indicator--27a6c538-276f-41c8-aa8c-69720a33a136", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa82026-8851-4440-a05c-fde7455e1f3f", "sighting_of_ref": "indicator--56a2a3f8-a428-419a-af94-a49ccde02b5c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53069f1f-6a3a-4d05-8fd4-aca411e8b359", "sighting_of_ref": "indicator--3a7de0b8-1a01-487d-9c2b-9379bf5d7aa2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44fc7965-4ddc-45a8-ae9e-895af57c9ddf", "sighting_of_ref": "indicator--2bf9c8c1-0feb-46b1-bf94-7abfaea90193", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc240b9c-654f-4629-8a33-32d11b9965ca", "sighting_of_ref": "indicator--2bf9c8c1-0feb-46b1-bf94-7abfaea90193", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538999c4-d42b-4204-be27-7958b3ae9c97", "sighting_of_ref": "indicator--3a54ad44-79b7-46c7-b901-77a155624d5b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311f2d5b-c989-427b-9b0a-1ba09c26d9c3", "sighting_of_ref": "indicator--785d2ac7-d6de-45a4-a75e-2e0363fc4fb1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278019c5-76c4-402f-8448-d3d35feb94ad", "sighting_of_ref": "indicator--d2f7a60d-3b72-451f-b105-caddaee4c042", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9fd46c-c15e-4fdc-bda9-4ace54b8863b", "sighting_of_ref": "indicator--d2f7a60d-3b72-451f-b105-caddaee4c042", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66812f14-7a0f-4e49-b335-c1e549d8d8a6", "sighting_of_ref": "indicator--b3bd6f04-897d-4adb-92e7-cbc64934e0e4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd84737-c8d0-43aa-b6b6-a41e0b061049", "sighting_of_ref": "indicator--ce68ae1b-5724-4542-b3de-6100ad5d9c37", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--883162db-f7a7-4401-b599-154dcd4d405e", "sighting_of_ref": "indicator--9218f67d-1893-4988-987c-4a68f45f0abc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b794e675-401e-4a4b-beb6-8feac0bba221", "sighting_of_ref": "indicator--cfbc7eb1-4b56-454f-b5e8-a6f522454811", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e267adb-1011-48a3-b1e1-918e03e490e7", "sighting_of_ref": "indicator--ff5645f2-f40e-4506-9fd2-b7d3f5907bc9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db795a01-30e1-49f2-9a76-ac3bd74683b8", "sighting_of_ref": "indicator--32181fb5-0c54-4589-b438-50cb5ff0f94f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0ad36e-f3ec-4161-add0-ac57696aedf2", "sighting_of_ref": "indicator--380212bf-cf16-4a79-9737-c7cea3f19e7b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c453cd-7159-4ee8-85a0-570cd9c15fd9", "sighting_of_ref": "indicator--03b3392a-bfd0-4c58-9e6b-9943312c03b8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e281780-a3c1-4907-b6e6-db0a7c576a33", "sighting_of_ref": "indicator--cf5ea084-5580-454b-9d10-50bdff8116e4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11fcb63-d978-485c-a030-59a9eea3f7e0", "sighting_of_ref": "indicator--4ae219d8-0db7-470c-abe5-500066eceb85", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e2b22b-12bd-4229-8e8f-7f6d347cabcb", "sighting_of_ref": "indicator--c30d8ebe-7842-4739-b6d0-d51b58991afd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3c3f0e-a224-490e-9941-a8d7ffbae00e", "sighting_of_ref": "indicator--07c60869-4924-45ab-b934-cbe732c02a26", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0f18ce-62b6-4877-9bbe-77610a7b2b84", "sighting_of_ref": "indicator--07c60869-4924-45ab-b934-cbe732c02a26", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695c51c4-766f-4c6f-b065-b980668ac0f9", "sighting_of_ref": "indicator--1b08849f-cfe5-4cdd-9a8e-86a15d7a05f7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac8d332-7955-412b-b0a7-6e0d744d291a", "sighting_of_ref": "indicator--2a740387-e53d-4efb-ba38-ea98ad132cf5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952422d4-bc11-491f-9bd6-10ab1371b163", "sighting_of_ref": "indicator--2a740387-e53d-4efb-ba38-ea98ad132cf5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86926e31-9f01-49d5-b3e1-085eeea3cc92", "sighting_of_ref": "indicator--7ef62896-d0ff-4d78-a087-3c11b6e2ccb5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385165ff-2bf7-4b53-8609-0d30629ab269", "sighting_of_ref": "indicator--b3ac452a-89ad-46d2-938d-d7f691b630f8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460779d2-a7fc-4dd4-bcc5-701fe678156e", "sighting_of_ref": "indicator--3e407399-701a-4cf4-b772-2929cbf9b511", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81169b4c-bc60-49ab-8105-98f3756bd7cc", "sighting_of_ref": "indicator--5b2602bd-3831-4c56-bd5d-78437b31edcb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef884de9-6fca-4962-812d-196a9e34bd55", "sighting_of_ref": "indicator--4e55e9f4-cf9b-4f30-805a-b6fda47a0ae3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da7e2f2-7cfc-45a0-88c1-754960d7c344", "sighting_of_ref": "indicator--68a3f071-73ac-4ed2-8e31-141520ee68a6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02322752-8ddf-40a7-aceb-40e7205656e1", "sighting_of_ref": "indicator--1dfb04b0-bba8-4b76-a7fa-a9fa595dc30b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afacb096-d682-47f4-a722-7a7fc83632b4", "sighting_of_ref": "indicator--749eee45-1b84-4946-85eb-a12e6336e923", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48f0b67-ab11-426b-8426-3cf2b095fc01", "sighting_of_ref": "indicator--a4cdb3ea-783b-4601-849d-73131ad31429", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0644f8b-d1dc-4f3a-bcb8-0670016ed81e", "sighting_of_ref": "indicator--a4cdb3ea-783b-4601-849d-73131ad31429", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17aaa239-02fe-4281-84ba-03bb36aba6af", "sighting_of_ref": "indicator--e3a9eee1-4b76-4608-98bb-d736955142af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab14d3b5-0542-4127-b488-847d893010fe", "sighting_of_ref": "indicator--e3fc32bb-7e1d-44aa-8223-765abac19e51", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16cb2994-081e-4867-a677-2f9f7d7f9470", "sighting_of_ref": "indicator--bd01f776-147a-49e2-946b-3a4f7dffa849", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b273838-ed92-4d12-aad1-67f4f7ae2fca", "sighting_of_ref": "indicator--bd01f776-147a-49e2-946b-3a4f7dffa849", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374e98ab-535e-437d-8917-69f2424ad887", "sighting_of_ref": "indicator--53f6e5ff-ce88-43b5-ac42-ffa2d65b71c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e3fcff-e686-4c55-a9b0-0cbe21fcddde", "sighting_of_ref": "indicator--92a87715-e081-4967-8987-4fdd0bd26c15", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e63854-66ba-48e5-a0d2-27a72f6dc743", "sighting_of_ref": "indicator--3890e810-8b24-4669-807c-48154cac7e4e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9106dc33-e8ee-4e18-b58a-1802bb2f2fc3", "sighting_of_ref": "indicator--e27588f7-fbc4-487e-aaa3-a7112bf5be4b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7797d328-b3df-419d-89d0-6e22bd393b94", "sighting_of_ref": "indicator--b83e8f3e-0ace-40a5-ae68-dcfa62b41a96", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7643f5c4-63d1-4dca-8e6b-f9016b15ef90", "sighting_of_ref": "indicator--e79b6765-1d24-4097-a5fe-e23d5a5d045c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e5d776-8ba0-4015-9812-5a4071c48863", "sighting_of_ref": "indicator--f4ae51c6-9114-4083-8f4e-fc1b160ade4a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda828a1-175b-49f9-b0a8-a8f8a992c0ac", "sighting_of_ref": "indicator--dfb09ead-db78-4885-afd4-fdae5d66a87c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96d4f4a-362d-4cc1-b118-062924507fd6", "sighting_of_ref": "indicator--e83ab4b1-71ac-490c-9459-9000492ecb09", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0ca7ec-7730-416b-a31b-f55229524802", "sighting_of_ref": "indicator--048c39ed-df51-410f-8d7a-62ff48f4e867", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab97db96-f36d-4111-a00d-cdabd20a692d", "sighting_of_ref": "indicator--cdd13827-874c-4edc-8f40-e5d4fe0b8e05", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3fc4f3-a810-4c38-907a-0cc8f91c64d2", "sighting_of_ref": "indicator--df54cb2e-3a22-484a-9c14-c9ec6d6a11af", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc8c0bb-d5f0-4f27-830d-8e58e498e2c6", "sighting_of_ref": "indicator--df54cb2e-3a22-484a-9c14-c9ec6d6a11af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475ad878-231b-45e6-9d0e-06042566ace7", "sighting_of_ref": "indicator--eecb6dd8-f866-4dff-aae4-88feb8476660", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3458c359-ec51-4441-a775-b87d2179e81d", "sighting_of_ref": "indicator--eecb6dd8-f866-4dff-aae4-88feb8476660", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783133df-b932-4982-9e8b-4d3c3574d7b1", "sighting_of_ref": "indicator--f8d06cb2-feb7-44e0-a09a-2c0d5217c904", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3314486-95e4-41f5-aa8c-cc6704f3be3c", "sighting_of_ref": "indicator--517c7ea3-0c5f-48a7-9426-9386ee911ce7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1297440-1a53-4465-a948-5af25173de93", "sighting_of_ref": "indicator--d36f1778-80bb-4150-9498-40d232e34a69", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8358013f-0c1a-4e2e-b763-c18405cad3f1", "sighting_of_ref": "indicator--4fe459b0-6362-4beb-aa12-931709ca207d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880dd2fb-0911-4fc7-8d09-05573ac1cded", "sighting_of_ref": "indicator--fd33e7ba-3300-4910-bc70-ad97f3c7272c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862a8bfe-259c-4424-971a-8e0918b3ed8f", "sighting_of_ref": "indicator--fd33e7ba-3300-4910-bc70-ad97f3c7272c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc294498-25a2-48fc-b122-e65d669a5feb", "sighting_of_ref": "indicator--eb036154-8687-47cd-8291-dcca011919bb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2339d99-2a35-4a52-b528-5fcfa6c90c36", "sighting_of_ref": "indicator--8dd6449c-8e2e-4894-a514-72d3efb0c1dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a06ab8c-b8a0-4c33-a5b8-d56ea6bebcee", "sighting_of_ref": "indicator--4559476e-31f3-4c5d-8bf5-4692b0ef8626", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ab83a9-d6fb-45b3-ba3e-7861506852ee", "sighting_of_ref": "indicator--fd1a292c-175a-4e5e-aa30-a8afc4e5c54e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9666494-17db-435f-be0f-89e709d1b306", "sighting_of_ref": "indicator--67e48d29-905e-4789-a9ec-19a177a0096a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49473cc5-b3e8-4036-9d6a-18e9986367ae", "sighting_of_ref": "indicator--4674c9e8-c75e-4edc-9f63-0dae1aa850f0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f3a69e-195d-43a3-8f74-f1ae2defd4a4", "sighting_of_ref": "indicator--4674c9e8-c75e-4edc-9f63-0dae1aa850f0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70b0be2-168d-4180-acbc-d0151a243daa", "sighting_of_ref": "indicator--6bb2aaa7-c03e-4e98-aa57-066b747d56ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586ca7ba-d7ef-4c66-8d5c-d961fa3f0a73", "sighting_of_ref": "indicator--4af91847-c8c8-4cdd-a9fd-35727e674214", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d990bf05-21a6-47e0-9190-45a9bc910b3f", "sighting_of_ref": "indicator--20038e64-5743-40ec-ae59-e18a817e69da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10552e95-6c8a-4308-8e8a-da9e2a87f460", "sighting_of_ref": "indicator--3b382fe7-6111-4930-bf3e-70cabfcb44cc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d837187-2ecf-493c-8988-5ae35eb255ce", "sighting_of_ref": "indicator--938c7cf0-750a-4b72-8605-d6cda47a4b65", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4f63cc-7cd7-49c2-af15-9bc07fe3e63a", "sighting_of_ref": "indicator--f333ea54-63d1-4269-873c-0de3c808ed16", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c802faf5-df83-492a-a674-4a63e68f9e08", "sighting_of_ref": "indicator--39b57a0b-a196-4759-b3b2-0aadef3de2e2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74549818-0a67-40e3-9812-486397f5a8fa", "sighting_of_ref": "indicator--4a52610c-8420-4840-a862-e5912bc64baf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a08eca-8e84-4449-9828-8af209df2ac4", "sighting_of_ref": "indicator--c70e5932-2d49-4258-8c33-ce3a27aba8db", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed77e7d2-cf7c-49be-8a12-7483076511b0", "sighting_of_ref": "indicator--0bf74d18-8ebc-4fa7-a64d-e561432800b5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb91d48-8f93-4c70-9893-82c180a70905", "sighting_of_ref": "indicator--452c0e6e-dd6a-4b80-803c-f7dd41f7a902", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78414c25-9f13-470a-9be6-5f6ad3ab42bb", "sighting_of_ref": "indicator--62b5fe94-929e-48b7-a1c7-05da1d7c2e43", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eff6f9a-2ee0-42b7-8a36-b123abfddc08", "sighting_of_ref": "indicator--c318c5aa-16fc-4bec-9c44-e63185606ff3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b45f9c9-333b-44a6-afcf-c0ccfd3dda21", "sighting_of_ref": "indicator--707e23f3-439b-4587-8d69-6b501fdb63f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9efc2cd0-cc7a-4b48-a2ef-bdd24562a7f1", "sighting_of_ref": "indicator--8b58dc34-f2e2-43a7-bcfc-ffdbb1b08c07", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed8f2b0-7333-4cf0-8954-7c3c9986bc0d", "sighting_of_ref": "indicator--52906f0b-ea35-487a-bf5c-636034e15ea2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caed26da-ad80-4b2e-99d6-12a3b9034bc0", "sighting_of_ref": "indicator--045c8dea-00b9-4086-b6f5-9acefb00b46a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57d4c21-eaac-4363-b761-dc30b2a7bcd3", "sighting_of_ref": "indicator--ed01c0e9-a042-4670-9b48-6f2198ece45a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc89ad88-69a0-44a5-8c0e-250f7b32c9dc", "sighting_of_ref": "indicator--b21892fc-7e51-4eb5-9e60-62b864ef8555", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7174b500-f81c-4341-afd6-903757c4393b", "sighting_of_ref": "indicator--8ba14c44-a573-4145-8ce7-71e11f61d06b", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381ae175-9873-47b4-97be-3e294aadfb5e", "sighting_of_ref": "indicator--7743e62b-0ca4-4679-96b2-f4c43bf1b89b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a48851-98a3-4c75-93f8-8b75d6a13107", "sighting_of_ref": "indicator--26c50db3-b905-456e-99f2-aedb749c82f1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e66edde-7e13-4dc8-90e1-6ff0a159650f", "sighting_of_ref": "indicator--26c50db3-b905-456e-99f2-aedb749c82f1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab636f3-d746-42e7-9b22-31eeeef1fa59", "sighting_of_ref": "indicator--5d2144b8-d4c1-43b0-8603-a8b99d69bf91", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976b3df7-ae7d-4982-8e7b-49364f9cd758", "sighting_of_ref": "indicator--5d2144b8-d4c1-43b0-8603-a8b99d69bf91", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7b8ff9-7acf-465b-925c-ec3bf071d4cf", "sighting_of_ref": "indicator--0a083b83-3e12-46c5-92a1-d4b88d875b87", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aba6aa0-107d-4c13-8ebf-cc83c156d577", "sighting_of_ref": "indicator--d90a029b-cd7b-497b-b7fb-692dffb3f9c5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d21ff4f-6822-418b-ad6d-7c10ef41068c", "sighting_of_ref": "indicator--7582e7de-b48e-4680-b6a5-3ba5854e6c40", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55636adc-a3ce-4444-baf1-e3fd93416786", "sighting_of_ref": "indicator--0250dc47-270c-46e3-bd5b-d10ce47f519e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34089d3e-ce88-4102-a6c6-2f3e4ea9adf1", "sighting_of_ref": "indicator--bf0654b1-0232-4c57-bab0-54c21da2de58", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99226020-ca90-40dd-bffe-50a3a09c8b5e", "sighting_of_ref": "indicator--1b490568-28e0-40eb-96ec-1b92689868d4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952d7a0c-e94b-4ca5-8ef5-8cec26db6542", "sighting_of_ref": "indicator--1b490568-28e0-40eb-96ec-1b92689868d4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d24438-1b05-42f6-aa41-514290128503", "sighting_of_ref": "indicator--2b6cb831-ce82-405c-b20b-274ef37e03b0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--690af56d-61a5-4edb-a20a-76d1e5111b8f", "sighting_of_ref": "indicator--f08e4437-e615-4004-9ffe-08e1902852c3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb83d9d3-29ed-4225-9db7-bf75c26a53e2", "sighting_of_ref": "indicator--17140d57-1b19-43a5-a313-c02707e707c0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--125e1ceb-0bc2-4f6f-b7c2-e58094094f6a", "sighting_of_ref": "indicator--ba0edc34-2ea7-4d2d-a5ff-e157d7f6fdcf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df839244-121d-4ef6-8307-2acfeec10bb9", "sighting_of_ref": "indicator--ea1c1808-a3d8-4d40-8a11-24f8223aa877", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f01866-0987-4f68-a704-b9e6b399473b", "sighting_of_ref": "indicator--13e09fa8-4a34-44b8-8324-6e4a671a941c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d33f286-90fc-4855-80d0-e6fe09594a61", "sighting_of_ref": "indicator--b817f0b4-a7f7-48ed-9094-b94c9ccaccf7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe0886b-a1c9-4fe6-81a4-daa62864475a", "sighting_of_ref": "indicator--aabab088-c263-40f4-9679-15d960884acd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b873c07d-e9af-483b-8bcb-107270cbbfbe", "sighting_of_ref": "indicator--d678e6a1-02d9-4649-8e2d-40266c288d18", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7077413-595e-4fba-bbe2-842eb65027c3", "sighting_of_ref": "indicator--cfce1211-d393-44af-a93d-0c41e6cf055e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a337cfe0-951a-4f51-a6ff-15e0720ef83b", "sighting_of_ref": "indicator--e30d1b07-a041-4851-a74a-64e981af6021", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62fe6ae-7fdc-45ef-a3ee-5fecedff9c2c", "sighting_of_ref": "indicator--6f43043d-8a52-4237-a0c2-76cf28fcb96c", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b0435e-2ee1-4551-a4df-c851081f3b59", "sighting_of_ref": "indicator--66a4d8bf-f14e-453d-9a9c-bfc3e4ca35fc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feee2786-d565-4f7c-9191-b8cb50d7463a", "sighting_of_ref": "indicator--9c3ad981-b1fc-4ebb-ace6-68ab619a2fd6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d6396a-0569-4aeb-9b39-4a05d5a071e0", "sighting_of_ref": "indicator--0950e2d0-5636-41c7-89e7-96287485526c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d8e41d1-65ff-4f1a-b952-e76090ac4127", "sighting_of_ref": "indicator--4900412b-0043-4ddb-a0b5-b377669573ab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3bc8d5a-a36b-47f9-9759-6ce6257f20a9", "sighting_of_ref": "indicator--aad82ca6-45fe-4a1c-84be-1d167876499f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9537f69e-2543-43c5-82f8-f7f8febcf6a9", "sighting_of_ref": "indicator--c3d17afe-9287-4888-a383-188a968c827c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408992fc-8737-486d-bdbf-f5e8018fbe0d", "sighting_of_ref": "indicator--17dd4494-0948-4936-8ea3-172f9ae4482b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6a83b7-2938-4a75-88d3-28da07ef541c", "sighting_of_ref": "indicator--ca59d637-9604-426e-84a0-acab6fe5024a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc34ef87-148a-4ddf-b0fd-e79981258d27", "sighting_of_ref": "indicator--ca59d637-9604-426e-84a0-acab6fe5024a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea7c4d2-58da-427c-9e84-ec3b9dceefd6", "sighting_of_ref": "indicator--7ad0f6d9-032c-4b40-9252-c46cce0b9947", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0a3aea-5cb8-493c-acf4-ea89c7c5b901", "sighting_of_ref": "indicator--e5ae358d-1bd8-4a47-9184-4d1104cd5cf8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d227fb-ed42-4943-8758-2c74560f44f5", "sighting_of_ref": "indicator--70ad257a-0271-43f5-b298-bafa6900ab6a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df83264-9e58-4e44-9377-351cdb091fa4", "sighting_of_ref": "indicator--8550aa6f-a433-4637-a92a-0f63666b41ba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce5384ef-4d43-465c-8324-8e932c57cc44", "sighting_of_ref": "indicator--e9b47815-4154-4081-ad78-a8fba1de7e3a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157e8986-1185-45d9-9b88-5c3743e2d798", "sighting_of_ref": "indicator--b6ea73b6-1100-4ba8-8aee-bfd84bf2c255", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9f0c94-220e-4046-b6ca-e26deff5138f", "sighting_of_ref": "indicator--3fe995b2-a537-4ae2-9736-83e034150ca8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dab328e-7d94-4710-a541-a83bf67ce815", "sighting_of_ref": "indicator--b03634a4-23d1-4e8f-a8a0-3ff76b5029d6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2444e2-031e-40f8-a2c1-733913b746fa", "sighting_of_ref": "indicator--de41dc95-f193-4758-9ccf-e1e4f1c653f0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba0804c-cb08-4757-aea7-afcd407a6f7a", "sighting_of_ref": "indicator--65850d77-8de2-4030-9101-e267cdd90562", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7dd05f-4758-4a54-ae5f-b05051914475", "sighting_of_ref": "indicator--65850d77-8de2-4030-9101-e267cdd90562", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78cd2879-df86-4a05-ac8c-c0d5e799a3ce", "sighting_of_ref": "indicator--9cf40c9a-ab29-412d-b67c-c9573b07e1cd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1930d5-5d0b-434a-ad0b-acaa156b645a", "sighting_of_ref": "indicator--d0c05a5e-1d2f-4781-a27b-510fbab8a357", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c03d40-7139-4c94-899c-4458a3bd908d", "sighting_of_ref": "indicator--ae6d1623-e8b0-4534-aa0e-19a5cc94fa85", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54bef4b2-9c4e-4bc8-a64f-ae7b4a71cab4", "sighting_of_ref": "indicator--65ac34ae-39ea-45ed-af3f-e7fb4b3e42ad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51e7a3b-3790-4814-9147-3978fad9ecbb", "sighting_of_ref": "indicator--733a5385-e0f8-455f-b6e5-4ea584f56d1c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6146b0-d619-42d2-bac7-016b48640e31", "sighting_of_ref": "indicator--a790d827-9fd8-455d-b1a2-72e09b8b36a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa4fdda-8aa7-42dc-b7c2-2d3ac0da40a5", "sighting_of_ref": "indicator--c2c0f3bb-d60c-46f9-866a-97f33edd53c7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7405ec4-65f3-4646-92e5-08f57ede8384", "sighting_of_ref": "indicator--fc578e6b-628a-4926-8861-481896d5ab2e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f47b91-c0bb-43af-8496-f196890d0e95", "sighting_of_ref": "indicator--ae522a82-f6f3-468e-bac6-c8fcbddaab97", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a418507-3d3d-4ca0-9fb9-db322d442201", "sighting_of_ref": "indicator--f66696e0-8e67-4a29-bd91-c00ff0d04549", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3d60df-7f8e-4c04-8275-eec8ed0162f6", "sighting_of_ref": "indicator--029024f0-248d-4115-89a9-f92e98a0692c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a3c02e-c391-4786-88a8-d15e2cd7153d", "sighting_of_ref": "indicator--f7170e53-3637-464a-9bc9-a469bff6c7b3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdfd2a79-c48a-4461-aa18-d115f73e9f81", "sighting_of_ref": "indicator--73befd29-8884-4dcb-8b07-075b6721d230", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b57469a-130f-47c6-ab78-433af2524409", "sighting_of_ref": "indicator--ad4c430c-bc53-4282-aae3-88e3e9a7dbd6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9a8843-df05-4e5f-af9c-d9dd893ed8e9", "sighting_of_ref": "indicator--9298831a-7352-42d5-96b2-7925abbbdb38", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8326de9a-6762-430f-a167-c1fb92e75ca4", "sighting_of_ref": "indicator--921d37ae-95ee-490a-beaf-ecba7bdd1fe2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b42a8b10-a8d1-4fbd-bec1-18ce0d044056", "sighting_of_ref": "indicator--7a7f4b0a-f63a-4383-9968-dfaeade786c5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--454a9761-01ac-4eb2-b663-47cf766f3439", "sighting_of_ref": "indicator--45a895bc-40bd-4f5e-9e9e-0c283a3e88fc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd85718f-8760-43d0-8cc4-71d29f97c1ea", "sighting_of_ref": "indicator--19ca883f-0ff0-4f6f-97fa-cdaab39f30f9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54ab0d7-31d9-492a-b20a-3b2b010543c5", "sighting_of_ref": "indicator--29cedbac-b995-4c4b-8c71-56b64cd5e519", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e5949f-d916-4794-8df0-1efd0dc2a48e", "sighting_of_ref": "indicator--ed491242-c645-4e5b-9678-cb22d8ae35c2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7826fa6-bd2e-4436-b346-3814b956637e", "sighting_of_ref": "indicator--ec636b84-8753-4d28-8135-a490e87fc4a1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a663ad-2262-446f-a085-7b07ea6e827e", "sighting_of_ref": "indicator--70ef9f83-d645-46db-9114-b041b851df75", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c033d5-3462-4be3-9af5-7047cd2b3ff3", "sighting_of_ref": "indicator--a738de52-2ea3-4ae2-9db1-343121ce567b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c938fa-db81-47d6-a891-fd5e1d05811b", "sighting_of_ref": "indicator--a738de52-2ea3-4ae2-9db1-343121ce567b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87c7ad1-4bb3-4bd4-a3a0-6948a6ff4873", "sighting_of_ref": "indicator--420e00ed-8b5c-4586-afa7-1ef7aedfdd24", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43326fd-d473-4e7c-9635-b72c5f9568f3", "sighting_of_ref": "indicator--4d83000b-ae89-4e61-b787-2bb646ce7ac9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c678ea9-1784-46e0-82bd-c6a2b3517269", "sighting_of_ref": "indicator--1cd7ca24-5393-4dda-9252-a846a1d79cbe", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c8d82f-e933-4e63-b186-e413b80dd557", "sighting_of_ref": "indicator--9917e867-4610-40f6-be7a-5083903d49fa", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491b0873-6e96-482e-bf6e-b3d952e1a0de", "sighting_of_ref": "indicator--94080fe7-2f22-4d95-b502-0ff8037fa761", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd79dd95-6619-461d-9fbc-3bac0d58638a", "sighting_of_ref": "indicator--fd70ef35-a932-48ab-a6e7-464085461c84", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96dd7274-9965-4a38-8265-942033c0f6a4", "sighting_of_ref": "indicator--f63b08c0-5b9d-4729-9ac9-0a6cb6c9caf8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a0e872-ac23-4545-903a-46eb541e34fb", "sighting_of_ref": "indicator--fa0a8f78-54b0-46f2-86e9-f8346cb40fe6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5cfb32-35dc-4874-9729-3c5430cf3f2e", "sighting_of_ref": "indicator--fa0a8f78-54b0-46f2-86e9-f8346cb40fe6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8478d1-15d9-4d44-91ed-090f8ec2e02b", "sighting_of_ref": "indicator--64af2ac4-2f28-41df-8104-bf5a189a19db", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7539f08-96cf-4c41-a601-06ff0a6e8ae4", "sighting_of_ref": "indicator--64af2ac4-2f28-41df-8104-bf5a189a19db", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801eb009-4709-4bf8-ae1d-2194db60169c", "sighting_of_ref": "indicator--5efd8ef2-f593-4cf0-a32a-2d3048680bfb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7237f5-267c-4ff0-be03-57f6ed959ce0", "sighting_of_ref": "indicator--5efd8ef2-f593-4cf0-a32a-2d3048680bfb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7155b3-40ba-41c3-865c-337e206a7b91", "sighting_of_ref": "indicator--28726571-8ced-4423-bdcc-3928b183ef0e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e869cbdb-4f64-4c0c-8724-ac68e0ef89d1", "sighting_of_ref": "indicator--dbdfa787-2f84-4852-a5a0-396bc4d423d7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dce7370-fe2b-4664-8ff8-22b44b233ea3", "sighting_of_ref": "indicator--dbdfa787-2f84-4852-a5a0-396bc4d423d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc36b6a-e455-4486-91d2-e0297e48d5f8", "sighting_of_ref": "indicator--d4cb5846-1739-438e-b66d-dcb0338c51af", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80423b2-8ec7-4705-a587-e7b23c6da5ad", "sighting_of_ref": "indicator--d4cb5846-1739-438e-b66d-dcb0338c51af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e257c79-b014-46f9-80b6-5a9ee20201e4", "sighting_of_ref": "indicator--0cef7746-7901-4f86-9e3d-5a0c45cc836c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476e14e7-a049-4910-9e91-74ba59ba0c21", "sighting_of_ref": "indicator--0cef7746-7901-4f86-9e3d-5a0c45cc836c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eeadb08-b5e9-4d33-b758-eebff4773d1c", "sighting_of_ref": "indicator--929d02aa-c317-4db2-92b0-77300eddd956", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1feffaa-1f96-4b7a-9941-3d8eae2e27dc", "sighting_of_ref": "indicator--929d02aa-c317-4db2-92b0-77300eddd956", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fec4288-b427-4bc1-8fc7-f72c45381739", "sighting_of_ref": "indicator--4bdfe321-d8f9-49d3-89db-59ac1fcc4412", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7323a1-faa4-4aca-85f1-9e1bae3ccf1e", "sighting_of_ref": "indicator--4bdfe321-d8f9-49d3-89db-59ac1fcc4412", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b090de-9a49-4ec5-b29e-d4f983f2cb78", "sighting_of_ref": "indicator--7ff09f93-ab14-481c-88f3-b795daa12ed5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09dfb40d-b107-40e4-882e-3e90c9420259", "sighting_of_ref": "indicator--7ff09f93-ab14-481c-88f3-b795daa12ed5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47d12bd-ff44-4b56-96fe-e568ae3e1127", "sighting_of_ref": "indicator--336364de-4ccb-448a-b5e1-c2b2305f4f73", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa149c4-1aeb-45c5-a1f7-7e8a5d672fda", "sighting_of_ref": "indicator--53c477b0-8e8d-4b33-a408-9ff7823f0dee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd60dd0-425e-466c-918a-744da12ce970", "sighting_of_ref": "indicator--b04b9ec9-ccba-4867-a403-8a552fc961bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61fd050d-3491-4c6d-886e-b196509e2193", "sighting_of_ref": "indicator--9db4d74c-fabb-4469-bd4d-a6a8943e1cc1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd56a874-ced1-4bef-9234-946d178d7077", "sighting_of_ref": "indicator--7179e2ee-c2cd-449d-bd12-c8c030188faf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d87c1e6-a756-49d8-9042-7a4130af5080", "sighting_of_ref": "indicator--70dba538-c6e6-46ce-846c-63d00bf50e3e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4592d60-f686-4c98-833e-68163e079fbf", "sighting_of_ref": "indicator--552c9523-ee4d-4260-94bf-a15cc9b6c91c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d5e933f-d634-4595-b1df-0169aadc4efd", "sighting_of_ref": "indicator--cdab0f6a-935d-4eed-9c64-497e25cd86f7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e516745-f784-4b4e-8c9c-207b3d4d3db2", "sighting_of_ref": "indicator--a5b3e726-b355-4522-ba64-33c9567b68e9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c54474-1cf8-4171-9d92-7f490a4c6655", "sighting_of_ref": "indicator--843a6983-81f8-45bb-b10a-c18f880ba684", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fbc1437-909e-49af-a796-681992cdfe7d", "sighting_of_ref": "indicator--b2da5d90-4997-4aea-b535-b214a9bfcecd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--147c0b8b-cd2c-4fb3-87f0-65670c240021", "sighting_of_ref": "indicator--69292c53-016e-4517-8c06-da6a5937f768", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a8ddf0-b80c-4bb0-becc-a41d9a432045", "sighting_of_ref": "indicator--382af760-db3a-4b7f-b1b2-5f279fe01803", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ba5d8e-aac5-4fd1-bedd-18e41b506acf", "sighting_of_ref": "indicator--5793a8d3-b222-46e7-aedf-3dde00d4ec5a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8aeefa-cd24-47f2-9dc2-e67b767834da", "sighting_of_ref": "indicator--af65bf7a-f180-4bd7-8e18-21c03fca88d5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b085155-7b07-4998-8102-dca67ae7495d", "sighting_of_ref": "indicator--5a1662aa-391e-425e-8056-ab4ad67dc7c6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a768c4ab-a1db-4851-b97c-9255b2a086c0", "sighting_of_ref": "indicator--cb589e4c-3157-4a88-8d8d-58dfb5e29524", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2985540d-0b11-4566-86c8-4b9944a5c16d", "sighting_of_ref": "indicator--3657448a-29c1-4914-a143-cbf297784650", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e8da0a-61aa-4ba7-8ecf-89a1e5440af5", "sighting_of_ref": "indicator--5f0e82d9-772b-4fcc-b528-544c21398ef5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6546ef99-ce05-4b8f-b272-f8d75a22ccb9", "sighting_of_ref": "indicator--f2ab27c1-e2fd-4a7f-a41c-ffc9e13c927a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca47dc0a-1198-4cac-b5c2-667a54654d39", "sighting_of_ref": "indicator--bbd7646f-4dc3-4db0-a556-2551ab347820", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2392754c-0871-4468-8bea-980df35e9b88", "sighting_of_ref": "indicator--0427bc0a-707b-46f2-bf8b-0a6923f9ebd3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a600c0-0bcf-4d97-821a-38599ff0b58e", "sighting_of_ref": "indicator--867d2a4c-3054-4d55-9583-f5e31f155d8b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee60329-ae3e-4d84-ada8-ee65cfc05a40", "sighting_of_ref": "indicator--308062dc-1548-4d9c-8d81-554a8c13223e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d622908-a743-401c-a607-6eac70b827e1", "sighting_of_ref": "indicator--3ba3ef93-d446-417f-b1d5-02680265de09", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49991d5f-c97c-44ce-ad76-1b71fee3c2c2", "sighting_of_ref": "indicator--26753496-b366-4c3f-a652-c420a335252d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3951afaf-b15d-4689-8835-9c7e2b375d27", "sighting_of_ref": "indicator--64afd94e-5fb4-4f6c-9f22-c7dc24577e96", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67073c4-d999-4d01-8f6c-a3525540560f", "sighting_of_ref": "indicator--7aa49e22-31ac-4e8b-b3f0-8e3f81aac2e0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b201bb4-4266-4ccd-b800-4a59177b9e1a", "sighting_of_ref": "indicator--2f066402-bad8-444e-9c9a-baba16df6389", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f4f6d82-7cf6-405f-980d-f09b2d97f0d0", "sighting_of_ref": "indicator--7ee5d086-bf72-4597-a9b0-a26edc11daef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a02e71-9ce6-40f4-a8e7-9b582f001205", "sighting_of_ref": "indicator--ff551815-a68d-4aa6-830f-e31808b33799", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac315573-db74-4505-9b0d-101ec965d740", "sighting_of_ref": "indicator--b87fd87e-afc7-4d38-a1a8-499810c7131e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7e94ad-103f-4e43-8eb0-88af18ca091e", "sighting_of_ref": "indicator--e6681548-fea1-4e92-a803-74ef816690c4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688f2f84-97e0-44a9-9cef-67c07c4ba9ce", "sighting_of_ref": "indicator--5df7f848-d004-4c62-9833-78e3a6ce0216", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e14126d-e3bb-4d03-ab38-1fae8542d6d9", "sighting_of_ref": "indicator--5df7f848-d004-4c62-9833-78e3a6ce0216", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04427525-4ee0-4ee7-bf01-712c6d88fd5f", "sighting_of_ref": "indicator--552b7e78-d8b3-4c5e-a4fe-2fdcc7f144e8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d7eee55-0742-420a-95f7-12a5d4818382", "sighting_of_ref": "indicator--6642da09-1c83-4292-bbd4-6c80ea96fa8d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad2eae4-ab7a-48a8-9625-f55f7feda2ae", "sighting_of_ref": "indicator--6642da09-1c83-4292-bbd4-6c80ea96fa8d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f875f98c-e4de-4390-96a1-743e304280ca", "sighting_of_ref": "indicator--39fb51ef-e440-4dea-a8d6-46532d999bb8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886dec6c-ab9b-4e22-8c1b-2fd1b1bbb6ed", "sighting_of_ref": "indicator--3b0caaf1-44ea-461c-bab7-ae9484b3d3dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613a34da-a639-4774-934f-cfba07f7596f", "sighting_of_ref": "indicator--7d812eab-1e61-4799-9787-dabc3949e384", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c5b370-1ae4-4dca-b2d6-c7be7b80faa6", "sighting_of_ref": "indicator--df1e1d07-f471-4f91-b5b0-35a402ab503e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f423069-74d1-48a2-942e-af91269e1a29", "sighting_of_ref": "indicator--c29cc04f-f70e-4030-8519-f62c133ec187", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe517c63-7d08-4aa2-b246-bf366e2aea98", "sighting_of_ref": "indicator--c29cc04f-f70e-4030-8519-f62c133ec187", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc846d7-9f98-4d70-8158-0fa57e15321b", "sighting_of_ref": "indicator--b3521465-f19a-4324-9059-58757e10841b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe70675-0ae4-4000-9c74-e5ea9e34e92f", "sighting_of_ref": "indicator--4b528026-41c7-47a9-ade8-f08922d6f481", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3406d4d2-b7ca-4d26-bddf-6a6598144fd0", "sighting_of_ref": "indicator--4b528026-41c7-47a9-ade8-f08922d6f481", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ad26a5-7cb4-428c-95b8-7e10c140658c", "sighting_of_ref": "indicator--6a4cdcf0-06d8-4713-b3f2-68d76249e741", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963d835c-2917-4f68-b5eb-e8be5c39f7ac", "sighting_of_ref": "indicator--b3695fc1-ef60-451e-a38e-0e9ec37585a4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c714a3f6-e04e-48ab-8fc7-c08d4e74b538", "sighting_of_ref": "indicator--5bef16e2-9e3b-410d-ad3a-a4ad81bf7b07", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17de7bfb-c9ee-4be4-9d23-dcd73347d423", "sighting_of_ref": "indicator--2a8b2995-3753-4f99-919b-73138350f303", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f82b21-9f7e-402c-83d2-4bb1510cf334", "sighting_of_ref": "indicator--f04f483c-49d7-4da0-bc19-a1d165b5c9f7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b371f0-b85c-4f67-b83f-7654f276f66c", "sighting_of_ref": "indicator--859375c3-4502-4e31-9cc0-bc9ebc20be0b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932c59da-896b-4fd5-8849-bed5e1b7399c", "sighting_of_ref": "indicator--99814201-68f0-4c16-bb5c-dcf534a78a15", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae14e59-b0e7-47bc-b468-b9e555d84e7d", "sighting_of_ref": "indicator--5b9f5786-89da-4d3d-9c62-6adbb69ad161", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e8b5660-c357-44ac-bd2f-cfb106b0887a", "sighting_of_ref": "indicator--9fe68d05-9cf6-46bb-b9bb-daaac188008a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f55b8890-a4ff-4984-bb30-e096d15bb9be", "sighting_of_ref": "indicator--aef78b0e-f9bb-4931-8bf0-97e5cda0037b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526a7f86-7bf3-4b2d-a89d-197793b5707f", "sighting_of_ref": "indicator--aef78b0e-f9bb-4931-8bf0-97e5cda0037b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc0c3e4-90d1-44d3-abb8-2fabd4979e25", "sighting_of_ref": "indicator--c5d5cd94-b17e-4155-ad89-42aad43ffc5c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f55034c2-0b28-4997-9402-188debbca369", "sighting_of_ref": "indicator--2b022ecb-59fe-4a91-92c2-fd15d62fa9dd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905ce600-6d67-40f8-ae87-09d28bcc162b", "sighting_of_ref": "indicator--2b022ecb-59fe-4a91-92c2-fd15d62fa9dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735177f2-dd7f-481b-93f1-ba4864c6e46f", "sighting_of_ref": "indicator--cc5cbf91-3fd3-4b47-befb-5348925d2654", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1fd979-a776-43be-a789-ab79132d8243", "sighting_of_ref": "indicator--7234567e-a5c6-415d-9eb1-80facdac065b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d789d8f-9ef7-4975-8e5c-ca1667186d42", "sighting_of_ref": "indicator--7234567e-a5c6-415d-9eb1-80facdac065b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b441c78f-54a9-4593-af2a-ed545720fc85", "sighting_of_ref": "indicator--4bde1e4a-714d-48da-9711-6757104e3abb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2cbe160-e52c-4a58-81d9-e9e220cbbe7f", "sighting_of_ref": "indicator--4bde1e4a-714d-48da-9711-6757104e3abb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513991a2-4066-4838-a542-d9c877563534", "sighting_of_ref": "indicator--bbfdd594-a4fc-45fc-8f2c-a39c44400781", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cca6bb7-854d-485b-8901-070ca5c74f84", "sighting_of_ref": "indicator--bbfdd594-a4fc-45fc-8f2c-a39c44400781", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458795c2-ec4d-482b-8d78-f0b07638a9ed", "sighting_of_ref": "indicator--3e55dc01-6f2e-48f6-9e4c-4b586c1b3c64", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a387532b-6d5a-42cf-a06c-51878d7e0595", "sighting_of_ref": "indicator--b7c06fdd-56b6-4978-bd8e-4d3c9e99a3cf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4a801e-df06-43b5-b312-172d4a770259", "sighting_of_ref": "indicator--6881fa77-d653-4eee-aaa0-f483f359c514", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa65c09-7583-4b4b-8231-2c8680fe0e94", "sighting_of_ref": "indicator--b12fa6ca-5635-465b-bd97-e5267dbfd261", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8afff8d9-86b0-49f3-b564-f8da7503b959", "sighting_of_ref": "indicator--1e8f8fef-07a2-494b-bf91-8576747c4db2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c937f34a-0607-446f-9449-be98e05a74c3", "sighting_of_ref": "indicator--dced9ce0-ac02-41a2-a8cd-99ee612a2d7e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35059aeb-93c5-4d92-966c-a0f9107a6d2a", "sighting_of_ref": "indicator--c22a03f1-e9e4-4420-8391-2e1e097b71dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43901b1a-878d-41fb-b589-85705da404e2", "sighting_of_ref": "indicator--4bd62c66-47d3-49ba-83be-ea6caa67ae00", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa9af8a-d1ec-4936-832b-22c28b6a8ab7", "sighting_of_ref": "indicator--f11cd3bd-1fed-4124-b676-164fc46c3f81", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c84720e-760a-417d-a21f-f8f86b3fdbe8", "sighting_of_ref": "indicator--f558481b-d97b-4fdb-b234-0eeaa85d6ba7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d169577-5735-4406-9233-a4bd97af18b4", "sighting_of_ref": "indicator--3897eaaf-bd57-4166-a075-f7aa80574409", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69cbc267-7f0c-4b1f-90b9-092832936b6b", "sighting_of_ref": "indicator--daab9976-ae06-4329-a4e9-a4d24a9680ac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815bcbf2-0bcb-4a17-9107-94f87a146158", "sighting_of_ref": "indicator--684de3ac-50d1-4a7f-b4fa-8d8c409282c0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e08d7df-a131-47e3-98a4-2e6e10b274bd", "sighting_of_ref": "indicator--29e49b82-a0a7-4cc3-be68-2e2af57b5569", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d7baaa-df80-49ec-8caa-a2b6d6e45a48", "sighting_of_ref": "indicator--8b480b64-821c-4e59-90f2-d7e6ab4b0446", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9301ecfd-5218-4869-a176-16f212115d95", "sighting_of_ref": "indicator--c1b57f4f-2286-4cd5-9851-4c41d85f0d51", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64db0450-9d15-45be-a4b2-cc393164f574", "sighting_of_ref": "indicator--98c4acc3-ce64-4b5e-99b6-509b62ad76c0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f61f72-895c-426a-b553-1be5e05eb04a", "sighting_of_ref": "indicator--4c85b945-e333-47de-ba26-6ba62fcadc7e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2baf4f46-91bc-4150-aa4c-9e1a7867fd2c", "sighting_of_ref": "indicator--e40e2ab6-f989-4609-900b-af15619e2f86", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac4ddb25-2d5e-43ce-a477-32a0b7826763", "sighting_of_ref": "indicator--cddebf71-1a0e-4e5e-8fb1-e0b04fef3995", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a398d122-73e6-4ed5-8148-cd2f7aab0290", "sighting_of_ref": "indicator--8d79061d-100e-4cdb-ab03-4eaac8844df4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--807b22cf-2c9f-44bd-ae30-1d41591e62b0", "sighting_of_ref": "indicator--8478218a-1688-4fa2-a5cd-beb699785c84", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c747856-f46c-4089-a74c-5f9e896444a4", "sighting_of_ref": "indicator--96b2c706-87c8-428d-88b9-a3de4f9e8dba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec10291-73b2-4a1c-b91d-15c83461ae3a", "sighting_of_ref": "indicator--b83b3c5f-f776-42fa-80fe-254cfea5206b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1204c118-9353-4884-8734-e25d51a109c3", "sighting_of_ref": "indicator--0b0845d3-a1f0-43e4-85ea-f3637805efec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba5d86a7-15c4-4e75-9c90-102e97bef941", "sighting_of_ref": "indicator--a6c593dc-9dbf-460c-800b-4c1ff8c8b2a1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417ea517-8886-4d76-894c-0af1dc2d2b49", "sighting_of_ref": "indicator--85a94f77-386e-484c-8e13-e1a30a6fab7b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b96ab5-e465-49db-a7fd-dda4852866f8", "sighting_of_ref": "indicator--051a9d81-ae83-40f5-8af4-a583b6908060", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56166fa7-fc29-4418-b2a0-6719fb9dbca2", "sighting_of_ref": "indicator--13937329-058e-403a-aab9-66775c9283b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10cad02f-17f7-4626-a9b4-fe8ac1523a21", "sighting_of_ref": "indicator--4847a7f0-c65b-43cb-9cad-d3833fc12ca8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--780ed8d7-34f8-4431-be8e-7c50be63e31c", "sighting_of_ref": "indicator--d99d6fc0-4dde-4bce-8bba-806dc7c2711b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--623e2e63-de38-450a-a7d7-094907e7c53e", "sighting_of_ref": "indicator--dd4806db-cc48-428e-9665-9e611da286ce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5ee045-d185-4d11-8cc5-782edddbb7f0", "sighting_of_ref": "indicator--fd090a75-cbb6-46ef-9426-b5be40e96195", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a3c6bc-0a7d-4145-931c-f3aa89da636e", "sighting_of_ref": "indicator--c915aca5-0408-446d-81e3-4b7940452f09", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1b732c-3816-48e3-95d9-eb6f9b3eb4d4", "sighting_of_ref": "indicator--2617d839-9aae-4a58-8498-99d8cccddce1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4e6b27-96a8-42e8-a6c3-a589c8e5a97d", "sighting_of_ref": "indicator--d88e9436-f6ca-4ba7-9639-0feb1271a7b5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60708bbc-e7f6-4cc4-a685-a452f2542c36", "sighting_of_ref": "indicator--2747be40-667e-452b-9ca7-cfb02141a67f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907722d4-d704-44b2-ba4e-93b3b109c562", "sighting_of_ref": "indicator--d3b080d7-18e2-456c-bc15-da1ccece0c80", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74526c0-acf7-4c4b-87b1-bd6989222409", "sighting_of_ref": "indicator--61a62c32-0f57-4cfc-873d-ec20ea40822b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb46aa28-0876-4e16-9681-3d516b92aacc", "sighting_of_ref": "indicator--b58d23b8-cc47-49a4-bdc3-f70dfc3d7136", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85543b1f-e42f-4489-ac8f-f6fa22979234", "sighting_of_ref": "indicator--580ad817-71e6-4776-a9b3-7988b015ef3e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f750516c-3ab6-4d66-a464-e61fa2e396cc", "sighting_of_ref": "indicator--3673d846-5306-4f1a-a6b6-47913c0620e1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7059af01-77af-4072-8666-1964ceecd141", "sighting_of_ref": "indicator--4f373aeb-38e8-4f7a-bba6-c62cffc1b616", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67482908-5f27-449a-af67-b322b7078e81", "sighting_of_ref": "indicator--f3084773-4dc3-4fd3-bf40-d93ce62fa577", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9a8071-d984-46be-b71b-fa07197c88f1", "sighting_of_ref": "indicator--365e06d6-27c6-4da0-9a66-84ac66ffe35d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af15662-fd23-4847-aa42-df7ff893c031", "sighting_of_ref": "indicator--14f96b39-370c-4c6b-8af9-1f9cb910a770", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c70187a-8ac5-4155-9d98-ac4e544aa075", "sighting_of_ref": "indicator--5659fb7e-35a2-4187-ac79-ebbc2627fbe9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf70e502-f23d-43d6-8aa5-c3ac397edbee", "sighting_of_ref": "indicator--b1d6334b-b454-4fd1-bf2c-fd7e3d304da8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895d28f4-1a90-4280-94ab-c007082e824f", "sighting_of_ref": "indicator--ab1b8b09-fa1c-4963-a4a9-a2e9c5672f00", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed912f3-6b88-4f33-b19f-05248f918e12", "sighting_of_ref": "indicator--5d43da8e-df71-484e-9fe6-4afe3ac23f60", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaaa5624-d091-4688-85ca-861873b1d2ce", "sighting_of_ref": "indicator--9d63fd0a-3bdd-4dab-b6f5-995bddac0f9a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be17b61-b0ed-41db-9616-76ee347397a3", "sighting_of_ref": "indicator--ccd821cc-19d2-4f93-9feb-33a01415d0b3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764b4eea-fe09-4cd5-82ac-14ceb317b045", "sighting_of_ref": "indicator--5e93921d-645c-4905-8991-d1d7cb4589dc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b27d36-5f34-4baa-b584-2a0d059f8eb3", "sighting_of_ref": "indicator--6efebf89-1f43-4ba2-8d27-016703589bd9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c474f4-fd4a-4142-8371-834709f31baa", "sighting_of_ref": "indicator--c8c07070-f5a6-4116-8a98-ec0fbee4ea1f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a5848f-e2ef-46a7-be2e-31b7247b6695", "sighting_of_ref": "indicator--f3c48142-fedf-400a-85f5-9f0d58c6d598", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e2ef0b-951c-4f9c-ae87-3fe92e39b090", "sighting_of_ref": "indicator--09ac3559-76e0-4b26-9763-500967f71fe7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b21692c-92e6-411d-8b57-6985f945f904", "sighting_of_ref": "indicator--7b1d5661-694c-45e1-bbe5-799149777749", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bccf076f-2f04-4f08-bd02-606a300e5316", "sighting_of_ref": "indicator--998b393e-b923-4b00-ab33-6ec77c9bf38c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0d1da2-c0d0-4890-a4e2-9ead292e45c3", "sighting_of_ref": "indicator--54215f31-cd83-4d0c-9516-ef9020c62dd2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b09950ec-fba5-45f0-b567-8225d1e19e64", "sighting_of_ref": "indicator--b771f59a-df9d-48f7-ac93-f9c177204ce0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d9b652-1d51-4697-ab96-a68be70209f4", "sighting_of_ref": "indicator--f1b02d3b-60c0-49a1-87ce-d2700802da68", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087bd4b9-5a36-4fb0-aed2-ab38ae47e779", "sighting_of_ref": "indicator--530efd91-cb89-432b-9fbb-dcf19fac3dff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72976e4f-d56b-4ec3-84fb-7a835ec37369", "sighting_of_ref": "indicator--6f8fa71e-cdbf-4dcd-ae28-a3b17fb6803c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c7986b-dd55-43ab-94db-a041c6385524", "sighting_of_ref": "indicator--0496800a-ac2b-4bb9-a0cc-dbee6b23d6ba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830acee1-aa94-4dc5-8bad-db276e7e075c", "sighting_of_ref": "indicator--704e1b7c-1560-46d8-83a0-cee800acb8ad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b91c9f-2867-486e-aebb-a324346e8e9c", "sighting_of_ref": "indicator--2627d606-e6ab-42e1-80b4-bca5f3f91327", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5f0fe3-5751-4859-96e3-6f00d2aadd6f", "sighting_of_ref": "indicator--8293d6d5-4fd0-4701-849f-1d66cf945547", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02874b8d-6f3e-4fa3-9ecb-a551f02703ce", "sighting_of_ref": "indicator--a3e12e20-3dc1-4544-8042-cdf9613677ae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2387701-4d41-4ab4-bc5d-966bccdef4b8", "sighting_of_ref": "indicator--619743cb-5fc9-4e9f-8e1b-92f5b92e1cb2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783e4658-5bc9-42a5-a05d-b429d64e56a0", "sighting_of_ref": "indicator--3d7794ef-6b83-4641-8004-63d19dc1e23e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94264b4b-d702-46c1-8fdc-e4df58a4b222", "sighting_of_ref": "indicator--a818bd9c-dac0-4f22-aa38-54c8848c4d70", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0270ea2a-4a68-458b-a0ff-a669769b404d", "sighting_of_ref": "indicator--6c6fa396-7824-4d1e-86a8-b1211b655e9f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adfa4c3f-1162-4592-b543-529f97e9eaee", "sighting_of_ref": "indicator--b0b64497-1611-4ebc-9a74-5703c6ecc270", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9417c2b-a680-4d03-a1c4-b4f1f07122f4", "sighting_of_ref": "indicator--710b5688-ed6d-4a64-8233-86692e816f4f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0fe4fb5-9e2d-4de8-b37a-d19b4c6d2cf6", "sighting_of_ref": "indicator--d098f592-c0b8-4334-946f-1762644d8ea8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037de7b8-559b-47dc-a739-7e2abe4993cb", "sighting_of_ref": "indicator--0f1037fd-7d11-4574-bef9-6f9bb97d4811", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e348e992-e37d-4932-a873-5981946ee851", "sighting_of_ref": "indicator--2c8c92de-6d2a-4510-afd6-8721452eeb3a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f196875d-82f6-4c4f-b7d3-aed675aa5474", "sighting_of_ref": "indicator--93887aae-27a2-4f83-a533-ef05384536f8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1acdf22b-7db7-4886-b44d-4848fc0b5359", "sighting_of_ref": "indicator--a964905f-9fc3-4eb9-a60b-0c6952194736", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac70ee1-a3ea-46cb-bb36-ca1be379ec5b", "sighting_of_ref": "indicator--90d7da35-9907-494d-b9a7-cce6b30fb5c2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137f6555-0946-440f-9920-c59300d748b8", "sighting_of_ref": "indicator--60b6e8cd-5ed8-47cc-96ed-6bf250e91cce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea0b4c8-e162-40c3-8220-ed91c7d71b7b", "sighting_of_ref": "indicator--e4841ad2-89db-4f66-b497-fdb08b8254f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec2a8630-2a50-4e04-a1e7-9dbfdb1f1006", "sighting_of_ref": "indicator--ebe1d893-0cba-4730-95be-c9305c886713", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513f1cf5-e588-48bc-b232-9563738b490a", "sighting_of_ref": "indicator--5953edd6-e2f8-4bea-8356-d2015de60e71", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14bdde1a-434d-40bd-9282-8aca35ca0e50", "sighting_of_ref": "indicator--a9245c01-9bbd-4d95-9122-3885208d1b08", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4c356a-8ce9-457b-8b4c-231309be099e", "sighting_of_ref": "indicator--8064431c-db07-48a8-918e-da26f0205efc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b59c7f5-2657-4443-9cb8-87ff6d583e2f", "sighting_of_ref": "indicator--ada318d6-34a8-4942-949b-2dd4eef9b6f0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--391dbac4-7af6-4a3c-9067-a50f4b1304dd", "sighting_of_ref": "indicator--fea01896-0245-4c6b-ba1f-5c614d1bd8b5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fdb58e6-f6b6-4442-a04e-97c3a8008bb3", "sighting_of_ref": "indicator--0d60848a-eecd-4b91-b19f-8ac4a2faa24d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d3f9ed-c9ed-4764-b121-0d2cb839124b", "sighting_of_ref": "indicator--3d02ebf6-358f-4ff1-b19f-786459b19c30", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c568c0a8-fa2f-4c7d-a625-db3ae0d519d0", "sighting_of_ref": "indicator--0cb58dc5-4299-48fc-8445-7a63c0e8e3cc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d2c0e6-3d08-49f3-90e0-525e3f969e6e", "sighting_of_ref": "indicator--e8012b2b-f7eb-45f4-833b-872e20daaf35", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f32c7115-02b5-4aa0-a8be-f9cf603efca5", "sighting_of_ref": "indicator--998d407a-5448-495d-a843-389f1a6d111e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41aca4b6-311f-4efe-a267-e84101d736cd", "sighting_of_ref": "indicator--466ae8ba-bd6c-411c-ad1c-724a18c03855", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e26cfce-4ce0-42ba-b85e-8dbee96140f3", "sighting_of_ref": "indicator--11a8dc42-7017-4813-b75c-ada6675bff67", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f3bb6c-7263-48a9-b57a-e5d9fac995ee", "sighting_of_ref": "indicator--87c2f62a-1731-4592-ba5f-9cb522b34623", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2294774-8e2e-48ef-a0f8-531e476a3c5d", "sighting_of_ref": "indicator--be440413-1e66-456a-95d9-a403d4c7a314", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb9eb47-83ca-424d-b866-194d9f2ef5ec", "sighting_of_ref": "indicator--4e1322b0-bd8a-45cd-89a3-5ed71bd4fed8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e43cc6-eac6-416a-bd31-460b29eaab30", "sighting_of_ref": "indicator--f3708c80-8572-4b36-86b5-2a193d5efd1d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af1c4c8-b53a-4a41-8dc9-9509fbcf495d", "sighting_of_ref": "indicator--0f536a03-37c5-42b0-8db6-a9b3cafc07d1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b8c782-a6ab-4e7f-bafb-ff73e0f33062", "sighting_of_ref": "indicator--b7413d0a-948a-4e90-b670-26182e13f7f2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea071c9-4ba0-46a2-bd42-35854d8c986b", "sighting_of_ref": "indicator--583e6cc9-c114-488d-83a7-03e44d259a90", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df023846-f6f8-4f10-a4b9-359b23b01c76", "sighting_of_ref": "indicator--54f02d1c-1d95-4dfd-9bee-e5e1bf547b6f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7723372-3d09-4496-bd99-f88013d97746", "sighting_of_ref": "indicator--08f8b912-0a13-4842-9947-075b7d96550a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d588f9b-f8f8-41a7-afe7-3cb816363996", "sighting_of_ref": "indicator--8ea14e0d-d3b6-443c-ab23-795fe08cdb19", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cc5e75e-ac10-4b01-bd01-0dee5f2cdb03", "sighting_of_ref": "indicator--df04b6e4-5a7c-45a4-b659-9cef4ca27017", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a69cbc8-30c2-49ff-b86d-fc5970027dd7", "sighting_of_ref": "indicator--fe773d78-8826-454f-a1d8-b202cd5c2978", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd9ca7a-056f-46d4-8ea5-89832ea9a0a9", "sighting_of_ref": "indicator--3c39999a-dd77-4a8a-b862-69538584d5e0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910a6cab-61c9-4679-889c-cbbd37d014a5", "sighting_of_ref": "indicator--7c02a69a-af5d-4be3-bbf4-828cc9369c6e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd10429c-3da0-4614-a357-0eab5a1d5818", "sighting_of_ref": "indicator--5f155fdd-2688-42ba-88ef-4573d623ecbb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b266767f-b262-4c2c-aaed-bbdcadb5302f", "sighting_of_ref": "indicator--7effedb0-18c7-46e1-94ef-ea80a75fee2d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90dd7ac2-f611-43d7-aff0-0bc681125f93", "sighting_of_ref": "indicator--7b364b6e-7929-4c79-89ba-300876bd29e4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596aeb20-ea64-4b82-80cd-1bf676ec4e22", "sighting_of_ref": "indicator--61a24003-b655-49be-9cb8-f3ddeca89362", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68326296-b0ff-4880-a5ba-fa1b01e90e33", "sighting_of_ref": "indicator--a0f76b37-0171-4c19-9bb6-3d46eddc1700", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1ff194-2a4f-4b62-b53d-70410d1504aa", "sighting_of_ref": "indicator--11aa0754-18e4-4847-97dc-5703b6252a0f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b23bc5c-e82b-4ce1-89e2-4f41ac544aa2", "sighting_of_ref": "indicator--c0e37a2e-920e-4bc7-b407-b303cc4b8c1d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd9ffe3-e23f-4642-a71b-aaee09c3a2b8", "sighting_of_ref": "indicator--99f2aa97-5ec7-4ac4-b4e6-c1d71118d3ca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc25c31-80f2-477f-a0e8-2e594632d5ca", "sighting_of_ref": "indicator--59963e15-b8bc-49bb-93b3-ca2848aaa820", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61afb9d7-07c4-4e47-aab3-3b415e41369b", "sighting_of_ref": "indicator--f7c47323-2e70-4b46-997a-55365ef53afa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b432f90b-1d85-496d-8c9e-bbb9730f392f", "sighting_of_ref": "indicator--898db4fc-be9f-4fd5-9a7f-67622e851608", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4651cdc-3101-44f1-8010-59d5f4a69752", "sighting_of_ref": "indicator--8df7394a-7968-47a2-99e1-1f0c8d9e5786", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86fce0ec-d93b-4a98-bded-c9b97cf2c9ec", "sighting_of_ref": "indicator--fee7cca6-dfaa-4b4c-b312-a362d0ef263e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a3b5e4c-3f1b-40b5-979d-24c8eadbdd2c", "sighting_of_ref": "indicator--76dd284c-d40b-46d9-9694-35feece9afd9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c94f006-d041-4cf7-82a4-69811f820ae5", "sighting_of_ref": "indicator--0e34fdf5-e329-4944-ac81-9501629df5ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff49b313-45fd-43f7-89ac-b92d6d7d7e37", "sighting_of_ref": "indicator--b6ce540d-c9e4-4b74-96fc-0534559a8c5d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1203db23-ecc1-48c7-b74e-41a8f84f6eab", "sighting_of_ref": "indicator--4645360f-765b-49c4-81fd-e6c9dc592299", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd5e8e9-9432-443e-9507-3ddfdc9c24a6", "sighting_of_ref": "indicator--cefe9092-8c0f-48fe-b323-0a8fdf172e20", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d181e688-a194-4831-acb3-61a7bc4bec49", "sighting_of_ref": "indicator--51e5fcc6-adbc-4a34-9029-0ced104d9482", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b424e755-3e65-494a-a3f4-187913410d96", "sighting_of_ref": "indicator--98e791bf-b944-4fd7-b3b9-95537fed140d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--106e3210-753a-48c9-abf3-f6c3ed9701fc", "sighting_of_ref": "indicator--9b5069fa-291b-4b53-8436-1e4fcc7b37c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b408fd27-a737-467c-b12e-76a030bfceeb", "sighting_of_ref": "indicator--2275a895-582b-4415-942c-24ce00089835", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458ccbe5-d284-4c05-8795-3f4ae55f88e9", "sighting_of_ref": "indicator--ae6aa21e-9551-4a31-af03-4c89af95dbac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a1346d-efaf-4027-a8ec-804e2bf86a6e", "sighting_of_ref": "indicator--f15f7a64-108b-4c11-a74c-bb16e7a7791a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739e1a19-6ce1-46cb-ae80-23992c6032b7", "sighting_of_ref": "indicator--5b8d332a-abd3-46f5-97e2-6eef70b04b37", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca1784b-9eac-4830-b42e-d377c6feb207", "sighting_of_ref": "indicator--1077a95c-744f-425f-bbd8-b05d337ff2d0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db77cc54-36cb-4304-8c29-525286b733d1", "sighting_of_ref": "indicator--d4980cbe-feaf-4a4d-ae1c-771bf20688bf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e8b1ec-6e68-414e-a1d5-176e6c37a1e3", "sighting_of_ref": "indicator--5a754bff-81bc-4716-82cf-5bc0fd1b7386", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab7ace6-5689-4130-8ef8-d5662519fc89", "sighting_of_ref": "indicator--33f9d346-0f51-4b59-be0a-3ddcd78e905a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb18e31-a975-4746-8c1a-29aa07278f3d", "sighting_of_ref": "indicator--4988ec61-dc20-4a5a-a061-55164a47fc3f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--398a6e71-6723-47ff-b3fe-0517f87a82f1", "sighting_of_ref": "indicator--4d5f59c8-8205-40b3-a706-ccadfe8617d4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e601ea93-1b99-4eff-b34a-be5e01f1a2a7", "sighting_of_ref": "indicator--3c1d5b72-84df-40f8-adc2-fe6a70dee305", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d240b620-05bf-4d9f-ac6b-6e149951e66c", "sighting_of_ref": "indicator--2993b3a6-5466-476b-9ea4-04d02286c3f6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23acc022-1f51-4252-a57e-f4203bd8cfef", "sighting_of_ref": "indicator--82bb8097-6178-4eb2-bc53-795024772457", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6193cf96-5142-4c3c-a7f4-b153c840c962", "sighting_of_ref": "indicator--fbcf4421-9643-46d1-839f-00e203a13de3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e908577-a8bd-4c2a-a550-36a36169b108", "sighting_of_ref": "indicator--01295051-3fde-4430-85e4-e724ccd934b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29482fec-93dd-4870-9c23-c1500b66d3d5", "sighting_of_ref": "indicator--42a97505-539a-4f36-95f2-5e819c655070", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2124e2-adfb-4ec8-9035-d3b4e34429a8", "sighting_of_ref": "indicator--5ded5675-76f9-4bcc-bc17-9c02909cbc03", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bec08f9-2d4c-428b-bf3a-efe8d36f5609", "sighting_of_ref": "indicator--7fedb243-e471-4692-94f2-95d760a46534", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a5761d6-d9b1-411a-aee2-be639a1a3c8d", "sighting_of_ref": "indicator--14a02cfb-d6e3-4849-99f1-cc7962bfb762", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aaf2468-a765-4257-abb5-34d6532d8788", "sighting_of_ref": "indicator--6f737ca9-9dea-4e0d-ac5f-462a5cbcb56e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76321c88-c61d-4742-9863-662bdd13f61a", "sighting_of_ref": "indicator--f91f5fbf-93a4-4b9f-be31-597e28913406", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72abdb7c-1987-4945-8069-a30181da0fea", "sighting_of_ref": "indicator--ce7d0869-8942-4692-b34d-28f8e5f71d8e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d181b97-1716-4e3d-be73-f557f150aaad", "sighting_of_ref": "indicator--6b2d7592-2aaa-4861-9c9b-1d269f5464c7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21be4e7b-f979-496f-9d8c-e485542bb576", "sighting_of_ref": "indicator--f5f4d043-2600-43f5-8415-258406a0b9c2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f3bbf4-021d-4435-881b-d252687bb42f", "sighting_of_ref": "indicator--c4e46703-0808-4939-a43b-bdc41fae1785", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebfa16ff-ebb5-46d3-b675-ee539c114e8a", "sighting_of_ref": "indicator--2fae296b-e8a2-4f74-9da9-d81a9f789da7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3e2aa2-e6e0-49bd-81db-0196d4ee1a0b", "sighting_of_ref": "indicator--af26a28e-9569-45a0-b5a2-110ebe426174", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8fb909c-d0d1-4e34-bd5c-0d7deac77832", "sighting_of_ref": "indicator--1409b6c6-7128-45bb-8c3e-42ab13efddde", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e65ccee0-e144-4b62-9d46-251f162a435c", "sighting_of_ref": "indicator--276d7bf5-983a-4a66-9180-72c963bba337", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846715f2-3577-4a8a-8e71-0ec138f12ab8", "sighting_of_ref": "indicator--aaff2c86-875f-4fd2-bcd3-d68a59120e63", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559381b5-45e4-4c10-8cde-cea4643f3bb3", "sighting_of_ref": "indicator--4c6b240f-f279-4587-83c2-88f868ce4b8e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe23706-6469-40c2-aef5-ef0c5ac419b1", "sighting_of_ref": "indicator--60383101-951a-4f0e-a296-867f17274ad4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2aff269-fda1-4a4e-90c0-717d70279515", "sighting_of_ref": "indicator--2bfa45f4-c94b-4a98-b59d-cc9ebfbbd024", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a5868c3-0a93-4f8c-8c50-9bf94968bdd4", "sighting_of_ref": "indicator--c751c5bc-8df1-4be5-b5a3-e4227f87b138", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652d9ebb-618e-455d-a265-6b76652fac18", "sighting_of_ref": "indicator--cc9f6ddc-619b-49fe-8445-763c907a3bfc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a8593e-344a-4a37-8ffa-adefb7738980", "sighting_of_ref": "indicator--46f8b45f-ee40-4476-92d2-ad6a6369e3f8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba135f35-65c2-4007-99ad-8ac1857f1434", "sighting_of_ref": "indicator--738b8e91-7ee6-44d1-99af-04da437a529e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6237edd-3929-4eef-a22e-093902af2664", "sighting_of_ref": "indicator--5ce7ed91-f1a3-4216-a06f-861b78b65ebd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1defe1b0-a630-4bcd-92ea-bc09d32803af", "sighting_of_ref": "indicator--9df5cc10-3d85-4c94-ab8d-b1b76ba0f521", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6482c15-e419-417b-95b2-444390e5591d", "sighting_of_ref": "indicator--202146c3-94c7-4714-ab12-bdb2b57852ab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c36caf0-63ac-402c-b5df-9095be45a3bb", "sighting_of_ref": "indicator--14de91a6-5ce1-4934-b613-9d1c9a3bf0af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6061275-0e0c-4814-81c3-d25f9c8993ae", "sighting_of_ref": "indicator--93ecdd3f-e49f-4aef-a44c-72211ca27319", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f69c72d-b85d-44f8-b844-670202494825", "sighting_of_ref": "indicator--ed7ed6a7-ec20-48a3-868a-f26efb851a91", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b202f1e4-b2d2-4f00-a5f7-313dcff286c7", "sighting_of_ref": "indicator--3d1a451e-6933-4d82-8152-8e9962b8acce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8643f9c1-e6f9-4389-97e0-3edf7f0885cf", "sighting_of_ref": "indicator--7864476b-03af-4314-a0c4-8a4b2b044495", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd12e0d4-a19d-40d6-9d95-081f78c82ace", "sighting_of_ref": "indicator--c8acf9fe-c329-4876-af8a-eebecba880b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6effb2c8-28be-45e9-82ca-17f2b5317610", "sighting_of_ref": "indicator--00bfe9ed-4b9b-4c41-984e-5e7b970951ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33435e9-9cbe-487d-a4ed-5df70ac87a13", "sighting_of_ref": "indicator--88fbdf8a-989a-4fdf-82b3-dd1b2b460aeb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5d5537-9593-40c6-a1a1-b04f28f7a8cd", "sighting_of_ref": "indicator--69e3935a-bade-4bec-b254-85da01c1bf10", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9037d8-d6ae-4931-8292-ffa3f85276ea", "sighting_of_ref": "indicator--65f25c49-0b34-42d0-b39f-f246ba41184d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a57a5995-71d2-4d76-aaf4-c43560b2b352", "sighting_of_ref": "indicator--58973672-ded6-42b3-9c9a-082b884898f6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a81369-e110-46a5-93c2-8c276f085232", "sighting_of_ref": "indicator--2905c518-f03b-44f9-9465-30447eb4cbc0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e80f1f-6fd3-4ab6-936e-f0078dc78af1", "sighting_of_ref": "indicator--be6410b8-d87f-4b80-8933-bfb243266e97", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa5f2b56-f976-47de-ac59-a48d05005807", "sighting_of_ref": "indicator--d7320c29-c5ff-4045-8468-13b491934ae6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891730c5-d539-4daf-b195-169918877dcc", "sighting_of_ref": "indicator--b5728092-b0f3-4572-916b-47a72b4c3a93", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4327ec8a-9450-4369-8dc3-1c76fb5d74de", "sighting_of_ref": "indicator--a9058b79-5e3d-4399-966f-53bbe4cb74b8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff86147-471c-47ac-af38-f09a39a36994", "sighting_of_ref": "indicator--4716e1cd-ff7c-450c-90f8-4cfff21b5e54", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c86a0f-427b-4d59-9a6c-1c169e0524ae", "sighting_of_ref": "indicator--b26e48fc-9cef-4693-90bd-fbacbf13bba7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63eb7f13-18f7-4201-86d4-1b30c6792a45", "sighting_of_ref": "indicator--05252b5b-c3ab-4304-a114-136b1028196e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1af2bd-6084-41e9-b423-04301cae54af", "sighting_of_ref": "indicator--29bf5106-5a17-477c-af45-db7bda1874af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68318e1-6860-473e-bc82-f1d297a7ca31", "sighting_of_ref": "indicator--c1bfd971-86e1-41a9-9a03-d11d7014411b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a39190-8015-4ca9-9147-90206d4dcf88", "sighting_of_ref": "indicator--59cebbb6-06bd-436d-a2eb-6627d01e8a84", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415d9839-6840-4448-808c-021a3fc36f9c", "sighting_of_ref": "indicator--7df49708-3afa-4c78-8103-f5fef907fc39", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09bb561-53b3-47ea-9038-e795c8765b6c", "sighting_of_ref": "indicator--89becdd7-d9b8-4daa-8820-42682591720d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4d64e5-6e5f-4525-95d8-0eacb7c7edc3", "sighting_of_ref": "indicator--fa306a6e-82ad-4215-8ccd-3842d4227e70", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b72c51-a84e-4c35-ab23-0deba69450f6", "sighting_of_ref": "indicator--33c87b5f-7e60-4ed2-a389-a3b83f63831b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681880c6-963c-401f-afeb-d0d755af71ee", "sighting_of_ref": "indicator--ba87268f-0623-4f6c-8177-df207ff68d00", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c01b4ce-84d9-4849-b991-1d452dc49fa5", "sighting_of_ref": "indicator--46f16dcf-bd1d-4c71-8822-e6d31e74132e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c32afa3c-c429-4917-82fa-32426de41d0c", "sighting_of_ref": "indicator--ae778c4e-8156-4e01-a412-7ab1c04aac54", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db472f35-e912-4860-9bad-6f4e17df515e", "sighting_of_ref": "indicator--40bc00ad-fb7b-4a31-ba89-cc37e972c257", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fdc1422-f725-418b-abd5-7e0fc851c75b", "sighting_of_ref": "indicator--d388dd95-39f1-417f-8a30-159af2d3c544", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df5944ce-4371-4181-8535-0a7b5afeb2bf", "sighting_of_ref": "indicator--6e01ae72-899c-41ed-8ca9-70b78f6ba215", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f587b0-6da3-4e97-84a3-ef0c20a55843", "sighting_of_ref": "indicator--b3a5abab-41a3-467c-870d-5dded9633184", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678654e7-8f2f-4027-a950-26b167b6ba85", "sighting_of_ref": "indicator--fd94fa74-49ad-4b3f-88fb-622dd0796fac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583e8db8-5c0b-4b93-a009-bfe80699163b", "sighting_of_ref": "indicator--c4097fe4-9b5d-428c-9422-c7779b813e45", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07ad97b-c6f5-487b-b654-baf2e8aa242f", "sighting_of_ref": "indicator--21a2db8c-af82-4b84-9110-f98c0669c5c3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad454bb4-e88d-4860-95dd-a4d740c0fdb0", "sighting_of_ref": "indicator--b7c7f464-41a7-4a0e-aed5-e7230598a1ad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a3a59d-8a1f-4d34-90f8-edd129f0542d", "sighting_of_ref": "indicator--33687bfe-bc1c-4d7b-a451-73f06c1e1ccd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf24a85e-e3e3-401f-8807-163a9934dce6", "sighting_of_ref": "indicator--d018bc7f-b2ba-4f33-b343-d7c8142e5a8f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d468da3-eb78-4066-bda4-dd343a6be265", "sighting_of_ref": "indicator--48b6b106-4d47-466a-8ace-e6e5d1139d31", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf1cbfb-eb41-4b4e-bb23-36e541ead53c", "sighting_of_ref": "indicator--b515250b-cca0-4595-b643-db8a79ea5003", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f253f085-cc16-490e-808a-981359fe9cde", "sighting_of_ref": "indicator--9fd7a84a-c280-4ba6-ba7f-b87a20e74f86", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaebca74-6fb9-47ed-b4e9-7570dc663374", "sighting_of_ref": "indicator--99e02634-56f5-4819-bf15-796815939dbb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2153aa-543f-4cd4-a6df-119557a5c9f6", "sighting_of_ref": "indicator--cba016b7-3a0b-4e13-aa29-ec24aa068566", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c199d6f9-b151-48ef-b014-f7439e7dc6ad", "sighting_of_ref": "indicator--309aaccc-e96d-45e6-a2c3-ef3f0d0b4c8f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be05eebf-e67f-411a-93c1-f6f0fe508053", "sighting_of_ref": "indicator--6f11a905-ca77-403e-8767-39068126b082", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d36924-1b78-4693-b69a-8b87e0cf34b1", "sighting_of_ref": "indicator--55c27a9f-cdcc-442f-a58e-926756b74f8b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1e8ada-0b91-4dd0-9449-815c0b0d1669", "sighting_of_ref": "indicator--a81dcc52-83fc-40ea-9cea-84bc94eb4207", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f08b2e14-6489-456d-92e2-2fe78399fd1f", "sighting_of_ref": "indicator--55e10ba1-da7f-4b9d-9fa8-c668f4c31316", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d020e7eb-9b56-4d02-829f-81b6b193b4f9", "sighting_of_ref": "indicator--80d113fa-d6d5-4af3-bd8c-3799bd0a9b21", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a0a4e2-5546-4406-9f6d-42fbc8a8f596", "sighting_of_ref": "indicator--09969930-7b5f-444e-9372-d4900e1b3b97", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ae7a23-5cd4-4e1c-8c3d-c28e89a4429a", "sighting_of_ref": "indicator--cc6ad5f0-b92d-45a4-9c0f-144733507256", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7670d7-4ecb-4ecc-9d41-23b1071def4c", "sighting_of_ref": "indicator--509c3658-dca3-463d-8773-22fc35d7091f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dedf4482-2881-4d81-ab7f-6570e8b0cd1c", "sighting_of_ref": "indicator--87cd0610-8c6b-4096-bb1b-a9d5c3fc5029", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc9b069-f887-46bd-91e9-d771f5ac970c", "sighting_of_ref": "indicator--ce99db0b-42a3-4c6a-9ce8-d0a6e8e93c87", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddcc5f38-d224-468c-946f-7c88991db3ba", "sighting_of_ref": "indicator--682fe079-b2b8-4fca-9a8d-6071ab5508e1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0deeda-843b-4eb3-b055-58e540ac0ad4", "sighting_of_ref": "indicator--8bef1e3a-beb4-4aad-b3c3-0da0d24c67fc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f6eb3d-55d8-4c16-98a6-aceb805c0781", "sighting_of_ref": "indicator--2916e294-de5f-4364-b2ec-e0d3e3da8476", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de28db4-6a32-4212-b080-2bf3e315f927", "sighting_of_ref": "indicator--d6617b69-7b69-4e70-bb50-9941b4215b00", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3bc1147-7b74-4441-b555-f757cc32df1c", "sighting_of_ref": "indicator--3c5e7037-a3d9-4bb1-9212-9f7dd399a9e7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008bab58-fa1b-4b46-b91f-0df394b17a96", "sighting_of_ref": "indicator--3573e926-d9a8-4128-a2eb-1d3f096dd57e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3532ac5-99d3-43e1-a676-06309b92b1a0", "sighting_of_ref": "indicator--e95336a8-47d7-4323-89ce-989fcbba0f73", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583cf6f6-15ba-44b1-9c11-1ecd154c4fdc", "sighting_of_ref": "indicator--3a5fc51a-5f2b-4530-8983-fda3afa85332", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22186030-a70f-466b-8711-6255bad26044", "sighting_of_ref": "indicator--f2f82411-6c6f-4380-a081-c33551af3e8b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b9b556-b434-4664-a4e7-777b3f675b77", "sighting_of_ref": "indicator--bdea7fc7-cde7-424f-b14a-55a149b8fe61", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ae5f50-6769-45bd-9de6-4eaed1246930", "sighting_of_ref": "indicator--d2f3af0b-bac4-4b51-b756-7658910ecfe7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e6ce6f-aacb-459e-9aec-e5cf575b4db3", "sighting_of_ref": "indicator--700aaa78-c9b4-42a9-8141-f871e94b5b2a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17afb99e-8511-4589-936e-b3524ca4a414", "sighting_of_ref": "indicator--1f9b19e5-a536-4088-9907-bc1ae8691ca8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1cc9aa-b91d-4330-af8e-24cdab0e12a9", "sighting_of_ref": "indicator--20e38fbe-a702-4964-a97b-ae1a702ad695", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9efb67e1-df2d-4d4a-b467-5a0edf77c042", "sighting_of_ref": "indicator--53cdb0d3-1eea-4187-adf4-fa2b46206bbe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0a2d84-c5ac-4ae2-b784-8d0cafe99719", "sighting_of_ref": "indicator--45b268b7-ad26-4d08-a304-04dd2eaf4208", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c196c998-e4fe-4789-a2b2-1f090532e3af", "sighting_of_ref": "indicator--c9329e4c-aa75-4bdc-a006-320590cb6080", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063e76ab-7fb9-452f-88b5-fa1377891f55", "sighting_of_ref": "indicator--501e316b-0220-454d-a1fa-4d20c3c64db1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a94607-6810-4f9e-a82b-3ae614c664ee", "sighting_of_ref": "indicator--501e316b-0220-454d-a1fa-4d20c3c64db1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785fb9e5-df7a-45d5-a42b-ffa75fd4b556", "sighting_of_ref": "indicator--5b8af402-e410-482e-aff0-40f0996b1a8a", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2931d4-4564-4ff9-b430-6dc8ece92340", "sighting_of_ref": "indicator--abafac4b-bc07-4c25-8791-bf51173316d0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496472ea-a506-4880-804a-e417c8a35eee", "sighting_of_ref": "indicator--600eb182-113c-4b62-98b3-4ae43d96ccee", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03620a64-f317-4cc7-8f99-d0dc37d04e8d", "sighting_of_ref": "indicator--b062fa5a-90cc-4582-8b26-8be13a77e0c7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53990ff6-1643-45ca-82d8-3a0741f48026", "sighting_of_ref": "indicator--39c149f0-65fd-4174-88a2-8b9444521a5b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4acd223-3292-4604-a069-8afd59465686", "sighting_of_ref": "indicator--d66b63de-8962-4ee7-b2e7-2247e52d2154", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134d037e-416b-4ecb-8150-f0bd8b991c8a", "sighting_of_ref": "indicator--d66b63de-8962-4ee7-b2e7-2247e52d2154", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002cb5e5-5b9c-4429-b9de-b5dd8589fd56", "sighting_of_ref": "indicator--725868f7-44ed-4598-accf-8b8b3e743d12", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--350c9616-8e96-41dd-8946-2823b16f7094", "sighting_of_ref": "indicator--725868f7-44ed-4598-accf-8b8b3e743d12", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235f5d6b-83c1-43ef-aacc-935885725c76", "sighting_of_ref": "indicator--f5a4a366-a0bb-48c1-862a-61fb3e1736aa", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22cc259-4b3b-4ba5-b7d6-50f732d823f5", "sighting_of_ref": "indicator--f5a4a366-a0bb-48c1-862a-61fb3e1736aa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea057d3d-5f31-49cc-803e-a40bf0a09678", "sighting_of_ref": "indicator--b153065f-fc4e-49bc-9f35-25e2f3f4b57c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7cd9f4c-6216-46b6-bb1f-0ad348b57042", "sighting_of_ref": "indicator--b153065f-fc4e-49bc-9f35-25e2f3f4b57c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84aec2d9-2a7c-4385-9b49-ed84d30b0095", "sighting_of_ref": "indicator--825caed8-09e6-4494-8362-833cd71e8ccf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518e2f5e-7e00-40ce-9785-333b154c081c", "sighting_of_ref": "indicator--825caed8-09e6-4494-8362-833cd71e8ccf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351b87f0-06d7-4235-97eb-e00b60be5e48", "sighting_of_ref": "indicator--fa86cda0-9c7a-4ab3-a2b7-68828024642f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c657dcee-6574-482f-9cf0-33abc6130a4c", "sighting_of_ref": "indicator--fda520f6-8bab-4827-b234-33a2c35700be", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a400cd7-48fa-416f-8933-8de0e2807740", "sighting_of_ref": "indicator--ab46be44-369e-4e01-baeb-0fb05e934241", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe27f60-fe5e-49c9-839d-728b2f38cc4f", "sighting_of_ref": "indicator--cfac205e-82d2-477c-a687-25adaa857071", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c7d526-e124-4347-8ba9-410870a2c19e", "sighting_of_ref": "indicator--305d49ec-fb1e-48e2-8d41-eb78894e6334", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef5c658d-a3ac-49c1-82d5-36396e740804", "sighting_of_ref": "indicator--b70910db-e007-4af1-9b37-4b1b46ebfc73", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e0107a-ed0f-424f-86f6-56b097f20d97", "sighting_of_ref": "indicator--4a985024-f0a4-47b7-ac0a-3efa4bbe66b2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2299b39-a9c4-46d3-8926-a577da685402", "sighting_of_ref": "indicator--4a985024-f0a4-47b7-ac0a-3efa4bbe66b2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e12285c8-0efc-42d9-a65f-a7de6206afd1", "sighting_of_ref": "indicator--504b6cfb-81b7-4cdc-9c81-10308891da6f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d128a13d-1d9a-4e52-b218-831f2fa60cbd", "sighting_of_ref": "indicator--c9b665ec-8d92-40df-9569-2de911cadc05", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd0c120-8535-433f-8ebf-600dbc4d6b38", "sighting_of_ref": "indicator--62662c4c-9302-419e-887d-5d67b41cdf5d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7da740f-bc40-489c-bc8b-44fc39ad7688", "sighting_of_ref": "indicator--d64fd97c-07fc-466e-a99b-8a9e57767c36", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ecf8c3d-cc30-415a-ad04-b2b585b21aae", "sighting_of_ref": "indicator--759a218d-0fe7-4d82-93fc-8645b6ec5a92", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f65041-9889-4d27-8d3a-75ca288bed9a", "sighting_of_ref": "indicator--759a218d-0fe7-4d82-93fc-8645b6ec5a92", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14aa3fe-f3b1-4db7-88ba-2bb5dec954e8", "sighting_of_ref": "indicator--56275ac3-2089-4af1-a5a7-572fa8375c92", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d75ffc0-2c74-4f0e-98d3-478f41bbf317", "sighting_of_ref": "indicator--c87e8c27-7f56-4e0c-8ded-8b7e135daa78", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5ae9ed-95f8-4b5e-8182-82931bc46f3d", "sighting_of_ref": "indicator--0c1ac47d-1479-43ff-8997-ec4ab63cbc25", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f623182-514e-4f6d-86d4-fb659fdf4f8f", "sighting_of_ref": "indicator--5facf15e-b507-4d46-834b-a6dbde363452", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eccf42a-691a-488a-9721-0a76bf2122a7", "sighting_of_ref": "indicator--83ac1d55-4269-4082-b111-a2875c1bfc36", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e4bbac-7725-42ba-9882-cdde23dcfcde", "sighting_of_ref": "indicator--3734be68-3aa0-40ae-85bb-6d7254798bf9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6ceeac-4659-4407-b46b-14bb13cc6641", "sighting_of_ref": "indicator--3734be68-3aa0-40ae-85bb-6d7254798bf9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2526c448-7cae-42fd-b893-b4aac12d4fa1", "sighting_of_ref": "indicator--c62a2efd-26eb-481c-9bf2-eb070d3189bf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dab2c2b-f1bd-4de8-87dc-13772de270cf", "sighting_of_ref": "indicator--3dcf0226-3b63-435b-8154-5cf61dad9897", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32351916-edfc-4510-875b-105064b07d17", "sighting_of_ref": "indicator--3c67ebaa-801f-4806-96cf-652921cb1881", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--359eac8d-3cfc-42c4-85a8-9db5b9bc297c", "sighting_of_ref": "indicator--17eda5dc-c8af-489e-9f65-a9be79a06bef", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb615f9-89d2-4d17-9cf6-ab809c758321", "sighting_of_ref": "indicator--17eda5dc-c8af-489e-9f65-a9be79a06bef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f65aaf3-0ab5-4aaf-9c35-4c1f6da2ef7b", "sighting_of_ref": "indicator--873e2221-37f7-4a48-bd70-c9f36128a7e8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--457ed920-67a9-4563-99ab-8513b9abbb10", "sighting_of_ref": "indicator--a7ce1e7b-bac8-432f-bf86-5c97c75239fd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97dc75b-a8aa-4593-b6a5-14c73781f3e8", "sighting_of_ref": "indicator--2f2e9726-0c37-494d-b07c-951403394068", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3994d253-f2fc-46c4-8c7e-3625a6d0a99b", "sighting_of_ref": "indicator--89cfac84-c3a0-449b-8aa6-7e903a350831", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040c10ab-d1f4-4262-8f09-08f1b46129dc", "sighting_of_ref": "indicator--d5c0bdc4-6244-4b47-95c0-aae28c650ab1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5310d6db-1fd7-475f-a45b-dd6de5038091", "sighting_of_ref": "indicator--3ec4e265-dfed-420d-beb1-2dd484e0c9c8", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4156f24-52fe-4089-993e-c5aa401124c1", "sighting_of_ref": "indicator--e9278007-be8d-44a3-a6d8-ff8eeaa9f100", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c504ef-7240-4b85-854e-927684982e46", "sighting_of_ref": "indicator--a89c3d5a-88c7-4ef1-86ff-e46665e76e57", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489c46a4-02a3-487d-90f0-215a7bdabe8d", "sighting_of_ref": "indicator--6f429e18-5f3c-4143-8cc5-fcf504c24e46", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc05ef5-fd6c-467c-8a62-3fb931fa614a", "sighting_of_ref": "indicator--cd939305-6712-4030-90e1-f29d3e31d888", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b2aea6-cef8-46eb-85eb-d73497d8bcee", "sighting_of_ref": "indicator--12191b74-af02-4667-83b5-5d5888d4f837", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6219bc03-a911-4807-ac55-60ea5a66b184", "sighting_of_ref": "indicator--7673422b-b368-48b8-a0e1-0612d400f1e7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4a52ac-61ff-4bc2-aba0-d921e8175ee8", "sighting_of_ref": "indicator--7673422b-b368-48b8-a0e1-0612d400f1e7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f489c9f4-042f-4c10-800b-112761f73f83", "sighting_of_ref": "indicator--107b70d4-0302-4209-a297-d3c2e1e479c0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6579efa-18da-4e03-aa3a-1939fe16aaa6", "sighting_of_ref": "indicator--107b70d4-0302-4209-a297-d3c2e1e479c0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3adc106c-7221-4fe5-a2a0-c9e2840eddf1", "sighting_of_ref": "indicator--4aa30261-666e-4b30-a3d8-6e80ccc91892", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0925b08c-4d96-4619-ade7-c85569f4c451", "sighting_of_ref": "indicator--3d99e9bc-e9d6-4011-a4a0-af63a406e2af", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4932d7-8706-4d1f-9f18-eb0e3aca2ef9", "sighting_of_ref": "indicator--feffef8b-2d83-429f-bad7-e73f6950a585", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c680692e-157d-4db3-8d13-23022c7bfb4d", "sighting_of_ref": "indicator--ae024b05-6879-4372-8788-a75a9d852d3c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e81d8906-ba60-4dd3-b7d0-f2d9eee4a85f", "sighting_of_ref": "indicator--304c7112-82b0-48eb-8335-e699ea1bef65", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7559538-4d0b-46b8-aa8b-35046ec9a300", "sighting_of_ref": "indicator--d4b29110-4954-43d8-a057-ee5f70c09878", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72885b8-4ffd-48aa-871c-775eaee1edd4", "sighting_of_ref": "indicator--d4b29110-4954-43d8-a057-ee5f70c09878", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb554d92-73f6-48a3-adf5-68f6e0d92bc2", "sighting_of_ref": "indicator--1862bd5e-e185-40a8-9c80-c4cbe3b0eff6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b137c0c8-08ca-4c1c-a58a-f6fa848233d4", "sighting_of_ref": "indicator--dbef84cf-5a57-432f-b307-f333c5ed7070", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa41bd6d-d564-4f3e-8377-13162ccf44db", "sighting_of_ref": "indicator--9e2f5cac-5b0f-424a-a55f-3cde3207e141", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed4691e-014b-44ed-bc5a-3ac48a47ba77", "sighting_of_ref": "indicator--e1bbb6e1-a26c-4711-9881-6cd3024272db", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa97b2b-92cc-4e96-b85a-11fc6175eee8", "sighting_of_ref": "indicator--f3bf8f2d-32b9-4ce2-ab19-b91fe014db29", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3970d805-32e9-425d-90e8-0afa85d65c37", "sighting_of_ref": "indicator--2554bd8c-e585-428b-bfa8-8763e263cc42", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ed46ce-6d39-436d-8d10-d7ff911b2fce", "sighting_of_ref": "indicator--2554bd8c-e585-428b-bfa8-8763e263cc42", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05e9dd0-7fb8-4a99-914e-3c0fcbfa6233", "sighting_of_ref": "indicator--b7a3d169-780a-4b6d-9de8-89dd416d822a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958fd966-5acb-416d-a6ba-2afb928b37bd", "sighting_of_ref": "indicator--044f4cb9-8a38-4c7d-9f2a-f5b0ecb00c32", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f5ede2-d201-457b-89c0-648d19722492", "sighting_of_ref": "indicator--044f4cb9-8a38-4c7d-9f2a-f5b0ecb00c32", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3dedf0d-8367-4a0f-a3fd-3f94480a1eb9", "sighting_of_ref": "indicator--4c05a936-da1a-47e9-83ea-c00f9c3f9f1b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59484429-7be7-4709-afcc-9f7e8a1df286", "sighting_of_ref": "indicator--4c05a936-da1a-47e9-83ea-c00f9c3f9f1b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--571da4ee-2a5d-4246-a221-6bf7cd3b11a1", "sighting_of_ref": "indicator--92603567-555f-40af-ab8f-803689bccf11", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f935b61-705d-45a2-aaa4-b583c101533c", "sighting_of_ref": "indicator--92603567-555f-40af-ab8f-803689bccf11", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720c838e-86d8-40f7-8822-e56fef9d5368", "sighting_of_ref": "indicator--059db04f-28ec-418e-a6bd-55ee7707f80f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e34db7-5047-4d60-9646-dbff78bd1fac", "sighting_of_ref": "indicator--cee36170-8e0d-4253-9e32-ad84a99eda21", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff94332-f095-4d1f-b398-5be398f3a269", "sighting_of_ref": "indicator--7a77a1c9-4f70-4ac4-a03c-8b4dedb4ef6c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f294ddda-9c07-40b6-a775-25e68ee8316e", "sighting_of_ref": "indicator--c0acf3f6-d37a-47d7-a1a4-33d5b5ce8970", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de47518-d50b-4102-b8f9-db704e143961", "sighting_of_ref": "indicator--f5c32881-3cd4-46ff-be21-4bcc6d052de9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d8e1d80-a84f-4fa4-8b97-c7d933f42bb3", "sighting_of_ref": "indicator--f5c32881-3cd4-46ff-be21-4bcc6d052de9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6186b2f6-11a9-491d-90ce-302c1e1ca6c2", "sighting_of_ref": "indicator--067a05fc-b394-4235-8290-38457376dfee", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3244f209-5903-478d-8210-af7e9650d6ab", "sighting_of_ref": "indicator--067a05fc-b394-4235-8290-38457376dfee", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2294b2-68ea-4205-8fb3-a00517d4a824", "sighting_of_ref": "indicator--ce579c3e-278d-4bc3-a5cb-d587c68c547e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3951846d-d756-4b2a-a1bd-bd3c17ed2230", "sighting_of_ref": "indicator--69d2f11d-d128-41ac-8d54-fad298539aef", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416a6a9c-74eb-4f58-b533-84e0f93bc390", "sighting_of_ref": "indicator--69d2f11d-d128-41ac-8d54-fad298539aef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32bcc72-a0de-47c6-a10c-b5ad1b83048d", "sighting_of_ref": "indicator--465962e6-23a2-4de7-bcb4-a445ec98ad04", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65444519-0d2d-43f3-8646-68419d73e875", "sighting_of_ref": "indicator--8c9338b8-0cc1-47a1-a1d4-2df42fc558b2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d9d7d7-0e41-4823-9743-8af516f6ec4c", "sighting_of_ref": "indicator--8c9338b8-0cc1-47a1-a1d4-2df42fc558b2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf20a46-c73c-4f2f-8118-28aaa5270080", "sighting_of_ref": "indicator--545e650b-4e5f-47b4-83f2-96b04ccc0c2a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75203cf0-f0a0-4303-a013-6bb5848adf20", "sighting_of_ref": "indicator--d5d1e1c0-2501-495a-bed5-97e72f365743", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7935e88-c249-4e23-877d-c7b40e7cc134", "sighting_of_ref": "indicator--1d4e4cac-1e7d-426a-9aad-dd35d2e1172c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a08646f-1a5e-40df-9c05-779cc26b8181", "sighting_of_ref": "indicator--1d4e4cac-1e7d-426a-9aad-dd35d2e1172c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea556f62-2df8-4248-860f-cb961fccea49", "sighting_of_ref": "indicator--3e903dc3-8c7d-4a49-b37a-978c92957087", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b7229e-f6c4-46d1-a351-caec9b299cda", "sighting_of_ref": "indicator--9b105d3b-bbf5-47c9-92ef-37f928f9c11c", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc8ede1e-993d-415e-9ff9-f65c8e1b1723", "sighting_of_ref": "indicator--02f5fae8-2b3b-4cf7-96e8-1e0e92a2351c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6548b599-0ac9-48d1-a982-a34abcaef2ed", "sighting_of_ref": "indicator--ee9079ae-a81e-4f9e-88b7-63d068224d68", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c693594e-4eec-4add-82f0-711f996addd0", "sighting_of_ref": "indicator--ee9079ae-a81e-4f9e-88b7-63d068224d68", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab9732d-ce98-48d0-b49d-88ad3cf33b36", "sighting_of_ref": "indicator--6bf67a08-ff1e-4e00-8ef3-de8d804f81c8", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e0ce70b-50df-48cf-8c61-c0959134eff9", "sighting_of_ref": "indicator--2efb2d82-898c-4a11-aeec-a8c4906236bb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2528db-b1b8-449d-a096-d202506655c0", "sighting_of_ref": "indicator--32c558eb-7466-49ad-ba4a-43043af6b751", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66e3403-6a90-4819-925e-87e692366527", "sighting_of_ref": "indicator--657d7fd6-81fb-40a7-b9f9-6e006f19a20a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d26d2f-c8bc-4d1b-b050-30c2f6926bdb", "sighting_of_ref": "indicator--21201d57-04d3-47d1-b8da-ef9466f277a0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ce988f-8121-47b9-aaeb-e5db1dcd585c", "sighting_of_ref": "indicator--64fc12b2-d36d-4eef-acee-d3ab49115195", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0c0c03-daf3-42eb-8b89-922bd541cc48", "sighting_of_ref": "indicator--f7f18191-1a86-46f0-b0e8-52b064e61543", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633abbe5-47a1-42e0-bd8b-a27697c509bb", "sighting_of_ref": "indicator--cc92eeaa-25ee-4468-8583-cc752faa0e70", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4244932c-ff16-4740-b37d-696788a542e4", "sighting_of_ref": "indicator--cf0992ba-dab9-4def-ad74-6c0039240dbf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb55eaf3-bb9f-4da2-9878-a53bcf45840c", "sighting_of_ref": "indicator--cf0992ba-dab9-4def-ad74-6c0039240dbf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc25fcc2-29a9-4b3d-908a-12807e9174c4", "sighting_of_ref": "indicator--c9dc08c2-7bbe-4e50-8574-9e53afa0c0f8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66774977-e88c-44e5-b4f0-ac85afcb5222", "sighting_of_ref": "indicator--a6a262ec-7e26-428f-9d43-c3845ffca53f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc1b652-c9f7-4934-be0e-f1f3193308bf", "sighting_of_ref": "indicator--a5816722-b2c4-435d-865b-35cce1f84eee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b88d0c-1883-41c1-8339-49b5ca25ec30", "sighting_of_ref": "indicator--dd021718-82f1-4f8a-84ea-38af307008fa", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13bd3d3d-047f-4ef6-bb37-f6eadce4db7f", "sighting_of_ref": "indicator--a1020963-972f-4d15-aa90-a31ade41d75a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63e6e8d-38e7-4e7d-9bc1-cc97976666d8", "sighting_of_ref": "indicator--40a35a42-5191-43f7-91bb-b76618fdda57", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6118f9c6-600e-41dc-9c02-897b9c4e6016", "sighting_of_ref": "indicator--917066cf-a9f5-4b4c-9058-14b92497d45a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4556631-27bf-4161-bc6d-d11ab0bc1a0b", "sighting_of_ref": "indicator--49fbacd3-2170-4786-b0a1-9b8dd4b357ef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c82996b-61c5-4681-9114-990095e73e45", "sighting_of_ref": "indicator--17144a67-12dd-4229-a4d2-02580dd88a8a", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e322acc-155c-4bea-a007-0fe6713e5bc4", "sighting_of_ref": "indicator--a6dee509-6aea-44bf-8d91-90ecc0d06a8d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa3d7c8-9422-4bd7-9ca8-6a6135ef9185", "sighting_of_ref": "indicator--a6dee509-6aea-44bf-8d91-90ecc0d06a8d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179a821c-4cb7-4910-be78-1c46729779b2", "sighting_of_ref": "indicator--f06758e5-259c-41f0-adab-65325451bd00", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ca80d4-7d16-4aae-be74-66e29aee7f0d", "sighting_of_ref": "indicator--f06758e5-259c-41f0-adab-65325451bd00", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54d2a82-0264-470d-abcd-2cf91950a510", "sighting_of_ref": "indicator--ff628fb1-1825-4a59-8fc1-066d84bf1d93", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e441e144-5477-435d-b999-3ad8b26f5318", "sighting_of_ref": "indicator--1f5c3d67-9722-485a-b208-9b91c049305f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d5e1e0-4ff7-4291-ae9c-f704f6a18fba", "sighting_of_ref": "indicator--9af09aeb-db36-4cda-b082-6568e8bf6659", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef994308-ebb4-4646-8afa-446bf527b5d5", "sighting_of_ref": "indicator--bd8d57f3-6ba0-4ada-84d0-6fe2dfaa362a", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32335074-ffd7-45f1-93d0-8fac8cc5627d", "sighting_of_ref": "indicator--bd8d57f3-6ba0-4ada-84d0-6fe2dfaa362a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5db3066-4834-4e6d-ac75-1440ee96a674", "sighting_of_ref": "indicator--0f6e7fb1-5dc6-4960-8f25-25ac0483e4c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154b1278-ff1f-42f9-beeb-338182d06d39", "sighting_of_ref": "indicator--0f5d990b-4a76-4e78-80ba-021ad34b5ab5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca48ba7d-0929-45cb-a816-243a9e78ff5b", "sighting_of_ref": "indicator--9a5e7cb3-6989-433c-bff9-45214bede3ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a89893c4-5542-4f95-85c1-5ceffc895d4b", "sighting_of_ref": "indicator--9b046285-31e2-4b56-bf98-35f91cdea4ef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e402180-bc81-4cdb-b5b6-36a55fc7eb32", "sighting_of_ref": "indicator--cbd3eb82-6ff8-4914-9bd9-3e4366c35fa2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e153f31-5847-4d0a-9471-8e6b76b40be3", "sighting_of_ref": "indicator--09b0c876-6e2c-486a-8b72-962c45b72233", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aec37be-8f37-4f84-b850-548a80fe8922", "sighting_of_ref": "indicator--5eababfd-e9c2-4d39-b94d-9ea7fad60952", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ec2a5b-713c-4ce3-9999-c85f150f9aa8", "sighting_of_ref": "indicator--739b04c7-8fc6-4b79-bf19-6384a2622383", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0513091-20c0-44e7-acf1-668a9c1ca369", "sighting_of_ref": "indicator--739b04c7-8fc6-4b79-bf19-6384a2622383", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c3dd8c-a724-423c-8951-6b75e007f3f4", "sighting_of_ref": "indicator--72192ae5-5fdf-49e1-9a97-6811260862f1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b832e19-cc11-411b-b494-fba8b755088e", "sighting_of_ref": "indicator--4f95ead6-6717-4e5c-8335-190ef60ac21f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2290f3a9-0d8e-4372-9f35-8cae34f9ca31", "sighting_of_ref": "indicator--1738c35d-ec88-4171-aae9-f111608bfd5a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e6cbc0-b757-4369-b025-ee6f25b38bde", "sighting_of_ref": "indicator--37371738-d488-4f67-9d8f-788f60e6421c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4f41fc-476b-444a-99f3-483046d325dd", "sighting_of_ref": "indicator--59e64164-815c-4182-b047-d8667f1cd8fa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432ec6e6-91ac-44db-b15b-c31ca3103418", "sighting_of_ref": "indicator--3f9693b1-0bd6-4e25-975f-5b0c8da04a5a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f936241-572c-44fa-a0a8-61b912d721a7", "sighting_of_ref": "indicator--88f3ca5c-f318-44ca-8c4c-6728781f41af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69fca83f-8604-4c3d-8b14-8ac199f4bc56", "sighting_of_ref": "indicator--a5f663d5-da91-4016-a5b1-312e141d1dac", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30d5eb9-b4fb-4683-ad81-ae6a0f4b49c0", "sighting_of_ref": "indicator--a5f663d5-da91-4016-a5b1-312e141d1dac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27999b1-c7d4-4905-a18c-6b2988601ff5", "sighting_of_ref": "indicator--b60f25a5-d45d-40ff-b501-38f5b5bc1d29", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10a757d-ac81-4382-88d1-6b6333d90048", "sighting_of_ref": "indicator--d46fdd23-1127-4a35-8910-469ca26e936f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02822b9d-17ba-4074-b2fc-844ff929273b", "sighting_of_ref": "indicator--57260d06-4e1c-4333-b76c-93a70c0ac9d5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a2ed4cd-a897-481a-b434-8593e90c078f", "sighting_of_ref": "indicator--5801b06b-e452-4579-b22d-98dd1c9484f7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47485c53-87ea-4c9c-86e3-75a170e0c7e1", "sighting_of_ref": "indicator--3f5a8f60-1fcc-4c10-9822-d22e78a69287", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537a45ef-dc7f-40ef-a73f-8c11e29eea80", "sighting_of_ref": "indicator--042a43ac-e356-4c81-8b21-873ea64fa148", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047eb7c5-bc71-4fe7-ac0d-c7a0995aaaa4", "sighting_of_ref": "indicator--0afff342-7c27-4f69-b910-bfe6ab3f1017", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b91451e-1cf4-4a43-84a8-95aac108437c", "sighting_of_ref": "indicator--02edd83a-3ffb-42da-abe5-4ee6f37c5641", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246c868b-d556-43f6-85d9-a3f6110afbf9", "sighting_of_ref": "indicator--1b889676-738b-42c0-b301-c10aaf9423c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8497bd44-beaa-49b2-8d13-c737691a725c", "sighting_of_ref": "indicator--8f8b25cc-49bd-4b51-81d9-5c78d291ee78", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44fc3d7b-edfb-40c3-a9f6-3fb42b103701", "sighting_of_ref": "indicator--fea8903d-5597-41c1-9f9e-8ba2db1b56f0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--084558be-c395-4f22-9f80-7f2b41f9886a", "sighting_of_ref": "indicator--3f03513c-9b68-42c6-87c5-80e39c58532d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7b85a9-c4bb-4fa1-a9f7-b9d8917520f3", "sighting_of_ref": "indicator--3f03513c-9b68-42c6-87c5-80e39c58532d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782acf30-ab62-4f1b-8ffd-a0bdf6f858fd", "sighting_of_ref": "indicator--afd9ae39-9523-4073-8b0e-4b699e4792cb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea33ce70-3052-4905-8214-21bc00c65626", "sighting_of_ref": "indicator--21562d71-1c22-4194-8b77-71f6fb098f0b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a10187f7-a8f8-4e32-8762-fe761be15492", "sighting_of_ref": "indicator--b69aaa23-930e-47c1-be09-3f676ed6c4e3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3391c8-cce9-4eb4-a768-94eaa7f37983", "sighting_of_ref": "indicator--f12b93c5-6531-4649-94fb-02f7101e55ad", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a77ecbc-c76a-456b-a6ae-4f9c57c66fb1", "sighting_of_ref": "indicator--3e2f79a0-2e97-4eb5-9e90-7ec1e94ed726", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b9ae11-f487-43ee-adc4-3ea11430243b", "sighting_of_ref": "indicator--09d48221-fdd5-40b4-90c4-c4a86a0c55fc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f8ed524-4df4-4e20-84de-167cb27ac009", "sighting_of_ref": "indicator--d2f22971-0e5a-4413-aa1b-a4381d6b6ea2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ca003e-f75a-4055-838f-0795cb248d7c", "sighting_of_ref": "indicator--830637ee-b7cf-4cbe-9fd1-12e005626217", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca573a88-8387-4859-b885-cf0a1819c527", "sighting_of_ref": "indicator--e3303bdd-b2a5-41e0-aa44-0ff0e9721538", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc9fa9b-1fcd-4655-ab33-bc7b1046290c", "sighting_of_ref": "indicator--cf872359-ec3e-4c40-b0b9-fc258b882eaf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65ba4ab-0c61-454c-a3d2-ac9250f2cc59", "sighting_of_ref": "indicator--a40c9c4d-94e6-4af8-8b67-e6e490c68698", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0577379-63f2-4c3c-ab37-07b6ee1713aa", "sighting_of_ref": "indicator--b65b1d7a-601d-4f3f-8528-39015a896ccc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9a10aa-fd54-44ae-870f-767dbf6d1740", "sighting_of_ref": "indicator--9d2439c7-069c-484a-a3c5-c0eadd5e2c7c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c6f704-5269-42ca-b438-2280daf3953c", "sighting_of_ref": "indicator--de31416b-f83e-4bd5-91d6-9c9c9d679c6c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b38531-68c4-4942-ad17-81ebb38a3930", "sighting_of_ref": "indicator--26c78524-bab2-48ed-8c80-dddeceb4171b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1fbf016-b651-4d0b-b602-11a4a2804346", "sighting_of_ref": "indicator--bf2fb620-9679-4ac4-89d0-c7cbc4655754", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c271495-14e3-44c7-a564-5fdf27dcf420", "sighting_of_ref": "indicator--063b11e2-11a6-4883-8af7-a83a16285302", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ce4ca3-4dfd-47d6-9290-4b6cb9bd351f", "sighting_of_ref": "indicator--fc2180d3-fda9-47e8-a16e-3ae071fab17c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4e716c-91ff-478e-a0fa-ddaf6739b1bf", "sighting_of_ref": "indicator--4ff44736-3d64-41c9-a0c0-86fbe012c44b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90d32e6-307a-4d32-8759-a96100591afa", "sighting_of_ref": "indicator--dc81c87b-9234-4d56-bf81-ec4829c1830a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd29b9f-39e6-4b5e-8412-e0380e4f87a7", "sighting_of_ref": "indicator--dc81c87b-9234-4d56-bf81-ec4829c1830a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d24e924-e87c-4fc8-a062-8ed1ab947d38", "sighting_of_ref": "indicator--cf9e0cc5-515e-4e83-ab9b-9f0520f12f0b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a53267a-a132-4cbe-a77c-c625069cdf8c", "sighting_of_ref": "indicator--cb738afb-919e-4791-8383-9a2b56cf7335", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc0eafd-2e6d-41c5-b04d-7f991274e101", "sighting_of_ref": "indicator--223e7a5e-f37e-49ac-9472-4c91dc8b46be", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12858974-b087-4fa1-80d4-4d83c33fad26", "sighting_of_ref": "indicator--c123b330-1dda-4fab-bb9b-a58a1dedfdcb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cde56d3-d055-4fbc-857d-3118195a507d", "sighting_of_ref": "indicator--eb9b9631-e055-40ec-b53b-22d03be8f9e1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa7b2ac-55f3-4c6c-bb2a-908a1b35c5b2", "sighting_of_ref": "indicator--46f04178-072f-4117-80a6-ab6d2d4b6113", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442e1dfa-78c4-4eb9-a8a3-a1881c2f1b5d", "sighting_of_ref": "indicator--e9a9d165-ae70-41fb-944a-8849f5b5560e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc73342-1672-4e1a-a80b-5feb1d4d658b", "sighting_of_ref": "indicator--fe5729e2-5bee-4df6-b8dd-9264531bede8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44442703-0d64-4664-993a-52eb91e7cbd8", "sighting_of_ref": "indicator--cc8d0d54-f34b-4351-8303-372dce4be526", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa9c93f-b89b-4e22-9043-ea8f1d06d439", "sighting_of_ref": "indicator--17532d7e-437b-41a4-9bd7-d6b2fb286f86", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad22c25-7fea-4a65-a5a9-37bd0a336e8d", "sighting_of_ref": "indicator--17532d7e-437b-41a4-9bd7-d6b2fb286f86", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27066dd-f914-401d-bcdd-57354067f757", "sighting_of_ref": "indicator--d37de9ed-1834-4546-a57c-f27be7774f65", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa1b037-2ddc-4608-9662-aaca0d3147e0", "sighting_of_ref": "indicator--4ee31cdc-08db-45b8-b4e3-5109cea2d713", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84c4b27-0b19-443b-b948-26a8cbd0b873", "sighting_of_ref": "indicator--0d8e4618-0d99-47ba-a597-b1835544cadf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aebca99-4c4d-43c2-af50-578f920e5a5f", "sighting_of_ref": "indicator--4d986168-6b92-411f-a522-063beceaf10a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239a555f-1966-4a5f-8a1d-ac40fe363271", "sighting_of_ref": "indicator--c35b9974-d089-401e-b59c-9affaef0813a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc91043-3fc2-4d9b-8215-faf49e90d4cc", "sighting_of_ref": "indicator--feae0040-e264-49a1-94d8-e90a05aeb696", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd90285-d138-46f9-9790-653c49a8a69d", "sighting_of_ref": "indicator--95ed3279-c11b-4ad1-92ba-4a6138182d5b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8c2ec6-c866-419d-a733-d897350a44bd", "sighting_of_ref": "indicator--8a1fa80e-7c6e-4af0-9ac8-7ff2eafe1b15", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc3d40c-9d89-4b97-bc99-ff8569fa68ca", "sighting_of_ref": "indicator--eb44103e-ea5b-4b52-82a2-2627195ba123", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3e8b4e9-2614-4f12-9cdd-7b9d58f90569", "sighting_of_ref": "indicator--4a221748-a8c6-480f-bafe-24e9718b6983", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570a4f53-d15b-4bf9-b39b-55fc5b462604", "sighting_of_ref": "indicator--4fe47a8f-4f18-498a-b8a4-b2d00306306c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77226548-b765-4d9a-98ab-0efbfc9a3dfc", "sighting_of_ref": "indicator--6d8ad980-eced-4afa-a6a6-c407fcc9eee6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc2a2e9-0a9d-4772-ac63-746d76cc5b2c", "sighting_of_ref": "indicator--bb515d02-18e4-4f85-be64-909f64cdf983", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2171e922-787a-4599-b30a-cc04198d55b0", "sighting_of_ref": "indicator--26f64e12-d744-4ddf-8cb9-a702a6a29aa1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff3e2fee-92b0-4455-b371-c23122d97497", "sighting_of_ref": "indicator--10a483e9-f6a4-46e1-83b2-40282047a768", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0594ca2e-f74c-466d-a720-088528113929", "sighting_of_ref": "indicator--247b1fbb-9363-42e2-8085-dd34084c8bca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22da1d43-8c21-431d-b776-9f138e589383", "sighting_of_ref": "indicator--85676a88-edd1-4ef1-bfb1-383b245f5d16", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4965f99b-95ab-4e71-8e92-882f35efb8e6", "sighting_of_ref": "indicator--ad5e408f-1c31-4344-88e1-41cb7bb4df79", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fe6ee2-335a-4cc6-b641-40b80edc0abb", "sighting_of_ref": "indicator--d05ebf7e-9fba-4e33-b854-623f41ceb590", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c64492-f935-4658-9db7-8928ba2aacaa", "sighting_of_ref": "indicator--644a54d7-7613-4fe9-80e4-f63f45dac4d5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c077957-54f3-49fe-a1f1-a593d1bb4ec2", "sighting_of_ref": "indicator--e5113aef-b619-406e-b8fd-9a50feaa3865", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc4562b-e7d3-4f78-bd4d-e9ca547a4d4b", "sighting_of_ref": "indicator--91efbefe-6263-464f-ae27-5b104a456319", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5490ea61-98af-421c-8804-09acdbeea4d7", "sighting_of_ref": "indicator--91efbefe-6263-464f-ae27-5b104a456319", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f958f720-c3dd-445c-adbd-4c87069bb9d6", "sighting_of_ref": "indicator--8ef8ad46-76a4-49c4-a657-bc02842e9cf6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30121e8-7959-4d1a-9548-ab82c05eb5e7", "sighting_of_ref": "indicator--4c4b9ab1-67bb-48e1-8689-ee175d53a5a7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1321ae1-9b49-4910-8421-cd9d9d60b334", "sighting_of_ref": "indicator--f3fc8c43-d4fb-4e64-bbf8-4aabefef7e8f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a57a0934-d685-40ae-a9ce-00769c0e0f01", "sighting_of_ref": "indicator--3713e6e4-f090-439b-a7b7-926ada8d6f24", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e7158b-3201-49b2-8b15-21dbf4bf301d", "sighting_of_ref": "indicator--d022b43c-c7a8-4b65-a798-7a003ac017c3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61dd14d8-65fe-4f58-934d-60d35ee1965d", "sighting_of_ref": "indicator--a2997f4b-58a8-48bb-961e-4703fa5fb145", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd968a5-d322-4d95-ba4a-78e5472e701b", "sighting_of_ref": "indicator--3f384cf1-5547-45f0-8aa6-f7c9c7b3b6cc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179dc2d4-d9d3-4b55-a844-64ea790756fa", "sighting_of_ref": "indicator--3f384cf1-5547-45f0-8aa6-f7c9c7b3b6cc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f787a99c-e355-4f55-b78e-d871394f57f6", "sighting_of_ref": "indicator--4c5f9293-ba45-4ce9-a74e-e11bc421ec28", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387976ce-a894-47d6-bb9b-b593ede0c2d8", "sighting_of_ref": "indicator--4c5f9293-ba45-4ce9-a74e-e11bc421ec28", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a492448-d739-414d-9aea-7dd3ff4aeb10", "sighting_of_ref": "indicator--99f57d1e-52e6-4210-854d-54d6173d5f50", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d12d40-7a67-4aaf-a019-b7bed6e74bd9", "sighting_of_ref": "indicator--d584430d-0c80-44e1-8a07-5c36135cdcfd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d70b38-ac47-4703-89b4-bd6df65c396d", "sighting_of_ref": "indicator--cec0f45c-92c5-4635-837a-a6eb8d444bad", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944904a9-abf3-4611-bb1f-f67f4756c706", "sighting_of_ref": "indicator--0af6a582-8964-459b-823c-24f84c222a80", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb26af76-e5de-4132-9c6c-b4412e464eaf", "sighting_of_ref": "indicator--8a66b01b-dd57-4802-a6f1-72556eed1267", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62bd7df3-6a2f-4438-9251-76be0f36d632", "sighting_of_ref": "indicator--26781431-fc52-4501-8424-aa985b832783", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1aeaba-f518-4fef-adcd-975853e4c2c3", "sighting_of_ref": "indicator--26781431-fc52-4501-8424-aa985b832783", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd9cf0b7-e27e-4d07-8592-1cc39a7b729c", "sighting_of_ref": "indicator--bd6771bb-a960-452c-b33e-a461811b3bd9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b3ee8d-3388-4f47-b404-2dcf2fa177e5", "sighting_of_ref": "indicator--20dcfbdb-e34f-4ca8-a077-8cebfc2e7e54", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59ea8e7-a3f0-4421-874d-827d641e495b", "sighting_of_ref": "indicator--d48154c0-4cd9-49f3-b9fc-ecd91e32626c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1f49e5-86d7-47e9-8cbd-02f8b2c2190a", "sighting_of_ref": "indicator--3e2cbfd1-b385-4fd2-92f7-7f28cfee41a9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a10af80-dd79-4d2f-88ce-cff07851201d", "sighting_of_ref": "indicator--a3e0ccc1-0796-46d1-a764-c14ab98ec9db", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83d7381-8251-4111-ad27-3d85cee6cb72", "sighting_of_ref": "indicator--3f8f4a32-c96e-4917-9cfc-5e599b411218", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d1f130-3ec5-48fb-b02e-da9244146b00", "sighting_of_ref": "indicator--abf8ed71-a195-4844-a035-a44bb8320ca1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e16492-c1a4-4d49-9195-b8579694f817", "sighting_of_ref": "indicator--b27cf1b6-250d-4f02-bc62-50179c43ba9c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66d77e7-e0eb-40b0-b8c5-c7ee051629a7", "sighting_of_ref": "indicator--f8648ac5-786c-4aba-a53b-3c7527ca1761", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42dd472e-a56a-41b8-868d-724eb9af5cbe", "sighting_of_ref": "indicator--f20779f1-7e97-411c-8840-70812fad8e9a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f037f3-3dab-4b72-9e34-7cfab8039d87", "sighting_of_ref": "indicator--6386e6d2-d09a-4190-8a9a-28d1c4c05cc3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70764ba7-79d7-484b-9ebb-52e0c486dde9", "sighting_of_ref": "indicator--ec0bd3cd-fcbf-4fe8-ad87-331187fc0690", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66afaa16-c9f9-457d-a140-9476bb5177f0", "sighting_of_ref": "indicator--b7519c61-dc29-4c87-b729-2a7b4970b558", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e248f2a-9ea0-4514-962c-e83757d34f0e", "sighting_of_ref": "indicator--fdeba037-ccc5-4a72-aa1d-374132f2b923", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d7b60d-2a17-4e09-b2c5-18f478e01c6c", "sighting_of_ref": "indicator--eff2a4e4-ffbc-48d6-b463-08a68edef0eb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb0295f-59f0-4b4d-a1f3-cb6b83568852", "sighting_of_ref": "indicator--e507d8b3-e930-4e3b-b2ae-10a122a9a1af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52eabb8-66b7-4842-a7cf-dc0e9a81f60a", "sighting_of_ref": "indicator--4620cfee-8ebf-4bde-90e1-3db262944cf2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc82e6f-78e4-41fa-a9eb-087e8306dc54", "sighting_of_ref": "indicator--a53eb340-76dd-4958-9af4-e0d8e23b7308", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203c38d1-673d-41eb-acac-f182c7e09516", "sighting_of_ref": "indicator--4cb110b2-b003-464b-96d1-008882ebc75e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc4b514-5221-4263-ba19-773b100ecc14", "sighting_of_ref": "indicator--1db3dc81-e360-454d-9548-2b1c62a05040", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8685666-aa5e-42e5-9e4e-eb7d17a6d163", "sighting_of_ref": "indicator--02958cd1-665b-4603-8448-987c993604bf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab604f4-e11f-4f4c-a28c-0e937c032d4e", "sighting_of_ref": "indicator--971463ed-c73b-41a8-beaf-d39c68f245e8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8595d2d3-f7cd-4b8e-86cf-101d058f7f15", "sighting_of_ref": "indicator--1e184fe0-76de-4eeb-8f1d-e02ff9c56389", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd02aee2-c6b2-4347-a6bb-f41f25b5f63c", "sighting_of_ref": "indicator--1e184fe0-76de-4eeb-8f1d-e02ff9c56389", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c033184d-2409-4a42-be63-9b39a5d2925e", "sighting_of_ref": "indicator--82877985-a128-4106-a8a5-4a68efb60435", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2ff013-9025-473f-8dca-889750703ccd", "sighting_of_ref": "indicator--82877985-a128-4106-a8a5-4a68efb60435", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7574e07-d18b-4efd-848b-ca3c3f5d363f", "sighting_of_ref": "indicator--2f419fa6-2e06-4bd4-afb9-70a75f17bb18", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fa0b0a-d81f-4204-9f70-3c9308bcbbce", "sighting_of_ref": "indicator--bccbe81a-732a-4645-a2f4-a24cc1971119", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18fed716-8b11-46f7-82d9-74e15fa5972f", "sighting_of_ref": "indicator--dbdc17c7-2c45-4546-9322-e61c8b4ddae6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903e53d4-4e6b-46ec-8a1f-acc7976cb22c", "sighting_of_ref": "indicator--dd98e24d-5e4a-4181-a0cf-51697d870152", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f585707-1cf4-46d0-9b54-8136b8e3c50d", "sighting_of_ref": "indicator--6c56482d-9ebb-4380-9f0d-ee0976fd3e5d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869b5b0e-d4f6-431d-b654-34ebea851f04", "sighting_of_ref": "indicator--a14d12df-3cfe-4146-9ddc-fc107f71fa1b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13a11ad-7456-4f5c-b02c-81f5e6bdd421", "sighting_of_ref": "indicator--4d647e23-2a73-4014-98f0-feca7a9999b4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b189383-ff34-4220-891b-332873396c2c", "sighting_of_ref": "indicator--23d3dd4b-ac78-415e-9f18-9d81a0391a19", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1cd4d9-2096-451f-8f43-6675eecf1e72", "sighting_of_ref": "indicator--25b62e72-cb75-4150-ba06-0a833063409e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb7233d-9df3-4ccc-b0d1-28f8759c75df", "sighting_of_ref": "indicator--25b62e72-cb75-4150-ba06-0a833063409e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7afc313-f1fc-43e3-bc5a-a8841c50d791", "sighting_of_ref": "indicator--0b02a38b-c567-4f5f-985c-03f5d33fbc55", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0cefb08-b938-4512-8e9a-d8361f18791b", "sighting_of_ref": "indicator--7d30d391-1251-4953-b826-434c84dc91d8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a923a1-1e73-4b9b-a939-b4e537798b82", "sighting_of_ref": "indicator--f53e56b9-d577-45d3-8b93-49221fdd3a3a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1348d04b-0971-4e94-9335-cb33b066ca5f", "sighting_of_ref": "indicator--8149f122-a102-4b37-890c-a37f1a907e7a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2175de5-d765-47f9-a408-e01b010302e4", "sighting_of_ref": "indicator--d652f11f-5cd8-4bae-aa98-728a72780e9a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea87de35-4c17-40ad-8856-0c926dd4585f", "sighting_of_ref": "indicator--027c8a08-1978-4b16-8bca-ddea434aa197", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d24d482-4398-4de8-bcde-9dd84bfdbdca", "sighting_of_ref": "indicator--4214f71c-86b4-4bb1-be7d-658afdd86f0d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6b65cb-67af-46e3-b66d-b542f3694ccb", "sighting_of_ref": "indicator--4214f71c-86b4-4bb1-be7d-658afdd86f0d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3363199c-cf57-4b4b-91ec-e528908fac60", "sighting_of_ref": "indicator--1d15259e-4bd9-4f84-b7ca-4980f69464f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e4c217-c5da-4419-8378-b7fd86bd5391", "sighting_of_ref": "indicator--da4966da-5851-4ff3-ad46-337414a0efb3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48f4573-7893-4ad2-aca8-ac2a6e28aac6", "sighting_of_ref": "indicator--ba00a92e-adf4-4f04-bb1d-5a7a5950646e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--672f8a84-c31d-42df-b3a1-1639cc8a8045", "sighting_of_ref": "indicator--95f43ae1-78b9-4c33-8725-847a80dd1985", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37ce9de-3c09-4455-af80-c7ce1864d252", "sighting_of_ref": "indicator--12654097-f583-4378-9bbe-69f5f3ae79ec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe6991b-d077-4f78-a549-216c218815ab", "sighting_of_ref": "indicator--3d008d38-dcf9-47c0-bf88-e4cd8a78aa44", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b5f67b4-6497-4142-be43-12e8e3fc1bc6", "sighting_of_ref": "indicator--438bdf5d-a215-47dc-82d3-0c69e3ddfb2d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b17c3e-5d7f-4dea-bbbe-972b7d0b34fa", "sighting_of_ref": "indicator--1c998219-7937-4ebc-af52-a4b0645349c9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d87a31-d738-4859-bf6f-9d3e4a0ffcaa", "sighting_of_ref": "indicator--0985ec00-7bb7-4772-bc6f-f1fb9bd0df26", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16bcdc0a-ef87-4a1a-adb1-f601ebc9a9ce", "sighting_of_ref": "indicator--0985ec00-7bb7-4772-bc6f-f1fb9bd0df26", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b3fe42-a273-41d5-884d-0dc3bea51ca7", "sighting_of_ref": "indicator--ffc5d8a1-b927-432c-925d-ff0488ae0be0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8507951d-3c99-489a-8165-3cf35f353db8", "sighting_of_ref": "indicator--d50dee46-538d-4692-8f7b-4569580b8024", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332b1c7f-a9f3-4db8-a4d5-4687177efdf0", "sighting_of_ref": "indicator--2de96d2a-eb16-47db-948d-80dcc5929b33", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60970867-b7b5-4e17-a7f7-5a5478e727a8", "sighting_of_ref": "indicator--05b1cc0e-f53d-46e5-804f-ab93249ddd38", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3bf7fd-d347-41f2-9753-979614df2abd", "sighting_of_ref": "indicator--05b1cc0e-f53d-46e5-804f-ab93249ddd38", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70daf6c8-b277-42c4-83fb-b9cf00ec3e06", "sighting_of_ref": "indicator--e798bed9-37f0-4138-a0fd-afed3812b265", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b669dda-3666-4258-8fad-1fd4a2195f6c", "sighting_of_ref": "indicator--630c2ef7-f1c0-48df-9bc8-62228c28e259", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79f527c-61dd-490d-a50f-7abc1e80f160", "sighting_of_ref": "indicator--e0b1a4ee-fb45-4053-bbf2-98037e9d46b6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75e3cc6-a051-4c55-87ca-0328d87f3387", "sighting_of_ref": "indicator--9c40e291-c12b-4d8f-9609-482795aa3b5b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e26703-01d4-4c57-b86c-1f510c8b2824", "sighting_of_ref": "indicator--8c1cbc08-72f6-49a4-84f9-7ed71eb2476b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8260e615-4f19-418f-bc10-70bef1bf0308", "sighting_of_ref": "indicator--83f1b34e-65e4-4ac0-ae95-9b97b3f35e4e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118026f3-bcc2-4d6a-86da-7ed974124cad", "sighting_of_ref": "indicator--fead9784-e305-4fff-8e5f-c079839bf2c7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a665c6-9697-4b89-815e-94b7169f5fd4", "sighting_of_ref": "indicator--319b59c6-c44d-40bb-8a6d-eabe6ad5cac5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673eb7be-7876-4603-85b2-1373611723b1", "sighting_of_ref": "indicator--f82825cd-66dd-4d52-a843-ecd9aff790c5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe36e8d-d9cf-42e0-93b0-ecb14681562e", "sighting_of_ref": "indicator--ab7741e4-60cf-4b73-963f-f790be00a6b7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20efb607-5f9f-4518-8b59-be5905f4effb", "sighting_of_ref": "indicator--e21ff316-2dce-41d6-b86e-27f9a5cfa2b2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e38ee5-a196-41f0-99d6-3252b60ee278", "sighting_of_ref": "indicator--126f61fd-1641-46a7-afc4-65e86d72d67b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd7c253-757e-4133-b480-13e85b719acd", "sighting_of_ref": "indicator--08b7f4cd-7760-42ce-9d29-56b18ee11fe4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83698a3a-a63b-4344-8f8f-2cad12ff6ca7", "sighting_of_ref": "indicator--08b7f4cd-7760-42ce-9d29-56b18ee11fe4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f09757-9cc6-4e83-9663-06e1a009a183", "sighting_of_ref": "indicator--07bfcb6b-4dd9-44ea-9334-e5b9be176335", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebca8f6f-8a21-4abd-b9f1-4ab195b16616", "sighting_of_ref": "indicator--4109e200-3a22-4942-bbc2-31804e0cd81b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b547d7d-bc92-4682-a0b6-0e413a56606a", "sighting_of_ref": "indicator--5e90b171-f83c-4457-bb9f-238c70bf0664", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab17b182-e977-4615-999d-c51f0cc79c3e", "sighting_of_ref": "indicator--05ca96e1-4511-45dd-a198-676bdddabb74", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9647ab7-2c30-4667-92c1-7d2fe73058af", "sighting_of_ref": "indicator--01b3a4c1-74ef-4922-88d8-4a5074211080", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1190ced0-2754-4d45-a2bd-129b6f6df471", "sighting_of_ref": "indicator--0a567890-57d6-42ff-bc3b-47d39aecec82", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3ce586-8ab0-4288-8ae4-5368f2c1624f", "sighting_of_ref": "indicator--39f6fd7c-9543-477d-81a0-5b9b077b2f90", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a4af6e-8bf2-41f1-b3ec-27c7c7b3a3d1", "sighting_of_ref": "indicator--ee2642d8-e80a-4622-915e-6979913e2865", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa99378d-c5c3-4924-8a38-5a33bc5781aa", "sighting_of_ref": "indicator--bee80026-8a2c-460e-8943-7b155d82bffb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf6cac73-97c2-4071-a0e3-57c78a3d96f3", "sighting_of_ref": "indicator--4a8ce5ba-8aca-4e38-9b5b-9420a953ec4e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948bcf37-ef9d-475c-b148-d2e4b124e756", "sighting_of_ref": "indicator--15077b14-7a4c-4d79-9719-e3fb14b83230", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--046f3a49-a409-44c2-850a-17f599b2dfb7", "sighting_of_ref": "indicator--15077b14-7a4c-4d79-9719-e3fb14b83230", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a31f75-b24c-411d-be4e-1a7d8ab72d94", "sighting_of_ref": "indicator--e8141bcb-e188-4389-be36-ef128c74338a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd1a3c4-2c49-4c19-b79e-b3a707940982", "sighting_of_ref": "indicator--f943cce9-64a9-4970-8e12-ca136386ce4b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1784fe-0a80-4d30-a764-f470325cc02c", "sighting_of_ref": "indicator--8e1b4def-0734-4e16-98aa-8ae5f35fdd80", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c64ada-f146-42c4-90c5-d0397137ca32", "sighting_of_ref": "indicator--44296593-96d4-4a30-a35a-20927428d822", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc79e21c-7375-4439-8f24-c187785c99b7", "sighting_of_ref": "indicator--9622a598-c66a-4135-bdb4-4baf1edf6730", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb7aeac-201d-468e-b5d1-4ad1fb92c591", "sighting_of_ref": "indicator--447988db-ab17-4d43-88ea-4f71d090f898", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0902b17c-a1f8-4561-b1c2-64e0e7c36947", "sighting_of_ref": "indicator--ed5c1de1-426a-4f99-8b69-a829fdd0a68c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4abc19-83c0-436a-995d-b8440489cfae", "sighting_of_ref": "indicator--62ef80c9-3dc5-47ea-92ca-c7fcc8e93b4c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ce5de7-bb0e-4f76-8136-8668cf5b292e", "sighting_of_ref": "indicator--54a81293-5a8c-484d-be8e-481bf8e10d62", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1946bc4e-f5f1-45f2-a9d5-591fa8fe811e", "sighting_of_ref": "indicator--56303ff3-c3e0-448d-952a-61be893cf58d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6908921e-cd1f-4548-8d81-63d64a3d6c55", "sighting_of_ref": "indicator--be5cd8ac-d488-4d12-8f53-c626238983da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01fffe8-5cbe-4f6a-82ac-53ad40713558", "sighting_of_ref": "indicator--0099f01a-017d-4fc6-b2b2-1c8acec8f9d6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898d332e-31e1-42a2-9b69-47b6977b7c39", "sighting_of_ref": "indicator--a10c92b8-b41d-4fdb-8844-8ea847be49ce", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0605312-9dde-4c69-a8f9-16ca407b4f46", "sighting_of_ref": "indicator--a10c92b8-b41d-4fdb-8844-8ea847be49ce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80974961-31b5-4f61-a109-2b1ba1f22e8a", "sighting_of_ref": "indicator--00335ce8-f206-428b-876c-c33c50c97988", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c991709-85c4-4b6a-bfac-567a8ca575ae", "sighting_of_ref": "indicator--1e922899-75ec-4a9b-bb54-1246b9d94934", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1264c6e5-35fe-4c3f-8ac4-a5dd1b4bea7b", "sighting_of_ref": "indicator--4bd851bc-d1a4-46fd-be19-98cd6fdcad28", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7632e0fa-1443-41c9-af3b-cb32089b05b2", "sighting_of_ref": "indicator--5634c44b-9a11-4783-9e39-8bb8abd7595a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da50874-d461-4746-9b08-3a54cf7187f3", "sighting_of_ref": "indicator--52224f17-f046-4eb2-8f16-49cd8f0657ff", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--507e5a4f-744c-4ceb-a725-06149121624c", "sighting_of_ref": "indicator--52224f17-f046-4eb2-8f16-49cd8f0657ff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2687ab03-60d7-4855-a12f-f845658f6bc3", "sighting_of_ref": "indicator--7af018da-d1fe-4f02-9cb6-f4de19bee218", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91978f8-99f2-40ef-86a4-f61bac90fa72", "sighting_of_ref": "indicator--9515f198-ca5e-4ba2-a0cc-ffd91f3530ac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f35ca94-f72b-4c87-857b-e9ec22aa0783", "sighting_of_ref": "indicator--b5d1e743-67a4-42eb-9e9a-4cbe3d275a04", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545dec3f-bbae-446e-ba20-b6d9fc03277c", "sighting_of_ref": "indicator--2faf25d0-142c-4e7e-83a6-9434a83dbf9c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5362bd1-6ecd-4ba1-8dcb-72e4ba6a515c", "sighting_of_ref": "indicator--40c3614d-d72e-4f83-81f4-dd47ecb8536f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deee4dd2-b65e-444e-afd1-775760b75fa0", "sighting_of_ref": "indicator--40c3614d-d72e-4f83-81f4-dd47ecb8536f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5416bd30-7d7e-4e66-b824-0543d27f5a5e", "sighting_of_ref": "indicator--ebf40e79-f5ad-407c-a1f8-e906b1ecd437", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef3d36a-cd89-4ada-91d6-108c715894e1", "sighting_of_ref": "indicator--a403a6dc-592b-4bd4-9672-583ff15fab8e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21256e6c-8fb7-47c6-83d5-e8077170f87e", "sighting_of_ref": "indicator--088a9ad5-fc73-4812-a3db-157cc2ffd094", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235df357-c49e-4322-b9ad-7bfed0b5361c", "sighting_of_ref": "indicator--095ad4a0-6d2d-42a8-a3cc-5f04a0638fc2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faba5f37-2914-42ab-985f-27bd3ee75446", "sighting_of_ref": "indicator--f6bc40a8-b553-4548-9a8a-436123d71caf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e75b47-a685-4c95-9a20-375d0473d68c", "sighting_of_ref": "indicator--2d63df68-2864-4af1-b065-a0d76bddb09c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3224e3e4-f8c4-4115-b737-916f08933dec", "sighting_of_ref": "indicator--7448fff1-546c-4dc2-ad02-2914f1815b54", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fdbf99d-6d13-41d6-9e05-8e54a0bed623", "sighting_of_ref": "indicator--273b78fd-a4d3-45fa-bf14-6a4c77fa5906", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997ce076-9991-454e-bbb1-58d87c2f2ae2", "sighting_of_ref": "indicator--ab9582dc-754d-4e7b-89a3-dd7ee27414c8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb4a928-d42b-4551-a132-ab444f75faa9", "sighting_of_ref": "indicator--0db443cb-77bc-4b4a-8230-0fd94391847a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438f864b-8e37-4b85-a122-88939d106218", "sighting_of_ref": "indicator--0db443cb-77bc-4b4a-8230-0fd94391847a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ea8487-647a-4a75-896d-4b5caaae8821", "sighting_of_ref": "indicator--96485a1a-f824-4ad9-a06c-d2839a4addae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343db87f-a91b-4d7d-ad82-6beac90ba8d0", "sighting_of_ref": "indicator--f61b2c86-7efd-4690-b228-fcb8d56c0a7a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e7ee98-30c5-4898-b25e-2d9ca093503b", "sighting_of_ref": "indicator--624b4d76-9e39-4732-aa92-10f08375a0d3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206fa98c-3de1-4dd1-9313-680727656557", "sighting_of_ref": "indicator--78d70c45-c4f6-4e61-9264-6ced019adbe4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7e225c-223a-41d5-b8ef-3843758c6f68", "sighting_of_ref": "indicator--2e2a3261-840a-4955-83ba-7734308ad3ff", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d37def-a416-43a9-8fae-6af9a6ad6287", "sighting_of_ref": "indicator--52a394b7-e763-478b-9183-8dfc01d3e8a1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cda8f96-f0d7-4473-9e98-540072cb2516", "sighting_of_ref": "indicator--a626f5a5-7cfe-4cd0-a8fd-671e18f3e55a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3942a84a-e3d0-44c9-a31b-87e1bf50fe17", "sighting_of_ref": "indicator--18bdffd3-97f1-4cdc-a590-50df8d664c40", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1f03d1-d178-4943-8232-52a0b9a5345e", "sighting_of_ref": "indicator--d2ff6b58-31d2-48ea-be57-64881675cca8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201b0aea-cb5e-4c07-b227-0fcd7b0a401d", "sighting_of_ref": "indicator--75e64273-5649-4711-8d95-3fe6dfca6d4a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6e1623-13ae-43fa-b673-7cd64e0d5089", "sighting_of_ref": "indicator--0c197922-cd27-4e9b-a0ee-1c59eca01be1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd4af3d-aa59-4907-aa65-8837e085c32e", "sighting_of_ref": "indicator--593d941d-3e82-4e47-8005-ea5987a34172", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce63246-f499-4a1c-a3d5-c9fa5a7865e4", "sighting_of_ref": "indicator--605f1d46-ca0e-4a46-96b1-b970f2f03625", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59b1f72-85bd-49e5-9823-23327f69390f", "sighting_of_ref": "indicator--605f1d46-ca0e-4a46-96b1-b970f2f03625", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa86338-4f0c-4f22-89b2-304f3a601fab", "sighting_of_ref": "indicator--71322a72-2df8-4b73-9686-09ec3b13106f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1724188d-7859-4803-8140-f5a5917cbd4b", "sighting_of_ref": "indicator--99e10c49-cf7e-44ad-82ac-80a227a21866", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829e8a65-135c-406a-9019-75567d0e8cbc", "sighting_of_ref": "indicator--b42ff69f-b9c0-485b-b1ab-5dbd0557d48f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e74a10-fce2-4195-a663-65ecf8555190", "sighting_of_ref": "indicator--61cc5a26-568f-4bfc-8413-d52c7eaeb341", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3329b310-e6f7-4443-89a9-7628d0fcd97f", "sighting_of_ref": "indicator--61cc5a26-568f-4bfc-8413-d52c7eaeb341", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592287f1-de0b-452e-a3f1-75b203e09543", "sighting_of_ref": "indicator--0ec652ba-c256-4019-934f-bb9e897ef3b5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530a9db0-c5be-4026-adcf-d96bfb8b621c", "sighting_of_ref": "indicator--0ec652ba-c256-4019-934f-bb9e897ef3b5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5b2502-6201-4a98-81a9-fe91c5fb12d1", "sighting_of_ref": "indicator--423fdf18-72b4-45cb-b229-3ec7c4b7045d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ae79e1-d3de-4b76-9f20-04e30f3cffed", "sighting_of_ref": "indicator--279e6c6e-9726-4484-9caa-3826abb059cf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede6fa80-9f38-48b2-9913-b77df7c1e98d", "sighting_of_ref": "indicator--279e6c6e-9726-4484-9caa-3826abb059cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4ae245-5f7a-4873-bf4b-d204355ce21a", "sighting_of_ref": "indicator--08770a56-a4e7-43e5-a9d9-4525c8704fad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415d3599-9231-4509-ac68-89d871421d4e", "sighting_of_ref": "indicator--2269a21c-5add-447f-b60d-255cbd0d722e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3604e8a-7262-4f34-9ea6-87b1d9e9240d", "sighting_of_ref": "indicator--d3232c39-5a47-4ac3-9057-11b1e52150f5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e8d9c06-b999-4065-afd2-727a5502d22d", "sighting_of_ref": "indicator--82e535e2-e391-42cc-8b40-f3256a33cfde", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1759ec-0fff-45d8-ad57-942e10acc5cb", "sighting_of_ref": "indicator--ff8a8a5b-364a-4055-bbfb-96d60add093b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f34f1a-dd51-4add-9f52-94cef6a222e9", "sighting_of_ref": "indicator--026c6ba3-1517-4f42-bcac-bb1d481fa866", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae52097-acc3-4637-9928-e513628499de", "sighting_of_ref": "indicator--1aee6936-2d86-4b47-b38d-2f6b0784de73", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806cbfb2-4f08-4ee8-832b-42d4a1b791ce", "sighting_of_ref": "indicator--092e388e-22d9-4ca5-a9ec-da18eb44ff28", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d946ab19-bc35-4ecd-8344-6f52a15c7e6f", "sighting_of_ref": "indicator--954f2ece-399e-4d5c-abb7-9b03644dbe90", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6c7bd3-c587-4b82-ae1d-133726213e81", "sighting_of_ref": "indicator--a74ff11a-828b-4e6f-ba75-43479263dfa1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9354a489-d3f6-44da-bb7a-3aebc24d32f5", "sighting_of_ref": "indicator--6f5ebf2d-6cf0-4bad-b188-2811c80679fc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d35f747-bbae-408e-878b-aab42497bb6a", "sighting_of_ref": "indicator--741590db-2f07-4064-b740-8c58c7c763e1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b218f3ef-2d21-439b-aa05-a2005f8e36a4", "sighting_of_ref": "indicator--31dbedac-a1e4-4636-a34e-af6be8de84c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f2cb30-0929-46a6-baba-90a747c3dbcc", "sighting_of_ref": "indicator--db47f3e8-76d4-4355-9349-887f3749ea92", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--effd3b72-c77a-4113-8178-5936f8facf32", "sighting_of_ref": "indicator--abe7d3ed-4e82-4554-8e66-4f43b3b1227d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2bc10bb-d2c2-402c-b93b-3812821d5202", "sighting_of_ref": "indicator--032bf1e2-7dd8-4527-8949-12cea68a22bf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80cfb76a-ba59-422a-9399-9e84a181cb80", "sighting_of_ref": "indicator--6f454c30-f7b8-4fdd-bac1-69803cf77f24", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c74147-4020-4463-9a77-474836703dc0", "sighting_of_ref": "indicator--ceef2fd3-40bf-4c15-9216-ddf84b08e0db", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3502974a-7846-4bf3-8eb7-21e5dc4a699a", "sighting_of_ref": "indicator--395bd04a-a42d-40ca-bc90-fb59b46756e9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27a7422-62cc-4867-9865-22889c541ccf", "sighting_of_ref": "indicator--1f7189b8-b1ce-405e-be7a-6b94c7ed5206", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a82616-1db3-41f5-b969-1e3ce688aef9", "sighting_of_ref": "indicator--73a89b3e-8cfa-439d-85cf-3ad603efe335", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a955ab-6b74-49b7-962c-2753a74f72bb", "sighting_of_ref": "indicator--73a89b3e-8cfa-439d-85cf-3ad603efe335", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5a9768-a5da-4e96-a269-6293a44474e8", "sighting_of_ref": "indicator--06a66bd3-0292-47d7-9ca5-a86f7c2cfe53", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5f1d8b-47a1-4302-8f52-6aae52826b5f", "sighting_of_ref": "indicator--5488d817-f364-4d7e-a89c-33922f192ab9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08a52ca-2a10-4c52-a304-f018bb525e57", "sighting_of_ref": "indicator--5488d817-f364-4d7e-a89c-33922f192ab9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2192d0a1-1df6-48cf-9acc-014c65f31681", "sighting_of_ref": "indicator--da904bd9-68ed-4827-bdb2-16906ad8ddf2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f8ffca-9fbe-4eaa-a5f9-a6e306749855", "sighting_of_ref": "indicator--ba4d524a-5509-4857-b685-0672befef0d3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726f66c7-ebf8-4a82-8b24-a26e814b9108", "sighting_of_ref": "indicator--690c6ecc-3e81-496c-af6b-1441786c9159", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46065166-f547-4ff1-ac47-bbd85f7e2cf7", "sighting_of_ref": "indicator--d76596fb-521d-4000-bffb-0bd1697c4a08", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c14d552-e0db-4b59-be5f-08b262029945", "sighting_of_ref": "indicator--428b458c-6282-48c4-8155-7cc1bf9ae564", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5fcea80-8fc4-4387-b1dc-e4eb7e26e1db", "sighting_of_ref": "indicator--57481041-0956-4e2d-bab7-8a01f6e3d50a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b1ec84-b8d7-4c8c-8434-90cafcf9d206", "sighting_of_ref": "indicator--57481041-0956-4e2d-bab7-8a01f6e3d50a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5418f413-0f31-4200-b4ee-15562b19cce9", "sighting_of_ref": "indicator--e43cb974-2f7b-4197-8347-22d1e66fe1dc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3646330-df26-40b8-8701-3db001f83437", "sighting_of_ref": "indicator--fc43717b-6787-49ed-97f1-59f1cac6e34a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09cf31e8-f0dc-4f7e-980e-c1deb5d5b872", "sighting_of_ref": "indicator--fc43717b-6787-49ed-97f1-59f1cac6e34a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91325008-59b1-4db4-b789-973292a58b36", "sighting_of_ref": "indicator--a7dd7546-203c-4afe-833c-ca009789eab4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee66205a-50cd-4233-88fa-10d297fb5d59", "sighting_of_ref": "indicator--9eae0ff8-7261-4934-a0fd-653fd5868194", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff69966-1776-425f-a916-f98075768289", "sighting_of_ref": "indicator--8bfdd467-7e51-4f31-883b-5691920e6b06", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a5f56e-c82e-4ef6-8964-d9bbc0099602", "sighting_of_ref": "indicator--a6b9e2ce-0cd0-4231-bacd-84b814ea8cf5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9455a9a1-3b99-4f86-aefb-03dc98cef7c8", "sighting_of_ref": "indicator--149fc572-b629-47ca-95c8-e45da07b2415", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c90477-a8fa-4bdc-8417-da7a15a49185", "sighting_of_ref": "indicator--884f2752-72dc-4809-84b1-77dca6265720", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26818e27-614f-4c41-a267-e00f7d364889", "sighting_of_ref": "indicator--dc5b6163-5ce1-4a16-bd14-bd6d6224f4e9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e3da58-0528-4d3a-92ae-836a0de30781", "sighting_of_ref": "indicator--dc5b6163-5ce1-4a16-bd14-bd6d6224f4e9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b29cfa9-3b99-403d-8bf6-406e66f13adc", "sighting_of_ref": "indicator--e55a1ade-244e-4cf6-be11-81adbc771f14", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d16dc7-6bab-4ccd-93ee-2c377c5ce1eb", "sighting_of_ref": "indicator--e55a1ade-244e-4cf6-be11-81adbc771f14", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294dcae1-17f2-4e81-899e-9bc8c74774d5", "sighting_of_ref": "indicator--7b1e6ee4-cb66-4ea3-9403-006a0a751029", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a7f352-1ea8-428e-bca1-09b1bfc56477", "sighting_of_ref": "indicator--9fe48ceb-93fb-4f52-8782-e9556fbd9b77", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c0110a-9f3b-490c-a276-01f89a0ba9db", "sighting_of_ref": "indicator--73b6b6df-9f36-4e40-9387-964024bf4136", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a9b62b-5021-404b-b260-109a3c1d5c0a", "sighting_of_ref": "indicator--73b6b6df-9f36-4e40-9387-964024bf4136", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66be593-ef0f-403e-b968-cc830a0155d1", "sighting_of_ref": "indicator--f97eb668-97a0-427f-9509-538ff0c43ae6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49520b8-8fc7-4a44-95b4-f9d0a658629b", "sighting_of_ref": "indicator--9d3c265b-3758-43a8-a347-490d7ec9f52d", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b92a29-2336-4a74-ac69-147932b7af5b", "sighting_of_ref": "indicator--18a4a364-1a87-4238-8c99-5ad8336788f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4980b2-57fb-4a53-938f-68a53a293a02", "sighting_of_ref": "indicator--23f4e98f-3a06-46a3-8915-42cd905da79f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17751070-6d3e-4739-a792-d03d3a3d7185", "sighting_of_ref": "indicator--a31c00ed-a9af-484d-b324-11810d7dc7ed", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cdb58e1-4a7c-40bb-9820-6998222cf334", "sighting_of_ref": "indicator--c38059ef-dc65-4de9-a954-061660b4e988", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce4e6002-7e22-4ae6-83de-d3e3361a052c", "sighting_of_ref": "indicator--5f204090-282b-4ab8-ac8b-53fc0b9a7303", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd46671-e722-4699-94bf-e3d4a245fe14", "sighting_of_ref": "indicator--1c99cf5b-1320-459a-a4de-dbceae88ab07", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a6f174e-03a8-4604-ac5c-d4a762675538", "sighting_of_ref": "indicator--d78c5975-8abc-4f2f-9d81-4791aa990735", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efec7b6f-9054-412f-9300-e9c026f9a566", "sighting_of_ref": "indicator--fe0732d8-bb5d-4cc4-a763-68557faaeff5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d0c5a7-3866-48af-bf2a-518e9c589e1f", "sighting_of_ref": "indicator--e1f63bce-488f-4931-ac10-116841f190db", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc386d50-57fb-4c60-b0ce-70b98a666a2d", "sighting_of_ref": "indicator--ccd767fc-a50f-40ce-b6e3-bf6743dcff8f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5164c97d-dda5-4663-b6bb-50e529186ab3", "sighting_of_ref": "indicator--a0ed2da4-1316-46d9-9cff-79c2c9715254", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce46667-a4ec-4194-818f-0a0d7ee1079b", "sighting_of_ref": "indicator--a0ed2da4-1316-46d9-9cff-79c2c9715254", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d5d1d4-c2bb-46d7-9a6d-98cc11a736ee", "sighting_of_ref": "indicator--6d493f90-5130-49a0-b540-3fa2d60f8cd6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0dd24e-b9c9-4095-a3ad-b79f6ee22aa3", "sighting_of_ref": "indicator--9455e759-e3f2-4bb4-8400-53793faf9950", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8cc311-a282-4e9f-b04a-762ac8715727", "sighting_of_ref": "indicator--f8c490c1-603f-404e-84e5-6e68580ac984", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca6fcfb-bec2-48cb-9cfc-d158c01e0a54", "sighting_of_ref": "indicator--cc745553-3400-41c8-b277-265cac16d74a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8acfdf-95f8-4f2a-8b72-d7bd5b892b52", "sighting_of_ref": "indicator--2f4da269-c2c0-4d93-aceb-99a63b277afe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf28d4f-5acb-4710-9264-80a2ebf4dce1", "sighting_of_ref": "indicator--04d31180-3272-4aaf-8657-4ab0e57815ae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d00261e7-d8f6-4b93-9bb2-8d125dfb9e51", "sighting_of_ref": "indicator--ecd702c2-9fbb-40f5-8fa2-fa66b91cc77a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1109f4-7543-41c3-bf72-3bf13362fe59", "sighting_of_ref": "indicator--3b638236-9eba-45c8-a1b4-619e85f43059", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c56272-0cbb-4961-a67d-cba9b53466bb", "sighting_of_ref": "indicator--8f99eb34-3ce9-401a-9437-f13424630fa9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173d826d-8def-42a5-b0dc-0824eeffb74f", "sighting_of_ref": "indicator--da0b293d-e043-49dc-b0a5-b08c5f9fcb44", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a92b544-d7f1-4265-b07a-337ceb7072d2", "sighting_of_ref": "indicator--766125da-ec3e-464d-9dcd-fce3d6b7b71a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16acaed-f85e-46a6-b8a0-2f234c9c6434", "sighting_of_ref": "indicator--d7e4f7a5-b922-4c9d-b072-f3a3aaec134e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd73083-b224-47f3-af92-7917e64a2b35", "sighting_of_ref": "indicator--f1f2350f-89f8-40bc-a586-1cf65af70884", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee18945-b41a-4105-8e5b-378443afb482", "sighting_of_ref": "indicator--3d7682b4-4f21-4ff1-892f-d8f60a2bed55", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a19f9a-876e-44e8-81b3-ab5693f815af", "sighting_of_ref": "indicator--a6450106-9816-4653-aa54-851d4492a945", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3f8321-5640-4276-8399-8064f09efb30", "sighting_of_ref": "indicator--71973251-c899-4ed7-a827-8681b81f5b9a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d5d9a6-0060-4bcb-80fd-b54c772aef2c", "sighting_of_ref": "indicator--9bdca907-8249-4de0-ba38-654fb441325b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a0a698-8239-441c-8193-a14098a4c102", "sighting_of_ref": "indicator--d69d146a-2227-4420-932f-d375c58fba09", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd7010d-9ad6-44fc-a90b-da16e4ce33fb", "sighting_of_ref": "indicator--d69d146a-2227-4420-932f-d375c58fba09", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36dff88e-2545-4b82-964e-501ba27afce8", "sighting_of_ref": "indicator--4dbf5353-2593-4100-877a-eef8df1876c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8557fcd-c9ce-4701-9c0f-7fa25d117802", "sighting_of_ref": "indicator--6c22f648-6f68-49c5-bb40-80a0dafc23e2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d635a4d3-4899-4050-b5f8-a2f4b7b619df", "sighting_of_ref": "indicator--9d5211cb-e478-48c4-909e-94834c638aac", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72510de4-29a3-4029-b35c-57d0bd3cc127", "sighting_of_ref": "indicator--9d5211cb-e478-48c4-909e-94834c638aac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4f48b5-5c5a-4b6c-b306-143a7ae04277", "sighting_of_ref": "indicator--330fccb1-ace8-4214-9329-0f9d1b736f61", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef8d8dc-f1d5-4103-8bad-9d2141875e64", "sighting_of_ref": "indicator--ef2643de-7afe-42aa-a605-5286bafc0bc5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba748728-bb9e-40bd-ba5b-11b06a86855c", "sighting_of_ref": "indicator--fe175c57-5e66-4001-8b50-e7f80c72ab1d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314b0632-ab59-4519-a278-5e06276f6468", "sighting_of_ref": "indicator--d5d1132a-7290-4016-a4d8-2a5c87077e8b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe6eab3-63c3-46f9-a9aa-15487b1bb7f2", "sighting_of_ref": "indicator--07fbce38-f50b-4250-bb12-d52e9f7f0ff3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca455d84-0d11-4fd5-95dc-d160bdc90442", "sighting_of_ref": "indicator--172fbc64-8bbb-4d43-a0d9-6bcd3a65ccb6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cffb1cdf-8842-4127-bc53-fa24e03e8bb1", "sighting_of_ref": "indicator--cf19a4a3-aaae-4f69-a9b1-e44a77fedd4f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79607380-4df4-478e-8f07-e65bb2d35fc6", "sighting_of_ref": "indicator--f617a2c8-0772-4554-b02d-a7d51ea478d0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--217f721a-af5b-4ad3-a56e-05d8ec58619f", "sighting_of_ref": "indicator--7ef8d104-e49c-4764-beba-50e1cfeffbfb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb70009-8335-47b3-956f-49349ba07b7b", "sighting_of_ref": "indicator--458635f0-a25c-4ded-a460-40df59e85073", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4906cf08-86ea-4a26-ac53-6b7966a05c38", "sighting_of_ref": "indicator--80c51ad2-46f3-4f92-9366-1126407467eb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e21a6c-dd2c-4ab4-a5e8-555e86cad9d8", "sighting_of_ref": "indicator--acdf3e4f-d959-4c7e-95e2-6f494b5306f2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0347a839-750f-439b-a680-92cff012e3c8", "sighting_of_ref": "indicator--be640e37-9ea5-403f-8dbb-bcf7f917eb53", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248506fa-6e88-4066-b098-65dcd07eddac", "sighting_of_ref": "indicator--53e2dfd3-a98c-4353-b229-87844186d431", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe7264f-2594-4300-98a6-6b3af7ba7d63", "sighting_of_ref": "indicator--e7bc162e-ba9b-402f-9dbc-4a44e1677584", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0339172-81e4-4028-9fa1-6d8135129720", "sighting_of_ref": "indicator--f19f67ca-32fb-412f-b68e-f258743faab2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750af2dc-6db9-4e0c-a5cf-65483fb3d417", "sighting_of_ref": "indicator--38a785b9-59b0-443f-8bc1-40d2310135fd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e485d3fd-ae55-48f9-91a0-e85f1e867536", "sighting_of_ref": "indicator--635b0ca7-9706-4694-9f2a-8c2c7e449b03", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a5f5ac-b6e9-4bab-b125-ca0751265855", "sighting_of_ref": "indicator--d56401ac-ea90-4270-85e1-e621f8f9deb2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9a3bfe-62d6-4ab1-88f6-f38cff9dd0a3", "sighting_of_ref": "indicator--d6e19910-9391-46fc-aea8-36754da6a249", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a91c773-ac3a-4230-88ab-2838a5827c4c", "sighting_of_ref": "indicator--1c5d3985-5358-4be7-abe0-7348b0fbd945", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69bad79d-2147-4de2-b360-d69e6b543e43", "sighting_of_ref": "indicator--4e39a795-5081-44c9-b797-c5c696e65bb6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db0b9ac-6f56-4c4e-8600-44ce3ecde150", "sighting_of_ref": "indicator--606bcee5-6c52-42a1-af4a-79b09ed978c9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e667d1e-ae19-4977-a8ea-97d2e46b70f9", "sighting_of_ref": "indicator--862e4c39-76e3-4ea8-b78c-336ad843c2e1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa28559a-7fb3-42d7-b822-a19c124d4d60", "sighting_of_ref": "indicator--cadd3531-37cd-4b97-8975-cc2541b03b7c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2018391-fe10-48f2-bcdf-34c6ca34a17e", "sighting_of_ref": "indicator--0a89ee64-8dc1-43ba-9f75-6046c26f15f5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e511e0e2-3feb-45b4-8d46-6594d5d59ecc", "sighting_of_ref": "indicator--af073b9c-51bb-49e8-aeaf-36b564a8b016", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dfbb5ce-352e-4bdd-964c-631b9112eca7", "sighting_of_ref": "indicator--d96546ab-742e-43ad-b21e-7c5233596a38", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa163ce-f41b-462a-a523-91c5c1081e4a", "sighting_of_ref": "indicator--54a4f1e6-4997-449e-bb13-de1e3a09d874", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d41c3c-1e65-4448-b241-7e30a0d0e036", "sighting_of_ref": "indicator--c97058ab-0fdf-4ee6-87de-f06f61c781f2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43bd31ac-d83e-488c-a33b-f31b090eb1df", "sighting_of_ref": "indicator--ba910d13-7efb-446c-98d7-5f21ab09707a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ad894f-b976-4c00-b270-339944445e1d", "sighting_of_ref": "indicator--f8a2ff4e-ccf1-496d-ad08-5d22d2cf4a0b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797590f5-3a70-4951-8833-37c287ddffbb", "sighting_of_ref": "indicator--496a3254-f0ee-412d-a034-5fc2f0a61db4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b32e217a-e28f-437e-81fa-94ff04965840", "sighting_of_ref": "indicator--d82ac237-fae2-4bb9-9801-d688f0bfe662", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4a33c1-56d3-477a-9ada-c76b0362e4e9", "sighting_of_ref": "indicator--51491867-d82d-485b-a227-1ced53c289da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1805923-915d-46ce-a3df-966f57d1b076", "sighting_of_ref": "indicator--ad09cf60-4b74-4f61-a26d-193e711fe17e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3e3362-83b2-403e-8323-7f4424cd1ccd", "sighting_of_ref": "indicator--ad09cf60-4b74-4f61-a26d-193e711fe17e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72047eb4-cf94-449a-b830-ab193a81e357", "sighting_of_ref": "indicator--fecee004-0f1f-4439-b52b-8656416b8084", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983681e8-d102-463b-a653-22e59cae13b2", "sighting_of_ref": "indicator--0c7c778e-e9f1-4101-9bde-72c03a1e8c81", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de4b406-1099-44d9-9a88-265916aeac13", "sighting_of_ref": "indicator--4a65317a-4094-4277-a162-e1cb6d3db3d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd4903f-bb00-45ff-8c85-ac442b9f56e7", "sighting_of_ref": "indicator--68b7070f-df89-4cb9-80bc-e53ed0007a9b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8409bf2c-ae85-4ff1-9b4d-c6be08a2cb48", "sighting_of_ref": "indicator--2d77e6f9-4085-465d-9132-2513c94cc7bb", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e3b218-6d55-4aa8-b4f4-2ba41623e2a0", "sighting_of_ref": "indicator--082c0a4b-c3e5-46fc-abc4-eaff03fc9998", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f760b260-d103-4596-92e0-d6f9ba3c9439", "sighting_of_ref": "indicator--02b6ee80-22e2-4e78-9b98-3ae2d2156225", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3baf3b90-e3ba-4d06-9bd5-56c2c4addbff", "sighting_of_ref": "indicator--0f42be17-3425-4f31-a395-7bb2cb81d6a6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d785208-090d-4507-9f8a-4949dcc2f37e", "sighting_of_ref": "indicator--b8919e36-fbd9-4b88-a0d9-8fb38c074b09", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088652dc-4645-4011-9fef-84435731d403", "sighting_of_ref": "indicator--ec516a9e-a1bc-49be-98e9-39c1af026926", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a5efb95-4d3e-46bb-adcb-787531bffd3f", "sighting_of_ref": "indicator--0d066e85-67d0-4498-b706-f1050e9849d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b015a78e-86b7-4574-9ab9-92034a814aeb", "sighting_of_ref": "indicator--908e908a-7aee-4f95-b1aa-4c9715f90940", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f726ce12-8b86-479d-bdc3-dde8d24104a5", "sighting_of_ref": "indicator--f299f61a-fc50-4251-9ad3-f0b96ce612be", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a941f8c2-5946-4185-a8f7-5b6cbe474979", "sighting_of_ref": "indicator--5d98474d-fac0-4296-b1b3-b8d2bef11d90", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73baf9b4-60d0-441a-bcf1-76c6b74405c6", "sighting_of_ref": "indicator--e4609106-b965-45ac-b6cb-468358401f91", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b236c4-a083-4e60-bee7-d92d51f93a24", "sighting_of_ref": "indicator--bafe292c-4b85-4345-85aa-333f6c6c3647", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ebdbff-54cc-41db-afe9-796f447ce85f", "sighting_of_ref": "indicator--b4b4db85-55bd-4320-817c-c283bf55965d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d5a143-7009-4017-9bd2-9ad7f9760fac", "sighting_of_ref": "indicator--e3093491-4899-4dd6-af30-52e9353023cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6696bcd5-b99e-48b2-8a95-c639a61aea2d", "sighting_of_ref": "indicator--b922c238-6f4a-44fe-88d3-a58baad18117", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df57cc50-6468-4fbb-afcd-2f0509e85f97", "sighting_of_ref": "indicator--83f92cdd-c150-4333-a22e-496bf3877d40", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b4fbf8-46ac-4375-bc6b-dc8fac5986a6", "sighting_of_ref": "indicator--118cb4fa-c8e2-4c77-8d35-14b48d28bbdd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ff2301-c379-4c24-81ea-394fdb31668e", "sighting_of_ref": "indicator--1293ddba-13ea-4a97-9289-4f0dfe44bd6a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0dd0ac1-5ba4-443c-973c-f462b1878da5", "sighting_of_ref": "indicator--05b92f3d-c80f-4151-b941-e748e2a395cb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ba6cf3-0f96-4339-a6a7-fe042b913dd3", "sighting_of_ref": "indicator--6b45c9cd-2d92-4c5f-9b18-6522d54efa46", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--138e90d5-2558-4937-8180-036628457a52", "sighting_of_ref": "indicator--eee5324b-938b-4d5c-8250-f39ab1753660", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40be8bc-8b88-441e-a6ad-b8cb092a3c9a", "sighting_of_ref": "indicator--2a2fb528-573f-474a-b414-ace8f0e8eae2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a914cee-462b-48d0-b365-72d8d1b50877", "sighting_of_ref": "indicator--08fcf0fa-563a-4b39-8efa-85b4069c9980", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ae371c-c988-4f4d-8c69-39fb585e052f", "sighting_of_ref": "indicator--d9f72e19-4fcb-4adb-b11c-636bdab021c2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e55d39d-3a59-4fc4-9a2e-4c790140f641", "sighting_of_ref": "indicator--318cea8b-a972-44f4-b940-fd49ee8b2a04", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9782a5-b625-44aa-bf71-bf264588348a", "sighting_of_ref": "indicator--318cea8b-a972-44f4-b940-fd49ee8b2a04", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3edae3-5b71-4d69-b4e6-f405d1a8215d", "sighting_of_ref": "indicator--7e9a029e-52a5-4571-a8cd-31cc51034472", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e6d9c3-ce60-42be-813c-6583119ff367", "sighting_of_ref": "indicator--8bf62736-59ec-46fa-840c-f34c4f02d8fc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546c4614-a9fd-4af7-a227-19e003395b53", "sighting_of_ref": "indicator--0adbb848-2076-49fe-a9ad-6f3b16f0f128", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589b01e4-f36c-46a9-b659-ddb4f59445a9", "sighting_of_ref": "indicator--c7dd4548-696e-4054-b1aa-4330efee2d2b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7572d1a-e214-4d03-95db-9b471662c8c2", "sighting_of_ref": "indicator--0c8e7c14-83f8-4c75-b639-fecfa73583c0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8283382d-dcbd-45a0-a9a1-3170c798d1ae", "sighting_of_ref": "indicator--69430558-9fe1-4d70-9326-ae4ce845da24", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e428e4ad-78c4-4432-b6f7-34d5aa8fd160", "sighting_of_ref": "indicator--ee9df8c3-f66a-4a0b-8a1c-96127e7de0c0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abba4453-3aee-4b38-882c-bc57fde664a9", "sighting_of_ref": "indicator--ac8e0459-badb-416d-bb39-6d40b32d34a2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10d13a0-4f17-4b8f-96f7-d383ecd2a366", "sighting_of_ref": "indicator--9ff82c57-bdad-4ea5-8f12-4577d4c635d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62365b3-33a5-4f04-b698-69fcbafdfc92", "sighting_of_ref": "indicator--d9e90ef9-74ef-4016-be96-4baa56a9ee09", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--805d3d70-a462-40ed-8f98-0718ee10f8df", "sighting_of_ref": "indicator--0309aa4a-f7fe-4376-8e17-ca41fde6cc9d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f005376-d498-40ad-b5ea-b776758857e4", "sighting_of_ref": "indicator--f17414b4-b97b-49fb-a2ea-8b20f46af9bb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719af019-0708-4418-8abf-60fa67728ac9", "sighting_of_ref": "indicator--683f39c8-5304-47d4-b171-15cbea228a29", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bdd463d-c67c-4756-91b0-1431b9101475", "sighting_of_ref": "indicator--c8599e71-c9c4-45c3-b3ca-f6c0f893c39b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f16c2e-f5c5-4d9c-8d51-7db5132d0eb6", "sighting_of_ref": "indicator--c8599e71-c9c4-45c3-b3ca-f6c0f893c39b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81cc1109-b6c0-4f82-b3a7-732051d8bb28", "sighting_of_ref": "indicator--24ca6fa7-9f0c-4e6d-9d9e-1721fc8aca6f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08706dfe-c65e-4b35-8503-97fe38e15767", "sighting_of_ref": "indicator--fb6c410f-db7b-4310-9dc3-3b6f1b005b33", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9862b3c-d488-41e8-8527-c108bc4c50d5", "sighting_of_ref": "indicator--fd785386-af0e-4135-a0f0-1b56773b1a39", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b935319b-7478-40bf-8269-2b7703d5a906", "sighting_of_ref": "indicator--966024c9-8d56-4f66-a188-b9c8293670e1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e3903e-6fad-4aa2-97ed-71e116c9cba0", "sighting_of_ref": "indicator--e228fc89-8ed2-4aed-baa1-1b714d68c891", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117c4671-0b7a-4722-8dbc-db1086580f45", "sighting_of_ref": "indicator--293023ec-cbe9-4c53-aa2a-fe2b8eddc2d0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb17596c-b6f4-4dbb-baf8-793c6ef1f174", "sighting_of_ref": "indicator--77155389-deee-488a-9159-505e0e290aae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc12d0b0-e52c-4a64-9393-bc5991c55299", "sighting_of_ref": "indicator--a32d0c3f-6e0e-44ec-aa9e-2f85dd4c22f4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc89e7a-b952-4711-bdc1-5b82e1191738", "sighting_of_ref": "indicator--32f35341-5316-4d83-b412-827a3fb9ff90", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a13ad52-c0a1-4404-8b0a-7db7b7acdc91", "sighting_of_ref": "indicator--32f35341-5316-4d83-b412-827a3fb9ff90", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4655e04d-096c-4d1f-9e49-ce33ddfef5d2", "sighting_of_ref": "indicator--bbba5e4c-c4f2-4e9d-ad2b-a4e66c0980a5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188b4690-5628-4aad-a3a6-0ee96d0ee125", "sighting_of_ref": "indicator--1e6a3650-9a38-4c24-8a4f-f8a1712a7819", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c019b9-21c0-47c9-8510-67a6ebb6a1ae", "sighting_of_ref": "indicator--d9643412-c7f1-4b7d-9e0e-119dc2e537e1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351dc0d2-f0c2-48a8-9154-6532849d4b09", "sighting_of_ref": "indicator--d9643412-c7f1-4b7d-9e0e-119dc2e537e1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--147e757f-3ef9-4d7e-bf34-a0ac6a59f80d", "sighting_of_ref": "indicator--ea9268e4-df49-4025-a6e9-c9d451a4820b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79566574-dfa7-49ec-b1bd-d5c4a4a0c733", "sighting_of_ref": "indicator--eba5a7db-3d93-4ae2-ad87-2c6e036eb5ed", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27325bdb-66ac-4a66-83d2-bb6c514027d6", "sighting_of_ref": "indicator--eba5a7db-3d93-4ae2-ad87-2c6e036eb5ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7abcf12-7bbf-430b-8f1b-07b29d7be6e8", "sighting_of_ref": "indicator--6f035e67-9ed2-4f20-8b62-fb8e1ed7e9a3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf521265-0cf0-49f2-895b-e81bf95608f7", "sighting_of_ref": "indicator--336b8855-ddee-45ed-8683-6a247cfc4b13", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44146a76-ecb7-4540-9db3-72f4ff9c28f0", "sighting_of_ref": "indicator--51757176-4347-4055-b126-68c9c2d25c44", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36576196-24f7-4082-8095-2b7de0fb0a45", "sighting_of_ref": "indicator--a1142eed-8deb-4cbd-8070-56bf0c6adf9c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc629af-69f9-413e-b86e-9384e7c6b1c9", "sighting_of_ref": "indicator--3e88a05b-5f0e-4076-9ae6-efd677ffb826", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e76ab84-5f5e-4267-9d7c-690e7717277e", "sighting_of_ref": "indicator--8b85f583-c92c-46a9-a1c0-3ae6928068f1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70234204-02af-4a5e-85a1-59a92586448f", "sighting_of_ref": "indicator--eb9bde53-ecdb-4eef-b4ee-a73cff07750e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d0fc63-399a-4220-bc69-46628e4274ea", "sighting_of_ref": "indicator--2515b15c-03d9-4f96-9ef8-a7c88dd21c0f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0639a3b4-8c76-49f9-8ea1-ba89282581a8", "sighting_of_ref": "indicator--ab5f9cbd-6341-4f5a-bbfa-d47e84c888e8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65874cf-f2a1-4a3a-952e-92cf4df45333", "sighting_of_ref": "indicator--d45f4d90-9ea7-436d-ab47-69dd10828021", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c222ab04-95c1-48ef-9e59-1aaf3de816ba", "sighting_of_ref": "indicator--d45f4d90-9ea7-436d-ab47-69dd10828021", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938bd620-24ee-4dd8-989b-142b4c9003f9", "sighting_of_ref": "indicator--a24d7e1d-ea34-4335-bf11-00a820ef3675", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73471ce8-9508-4ac7-98b8-3d1ee637da23", "sighting_of_ref": "indicator--3cde15cb-c61b-433f-8e85-b8a4039c5cc9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeda9f8d-9df3-4f3e-b265-93bd84bb0825", "sighting_of_ref": "indicator--650a10de-d8fa-49b9-87f4-3d9bf2ec88f8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4916edf-cd79-488f-95ff-9713e5acaccc", "sighting_of_ref": "indicator--dc3d5d67-4fbd-48b7-b1d2-fb9f75487149", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c65109-8852-4c9b-a9b8-769ebaa09e12", "sighting_of_ref": "indicator--47a63e65-9e32-4ade-9b6d-bb157247782b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14bcf83b-1de2-47f8-a54a-88fca74f7420", "sighting_of_ref": "indicator--ba438782-96e4-4644-b3d7-7c292c2212ef", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72716b7a-5036-4a0b-814d-283958ed42c6", "sighting_of_ref": "indicator--ad15ea5c-eba8-4781-80d1-8cf748d66f44", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa6e8c0-9bf5-4780-a495-ddb11d703ac3", "sighting_of_ref": "indicator--04f26688-8372-4119-a11c-1775f12321e1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8e5abf-418c-4445-82cb-22880b647159", "sighting_of_ref": "indicator--5008ef26-5f73-4a31-b070-fba006b81514", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e6faba4-32ff-4f25-bf3b-05c9db36b3f9", "sighting_of_ref": "indicator--a221e89b-1d01-485d-8379-e9d880ce9289", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12c77e8-e153-4dd0-a4b8-a81c34c1a0da", "sighting_of_ref": "indicator--cbac5fef-4a3d-4cc2-9221-0b68ec077092", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65eec35c-4578-49be-a128-edc635171325", "sighting_of_ref": "indicator--e812d1e6-739f-4682-902c-3d537b9e58a8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40d3abc-8af0-4152-ac6f-450bc4c98837", "sighting_of_ref": "indicator--dd271120-a6fc-439f-8682-117bdd9e71e3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb1493f-bcc0-4845-83cf-7b64a0bd0ec8", "sighting_of_ref": "indicator--2e9919d0-82be-4801-907b-4a91a0ebe2b9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca0d4f9-9580-4455-b572-0dd5c39b56d2", "sighting_of_ref": "indicator--620420bf-9907-4934-bb41-df14620e5fae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5739e78-3e6c-4292-a335-d5705749fd1f", "sighting_of_ref": "indicator--0e6a43bb-ef4f-4b26-ba86-277f726187e3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d42b6c-506c-4d5a-ba19-61a28e9f32aa", "sighting_of_ref": "indicator--6ea8ae93-c27a-40b7-b7b5-4692a4816f66", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90af7783-d655-4d37-bcf1-1a7fb3f056ad", "sighting_of_ref": "indicator--18a978a0-2758-4861-9d1b-d01d1c89ad9c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d45548ca-0120-4e51-8a17-1744b0d85468", "sighting_of_ref": "indicator--6e8831b5-488a-4a19-987d-c36bdf2bf8d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e6a180-3599-4a35-8dfc-b2cc5bff1efe", "sighting_of_ref": "indicator--354c129c-a31b-43c8-986b-0ecbe7844004", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40bde16d-9537-405c-bc15-734ae8378d2b", "sighting_of_ref": "indicator--f3003855-c48a-4f20-bf4e-8414d88acce4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95801440-3056-48ed-92cd-3df1c4ab937c", "sighting_of_ref": "indicator--811fdff9-2035-4c23-8853-acb3760ca681", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c587402e-7371-4a27-a5d5-ec4fab18868c", "sighting_of_ref": "indicator--d532cf64-24eb-466d-bf96-26823d5deaba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47494203-080f-4843-bbca-20be5f6b5824", "sighting_of_ref": "indicator--753943fb-1f6e-4c28-8545-721f905158d9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c4239ac-6333-435b-af18-7ec08e974b1f", "sighting_of_ref": "indicator--72359f6a-7bd9-4f8d-986f-2cd9c0e91d72", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de17f10d-35d1-4b37-8148-82683bdd286e", "sighting_of_ref": "indicator--942eedc1-93a6-4f11-a3e0-f6d4abaf6297", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ab7217-8b67-4755-a286-4f26110554fc", "sighting_of_ref": "indicator--c2a2d46c-c1bd-4512-b739-328a306d7540", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a55b0596-fd39-4192-9d15-762aa6521546", "sighting_of_ref": "indicator--fc9fdd7d-3839-40a8-8c30-f447e962d39f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac84935d-55e8-4ea4-8931-95b99bf3a2ed", "sighting_of_ref": "indicator--f2d20151-3477-414c-8256-0b9d78cbe4df", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d6bba2-1591-4d91-9953-aff4e30a1a8a", "sighting_of_ref": "indicator--bd41885e-216a-4459-b640-19dab3e85ebe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163e3fa2-5eaa-4123-8fe8-978c1ab4c7fc", "sighting_of_ref": "indicator--944fd77f-e640-413a-b15e-d4bf03c458f3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d5a983-3429-4072-9961-ddfed340d221", "sighting_of_ref": "indicator--2c9292be-f3c4-4dcf-826a-76a6948ae465", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61058bb-72bc-4fd5-bb2e-c48b54506448", "sighting_of_ref": "indicator--33e99fa4-c588-48d3-94c3-7837159f63e0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dfd1267-c37c-460a-8e04-328aa220bbc4", "sighting_of_ref": "indicator--05af31a1-7961-4d69-bdd5-5d13e9ac009f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23083184-912a-47ee-9fec-e79983bf1c82", "sighting_of_ref": "indicator--3f94991e-db49-4dba-8cac-4362f54a580f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25d65c7-cf58-4ea5-a029-5a670d0384d8", "sighting_of_ref": "indicator--75b83409-68c1-478f-b7a0-1581fb3915f5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a0ce17f-f846-4afd-b561-b36bfd682942", "sighting_of_ref": "indicator--af46c264-6c7c-418a-9e01-437a337bcb1c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69cdf2ad-73c5-40a5-89ea-67c4ecf9087e", "sighting_of_ref": "indicator--e0661ba3-d9f4-4bbb-a798-388be131779d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fabe991-a208-4a72-b8dc-0be24bf982a9", "sighting_of_ref": "indicator--4533bdf8-c101-4ce7-b54f-12dc04615f30", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea819d3-225e-4f96-b320-2660a77f500e", "sighting_of_ref": "indicator--7e867034-2f39-49e6-9433-b358535b2640", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc52b289-8d82-4327-8dbb-19f18b9a07cc", "sighting_of_ref": "indicator--62a57515-f8b9-4f52-8a62-03ea0cb6474c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f51df7-d458-4167-8ef7-341bc6d27290", "sighting_of_ref": "indicator--62a57515-f8b9-4f52-8a62-03ea0cb6474c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eddf47c-a6d1-4349-8ce8-9f08c3bce231", "sighting_of_ref": "indicator--8023faa6-6f15-4039-9674-1bb27e043fae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a77abc41-3dc5-4b37-9395-13af49058069", "sighting_of_ref": "indicator--854b5811-c2ff-4d2a-b606-706880e62858", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47150724-8c80-4d42-a527-fb7fe88a9f75", "sighting_of_ref": "indicator--45b55c02-d765-4fc5-82df-cb5dce05b00d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2379ccb-4d87-49a9-9bc2-79fc140d6b35", "sighting_of_ref": "indicator--d68d89ee-cc47-4a62-8090-8a23f2bb634b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9430ddb3-2905-4ce6-add0-dd6c5a9b33f8", "sighting_of_ref": "indicator--d68d89ee-cc47-4a62-8090-8a23f2bb634b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a73e2e-c36b-49b6-8738-9391ce81c043", "sighting_of_ref": "indicator--074e25b5-8244-454a-95c4-5e51bbfa5cfb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46b70fb-7a09-4fc7-a98b-d152ce7022ba", "sighting_of_ref": "indicator--132911f4-b470-45ec-aa3d-04b485cf5f8e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee7bfcf4-f4ec-4d17-a258-d261ebd59899", "sighting_of_ref": "indicator--c9c23d98-57f8-42e0-993f-f5809ddfe28d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d934ea-4187-4454-ae01-5d8c63bd8720", "sighting_of_ref": "indicator--dc4dd16f-f226-43e4-bfee-9b8cef193f0d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3099e172-6222-4744-b53f-db220ac2aef4", "sighting_of_ref": "indicator--d98fbc81-e62b-473a-be78-a5f1dd9afb67", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c195093f-d4bf-4bca-a25b-24cf3197ec55", "sighting_of_ref": "indicator--2ace8c60-0ea3-41a9-bf8c-2862b1959a08", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027825c7-504f-4426-b6bc-ed39d4ab33b2", "sighting_of_ref": "indicator--bf35c213-d310-41b8-848a-a690275451a5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9b7385-0f39-43e6-bca5-e20bb58f8e3f", "sighting_of_ref": "indicator--ef1d41bb-ed35-4f35-ab37-7468bdf197d3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0783b90f-52df-4e90-82c6-bda0536f337d", "sighting_of_ref": "indicator--a724ce5c-f989-479b-9f73-6d3672dca49d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--581acb4d-679e-46a2-9b6a-a417e9dd0075", "sighting_of_ref": "indicator--2cbd9a5f-8cab-420d-86d9-c60ad0f8acf9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fabb346-35e7-40e2-bddf-15ef006bb46f", "sighting_of_ref": "indicator--e5c2662f-1176-4e95-ac20-fdaf47dc75a8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b160e15-221d-411f-bc5e-810fe0ff15a2", "sighting_of_ref": "indicator--315a7e65-7bbd-4cad-9e6b-a1439a105309", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af42b82-7e9a-4fc8-8482-5957c0aff41c", "sighting_of_ref": "indicator--9cc1e1ea-6afb-45cd-93ce-23f7a1f261a9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d65d4b-039f-4e1f-b1ba-664d0c94e03e", "sighting_of_ref": "indicator--a4ea5a97-c794-4376-9015-23a1e7c15c51", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d48f7fa-6f1c-4ffc-aec5-8d779d56e9b8", "sighting_of_ref": "indicator--fdc4a12d-0620-44e9-9420-fc9c07c9c632", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e31cb722-0336-4898-8242-3ebabeb00de9", "sighting_of_ref": "indicator--7bd885c8-1869-423e-b48a-ef258b7d6556", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d785362-f860-4011-b989-7ef6ce1280ff", "sighting_of_ref": "indicator--5481c7da-b52c-4e71-a401-0dcc095339dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2963d613-36b6-4988-9a8f-14bb6421bda4", "sighting_of_ref": "indicator--ac54a47e-37b4-4373-a5c3-84ab1170ca42", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1180fb9-371f-4d60-a542-8b304f3e44af", "sighting_of_ref": "indicator--c36a5d3a-7f7c-45e3-a2c6-5acc72f03ca9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2724d82-eee6-4778-a679-c077a29adc87", "sighting_of_ref": "indicator--218855d4-fee0-41d8-bc3d-cb1ef19a4660", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5cb9fc0-83b8-4d6b-b5b0-8089393c3a79", "sighting_of_ref": "indicator--8ccb3592-8361-4430-adab-dbcb27713d04", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c1b898-7f95-42bc-9b91-914ea007f506", "sighting_of_ref": "indicator--d652d1bd-c6d4-401f-b13f-b16cd9307c5d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7464b22f-c98d-44c8-b7a4-f19b14101a70", "sighting_of_ref": "indicator--dae7fd4d-4583-44d3-b159-9285c13acaf9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5a3ee9-d021-4414-a861-c864850f8e0b", "sighting_of_ref": "indicator--aeaa8089-e2e3-41c1-a390-7a873d71b1c1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ad66be-910d-4141-86ee-c04e10c7b833", "sighting_of_ref": "indicator--f644c628-d0e6-46da-8e28-c0ad251ae262", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59add42-6cbe-4bbf-ac2f-e1650a954e41", "sighting_of_ref": "indicator--298cb8be-d625-4aad-a7d8-dbe2bff0105a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83668da-4461-4dcd-b8da-bdc06c9fd4b9", "sighting_of_ref": "indicator--8ab70ea1-0d3e-4bc2-aae0-0dd0499e5afb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634c0345-ddd8-47f8-9784-d8193eb442d8", "sighting_of_ref": "indicator--eab8274e-3a45-45d9-b1e6-9fd6cd618526", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60740f4f-0075-463d-86cf-85ca045b08a7", "sighting_of_ref": "indicator--9c678d17-a639-4917-bd6c-bd24bd342405", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486ca872-a688-4a93-ab02-9485f0aa467d", "sighting_of_ref": "indicator--55241ff3-81c5-4e8d-b955-98aa082cb7c7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda6ae3e-393a-42ee-a4b3-c1739ba23ffa", "sighting_of_ref": "indicator--d4d55c0b-5c6b-4862-b0f5-03dd8bc7a455", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11a60a1-64e0-42f9-b7a4-c18e405c1d1c", "sighting_of_ref": "indicator--9daf2c6f-e3df-4326-818c-24ac956a4c6a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a287b514-1b78-4da4-aead-46969281f189", "sighting_of_ref": "indicator--177dabc9-f75b-4dd2-94d0-3ecaf6a8e901", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7248cd09-6472-404d-8d2e-0c051023339d", "sighting_of_ref": "indicator--d9fc1133-c232-4a86-9bb1-ee608470faff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962cc578-a709-401c-8af0-cc8757a694c4", "sighting_of_ref": "indicator--1570f084-6def-4e89-ab87-59ea11cc4402", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d529df78-6399-4983-a718-03539a33547f", "sighting_of_ref": "indicator--443a6e94-6a79-41e1-90b9-8f84a652e82e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4232860-82de-432f-a1a1-7e5cf98c7754", "sighting_of_ref": "indicator--91440c5e-3dad-4276-9894-07071ae5d692", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c0b597-75df-4b9f-ba3c-be35d9dde576", "sighting_of_ref": "indicator--622e090b-d240-47e8-90bd-617be20f9cdd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af85d949-59ea-43a5-bdc2-f23150919d96", "sighting_of_ref": "indicator--fb1c572c-8e89-4bff-bb2c-2c7f7ea50a32", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d7b97f-8630-4810-a33c-33a50de9eb9c", "sighting_of_ref": "indicator--c28d5c95-a0d5-483e-9f18-636a7ac2022c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de07ca5a-776d-4ff1-aa99-fd5efea1f863", "sighting_of_ref": "indicator--f7459717-e06c-4152-8351-17793abc692f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde47680-0144-4aac-83fe-3c7886c0a8bc", "sighting_of_ref": "indicator--56720858-c4d8-4190-bab0-052814dd9cb5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d90e7c-5efd-4e4a-b580-59638acecf9b", "sighting_of_ref": "indicator--ffac42a5-64f6-427c-9705-2e7f2b4ce73a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6df832-9db3-46ae-91ac-77125b3f0979", "sighting_of_ref": "indicator--6a9845c3-6b8a-4f5f-b49d-d3e0684d7916", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a516630-b43a-4897-9531-26de94f1acbc", "sighting_of_ref": "indicator--6a9845c3-6b8a-4f5f-b49d-d3e0684d7916", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd84a079-65bc-4f14-a0f4-fac1ade86b83", "sighting_of_ref": "indicator--00947d04-0676-4a02-99f2-1ef298d38c7b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57bd6ae8-5828-47f3-bea6-f8412cc996ef", "sighting_of_ref": "indicator--00947d04-0676-4a02-99f2-1ef298d38c7b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f69056e-219b-404d-b650-1fddf564ad5a", "sighting_of_ref": "indicator--c75e6b68-a351-442e-8954-cb4ac24bc57e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8b807c-9589-4e35-b564-ee607a2669fb", "sighting_of_ref": "indicator--c75e6b68-a351-442e-8954-cb4ac24bc57e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a84e685-d6bd-4fe7-bd2e-33b115c972e1", "sighting_of_ref": "indicator--448e2173-c94f-4ea5-922c-3501c7475ca3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40904041-5a7c-4ece-9e79-38fd923c62fa", "sighting_of_ref": "indicator--1de8214a-5efe-4283-8b98-e5a1a0c351e2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae974af-e208-4b63-8ae7-874ff8fe8df3", "sighting_of_ref": "indicator--d8cb6ccf-9f7b-48d9-be92-c4367ad5a6af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6390c7e-5a8d-41b3-a170-aa565ebcc864", "sighting_of_ref": "indicator--43e60b7e-3673-4bdb-a1d3-fd781ea6c115", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc005b9-ecb6-490d-90c1-4f1f03fbe968", "sighting_of_ref": "indicator--397ebec2-3194-4d46-880b-daed1b548094", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e07a8b4-37d3-4181-90aa-e94eeb215c2a", "sighting_of_ref": "indicator--947199d4-20db-4b67-b5f9-0e271e33d3d2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100b6ce3-25a7-46f5-8941-f5175af3ebba", "sighting_of_ref": "indicator--d5a11f88-feae-42ae-8d2b-d52d58094f57", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1237089f-7f57-434d-9089-2d45324be56c", "sighting_of_ref": "indicator--35d128c2-62cb-41a1-9d01-3bdb64b1eda8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49d7d3d-86a4-42ca-80a4-c53e3a11d4d2", "sighting_of_ref": "indicator--b8806aef-dd53-436d-bc0a-69037e941213", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1320e3-2be9-417f-922f-aa48ef9db0a3", "sighting_of_ref": "indicator--519ca598-13d5-44ab-96c6-d65757aa6f14", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc6dd48-6ea0-42ee-a2c0-ee2a28374015", "sighting_of_ref": "indicator--519ca598-13d5-44ab-96c6-d65757aa6f14", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f811c66-90e1-4ff8-adea-921ed33c1036", "sighting_of_ref": "indicator--57bb3444-0454-4254-a92f-0b8ff696dcd3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2490af74-90f1-4390-b18d-c2369ddfa9c8", "sighting_of_ref": "indicator--bfc9b737-f9a8-47b9-be68-beee37404a60", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e55035-c07d-4f47-84b9-dccbdcb2248e", "sighting_of_ref": "indicator--eb4ddeca-6343-4626-828d-88749ef26d03", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a14c76-f338-4b25-8429-3a66329243cd", "sighting_of_ref": "indicator--05478947-5087-4a36-8613-f8fbc27275be", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c0d7f9-3d2b-47cb-b8cd-f82e65329131", "sighting_of_ref": "indicator--05478947-5087-4a36-8613-f8fbc27275be", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b74f17-f325-469e-ac41-d7eb21528eec", "sighting_of_ref": "indicator--b4b4efa6-d077-4854-9cc1-aa8cb6c05fd5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b9c2c8-fa49-436d-a7f4-0277af22c7bb", "sighting_of_ref": "indicator--7d2491bd-39a4-433e-a8e0-4f2f3661a159", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ada85d-58d8-480c-be85-5b7845e82aa8", "sighting_of_ref": "indicator--9be8d6e9-8cf0-4db8-8c67-c02d3f1a3c0f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7a25b8-ee01-4952-a75e-a140e49e293d", "sighting_of_ref": "indicator--1475f5cf-e34d-432e-b70a-88987b22bf9c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bfae78b-0809-409d-9c0d-13df209a44a6", "sighting_of_ref": "indicator--6d3a8ca1-3b4b-4f68-8cc0-7dddb5f4c919", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3001bc22-93e1-4ced-a07c-6cb69bbb549b", "sighting_of_ref": "indicator--91f40c45-5b8d-4f17-97e4-7de7d9ae7cef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5491025-0aff-48ca-8ceb-3e61b34a3c40", "sighting_of_ref": "indicator--4395a00b-fa31-4aac-83bd-a991a82759ca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20c16e5-e63e-427c-9d36-c9befc7cd1b7", "sighting_of_ref": "indicator--9d887d78-347b-49a6-bc11-a14c178e401d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ef5a0c-7e1f-4566-ad7a-336d4d84fb8b", "sighting_of_ref": "indicator--9d887d78-347b-49a6-bc11-a14c178e401d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5e88e5-6f6f-4c5d-890f-7c171174cc8f", "sighting_of_ref": "indicator--4206c9c0-4397-4990-978f-e065825aff3e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--656b7612-1775-472d-9167-fcb133a79f5b", "sighting_of_ref": "indicator--4206c9c0-4397-4990-978f-e065825aff3e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dffb3a7-6b68-4a31-a701-e19c2257df4e", "sighting_of_ref": "indicator--799e38e0-d71a-44c4-9b14-c0ee8d2cd99b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317b7e5b-bf77-493b-9079-577005eb3688", "sighting_of_ref": "indicator--799e38e0-d71a-44c4-9b14-c0ee8d2cd99b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41d2cd9-fe8c-4a2b-be5d-e0f2f87bb304", "sighting_of_ref": "indicator--1b76e686-ce0d-4624-9384-f60dcd8d4879", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daad2a7b-9d09-4abc-a171-d4fc18ae30ae", "sighting_of_ref": "indicator--1b76e686-ce0d-4624-9384-f60dcd8d4879", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089d2847-28cd-48c0-81ee-9bd2644ad717", "sighting_of_ref": "indicator--efe05485-796d-4dc7-b8f4-b797cd570e9d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb78b0a7-b868-49ad-8439-9366e18b5f49", "sighting_of_ref": "indicator--efe05485-796d-4dc7-b8f4-b797cd570e9d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2ee62d-1db7-40c8-8b74-344d8a095890", "sighting_of_ref": "indicator--6e1c0cf0-b531-4934-995e-17fa968e00bc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73bf25b-e92b-4f01-b42a-e03bfdc02f54", "sighting_of_ref": "indicator--6e1c0cf0-b531-4934-995e-17fa968e00bc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1660308-c28f-41dd-aa27-d84d9c88acd5", "sighting_of_ref": "indicator--51baedbe-66ba-4915-b1d2-81c7bd2711d2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d73ce4a-931f-4c1b-b375-3d27a3e5d1e4", "sighting_of_ref": "indicator--f4dd4419-7a79-4e38-a2d8-e9ae9d3bdbe7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dab1c61-b6f7-42e8-a510-78c0c979ffee", "sighting_of_ref": "indicator--f4dd4419-7a79-4e38-a2d8-e9ae9d3bdbe7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdeb4405-78e6-468f-88bf-a9d9d6a1e8d5", "sighting_of_ref": "indicator--64ad2066-cb61-4cc6-a9fa-574a7b70958e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b1c4ba-33a6-4522-83ec-9146f1b46a1b", "sighting_of_ref": "indicator--64ad2066-cb61-4cc6-a9fa-574a7b70958e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7775bfa-8b5b-47f3-b43a-8832a3312101", "sighting_of_ref": "indicator--5b27028f-6766-47fc-a181-fe37546f5107", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c520fd-e8be-4f3c-a746-356a307ef0ae", "sighting_of_ref": "indicator--5b27028f-6766-47fc-a181-fe37546f5107", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b13470f-fcf0-4683-b45d-f4f03f0d8c7c", "sighting_of_ref": "indicator--f4984c33-22e1-421f-a39c-dc90353d4971", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212e7250-46dc-4c4e-b006-5808696dc80b", "sighting_of_ref": "indicator--f4984c33-22e1-421f-a39c-dc90353d4971", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c314cb-296e-44fd-87c4-208c51e0dc7d", "sighting_of_ref": "indicator--2572ea04-95bb-447f-af55-874ff6da487e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598cd190-76c2-4d97-93b3-3f9252f3814f", "sighting_of_ref": "indicator--2572ea04-95bb-447f-af55-874ff6da487e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--727a6c0a-ec2a-4a38-bba6-d6307c1b873f", "sighting_of_ref": "indicator--77ba54f3-de12-4c1b-8e47-59d7499b6e16", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa517ec3-7df7-48eb-b7c7-dfcb9a0f9ded", "sighting_of_ref": "indicator--77ba54f3-de12-4c1b-8e47-59d7499b6e16", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cc12bc3-0f0d-4004-9ee4-250e0d38c3a4", "sighting_of_ref": "indicator--7cc1d649-90b0-4170-bb6c-09e32b8087ce", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f17daa2-4c1c-420b-9a52-4f42d6455d60", "sighting_of_ref": "indicator--7cc1d649-90b0-4170-bb6c-09e32b8087ce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab5bb57-7801-48d7-ab2c-94dd5aaece19", "sighting_of_ref": "indicator--6a7ed978-baea-4104-b8d9-f42e6febb159", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2ddc40-b267-463b-9c02-163d9d4b2e6a", "sighting_of_ref": "indicator--6a7ed978-baea-4104-b8d9-f42e6febb159", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f98a1c-fd82-4455-b475-c9ee90fbab0d", "sighting_of_ref": "indicator--bbdb2927-64cd-473e-ac68-d58923168171", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a76915-0ed3-487a-bc77-ff2998fc7470", "sighting_of_ref": "indicator--bbdb2927-64cd-473e-ac68-d58923168171", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bead213a-9512-4330-af2b-79be5b703c69", "sighting_of_ref": "indicator--a06abb99-a4ff-4134-90f9-e9abe4bc89a0", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca06635-02bc-4e8c-82f4-e9c3b2da8bdc", "sighting_of_ref": "indicator--5220e29d-0252-4e8c-94a2-3f6f7bc799c1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bbdb737-c214-4b74-8eca-96152947d892", "sighting_of_ref": "indicator--5220e29d-0252-4e8c-94a2-3f6f7bc799c1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa57c0c-48e1-4656-bb6b-ad6a6ee03db9", "sighting_of_ref": "indicator--ee877301-f161-4b42-b7f2-bda4b193b400", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f610948-ba4a-4a12-a1b5-696ecd36b64a", "sighting_of_ref": "indicator--ee877301-f161-4b42-b7f2-bda4b193b400", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f146159a-5f1a-49bc-b82e-d1da73dabbdd", "sighting_of_ref": "indicator--cb50d622-0d05-4968-813a-b57255bfa891", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45645685-90b6-4ae3-b48d-1af5bf28bb0c", "sighting_of_ref": "indicator--cb50d622-0d05-4968-813a-b57255bfa891", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c765fa-9dd8-4965-a699-600d6eced8bb", "sighting_of_ref": "indicator--52ad0f51-a99d-41b0-a454-aeb562b7114c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16262e13-5a2f-4d44-871e-3c93e25e7023", "sighting_of_ref": "indicator--52ad0f51-a99d-41b0-a454-aeb562b7114c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492781aa-5fe5-4885-a85c-70af50eda714", "sighting_of_ref": "indicator--f6942187-5a71-4571-b4b5-83223d59e4b0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb48d01-67b5-4595-ac23-c1183fd23bc1", "sighting_of_ref": "indicator--f6942187-5a71-4571-b4b5-83223d59e4b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418ba4a4-227a-4ee7-8531-61e1982d2fbf", "sighting_of_ref": "indicator--a6d07665-ffd5-4c6e-95c8-1e2b054593a1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b00159-97b1-48ac-becd-62f459ed22e6", "sighting_of_ref": "indicator--a6d07665-ffd5-4c6e-95c8-1e2b054593a1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02423eb9-9e52-42fd-9cba-a68c6b2a507f", "sighting_of_ref": "indicator--30dcacd9-f8d4-4466-8493-7686abf6d143", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a64a14-47e5-45d9-8358-1beabe1c0246", "sighting_of_ref": "indicator--f629533f-e054-4716-8e1d-1b65109c0054", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e86baad-654d-482e-9c02-9e24fc635979", "sighting_of_ref": "indicator--4b571e8e-e1db-41c6-9772-95479ce0745a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f7b284-ae3b-43dc-be8d-a7afc8b35829", "sighting_of_ref": "indicator--6046e29a-cee2-482c-8ad1-157a605759af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f315fa-3a0d-4780-b25f-e9ad68d5fbbd", "sighting_of_ref": "indicator--7d32b8ee-bdb1-4e37-95db-59b21e4d5e31", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a083e096-7c65-4b3e-8cd2-86ccbcd96148", "sighting_of_ref": "indicator--7d32b8ee-bdb1-4e37-95db-59b21e4d5e31", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef5d2a01-0b6d-4067-958c-660fd5f4a994", "sighting_of_ref": "indicator--52d7b4ee-b8e0-48b8-a169-e17b98e4d1b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e487a677-f06c-4aeb-bdf3-6e994bf246cc", "sighting_of_ref": "indicator--ce002843-d64f-44b3-9dda-181dbb4d8fa2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273df54f-96c9-4db5-a159-9553f0a4cd0e", "sighting_of_ref": "indicator--dcec44c7-726b-4170-ac42-4cd7c01b3350", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56be5f21-5706-4826-934f-157dafa6a3ed", "sighting_of_ref": "indicator--2aa1f9b9-2341-45f5-bbf0-ae05fb27e7e7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1216ab64-be74-4b3c-9388-4ca10640475c", "sighting_of_ref": "indicator--9845f04b-6dc8-49f4-9a49-94794a2f2351", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ce4bb4-a7ed-4f94-81a2-8371d54ba1ca", "sighting_of_ref": "indicator--ceca979f-ff77-47e3-ad77-506d601d6162", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a707e213-087b-4cc7-893a-307d28244fc0", "sighting_of_ref": "indicator--d559880e-066e-413e-8ce2-f5695df5c282", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bef92aa-663d-4fb3-882a-b7faf52b055d", "sighting_of_ref": "indicator--aadf17e4-83cb-4f3e-809e-506101a12387", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047695a2-6cc4-4faa-9c26-cc40825395f3", "sighting_of_ref": "indicator--ef773eec-2838-4edf-a4b2-6f09cd409009", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13cb6ed1-be25-4275-9cd8-225cf57f17b2", "sighting_of_ref": "indicator--e1242d7c-7116-4e7c-b6f6-97cddc3d078a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--284fdc4f-ffb8-4b0e-9a03-fcd31261e344", "sighting_of_ref": "indicator--7d90c971-00df-4781-8fb2-443cad447e35", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047d22c6-8e7f-4e2e-be85-1c997132c707", "sighting_of_ref": "indicator--f3ae7119-66e0-4610-a9fd-0bf594adde7f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc01c62a-6b10-468b-b912-b8197d579f3f", "sighting_of_ref": "indicator--bc541dfe-e699-4689-822e-8203f87f0534", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23642235-b4fe-4ba3-967b-8ff5fecc7cd3", "sighting_of_ref": "indicator--11b08dae-8fe1-4d83-9afb-20de30489898", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11bbb1f-aa70-4dc2-9adc-dddd190a33e7", "sighting_of_ref": "indicator--eb048f76-e8b4-488c-820e-8c29b649c44d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe6e1cb-887d-4e97-91a8-d8be8461a7d8", "sighting_of_ref": "indicator--c3ae2f5c-ee31-41f8-81f5-ce2d7f520465", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08365293-546d-4edc-b74d-fdddbeba2dcf", "sighting_of_ref": "indicator--c3ae2f5c-ee31-41f8-81f5-ce2d7f520465", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1754576d-f5f9-445f-8b6d-48b8d962c8bd", "sighting_of_ref": "indicator--2bb7319d-1a4b-4a57-becb-3921b9ee830c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--728bdadd-6496-468d-bccd-f70d98a65f00", "sighting_of_ref": "indicator--287d9885-eee2-43a9-9ce7-65cc377221f4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11617170-e768-49b4-9003-73d8cd6599bb", "sighting_of_ref": "indicator--8e5fe313-ea78-4edb-be9d-3c71d7f5c102", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de5d1d5-5f77-4045-87aa-0fa4ea7a0189", "sighting_of_ref": "indicator--1011d826-aa75-4e5f-805d-2309c0d2f892", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11481e24-c295-407e-b860-59c75d7d1357", "sighting_of_ref": "indicator--0c4f2ded-2359-4ce7-b5b0-1cbcd4711c13", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8a4b82-5595-460d-bc7a-7a9cdb8bd69a", "sighting_of_ref": "indicator--54bff860-2936-4652-9d0c-c17c3b7eeeff", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25953280-7a85-4566-91b2-1ff9cd01c8c6", "sighting_of_ref": "indicator--8a2500c8-6130-46e0-aeda-fa2945f6442e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d26cbc-e077-4bc0-9661-2d5b7a774659", "sighting_of_ref": "indicator--2779db79-c098-402f-99e1-7a09e8690eb7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc63056-ad03-4947-bb20-5edab8fa89d0", "sighting_of_ref": "indicator--8d151162-f78d-4fea-ab11-fc1744548116", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e5331b-1ec4-474a-b716-9919140627cf", "sighting_of_ref": "indicator--3b575ea6-33a7-4c19-aa97-2db15871f7f9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde2bb8d-6499-4061-a7dc-ca91b4cfac42", "sighting_of_ref": "indicator--1b1acd72-ff10-48ac-bc4a-b48463732bc5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927f953c-d4a2-4fb0-bc3a-25d9c2f6f6fc", "sighting_of_ref": "indicator--ed4f15c6-366c-494a-bd85-d9fe129c5274", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdcedb4a-66d3-4cbe-b0d0-798a27cb8874", "sighting_of_ref": "indicator--ed4f15c6-366c-494a-bd85-d9fe129c5274", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48346dd1-6239-48a6-b63e-0fc6661c805a", "sighting_of_ref": "indicator--1d36de42-9c09-44af-92be-aac49ff6fc2a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a5e78b-479c-49dd-b875-9337981f375e", "sighting_of_ref": "indicator--01618db3-d5cf-47f6-962f-af1970b95fc0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb0cacc-0c5b-4b2c-ba33-77e752ba7a88", "sighting_of_ref": "indicator--01618db3-d5cf-47f6-962f-af1970b95fc0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82cdbd8-3b71-4c98-8359-dc881fd954ab", "sighting_of_ref": "indicator--911255c4-c1c2-4d8e-ad8d-74f4e98d7ac2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a67728-cf04-4511-a9b7-a5fa7f4ed662", "sighting_of_ref": "indicator--911255c4-c1c2-4d8e-ad8d-74f4e98d7ac2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f274c0f-0d43-442f-908e-b3c4910dc603", "sighting_of_ref": "indicator--a3aab208-7fe9-4a08-bf48-b48d14a53ccb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c386250-a340-4769-b634-c04b119384b9", "sighting_of_ref": "indicator--19b148c5-24fe-4e25-a5d1-e1514620be37", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48995ac-12b3-41a9-9bd0-ce75311c6d04", "sighting_of_ref": "indicator--19b148c5-24fe-4e25-a5d1-e1514620be37", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6168c19b-d8cd-4799-830a-c93f44eab77f", "sighting_of_ref": "indicator--190de710-4220-4089-b84f-f97cad8d1acf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5892c077-042b-4a14-a8dd-032292dbe3f5", "sighting_of_ref": "indicator--190de710-4220-4089-b84f-f97cad8d1acf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc578c1-9f8e-4cd9-8681-d634af370941", "sighting_of_ref": "indicator--18724d6f-ccca-4585-9111-ea2c73273f4e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cadb78f4-ae4f-4f2f-be81-73d27e619607", "sighting_of_ref": "indicator--18724d6f-ccca-4585-9111-ea2c73273f4e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e383b846-0bea-448f-b2ce-696fae35f67e", "sighting_of_ref": "indicator--b9a6f363-7da8-47e2-8d0a-61c56860e1d7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b59037f-cfe4-4564-9667-758194fecd2f", "sighting_of_ref": "indicator--b9a6f363-7da8-47e2-8d0a-61c56860e1d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487a80ac-1e06-4ddb-9d60-e492f21805df", "sighting_of_ref": "indicator--4ab702ae-ee80-47cc-98c4-f07f2dc5f58b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239758cb-7b8b-4f4e-ab33-0cfdd30272c3", "sighting_of_ref": "indicator--4ab702ae-ee80-47cc-98c4-f07f2dc5f58b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6402b083-9c97-4841-9330-81fac6f4911c", "sighting_of_ref": "indicator--1a887a78-090e-4aac-af56-dee429d24fbf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59ca450-5b1a-494a-9ffe-de4adeb5ff50", "sighting_of_ref": "indicator--1a887a78-090e-4aac-af56-dee429d24fbf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275fa4b8-94fd-4698-acf9-49f08c405310", "sighting_of_ref": "indicator--b7d396e8-2eac-45fe-9a77-3d98ab6bddac", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fea83d0-7d6d-48ae-82af-8f7068f0c1fe", "sighting_of_ref": "indicator--b7d396e8-2eac-45fe-9a77-3d98ab6bddac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd959a35-c4e1-4992-b03a-8dcc0d5bb086", "sighting_of_ref": "indicator--33ffc8b7-90e8-4446-a896-a1edcbfc3d04", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6397ad7-e355-416f-9ec5-d2ce99af761a", "sighting_of_ref": "indicator--33ffc8b7-90e8-4446-a896-a1edcbfc3d04", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9c1168-2993-4991-a056-3c41703ffea2", "sighting_of_ref": "indicator--9d327820-953c-4b52-a9a4-68d7884f4fcf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a7a77e-ea95-4f60-9285-8b39e3f292a3", "sighting_of_ref": "indicator--9d327820-953c-4b52-a9a4-68d7884f4fcf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6907c4a1-54ab-463a-9e7f-d4ffaa20a547", "sighting_of_ref": "indicator--b2baf7ac-ee42-4c78-ba13-407ccfde815e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c006c6c2-3969-4b7a-9a1e-5043c195f599", "sighting_of_ref": "indicator--b2baf7ac-ee42-4c78-ba13-407ccfde815e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ecbb07-4c64-41c8-8538-d5197d5933e1", "sighting_of_ref": "indicator--4e250753-e527-44e3-907e-3eb7f4794ea8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1963d544-6220-4458-96a1-5cc5baf1eb76", "sighting_of_ref": "indicator--4e250753-e527-44e3-907e-3eb7f4794ea8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db6b7369-0864-427b-ab2f-13c9c24b3e52", "sighting_of_ref": "indicator--82e749aa-d374-4d82-9c1c-e087a2503902", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928a017c-808a-4f57-955c-8bad77da7b7f", "sighting_of_ref": "indicator--82e749aa-d374-4d82-9c1c-e087a2503902", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf868e8d-aca4-4d62-8311-efac7d20ce1a", "sighting_of_ref": "indicator--d93b7d52-68bb-4f94-9078-f5ea096f28fb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1bbbbe9-fdfe-4de3-97c7-25a8d0f9f891", "sighting_of_ref": "indicator--d93b7d52-68bb-4f94-9078-f5ea096f28fb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0544bf93-7573-4f77-8ad6-9e239917f9f0", "sighting_of_ref": "indicator--ff254e51-1bc9-4176-b555-4ef08364c35d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6cb67b-a833-4980-8147-bc002996ce69", "sighting_of_ref": "indicator--ff254e51-1bc9-4176-b555-4ef08364c35d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5021c9-b3e5-4e44-b286-1858801262d9", "sighting_of_ref": "indicator--80084980-d813-49b3-88dd-33a319514404", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d44b41-7cfa-4e15-865b-2d839c1c3014", "sighting_of_ref": "indicator--80084980-d813-49b3-88dd-33a319514404", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc569c92-2dc6-42eb-81fc-f27973957808", "sighting_of_ref": "indicator--e0193fa4-3f93-43ee-9e7b-267d51cb5c93", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a6f938-b344-4f03-b7e3-037b43600530", "sighting_of_ref": "indicator--e0193fa4-3f93-43ee-9e7b-267d51cb5c93", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b909d346-de5b-4e33-b8cb-a904195df4f9", "sighting_of_ref": "indicator--d21a1e99-3dec-41a1-8964-4af91bc4bc9e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e52dfe-6e13-428c-b2c0-8ac563d91126", "sighting_of_ref": "indicator--d21a1e99-3dec-41a1-8964-4af91bc4bc9e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0a81aa-505b-48d0-9440-669e9fdb6a24", "sighting_of_ref": "indicator--03bc8b98-f465-47fa-9203-76b7b6c02bd3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93591157-7dda-4cde-abc0-f68240fb4c95", "sighting_of_ref": "indicator--03bc8b98-f465-47fa-9203-76b7b6c02bd3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db67d989-1286-4799-80a5-ce8a8e24a0c9", "sighting_of_ref": "indicator--9a40bce5-31b8-4ea7-80a6-1d54cfa21a80", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7c5553-8bd3-483d-8334-e1893a795e4b", "sighting_of_ref": "indicator--9a40bce5-31b8-4ea7-80a6-1d54cfa21a80", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--931ce4cd-7398-467d-a225-7f5074370477", "sighting_of_ref": "indicator--01cec7ca-f62d-48c8-897b-7e70a3d45e7d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb60983f-d8ab-4ef9-91ff-801068615cb0", "sighting_of_ref": "indicator--01cec7ca-f62d-48c8-897b-7e70a3d45e7d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7fdfcd-bb31-4544-8b22-7712ea7edf07", "sighting_of_ref": "indicator--ae4ae5fd-da63-41ce-a02d-4a157f6c1543", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab43a54-c76f-433c-87a0-c71738b40f73", "sighting_of_ref": "indicator--ae4ae5fd-da63-41ce-a02d-4a157f6c1543", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b1fc5d-5ba0-48e5-8045-5b276aed3469", "sighting_of_ref": "indicator--dcd80c6c-c920-4c6f-ba1a-4c9e49cb1d2e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--184705c1-8d98-4199-9bab-c0f25b15f1b9", "sighting_of_ref": "indicator--dcd80c6c-c920-4c6f-ba1a-4c9e49cb1d2e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01810e53-007a-449c-9d08-ae980eeae369", "sighting_of_ref": "indicator--868f949a-5384-4648-b662-50eb3723a7e2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d677170-7cc3-4f25-b381-d10bedd7d380", "sighting_of_ref": "indicator--868f949a-5384-4648-b662-50eb3723a7e2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07410b3d-ee80-4095-be27-78ce071d7ba7", "sighting_of_ref": "indicator--b9ad90d5-f897-4b38-be46-9850743c4220", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e55c935-d3e6-4669-b632-33f755c1020b", "sighting_of_ref": "indicator--37bc4fed-6ed3-4474-be31-14c01b740c43", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb3c6f5-7276-4daa-a0ee-96f9425ee1c5", "sighting_of_ref": "indicator--31535ff9-917b-4e4f-9510-ac0edcf69731", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f092125b-bb1e-4f76-8575-7aa911250e5e", "sighting_of_ref": "indicator--e9b958a0-5bf8-42a9-a1e8-eb9187e2ab35", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab7dda4-2f6d-4372-8e5c-dc8d768f8479", "sighting_of_ref": "indicator--e9b958a0-5bf8-42a9-a1e8-eb9187e2ab35", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32110d92-f581-405a-8f77-49666c3cd0f4", "sighting_of_ref": "indicator--9eee64f1-8971-435a-bab4-bb88e1117455", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d834c28-b689-4de9-98c6-0fb55692dbdb", "sighting_of_ref": "indicator--3e395453-556e-4d0f-9158-b83bb41798de", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff242757-0e21-48ea-9435-b17bb3a2e23a", "sighting_of_ref": "indicator--cd29e2d8-21b8-4ac2-acef-d3a206233864", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e6719a-bf32-42b0-b8d8-6dee51dc23c9", "sighting_of_ref": "indicator--90021f40-1af5-486d-9d27-490b32ff21be", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05dfd910-a304-416e-a8ef-7a974e97f9c4", "sighting_of_ref": "indicator--a7f85e05-25ee-4461-bf56-9976ff2f82aa", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b86545-9034-4e94-82d5-a938c2be84be", "sighting_of_ref": "indicator--a7f85e05-25ee-4461-bf56-9976ff2f82aa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e349dd82-86f8-4c03-8ee7-645962fb498c", "sighting_of_ref": "indicator--f88336cb-5ad8-4d60-b26d-f3bd4ef46206", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5baa1d-a9d2-4da9-88f4-da07339b5dab", "sighting_of_ref": "indicator--54b3a982-4708-4d57-adc4-9e641726b5b0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa4fea7-4015-4f9a-83b6-281b5f6be04f", "sighting_of_ref": "indicator--54b3a982-4708-4d57-adc4-9e641726b5b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1681f2ca-8e32-4d7d-8230-71570e476f4d", "sighting_of_ref": "indicator--5cd1b9c8-1351-43a8-b5cd-4da98169cdb0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d24b1d6-aba5-4560-bd37-e13fba9ecab8", "sighting_of_ref": "indicator--da2dd7e7-2a72-4c9b-897a-dd647022f312", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2eb0cb-748c-4667-a42c-3ec483811549", "sighting_of_ref": "indicator--5091e21e-e55a-4781-a879-dab2cee92552", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d7cb95-24bc-4fba-8d6a-ab8c509ed2dd", "sighting_of_ref": "indicator--5091e21e-e55a-4781-a879-dab2cee92552", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c24213e-6906-44bf-9df9-7c254bfa3492", "sighting_of_ref": "indicator--a6ae7bc9-9895-498f-96a5-7f825790dfa0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc366861-5a09-4770-b74d-80366ff1cc8a", "sighting_of_ref": "indicator--a6ae7bc9-9895-498f-96a5-7f825790dfa0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6214d601-eb40-4346-9d3e-db6301d85ba8", "sighting_of_ref": "indicator--7d9eb35e-5182-4195-9942-a80368335cb4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8423ab-d858-43d5-907f-5f5e3f7b90eb", "sighting_of_ref": "indicator--7d9eb35e-5182-4195-9942-a80368335cb4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd5a4f5-1dae-4752-9372-54ba79b68c95", "sighting_of_ref": "indicator--e6031bfd-aa0e-44aa-9050-78ad376c38e0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b1b1d5a-939a-47d6-bd01-ddd7a1251bca", "sighting_of_ref": "indicator--5e45cd7f-a63b-4a20-a10b-d5e5ce6ed533", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10de462-9c73-41a8-a012-86553523cd7f", "sighting_of_ref": "indicator--5e45cd7f-a63b-4a20-a10b-d5e5ce6ed533", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67732e1-86ea-4ba3-89f2-8a4730153419", "sighting_of_ref": "indicator--deca6254-6da4-49ab-8b8e-a77da01e8084", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3465e491-1a0a-4d71-89da-7988d3db932f", "sighting_of_ref": "indicator--531687ab-7c68-427a-8a0f-0297e0a5d294", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8bbaddb-4164-456a-9468-cddb95dfe1eb", "sighting_of_ref": "indicator--531687ab-7c68-427a-8a0f-0297e0a5d294", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13877d03-a31b-4b1e-8025-91c8c9f85e35", "sighting_of_ref": "indicator--ea2069ce-7b68-49e3-8b94-86b05c6de358", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e40353-a81a-4161-b959-0a653f19dc71", "sighting_of_ref": "indicator--ea2069ce-7b68-49e3-8b94-86b05c6de358", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962f3108-1e79-4a5a-9f4b-15784307b1e1", "sighting_of_ref": "indicator--8563f651-a381-4b66-9b4e-1e7de263648d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c93c60-02b0-4ccb-a254-745852ec1562", "sighting_of_ref": "indicator--8563f651-a381-4b66-9b4e-1e7de263648d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8c0ac2-4737-41f8-a7e6-7a74d04b7264", "sighting_of_ref": "indicator--0ac1ca1c-a953-40ab-96d4-ffeb796e8e3e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--818ff173-6530-4200-b9d6-680d403897f2", "sighting_of_ref": "indicator--0ac1ca1c-a953-40ab-96d4-ffeb796e8e3e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79176be-3a01-4d6f-b379-f029ee7125d1", "sighting_of_ref": "indicator--f3d624b1-b150-437d-a0c2-19ac776ab919", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57cf6db5-c566-4ac5-8822-8fbdb5d77e5c", "sighting_of_ref": "indicator--f3d624b1-b150-437d-a0c2-19ac776ab919", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa7823f-2748-4473-840d-096bfbb98ced", "sighting_of_ref": "indicator--e39152ff-a85c-45fc-9101-120efe530252", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f17621da-3c9d-483b-ad75-35ab83d72ec9", "sighting_of_ref": "indicator--f33294b5-5068-49a0-a978-b7ebaf400238", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e001a1c5-f018-41b1-b5be-c4f160069e5c", "sighting_of_ref": "indicator--90f42bd8-1302-4ef5-9beb-a620b96b2859", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e250b11c-952c-4402-9c86-2c8aa6c1bb7e", "sighting_of_ref": "indicator--90f42bd8-1302-4ef5-9beb-a620b96b2859", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9d901c-8aec-40ed-951a-7236edb28dad", "sighting_of_ref": "indicator--cf8fcfaf-8699-4f6d-9f0c-5b4ccffa0a0b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6842a4cd-f373-4596-b6d0-a6fb8e1e48df", "sighting_of_ref": "indicator--9812e1dd-a8d0-4db6-8fa1-3e811f774e7f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb5faa5-5896-48ed-8e85-8e23b1ccf01b", "sighting_of_ref": "indicator--9812e1dd-a8d0-4db6-8fa1-3e811f774e7f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5a2618-ca63-4c49-9aef-e3b062c84896", "sighting_of_ref": "indicator--2ae7dd88-d4c8-4da4-944d-3393f8f15164", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcbe70ee-0850-4438-98a5-b0a658cefeef", "sighting_of_ref": "indicator--2ae7dd88-d4c8-4da4-944d-3393f8f15164", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21ece45-d0a4-404e-9f9e-08099d18163b", "sighting_of_ref": "indicator--d9c8e6bd-d603-4d9c-a890-99efcf4c7639", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2dd370d-4733-4a50-a5e5-c81cca2fa124", "sighting_of_ref": "indicator--d9c8e6bd-d603-4d9c-a890-99efcf4c7639", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb43984a-ad60-4029-850b-60f09670336d", "sighting_of_ref": "indicator--de299519-644f-41f6-93b8-98e2e1f1b1b5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3daf4e69-2f7a-43cd-9be7-13c553f40275", "sighting_of_ref": "indicator--253910f6-1e57-46b1-8427-f8ab063ccdf1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b374459-ae42-4d55-b5ed-e1f02f5fcff4", "sighting_of_ref": "indicator--b23367ef-c8d2-4d11-ac26-c094a98d0865", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d72b148-cb8a-4757-9e1a-24d5c80dcad7", "sighting_of_ref": "indicator--b23367ef-c8d2-4d11-ac26-c094a98d0865", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d988294d-8b17-402c-92cd-3578ac2b6d1b", "sighting_of_ref": "indicator--417ea660-7628-4f8d-a0b0-a0c648b772d9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2848c4af-754b-403f-9ab0-ba921ced303d", "sighting_of_ref": "indicator--51a70dc2-cf35-409a-86c8-45dadcda01d1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13733ce5-24a2-4165-8b7f-8927bd0ba821", "sighting_of_ref": "indicator--51a70dc2-cf35-409a-86c8-45dadcda01d1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7effb98-2d9f-4cc0-bbcb-aa52e2e2933d", "sighting_of_ref": "indicator--e085bc57-7cb5-49e1-8f42-70e3ccb17b66", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87837367-d463-41a7-ae8c-6056ef80a274", "sighting_of_ref": "indicator--dd24480c-68db-4657-9e34-9200ad489e1f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542469ff-ac7b-47c5-8bca-226bbb2f415f", "sighting_of_ref": "indicator--ffd599ae-1276-4d54-a32d-97c503c0d403", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb41451-8b59-42dd-addb-c8f4d52f6f95", "sighting_of_ref": "indicator--7be30045-39cd-4b36-a97e-2b6862b168d5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb2eaa3-fcf8-4745-99b3-749f41083b83", "sighting_of_ref": "indicator--25453c83-5886-4c6d-8f9a-3f7d9828222c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207c727d-c142-4d8f-93da-7be173db3f69", "sighting_of_ref": "indicator--208718dd-ccd7-4c09-9e27-d56f0181f99b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9afabed-da6f-4146-9906-4bfea8f5c3d4", "sighting_of_ref": "indicator--d00c544b-cb92-4c2a-bd78-20d778badc94", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9d3da6-35fd-4e22-b1d6-7e90e9f4148b", "sighting_of_ref": "indicator--d00c544b-cb92-4c2a-bd78-20d778badc94", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38139e21-ace0-4767-81ea-eacea2b4e23e", "sighting_of_ref": "indicator--81c7dc67-7774-4dfe-84d8-7d3cfb43e8eb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f77a01-8545-4afb-8f9d-cc3eca36795b", "sighting_of_ref": "indicator--81c7dc67-7774-4dfe-84d8-7d3cfb43e8eb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e9eb89-6e68-4259-ab0e-05f30295698b", "sighting_of_ref": "indicator--8b51aa9a-eabc-4bb9-b13e-1951af427efb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a476da5-c504-4559-ba83-a276459100fa", "sighting_of_ref": "indicator--8b51aa9a-eabc-4bb9-b13e-1951af427efb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aeebab7-40ad-4a87-93ef-42139152871e", "sighting_of_ref": "indicator--1c938c7a-924c-42a7-91e8-8e85f45f3ed7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89fbad1e-e80a-4b87-bf47-2816d43ad515", "sighting_of_ref": "indicator--1c938c7a-924c-42a7-91e8-8e85f45f3ed7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8fe173-8338-487c-ae64-1f4359674f12", "sighting_of_ref": "indicator--df3a8033-c1c8-4660-b165-dbec1238b83f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd23103-01a3-4487-aba8-702324bf4db7", "sighting_of_ref": "indicator--df3a8033-c1c8-4660-b165-dbec1238b83f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72cc45f-61cc-4dc1-869d-8056a51910fc", "sighting_of_ref": "indicator--f792ceb2-3161-40ea-a91d-9bddbc4d4160", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4b422f-7d01-4769-9449-a07ee477c77c", "sighting_of_ref": "indicator--f792ceb2-3161-40ea-a91d-9bddbc4d4160", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e758541e-caf2-4c5b-bd9e-c11834c3f98d", "sighting_of_ref": "indicator--18b3c984-9faf-485e-889b-313c320778b2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811a01d9-639f-42bb-9c0e-22927edca3d5", "sighting_of_ref": "indicator--d46050b1-1508-499d-827f-187027d6dcc6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ab6f52-f575-4a1a-96f2-24c764d3f89c", "sighting_of_ref": "indicator--ebbf5119-a8a8-4847-afe1-4f0cc0ed6772", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--404a30eb-7a5d-499c-9d87-a2b216601c31", "sighting_of_ref": "indicator--f51b0155-d3e7-45bf-ba41-e430575c1573", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1b45b4-5ec1-4c5e-9379-ebe6ac0182a7", "sighting_of_ref": "indicator--3c77bb8d-3fc7-403b-9108-29b4c97b412b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e86165-6ac9-4b24-b5eb-52390ab72887", "sighting_of_ref": "indicator--6f08c665-2410-481d-a21b-ef32f73670ab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4717441c-02fc-4e46-9f40-73855c18210c", "sighting_of_ref": "indicator--31581589-4f79-4a93-abb5-332151976c4d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77d2e33-fe1b-493d-8aa0-b2f61a0c9235", "sighting_of_ref": "indicator--d403b800-fbde-4d57-b9c3-d578e2ac9563", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2d2766-2c58-46ed-82fd-f88a3d4ee2e6", "sighting_of_ref": "indicator--d403b800-fbde-4d57-b9c3-d578e2ac9563", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d87845-f492-45a1-b743-6588a13432d3", "sighting_of_ref": "indicator--3320a9ed-27b2-4f16-9c29-51b0233bf420", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e85ca9b5-2e10-49d8-bb41-71462c571bfd", "sighting_of_ref": "indicator--f82a82d9-36ee-4545-84ad-145c5fb5e229", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f55a83d2-23dc-41fb-929e-12509063c70b", "sighting_of_ref": "indicator--18501f9b-2df8-4ac5-8628-e4bc4b0e11e5", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24979841-4abf-42e0-aa54-2719b9702c55", "sighting_of_ref": "indicator--9cc1ae4e-f7af-48ef-936a-690b2d67937a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726350b1-d0fe-4bbd-9d32-1c58acd297c7", "sighting_of_ref": "indicator--29698bec-e5cf-43b4-9b58-5495ff28e3cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44600369-43d0-494e-94ca-c4b2700c18b3", "sighting_of_ref": "indicator--4559d446-52bd-4e0c-b38d-d63f5f6b7c54", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6f1d5e-fc06-40ab-9a54-d99c8acbda5a", "sighting_of_ref": "indicator--f85f0d77-24dc-45d0-9c8c-c4e764828089", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca759ee-212b-4f7a-a753-93b6441859d1", "sighting_of_ref": "indicator--1e20d5df-6a12-47e0-9aae-48dbe934dccf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86117bda-2c30-48b1-be79-973fa0de84c5", "sighting_of_ref": "indicator--4e971a99-7c27-4dee-83b6-73f0854aaed2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1d1f95-9c3c-4014-94c0-cc4f1cdd8c40", "sighting_of_ref": "indicator--d6046886-2ea8-4206-bec1-8a8a00b782d1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd748f98-d31c-4642-a57c-7613795b0fa7", "sighting_of_ref": "indicator--d6046886-2ea8-4206-bec1-8a8a00b782d1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6037bb9-3340-459d-bfb9-6b4c3300b28a", "sighting_of_ref": "indicator--c082108b-8de0-464a-8b25-8ec8b15b7e3d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63f60260-906c-41f2-a372-31d27a779ec6", "sighting_of_ref": "indicator--7993c894-a10e-4383-b93b-f1fecbf138f5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1305bf-b6c6-4e69-8e3f-f6bd042f6059", "sighting_of_ref": "indicator--4439d42f-0a21-4ba8-978f-c36139db960e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a26e15-e203-464b-a9bb-6131657341f9", "sighting_of_ref": "indicator--e8f03f3a-284b-424a-8fd7-2ba7492c37f8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afdde0d3-1171-41a9-a189-56d0aaf54aec", "sighting_of_ref": "indicator--e8f03f3a-284b-424a-8fd7-2ba7492c37f8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83ad735-0987-4176-a72e-9228da48b1fd", "sighting_of_ref": "indicator--01fdefea-a70e-4974-b6f8-e7ea9bc2b4e5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14ad82f-ecf4-45a1-8b52-41e8478bf378", "sighting_of_ref": "indicator--f5ee7430-166e-42b5-aa43-a317acc34e2d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d464e420-18a2-485a-9096-da1d93eee40d", "sighting_of_ref": "indicator--f5ee7430-166e-42b5-aa43-a317acc34e2d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae04c25-d4fc-4071-8da4-3a8a3aced5e0", "sighting_of_ref": "indicator--c22a0234-c6ba-43c6-b838-e4dd1cf84e30", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e163f35c-dcf9-42c7-a0b7-f675eaa4fb32", "sighting_of_ref": "indicator--c22a0234-c6ba-43c6-b838-e4dd1cf84e30", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51bff89-629c-4869-bfce-f9556e0bf60d", "sighting_of_ref": "indicator--dfb2ccfc-ee86-4c11-b5e1-48751c4736a8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2751bc55-9993-4ae8-9409-02398bc53516", "sighting_of_ref": "indicator--dfb2ccfc-ee86-4c11-b5e1-48751c4736a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467cf516-23c2-4b30-8035-3e6986302e88", "sighting_of_ref": "indicator--ea98856e-df22-4ca5-bb1c-40fc030479cd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb4b56c-a1c6-4804-a934-e6a9e4e4b049", "sighting_of_ref": "indicator--ea98856e-df22-4ca5-bb1c-40fc030479cd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82d8402-7d20-4f17-b803-beeda68d701b", "sighting_of_ref": "indicator--12ee9be5-ca6c-4d8f-8e92-25913f2f59fe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7324f1b-12c0-4a8a-aac2-ebfe7d42e710", "sighting_of_ref": "indicator--db3274b1-8b49-460a-8a8c-5adedc2f8230", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1ae464-ffa3-4c0f-8a3d-f3ca7d7c3c1c", "sighting_of_ref": "indicator--db3274b1-8b49-460a-8a8c-5adedc2f8230", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107899f7-cba1-4a6f-98a1-1b93826c617e", "sighting_of_ref": "indicator--d4f03655-5a73-481e-96a0-48d8344d7067", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b986c6-7f96-4626-89d5-3db218f97c9e", "sighting_of_ref": "indicator--d4f03655-5a73-481e-96a0-48d8344d7067", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23674e18-ede3-41a0-a4ff-66efa7b11525", "sighting_of_ref": "indicator--35326f42-541f-402b-868c-704ed98e245a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3f850c-b60b-4376-a353-1dff2e8147d6", "sighting_of_ref": "indicator--35326f42-541f-402b-868c-704ed98e245a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed8c8ec-340d-40ad-8501-7fc1defea683", "sighting_of_ref": "indicator--35db1585-1e1d-47ba-881e-88e8404e32e0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb9de476-3a20-45b5-b007-0b745102e8df", "sighting_of_ref": "indicator--e6e4b282-062b-4f0a-a770-de74728d766b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4022ab33-a07d-4e6f-b43d-da40cfbc458d", "sighting_of_ref": "indicator--e6e4b282-062b-4f0a-a770-de74728d766b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95a878b-c990-442e-9070-b8d51b691373", "sighting_of_ref": "indicator--8bc88737-04cf-4a16-b743-9d3ab1d637d5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8088d2b6-4147-48ae-a1dd-ab4fa63707bb", "sighting_of_ref": "indicator--8bc88737-04cf-4a16-b743-9d3ab1d637d5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4968db0-d35c-46b5-8ba7-84d206da7d0d", "sighting_of_ref": "indicator--d0cb00a8-e093-482c-8a59-ecf611c7161a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12425dc6-5515-407f-8acf-e503f14cf417", "sighting_of_ref": "indicator--d1f5c65a-0e61-44c6-bcbe-75c53629d275", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2f3e16-1be0-40c6-bfe1-ae475fdc691f", "sighting_of_ref": "indicator--d1f5c65a-0e61-44c6-bcbe-75c53629d275", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044f2304-46b9-4a56-8844-f7b0de7ac79e", "sighting_of_ref": "indicator--5f9de285-2acb-44dd-954b-2c1ca4ab130b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d764c72a-280c-4110-9255-ede733791858", "sighting_of_ref": "indicator--5f9de285-2acb-44dd-954b-2c1ca4ab130b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a57c86-0c2b-4c43-bbee-5ecc3b5279d9", "sighting_of_ref": "indicator--6aa94a15-f2bd-47f9-9a9f-ee72db62bf57", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ce6e02-7d62-4919-bc71-7c4575ea837c", "sighting_of_ref": "indicator--6aa94a15-f2bd-47f9-9a9f-ee72db62bf57", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aacea221-e011-43c7-9f8f-5b80af397a87", "sighting_of_ref": "indicator--1ed6912d-3ee2-4891-8ea5-b8f1141cc6c9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1761c80-e037-4bbc-81f3-294e8e527bfc", "sighting_of_ref": "indicator--94165d36-60ee-4189-a331-400986f70c2f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9413fa-14c9-41f3-a173-d4f60dfeff76", "sighting_of_ref": "indicator--51d50bac-b94d-4eb7-851e-f6bd578abc8e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e31857-9b91-49cc-82b3-740c43f1db45", "sighting_of_ref": "indicator--1758f3a1-b4dc-47e9-84e9-70dcc524b6da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7e71d0-2f53-4d65-9288-20273d8d6d36", "sighting_of_ref": "indicator--6605d7d2-9ee1-48cd-9d5c-72be527fab8b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6ae185-00ab-470c-9e2c-4431dd99b27a", "sighting_of_ref": "indicator--70fd2a26-2ec5-4856-9018-9dcb41a92871", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff07e569-a07d-4407-9b7d-8e560a755ddf", "sighting_of_ref": "indicator--8ec30d0c-e70a-46b2-98fe-ecfd03f2f623", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323fd0a9-7a9b-4931-a9c8-91f638e63424", "sighting_of_ref": "indicator--8ec30d0c-e70a-46b2-98fe-ecfd03f2f623", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c1a402-566f-487f-b538-fc991fa7032a", "sighting_of_ref": "indicator--78b7fd6a-32f8-4d5e-9e62-6751b514917d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d0ad80-1037-4b49-8070-69703d6fbc86", "sighting_of_ref": "indicator--78b7fd6a-32f8-4d5e-9e62-6751b514917d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9609a100-1f1d-4cbe-aff4-4fb563af5862", "sighting_of_ref": "indicator--3f09a58e-6d5b-419b-b162-02c99ac8b461", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e34c537-2b79-468b-8829-7b2c87dca691", "sighting_of_ref": "indicator--3f09a58e-6d5b-419b-b162-02c99ac8b461", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9c3599-1efe-43bb-bbf6-9b8fa23a7d4c", "sighting_of_ref": "indicator--2cb7a4a2-7198-4372-a835-4be487d3e311", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2463b04b-76c8-4cc4-be2d-2a1900d73711", "sighting_of_ref": "indicator--fba19718-7929-453b-acb1-91a7f0599b95", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd73f9e6-cbbf-49ee-ab0a-4be929db4fd9", "sighting_of_ref": "indicator--fba19718-7929-453b-acb1-91a7f0599b95", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2aa98c2-a7ff-4097-a87e-9e082b732063", "sighting_of_ref": "indicator--3d26dc80-3b53-4424-8235-e851f1bd7537", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3605f73d-9f34-4322-a773-b4c7ad893e2e", "sighting_of_ref": "indicator--8e968822-d7d3-477e-9562-e7090550abf8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800fc067-2ac4-4218-a576-d8250e101add", "sighting_of_ref": "indicator--8e968822-d7d3-477e-9562-e7090550abf8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75db7d3e-a7ee-4fb1-8f13-b5cf2abfeeb2", "sighting_of_ref": "indicator--21ff77c4-158c-4f21-9b52-69dc43ca86c4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f6d779-aa16-4ee9-9d72-fc6442bfc86d", "sighting_of_ref": "indicator--15967459-1dfd-40a4-8c63-354eabc994df", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cce3574-ceca-44df-9f9f-8c0ffbeb7086", "sighting_of_ref": "indicator--d561afc1-fc49-46ff-acd9-bfb357299610", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac74d76f-3057-455b-8068-a46800a94e71", "sighting_of_ref": "indicator--6ab66dc8-a428-4a74-8021-f9ec054f35d3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ec7551-1d5d-4fe4-af4d-c03c95a371be", "sighting_of_ref": "indicator--e866d459-65c3-4304-8e09-41c3877d8d10", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16e3f9d-323d-4ac6-a578-894dfeaec25b", "sighting_of_ref": "indicator--0bca3a09-d38f-4e19-9fb2-15bdc6593610", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f429c89-4e28-439a-a753-70d5daeca99b", "sighting_of_ref": "indicator--f3d94ec2-e266-4512-ab92-19a9619e862d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c0f107-91ed-4692-a481-6bf3bffc1cc7", "sighting_of_ref": "indicator--571a53e5-e612-4430-8188-b506aa3c7d51", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e83e1b20-caf2-4ca6-83de-6205287e8e98", "sighting_of_ref": "indicator--d81ccbc6-d018-429d-889a-4e84e75c9b76", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143a4e63-2d14-46b0-b676-a6cbe891a331", "sighting_of_ref": "indicator--1c5a74e5-a954-472f-90ea-87d6bb9f723c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666cf32d-4334-4345-abb3-d8c9e9fe8e25", "sighting_of_ref": "indicator--7d5a663d-7f05-44ce-9a6b-8d5ddc08756e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c72845-005a-4829-9e5b-a006062ee0b2", "sighting_of_ref": "indicator--3b699771-2d75-426a-a84e-cdba071924be", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c61873-bf27-4341-9813-4710ecb4e0d1", "sighting_of_ref": "indicator--cee3c9c3-de62-4a51-94cc-6bf57faf1a97", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fad7dbb-fd59-40f4-b0ea-10c883c61f53", "sighting_of_ref": "indicator--c1ad4696-e02b-421e-86a0-81dd38dc0bf3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9279abb6-b0c7-4626-9cf9-14d8f978a8bc", "sighting_of_ref": "indicator--f34449fe-7e00-481c-b172-4d1f12350b55", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89be6899-b77b-41ef-8319-7014d41dd99f", "sighting_of_ref": "indicator--b5772354-cdf5-4a05-b768-cad82b1498ef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f807965-e430-4d8d-ba84-3afef4801973", "sighting_of_ref": "indicator--f0720d25-8a55-4768-9533-e9f6f7ce6fcb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fffab81-7062-429d-bcdc-e5ed39d399be", "sighting_of_ref": "indicator--93130446-3d49-484b-9e64-9e12f49deb43", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--712014ac-4cae-4729-bb9d-e41a9f0b9e2d", "sighting_of_ref": "indicator--7432b778-5980-443c-9a7e-10ec2b2e8746", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77de5a5-74cc-47f9-b937-c113733b027d", "sighting_of_ref": "indicator--5f7ba43e-1c5f-488f-b1b2-ae8b3b88c5e2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9650d8-dbc3-4257-aa05-3af130b9ed63", "sighting_of_ref": "indicator--e48c0238-a0fb-4134-a74c-2272c7147852", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e79d80-60f7-482d-bd08-b3f61b50c7f6", "sighting_of_ref": "indicator--d5bf0346-d505-4634-9902-46851204f97c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856cf2c8-ce46-4191-9c56-ee685472daf8", "sighting_of_ref": "indicator--21775022-9158-4622-b67a-c7970bbb3510", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ae01a6-d6ee-433c-b467-9cb9d94b6323", "sighting_of_ref": "indicator--3830d1ec-b13a-4960-a94b-8ec083088834", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7732f9a-afec-465a-a2a0-2a94f88e782a", "sighting_of_ref": "indicator--13ea59e9-4b94-4dce-8d54-5dfa4b416c47", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e5e720-5506-4f66-b40d-7d3b32ea259c", "sighting_of_ref": "indicator--f9081a9c-4b98-4e01-9cf1-d16f8b967e48", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68565b5f-7f68-4e2e-919a-9beeb9f3ca49", "sighting_of_ref": "indicator--b67a88f1-a9ac-4872-99bb-06f401aa86be", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf63440-b367-4ec1-9c81-e74f5654e1ec", "sighting_of_ref": "indicator--11e54f85-2ac9-4404-a1b1-50fc7f51599c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09cce350-4d5a-40c2-bccb-a0bfd3332a00", "sighting_of_ref": "indicator--ce2f7d1e-6115-4a30-8db2-88f059d83d05", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdcddf0a-14bf-4ae6-b5fa-dea879550677", "sighting_of_ref": "indicator--a2f1720f-c474-458e-934c-e44d48afe83d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e888e15c-4b0f-4fac-867f-f7fe5b367537", "sighting_of_ref": "indicator--a747292a-4ba8-4483-b0a1-bf806c4a8c1c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7097f6-13af-44e9-b575-8ced0abee9cd", "sighting_of_ref": "indicator--7b399256-d56a-4140-8abe-a9329cd00159", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d6b066f-1cf4-48be-9a2e-62832a6d9c1f", "sighting_of_ref": "indicator--ae45a732-479a-4135-9049-72d04d70bee6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26dd3a06-c44e-46da-a45d-9b692fa0c130", "sighting_of_ref": "indicator--3505a866-a714-4912-9006-4e551c997e8e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b21186-318e-4c50-8383-f0875a61026c", "sighting_of_ref": "indicator--64440766-1fad-4517-85db-9601f1c61c79", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49578a1-8966-4e61-94b2-17c5541e2270", "sighting_of_ref": "indicator--fe8be432-405e-4396-902d-e4f4791ff83f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7506bfdf-0aae-4883-96fd-06870fd46946", "sighting_of_ref": "indicator--83b7cfb1-36df-4f10-b327-2560e4a47550", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2cc30a9-7e5e-43c6-be94-f6a0a5973fad", "sighting_of_ref": "indicator--09ef68ec-d56e-484b-ae80-ccbe32216768", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b0a995f-fb11-4c48-9b8d-fbeb7592573b", "sighting_of_ref": "indicator--7510156f-2624-4826-8426-c9a1f230bc3b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b89e036-42a5-43ca-a4ce-ebc92bd43ff8", "sighting_of_ref": "indicator--aec90362-123c-4ed7-b8b2-f0f645b99181", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0008dd0-e468-40c8-a23b-5b46e5d6e53f", "sighting_of_ref": "indicator--60c7f112-4631-42c7-8c90-c63a58a74fd8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e394acf9-f719-4325-98fe-98de28befc97", "sighting_of_ref": "indicator--f5ad87de-9bc5-4f91-aeef-e97d1ab827f0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5776e4-6981-4458-9807-5df821474df0", "sighting_of_ref": "indicator--fbc8e157-36da-44b9-b1bb-113766498f3a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab65281d-28a2-4894-a95c-b8ff87882b8a", "sighting_of_ref": "indicator--40ca7657-6fdd-4ccd-a7de-443161ee0613", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb1ef1e-a779-4d86-bc7e-9206f8b0bd40", "sighting_of_ref": "indicator--0ad95e30-531d-4ca1-94a4-c4f48c2b8559", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ec71b8-e080-41a8-98f9-06a3be3176b3", "sighting_of_ref": "indicator--17545903-58aa-43f0-b2a0-c6624191874d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae24cc51-58e4-4a77-a01e-4ad6ee2eb6f9", "sighting_of_ref": "indicator--f45a3c64-a623-4019-9a06-597668151227", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41552d3-2239-41a9-912f-d046d74c500a", "sighting_of_ref": "indicator--4f9e19a5-c6bf-4ece-8e1f-6aa10cc6cd96", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a22f0c-3aa1-42f5-84ba-88611d4c13de", "sighting_of_ref": "indicator--af71958e-7416-49c7-8e3f-a5c4ef221a05", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9228368-3977-402b-b8bb-20f3a3a14471", "sighting_of_ref": "indicator--e806d888-b019-47d3-b1d4-d0b56ed684ad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82667709-fea2-440c-a6be-503b9c63edf6", "sighting_of_ref": "indicator--03a60037-e5cc-4281-874b-8fba720fd535", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f037b7-21e7-4ea8-aedc-dd4639d36a73", "sighting_of_ref": "indicator--3d4eda69-b5b2-464d-ad5e-f9928c8edf82", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7596b0ff-467e-4691-8fda-bd4784fee893", "sighting_of_ref": "indicator--ce855c04-4505-4aa4-9792-386d68bd25d8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e77016-c0b4-4b26-a667-368967460180", "sighting_of_ref": "indicator--59505472-d3c2-4b31-abcd-23f022a54b8c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd91012d-8ce3-45da-951c-c96ff81a809d", "sighting_of_ref": "indicator--44ad9d8a-d8be-4044-a202-3a9fe0d83c8c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7d647a-7f89-4fa8-bf81-0dbdf06336bd", "sighting_of_ref": "indicator--51ead6f2-4c30-4251-803f-5e37f4f8e2cb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a609ae-78b6-47b2-9d72-fc58aa2b262f", "sighting_of_ref": "indicator--67cbd033-48fb-426a-8c13-9adaa2a12479", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504a9edd-185a-4fa3-b9b7-51faf1eab135", "sighting_of_ref": "indicator--16b99293-b9df-4a83-b33b-dd254c38f54b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7560315-6db2-4098-945f-c2d29b6f10f7", "sighting_of_ref": "indicator--c1ac8b93-9c85-4afd-91b1-2edf68a19bc1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76367f39-a956-40d2-966d-f87655eff3da", "sighting_of_ref": "indicator--8ebf3b48-5953-45ec-9922-6602f4b30ed7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34b063f-b484-49ca-8488-661d8469465c", "sighting_of_ref": "indicator--4ff7763d-1095-4354-aadc-1357da79702d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4943ba-539d-43a8-95f5-000f98165fa1", "sighting_of_ref": "indicator--f7a67193-cd7f-45d8-bce0-e0fe25fc1e67", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a27f94a-ce43-49d7-9dfc-cd9f4a5c164e", "sighting_of_ref": "indicator--53324e21-d4fb-4432-9f23-8bb5eecf25a5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02942fc-54ec-4a32-b682-346d3f92d6cd", "sighting_of_ref": "indicator--a47df8ff-b1b7-4584-b849-f1e46c356c6a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1690d030-20bd-41c9-a4f2-7d5a6852f5af", "sighting_of_ref": "indicator--a215bc70-7c20-43de-97e3-fb631739fd43", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661eca37-8467-439c-989d-2961713099a8", "sighting_of_ref": "indicator--098297f2-dd68-4eda-8ecd-1d50c37803a5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903108bc-d538-4be9-b74b-25277385b1c5", "sighting_of_ref": "indicator--39aabc45-9e8d-4018-8923-d45a1fe64c3b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--077146b5-ff8b-48e9-a1e9-a7c3772c9702", "sighting_of_ref": "indicator--8c8d0b7b-e22b-461d-8926-d175bc64125a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7504f704-08e2-4d1e-9fef-077dc8a52c66", "sighting_of_ref": "indicator--4deeb5f6-c476-496b-ab67-ce5909018cfa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0203b3-7c15-4f00-b911-95cf6a41b5c8", "sighting_of_ref": "indicator--107e3d15-45f3-4d8e-bfcd-140ad62487f9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8cbd723-df8e-46c5-a931-db6431db14e6", "sighting_of_ref": "indicator--d7a7da40-8e72-4661-a552-ea41d06624f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b05564-1740-4601-920f-f275fef4752a", "sighting_of_ref": "indicator--e756e8df-0662-42a6-b334-20700769a9b6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a99dc5-c86f-4851-a975-2063dc3c12bd", "sighting_of_ref": "indicator--273f0f82-a648-4640-baef-ed53cdafbc24", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa97937-0d40-4450-811d-4c98c259bb70", "sighting_of_ref": "indicator--db9af2dd-2edf-497e-ba47-cdf1cab803de", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090f889f-72f9-4eea-8038-71fe33147d39", "sighting_of_ref": "indicator--fd252aca-ff2b-48ef-9d3f-b50cdd0bb1ac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9785cd7-5927-4294-9af5-4e794e722c3c", "sighting_of_ref": "indicator--fd7e4f5c-38f8-4b46-9db1-3379be5cff86", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abba8509-c834-48db-b938-705a1ad3da3f", "sighting_of_ref": "indicator--98c5d2df-2b1e-4307-8455-da92a357f0ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec139857-dcdf-4994-92a4-692f68136372", "sighting_of_ref": "indicator--7dd09bd7-53f3-41fd-a470-c386921f7de7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a52bbb89-d012-4bbc-aa23-92578bac3d2c", "sighting_of_ref": "indicator--1471cb5f-86dc-4687-950f-a96018b69668", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1200d7a-c0e8-4df2-a22a-e07df277d678", "sighting_of_ref": "indicator--4ed8aa58-a4e7-4716-9080-8845b5cf0b50", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a8d9d5-66a4-4447-ab55-4144e1abde3f", "sighting_of_ref": "indicator--ffb9fb81-e826-41a2-bd58-b871c06633d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ff0acd-14ae-4557-90b8-3efc2313ea5c", "sighting_of_ref": "indicator--30a77139-645f-446f-a519-81b77ec226a6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab44d7a-18d3-49dc-b4c1-b7b62da37f81", "sighting_of_ref": "indicator--40f0f4ea-daba-4116-ae47-e54e7d29d871", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b00786-9c15-4320-8ae4-f4b4a79987b8", "sighting_of_ref": "indicator--f3fc91e7-90e7-4298-b4ef-9ba91e1b83ae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd9ddd5-19a1-4e90-a93e-0c4a2bf2f4f9", "sighting_of_ref": "indicator--a208cd1c-5279-4700-9e50-be897d65ec52", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2fe457b-64f2-43cb-9fe9-6dc5ebd3460e", "sighting_of_ref": "indicator--5dafd516-9499-452a-99ba-7c266913c103", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f06cf36-421e-4e60-98dc-f5d2e5c68b77", "sighting_of_ref": "indicator--62db88fe-468b-4649-81e1-daa4aec49ee6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21bbd756-7919-4dc2-ad97-785f15625679", "sighting_of_ref": "indicator--a76fb927-eebb-4319-9e2b-64c0b4dca7fd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--729844da-8fd2-448e-af12-8d91a0859db1", "sighting_of_ref": "indicator--285dcc64-9319-48d9-bae5-0926e97c138a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a45bfc3-9316-42f1-8199-9beef853fa11", "sighting_of_ref": "indicator--f950a1c0-9c4c-44da-92dd-d59a1f2e6586", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52acb32-3486-442c-ac70-73326b10b7a9", "sighting_of_ref": "indicator--871364db-d054-4d95-8362-8ab52fdd25bb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb05f3d8-733c-4e59-a0b2-d30c9d63d9ad", "sighting_of_ref": "indicator--6375367e-4ede-47b2-ab90-b0eb158c4221", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4dc35be-509d-4bcf-a2a5-a623b1be4af9", "sighting_of_ref": "indicator--a39fe6a2-d5dc-4c16-9615-07a34fa1febe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69fe74f0-480b-477e-b2a4-545ceb4f26d7", "sighting_of_ref": "indicator--a65a4601-b47c-4920-9d73-4abc1807c9c7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c1dec1-c496-4938-adc3-169f8b459b96", "sighting_of_ref": "indicator--7b84c44a-e4c6-4c80-8245-362e4e5146de", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419b3362-4ca9-414a-b994-c57baf292eec", "sighting_of_ref": "indicator--82f77542-75e8-457d-933e-758795a5de6b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d7051b-3fb7-4f4f-9c52-9af01aa461a7", "sighting_of_ref": "indicator--fc52aa55-fa68-40de-b29a-0f140aae19bc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f5ca8e-a943-4093-9a95-7037dfbf8ede", "sighting_of_ref": "indicator--3c3b533e-133a-497e-977b-7c16e33970c5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95bc370-e73b-4770-b336-0e416ac27e3b", "sighting_of_ref": "indicator--18f67099-6dfe-48ec-89f6-e85361870c60", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2649455-08fb-4f81-851f-9ea82396473f", "sighting_of_ref": "indicator--72e935f7-3949-4e91-9ff2-9d37413100d8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981c676a-8098-4648-b88e-2ea3366a5edd", "sighting_of_ref": "indicator--f4664bdb-5cfe-4e40-9796-58f175b40780", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e99333d-487c-4a7a-89ee-b717c5d364ab", "sighting_of_ref": "indicator--c2a98620-e55e-48e9-8138-b89af67b2fe9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35cd35ef-3a1a-4cb5-99b8-e35bb1abc67d", "sighting_of_ref": "indicator--416d5864-49a2-4e98-9433-4818bc82099b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c3c8d6-5aa9-4e6c-96b0-4f552e81043a", "sighting_of_ref": "indicator--eec7c0a5-4683-4f65-830d-969ca974b825", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0505ab2-00f3-4d59-ba8d-981557811bdc", "sighting_of_ref": "indicator--62d09cd8-f14e-44fc-9526-0a1c207fbcf6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c93742-a7d8-4231-95ac-b8142a5a48b2", "sighting_of_ref": "indicator--ff5a911d-8095-4d28-ab6e-b4ae147b0fb1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c214708e-630d-4b15-b137-5b73f1b0ce9f", "sighting_of_ref": "indicator--9f621645-8f17-4bf3-aca7-4bfa41cea21c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3cb501-b544-4948-b3ff-aa89081a1f78", "sighting_of_ref": "indicator--4c43348c-5673-4a6e-a5ae-43ccc77aa7ca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b818327-3a29-49d7-bd5d-af24504d7c71", "sighting_of_ref": "indicator--2b770b0a-03d2-440a-9429-4744a0afdef3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47e89fe-f77a-4ed9-bbb9-8079aab26ac7", "sighting_of_ref": "indicator--ce623ed7-6276-434c-a3ed-f5f087483e73", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64849eb-2419-4f9c-84bf-f3a1bfbf90d6", "sighting_of_ref": "indicator--dc71773e-cc53-414a-ad4c-c052e56eea57", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a690ecf7-d824-43b5-a78a-80e1cafac07b", "sighting_of_ref": "indicator--1fb16aed-f4a1-4568-9ff3-b68b926871e0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906613b9-1ac8-4a3e-8fca-13256ee9db5e", "sighting_of_ref": "indicator--f7f321e2-6883-4fcc-a727-fc3136c1cc37", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416bb149-20dc-44b2-8ccb-a7f81341dded", "sighting_of_ref": "indicator--e8ea4cc5-d174-45d6-80f9-7c794af4daa5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc6c133-9ba0-4e9c-b8de-0ee2b0c7b444", "sighting_of_ref": "indicator--1fc6be1c-aa7a-4b6c-96eb-cc50673556a6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48788ee2-3bfa-45f0-8455-7a306c694b66", "sighting_of_ref": "indicator--44c01ad2-9e82-4e76-8e56-1099b825b437", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9efb7e8c-fced-49b7-bcf2-67a38c5cedfc", "sighting_of_ref": "indicator--50f00be5-5421-4364-a697-7a7d693fd015", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bdde1c4-7bbf-402a-b52a-cfe3ad30a5d2", "sighting_of_ref": "indicator--917e7e31-a30c-48b5-9ce4-acb767f0d320", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67ae060-3b50-4540-92b7-e882c44de9a8", "sighting_of_ref": "indicator--319d7451-b462-4314-8127-81ef42d30939", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa86ea6-345d-4cf1-b557-955727c01eb8", "sighting_of_ref": "indicator--43efd16d-72ba-4d81-bfc0-e2518b8ba615", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81523648-7fa2-470c-95a7-5f27d3085c36", "sighting_of_ref": "indicator--5f01e70f-ed09-4e29-b70f-d3bb9b0294f9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e7d126-9a12-4319-9cf0-22820d7a4a78", "sighting_of_ref": "indicator--08a73136-5cad-44d8-841e-fda7155502dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905ee040-29c8-449c-b8c2-f80b1d305f02", "sighting_of_ref": "indicator--e6533cdb-1786-40ec-985d-fc487b876432", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab6d2a75-f576-42c6-85c6-528118b43828", "sighting_of_ref": "indicator--6ad76056-2cbb-4459-97d2-6b6580f75f70", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f56fccd-baa1-4a25-83d8-d7b440c4832f", "sighting_of_ref": "indicator--2bff5d79-ad5b-46fe-8666-03606dde30e3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ce23ae-d860-45b4-b459-00444c161c91", "sighting_of_ref": "indicator--fe7a6440-8b93-47fb-9135-01075e03d366", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882c8800-811a-46dc-87a2-26e32af5cd49", "sighting_of_ref": "indicator--faf60b17-a46f-4978-9498-33f44f113936", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30d2298-3e1f-4c33-9a81-aec2cfcb832b", "sighting_of_ref": "indicator--86b8cf49-d95a-46d6-8176-570783ebaa5c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21bf44b-f98f-4ee4-a2e4-3a16b75adc15", "sighting_of_ref": "indicator--67c41808-81d4-4a26-b1aa-2e321ac44b4d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baaeeb63-f3d8-4f3b-9240-00249acc7667", "sighting_of_ref": "indicator--6f66c677-3f53-4aac-89ed-4c3407e0eb79", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ca9a6e-1391-499d-8274-476058013637", "sighting_of_ref": "indicator--3fc58680-5707-40ef-b3ca-93ac20886e63", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7534b48-5e3c-44e1-849d-b52fb58ba1b9", "sighting_of_ref": "indicator--cd8378e1-f0b6-4897-aded-e46e649623ec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225aece0-0b70-49f7-9a19-a50dd522ff16", "sighting_of_ref": "indicator--a520a2d5-6513-42d3-b7c5-bbc9daebeb50", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d483fd54-6ab3-475b-bc72-9cdab3d2a986", "sighting_of_ref": "indicator--04b16aa5-6945-4242-afd5-1c6482df2578", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a88f7a-318a-4474-bf31-d7ebfae692e6", "sighting_of_ref": "indicator--7847f63a-7e95-4201-a74a-9d51b3708591", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f828e48-67fa-486b-99b0-665644c81823", "sighting_of_ref": "indicator--104b5095-ab69-4038-aa34-463935d30742", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c24490a-04f6-4746-87f0-272daa1cbf61", "sighting_of_ref": "indicator--831dfa37-3677-4e36-80f2-c3f438c1518c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b35fda1a-8e3b-47cd-bd5e-25140e9c32ea", "sighting_of_ref": "indicator--f3ce6233-2ccb-4989-9aec-811c8d82bcb3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e03248f-86c4-4a0b-a84f-240fecaf0efe", "sighting_of_ref": "indicator--d1f25061-594d-4a0c-9954-2c6c62bc9546", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9720b78b-b366-4a25-a0ec-f3f776eb783c", "sighting_of_ref": "indicator--51e1451d-d82c-40ae-a02d-d132881f123f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ecc1ede-c3c1-484c-bff9-a3397ce50d32", "sighting_of_ref": "indicator--52cc8b86-0d95-4cd4-814c-5905c7729059", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62fa934e-ceb5-4949-a747-ee3f3d82192c", "sighting_of_ref": "indicator--497c668e-79a9-4f8e-b037-fbe80b4eb2d2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98256338-6b21-4a65-a3cf-2f0ef3ca2a79", "sighting_of_ref": "indicator--ea2b9df6-66a7-4f65-9636-6ec88d628950", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791f0089-0f23-43c5-99cb-6b4a5dbb0428", "sighting_of_ref": "indicator--4f205b28-2a58-4007-9051-507f0e2f22e8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b24cdf0-1399-4974-b87f-798a6e875b60", "sighting_of_ref": "indicator--3b32d2a1-591a-4563-904a-4592ad58eb35", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c77aa032-efdb-43d5-922f-97dad04c82fe", "sighting_of_ref": "indicator--68524d6f-4a1a-4602-b57f-12ad2a863ce6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e580bc8a-cad7-4f91-ad7f-b432935ee360", "sighting_of_ref": "indicator--359c05f7-728b-45a7-aa93-f8dc464206d8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ca0d6c-b3d9-4ebd-849b-776107485fd6", "sighting_of_ref": "indicator--a54ec536-8a42-46f9-a64a-cc8767b2c0ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d82535-cf13-4f10-9e7d-ee48904a0946", "sighting_of_ref": "indicator--772a271c-2075-4130-8f8d-59d0fc6b1f21", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be9af69-553a-41e0-9810-06d5020b6ffb", "sighting_of_ref": "indicator--4196d362-ba82-4c46-99f3-3e90ebd08ef5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e36b09-33a6-4387-badf-0c7853fcf752", "sighting_of_ref": "indicator--1ba653a8-f87d-4e3f-899c-4c41f459b923", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d33c55-a8bb-4950-984e-d1a7e21dc5ac", "sighting_of_ref": "indicator--129cdd81-9658-44cf-ad56-7c770009b15e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b88104c-3918-493d-a559-9408be383764", "sighting_of_ref": "indicator--c6fdd219-a863-472a-be34-1f7ae6cb551d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3ab395-42bd-4ee7-908c-6cfedb29f2db", "sighting_of_ref": "indicator--f045751d-85f2-4dab-aff2-54382dfab116", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edcf58bb-8d1f-4aa3-be40-e544258a5443", "sighting_of_ref": "indicator--36242286-d722-40db-9ccb-75bd288f1dfc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369afb91-73ad-443b-a03b-acd93f28d77f", "sighting_of_ref": "indicator--30414293-29ad-44c6-bc1d-0a25aef5a552", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eff68e7-0028-4500-8a0e-6a1094b5625e", "sighting_of_ref": "indicator--f20c06c4-beaa-48dc-90d0-b43967ca62ee", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6772737f-3440-41bb-8de2-3b37bae13ed2", "sighting_of_ref": "indicator--60d84fd0-9c54-4287-ad44-81bf70c909e5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad7479d-9796-4792-8e0b-a882158c3117", "sighting_of_ref": "indicator--063e70a7-55e9-4dab-aa20-be97f3385887", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1830b752-f074-4f6c-9562-c0e2aac2bd97", "sighting_of_ref": "indicator--0e269ff3-560f-42cc-8e86-91be60c892af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2c296f-7069-44fa-8c3c-41824e40b7d7", "sighting_of_ref": "indicator--1d07130e-6df4-4a73-b378-7cabe1bf8fbc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c08b3d6-01e0-4fdc-b73a-96d8b667b864", "sighting_of_ref": "indicator--a929508b-5212-49b2-99f1-553f33501334", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14851ce5-0a3a-4718-a92d-76783913957f", "sighting_of_ref": "indicator--94a96195-ab25-4642-aca5-0cf34739e7ad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dcbef3b-0ecc-4e16-84cc-c70ac4feb49d", "sighting_of_ref": "indicator--ff125b19-2ce5-4486-8540-f72b3a11ab19", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aceea348-0ee6-4f1d-94d4-6814ad32fda0", "sighting_of_ref": "indicator--8dad3be6-a479-45fe-90fe-56dcb5caa622", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3733c6e1-e443-4c4c-aac5-8c6a5d687d7d", "sighting_of_ref": "indicator--fd73fa9b-a3d6-4918-9232-1adba62fe504", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc1d7dd-98fb-4999-bc67-f3ede2e9524b", "sighting_of_ref": "indicator--f7391d04-c067-444f-84b8-223efe02efef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49739730-fc0d-45de-87cb-f47304ce7d75", "sighting_of_ref": "indicator--d27417ff-4f33-4f9b-9d95-5b362d1164de", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb404777-f0ed-413f-b71f-62cb32af9dcd", "sighting_of_ref": "indicator--643d4264-fd59-4f69-8228-cb988cdb18a7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5938eca-06df-47ec-8ac4-3810ddf4af74", "sighting_of_ref": "indicator--6e32ed23-f492-40d9-947c-c4b5426e7889", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cbb314c-c942-4540-a013-5bc05b47c014", "sighting_of_ref": "indicator--0ef7280b-a82e-4039-9a4c-c4ac247b7b8e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a63855-4402-4924-a468-8773933499a0", "sighting_of_ref": "indicator--8fe50fe4-a51e-46d7-9b33-6c669385cf51", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2bd3905-7c20-4eb1-bf84-0c5d62b1970b", "sighting_of_ref": "indicator--fc8d0bcb-2e4f-40e1-9f21-45dfdb04f8ba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cade066-b577-4aa5-b6d9-d8e82985be3e", "sighting_of_ref": "indicator--88b99703-fc2c-4386-abaf-f2f3c4d9e3f2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46484c9e-5fd5-4739-bafb-3b3133e8ad08", "sighting_of_ref": "indicator--06ffc632-6d2d-44c2-9358-278b89ec93dc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba06ffaf-a50c-48a5-aa01-2166e148e54a", "sighting_of_ref": "indicator--54074380-05dc-4642-922d-375e3373a8a9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d3a92f0-3ca8-4f22-873f-0a5208636aa7", "sighting_of_ref": "indicator--0a252413-ec57-4d4b-89db-7051d49ffde9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd2aabd-0604-40d0-ac8f-365d911aa529", "sighting_of_ref": "indicator--0abf2e5e-7edf-4794-8924-5abc2f2b2477", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c19fbcb-161b-4cdb-98c6-b1b2023a40ed", "sighting_of_ref": "indicator--c2b14b41-e17e-4302-9b7b-8d36ffde062c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5721ce77-a893-41f6-92ee-6b428e17dcae", "sighting_of_ref": "indicator--5072b290-2192-4011-8b97-58f2e07914cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7ca334-ff0b-4de8-9552-aadc8fea1533", "sighting_of_ref": "indicator--65511ef8-eff2-49f0-a346-3efac1e0f454", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e2d441-48c0-41be-b1f8-974cf3800093", "sighting_of_ref": "indicator--7b694e49-a447-46c7-bcca-abfe4b474785", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f6c453-8198-4ceb-bc28-99a5763acfc5", "sighting_of_ref": "indicator--3f2fd24b-dde6-476a-9773-3d50236bfde5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df201dc-f717-481f-8572-8ed799ba3ab9", "sighting_of_ref": "indicator--c221f12f-f2fe-40e5-a712-197f4fa73e46", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a83c979-75d2-4e26-8d2b-11a6e056417a", "sighting_of_ref": "indicator--d5c9c0d9-1e04-489b-8644-08306f5e78f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c29ada2-80e7-4100-9b84-08d50107142c", "sighting_of_ref": "indicator--4d4b8fb3-a277-4868-9563-a74cb276df71", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1859973-0f53-427c-8106-8431ad8a5f66", "sighting_of_ref": "indicator--28bf9fa4-76dc-4989-a87f-6e276f116505", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38017076-1e04-4726-8c81-34fa8040fd3f", "sighting_of_ref": "indicator--0fedcdfe-95f2-41af-97f2-5be8c5936010", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a41d249-62f2-4575-a6d4-ed6a1fc7fa73", "sighting_of_ref": "indicator--a157a5b5-6efa-47f1-941a-9c0c9b50a47d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aedf2930-d6a5-411a-b43c-2e46cdc367bd", "sighting_of_ref": "indicator--46144d19-8fdd-42bc-a884-191a1a15a8e3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a170ef8e-4ac0-41ce-9067-bc312cd0f012", "sighting_of_ref": "indicator--031d3650-3137-46eb-b57c-a0e78033ff84", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bffc51a-a0ed-4244-baf6-d2a55751df21", "sighting_of_ref": "indicator--7a16d360-7521-49b7-b4ef-bb6bfb2fa37f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9639e7c9-44a1-423b-a549-1c493420ba1d", "sighting_of_ref": "indicator--93d5f7f9-8b57-4f31-86ce-91565f3575fb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f86fe3-f9ff-4ec2-8e04-45644dc6547a", "sighting_of_ref": "indicator--ed84474c-8a94-480e-884b-4a3df5a92ec7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba5a814c-03db-4569-98f9-99a4abb00edd", "sighting_of_ref": "indicator--a2cc923c-2f70-4f5d-b30f-15251ecaed6e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6366929-99a6-4510-83e2-6d097d2c1b23", "sighting_of_ref": "indicator--292f8759-934b-424a-872b-845dc41b0d4b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944064e2-2a7a-470a-b6fd-8186e2d92cb6", "sighting_of_ref": "indicator--ddf28e2d-20a6-4000-83c9-791724a2345d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9e072d-27c0-4902-ab6f-ad04b1b7f6aa", "sighting_of_ref": "indicator--f48725c5-bbe8-467f-9a38-76053f3d9203", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57885b5e-c8de-46f1-a2ef-00337e0607a0", "sighting_of_ref": "indicator--d0d60802-ce55-47c6-b239-68b01e9fd2e6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a4b44f-b2e0-42c3-bade-7817de98adee", "sighting_of_ref": "indicator--3c2d5c75-bd74-4f59-9aee-f650beffb922", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e966dba5-6abb-4730-89e0-9b98d3464634", "sighting_of_ref": "indicator--fb7ab5fb-41af-4162-b1c8-a961c5a0937e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf48310-0e13-4da2-b70d-bfc4993bc546", "sighting_of_ref": "indicator--61c70ae7-998b-460b-93cc-2b833b74f5b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ecc4ac-f828-495d-b183-4cc1a9ace362", "sighting_of_ref": "indicator--3b972759-bb6f-4df4-96b0-7ce8cc63205b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8cedb87-6679-4c4e-8fcc-ddd3543c1713", "sighting_of_ref": "indicator--222d8673-ac7c-4f96-b448-df3cf7e97484", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c05155-a7b3-47f0-aa26-cb156f9dab1a", "sighting_of_ref": "indicator--880deaf6-ad98-4339-8d44-53b542b9f2d4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79397f0d-c359-4cc3-885a-80ef103c3e49", "sighting_of_ref": "indicator--86f105db-fa6a-48fa-9662-33e917749c60", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a294695a-2e65-4b9e-9fc3-b2fa48520def", "sighting_of_ref": "indicator--4da97ba1-9162-4bc0-8149-983f447a477e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbb73c8-99ed-4259-b3d9-aaf9ed5966fb", "sighting_of_ref": "indicator--e4237f60-9a52-4a86-a87c-5afffcfa6119", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d16b25-542f-4f85-9cf3-53e1bef8a150", "sighting_of_ref": "indicator--a8eed633-e44f-4f7c-9eea-2d4d5892a11e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575a7d35-5c91-4ea4-8d29-1a1151a32a6d", "sighting_of_ref": "indicator--b4d96e02-3e95-448d-8bc7-1ecf68181752", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25781b1a-be3d-43c7-9aab-585c8039a157", "sighting_of_ref": "indicator--d1335401-7351-48dd-9dca-9a50f1c90b23", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd7b63b5-0935-4ed2-ace7-c501d540af8e", "sighting_of_ref": "indicator--08141c54-2e0a-4e19-9215-f9c7edb162b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363e95be-c46e-4fb5-8b76-da6ef74ced5e", "sighting_of_ref": "indicator--2166963e-01c0-4f11-ad1a-c3cc6870b7fc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b79d397-5167-46d2-99e4-c7ea2690f228", "sighting_of_ref": "indicator--5ef2d2f2-f059-4375-b08d-9a7f223ba2bc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5893895d-b6b3-4a22-994d-e896f2ece7c0", "sighting_of_ref": "indicator--5301093c-02d0-45bb-9cd4-45feda46d574", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19fd03e-27b9-4d72-adbc-d72e905c3d4c", "sighting_of_ref": "indicator--e8d76f09-321f-412a-b228-75c37d619888", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4803162d-5186-47e4-b56c-a273d41c4fc1", "sighting_of_ref": "indicator--21b74853-42de-4ee1-a887-ff28b7195234", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4986858b-785b-4505-872b-3106c48a8c61", "sighting_of_ref": "indicator--8916d1da-3698-4c83-bf0c-291c70d5c864", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e8b99c-bb7b-42a8-bbcb-e94804ce5bac", "sighting_of_ref": "indicator--c6e785ad-cb73-441d-97f8-56dc129a261a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef5231e-c07a-4333-a35d-d9f93ef5c054", "sighting_of_ref": "indicator--7896ae20-c115-46be-b070-4ebb864176b9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4521af-5983-4317-853b-b70703a1d17f", "sighting_of_ref": "indicator--94ad7bdc-ed75-416c-88be-dfb6f57590f9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a61ce02-362f-4109-b42c-09e2b8057c38", "sighting_of_ref": "indicator--007cb8f4-4655-44c1-9255-e313ea48c228", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01392e3-fbd7-48af-8dc8-b66f7d3c177f", "sighting_of_ref": "indicator--5b160d72-83f6-4f77-bea8-715a63c7e3cd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30c1892-0832-4626-af29-9dd57cb46763", "sighting_of_ref": "indicator--cd2e288d-af05-4ae0-9e19-1afb43584fbc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a504d6-5494-4bf5-a9c5-dd9102d58b3c", "sighting_of_ref": "indicator--09a31f3e-cda5-4fbb-ab39-54094840780e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2e0be0-e862-453e-bdaf-d632c8883904", "sighting_of_ref": "indicator--416d7e2f-f884-4d37-ba0b-30ca1f218a2b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a2b503d-3797-4e74-86ca-cc287ba89b91", "sighting_of_ref": "indicator--aca0f130-8287-4a24-9d52-f19df79f9a41", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634f8480-8140-4cd4-874b-0dc53a180e1e", "sighting_of_ref": "indicator--0e805950-c3f3-4287-805e-b47d40e9e2c3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2067f173-8c92-401a-83a9-bd502964a27e", "sighting_of_ref": "indicator--2872fa11-c89c-4660-a3e3-9822ef4a2b7c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64eb87b3-961d-4e05-b206-66807bb548d0", "sighting_of_ref": "indicator--b0fb853f-ae86-4a56-940d-e18e4002375c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d56c499-323c-47cc-aae3-daffc27642c4", "sighting_of_ref": "indicator--47c6f79d-5528-4197-9ed7-9f9aa9670772", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc407f9e-726a-46d0-a025-a2b7d4fc2576", "sighting_of_ref": "indicator--10661293-ee90-42b7-8401-3ea15663acfd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcde7a2f-9061-4b24-9aed-85c139363db4", "sighting_of_ref": "indicator--46592e6f-a5bc-4a05-aa30-882bacb4353f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18624782-5510-48f4-8c85-ccb8ae3fda89", "sighting_of_ref": "indicator--ce618b68-74a5-4347-9f2d-d89eef6381b6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b2161b-3f49-4cba-bcb6-30673788e9f1", "sighting_of_ref": "indicator--74ac95c5-bc2e-4e59-b7ba-7f5114382f0c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71a6235-bec1-4f17-a040-0ec097c7e4df", "sighting_of_ref": "indicator--d5be1638-dc6c-40e5-9b4b-eba9a5dcddbe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24ae5e2-9ad6-48f0-8bd1-99eac02b5956", "sighting_of_ref": "indicator--e116be24-8e71-43a5-8973-15a1588845f0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69952f8a-94e6-4769-a7b4-b964eaf904cf", "sighting_of_ref": "indicator--7d6e59e7-844a-4cbb-89da-4085293b42d4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cfff14d-89f5-49fb-8f91-8a76b1377c83", "sighting_of_ref": "indicator--62110594-fd7e-4808-b39a-cbcb57da06ca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e5690d-34cc-4e03-a393-6faafe0fb9a0", "sighting_of_ref": "indicator--889c71a2-cfb5-41e5-96d8-ba4d3f26b5c9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0667459b-07e7-47c0-87a3-c4743a318321", "sighting_of_ref": "indicator--15313bf6-ce8d-4367-a99d-95e84073e8d5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a02d8bc-14da-453c-950a-871e2fdc6b31", "sighting_of_ref": "indicator--06910e74-60b1-4041-84ca-4996e93830f5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6a81e8-dfc1-458d-afcd-f002e3ad90a1", "sighting_of_ref": "indicator--5a18a759-5672-4ff9-b397-d4fe0ff96573", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a242d539-5482-489d-9b0b-3079ef46f4f3", "sighting_of_ref": "indicator--762acaff-18af-4353-abfe-1315414c1322", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f988cb5-3dd8-4e14-a12d-14c0e59b968a", "sighting_of_ref": "indicator--94f35b50-a532-4108-a64f-841e528718ec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a811dab-2de3-4e10-8b5b-4d9a71a2c682", "sighting_of_ref": "indicator--c8c30f9d-93da-4f16-9e18-1c9e3b416317", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e5c925-9afb-4952-8088-fdfe55aa9b69", "sighting_of_ref": "indicator--b85493fc-d906-408d-99a1-0171c82ffdb8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3791f02-1a1a-4709-93bb-77088085217e", "sighting_of_ref": "indicator--c25fe55f-42f4-4d32-8f72-530a0537abca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc023c2f-2adb-4ea5-b20a-fe92e24f7c09", "sighting_of_ref": "indicator--6bd21742-8736-4306-b974-ce9cf48bfb9a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d36acbf-d101-4455-b26d-4a2b4b938ffc", "sighting_of_ref": "indicator--3092cd82-6901-47e0-bb5c-691c7a2e6b0c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc857f13-7392-4793-9823-7a76f03e82a8", "sighting_of_ref": "indicator--bd88bf3a-f67e-4d39-90d8-fd5da6567ab6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc06c7d1-6967-4e81-b6bb-9aab449f8f00", "sighting_of_ref": "indicator--76aae480-1c03-41f9-b866-b6fc19a70883", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3952846-b48f-4a6a-86d4-171302d52a84", "sighting_of_ref": "indicator--c0d2b3aa-0c17-4485-96ae-f1cd793efc88", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862940c4-9aed-4b85-bfcf-2f66a6383258", "sighting_of_ref": "indicator--89f4f348-130a-4c03-a883-3633db7a8cb8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a82c97e-f967-4871-b2eb-4ba5f60a79fa", "sighting_of_ref": "indicator--9336ee36-ff95-46bc-996c-03920d1c03f9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e1e1c36-5bb7-47a4-b5c1-527e40b98bac", "sighting_of_ref": "indicator--dcf8e3a4-03c3-4b3b-a98f-4ce7b3678f33", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b32fa12f-276c-4b2a-87e8-d250e91c10cb", "sighting_of_ref": "indicator--c5e6cdba-c062-4c7b-a10b-1e19d88654e0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--740493fe-55bd-443a-9132-2f240518bf98", "sighting_of_ref": "indicator--162f8a5e-e5b1-42fe-a16b-f824ac496973", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b50670c-0bf2-409e-bedc-4ec487582755", "sighting_of_ref": "indicator--1815a100-0825-404d-9063-2c1bf0d704d4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525a0c08-5920-4fef-a290-4e9c2396425f", "sighting_of_ref": "indicator--0684d852-52ac-4927-8485-43c5c10787e5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2484279-8999-4b96-b2d8-8b4c9cbd82b1", "sighting_of_ref": "indicator--ddbe121c-a611-4cf3-b0c0-9f3b61ce02f6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ca8902-0ecb-4928-882f-a4fda7fd6829", "sighting_of_ref": "indicator--81f172b6-0635-42d8-a9fb-ee3133f840ef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--096d4c0a-b7a4-46e3-95ec-a775ae793b19", "sighting_of_ref": "indicator--5868f911-6dba-45e7-afac-da4905242c8d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b532b741-0f9e-49f8-93fd-f3b301a65dab", "sighting_of_ref": "indicator--21ca29f4-89a6-40ee-8d20-3779e494b8fa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2fb4103-db0d-4e70-9919-b24586d25011", "sighting_of_ref": "indicator--41e6bad7-edde-4b4c-ae8d-15d9dbe382ac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c68e98-8d26-4c30-958e-d8bb1d929993", "sighting_of_ref": "indicator--165ada39-7d3e-4db9-9b05-6b5fcc19c42a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63056c8e-81af-4ce3-9db9-61740ce584de", "sighting_of_ref": "indicator--d6826674-776e-43db-a80c-d7a0d08f827b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed3b80f-a54b-4526-9c84-72ca694c148a", "sighting_of_ref": "indicator--520e9f85-6296-4f2b-a570-ddaa55e5b2f3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f18e4743-a7c3-4d3c-bcc8-77cde04d7fed", "sighting_of_ref": "indicator--3cc1cc03-8e64-444a-bac2-7c35493c0e7b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928f51fe-3298-4107-8960-932c9de2c40c", "sighting_of_ref": "indicator--238f2c5c-438c-4102-a1ff-3da07ef7711b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9b5e61-05d5-46fa-8a3b-cf7d5448e4c4", "sighting_of_ref": "indicator--ea08003f-a00b-421c-8d2a-56fb8f7e2342", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2169ea2b-003a-49dd-a7e3-deefacf2e7a7", "sighting_of_ref": "indicator--0ee24686-20dd-4b70-a444-951bd64f297e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5064cd1d-c5dc-47e3-bb0f-0cabe789250e", "sighting_of_ref": "indicator--5ed9ea68-7067-46b6-8377-2ec9389eceb9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c2f502-39bf-4be5-af29-4159c6cb24f1", "sighting_of_ref": "indicator--6a456071-63d4-4de9-b5b6-a599685d709a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff93b600-b20c-481a-8e2b-2ea0c78647c2", "sighting_of_ref": "indicator--d82c7026-ffc1-4a09-a036-009a01affd8b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66fc9d93-0f11-457b-af73-0f7c2d0332f3", "sighting_of_ref": "indicator--39105029-94f4-4e01-92c0-8d25f22a0249", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016701e9-d44f-4ba4-af4c-104260aabf00", "sighting_of_ref": "indicator--3f1ae724-7b8f-4ed6-b1ae-3caaae4e892d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7420cb1-8e0f-4689-8d35-2980463c377e", "sighting_of_ref": "indicator--fd3c16e4-e873-4449-8465-1ae6636baa83", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0612019b-1b4a-4bf1-9e86-1cb65f8802ba", "sighting_of_ref": "indicator--6aacc7f5-b2a4-4b7e-a156-e862bd123043", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebcea098-07af-4bf3-b38b-7da0e0598d77", "sighting_of_ref": "indicator--faec48c8-0920-45c0-8d9d-8afc375e159e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44649a17-0743-4828-a690-1f704c514944", "sighting_of_ref": "indicator--5f0922fc-0708-4df7-842b-733f4eb1fd71", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5744fe7-0018-446e-b5cd-8a5a52284d05", "sighting_of_ref": "indicator--f26aefc4-2238-4b07-ac90-b4488bfba389", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12241c1e-6b76-4fc9-a91b-2dff1872a5d0", "sighting_of_ref": "indicator--616d67ec-5075-4141-86a3-b49703dd57e3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3c02bb-6a5c-4864-9da2-b95ef0482de7", "sighting_of_ref": "indicator--7e7349f4-df5e-40b5-a824-7808e1a24b7e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f60bd8d-ca02-4bf1-af36-9fe3732cf837", "sighting_of_ref": "indicator--c17f4048-9126-4ab2-9551-5f096e91d441", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c311e3fc-67b2-4d50-9508-848bd5f4b813", "sighting_of_ref": "indicator--4f0f6fd0-5dc5-4001-b5fe-469fef82d3a2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a4dc18-5d4e-479f-9b5c-8f6e0fc50b4f", "sighting_of_ref": "indicator--00df5805-f576-4ee6-b6d7-f250dd16d40e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b561fd0f-9a2b-423a-a0ac-a7999fe1d41b", "sighting_of_ref": "indicator--0c07a31f-0c48-4f25-ab46-225d020b1d2f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb9dbd55-2fe5-4947-b060-1b93e2fa01bf", "sighting_of_ref": "indicator--7a8bd004-137f-4765-adde-6da70eebbc14", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec0b2d5-f4c4-424b-a5af-df68b7e7df23", "sighting_of_ref": "indicator--57605418-d08a-4a5b-913c-581f45e24c1c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50fc27fd-306a-4f3b-a9c3-3769a5e1f118", "sighting_of_ref": "indicator--2b277526-6040-4cfd-abf1-70e6e7a7c9c9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431450f5-dbf5-49b3-b34b-f0f83946216f", "sighting_of_ref": "indicator--56a49c33-d49a-4e68-83a4-3ded719bce46", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc45f37-7df3-44a7-b39d-c3557d7c4ea7", "sighting_of_ref": "indicator--8256ec09-c735-4307-aa4b-151371c8a282", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6026cf-cb12-4df9-8c79-894eab5cb7e6", "sighting_of_ref": "indicator--acee23b7-2e27-437c-8c4f-708ba6b6da52", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9691f6de-5901-449b-8061-8c0405b3b6be", "sighting_of_ref": "indicator--6dc8acf2-6138-4d40-bc7a-a2fb7f4c3e0e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8013d4f-986d-44a8-9ba3-19c1c7bd2965", "sighting_of_ref": "indicator--409a4a08-5509-4807-9a16-3375a0fae01e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc4001c-2540-49a1-9025-71848a8ca0c6", "sighting_of_ref": "indicator--e1bb3f72-9a88-4156-b99b-df1069063e26", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f571a8c-2465-4283-a8fa-817262473814", "sighting_of_ref": "indicator--32e21de6-04c4-4157-9bdf-d704ed2e88b6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f5026a6-c8d2-447d-880e-65675b546cf2", "sighting_of_ref": "indicator--470df288-72ee-4485-9add-82fbfaad40f1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b890a34b-36bb-43a2-ac51-8a5c5bbc75b8", "sighting_of_ref": "indicator--fc1f5983-2db4-4da1-b6be-ad0dd92f3339", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b7360e-4c95-4fdc-ae9a-61ed10454ad0", "sighting_of_ref": "indicator--9be12291-f05f-460f-965f-adfc7b94a7b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170ef782-81fa-4cff-92cf-5cc81830a053", "sighting_of_ref": "indicator--cfe1696f-7c60-4b73-baad-18aca72a6618", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8833bd2b-ce38-48b2-bdac-3d469857f829", "sighting_of_ref": "indicator--6d70921d-0624-4b70-9100-ddf2d946a091", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d2a08b-1cf7-4d85-bfa4-9a4bc171526f", "sighting_of_ref": "indicator--05c33218-cb59-4fac-a9ab-b38ce713d09c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e399513-f7be-48bc-9138-ed0621d671cf", "sighting_of_ref": "indicator--3bb1459d-0cdb-45fa-88ba-942713a14dba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccba1ed8-b2fd-45da-bb88-8f3d66793146", "sighting_of_ref": "indicator--e58233ed-6276-4f63-b830-be1b52de060a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e0a455-395b-4e0d-ba78-158ca330a253", "sighting_of_ref": "indicator--757c04f2-a57e-4977-8561-f3ef820a5b3f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d10507ae-bec9-4d94-978d-d70cb8e869d9", "sighting_of_ref": "indicator--3c4f7fba-08ba-457c-a492-0db3069f1515", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd34984-e4db-4736-ac36-7a4c466b7b19", "sighting_of_ref": "indicator--a56b7189-e861-4e59-8411-e4315aa8db3e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043c3440-fdac-40a8-8da4-5ea6213faa3d", "sighting_of_ref": "indicator--3568aaf6-b192-42ed-b4dd-27fef1c22faf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53686d38-cd55-40d1-adb0-9bba4f649d54", "sighting_of_ref": "indicator--ed445e81-5b18-4890-b515-9aa1ceebd190", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ab5498-7885-4182-9e27-e148c8fe176d", "sighting_of_ref": "indicator--44161ad5-442e-4ba1-a234-f03bc90c4fad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ecb5221-653e-4c69-85bf-a823d9186b00", "sighting_of_ref": "indicator--7790b64d-d8ed-479b-b6d8-adaf145354fc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001ac001-bf76-4c14-86d4-4750d2d2dbfd", "sighting_of_ref": "indicator--d572982b-fd37-410d-a37a-e99d81bb7ad8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53fd5c4c-5a28-4426-99ea-ff022e85bc85", "sighting_of_ref": "indicator--5d5178ec-ab54-46e6-a0a8-4dbc4f482d33", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2f66e5-0ae7-45a5-aec6-ecb2ed9c4115", "sighting_of_ref": "indicator--89194c98-9cde-41df-a799-f62959fd735a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e082724c-4195-4456-a6ef-45e608d3af87", "sighting_of_ref": "indicator--4b79f105-d53d-495e-a30e-275a90277e24", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8cf730c-5626-45a0-92df-45fa8adb5777", "sighting_of_ref": "indicator--574e9c53-3f32-457b-b8a9-28c6778faea1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a015a785-4174-43c6-a65d-8b3d826e4b1c", "sighting_of_ref": "indicator--6e1ea593-348e-42f1-9db9-3e23c7dfb282", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5b67a3-3050-4810-b1a7-c091187cd07f", "sighting_of_ref": "indicator--a156eb27-a34a-48b4-af2b-931907dc67b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4267788-46ba-49c0-a743-6c94599301f7", "sighting_of_ref": "indicator--eff700a0-2fb3-4cba-a943-03e677e157b7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b342a2-81ae-4bfe-b265-16ffb2087364", "sighting_of_ref": "indicator--ca84d8f1-a427-4478-8edf-f73e9e57dd5a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f82c144-54f6-4acd-96ac-01cd6e16eeed", "sighting_of_ref": "indicator--f4c85a85-bb0c-481c-ad3d-dd47d031b01e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d00143-184d-4516-8669-d6a9dd61612d", "sighting_of_ref": "indicator--7556e972-c00a-4fa6-916b-391a8d379164", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--705184d1-af9e-4e7f-8544-556f81d3e822", "sighting_of_ref": "indicator--d14e5c6b-ac20-4794-a4eb-4277e79c2b3b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4eef3e9-38ed-4b45-a077-f67d06c4f66d", "sighting_of_ref": "indicator--9d2c7607-d147-4ede-89d7-25da86c4c86f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986b6ad2-8fa7-4e20-8278-a5e6839b64dd", "sighting_of_ref": "indicator--daae4ad2-62b0-40ca-ac7a-d43ecb8193de", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b9369f-6066-4692-9db8-539e959a80d9", "sighting_of_ref": "indicator--771a26ea-306a-42d0-8e2d-e121af6fcc3a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94972be-b359-4e91-8863-357f86ce9175", "sighting_of_ref": "indicator--0df3db92-8c87-41f3-9b88-c7ebe0f9fffc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7750cda8-37a2-45a6-805e-d83610295f3b", "sighting_of_ref": "indicator--b85da551-1bc7-4ad6-b609-bbf8362be3ce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e085590-a979-401d-a565-dd1f8bf14acb", "sighting_of_ref": "indicator--146c11ca-3259-48c8-bf82-b9c66704cb4d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fcb8a9-86b9-41b3-b7b5-33b0d04c3933", "sighting_of_ref": "indicator--288ad076-9050-4f91-9841-9c340ac66575", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ad4b3f-8d45-4ab4-bf5e-12c93f99af36", "sighting_of_ref": "indicator--9d3507db-b4c4-4ccf-8aa2-8e215e551f40", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e562afe4-2a44-4b0a-ac0e-cbd2749a035f", "sighting_of_ref": "indicator--4fc9a849-9c37-472d-9b81-6127b3596412", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786e0268-412c-43e2-985c-e451c5f5d3a8", "sighting_of_ref": "indicator--81e5d4f8-e704-4e58-b92f-69ddd35a58a5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8388e51c-2f05-40c6-b39b-5561898f31ce", "sighting_of_ref": "indicator--bceb8ebb-06a7-4643-923b-9d1a7d6772ca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97c7a54-3223-4a11-8b8c-9c579a540d12", "sighting_of_ref": "indicator--4a1113cc-3aec-4dd3-9bd7-5270163ae8e3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950138d6-e285-44a0-96f5-3fb3a92231b1", "sighting_of_ref": "indicator--ec2572f8-a60a-45cf-97b9-8490a9056d05", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b700f5-c195-4ff5-a1de-858e23058d93", "sighting_of_ref": "indicator--deda0708-a81e-4d02-94ec-f9985a03f5c3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70dedf34-69e9-45ef-93d5-44b5e2f22803", "sighting_of_ref": "indicator--6911afc7-5995-47f1-a905-4b709fd0de45", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe63546-446a-4779-a50f-26ccf1212635", "sighting_of_ref": "indicator--5fbbc791-2b63-419f-8936-0997c08bd0a9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f801bf07-4299-458e-b07c-bc28da27c616", "sighting_of_ref": "indicator--21a895d1-012a-4208-aaf7-f973ba51dc07", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c4c453-16a2-4b60-b845-160f5b44dd05", "sighting_of_ref": "indicator--a38ae550-98c6-409d-a69e-48685a952abb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3976288e-993f-4ed2-a5f1-00609f0494d4", "sighting_of_ref": "indicator--25222559-b5e6-4809-b61c-372baae3c690", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071c5b35-db8f-4385-9212-f663f6001624", "sighting_of_ref": "indicator--9758597a-41be-466e-8c4a-b37520ed0d05", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--029fed0c-71f3-4efd-8c85-5059f97ad6a6", "sighting_of_ref": "indicator--bd49af23-648f-4b23-8afe-eef10318c027", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a27f73-da00-46bd-8a55-8d8a176a1ec9", "sighting_of_ref": "indicator--03cb34a0-7045-4851-af1f-ec7d0ff8aed3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0aa39a1-20a7-4205-9097-b542ea1bf07d", "sighting_of_ref": "indicator--9265d6f0-6901-44a1-87a1-ab595d65c220", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a0dfe7-6fa9-45aa-bdec-44733a2eb41e", "sighting_of_ref": "indicator--693638a7-055b-4bbb-a6e8-d0bdd55947ac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6991196-b2e4-4a0a-a0d4-6517bccf3591", "sighting_of_ref": "indicator--a79307b5-d8cb-4dd6-b460-041bdd5b38f3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e95eb64-9e84-4e32-983a-bb91e966334d", "sighting_of_ref": "indicator--8071befb-b875-46ee-b5fb-afa1f4660ad9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07081393-3767-4ead-b81b-f4e2e7944cff", "sighting_of_ref": "indicator--dd4570c9-9363-4db2-a750-bd8be7bdcca8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36d6624-6e0a-481b-8685-68641146f95b", "sighting_of_ref": "indicator--4aa1e25f-0ca9-41e4-80e5-e3d5b02123e4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92205bfd-d4ef-4d16-b9fa-f029d441d2da", "sighting_of_ref": "indicator--582431dd-dcc5-45cb-b77b-6d34ed19677b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a16841a-79ec-4268-b00a-fc891e9fd7e4", "sighting_of_ref": "indicator--60e32c09-7389-417d-8fe6-b91e34dcbcc8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049a16fb-f7b6-44c8-83fd-e6d39078927f", "sighting_of_ref": "indicator--d4187081-9eaa-463f-9182-2e2df608abd8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3329b136-bfef-4cd8-b26a-1e01ceb30d89", "sighting_of_ref": "indicator--42ac10bc-af1a-40b7-8b17-1c077f972407", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae3aeb1-ba11-45d0-b6e7-49a9fc3373c6", "sighting_of_ref": "indicator--f5df49b8-9bad-4ff0-bf8a-d919c66035ec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc76dd22-0cfc-46b7-b61a-c8fe088459b6", "sighting_of_ref": "indicator--a0b8735a-fe2c-4308-9927-022661e67201", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5a9e92-39c9-4b70-9b2f-ec09b590ab04", "sighting_of_ref": "indicator--3ab8e590-b800-4164-8b93-0f7b2222a23c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f584bf81-3814-4232-ae2b-8a93d297fe95", "sighting_of_ref": "indicator--7f1390b1-e374-4c1a-a425-b1c1125cf902", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3502a0-04c8-40f6-acda-a07b8989fe22", "sighting_of_ref": "indicator--074fe66c-dd4a-48d4-8552-f85bd545accd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a64dba1-6b08-4dbd-aea6-15470895a996", "sighting_of_ref": "indicator--1c330c0e-1f9f-40cc-88e4-417ddb8e97c2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8557a8ed-9e06-4584-9f3d-c9e44ef42ec1", "sighting_of_ref": "indicator--1c6fd149-35ef-4ca7-a067-838ca1af561d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29bac65-c029-41e0-9d25-491447d329eb", "sighting_of_ref": "indicator--73928726-7eb5-433c-a2fd-6c8748938402", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450e0642-6c03-4215-b082-896d69241110", "sighting_of_ref": "indicator--d65f5476-1c69-429e-b592-6c5fba6988b8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f793ce-f1f4-4d54-8531-ab36327019f9", "sighting_of_ref": "indicator--a02cb1ab-d240-4c8e-8c4a-eaadad9f01bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d28613-e5c9-42b0-bb25-480b0cb23797", "sighting_of_ref": "indicator--695638da-9ad2-42a9-82bb-95284d6ed563", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a940c20-ec3d-44cb-a252-dad9a24731a6", "sighting_of_ref": "indicator--427d7246-3542-42b4-a74b-551e8c5cc7c8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ad66ce-f855-4bd8-9759-cdb8c1cef3ce", "sighting_of_ref": "indicator--58e04d8d-2c12-4e17-837b-1ffefaf65099", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073858ec-7446-48da-b2d1-520b4ce85e01", "sighting_of_ref": "indicator--8a55d28b-f923-4399-9a08-0136a6256888", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0768b0-db1f-4475-97c5-8b6cc1c4866b", "sighting_of_ref": "indicator--7ba67ad4-82bb-459d-b0df-a8af9a54fd62", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e39b99bb-09c7-42b9-a395-f70a352b166c", "sighting_of_ref": "indicator--b4c789f8-444b-499c-b6e0-9de237d60416", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e894890a-f05a-4cac-b661-358bc4a182bf", "sighting_of_ref": "indicator--e113284b-d309-4bbb-8aaf-d407357de8a6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92cb58e0-8193-4e97-a225-ad9ddc91d980", "sighting_of_ref": "indicator--685d8910-12cd-4fde-af80-22f5fe520cc9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd1482f-86eb-4a55-9768-c461004eb734", "sighting_of_ref": "indicator--172ae5ca-a239-4952-8834-c548f049d8fb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b15475-8ab8-4d36-8cbf-f44fc919b0e0", "sighting_of_ref": "indicator--b48d94cf-5313-4bcd-878e-a04ab9680e4a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc56e0f-0b2f-44d3-90c1-b6fec7cd4361", "sighting_of_ref": "indicator--e03fde99-0f7d-41ef-94e0-111f5a5e6feb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76dd0b56-45b0-462b-b139-a43c6c870b59", "sighting_of_ref": "indicator--c7813dd6-c9ca-4cb8-aadb-688d70d34a2e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c033fe5-179f-436b-a3cd-2f8b6a5ef364", "sighting_of_ref": "indicator--db2d8627-aeaa-43d6-ac9c-eb3070262317", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb9932a-69e6-4818-a341-85f540b75cab", "sighting_of_ref": "indicator--9f462dbf-b3af-4d82-b37b-a66e51acd180", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1d2adb-d0ec-4879-9cab-5371169c6abd", "sighting_of_ref": "indicator--be8a7fa0-6c5d-4b91-a2f2-f6bd8ead9bc0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c845ba6-f3b2-4b39-a0ba-a0891ca0afab", "sighting_of_ref": "indicator--8cfbca97-9033-4eec-9156-77978311671a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f83d96-02a5-4ed4-b73e-3d276ed53c18", "sighting_of_ref": "indicator--28faae8e-7c89-4405-8ee6-d610d680fe17", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc25642d-d995-4d33-a71c-db48c1b481d5", "sighting_of_ref": "indicator--6e7c23da-fb37-4be4-8610-601a7665a4cc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf7c9b1-4768-4d9e-bd8c-a4832c5be774", "sighting_of_ref": "indicator--ad4b497a-46d1-4207-b167-1e4c4848e239", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881c810b-1168-4d17-b3fc-5cf647747c5d", "sighting_of_ref": "indicator--21e7fe56-34e1-4975-b2ee-89f04c77195e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dcb8d58-b718-403b-b59d-154b6f7e0016", "sighting_of_ref": "indicator--3b25bc1c-fb34-4cc1-a306-f401ee4bc5eb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d24bf3f-4a75-404e-a674-45e68cd653d4", "sighting_of_ref": "indicator--31fe5c3f-519d-49d4-aabb-2470ee459ab1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96bab3b9-0311-4698-9af8-2ce4dd07aeea", "sighting_of_ref": "indicator--9241a816-1225-406a-b0b1-3edb47cf6500", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e38db48-b78a-4340-b472-5226139b1188", "sighting_of_ref": "indicator--0a13b191-d57d-4f86-9d87-09c606f3808c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3858def5-6b0c-4673-bf94-f8c2a72c85f3", "sighting_of_ref": "indicator--5f944698-4a10-4a29-819e-03f15dd90560", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43bea2e-d6ac-4a01-9028-7528006b53bc", "sighting_of_ref": "indicator--0ba6f913-5407-469b-9013-4369961d013d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ccac54b-4451-47b1-84a0-41c89bb886ad", "sighting_of_ref": "indicator--a3054282-0d0a-4ec2-98b8-f0177df0690c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb34d35d-2773-497d-a606-776b6b698118", "sighting_of_ref": "indicator--6206a3fd-b5f1-4449-8208-422a79996005", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e2c6be-2f98-49f7-bf74-57188fd21b3d", "sighting_of_ref": "indicator--1ec9112f-fb61-4b21-9801-1fc2ac9cb4cb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2f989d-d4f6-4edb-8d94-dc69d77bf561", "sighting_of_ref": "indicator--db44c089-9d48-45dd-8a9d-fa157a8fff55", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb55493-50b5-4f11-b948-d5239ac466b1", "sighting_of_ref": "indicator--f3e3ad19-c150-444b-a92d-4e2f3e4e27c0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3800b14d-9bcb-4b0e-a02e-f2a44c2f3493", "sighting_of_ref": "indicator--ad410c84-3e90-4013-87dc-7464771ac260", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3698d9-a46f-437c-8632-be14df6cc9f8", "sighting_of_ref": "indicator--a6d4d224-49b7-474a-b6fe-430adeeb10d5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e0742a-9fdd-4a2a-b7e9-85a1d1cdab6f", "sighting_of_ref": "indicator--70988cb3-df20-4d82-87a9-3abf57fccce2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad89163d-bd3a-44e0-bda7-1357b2c5789f", "sighting_of_ref": "indicator--1bf56ceb-e8ad-47bd-a585-6c2025a57cc1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db994d4-ca4d-4bfe-ae2f-0e338c536c31", "sighting_of_ref": "indicator--82eb7a35-bfb9-4dbb-a376-08e90606df18", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d878d8-8821-42f7-8792-9ea687256f3a", "sighting_of_ref": "indicator--ceda5572-468c-48fe-bddb-3068c9bd755a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0fcf7b-4ff3-4ebd-aaf7-004fa9aebd69", "sighting_of_ref": "indicator--321ddbeb-9af6-4bee-8f7a-1a930a4e8dde", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf6a52a-cafe-438c-aa31-8dae16fe2a97", "sighting_of_ref": "indicator--200e252d-b17d-4805-9606-cef9b182b529", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ed78b0-e3d2-4029-91d0-c07962f84a06", "sighting_of_ref": "indicator--a32d68cc-2e99-4b93-a6cd-82bd4c79906a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972925d0-11d4-41ef-8288-3d3694378c81", "sighting_of_ref": "indicator--2eb5acb7-4d56-492b-9edc-0f5c5f1e2fe7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318836fb-607a-43fb-9b84-edf39da29552", "sighting_of_ref": "indicator--322167e7-de55-49d9-bc04-4b0d5fc86ee8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d27586f3-2a57-4635-8ee5-9e4e4ec11b9f", "sighting_of_ref": "indicator--6329294c-e98f-4f4e-bf62-0e3df1c397c5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9884d4-eaac-4f93-9a20-e79cab4e7077", "sighting_of_ref": "indicator--8af7a7d1-7f15-4ec4-8b88-e588a13153cc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12941b10-0aa8-4650-aa7d-1f6134878922", "sighting_of_ref": "indicator--756cbbea-6ce7-4296-9559-8d66103b6795", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a280ecb-b556-4e55-b7d5-bbe5836e370f", "sighting_of_ref": "indicator--2d66a45a-bf28-4c29-8156-f3bb23d2d203", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae84dd5-7808-44bd-b5f4-a94e61a66176", "sighting_of_ref": "indicator--ea63da12-40e6-475b-ab14-6162f7810f78", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f508126c-ac60-4708-8365-7166f082e985", "sighting_of_ref": "indicator--20f61976-bba2-4060-bfdf-ee28576468c8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ce04b3-cda3-4626-9658-a0dc960b8e40", "sighting_of_ref": "indicator--7b7ada7d-b74f-4039-88e2-d5485478adb1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a288dd96-2362-4918-9987-4b3c90a4f91e", "sighting_of_ref": "indicator--650da00c-0086-45d1-b34d-70cd0876e661", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed61511-94f0-452f-b45f-3de2ceb274e6", "sighting_of_ref": "indicator--6ff191df-f1b9-409d-90d1-c0d3de8b5c11", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d8594a4-0628-4da6-a31f-13ccc2082219", "sighting_of_ref": "indicator--7e968715-a0fc-406f-a082-01dfa90daa7f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b173d4-7040-40b2-920f-3cbe3faa133e", "sighting_of_ref": "indicator--b8cc67c4-1f59-4991-addc-3179c161cbb4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41583e2-bd9a-4d01-a895-1b26448260d5", "sighting_of_ref": "indicator--93fb9027-cb8c-40c4-99f2-e2a8d1da18da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--136dbf93-1dfe-4b18-a683-c81e41f516b4", "sighting_of_ref": "indicator--66ba9a9d-3604-4ada-a8e5-9ab97d032a25", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61bf73c0-6260-411a-86df-726880728883", "sighting_of_ref": "indicator--38d55ec6-293e-42c7-b5f5-f3c1b05af7df", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78569a1f-edf9-4072-8a0f-cc082946aa32", "sighting_of_ref": "indicator--3840996c-ffc7-463e-b5a0-c751567a791e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c8fd9cf-2af4-4d16-9e62-c173e31a49fb", "sighting_of_ref": "indicator--605ff15e-ab21-4711-8710-1d1f69e999ad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa82d5df-571e-4ebc-ab72-9d58396a3857", "sighting_of_ref": "indicator--e4e066db-8592-4a05-97f1-c7c443632465", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3428f0a8-2cbd-4624-b2bc-b635756e759b", "sighting_of_ref": "indicator--95013af7-37e3-4803-8ed1-83893428ffbc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd25b3e7-0b9f-4074-876d-a835916f8ff0", "sighting_of_ref": "indicator--f941554d-cc6c-42ee-b916-aa93cf18226f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c733bd5-0f9c-4f04-b468-0e0bd340f087", "sighting_of_ref": "indicator--ed9d456e-f2eb-4696-b692-33ca4f4f3020", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ce2a20-2018-41ea-8f48-19f174cdbaf4", "sighting_of_ref": "indicator--15f6dcf4-1300-41f6-a53a-41e534ec5013", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597bcea4-034a-43f7-822d-c7a3567516d9", "sighting_of_ref": "indicator--df7ce38e-5630-4cf8-a6f2-763cbae3b28a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98447bdf-0f5d-4e6b-a0b4-96fdc344ac88", "sighting_of_ref": "indicator--eac1f4cf-9153-4a13-9bfb-803e67de9f01", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4e945a-b4b5-45b2-b8ed-2c918278c719", "sighting_of_ref": "indicator--58005244-b26b-42be-b1c8-4a3737dafaec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db524c84-370f-4456-ad91-229f91f26b5b", "sighting_of_ref": "indicator--2de3dec2-7508-45d1-9a82-bfbee97f1bce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f890d7-85cf-46d0-88cc-7ecb405ab7c2", "sighting_of_ref": "indicator--d117d5bd-f68c-433e-9d0a-de961bf7d76e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--931a895e-b22d-4cfc-9b9a-b984fcd94f45", "sighting_of_ref": "indicator--15387c3d-4bcf-4798-9ac7-232806632e6e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11764be7-3ac3-4149-b6b5-34d4ac882910", "sighting_of_ref": "indicator--b2d59e45-e9c8-412d-a17a-17f9857c6c24", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f164aeeb-724f-46af-9c18-aeb2db30d4b4", "sighting_of_ref": "indicator--01fa29f4-15ec-4cd2-b84c-0b6a6f5d70fa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f252d6e8-553d-4e6d-9bd3-142d25599867", "sighting_of_ref": "indicator--6ee1f318-73f9-45c7-8307-733e7cc42216", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1278b3be-c519-40d9-89b3-1230775a2e68", "sighting_of_ref": "indicator--f38fdc91-e569-4639-8db0-2e9e4aeff37e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdce6e10-ce92-4a9d-9bad-49be7f8546e8", "sighting_of_ref": "indicator--5f914f42-c39f-4897-b4d4-43cefd4630ad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967458e9-b18c-4ef5-86a5-67e559b1a585", "sighting_of_ref": "indicator--8a27c77c-ae44-4410-aaea-b3447cd337bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225b2dee-5161-48ec-b17d-ff3145204dd3", "sighting_of_ref": "indicator--2f41cff3-7275-4e4b-b217-5825c4a4bfb0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f8321e-8606-4a04-b2b1-368fea0249c4", "sighting_of_ref": "indicator--3b7bb3b1-7180-4552-abec-ac824cf60b17", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8278d9a0-47d7-4ab9-8392-c046e5584178", "sighting_of_ref": "indicator--b4b5af16-c1af-400e-9cd0-eece3b8536e8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560a1228-c3e6-4367-bb85-80441366965c", "sighting_of_ref": "indicator--ca6d1ace-0e65-41dc-8b98-9bebd5e55776", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873f4dc1-b519-4c4f-b03f-f06d28d8cd08", "sighting_of_ref": "indicator--db4b0e34-d2ef-4eec-b837-5a29bf4ee5b6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7cb9d90-fd77-41c2-894c-52616fbb4d51", "sighting_of_ref": "indicator--62e370a2-4e08-4634-bd78-9b6335669135", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afaa9743-e355-49cf-a8f7-928a4373f83e", "sighting_of_ref": "indicator--803f5e34-eef6-40e8-b67e-ff883a9aeb5b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4288699d-bc26-451a-824e-a1dd57a17356", "sighting_of_ref": "indicator--48624dae-ea9a-4ff0-acd6-04e7813e07ec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90529b7f-c6f4-40a3-8135-e5095f968c3d", "sighting_of_ref": "indicator--1b2479a8-57b3-460e-bb62-e0ca33568740", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c98716-c91e-4ed7-832e-04f90b4f52f5", "sighting_of_ref": "indicator--e275c2fe-2ba5-486a-a673-b11ddcf3d6f1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659e6aec-43e4-4093-900c-dbb97e4821cc", "sighting_of_ref": "indicator--acd507c6-0b91-4d4f-bc57-2c3dc0909647", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a918d359-31ad-4f67-bb43-5bf223c414dc", "sighting_of_ref": "indicator--95916193-9d68-470b-a071-0fd347a52b72", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498d0a12-581b-42d8-9934-3b84e16cc095", "sighting_of_ref": "indicator--ae1180a1-1950-4f46-9c48-961787c584f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f41acd1-00ff-4677-bade-24a8dfe4fc19", "sighting_of_ref": "indicator--b7fec597-4842-4d84-a5c3-4766180a6abb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5625bc-f880-4760-89ab-cd550cc1f899", "sighting_of_ref": "indicator--cf758631-1a10-4e1d-8f15-6b673ff1fea8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c7230b-f0a3-4bc8-9007-5426311e1204", "sighting_of_ref": "indicator--3b26c7a8-9dfd-4013-86a9-28c5bc49c1a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49fc4c38-6b16-4ab1-a6b3-0ff58d576cb4", "sighting_of_ref": "indicator--e9ac86cf-c4e8-42b9-a177-0bdcafad47a9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c4a0b0-efa5-46ab-96d6-c90fe505138d", "sighting_of_ref": "indicator--354e0f1e-a089-48b6-916c-2bff504ab5ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c44901-25ed-4c88-a057-26389b9197e3", "sighting_of_ref": "indicator--e45df39e-0fd8-464a-93f6-6d4da6f6c8f1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d709012c-4214-495d-bc0d-038edffe0021", "sighting_of_ref": "indicator--09067d2e-9936-4e1c-9c7f-533a1bebfef1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80941c3c-68b9-41ed-82b6-6bf9282a99b8", "sighting_of_ref": "indicator--01c10a1d-b959-45b3-a147-aebe4ae2a70d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a5adaab-011d-4433-b468-c9eaa300f681", "sighting_of_ref": "indicator--d5455388-b5c9-468a-9cd6-281844c921bb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a6ccfa-c513-424c-a827-6ca6f484c608", "sighting_of_ref": "indicator--f7faabf7-371e-42b6-a90f-6bdd71a56a76", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc46cdad-2aca-47a6-9d73-78d87acb7bac", "sighting_of_ref": "indicator--2c225460-8675-4159-ad10-c305f3eb1641", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab323f7-db7e-47af-9fab-0efff72750ef", "sighting_of_ref": "indicator--cd3dd0f4-4a4c-4505-95f8-162baf0e9065", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a972d8d-b312-44f5-8ff8-4bf59d23f38c", "sighting_of_ref": "indicator--5fcea352-5801-44cd-bfa3-33f4b35264cc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797f5d7f-0414-48b3-a54d-b9a46db121e7", "sighting_of_ref": "indicator--d298d33b-8bda-4d20-9ab5-1386fa87f44b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4549da21-5890-4b59-8ab2-c2cb6a8792cf", "sighting_of_ref": "indicator--a6e90f0b-afae-4716-bbb4-dff17b99a2ae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1798ee8-a919-4ae6-8cbd-73f2dffef00d", "sighting_of_ref": "indicator--7b78afca-7edb-4a0b-9968-daca9f93398e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3696b723-13ab-4e12-ba77-e14b4c04f258", "sighting_of_ref": "indicator--21d00e71-0ede-4b7a-a559-b0228f9c9203", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22d4e5e-4d65-4661-8472-238b82ca9411", "sighting_of_ref": "indicator--1b006140-e744-46af-8f9d-dca22fc586c2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc74aa1-c1e3-480b-a343-f0b07c741539", "sighting_of_ref": "indicator--bda63d8f-c5fc-4217-a971-0a69333a1ca8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76154d68-552b-40ab-89f7-7c3f23f45800", "sighting_of_ref": "indicator--170d3df5-2058-49ed-b486-50274e3c679c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db3018cb-6c0b-47a8-86d2-267175b1d0b4", "sighting_of_ref": "indicator--88ae4914-2a55-4e0b-bc22-b1b3166a9a27", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb39986-ebb3-4b46-b0bf-110b6a72114e", "sighting_of_ref": "indicator--a574932e-fed2-4797-b8e5-440f03e05342", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857eb284-a40b-4022-8728-87555519cd0b", "sighting_of_ref": "indicator--d645e69b-c6ed-49ea-8fd6-e86401a34bdf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec0fc6b-54d9-47a5-87ef-265a60225e52", "sighting_of_ref": "indicator--07e9742a-2cd3-40b6-ada4-936b7dff2113", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582e3d33-12ea-4aa1-a84b-f0a86fae81cb", "sighting_of_ref": "indicator--bc83e8f8-f548-4cea-bd66-79e1746bd52d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50fd9070-7513-481e-9863-4c1d9847d499", "sighting_of_ref": "indicator--58c661a2-269b-4493-a91c-f3506e7434cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ceb1f9-cb74-4159-b3a7-933a4054376b", "sighting_of_ref": "indicator--ceb419c5-81b1-4ad2-8d0e-16b91a4b47cf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3bdc3aa-3051-4640-8719-ec585042bdb0", "sighting_of_ref": "indicator--ceb419c5-81b1-4ad2-8d0e-16b91a4b47cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3faed860-9805-4576-a94f-b2cf2062f112", "sighting_of_ref": "indicator--de21c8f1-a90f-4cc1-96ac-c69851e776a4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f4a201-3f58-42c7-abb8-ba5f471c6744", "sighting_of_ref": "indicator--e8c5265c-b429-4698-bf3d-c4a5f523dd29", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b2122a2-5856-445e-8624-63c44f17d54c", "sighting_of_ref": "indicator--a8882477-3137-4e0e-a1c2-44c7f41c2fec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2950abfd-6f27-4d54-84bb-bfd6c3140561", "sighting_of_ref": "indicator--f3adc1df-5c46-4b6a-9083-85c7a872f76e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177a2899-c590-420a-9038-a40ca7511041", "sighting_of_ref": "indicator--db972b46-15b8-47c4-9823-4b4ab4706a3a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba10253d-5a68-4d3e-9466-7370f595b27b", "sighting_of_ref": "indicator--db972b46-15b8-47c4-9823-4b4ab4706a3a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7ab907-b3a4-43b2-b6f8-18d06cc164bd", "sighting_of_ref": "indicator--21ccb2dd-8858-40c1-9d94-8a43f610e114", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45fc04a3-fae8-4279-859c-149df9d70fbb", "sighting_of_ref": "indicator--0ac12bba-ac6c-433d-95c5-bdd779891f9e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c7ba13-164e-4dc8-89a6-72c2d03c53ec", "sighting_of_ref": "indicator--d7cfb855-5854-4669-b3b8-30e3d5cf7456", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d819e8a-540c-43c2-a482-c87f86267fed", "sighting_of_ref": "indicator--b63dd20a-10ea-4413-a7c8-f9e28a4cedbe", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0093d8ff-0373-488f-93df-a1b61d6d6f1e", "sighting_of_ref": "indicator--60abfec6-5baf-4794-a1f6-5484d47c5fc0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--740008b6-5e04-4ac6-a8c0-49dac483f9fd", "sighting_of_ref": "indicator--60abfec6-5baf-4794-a1f6-5484d47c5fc0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0bd6acf-17e3-49e5-b6a6-47f7d862f857", "sighting_of_ref": "indicator--8b7160f3-813a-49b4-8e48-c8e2f817c980", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b80e48c-77d8-4dcd-83a2-2d81568cf831", "sighting_of_ref": "indicator--ab93f750-3887-4a9d-b208-32ab287958ed", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65f3b59-6726-443b-a3de-00682beb1066", "sighting_of_ref": "indicator--418fbbcc-d2cd-49fb-8c47-e51f20ca3b75", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac46152-91a5-4348-95a2-6fd5fb2305b6", "sighting_of_ref": "indicator--813436a8-d468-4b15-907c-9ce726a89247", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b17f97-37d6-4352-b009-bc0d86a66d0a", "sighting_of_ref": "indicator--6cdf8464-3bfb-4f5b-b6c3-9ba7f59a30b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d506bdf-2ded-41eb-9efe-d9fdc1fe40e1", "sighting_of_ref": "indicator--c49f47fe-90be-45f0-b9d7-8d00442d0780", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8843fdd-ba84-48a8-a47f-58fed09f5d7f", "sighting_of_ref": "indicator--e783f33e-daf8-4476-a499-8c60e4d7d0ee", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37519930-51ad-49f2-a556-6c6f0bbf28e0", "sighting_of_ref": "indicator--e155dfe2-0d54-49bc-a93c-86ee7faeac51", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6b86ee-030b-4b4b-947b-cc36b0f2a05c", "sighting_of_ref": "indicator--fde9607d-ff8b-45ba-9231-f4169441ff9a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3e0eeb-9192-479c-a824-75895aeda466", "sighting_of_ref": "indicator--30976c22-9e9a-4aab-acf5-8f4a4a48232f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e8d1e9-f5f5-439d-b45b-6495197ba6c5", "sighting_of_ref": "indicator--30976c22-9e9a-4aab-acf5-8f4a4a48232f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65696302-3fe9-4d0c-b39c-a748fb55f7b1", "sighting_of_ref": "indicator--5cf91875-da38-4978-b7b5-0256728724de", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b24bca1-26d5-49c6-8086-7f9602b501d0", "sighting_of_ref": "indicator--d14a1a01-0911-47a6-bdae-9e83068984c3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f89a331-1750-4b80-9c51-f623d34a2434", "sighting_of_ref": "indicator--9345b6d8-a5ca-4c6a-9ab4-79b57fdc3b17", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37936158-f87e-4752-b61b-1d4c498f71fe", "sighting_of_ref": "indicator--99f5199b-ede6-44e7-8d1b-ae706b510587", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4611be-9a5b-4070-b15f-5a4102ea3446", "sighting_of_ref": "indicator--64deade9-6f06-4d82-8ed3-fec29c044984", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f90ebd-ff6f-444b-9f7a-6ca080532748", "sighting_of_ref": "indicator--64deade9-6f06-4d82-8ed3-fec29c044984", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dbadeb1-e6d0-47ce-90dc-f7673d8c4144", "sighting_of_ref": "indicator--65388c23-ab0c-4df7-a260-015919bc457e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3d8dd5-3a2c-4717-8134-9fd11e52d8fd", "sighting_of_ref": "indicator--212c0f68-d7ca-460a-8f00-66c729249202", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aea25ca-cbc5-495a-a0d1-e09e2409db0a", "sighting_of_ref": "indicator--212c0f68-d7ca-460a-8f00-66c729249202", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2108cc36-ad18-4fd7-a02e-a083bbac518d", "sighting_of_ref": "indicator--b4039ff6-788a-4c09-b262-c18fb869b6b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e39d3e-e257-41c7-ba6d-f61581e7d6da", "sighting_of_ref": "indicator--81016f1b-d3b0-4574-961d-8f8088449701", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c216e9b-637e-4391-bfb5-d421f383d4fe", "sighting_of_ref": "indicator--81016f1b-d3b0-4574-961d-8f8088449701", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8e13ae-4503-4f52-8541-d664dc886e83", "sighting_of_ref": "indicator--2f851195-8a47-4b00-ad6d-00b8f20f86e5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13f64ff-d32b-4e95-a05e-bbd1a6c566df", "sighting_of_ref": "indicator--d106d126-1002-419e-af16-253afed65206", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42660073-cbca-418c-979e-7dc3eb6b7443", "sighting_of_ref": "indicator--4842c1c1-60cb-4341-b7b6-02e433eb6975", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71366ffd-0509-4bb3-9a66-f6805ab2979f", "sighting_of_ref": "indicator--f20c31bf-d34c-4ee2-bcfb-9b813d942ca3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c20319c6-adc8-4577-9208-afbf162f2c26", "sighting_of_ref": "indicator--3e685d41-61d6-4059-8119-cdeef495cbac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b5528c-5c0a-4d24-abc6-3a5b45fc7176", "sighting_of_ref": "indicator--fe27d78f-7a66-4641-84de-2088111a4e08", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a26304d-6052-4c4b-93c8-763d2bd042c7", "sighting_of_ref": "indicator--b63bb0a7-10b1-4f3b-b405-15ef19d19e48", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e5a16d-d68f-4090-aa44-2f24e7a502d7", "sighting_of_ref": "indicator--485d9460-26aa-4bf4-a114-5729dbe8d9d6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f891566-cb9a-4c0b-94dc-83675e7f2795", "sighting_of_ref": "indicator--230fb4c7-b1c9-4a5e-9a5f-91e5927973ad", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76dea59b-d2aa-4571-b7f7-8f38b744e67c", "sighting_of_ref": "indicator--79928063-3cc7-43d1-a895-be5b24ebea7a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd996ca-57ee-43d5-ad61-257972e23547", "sighting_of_ref": "indicator--97c91870-af73-4023-8718-91d63acc0284", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af26c405-516a-491f-9c69-8e1066794cf9", "sighting_of_ref": "indicator--2bcd1fed-b3f8-421d-b814-2580b1b1c476", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a8b5fe-3876-44e3-89fe-c8aee68e0479", "sighting_of_ref": "indicator--b789247f-ac9d-4bb0-b5e8-74ce92d9982e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f6e03a-eabc-4e35-b49c-073702c0c577", "sighting_of_ref": "indicator--078acbc5-a603-4a0d-97ef-59b24fea87cf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50e6800-d538-498d-92a3-867e3506bcb0", "sighting_of_ref": "indicator--b31ddd68-fd05-43be-8852-e4ee5aefd360", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dddf691e-d63f-4064-a965-dbd7cd7d50c2", "sighting_of_ref": "indicator--d23e0f3f-646c-4f9d-9afb-62a5b7ccfbb5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c945438f-9e33-4dc1-95d7-992b00a8ed23", "sighting_of_ref": "indicator--8d413d0c-370c-4c6b-b183-70a0323ed38e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6adc2c-c9ef-4c89-ba7c-92dba707a5a4", "sighting_of_ref": "indicator--bf12cc3d-9004-407e-b42d-6d2c8507469e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95978fa2-fa6e-4f10-9c07-3e2e8d0bedd0", "sighting_of_ref": "indicator--5b2b9e5d-e8ae-4cd4-b4af-116918813517", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6812e7af-44ef-45dd-ac13-c7c347215349", "sighting_of_ref": "indicator--43fd9bc7-4df9-4da3-a4d5-1d411e94b860", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c309b905-afaf-4578-94dc-4d0401dfce06", "sighting_of_ref": "indicator--45ea4a16-aebe-40b7-a8e5-4679ea001b51", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9915547-3ec5-4b7a-a2a8-21b7b76b155e", "sighting_of_ref": "indicator--0417c369-9ecc-4498-9b6d-bf85a55734fa", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b73b4c-3cc1-41ae-ac37-344fdfee181e", "sighting_of_ref": "indicator--ef535d18-18fb-49dc-a14d-5eaaa8e3659e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a76aede-94f3-48ea-ba48-6d160d7d94a5", "sighting_of_ref": "indicator--fb0a0143-7e86-4de1-b65b-e9b69c306669", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f42e14e5-853e-4089-8b73-891a3caadcf7", "sighting_of_ref": "indicator--187a0995-e3be-48de-8436-9f9240f660dd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605eb7cc-107a-4820-8fb3-064494ceac90", "sighting_of_ref": "indicator--187a0995-e3be-48de-8436-9f9240f660dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10826d89-6663-4020-a135-8579e74e5133", "sighting_of_ref": "indicator--0562e10c-a094-469e-af53-62c59c2f7760", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c704a9-7657-4943-8f8d-498377988654", "sighting_of_ref": "indicator--c2b52817-173c-4c19-a758-81a0179410d4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ef3d68-f294-40bb-900b-d79ffe38c29b", "sighting_of_ref": "indicator--422758ae-7465-4201-ae95-0b94c952b029", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5efa18f-8693-4407-ae7c-9f4fa6a50477", "sighting_of_ref": "indicator--7a9325e5-5469-479c-8aa8-232d3dcebc9e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74154185-6d0f-4007-9899-58ec7d811c52", "sighting_of_ref": "indicator--46a149b0-da3c-4621-858d-bcc95a73be7a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac50ae5-56c8-4264-a7e8-b28de966f166", "sighting_of_ref": "indicator--237fbeb1-dda1-4305-aee1-9ac85a36d21f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e752997a-fbcb-4c74-802a-b2dcfe3b0b69", "sighting_of_ref": "indicator--718672a6-85cf-4736-9614-5175e0bf691f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e178484-73dd-40c6-9510-7bec3d1bbd93", "sighting_of_ref": "indicator--a1326ba6-42c4-43ba-bf6c-063523fcbda3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c196ece-3d9b-42f5-86cd-f5bf24134237", "sighting_of_ref": "indicator--ce895c64-d68c-4b64-a5ed-8bfb24a0eef0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b00e29-eac6-40ba-8ded-603e824e42e4", "sighting_of_ref": "indicator--9263b45d-c7c5-44da-a93a-abab29a85fc2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f63a683d-cf79-44a8-b077-67069fc11c13", "sighting_of_ref": "indicator--c8fea101-114e-4e01-b12f-c60833bb29af", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8433b417-eb35-415c-ba93-a438594519f7", "sighting_of_ref": "indicator--722a5e68-fb51-467d-aab1-f4097fc7a2ff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe4b32f-4994-4c4c-9bcf-fa89b1adbc66", "sighting_of_ref": "indicator--67cb6206-b5b4-4227-bfdd-3a4f57ee99f0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042dcf2e-727a-4a1a-891a-dc09de18ce4d", "sighting_of_ref": "indicator--831577b1-c281-4e80-9b71-2a7e80336a72", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fced1d5-29e3-4c5a-ac8c-a0fb4541ba72", "sighting_of_ref": "indicator--22381769-1f09-448a-9de6-c0fda0dcec45", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2077e1a9-76d0-4e10-8306-16927ab7c73f", "sighting_of_ref": "indicator--6e5aac5e-e689-43d4-a1a3-92be5bd71a1a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a139d6af-1d0f-473b-9078-5e08df116c2d", "sighting_of_ref": "indicator--6e1a169e-fdb6-40b1-a5cf-b6e533af94ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88bd4c5-a986-47c1-828c-89b5cba06e81", "sighting_of_ref": "indicator--deb08bb0-aea0-4aad-8cb2-853ad3956cec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc5e0cab-6cad-4f24-ba14-081a14c4f6bc", "sighting_of_ref": "indicator--34ca67e4-c306-45a7-9e2c-e3da58b1531c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9da7469-0886-453c-ad99-65e744c100fe", "sighting_of_ref": "indicator--e8e7d029-1865-4530-a7cb-1ed8d55d8a41", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94aeaff4-f0df-4bb5-9bea-e5d1cc5a2347", "sighting_of_ref": "indicator--afe3485c-a247-4cc2-9dfc-0ead4f9e573a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9de53cb-6a71-46ea-aada-51ea04e4ef3c", "sighting_of_ref": "indicator--6c41033a-0353-4829-8b67-7dc875dc9d63", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da237bbc-ba9b-4c89-a6a9-1be148677fa6", "sighting_of_ref": "indicator--1b194398-3331-43a2-b69c-7c318b68985a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f5e134-4120-48ce-be43-a5e46e623b8f", "sighting_of_ref": "indicator--9c7a4613-86db-47dc-a4e1-3d4311e21b8a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a85fef88-da3a-4f89-8ac1-6cdb2b818de6", "sighting_of_ref": "indicator--44d01663-eba7-4cef-aed3-ddc7880d3cc3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f353e6e9-ea87-446d-a937-e4715e42ee8d", "sighting_of_ref": "indicator--ce8139d2-afca-4153-a05f-b52aff8abbe4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01aa66e-f32b-4763-b349-0a70e282231b", "sighting_of_ref": "indicator--6e6daa7c-09ec-4401-9b96-57d668286442", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3734db1b-38f0-4a3c-a015-64b42ea76b01", "sighting_of_ref": "indicator--93fd23cb-9a7d-41e0-b03d-b6c32641314d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c1a99d-f076-4db3-bc81-3954a2d60b95", "sighting_of_ref": "indicator--f1640f55-e9de-48c0-983a-5baebea67311", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86690a32-e52e-42d5-821d-de7182ec10d7", "sighting_of_ref": "indicator--6f76f139-203d-4209-8f97-6d6400bef71c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e0b7d6-89bb-4b10-b208-adef97ce9f3d", "sighting_of_ref": "indicator--574dc05f-4ac3-4300-a3c3-fc2d12a789e6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b614e78-7505-4548-bc4a-fafa53383df4", "sighting_of_ref": "indicator--d21ef685-b0ca-4743-9517-054c02ed27cd", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321bf9d6-96d7-4f0d-9a75-d3e82c7a982f", "sighting_of_ref": "indicator--4ae5d739-d8d5-4413-8d0f-affb36c409d4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38dd67d6-db4e-4490-89b1-9771f747aefd", "sighting_of_ref": "indicator--f35beed5-c9af-4675-8de3-f7f45d424b1e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d831d8a8-c4d3-414f-b2fa-1789b43514ca", "sighting_of_ref": "indicator--9baf51af-8369-47d6-bb36-8cb5713e3cfc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c24163-9cd5-4294-8c5a-31390ae8ffe7", "sighting_of_ref": "indicator--cba00d5c-aa7d-4865-a0ac-2190b702c911", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2de0d82-136f-471c-bdf9-0d601ecdb5a3", "sighting_of_ref": "indicator--15032e01-35bd-4843-98d2-f7a0b341364b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2ef81d-3863-4b09-945f-81cc72b0047f", "sighting_of_ref": "indicator--15032e01-35bd-4843-98d2-f7a0b341364b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0710278-6c9b-40b2-9f44-89f9029776df", "sighting_of_ref": "indicator--f07585ff-a4d3-4ed6-9f7c-ee24c9c7d138", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12dd7ac3-ea82-4dac-9198-f789e028f87f", "sighting_of_ref": "indicator--1d896b67-e423-4c2d-98a8-e8a5083b5a72", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ab2b28-ad54-4c29-b62d-c7aa330ad656", "sighting_of_ref": "indicator--8359bab1-1006-432f-9359-92ac8b73aae1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82bc907-8ad1-4aba-8cdb-80abc55a355d", "sighting_of_ref": "indicator--95360e1d-9d7c-44de-a86a-341cf44a3c48", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df23956-9947-433b-b05a-b23cb04ca3f9", "sighting_of_ref": "indicator--6fac3b86-7eaf-4dad-a2c2-4f660b89ae13", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b4e27c3-d8a5-4b41-ac5a-09f0d3c104fb", "sighting_of_ref": "indicator--3f05ed81-7b1c-4b41-80ec-9e2707f0a4c7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6ce2ee-710e-451a-bf1f-8e5a8d547429", "sighting_of_ref": "indicator--35c2b287-577b-4069-8ee0-132939406951", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c92668-4ddb-4c25-8d6c-65b362db419b", "sighting_of_ref": "indicator--c2da67f2-5a60-4a8c-954e-059047771e7e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df36537b-b291-44ae-b1de-a0fc4a13f4a1", "sighting_of_ref": "indicator--7a255b6d-1557-406a-8d54-ccec0361d33f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ddd942-bf9f-4479-81f5-e1c28f3084d2", "sighting_of_ref": "indicator--4010d6f5-c581-4ffd-bd4b-f5adb4557207", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dee9afa-6a97-40f7-a4c0-ce32c40365b0", "sighting_of_ref": "indicator--d13c7240-9104-4ef2-b902-a8033df539de", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfff334-1c44-433d-94a1-a5c0d1e82e7e", "sighting_of_ref": "indicator--0128778a-911d-43bb-90eb-6eada472f4ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--861f2444-ccbe-4508-90ed-32710e6b567e", "sighting_of_ref": "indicator--f1a52389-b237-4bf0-83fc-ab91dae3823b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8c1923-9376-4894-a6ea-baa00ee540b6", "sighting_of_ref": "indicator--a4c37ee4-d8c1-47a6-9bd0-027758fc9188", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4ef752-688f-4437-9789-3d2b9c9dcacc", "sighting_of_ref": "indicator--f9aedbd7-8e5e-477f-81b3-3460d7a360c0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ec7039-db38-4745-a27c-bd7bc10c93f9", "sighting_of_ref": "indicator--86cc5588-3dcf-4be2-8b08-967a7b3d0fb6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ae242a-90a5-48e9-8610-f155c6badddf", "sighting_of_ref": "indicator--7ff8b842-bb58-4a83-803e-7cd52ec597f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78780011-624f-4531-bfa9-306b1f7a3ee6", "sighting_of_ref": "indicator--b7ab2328-447d-4d8c-85c6-4805bd92a3a8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197b538b-6157-4090-b341-c5d089a66d10", "sighting_of_ref": "indicator--aace9be0-e243-44d9-af75-c05a5a632077", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad9b3b32-5eee-4fc6-95e9-931c44c8af8c", "sighting_of_ref": "indicator--4ee49a7a-3616-4305-860d-d37bb54a2ec8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b03fb9-1dee-44c3-9765-04fca39e8e4d", "sighting_of_ref": "indicator--30c3f983-f7cb-484f-98fd-cca532e3d0ea", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667949c3-88a0-4b43-bb4e-23c32ce2a9ee", "sighting_of_ref": "indicator--e4ddbd8f-171e-4ecf-8f6f-8f219ff45e7d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a2d8bd4-c88c-4217-a3c3-69fe886cf27a", "sighting_of_ref": "indicator--689a85a7-7cec-4700-82b2-1886de562e3e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68446c2-ccff-4c24-b9dc-b6f663efa3a3", "sighting_of_ref": "indicator--689a85a7-7cec-4700-82b2-1886de562e3e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9bfc05-7364-4ef4-9d94-45e780f3ba3f", "sighting_of_ref": "indicator--9fde2523-8b74-4a92-b855-5fbb0ce71713", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a9fdb1-c20c-458b-a5fc-d00958b840f8", "sighting_of_ref": "indicator--7806170f-f1cd-4f69-a696-753e4360355e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cdc69b6-4df3-46e5-b72b-f06d338fc222", "sighting_of_ref": "indicator--2427b7f5-d2e5-4514-bf57-5f5d0552f220", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82726c63-3508-4860-bab6-aebded976673", "sighting_of_ref": "indicator--d7c17f22-7b7c-42c5-a976-5c248aae0c61", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd298be-2294-4824-ad29-d9d2e7d90df8", "sighting_of_ref": "indicator--2083a54c-d171-4def-b124-ea4d41eb8971", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34d95fe-178c-408d-a541-f0339c809a7d", "sighting_of_ref": "indicator--303899df-7dd0-4620-beee-558d8f4743bc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba94c174-e6ae-420e-a44e-5d0e63af1261", "sighting_of_ref": "indicator--d07f42c1-a905-4b9f-ba32-54e3070a37ce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2316af25-15d9-4c34-a457-8825803a004b", "sighting_of_ref": "indicator--913aaca4-87b1-43fc-ba5a-7c203efe168e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9a6218-1f93-4c0f-b714-54413feae848", "sighting_of_ref": "indicator--a73167fd-1329-4a82-bb5f-79c2cd7816b1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6972f777-9426-44d1-b943-4298526165f8", "sighting_of_ref": "indicator--4fd6826e-099b-47a2-a69e-40d5e70548d1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48cde44a-d06b-40e0-9902-729fc05a067d", "sighting_of_ref": "indicator--1074acf7-df1a-43b6-a514-cef88533cde6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8caa623e-2394-4a2d-8bc3-42f9fcf1dda9", "sighting_of_ref": "indicator--948df6ff-4c5c-4a6d-907f-171ece78a11c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1ecf08-57e5-4b0e-a124-195debc05974", "sighting_of_ref": "indicator--6c986fd6-a020-4fe7-b557-60d28402d2b2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7881b9-fdcb-4475-8056-8183cee13a2b", "sighting_of_ref": "indicator--e83dadec-7f23-4534-b9b1-e1a8dfa985dc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a477755-5baf-4259-b25b-d8753adaf9a6", "sighting_of_ref": "indicator--af2174ad-1697-4a8c-ad57-c0a7424e813d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff2b80a-3ba2-4802-9a5a-6da1b0f9069b", "sighting_of_ref": "indicator--93e23074-43c3-4bd8-90be-e27bca01e68e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d294fce-5a1e-44ff-9035-6e16836809d8", "sighting_of_ref": "indicator--6c09cf69-95e3-44c7-a421-6d7b3a5fabd6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150c7aa4-cecd-4644-a22d-112ec6c45f93", "sighting_of_ref": "indicator--8a8c2989-92bf-4d3a-83f8-07d58eca1706", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d117360-5ea6-4957-a83c-7783978478b8", "sighting_of_ref": "indicator--f80c35ff-f864-45c9-8a3c-9495234a01f7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda8fd4a-52c4-4ae8-b79f-9107455fd0f2", "sighting_of_ref": "indicator--8f31bebd-d880-407f-aac1-9f274cdf079d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a95c6f4-5606-455d-a2ed-460a54339827", "sighting_of_ref": "indicator--73997442-921a-4c24-b734-d90908f40b47", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5315f6df-e1a1-4628-914b-56405e61b8c2", "sighting_of_ref": "indicator--199fc341-0075-487e-a8b1-772d8d54c72e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52fec654-7671-4b58-b51d-3e73f31d56a1", "sighting_of_ref": "indicator--ea8cfebc-080c-46ce-aaab-5a9a907f9788", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1369febc-405e-4fbf-b1e9-65c910b37b2c", "sighting_of_ref": "indicator--300161e9-a9be-4b00-9d0b-24ee5e6b3b69", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3edde178-5a34-4757-b7f1-d3930770644b", "sighting_of_ref": "indicator--f47c9799-0e61-42f8-82c1-9ac33dd57f6a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4e799f-5e72-420c-b23c-20613100dd3c", "sighting_of_ref": "indicator--f89e4880-ad51-4db9-b91c-8bf47932d757", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262a391a-25ae-4dd9-84b8-743638b6c595", "sighting_of_ref": "indicator--e93264c0-b91d-4aac-93be-038916427f36", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48eadc55-0e7b-41b9-b220-8052bf03f0f5", "sighting_of_ref": "indicator--d3a368d7-962d-4a0b-8a1d-0f200b53dd50", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca2e31b-31ab-4824-af57-a4766e4b8564", "sighting_of_ref": "indicator--09893ea8-d20c-4bdb-b427-dfa5071164a9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4cbfccf-c9ec-4d63-b00b-7961cf60681c", "sighting_of_ref": "indicator--46a40595-ec56-43b7-a968-8106b22b00a8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7248829c-5471-4eef-88f4-c0b63400f993", "sighting_of_ref": "indicator--5f79533d-5070-4ee3-a8ea-18d23157e740", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605a1cc9-106c-455c-a1cd-c941ea56552e", "sighting_of_ref": "indicator--61d9de67-003f-4c7d-9ec1-b8a407e7a68b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18dd6a84-55ed-4f56-b223-53ca7f18bb4c", "sighting_of_ref": "indicator--451297c5-9640-4b6a-a313-8f50e2a25fa9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed48abe-131b-480d-9c81-ad38846dcf53", "sighting_of_ref": "indicator--4f97c9fb-22cd-480f-8a1f-0fd9e81721c4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854fa3be-2c5d-47d1-a129-8150b37e9380", "sighting_of_ref": "indicator--e54a4a7f-cc1c-48dd-a002-47fafc0bcd2c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18fbee7-ec4e-43a4-9340-c2685ab4c775", "sighting_of_ref": "indicator--dfbb0374-0a57-4209-bdf2-6506d0c0811c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0c860c-e3aa-44eb-ac33-68a19693e413", "sighting_of_ref": "indicator--de306521-a0ed-4da9-bf4d-80aa3ee7b4b9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d60cfc8-a217-4deb-9b0a-4c0526dae28a", "sighting_of_ref": "indicator--d9491e70-3ddd-46f1-8c56-741da4f8ff79", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd215c6-b828-4b65-bb5e-e85817943947", "sighting_of_ref": "indicator--71ad9768-2154-457d-b145-2f5c666225f6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f890bd91-36f4-4ba9-99b0-31ea8a417eab", "sighting_of_ref": "indicator--57a1f122-020d-456b-8847-fa6ff67371dd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb15bfaf-bc46-4282-9e4f-55bb5e980914", "sighting_of_ref": "indicator--0b16aabe-90be-41c6-8c43-bbe9bee00309", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbfd61e5-d921-4c4d-ade4-496f64357543", "sighting_of_ref": "indicator--e7755872-628a-4c74-97b6-9d4e0f52e839", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be525b5-1d1a-438d-b3a6-87009bef99f3", "sighting_of_ref": "indicator--2d97ee82-c576-4fe1-b796-bdc35eafd221", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b7c4b5-10aa-49e9-9ed8-651f92f439a4", "sighting_of_ref": "indicator--5372b678-b8a9-453c-981e-b1e3217630c8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da8b468-e447-4b6b-8c65-8f79151e0882", "sighting_of_ref": "indicator--9e7c1249-14c2-49a0-92b8-edc3196dab7f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--821b4589-57d7-4399-8c52-d581b0aef1f5", "sighting_of_ref": "indicator--04f35cca-45dc-4c49-8dcd-4c6722cb53df", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a898c389-2fdc-4d93-b4dd-db15b54a52d5", "sighting_of_ref": "indicator--78845ec7-0314-4f4d-9ef3-3511d6d52198", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--889105b0-6120-4df6-924e-172225cb9757", "sighting_of_ref": "indicator--6f9aba24-60a2-4325-ac8d-cc5dcc382769", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce0e1e8-f1ac-4341-8de3-c1b62be20438", "sighting_of_ref": "indicator--3f8d45e3-f0b7-4bb0-aca2-829a5365c467", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdada75-f786-49c3-871e-cac45c850757", "sighting_of_ref": "indicator--7f2f686f-6301-4c25-80aa-65378a5246a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777093c0-81d6-4b54-bcf2-1e16ba95e76b", "sighting_of_ref": "indicator--70bd4b5b-00ee-467d-8b68-e12e166efd71", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b69407-f3f4-4478-81f7-836de22076be", "sighting_of_ref": "indicator--5ce4fbc4-7d0c-4cdd-8f20-fcb6fbccc266", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac928220-6cbc-4f23-bd4d-9d6abd43a376", "sighting_of_ref": "indicator--5ce4fbc4-7d0c-4cdd-8f20-fcb6fbccc266", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d9ee90-f8f0-45c8-b4d8-78ec2791fd87", "sighting_of_ref": "indicator--9c06f77b-94ca-4d32-b7bb-bf82230a67c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--078fcc63-e4d8-459f-b34e-9f36e32745c1", "sighting_of_ref": "indicator--76348a8f-bbcf-40cb-91f6-f76d96189607", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea36610-712c-404f-a998-8b96bb4fae81", "sighting_of_ref": "indicator--ab36f162-a5d0-4743-ab0c-1dc7faa38fdb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28f6aa4-7b86-4bf4-91aa-14c3b5e59baf", "sighting_of_ref": "indicator--77a83cc7-8323-4180-8e14-aec151447329", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb81f12-c15b-4e76-819e-19fdc59bfa31", "sighting_of_ref": "indicator--a4a176f7-7d24-4d46-95de-216a844b225a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7bd0985-3ad9-4a5c-b38a-a1363b172dc4", "sighting_of_ref": "indicator--36b79c38-2796-4089-8ce6-5d5df380a09c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513a9746-40f1-479b-935b-c48af1115f62", "sighting_of_ref": "indicator--c0ae23f0-98ab-4dab-94cf-a529421935f7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357b6edd-6758-4d69-ae41-80308e653c8b", "sighting_of_ref": "indicator--af1ebcb3-e5c7-4ef4-a2ca-64faa0d2f4aa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a506bfaf-feb9-4dbe-a334-c95d880a10a3", "sighting_of_ref": "indicator--e06eb4c8-2d2c-45b7-94b2-551eb99f5029", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6281644-5a6e-4bf1-93e5-5a42c60530ec", "sighting_of_ref": "indicator--3f6aa678-95c4-42f7-8f0c-47975f349c78", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82311355-9fc0-419f-b364-9f137b097fa5", "sighting_of_ref": "indicator--27f7d699-ee5d-42b1-82bb-9854f41113d1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8967849-ad13-4d27-933e-df4ed2586a53", "sighting_of_ref": "indicator--009ad5aa-8dd6-4f98-ad1a-1e5f239111ee", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18ad193-08a9-4b12-bd44-ac69080ac8c9", "sighting_of_ref": "indicator--56f167fe-f292-4696-99f8-0b06d0b882cf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f57fce7-59b4-4899-acb5-6525b65a25cf", "sighting_of_ref": "indicator--bd595d0b-7c54-4f95-b41b-ab53570c8358", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f409d26d-f089-4688-9ba2-cd805242373e", "sighting_of_ref": "indicator--7611291b-0f01-41df-b531-2458daf79313", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3563da78-bdfd-4f13-a38c-f48eaa8ebdfc", "sighting_of_ref": "indicator--7f18fb05-d4d2-42fa-8099-b4fc1af15853", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8570134c-d23f-486a-88b9-88fa3487dd51", "sighting_of_ref": "indicator--6c1d6eab-caa3-46a9-8803-668f2f1eec6e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a47a7ac4-9c18-495a-ba5f-1f1d771799a1", "sighting_of_ref": "indicator--5df2bf94-37e4-4ede-84ab-82541194050c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70fbfbfd-8b2b-4179-b957-dda68bc32f1d", "sighting_of_ref": "indicator--74d0b3a7-a894-42d4-82c9-9478e8900961", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1754e82-567e-4aa7-b882-11ff726391d4", "sighting_of_ref": "indicator--5c4e433b-bec1-43aa-9aa4-5e6b53bc9ad5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c3c345-0101-4294-8258-2d95a49d5e6c", "sighting_of_ref": "indicator--57cefa67-c000-4e64-8492-d99d747ddb80", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd81902-b4f3-44ce-a957-1c5f99bab218", "sighting_of_ref": "indicator--912dc511-e1b8-4629-8478-398d311bd978", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--404d1a10-a8df-4579-83bf-7db80145988c", "sighting_of_ref": "indicator--7f461c33-1351-4153-b57a-dad1f2af76f8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a968a6b-617b-4140-bba8-5c10117431a3", "sighting_of_ref": "indicator--68026963-99a5-428b-bbe9-82e343445952", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e7acbf-f698-4725-8ce8-9fb0a2515b4a", "sighting_of_ref": "indicator--e32744f0-8655-4d98-bef9-d9400a0f8276", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a9bb9d-f513-488f-a7ed-ad9e503c4088", "sighting_of_ref": "indicator--6ba7cf02-19c2-49fd-b2ff-4dd76d3c53f8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421af71c-5719-4f63-a55f-da9ca21f22b2", "sighting_of_ref": "indicator--458a1a7f-b7c6-49de-82cc-f4ecbf16aac6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adad6785-5959-4c7c-a1f8-6fffd1e747c1", "sighting_of_ref": "indicator--046634d2-e2e0-4e60-a88f-33f348da50a0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97a017a-fee7-47f4-bea1-9f0e0a1b8c73", "sighting_of_ref": "indicator--34234a7e-f1ca-419d-99d9-38fd7b035b35", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dfff55f-ec15-4438-bc22-85dac0f98d90", "sighting_of_ref": "indicator--b25f0337-402f-48be-8355-7b5158270c1f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51290c6-ba16-4706-8557-5b92a70222f8", "sighting_of_ref": "indicator--e6508d88-ba0b-430b-98ba-206c4d4185e3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2571b08-e0a4-4d32-9c22-72f5b50b081a", "sighting_of_ref": "indicator--bda91d92-de42-4345-b98a-0f4108c066a2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf1e35b-ec11-4c17-b9d2-77d9ec254f86", "sighting_of_ref": "indicator--56f44791-1b7a-4cfc-8874-d7dafae0a7b9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6cff19d-8933-4dee-8b07-1bfd5e4d58e6", "sighting_of_ref": "indicator--ffba3fa4-58f2-491d-80af-15cb732ff315", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d537a0b2-ff66-4e99-91a0-470abbe63120", "sighting_of_ref": "indicator--69bd8ffd-42bd-430f-bf81-219e71c636ad", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039ed8d4-c04f-48d0-93b6-0e66668bc837", "sighting_of_ref": "indicator--4d17a6e9-2f83-426b-af82-331bcdfd7b5a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0708ec33-02eb-427d-a982-ba2106bc3ba1", "sighting_of_ref": "indicator--3f1cb50a-c751-4108-be06-382eef68ec0b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d625f3-e8fc-4f43-8378-59db3394d732", "sighting_of_ref": "indicator--c645eb93-be21-4451-91a5-e45a0374d975", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e87f4e-0389-471a-a9d0-7cf5497d5485", "sighting_of_ref": "indicator--9c036225-ed0d-40a9-bacb-277ccf038a1d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fdaa4fa-8b77-408a-867a-28643630f85e", "sighting_of_ref": "indicator--cd329412-9409-45eb-b673-ba021614a81b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce05ed5-d4df-4a5c-a526-4696268a3d56", "sighting_of_ref": "indicator--5be58d34-b79f-4346-a262-10cda2799611", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cfff316-4543-4f83-b6af-072cdd786f48", "sighting_of_ref": "indicator--8b68b42a-e888-41cd-b73a-62f025b69a9a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307f9218-6ef4-4883-a831-476f3a7c2a5b", "sighting_of_ref": "indicator--8b68b42a-e888-41cd-b73a-62f025b69a9a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31b3ddd-13d8-4afa-bc01-f0704f774327", "sighting_of_ref": "indicator--4a1118a3-33ae-4ca6-8ac0-40e2e9ff8990", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68435d89-4939-4f5b-9722-1a4f2ebf3601", "sighting_of_ref": "indicator--b5765ab7-65ce-4ac5-af54-758a636bd232", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831b5f56-0ae6-41a0-a461-acf1e8e864e6", "sighting_of_ref": "indicator--b3a4534f-aefd-452a-9c97-e92ddfa5d5c8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed95b4d-d993-4e03-9783-5dc5b347bf8f", "sighting_of_ref": "indicator--4dc7cd33-4f9b-4c31-ae8c-4ece2b8ff3cc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06ade13-944d-44dc-9875-3522019af8c9", "sighting_of_ref": "indicator--c8d2723d-98ac-49df-a4b1-4ca291c6c483", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd49bc8f-4b14-4770-879f-b6ac7d0af124", "sighting_of_ref": "indicator--827d8435-6bbd-472d-b956-04fae2c2890a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2af98c4-8153-4f20-a68c-0c19f84691df", "sighting_of_ref": "indicator--d0cbf365-e6e1-469b-abae-5e88d1803a0e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad86d44-fb23-4c78-9d46-d6e86f95e565", "sighting_of_ref": "indicator--50e8f0b8-645c-4e92-b79a-ea1a308a651c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a62c57b-ff99-4d6d-9098-81c7d6a76796", "sighting_of_ref": "indicator--d73672d6-07fd-4505-b5c2-444b361c5477", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f68fbb-9f5c-47b4-aa11-d0fe5762cc37", "sighting_of_ref": "indicator--a9ecdca2-5ac1-4291-8c7c-dd8833532b97", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c232eb4-36f4-4a2d-a44e-139c756c1258", "sighting_of_ref": "indicator--8fc52e8e-8f1e-4bc6-9eaa-de5b8653bd49", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6820d8c7-eb5e-4ca7-93c8-5448bb8e2a40", "sighting_of_ref": "indicator--6f2c6b1c-23ef-4900-b19b-72ebc72f088f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550155ab-537c-442a-bee7-48525e0aecae", "sighting_of_ref": "indicator--b6afb61a-5370-4d37-ba77-1d9509efa410", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e57a34-8878-4225-88d1-6b2fe08ba8b5", "sighting_of_ref": "indicator--0837b9c9-0fcd-4227-aa5b-06a7117821ac", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bcb6648-c26e-4b40-bd7f-08fe010fc4d2", "sighting_of_ref": "indicator--0837b9c9-0fcd-4227-aa5b-06a7117821ac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97539f11-b045-4b90-8455-a63e3cc2afa6", "sighting_of_ref": "indicator--bdb3b601-792d-4e61-9969-2adc26840fd3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e60c48f-e23c-4ebd-84d7-f6ff9142ce22", "sighting_of_ref": "indicator--28f2c91b-b23d-43c3-8e82-829338a44be9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a41ddd-3ceb-492d-9d2c-67fa45bc112c", "sighting_of_ref": "indicator--dbea7c17-359e-4ed2-b5b7-195162b52ba1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842784c2-d406-4ad8-a5a0-e62dd7195c69", "sighting_of_ref": "indicator--ee5265b7-a7d4-47e1-9887-9b2997653bec", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31dd42f3-c7df-4eac-b862-82b71ef94018", "sighting_of_ref": "indicator--0075b08b-1e61-4c82-852e-92ab699bede0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--334110c5-dffc-4852-b10c-1b1b6caed007", "sighting_of_ref": "indicator--8566c8dc-0351-4f97-881f-40b006043b9b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd9883a-9069-4c07-9c99-8a5f8ebf71a0", "sighting_of_ref": "indicator--d365334c-8ef6-427b-a6ed-9ca37cfc6593", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b03ea55-1778-4de7-8abb-63f97c73b3f2", "sighting_of_ref": "indicator--98791fac-f938-4ec4-a55c-101690599d99", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62babcd-3734-4744-be44-25b0f16db026", "sighting_of_ref": "indicator--c30a0041-4d1e-45ea-889b-5d8184c93cfd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd8b1c4-4188-4a50-9e25-6b84989667d3", "sighting_of_ref": "indicator--5785f6d5-2f6c-4e98-8005-5afbd4be75c8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10680201-0755-4900-a05a-7d7fc1e54437", "sighting_of_ref": "indicator--98927c9e-5293-45d2-8eff-8c67238600ed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98852fc-021d-4c49-a5e2-f13ce0e9d6cc", "sighting_of_ref": "indicator--62986de7-016a-4ac8-b9f1-548c86cdb5a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1546ea3a-2ff9-41e2-bb46-74a1cef0c743", "sighting_of_ref": "indicator--b8204b20-cb7c-4d79-b3b9-eff2e499d5d9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba8b1da-7df8-467b-8af4-163d4aa3d626", "sighting_of_ref": "indicator--46121bd6-2f5b-4d0d-899b-7a8584b22ccc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec88da4-5474-41aa-9dbe-9a7af3479fce", "sighting_of_ref": "indicator--f23fbded-a901-4e07-965d-97737b10a43b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70bb61fa-2888-4642-afbb-d707b2c592d6", "sighting_of_ref": "indicator--4d2305d9-13ec-4b0d-a1cc-2358bab78560", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855b11c8-4332-49b7-a484-052c5ae63af0", "sighting_of_ref": "indicator--ff1e5fa7-7a1d-4aa1-804d-ccc96dbe21be", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb5422df-ef12-4349-bb08-7049fcaeb510", "sighting_of_ref": "indicator--e9c79efe-2c64-4676-92db-e46daefbd9eb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82fda67a-f45a-4e4a-8873-2db565a0f698", "sighting_of_ref": "indicator--29cf85d3-ecc1-42b9-8786-3860f665d544", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc8245d-be75-4d14-add5-a3d0197e54ad", "sighting_of_ref": "indicator--29cf85d3-ecc1-42b9-8786-3860f665d544", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0caf26-91f1-4fb7-9afa-22f9c9871fb7", "sighting_of_ref": "indicator--06864217-1282-492d-8959-2600f09a1e1d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6473f07-b863-4fe5-bf09-8403190c8372", "sighting_of_ref": "indicator--ad2c1361-973c-4d92-8b40-f666f89e7496", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1e4967-f10b-49bc-b887-fb7d2c3b38c4", "sighting_of_ref": "indicator--e2e4c837-dd6f-4d85-a39a-9a9381755c2f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a77207-2591-4088-bc16-ddea04c622c8", "sighting_of_ref": "indicator--015d28f1-2ea4-477b-b849-d52a1c74c040", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de7a5d0-b197-4fe5-9f07-1773a23e585b", "sighting_of_ref": "indicator--a5c08bc0-4c8a-45ca-8e2f-b109c1cbb1a0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22714fcd-e3b7-4203-a7b2-c63867348b0b", "sighting_of_ref": "indicator--84bcd1a4-7a3a-4cf1-9957-6ed577c7e56d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c362a6-94b3-4a6a-b676-cbdd3684f447", "sighting_of_ref": "indicator--ae1cf369-b0da-41b4-82ff-74a8260794a4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ef27a2-836c-4946-a0bd-12b730a9bd5a", "sighting_of_ref": "indicator--b95b3d62-a62e-48d6-810d-0046d5370928", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7205c55-82c1-4faa-80b8-15eda4ef0b7c", "sighting_of_ref": "indicator--1d11240c-f95f-40af-ac20-441514b08e2a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c6ad63-0ab3-4719-9ae4-3fc4559f0e1e", "sighting_of_ref": "indicator--25fb1393-2ef4-4869-829e-c2f12a550aa5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e71376-f224-4a6a-acec-08e2ab4671ad", "sighting_of_ref": "indicator--25fb1393-2ef4-4869-829e-c2f12a550aa5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df58fe3a-61b9-4fce-8999-7c88febcadd1", "sighting_of_ref": "indicator--b04ff56a-506a-4dbf-a1eb-7607cb154456", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989d6d69-deb6-464c-880c-c4faa5a91aab", "sighting_of_ref": "indicator--b04ff56a-506a-4dbf-a1eb-7607cb154456", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c62107-a0c3-458e-bbe4-103c3815b44c", "sighting_of_ref": "indicator--8b068ae9-470c-41f9-9e30-459d7d026135", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c914b1-96c5-4a68-b44f-a7934d19b608", "sighting_of_ref": "indicator--8b068ae9-470c-41f9-9e30-459d7d026135", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51572990-2641-41ea-b8dc-39bfaa4fa11c", "sighting_of_ref": "indicator--0fadf28b-036e-4ea8-9478-ee15f2830026", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc97eb9-365f-49c0-9323-06119f258369", "sighting_of_ref": "indicator--0fadf28b-036e-4ea8-9478-ee15f2830026", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7db3adc-c681-422d-b8bf-7353aba944db", "sighting_of_ref": "indicator--2903f1aa-de2d-476b-8482-8deb4fa2e5bd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9306f40-430e-4ef0-998b-b67760983806", "sighting_of_ref": "indicator--2903f1aa-de2d-476b-8482-8deb4fa2e5bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f545b4-1d7a-408d-a6eb-32b6c64be4ed", "sighting_of_ref": "indicator--bcf98079-d3a3-463f-b8b8-f8e86e7156f1", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb45fd8-7a56-4854-b93f-c6b05ea75e09", "sighting_of_ref": "indicator--bcf98079-d3a3-463f-b8b8-f8e86e7156f1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3edc6be-ec3c-4007-910a-b7893a51b392", "sighting_of_ref": "indicator--65be4438-79fc-4d32-a023-a056f1bcbb87", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12422b5a-0f84-44ce-97e1-0371e9f42854", "sighting_of_ref": "indicator--3f97ebfc-f2b0-4fbd-8e87-32991f8376a3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--310040e6-0013-4e62-9d11-3bddef694d8a", "sighting_of_ref": "indicator--3f97ebfc-f2b0-4fbd-8e87-32991f8376a3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a95d3e-a736-421d-8f86-3f68f158cdb9", "sighting_of_ref": "indicator--57e2496e-9333-4ff0-849b-8c5c740d9141", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7743c03-ff1d-476a-8bc3-aeec2e9eafb1", "sighting_of_ref": "indicator--57e2496e-9333-4ff0-849b-8c5c740d9141", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100fa339-70a8-424b-b64f-7aecc75c323d", "sighting_of_ref": "indicator--c78db3d6-6472-4552-973a-22e85f4e6419", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0018db97-eb12-4ae3-b2eb-a56f41de54fb", "sighting_of_ref": "indicator--c78db3d6-6472-4552-973a-22e85f4e6419", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde4dcde-c8d9-49d1-8226-cae476f3a16b", "sighting_of_ref": "indicator--fea4ecec-88e9-442f-a11a-cc69e21ede3b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd6a68a-9fa2-4c26-950e-881a14769344", "sighting_of_ref": "indicator--066880d3-c941-4537-86f9-016d7af6ec4e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f39ce73-191b-4fdf-9993-1970e47f919f", "sighting_of_ref": "indicator--feca5030-d17e-4d6f-8351-6b3ea44bf6c2", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e00185-949b-444b-a55e-49109f1ef56d", "sighting_of_ref": "indicator--feca5030-d17e-4d6f-8351-6b3ea44bf6c2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2240f2-c516-4df0-ad78-0fd31430b1f8", "sighting_of_ref": "indicator--f0f9b382-bef5-4fe9-96ab-a9cad7ace659", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0b6bde-8a0f-474c-8f7a-ab2e9d5564bf", "sighting_of_ref": "indicator--3f88a3ab-eb4b-4b48-8677-50bdf5600066", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71546b27-994d-4066-9e26-16138952b229", "sighting_of_ref": "indicator--3f88a3ab-eb4b-4b48-8677-50bdf5600066", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd29c8e-db1f-4d4b-a537-cada0a03ae61", "sighting_of_ref": "indicator--dadcfe37-98b7-469d-95c1-37c7a728814a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e49231-23f6-4699-950c-6eea4672c091", "sighting_of_ref": "indicator--47c7bc21-6b72-42e3-8095-a4776a20ffa1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b24ed56-0449-45d2-a55e-8816839eb16b", "sighting_of_ref": "indicator--c5b83325-3a99-4b43-9f1e-d5786cda8410", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d121fa-fc78-4d8d-bb76-496997be899d", "sighting_of_ref": "indicator--b876e752-f2f7-4f96-ae0e-fced3f17ca76", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6cfa9d-bb83-404a-9d44-9d68713e7df7", "sighting_of_ref": "indicator--b876e752-f2f7-4f96-ae0e-fced3f17ca76", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a46b6dcf-1056-4e02-a2b5-6a1dbf68a424", "sighting_of_ref": "indicator--af388eb0-df06-4e26-91f3-e3cb055a0e9d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f78cf2-5f1d-4a83-a377-65be3848ecdf", "sighting_of_ref": "indicator--e819565a-3144-4dfe-a853-728647c4e00b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce029db-bd67-46ac-9739-412aaad88867", "sighting_of_ref": "indicator--2b7076bd-a6fa-4732-a575-926a53e20209", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45fb10c4-0ad1-4f87-bb6f-7381983f6d89", "sighting_of_ref": "indicator--2b7076bd-a6fa-4732-a575-926a53e20209", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f577267-a61e-4df1-86c0-b65440322705", "sighting_of_ref": "indicator--db03fc07-0baa-480a-9f38-b1961a3a004d", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a11d50-6dbe-4e7c-b71c-f53c17ac1023", "sighting_of_ref": "indicator--aa628346-d934-4d3b-9d8c-ea0e7c83019c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6aa43e-ac6a-4d10-b628-6a445ba98b99", "sighting_of_ref": "indicator--5ac8fe61-dd14-4a97-b9d8-0e46ba3523ec", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdcf2545-fdd8-4ebd-95df-6e165f1261d6", "sighting_of_ref": "indicator--6da6d130-9c86-45b0-8f57-716e92bdef16", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc990dbf-afb4-46b9-9afe-3f089eafb6f5", "sighting_of_ref": "indicator--1bbaa594-e6a3-4765-b393-01cecaf2229e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a67418c-40c7-4f93-91f3-922ae17cab70", "sighting_of_ref": "indicator--f0a1572a-5b3e-422f-aca9-9946637a6f17", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84908e0f-d229-4011-a2df-df814548d565", "sighting_of_ref": "indicator--3bde2c9d-f5f0-4eb5-adf8-57b1b08f5323", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e62bf2-59c1-4640-b6a0-d99c372b067b", "sighting_of_ref": "indicator--f3ee54d6-a483-4b22-88b3-be251d5ec92b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8cdd27b-707f-475a-8f2e-40381fed6d67", "sighting_of_ref": "indicator--063c6f94-06d3-4db1-a5e6-db38016a4cd4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--083998d4-9615-4474-b651-08cd42de99b5", "sighting_of_ref": "indicator--58d8410f-4f2a-46e7-88d0-5a82794316f8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57901f5b-eb06-4130-911f-46fa9dce5893", "sighting_of_ref": "indicator--b92b417f-a55c-42bc-84f1-90659942703f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7f49ae-4a9c-4771-8b8b-1c1a2c483522", "sighting_of_ref": "indicator--f70c6dd9-5554-4c21-b702-09d55fcbeb9c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60eea0bc-5d79-4256-85de-ecd07fe984c9", "sighting_of_ref": "indicator--89584831-d446-4ea2-8cb5-036c92b52131", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23cf9d6e-a7f2-4b46-a773-65f255ef343b", "sighting_of_ref": "indicator--d20b1960-1db1-4f1c-ad4e-484ad5b91ab1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa51150-9a63-46da-b11a-8510c53eb143", "sighting_of_ref": "indicator--d20b1960-1db1-4f1c-ad4e-484ad5b91ab1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7892d6da-a7ca-43f5-b258-6bef5187eaa3", "sighting_of_ref": "indicator--0624a032-13fd-4395-b651-bd968ee5597d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd74389d-34d8-4647-8f5f-b362665d5544", "sighting_of_ref": "indicator--0624a032-13fd-4395-b651-bd968ee5597d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9d738c-7705-4648-a97a-ebb63e3e354c", "sighting_of_ref": "indicator--aafec471-a6de-47f0-bf59-35dfe537f6c2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012b0081-6d13-47a4-aa68-0553d97da7c4", "sighting_of_ref": "indicator--c859b4fa-b5c6-4660-94dd-fd3a35ac817b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5a1da2-c361-4374-ac21-43ed9856eb6d", "sighting_of_ref": "indicator--c859b4fa-b5c6-4660-94dd-fd3a35ac817b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad676e5-e5c5-4e76-85a6-e2329d4d5fa5", "sighting_of_ref": "indicator--177e1575-bc4c-45a6-92da-844c7c06d5d9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc750a24-8c12-485d-ba86-5ad8c9e0ac13", "sighting_of_ref": "indicator--177e7860-de34-4637-ab36-62ca0d2018fb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d37f1a-5cd7-4e1b-bae6-70d396375a53", "sighting_of_ref": "indicator--9ff497e0-424a-4d71-8b6d-10b3daf80a4d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6e1386-bdca-4a6e-9bd7-dd25972c67d1", "sighting_of_ref": "indicator--20e5269f-9e24-4892-8d9d-8e7c5cc733d8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0479e667-3030-43df-8210-288ae9628f14", "sighting_of_ref": "indicator--afb71965-d04a-4dee-9700-65145f57992f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e3b02d-fc00-4bc0-94c8-510c7c9738d3", "sighting_of_ref": "indicator--91e5174a-59f5-4aef-b487-d7e70e0d5a87", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95395cc-b85a-40d8-a39a-4cd74ca4e309", "sighting_of_ref": "indicator--45c79161-9d28-46bd-b847-489342a8f894", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26eaff8-89b5-4d4e-9a3b-50e9c8c383e2", "sighting_of_ref": "indicator--8f48ee71-6f82-4a56-98cf-a9f241aa85d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19840f4-e1d8-44ed-b494-0838e6ad3e74", "sighting_of_ref": "indicator--e609c877-9c77-45ce-ab7c-5eb37c9394e3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8c3cf4-be09-4d6c-9822-62feb53ac0e6", "sighting_of_ref": "indicator--6d39209a-9cb0-40df-a7e8-812689b6cde5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9592fac-2bda-4507-9e5f-a322cf1d8a10", "sighting_of_ref": "indicator--6d39209a-9cb0-40df-a7e8-812689b6cde5", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440b14a9-cc44-458d-9c0f-8615ad655311", "sighting_of_ref": "indicator--6d39209a-9cb0-40df-a7e8-812689b6cde5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b65cd7-522a-49a0-b5d5-fc39cd9cdc73", "sighting_of_ref": "indicator--f835e52c-976c-4b67-a735-4e553f558ccf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b45fb9-ed64-4f70-b3c9-d660ef5783ee", "sighting_of_ref": "indicator--6e74d90a-8722-4bb7-b7b1-c986a1965afe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6671ba71-727e-4fee-a4fe-17225c755107", "sighting_of_ref": "indicator--831ea855-c7c1-4839-8a0f-0b9cf619ed04", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebbeebf4-df17-4a04-8c10-0cd2a649e725", "sighting_of_ref": "indicator--831ea855-c7c1-4839-8a0f-0b9cf619ed04", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93b1c62-3580-46cb-ae9e-4f4da32713f1", "sighting_of_ref": "indicator--4361e341-53c4-43e8-b579-205cf9f29380", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14402ad0-3755-4feb-8c7a-64cb3c8fdce3", "sighting_of_ref": "indicator--8a7cb0bb-d8dc-46ca-9617-da9e8c7e2542", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112cc30d-81bd-4234-831c-abe070098860", "sighting_of_ref": "indicator--05f759e1-b56f-4e7c-a92f-8fcf941c62fc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f9acd2-62e8-4136-b1a5-2e9536358537", "sighting_of_ref": "indicator--52a18ebc-3f92-4eee-a2d5-4a96743f78a5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee558c08-2470-4f88-b331-3bd3ebf890f8", "sighting_of_ref": "indicator--cd11e2b2-acee-408a-8032-d4bc6186db09", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c4ded6-9dad-40a9-bfda-a751e881f2c5", "sighting_of_ref": "indicator--9f4d5012-60ff-49b1-870a-43628006c834", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23b0ba6-27a9-4b15-9d87-c174c881b95a", "sighting_of_ref": "indicator--0f63ddc6-7550-4b8e-a57f-07d947fefa0b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ce70dc-830a-4780-a299-3b37a2ddc3d1", "sighting_of_ref": "indicator--6c839fa1-5362-471e-812c-a8ca1563eed1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76cbb042-e91a-401d-8a0c-2936ac7e7779", "sighting_of_ref": "indicator--4aa73e10-8fb9-4ab0-802f-5d3d4ce91e74", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e402aa3-8eb9-4bf2-9e4c-fee3cd3fcd79", "sighting_of_ref": "indicator--42e20a99-44de-444a-a990-7ca25b8114ea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1723de8a-3dd0-4462-a253-acf2832de79a", "sighting_of_ref": "indicator--f14b0fdf-e7e8-429b-b9f8-0ca213b3e02d", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e42e263-ea86-4b69-9df1-f29ab0b8190d", "sighting_of_ref": "indicator--b583e953-6ca7-4231-9f41-93520a153112", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db713162-ee27-4d09-8017-428c8cf3958b", "sighting_of_ref": "indicator--8e30101e-c240-4988-ab00-d664cbda8209", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090a7f8a-7d93-48ee-b0f8-5fd728d16059", "sighting_of_ref": "indicator--bb5dd657-0d69-4ba4-abeb-dd76072f04ef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba5d21bc-9d25-40a0-a9ed-62bede44f35b", "sighting_of_ref": "indicator--3fa41bd2-260e-4652-af03-90c05867beee", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168f0db6-68df-4124-b4fb-9de0288d8efa", "sighting_of_ref": "indicator--de6425c1-802c-4605-8ecb-32c5e93eab11", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bdc23e1-1f69-4b64-b5fd-0cb9226c5ca8", "sighting_of_ref": "indicator--ffb8e180-db68-44d4-bc4f-bd24cbb42091", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06bbecea-b34f-4e69-be09-e08b09afa64a", "sighting_of_ref": "indicator--ffb8e180-db68-44d4-bc4f-bd24cbb42091", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8deae608-17a4-4911-92ce-23ef97717a8f", "sighting_of_ref": "indicator--8b0928f6-2c10-49c0-ac45-9cb77be338e6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ad031e-f157-49f9-bf83-9f2629dd8be6", "sighting_of_ref": "indicator--8b0928f6-2c10-49c0-ac45-9cb77be338e6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9447bb5b-d72d-4295-b36b-acf2d41e7af6", "sighting_of_ref": "indicator--5a08fc28-f529-41a6-af86-fa0185ee1cb6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ded6328-24f3-4645-9b74-94c5d5f79de8", "sighting_of_ref": "indicator--5a08fc28-f529-41a6-af86-fa0185ee1cb6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c37c45-18bd-4a08-89ba-1a5106c0c441", "sighting_of_ref": "indicator--44d623c1-c620-47d1-a23b-2df0c7e65792", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cab01d2-5bef-401d-898a-40143463a074", "sighting_of_ref": "indicator--eaa4c7dd-49c7-43e7-827f-ab4419691ad2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29401ccf-2e83-4c3b-8d27-5b0f93ec8e79", "sighting_of_ref": "indicator--d6a344a9-eb14-4c21-9c18-c442c468c9bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c68a63-326f-489a-93e4-1ead4533e47b", "sighting_of_ref": "indicator--465edd58-86b2-4604-8ab2-3fcf6a652ea6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e042c46f-ab26-4bce-b84c-6660636b5ff9", "sighting_of_ref": "indicator--79196a50-940b-4238-a7e8-9eac08a27e68", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c108189c-2563-4e99-9f36-12c1860b2e3d", "sighting_of_ref": "indicator--701a1e66-8e21-49b3-913d-b0ab41450f8e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd79876-4413-47c4-8e55-1b67c3207d70", "sighting_of_ref": "indicator--e2a4d05b-376d-4d29-bf7d-23dc4c7ebdb7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c4cddd-9024-4d76-b57a-94794568e60d", "sighting_of_ref": "indicator--c2b3f232-f0d8-45ac-bd8e-71ed2e1386df", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daeeb595-24b5-4fa2-8a4f-e88f0bc49f43", "sighting_of_ref": "indicator--2f3110b2-ca21-4d80-a9d2-b9c523a217f6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfcdd387-9d09-4a45-9227-9f07c678b765", "sighting_of_ref": "indicator--9a883850-06c3-403d-9ae4-6f9b695d4ad5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5957a8d-67f6-43a2-abc4-7521c763a3d8", "sighting_of_ref": "indicator--aa63381d-5fba-44b4-bd48-285ddc0012f5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e9161f-dea8-4098-9105-07098af109a1", "sighting_of_ref": "indicator--5ac7c050-7c8a-4222-85a1-c8444c491480", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9fb4709-df9a-4a31-a74c-768077e13d6e", "sighting_of_ref": "indicator--e746b5e5-383c-4fc2-a761-bcc7b0ea58f3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc00730-52b6-4678-aef8-179af5a83ffb", "sighting_of_ref": "indicator--f08369e2-5f85-4a3e-8f4f-ca45756ae1bc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1112a186-d281-4664-87b1-f2ee26b34dd2", "sighting_of_ref": "indicator--6b0ca499-196c-4a40-a683-baedd449d8ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0579c297-f026-4a16-8871-35e1f928168f", "sighting_of_ref": "indicator--b58c640f-f45a-4aef-ae65-239458b204a7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1da7df-762d-47bc-b91b-4319f63d5e3c", "sighting_of_ref": "indicator--62bf4e41-34fa-4936-969a-da5669b4ff7d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea9f392-d74a-4ed3-9514-45689cc7f92e", "sighting_of_ref": "indicator--680325e4-aa08-4982-bb25-5f808246ee23", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c75de7a-9284-4df9-85df-295fbc6833ff", "sighting_of_ref": "indicator--e587e439-c18f-442b-9afc-d6da8e59bb05", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e536b132-375d-4b69-899e-36dc3f74426e", "sighting_of_ref": "indicator--0c15aec0-14ef-4d4f-bd08-3590d3d84c87", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d8c305-95e5-483b-b09d-c06d9f0401d2", "sighting_of_ref": "indicator--5c39a831-f2dc-4af9-8bfd-bc00d85e30be", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0cf1ecb-5d03-4c0c-9595-9a672ae75a5c", "sighting_of_ref": "indicator--2f297332-9940-4274-97e8-539288c655ec", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7ccfef-cd71-4e4f-8c3b-c4b7944f80f0", "sighting_of_ref": "indicator--a12bd382-6d96-4332-9a7d-79dce840d3bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04866aeb-5d28-4b0a-980a-552bd477645e", "sighting_of_ref": "indicator--b5971bd7-28f2-4ea9-ba36-1b3afe23b421", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30efbc99-37f3-48d8-8fd8-2e7780916367", "sighting_of_ref": "indicator--b5971bd7-28f2-4ea9-ba36-1b3afe23b421", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e1f5ae-7f8d-4d6a-bc25-d6b13b9b2a91", "sighting_of_ref": "indicator--ac9a5ae4-e6db-432b-be2f-4e8567e91f12", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a52dad-00b5-4aae-bfa5-7c1c174d2ded", "sighting_of_ref": "indicator--356cf64c-cce1-4342-8c38-887379e023e2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6666266b-d1cc-4219-9828-c155b0dae1a1", "sighting_of_ref": "indicator--6b64fcc2-32f8-4738-bb45-9d8083b62ac9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358a069f-cd0e-449a-a2ed-6ff61459abc5", "sighting_of_ref": "indicator--f0b1c10a-2e6b-45eb-ba0a-d56e7d8fad75", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d735f69-593a-475c-9bf3-7ac5f8563689", "sighting_of_ref": "indicator--79f5f6c5-dd03-4a6f-bbd8-8345d91a1d03", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6512d8c0-1890-4e74-a7a3-755d669c8aed", "sighting_of_ref": "indicator--79d61e93-9572-4680-b50e-56a965e6cdd4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8147b9de-e3c1-4790-ba52-54e3feff2a36", "sighting_of_ref": "indicator--4f88b0b0-d040-4a21-85ef-bbc9436821fc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863506b8-139a-46f2-b9cd-44d0fd6d78bb", "sighting_of_ref": "indicator--789a4c79-7dfd-4ee2-8dee-2fdb2ea93a87", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe98a93-6778-44a7-9a22-d42387fb908c", "sighting_of_ref": "indicator--85adb523-7110-4f10-bf47-0c544ef8ae68", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ed5f26-8a0f-48b7-b1a0-6d7a58013619", "sighting_of_ref": "indicator--d66c3528-2051-4ff8-af1c-b0882edb66f0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdffe7a9-b711-4cca-bf3c-c5eb4b4c4da6", "sighting_of_ref": "indicator--5ccd68e3-d310-4ce8-aef7-31d61d4c5b23", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0ccf76-8f51-482e-b9e8-681ce6b6f697", "sighting_of_ref": "indicator--8c307a51-f0c8-406b-b871-79178eb0829f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6992057d-c80f-4b53-8fe0-7c89c21bb92e", "sighting_of_ref": "indicator--0016387a-906c-4448-abdc-b082a074c367", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e02df39-4c80-4015-bddc-143dee0d53bb", "sighting_of_ref": "indicator--2572cdcb-5905-45b5-aff2-1b03a51d2fc7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea6712f-1ddd-4458-9826-002e71a6c310", "sighting_of_ref": "indicator--93c0aace-c712-4af6-b552-869e06c4ea76", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba7222e-16f4-440a-b569-4c7ddd3591b9", "sighting_of_ref": "indicator--6f0bdaed-c4cc-41b2-9d00-a662f63c8f1b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90622e57-4f3f-4a81-8ccd-5df9e3c2d023", "sighting_of_ref": "indicator--afbafe76-5b48-43c4-a58d-03d441fde6aa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451cf9ef-fb47-4c62-a0f2-1040e0ec80d8", "sighting_of_ref": "indicator--f7ba4d04-7ca0-467d-9888-032ec3cb671a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e34e16-0ce1-43df-bdc6-c157d131c779", "sighting_of_ref": "indicator--4eaeac4e-738c-4e6d-a533-ffc9e270f996", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ad0f16-afaf-46f8-9435-146eff2b7d65", "sighting_of_ref": "indicator--9c631bdc-6ee7-4420-941e-2c7c48a4c1f4", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11fc4ece-b020-4f8f-9d03-77e42241d47b", "sighting_of_ref": "indicator--0fcb5c98-f203-4c9e-a7f0-9c39b43722db", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de746595-77db-4284-80aa-d2241089deb9", "sighting_of_ref": "indicator--6db9c447-bb62-42fa-830c-5df5684991fb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb42c11-e4ee-4ac2-a789-733abe7f48e8", "sighting_of_ref": "indicator--29588dfa-addf-45be-ae76-85f095f2f3cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f715234a-23de-4ba5-b59d-be75adfaa650", "sighting_of_ref": "indicator--e3a6e121-ef62-4056-8a6d-da4712cd9bc6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b41bb6-7ea8-4297-8e3e-64ce440f6630", "sighting_of_ref": "indicator--4f82f433-4dbd-4afe-8d5c-2d043daabda7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fab2103-1ba6-4043-8ed1-d0acf85f747b", "sighting_of_ref": "indicator--ae221c96-7552-4573-9000-7f74c4be6d48", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec667d6-c402-48d6-b6eb-a47c38e370d5", "sighting_of_ref": "indicator--104fa222-2954-4e06-85c6-de29f3121dd1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1399bf93-4a1d-4bc8-9cdd-35553d9542c8", "sighting_of_ref": "indicator--579d42e5-31e2-41a2-b1af-2bb344f60b5b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1194fc5-7d35-4326-9df4-d38f4d2f31cc", "sighting_of_ref": "indicator--647dfad2-8ab0-42f8-8c51-c66cf35d6c9b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea2cb87-fb4c-473e-aafd-9cfa16a88e93", "sighting_of_ref": "indicator--238f14f3-7257-406b-98d9-f3535ab0927c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe9db2e-bc68-4324-8c29-4c9b7af0d21f", "sighting_of_ref": "indicator--dc519bd5-10c9-4f7a-8288-33dd28c411d8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb50731c-c067-41bb-ab22-9858e6c8cda4", "sighting_of_ref": "indicator--740e29a4-5a64-4cd2-8d73-9cd2c83b78c9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276e86ef-fcf2-4944-a854-411b0dc19f5e", "sighting_of_ref": "indicator--f6fcc27a-0f8f-4f83-8238-5c064282c659", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d125ccdb-cc43-4828-abd9-72741f6c1a38", "sighting_of_ref": "indicator--eaf1abbc-ee15-4983-9691-fd665d352265", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--729cadb5-78c7-41e6-bde6-00d8f7aae27d", "sighting_of_ref": "indicator--abd3799c-a8ae-4f4c-9135-50e2c7d416b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5146ea2-c862-4cef-9620-a7359ac47c44", "sighting_of_ref": "indicator--d54486a5-28d0-4d18-9a35-2269fe0f4318", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd7d945-1e5b-4018-af67-c6b04d8ed47d", "sighting_of_ref": "indicator--e4ba7eee-0a01-4e9c-9a45-9c0413ba8559", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdeea256-0ca8-42f9-a6ee-962b343fee7e", "sighting_of_ref": "indicator--5ef61dce-f5cd-437c-95a4-ad8bdc308bc1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05268170-4eb0-468c-a5fb-87d81b599679", "sighting_of_ref": "indicator--0b719a7e-d2a6-4303-98e2-14b5794d9a9b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad8e3f4-c7b4-4700-8617-cd887b656e7e", "sighting_of_ref": "indicator--f9f3e480-46ea-4a8c-ab51-3bcbab825345", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f701ed3c-4f82-45c5-b45f-9fe1caa371f2", "sighting_of_ref": "indicator--0f9c098b-0315-42b2-b266-b85e70661bb1", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94ea30c-428a-4f77-926c-c6c631334421", "sighting_of_ref": "indicator--d0905741-a87a-4414-a28a-0bc63f259ba6", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709456dc-494a-47fd-8bbd-684b18e20395", "sighting_of_ref": "indicator--2c43b633-cde5-4ea8-a495-9a3069f1646c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b885e70-f6fe-4961-ac84-e9dedc20db1c", "sighting_of_ref": "indicator--39313a22-1043-4dd3-acee-85640339b4ab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb170704-3d18-42c5-b843-400a93408c90", "sighting_of_ref": "indicator--8afc26b8-b93a-4b9e-9314-9484f52d5fe0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99096b3c-5e02-4288-83d5-19b8f3a9f149", "sighting_of_ref": "indicator--6ac7556e-7715-47f5-a054-df26c530c368", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f70032e-8a07-4ea1-8e81-0b84110edd63", "sighting_of_ref": "indicator--22ef9651-1c47-4410-ba91-2847828805ce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70860b9e-f6f7-4206-9ae2-fbc9e9d463bf", "sighting_of_ref": "indicator--9f935a83-3b42-4081-92bb-8a1351c57bd6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ce1903-da61-407e-b7f9-1386e822ab34", "sighting_of_ref": "indicator--a90a3826-c9a9-4370-a87e-cfe79086bb32", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29439ca8-6cb5-4ca3-8af8-3a7ee2e2949e", "sighting_of_ref": "indicator--eeb51e51-9d67-46d8-8870-8c46decb5bd2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4859e8b2-8e1b-4bb0-9c8b-447774c1fd39", "sighting_of_ref": "indicator--eeb51e51-9d67-46d8-8870-8c46decb5bd2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4f49ee-d9da-4302-bb27-799e0be10a1c", "sighting_of_ref": "indicator--f92a2ec4-2a69-4389-ba27-acaeab6d1b56", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a577d06-cae2-4d75-9bee-fa247d773d9b", "sighting_of_ref": "indicator--02b669fb-0c7e-4e36-bec0-6b6bbddc1712", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23497be-83af-4e82-9fe8-c00e7ca68334", "sighting_of_ref": "indicator--37913948-5e03-4229-9c4a-c0ef72eef78a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac3297de-41f8-4a97-97df-e796cf982ca1", "sighting_of_ref": "indicator--b374a23f-1fc6-427b-a092-bb3d10293907", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579dbf28-ec88-49b0-a856-6141101ee913", "sighting_of_ref": "indicator--4036e870-8283-40f7-acbe-c007b6f1a4b4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb82ad7b-c1e8-47ed-9577-7515584306ce", "sighting_of_ref": "indicator--4036e870-8283-40f7-acbe-c007b6f1a4b4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd41c79b-be93-4564-8cc1-d620a657d57f", "sighting_of_ref": "indicator--0fd03881-7356-4d64-a43f-c0878e589866", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718d8ae3-4efb-45b6-8d02-c5b0dd249cf4", "sighting_of_ref": "indicator--0fd03881-7356-4d64-a43f-c0878e589866", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77781fa3-ea19-4c57-b697-846adaa296f2", "sighting_of_ref": "indicator--677235c4-da26-42ab-8b89-76ff77a38fc6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1846d4b5-bae0-4187-ab0f-e8d0b9cb61b0", "sighting_of_ref": "indicator--c2c34e72-0d92-4645-9c03-0fcc00f8dc77", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e65bc0-736a-414e-9da7-5c6eff8543a6", "sighting_of_ref": "indicator--4743bb62-f23b-43fa-8b50-b8d6c98bda32", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ec60db-b0c2-40f2-abd9-59ec8bff027d", "sighting_of_ref": "indicator--c494f265-7b3f-4297-9eab-c0f34b1e5e9d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4618529-83ff-453e-9b05-f4dab2931e51", "sighting_of_ref": "indicator--8f8d20d3-2f3a-40f3-a5dc-8d40f35d3ba5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4848858-3cca-4322-906b-86f6ba2c6a2d", "sighting_of_ref": "indicator--e8ab2dc2-e4de-4976-b928-ca496817ee39", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4dfcf1-87e3-45f3-b248-e808a38e8b42", "sighting_of_ref": "indicator--6e453c7c-1ca6-4226-bc5e-7d03cbbcce6b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca86ece-ccd7-48a3-ab6a-5a9b64ce0721", "sighting_of_ref": "indicator--60c53d96-05b0-4e40-888c-0739129b35ac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2637e4f-d130-43c1-a207-762a67e8237f", "sighting_of_ref": "indicator--d621337f-fcef-4094-b5ec-ec659712b8f7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fdc2375-fe64-44e1-9b71-612b5fde0444", "sighting_of_ref": "indicator--647b7edc-42ab-4f3a-a662-de21b8f9ed44", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f6a39d-be76-4c04-9a31-932e93485e1c", "sighting_of_ref": "indicator--e5e73357-5639-4dc9-8067-e1caef661b56", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b85ccfa-9e6e-4f15-bda2-78749c162386", "sighting_of_ref": "indicator--2ba45ad3-78e8-47ea-b40e-1b56d7732036", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450357e0-b312-4f44-bd9f-a8f00257893e", "sighting_of_ref": "indicator--d39879b7-a017-41e9-9c2b-e8a9f5b1d782", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a7549a-5850-4cb1-8dd0-f7dbb65a65b8", "sighting_of_ref": "indicator--a1452443-767a-44d5-b1ad-ae07bd2c86a1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07d45b7-58bd-4664-8d38-971d4e909e2d", "sighting_of_ref": "indicator--b132fadc-e804-4577-a398-eaa8c2da94ba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40aa6540-7453-429d-a526-4d0ba5813ac2", "sighting_of_ref": "indicator--4f84149d-0088-403f-9a54-ec4fcf8b5e1b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6a08ac-61d8-4bdf-95ab-ab55f29886f9", "sighting_of_ref": "indicator--b4341d9f-e485-48c8-aa06-e274c07751d1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0c967a-17fb-4ca3-b018-9da5264565af", "sighting_of_ref": "indicator--630abe19-5be0-4d16-93da-5f2e01d5377b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28555036-2d34-40ac-90b6-99ad8925ad00", "sighting_of_ref": "indicator--c3ccb234-27de-43dd-b9b6-1b90314024a2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29537de4-fdde-43b5-befa-719fe76b69e3", "sighting_of_ref": "indicator--d462f9cf-7b64-4e02-911d-7974afe9f7f2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920470f4-5df5-4828-ae5a-6bae0aea1c80", "sighting_of_ref": "indicator--46fef7f6-9669-4373-93e3-3010cf147a90", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873b0b2a-ec01-454e-99e7-d0aa4bffbcbe", "sighting_of_ref": "indicator--84ced8b3-5797-420a-8866-038d03e904c8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf01c87-2999-4f74-9be3-aaedabfa976e", "sighting_of_ref": "indicator--c9f5596c-31bb-4a28-a4e3-a361b2724a2c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f6927c-6fae-42f7-b232-4e87914acebf", "sighting_of_ref": "indicator--9f0be0cf-fbf9-439a-ba57-3f4039bf1c78", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3f5b81-64b9-4240-ae54-9f4af5b02ef8", "sighting_of_ref": "indicator--697846f0-f79a-447c-b8ec-a7a9bbe2e7d0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea0aa39-3065-4261-9936-cb6f518fc9c8", "sighting_of_ref": "indicator--1feef0b1-633a-4ccf-8778-8c18de716399", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6afc7d39-c1e3-4508-8679-7809a6456313", "sighting_of_ref": "indicator--96aa2890-2aa2-4451-a5d6-5c0c6b1a24cc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dbb8d02-8188-4231-911d-9c143d9bd386", "sighting_of_ref": "indicator--9cb16e2f-7730-4a64-bac3-0754b1421b9f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86299a47-f3cb-4bdf-a422-63a2b225fd07", "sighting_of_ref": "indicator--5465e6bb-e770-443a-835b-24615a384ee9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9612e567-f745-4485-a6a2-9590444a68da", "sighting_of_ref": "indicator--f08d3999-54ad-47f4-b274-7171011ca21c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5096dd6d-dcde-4718-9d6e-9808f44ae598", "sighting_of_ref": "indicator--bd9a0ff7-23e1-442a-b272-d51843af36d2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f6fb7b0-7ab3-4bfd-8aa1-2f8ecd0c15fa", "sighting_of_ref": "indicator--9d381c8b-241e-43ba-a906-7cdc8a268c67", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02bd7f18-79bb-464d-bfd6-0219b329d30a", "sighting_of_ref": "indicator--e8185503-24b5-4476-9a91-c7e7bdce9fde", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688777a4-de0d-4117-b014-928cf5e044e1", "sighting_of_ref": "indicator--b6fed314-ff84-43f2-8240-986cb1b382f9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2ea03d-a397-44bf-83e7-05d10563dab1", "sighting_of_ref": "indicator--e20d0a0d-60ea-42f1-bad6-8c57fceb4329", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c92971-5ac4-41e0-a36f-c2a8c4cd1d94", "sighting_of_ref": "indicator--ab29773c-960a-4138-96e3-6fcb50dda89f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf76a43a-641b-40e4-af27-06885cb1a482", "sighting_of_ref": "indicator--e7c985b8-6fcd-410e-a0b8-ad4ba2c47c50", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157ef67c-c337-41a1-aa51-da49347441b0", "sighting_of_ref": "indicator--01d1445b-e5cb-44dd-8099-857b02400b29", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44052444-a2f8-47a8-839f-2d7917a6d9d2", "sighting_of_ref": "indicator--48b10ada-865d-45c3-ae1d-3c0f06a40bc3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c845a05-bee2-4b61-b664-38b54064717e", "sighting_of_ref": "indicator--bf5d47ba-0ec3-4442-875d-70a939067b7b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da40d4e7-a17f-412e-aab6-6aaf33eef246", "sighting_of_ref": "indicator--eec7c79a-45d7-40a1-968b-1852a5e395ef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d20823-bb19-462e-8608-8051f7707e3a", "sighting_of_ref": "indicator--097c617e-e454-4b34-a0d9-aa812dd98b04", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ccc9f1-7acb-4bd4-b0e4-68b0b73b08a5", "sighting_of_ref": "indicator--03a93a72-84dc-46ad-80b3-2336718e4862", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14bb6ab-6039-4401-a60b-33442f7ea182", "sighting_of_ref": "indicator--cf3739d8-066f-44b0-b1e6-dd499ce2d5ee", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8befcc59-3550-4604-ad0e-91471c41bb60", "sighting_of_ref": "indicator--58eafa73-b2d9-4fea-ba17-07c4fa665463", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462c0356-acf3-4b93-8232-2e2cad8c86c8", "sighting_of_ref": "indicator--f1518ec5-6698-4a42-9c81-2d8cb8256f0a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe354a2-6681-4f5d-8898-728ef8b258df", "sighting_of_ref": "indicator--8d5c14ab-f923-493e-ad99-986c8fb5c73a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8caf4fce-d347-4f78-b94a-e5227c079c51", "sighting_of_ref": "indicator--51752e62-115b-4eda-839c-4f1949e6a6e5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298d113b-cd30-4969-a53f-a8e44ffd1f95", "sighting_of_ref": "indicator--00728c02-1ce8-478e-bbb8-98d56987db31", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e5787d8-f0b7-43fc-a790-527b23991891", "sighting_of_ref": "indicator--011a202c-21b0-4807-b36c-76be8020bddb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd17d295-52db-4e47-ab01-a2f955561783", "sighting_of_ref": "indicator--bbc555e4-d30c-4810-a99d-bfc56e83ba62", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a12d624-1d30-4fbd-b3db-a9b1b383ff97", "sighting_of_ref": "indicator--fef077ff-d666-4dbd-a15a-177a3a9b67dc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a78fee8-91bb-469c-97be-7f18fdd9a207", "sighting_of_ref": "indicator--44c8ec96-c58e-4f44-b700-3c7fa7e8b4a0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e842b85e-f247-4ebe-bdc5-f17b0494a212", "sighting_of_ref": "indicator--ddb58c4d-527a-4fa3-a178-8b2dd64c3e1b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9927e6-c3cf-41c3-9d13-17cef81ac0cc", "sighting_of_ref": "indicator--0f1ac17b-628b-400e-a7fe-8581d12f63ba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa643be-3ef5-4d9d-967a-f93686dfea84", "sighting_of_ref": "indicator--2e2df6da-c7ef-4fa3-9710-08f7d98ce2dc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e3eae2-48dd-4aa2-b9c4-cf2479fb7848", "sighting_of_ref": "indicator--9b75b8a5-2b1a-404d-918a-d3d5bb949beb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ef057b-1d07-46e1-9ace-17cc39ff64d1", "sighting_of_ref": "indicator--d2ce782b-70fd-400c-8c7c-25b8839bc0db", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a9ff59-f52f-4032-aace-e658028455af", "sighting_of_ref": "indicator--24c748a6-4169-4d87-9144-cff9d10a403b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd467e9-266f-465e-9f4f-c2c1362a9f63", "sighting_of_ref": "indicator--29f3db20-c047-4a2a-9139-b7f72518db5e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e842292-c26b-4630-bbd9-ab23e02e3a60", "sighting_of_ref": "indicator--c3276324-5efd-4063-b8e9-65b1a598d851", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd1535c-4ad7-439a-88f6-e705e855fc4a", "sighting_of_ref": "indicator--2a35e875-ffb3-47fe-95dd-fcfb87b6ff00", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82c9682-1b42-44aa-ba55-52e7c5be34bc", "sighting_of_ref": "indicator--6b2e4150-ac5e-4c97-a886-28ae3dd3e11e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0225bb-2990-4cd9-90ac-76948080e7bb", "sighting_of_ref": "indicator--c3abab54-96be-49da-9ee0-a3046ec42f80", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9f982b-2b08-403c-9288-78e51dcecc13", "sighting_of_ref": "indicator--9e57b500-e0e2-4a41-99f7-37d3fe9f3a75", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd2542f2-8302-41e9-be88-b5e3ce72a73b", "sighting_of_ref": "indicator--e7904343-7b9d-400a-a572-8fde8752efec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b309a8-9bc9-4125-9755-340f035116f7", "sighting_of_ref": "indicator--80652de1-755c-4e69-bffb-9d56f20dcd99", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f53de3-a20f-431a-8c9f-a6fdaeeca13c", "sighting_of_ref": "indicator--5b0ef0e0-5dd3-4397-b21a-8e45a40f10b6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a78eab-3a42-4f36-a6da-9ba99a910c82", "sighting_of_ref": "indicator--c52c5894-286b-4b1b-a097-31ce2fa582db", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02337a2-afee-4d78-9579-69b8489fed46", "sighting_of_ref": "indicator--fd723503-a1d1-427d-adb7-b232959e6469", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c041ab-f650-4f93-8135-3b3f377a09a3", "sighting_of_ref": "indicator--315c9457-eb2c-4c1e-868b-7da56b344254", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12fa1c04-2283-4efa-9cd2-c004278bf35a", "sighting_of_ref": "indicator--1223cc8f-0490-410c-a5da-81db65a09163", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c0a13f-0f8e-4e41-a025-9fa7255fe37a", "sighting_of_ref": "indicator--857f05f0-589e-4a28-890d-677dd3ef43d4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fefb936-266a-4e6c-a1a0-5ff5e2312afd", "sighting_of_ref": "indicator--2afb59a9-af96-4815-9b9b-5761ab4cdb41", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7bf86d1-b994-4ba6-a193-4b0ec8f87ee6", "sighting_of_ref": "indicator--94b7071a-2686-4da9-89b0-ecd53406a2e6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b34bc93-d06d-4b99-948f-e67a348ba292", "sighting_of_ref": "indicator--80157126-0aea-424c-ab0b-2d315fdf046b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceaed815-0054-417a-841d-a04ec1b8a843", "sighting_of_ref": "indicator--45ccb3ca-1060-4e1d-8813-768dee010a79", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31160f5-c4ae-4cff-ac34-e135d6dc75c7", "sighting_of_ref": "indicator--e999baa8-5a20-4bf2-aab3-35e44c857eb4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc45aea-bd05-4d33-9fca-5f8850cf2b6c", "sighting_of_ref": "indicator--4bb92e6b-f949-4fdd-9076-befc3e7dc231", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0725b6-ceb7-4d96-88f7-6215e983d79e", "sighting_of_ref": "indicator--12a3ef68-6091-42a9-82ee-d904c3ae1b3e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb206182-7059-461a-84d2-b798616db42b", "sighting_of_ref": "indicator--e8405821-6dc7-4aa3-a283-a0db6fb51f08", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063050f8-8694-4f4c-9a35-1695b27ac1e8", "sighting_of_ref": "indicator--14d3ce75-fff7-47e3-9c52-5181b5e72756", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecff84b7-ca37-4b2d-aeff-d17d1c7912fe", "sighting_of_ref": "indicator--0d2cec5e-25fd-46e8-b85a-57e62d65c902", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e26dce9-b03e-413c-b7e8-1d5598e7cb37", "sighting_of_ref": "indicator--39eac016-88b7-4aa8-ad01-cfce0cdc6cb1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3729f017-c22f-497c-961c-8a5ca6ab09e0", "sighting_of_ref": "indicator--3711a27b-e76f-40c1-ae28-30378e54edc7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f62b8c-7877-438b-84cc-811ce2e68cd0", "sighting_of_ref": "indicator--6d4f1980-c501-49c6-a2ee-316d4da2aaa0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3539fc-5c8b-41c1-8a8e-67078345781d", "sighting_of_ref": "indicator--d7a149fe-0f87-48c3-adb8-e732a77a0373", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4afad42-a1fa-4814-8947-57e678351477", "sighting_of_ref": "indicator--20d70aa5-9d53-4a54-953e-333138714367", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0c3ad2-46bd-446b-9ccd-9ef3e28a5113", "sighting_of_ref": "indicator--971cf7d1-c9f4-47df-ae32-c1847c8e3e36", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089e7c58-0ef9-498d-a517-0901abd70a33", "sighting_of_ref": "indicator--12c040e3-9228-446c-82d1-cf57f3f04fc2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97cba69-c4d0-4e08-9725-37789222f378", "sighting_of_ref": "indicator--91e27bb8-2390-456e-98d9-e5e59fd24891", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8049862f-1ad6-4c2c-9117-2887be326088", "sighting_of_ref": "indicator--9f997459-b1ed-4159-880a-62d0b0e65bea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e77abb8-1ec4-4ca9-844a-87d686220f35", "sighting_of_ref": "indicator--51551bb9-727d-41d1-9236-7662818b3881", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f537f06-65f1-4971-bdc6-640324c0815f", "sighting_of_ref": "indicator--b4fda302-66a2-449e-88d7-4adbc84d0c04", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb48a78-4218-4874-9725-f6ad5edbcc51", "sighting_of_ref": "indicator--cbf4468f-20cf-4e01-bf56-e52c32a08c47", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d2c42b-4a90-4074-8941-365a73bd1ec2", "sighting_of_ref": "indicator--d9ed12cc-9e82-4556-88dc-1cbc567fe5e2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad301f92-2ac9-4d3a-9b83-17a12d73e155", "sighting_of_ref": "indicator--b26b8ebf-35f7-4a93-a2ee-d1f6a22af685", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09402481-7e22-4066-9064-092cce9be1b5", "sighting_of_ref": "indicator--baf93f7d-86d5-472f-9c4f-4c9e33c93d87", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a208f29c-dce5-4206-b86f-e0e6ee324dc9", "sighting_of_ref": "indicator--d8f472ba-57c2-4d94-b375-770009fce553", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b31877-d88e-4528-b8e4-79508c7acd93", "sighting_of_ref": "indicator--73414bef-ed09-40d3-970a-1a814795ca00", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd42b95-628d-4c3d-ac70-036daeb57c9a", "sighting_of_ref": "indicator--44e0ac16-033a-47ce-9cb9-db4ee633f0e8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ec13af-67f7-45bd-81b5-0fb8298c238c", "sighting_of_ref": "indicator--2173a3f2-4944-40c7-83ec-519ce6c88e53", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15efe783-f428-402c-8a0b-80db4c1b310e", "sighting_of_ref": "indicator--923455a2-6833-4333-9e2a-186c8bdc40a0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19806f97-d30a-44b1-804a-3f1bfafde34f", "sighting_of_ref": "indicator--5a8831ff-e4ac-4d41-bc17-3d4ad6af5398", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ffb83c-2b0c-4666-b1c7-52408674d40d", "sighting_of_ref": "indicator--c3ac84a6-f33f-49d2-b772-ee539ac2e8f7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa9286f-2932-4fa0-bdda-5708507380dc", "sighting_of_ref": "indicator--fe48ebb9-bf4e-4a55-95b8-1a8ad908ac3d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf78c4b-aec4-491d-b1b2-1275e6fea203", "sighting_of_ref": "indicator--3a3a0080-faa5-4259-a7c2-8c813b7602f1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b36b9be-bcb5-43be-a18e-a2ce97a72ec5", "sighting_of_ref": "indicator--86b1db94-24aa-4176-acda-77ef73aec37a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89472707-cf9e-4577-8aec-aee6f3bc38be", "sighting_of_ref": "indicator--6a73bacf-1389-4830-8a3f-9b858dc93b96", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad77696-d944-44d5-b5de-20b3c6d69a49", "sighting_of_ref": "indicator--9d956663-5b4a-40bd-8192-0ec66081d405", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5151069-c4cf-47ff-acf0-12f5a5e95a29", "sighting_of_ref": "indicator--f053f107-a63f-4677-bddb-483356237b29", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--994279bc-5058-4d05-ad71-1274b3c72aaf", "sighting_of_ref": "indicator--8784c586-52d3-4d63-8ac7-4a830e37a2ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a57cd1-4ef3-45a9-94e4-51cd99760486", "sighting_of_ref": "indicator--189e753f-8f3c-4869-a71c-2b032738bd11", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c611d0-0a1c-419e-9a83-aa145f6bb8a4", "sighting_of_ref": "indicator--85a23c61-51c9-4bb6-b083-a55d2dcfc6dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d63c757-890e-4662-a43d-13135a34d513", "sighting_of_ref": "indicator--225303e3-73c4-4f2d-b589-f1b0340100b7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9538f9d1-990f-49ba-91ed-638ee6bc7db0", "sighting_of_ref": "indicator--c1b7a1eb-3c7c-4d19-a392-d89c72e07064", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ec691e-98cc-4b4d-9d17-79d18ea8b486", "sighting_of_ref": "indicator--eeddc478-f70e-4bf0-8f7c-e27a4838024f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2880178-bb36-4363-aecd-4445e30782c6", "sighting_of_ref": "indicator--8f7a8bdc-e9db-4ec7-a83d-961036c0df54", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab3fe3c-0aa5-427e-b66f-10d179dec9b7", "sighting_of_ref": "indicator--f670893b-ff5b-4c7c-8f91-9c6956ebd66b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107472ee-d14a-4806-9ee4-388779be7ccb", "sighting_of_ref": "indicator--626e761b-0766-4eca-be29-7dd58c3ae1cd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8225a8-9f5d-4476-bc7a-16406de42a14", "sighting_of_ref": "indicator--3ab3161a-98fb-46eb-88ec-abafe22964ca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e4451a-0a51-40c6-aeb7-2b10b957efae", "sighting_of_ref": "indicator--47e9fd37-b9f5-48f1-97bc-5968e4b4bcfa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85157178-9e22-4873-934c-891842a6defe", "sighting_of_ref": "indicator--6bf46ff5-bff5-416a-bca8-d56b7887a759", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab6e55a4-f09d-409b-8532-eb32c8a48963", "sighting_of_ref": "indicator--65913ea2-1f77-4e1a-8416-4e1179f6db10", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf02fb9-452a-44be-b84c-888041482be5", "sighting_of_ref": "indicator--57324fd1-3022-4fa0-bc31-d0502df8ac17", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500044d7-aac5-4a3b-a2c4-d73e7ee87b2c", "sighting_of_ref": "indicator--9b841e4a-b073-44a0-98b4-bd6484b956a3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d957bb-4369-43da-906d-17b5cb9d34e6", "sighting_of_ref": "indicator--8653c083-cc12-47ad-b2f8-3e9f66089033", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8110d029-a882-4c07-a54e-580e382dd1dc", "sighting_of_ref": "indicator--7a96435e-82f7-4a65-ad1c-a84e7baa30ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9fbb2f-f35b-4533-b2f1-f042f91a5604", "sighting_of_ref": "indicator--3cf441d9-f23c-4e95-8cc2-1fd72ceb8e16", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a7d039f-d3b5-4b76-b6d8-0bac4414d881", "sighting_of_ref": "indicator--13857845-1a09-4170-b5ba-e9c04344899f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4e0fc6-44de-4ce5-85e3-bc9353901f76", "sighting_of_ref": "indicator--4095f84c-1ccf-4e26-a8b4-91095009c542", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca60c59e-8ff3-4399-88cc-70f5283ade7f", "sighting_of_ref": "indicator--0d20dfd5-69c3-4be9-95a5-176d419e1668", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c94583-a76b-4fa6-8c21-e0c144d8f702", "sighting_of_ref": "indicator--47451158-841b-4f1e-936d-62708a85a505", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6372f971-efb8-4e17-94d9-84cd7cc733c4", "sighting_of_ref": "indicator--68bca6d9-352c-4cb3-939a-3242a6a5e5dc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b2ac125-12c3-42a3-a900-099b29a09835", "sighting_of_ref": "indicator--135fd400-95f8-40e3-8cd8-bc21198a4c27", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e69b09-6114-4673-a4b2-49772c40489f", "sighting_of_ref": "indicator--6664360b-c0bd-4534-adcb-2506b820a1cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745a3be7-c323-4239-a094-2265b23d0e22", "sighting_of_ref": "indicator--df2ef421-ec98-4169-a532-6b0859851350", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf6df6a-d478-4186-bb9f-5d4d445ea3cd", "sighting_of_ref": "indicator--bcef9f89-2ccf-4b64-9271-00e5965f3c9f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac5954e-000b-44ae-bb30-eec5c826fbda", "sighting_of_ref": "indicator--2f51c6bf-69a5-49d8-95a2-906b59910b94", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--defe7ac9-7538-4836-8026-8ebcb24ecbfd", "sighting_of_ref": "indicator--4b4e62bf-c755-41dc-95fa-7d2f095f8d79", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922a299b-4813-4879-8749-7e550139d14d", "sighting_of_ref": "indicator--7cb759db-cd8c-4898-8eda-b8ee4e9b1e27", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d589f38-ecf0-4166-9382-fe0421277bf5", "sighting_of_ref": "indicator--3aa1a600-8a40-4086-b163-d2b88bf1b4bf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ace7bb2-87b0-4c26-ae78-534b6c6821fc", "sighting_of_ref": "indicator--5094f6ca-fddb-4d3c-8663-90f942e274ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c14013-82e3-4f51-b573-bcd2c94bee35", "sighting_of_ref": "indicator--2ad2a76f-84da-4133-8163-1a0a937a40ac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb8c55b-01b3-45aa-a81a-fe65d2249b3a", "sighting_of_ref": "indicator--43146a01-0560-4108-af00-26058addbe0e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faee73a1-a2c1-498c-86a6-52a5f08d5d80", "sighting_of_ref": "indicator--556ac50d-0f91-49ec-a233-6f5ce0fefc61", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd363f2f-0320-403d-b9e3-59940ba64bdc", "sighting_of_ref": "indicator--aab00660-57f7-4d95-9642-2848b70e70fc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c48f59-e806-4038-b6d9-39cb8a603984", "sighting_of_ref": "indicator--ddc37077-fb95-46bb-8eec-30941e1fe34c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd985179-b34d-4a48-809a-736dc22ba568", "sighting_of_ref": "indicator--f129187c-e3ab-4a5e-9f94-f82728853502", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--424a540d-31d8-43c2-9056-f6b56d363f9b", "sighting_of_ref": "indicator--f7fe726a-48f5-4c45-af0f-7ba731dc668b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f212b140-1074-4fe7-9736-b9e8ca9f52a4", "sighting_of_ref": "indicator--7c043ac0-b1b7-4ce7-8e39-d55a88b7b0e0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d837126-9daa-4fb1-8826-063a5692e6ea", "sighting_of_ref": "indicator--95e57071-367d-47c6-98c4-8a8f2936dbd5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce3b2eb-038a-4d47-bd4a-0e2b56176fd4", "sighting_of_ref": "indicator--73090652-627d-4b2b-9cda-5a625fd9792a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b44620-3df6-4dbb-ac8d-d928f369e262", "sighting_of_ref": "indicator--74057aa3-021b-4854-96c9-2377c4d0ad5f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c886d681-0b43-4e47-8908-1848750afad0", "sighting_of_ref": "indicator--859d9648-3ed5-4be8-8c68-7e24c5225346", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f2ccb4-e745-4be6-aa8f-447b11cad433", "sighting_of_ref": "indicator--f194cb81-b653-4b4b-a15b-df0ee07b2dcb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83cdc32e-c643-496f-93a0-ac932f3e8ae8", "sighting_of_ref": "indicator--e33770cd-f34b-47c3-aec2-7d93825c45e6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20a43ab-1f8e-4043-a225-133ffa4740a5", "sighting_of_ref": "indicator--09a2ff95-28b4-4d87-bb7d-4d3d3480a781", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dbca738-54a0-4850-93bd-d6f0aa4f737f", "sighting_of_ref": "indicator--c25bfb7a-06ce-4e28-b749-b3ad28a2eceb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354df7f9-c7f9-44a0-ab97-f88ad03ba96c", "sighting_of_ref": "indicator--cbc68b72-bd0d-40d4-8f01-cb65b8ff8458", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664ba0c7-85e3-4019-a96d-26dbce5d95fe", "sighting_of_ref": "indicator--a6a46fe2-71ac-43b4-8901-ff657eef732d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67004a3e-5d00-485c-8100-6f44c3f7a25a", "sighting_of_ref": "indicator--55c98f59-cd23-4dd0-bf9c-efb2a72888c1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef221c8-0bdc-4321-bf0c-4ea1ed08e3c8", "sighting_of_ref": "indicator--a27c8fcf-4b0f-4a71-ad11-f27a39cbc002", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d8b658f-ca16-466a-8972-39bc7abbed7a", "sighting_of_ref": "indicator--a61547f3-ac40-445e-9c98-73d327f30f2e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f6533e-963f-41a3-a985-b51cc32873cf", "sighting_of_ref": "indicator--ddfd60a5-87e8-4377-9af1-19165c93454b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa77708b-0a38-4de7-aa3e-0bd32298089c", "sighting_of_ref": "indicator--104b0196-54bc-47b3-851b-293b9f2fcf0e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9529f55-2eb5-4965-b11a-1b02674d8486", "sighting_of_ref": "indicator--7861c9dc-2ea4-4ea2-9839-dad561c91572", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32ef759-4b8d-43f2-ba7d-dcd74f4ed894", "sighting_of_ref": "indicator--0f132a78-0139-4b5a-a1f3-4044d7e96892", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c2a944-e076-4fb1-ae8d-d9eb7c00327f", "sighting_of_ref": "indicator--fdf0a05c-d98b-4b61-a19b-b79bbf3d1d7f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a9c06c-8d01-465f-b087-bd33e2ee54df", "sighting_of_ref": "indicator--b9a53b71-eee8-487a-b6b0-7bdfbb379e25", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18fc2768-ae66-425a-b283-904ca40d1633", "sighting_of_ref": "indicator--6f5e01d7-3ea3-438b-87b5-9319b35e15e2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57aa06b-d58c-4059-9414-98d1017fcdd9", "sighting_of_ref": "indicator--d3b2ea9c-9b3f-4f56-b42d-c5074f3822dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddbea3a5-a6b0-4cb8-b439-654294f4075f", "sighting_of_ref": "indicator--e647f9e1-07e0-42c5-8432-a1685aa6d745", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ccfbdc-e3ec-400f-a6eb-4fbb50a043cf", "sighting_of_ref": "indicator--e6feab62-bec9-4007-86c1-3c893a9230b6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782aa917-4811-4e56-812b-78b15618817a", "sighting_of_ref": "indicator--930a27c1-2352-4b8c-a937-dddc9d1efc3c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a330f16-8242-41b1-beb9-acf5d7b38317", "sighting_of_ref": "indicator--b9a9c1c6-69e5-4cd1-a58e-d5fc6b8846d9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--140e7309-496e-481d-934c-359b8174668e", "sighting_of_ref": "indicator--5cca7406-b4a6-445f-8523-b7ecf90d0b6e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8c0270-e5b1-4266-9b03-6209cc31c928", "sighting_of_ref": "indicator--6d832564-30cc-4d49-85f7-79d1e70628ba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1deb9d9-4c02-4d62-b70f-36ebc881e757", "sighting_of_ref": "indicator--73905d67-0054-4522-8390-a6234a79f4a9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3984a319-b571-4ca5-b30f-0cd63e9e568c", "sighting_of_ref": "indicator--b27e66eb-bfae-466b-85cc-b83c82660b8e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5beb552c-fb18-4a9b-b27a-37d3d1d6b1af", "sighting_of_ref": "indicator--f2a586ca-a870-4d9b-a35d-b5d3f002534c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f47041-9db6-4f55-a4e1-46151fb713d2", "sighting_of_ref": "indicator--bcf49a9a-3f1c-4225-a284-a8210efc7b88", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9238cf-f4be-4315-ab0f-1c4497ecf1fb", "sighting_of_ref": "indicator--42a0bb66-f22b-432c-bf6e-78ee599f2d6f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa21448-9a15-4df7-99b7-dfd65ce2f4da", "sighting_of_ref": "indicator--177f5bd7-d83b-443b-b606-8eb8e4afede6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5f3dd2-6e55-405c-bce8-1837461bacf2", "sighting_of_ref": "indicator--1dd8be02-f998-41cb-824b-d62c2ac82256", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac0e5f1-10b9-4dd5-9ca3-9ea20d63fb0e", "sighting_of_ref": "indicator--ffe4b274-4530-484b-a972-8a28da477143", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23f70aa-6295-4a1a-bd43-9667a1a9a5a0", "sighting_of_ref": "indicator--c28f9ce9-c4bf-4bc5-8956-bbe99cc5a615", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af5d9bc7-6b95-49bd-9b9f-d38f6d78c793", "sighting_of_ref": "indicator--0c4dfca1-0ea8-4a54-873a-76d4b60ff79e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d709a2b0-27c3-4a37-8a7c-3a21bc5e7c3f", "sighting_of_ref": "indicator--412ce021-851a-486f-bd1f-ec9ab92d4169", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc6aaec-1f7a-4dd5-b5f9-5205ecfc380a", "sighting_of_ref": "indicator--528b6beb-1490-4281-9f4f-ce16bb3fe49e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb499902-07ca-4233-8d1a-a0ea2eb1e8fa", "sighting_of_ref": "indicator--f01610e8-bacc-4ed8-b410-525ee3c6194b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566efa31-ae33-47d9-8d18-b2d6f478422d", "sighting_of_ref": "indicator--cfb0c127-1859-4118-b2bb-99d93193ef64", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8875439-b478-498c-8328-0cab5de9e5bc", "sighting_of_ref": "indicator--18fd77d3-006e-49df-accf-f5ff1f3b34aa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b55263-e4f0-4ea3-9d4c-caccfb56efdc", "sighting_of_ref": "indicator--6be41740-7e9f-4675-a1ce-0c9abe8df824", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f174ed0-b05e-4379-b996-ee5884d3a59c", "sighting_of_ref": "indicator--17c79f42-d03b-4943-b94d-f8661f8d87f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a866c0ae-8aa2-4cb7-8365-09a44bc74bf4", "sighting_of_ref": "indicator--1517f576-da7a-4345-be03-6943ecc4e36c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b7270be-2949-4e0b-a7e8-aed8a6cd3e14", "sighting_of_ref": "indicator--2f295893-1916-445c-85f4-98fe69633727", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e56c53-8307-45a8-b6fa-77a0c51eb25a", "sighting_of_ref": "indicator--8d5a4d7c-809b-49da-a31d-7c2acc49ce2b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5178cd3e-300b-431c-87b8-26364dbee338", "sighting_of_ref": "indicator--3315dd7b-64ce-49c8-89a1-3bad93d76acd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d48e9812-b323-457d-8ec3-1072be8ad147", "sighting_of_ref": "indicator--cefde76d-61a4-47b1-8256-a31490eea396", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cffd279-f58a-49fb-9f5d-75f5806b24cd", "sighting_of_ref": "indicator--81fe0258-7913-48f7-876c-53009a971369", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf63f4f-c9bc-4d07-94a5-38eb9533b85e", "sighting_of_ref": "indicator--9da4c4d6-98f2-464d-8338-3283fd32a489", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14bf8467-d263-40b6-996a-cf0087a46700", "sighting_of_ref": "indicator--bb4e7872-0590-4e2d-a040-c189286b849d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb1573b-b50f-4190-9891-8e305c0b0807", "sighting_of_ref": "indicator--eb720dba-b999-4258-a39a-2128695cc523", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc94465a-3666-4805-b6e8-49438dcfb8c0", "sighting_of_ref": "indicator--039c90d2-c88d-4c7d-8799-16a845d328b8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a141eb-b486-492d-9865-4830f1405937", "sighting_of_ref": "indicator--a6d42854-cef4-4667-a870-3d5221b77e06", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d6c7f3-53fb-4abd-b16b-769bb570f68d", "sighting_of_ref": "indicator--eafdcd7e-cbe4-4537-91c5-8e564499f553", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951a3ee9-19d1-4873-8c63-3101bc369ddc", "sighting_of_ref": "indicator--82108e8b-e93c-4c65-8862-2c49e014c6d3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056238ed-989e-403b-a8e8-070333e97198", "sighting_of_ref": "indicator--aee127ec-5595-4a57-9700-b3c1a613cef4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58066d80-294c-4194-ae86-cfe27370c261", "sighting_of_ref": "indicator--3b3f2f96-2597-4bb5-b3ee-431cf9d5b04b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e9645b-f9fe-42bc-a326-d8489cdf3118", "sighting_of_ref": "indicator--8b5d99db-8663-4033-8512-52cc846aa68c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2501af-5c50-4b5c-86fd-8ccb6a6cfd9e", "sighting_of_ref": "indicator--7b8abb36-7d43-46d6-acbe-ea2bd2b07b7e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff51ea2a-4e7b-4559-98c8-c3526ee33d81", "sighting_of_ref": "indicator--319096fd-b92b-4b5a-8049-516885d7a3ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7613c0be-70fe-415f-9241-f8c1e83ce62b", "sighting_of_ref": "indicator--927a6851-8f47-45ef-a5e6-6295f7243c86", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17eb8a31-ac44-4233-9edf-0bbfcc0b5baa", "sighting_of_ref": "indicator--59a832d3-ae65-4254-817a-d39c1521dffd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac237fc3-c1db-4070-a796-c27f61d6734c", "sighting_of_ref": "indicator--a4babaa1-b03d-4642-9835-05327c7f2dd5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce3fac05-bf54-4576-8506-296ab3c2e154", "sighting_of_ref": "indicator--7a77f2f2-5c2b-4be0-b24b-505a65a7f11d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675d45de-d759-4b66-b439-f0004806dffb", "sighting_of_ref": "indicator--7c911039-549a-4321-a98a-5362b7b03e82", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18fe8837-b93f-470a-90d6-9d415dd22d93", "sighting_of_ref": "indicator--eb3dc3d3-1732-47da-a412-2b0e8ab2c3e0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dfce437-7602-405e-8837-8997efef608c", "sighting_of_ref": "indicator--abe11779-3966-40c1-9c1c-05445617d17e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a7a455-56cc-44ac-b843-ebd64b617e0f", "sighting_of_ref": "indicator--64550220-6372-4523-a693-9b7d24b0c2a2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--543afdfa-2d31-461d-b926-6451fddb5187", "sighting_of_ref": "indicator--f7c50035-cc62-4d76-91bb-e3b398935f24", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2e09df-28e1-4e54-90df-3c1d847abb04", "sighting_of_ref": "indicator--feaef278-82c0-4c84-8a98-26fa2ae0234d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edaf837c-8bba-4bd8-b03c-6f9d491fb819", "sighting_of_ref": "indicator--f4a2f072-259f-4fc5-8dd8-d0541fb6fe33", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--081f19b8-654e-48e5-a965-972d37a864b7", "sighting_of_ref": "indicator--61c4db1f-ddd8-47db-9bb4-b40003267628", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710e3296-aacd-4b0f-8442-3b45c3554028", "sighting_of_ref": "indicator--5e1dc656-dc69-436f-83f3-410ec33a7c82", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527e7b3d-4613-4385-ab60-af0fd1bb3cff", "sighting_of_ref": "indicator--5e1dc656-dc69-436f-83f3-410ec33a7c82", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e915bc-49d0-4eef-b2c4-fdd0f9d5dc7f", "sighting_of_ref": "indicator--2390fce1-163a-49e2-8f67-e048a817e0ee", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901c8764-3e6d-4210-a836-832dca35e988", "sighting_of_ref": "indicator--2390fce1-163a-49e2-8f67-e048a817e0ee", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9804a7db-80ce-41c5-81cd-62f9b4949ee4", "sighting_of_ref": "indicator--9c613abf-5d46-4154-8546-ffc570338cf0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7db5721-181b-4cf6-83f0-30c7fa4f0d9c", "sighting_of_ref": "indicator--9c613abf-5d46-4154-8546-ffc570338cf0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88b5a4c-331d-49e2-8af2-aaa711a2c2ad", "sighting_of_ref": "indicator--6818fb53-c9a7-4ca1-96f7-b8d2a20f3f38", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33d8527-7fce-4c77-b489-591771883056", "sighting_of_ref": "indicator--6818fb53-c9a7-4ca1-96f7-b8d2a20f3f38", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e04b76-57bc-4467-88ae-61f84e9b272e", "sighting_of_ref": "indicator--3b6df237-f304-47b1-a9a2-ce4c3fb0bf66", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e351a7ce-381b-4d06-a579-05f274dc1263", "sighting_of_ref": "indicator--3b6df237-f304-47b1-a9a2-ce4c3fb0bf66", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e748d1-dab3-49d2-a56a-e17582451aef", "sighting_of_ref": "indicator--a6339507-14f5-4e80-83ab-55a560cd0362", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b678b32e-e7be-4f63-a1ea-52103e9c4f71", "sighting_of_ref": "indicator--a6895394-9592-46b4-aea7-fa8cf7e215f1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d07ffa-0429-492b-abd5-8ab3cd79716a", "sighting_of_ref": "indicator--9c5c05d4-1767-4158-96d7-9734286d0a5b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e331cf-5985-4ddb-b8f2-e408dc45db2c", "sighting_of_ref": "indicator--a9e2c3ac-1fc8-45f4-b942-bba3df8334ab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a2c308-25b3-4fc2-9588-052aced9e950", "sighting_of_ref": "indicator--56ab280a-9524-4b20-8830-74d83f6cb0ad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78efde0b-1c20-420d-95dc-cc73f230f483", "sighting_of_ref": "indicator--c6f2de51-5fcc-485c-957c-8c2202ede475", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f40505-6178-4280-84d5-c75a50a37382", "sighting_of_ref": "indicator--2c12e6b8-7ba5-4073-9d9a-8d699e909b63", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b89c8bd-fd13-4d4f-9686-21e44b07d913", "sighting_of_ref": "indicator--7651c3fc-29c0-420c-86b5-41050eb667e6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b335997-841c-4c3c-a1c6-4838ef8bb13a", "sighting_of_ref": "indicator--7651c3fc-29c0-420c-86b5-41050eb667e6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21da06a7-50a9-4de2-94ad-e38b2fe17d03", "sighting_of_ref": "indicator--5ff46ea4-57b2-4e8e-a62f-fe38a95860a9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec87520-a288-44b2-aa9f-44d19c0963f7", "sighting_of_ref": "indicator--4e0b7ec2-9731-4f07-9c6e-7a924e9eb0bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36569ab1-718c-41ef-8505-c7bdea939251", "sighting_of_ref": "indicator--7804bf8f-aad7-4ae0-a5b9-0f77f922f533", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c64471-5937-411c-87e9-c733b4685915", "sighting_of_ref": "indicator--c70b96d3-0f07-449b-9525-3d035a81cf7a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56956e26-fd64-40e3-b6c5-ffe13eaf527b", "sighting_of_ref": "indicator--81411bf6-2571-4e18-922b-adbfd8612186", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc56d53-c328-4b5c-8c59-74eec07c3111", "sighting_of_ref": "indicator--8c275461-504e-4bc7-9d23-7abc2b433ec3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7896cf0-e70e-4186-beaf-f6fd5312e6c6", "sighting_of_ref": "indicator--adcadf21-de9b-46f8-b0f0-dc56c1196cfb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7af6e8f-5206-4c5d-bfc1-48599373b73d", "sighting_of_ref": "indicator--f59e8075-64b6-4a78-9852-7fc8a6317af1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde52ab8-7019-4a0b-a100-d876b05d6d45", "sighting_of_ref": "indicator--30c57007-573f-44ce-b2f4-95368deac1db", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75490d0a-7742-453f-85ab-0d71f14e4fb6", "sighting_of_ref": "indicator--1c0759db-2340-47b1-b873-5b7b48a4a8b8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf6df8a1-743f-4d1b-8e0c-ad85447c6176", "sighting_of_ref": "indicator--32deabba-aae4-4f73-ab20-0633f2ba5f91", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2eb854d-9f63-47e5-8b17-72ce2650db62", "sighting_of_ref": "indicator--06b02685-05ee-49db-ad97-38540b33a696", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2d79f7-0da9-4fcf-8d34-5d1c3c199712", "sighting_of_ref": "indicator--71502b37-388d-48d5-9e1b-74213eac5f0d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc48198d-e322-45f3-b07a-f6c79f2bd59b", "sighting_of_ref": "indicator--6b04649f-10a4-4b91-8b1f-e515876ae01b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8024b4-cd27-454e-bc41-9b7b24c8420d", "sighting_of_ref": "indicator--6b04649f-10a4-4b91-8b1f-e515876ae01b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21561ba-641c-4ebf-937d-1ec7e5dc3719", "sighting_of_ref": "indicator--f7fad1a5-3dfb-4646-9938-34df854a03ce", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b2be32-7fc3-4981-b47e-5f4b74aea077", "sighting_of_ref": "indicator--11287229-087c-468d-acea-a897adeb7b7f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e67bde1-9d39-4399-b0bd-6fa3c93d4fb7", "sighting_of_ref": "indicator--4a700c4e-6255-46d1-9463-1b1a81a7c767", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc66f5db-19d0-4d3a-8746-b47b8563bbad", "sighting_of_ref": "indicator--4a700c4e-6255-46d1-9463-1b1a81a7c767", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f30ea9-5181-46a4-843d-a846e3bb770e", "sighting_of_ref": "indicator--f850b0eb-7ad6-498d-a201-c05cf66b7d1d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719bb3a7-285b-4f3a-9e99-bc66a026e67b", "sighting_of_ref": "indicator--ef8c7acb-d2c5-43c8-85e4-b58e980a24ed", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f14bd71c-c25c-4466-96e8-30cf59c282a5", "sighting_of_ref": "indicator--ef8c7acb-d2c5-43c8-85e4-b58e980a24ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce4a3f61-10e7-47cf-9a6f-e27a1ea554f2", "sighting_of_ref": "indicator--51f94fff-19fc-4d66-824c-a07dfd7c2c7d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c95f7b-8ac2-470d-8ad1-197139867752", "sighting_of_ref": "indicator--e77d8318-ef8c-42bb-bb81-7a7608ab9ff1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7eda553-5b90-492e-9ece-69f7dd89717a", "sighting_of_ref": "indicator--c36ab6c9-c4b4-4533-8129-09679dcef9a9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22226cc-0563-41c3-88d4-1483d5fd8424", "sighting_of_ref": "indicator--f6ad026b-56fe-42d6-afe7-de246ee9448e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--850f8db0-dcc8-4d04-84d4-b77211e47e4e", "sighting_of_ref": "indicator--76ddd68a-91d3-4e90-931d-d3c304780032", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4926ec7-9913-40d9-83de-50579b12fcf0", "sighting_of_ref": "indicator--76ddd68a-91d3-4e90-931d-d3c304780032", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a1239af-ced7-4d09-96a3-6058e2f2b4b7", "sighting_of_ref": "indicator--6ffe1c74-1b46-4d80-9cbf-e6b785bbcc0e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848d9c14-de27-4add-aafb-ac417a8af2ff", "sighting_of_ref": "indicator--79b3b614-2fa6-48ea-ad71-5121f5ae3d72", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20130485-654e-47da-828b-b35dc313760e", "sighting_of_ref": "indicator--c9af2189-176b-4dee-8062-39f1171c9bd6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb042704-2ac9-448a-b61a-3082f4d05df1", "sighting_of_ref": "indicator--dfe04dbe-6be5-4db5-a24b-b77a6eca9003", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2840c8b2-ac77-4ae1-be0a-80569becd896", "sighting_of_ref": "indicator--c5cdc321-be52-4d97-9d99-fa95f95428a1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb920f8d-c8eb-409d-b9b1-de8c9940893f", "sighting_of_ref": "indicator--6b48b8a6-2952-4245-9d4b-43b487c8229d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb60c03c-d4bb-410b-8412-f06edbdb7abe", "sighting_of_ref": "indicator--b49eca74-8411-4ab5-88b0-ffad7d3b9391", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df311dd-412c-40a8-8bee-6b913be2a28b", "sighting_of_ref": "indicator--dcf3785d-0c57-401f-b266-803175a41535", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--478e0772-1115-4f07-bc92-0f93f0fca437", "sighting_of_ref": "indicator--ae15cfe9-df24-43c4-9c49-acdf3b706e81", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a814b063-26e1-4f11-9818-58d574dad631", "sighting_of_ref": "indicator--d8be8c9a-7c99-4703-b393-e4ef529de582", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4780ee07-6989-453e-bb34-6eb5e98cd1de", "sighting_of_ref": "indicator--654adcb0-d7fb-46a6-b590-704a15e10919", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd70e683-f9a0-4863-a67f-062f20032a44", "sighting_of_ref": "indicator--b91ad0f7-f247-4a62-9932-315d8a3f3a69", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a252cf51-c37f-4d47-bb55-2c560f680c1f", "sighting_of_ref": "indicator--36af02a6-ddc2-4fba-ae88-24ca0d5554b6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd32b7b-eefb-4498-bd8b-c431e64af7bf", "sighting_of_ref": "indicator--926aea40-b086-4d58-968f-528147a907b8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e472f87-e17d-419b-b226-d99440c2bc0d", "sighting_of_ref": "indicator--926aea40-b086-4d58-968f-528147a907b8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f4937db-4d00-4520-a88f-7806160ea5b6", "sighting_of_ref": "indicator--dbcad5c2-1fa2-486a-b803-ff1465a8c0e2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3f5482-f8d4-40e2-bf32-404d101e8d47", "sighting_of_ref": "indicator--a876b524-3beb-4a16-af2f-6c52bd998f48", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa8f457-f94a-408c-9973-aeefd477d0d0", "sighting_of_ref": "indicator--520827e3-dae7-4159-9b33-28c9eaa07703", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54871a9-29a6-42aa-b457-111c14876285", "sighting_of_ref": "indicator--c7aaef21-f2d5-425b-bb10-8073eee1cc69", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c17b54c7-47ef-4d43-918a-c809d6655475", "sighting_of_ref": "indicator--c7aaef21-f2d5-425b-bb10-8073eee1cc69", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6c764e-89da-4000-9bfd-cdc47ae5bf07", "sighting_of_ref": "indicator--4ed4f7e4-d4b6-4e5b-ad87-8aa989379cc2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e12e88-6318-493d-99fa-df5377a2e0d7", "sighting_of_ref": "indicator--9a6a40d1-7f47-449e-933a-c1263e4f9ad8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd8ab24-5c08-4862-ba16-ac061b92d83d", "sighting_of_ref": "indicator--e2a58099-c12b-4d82-8aa2-589b21408444", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563c5b66-28ca-4287-a9e1-e961c6df59a9", "sighting_of_ref": "indicator--f3b32307-6169-4f70-9f79-559109086e42", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52793857-73e7-4a17-a213-b76ba7a5fb53", "sighting_of_ref": "indicator--a19b2387-4cf6-4a65-83be-07bfeca47db4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d3305f-b75d-47ab-8bd5-83a1cd4dce7d", "sighting_of_ref": "indicator--7feb30bb-a903-480d-8759-acf02148ea34", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83d0235-8bfe-43d0-84da-7c7ead540bd0", "sighting_of_ref": "indicator--efd9575f-2aaa-418f-95ba-0f690c16462b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eff34f9-20e9-4249-b85e-a5354305441e", "sighting_of_ref": "indicator--efd9575f-2aaa-418f-95ba-0f690c16462b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--115fe3e1-aada-4aff-843b-581c13c910bb", "sighting_of_ref": "indicator--3a6dfb72-03d7-45f5-8ba9-fa7d78f728ef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848cca0a-1004-488c-9af5-596003f38f34", "sighting_of_ref": "indicator--7afa6dc5-5b7b-46cd-b149-66fbe3470cd8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ed14b4-7546-4a06-bf6c-3bdc2f6864da", "sighting_of_ref": "indicator--7afa6dc5-5b7b-46cd-b149-66fbe3470cd8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e78983-31f2-4b15-ab5b-0a66635eb204", "sighting_of_ref": "indicator--0f3bf458-5087-49a6-8f81-712cf60e552e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de7fa18-bd17-4339-8588-9546d76ee917", "sighting_of_ref": "indicator--808e4ed6-0e39-4f1d-862e-f43f735a3d53", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4da52b-ad9a-485c-be52-17c2212d82f6", "sighting_of_ref": "indicator--89ba9832-0d74-4327-94ac-ce8aaa218c87", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1111425-b8f6-444e-baf1-3f49ab1a26df", "sighting_of_ref": "indicator--170b8c82-dc35-44a9-a325-a1b714b49647", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959900e1-dc5a-42e0-8cd7-6f5d579a0d60", "sighting_of_ref": "indicator--a51f2a36-0334-4e8a-87ae-9a207e0d4cd8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027bfd5a-6293-4680-98d4-aea4979d6664", "sighting_of_ref": "indicator--e1388b7d-8886-4b42-91be-98bc6308f2cc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77e8fdc-6bd9-4509-873b-d9a23f5a8636", "sighting_of_ref": "indicator--3d245ce0-9258-4b26-82b0-1a4c44e3da14", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e712dd-a9b4-4143-b8ae-dc29ebb60cb8", "sighting_of_ref": "indicator--f1c49682-8beb-469e-9a86-dc38b30a0ac8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9344bfe-ec86-4e2f-badd-6292b9d1b3c3", "sighting_of_ref": "indicator--7a200603-d410-46f3-88c6-f2f6906d201b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa037ce-d647-4d9c-8b1a-f7e18c6d843c", "sighting_of_ref": "indicator--f662dc9f-ae41-4536-b660-cf303dd59fc3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172092c8-f586-49a5-8aa7-7750b9546134", "sighting_of_ref": "indicator--6cc29db5-19f9-4298-8988-5a1097e7845d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aeb8d9c-25c6-4946-a97c-2f06bcf365c7", "sighting_of_ref": "indicator--3bfeb46d-d067-45d4-b62d-e1f065b6721b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f5d2d6e-2c6c-4bc4-8a7d-5c0374a771e8", "sighting_of_ref": "indicator--1fa6fe85-12dc-4b7a-a57b-c5a59cf470c8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857588eb-2ec6-4374-b209-54b1c523a45c", "sighting_of_ref": "indicator--1fa6fe85-12dc-4b7a-a57b-c5a59cf470c8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9989a7c0-f1a7-4d81-8021-cc35dfdb99ff", "sighting_of_ref": "indicator--0eb342f1-945a-4ab7-a3a5-10f77389de9e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eccb6a2-5bf2-4a95-a341-e78f1f44cdd4", "sighting_of_ref": "indicator--0eb342f1-945a-4ab7-a3a5-10f77389de9e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d93b76-696a-421a-a8af-47c124662def", "sighting_of_ref": "indicator--b93893e6-6be3-4b88-93bf-cf7d1a6caab6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a08fbf-175d-4356-8132-1e4a8936623c", "sighting_of_ref": "indicator--242b463b-ee8e-4ad0-a498-d886c9985cfc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e213063-9194-4b6c-aed8-451544ca9060", "sighting_of_ref": "indicator--d008dbbe-1087-4c59-acbd-5a32976eeedb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe25107-c2f5-428f-ae6b-2155b2e9c43a", "sighting_of_ref": "indicator--d008dbbe-1087-4c59-acbd-5a32976eeedb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceef4c8e-9802-401e-8dc6-00efbdeb6d6f", "sighting_of_ref": "indicator--8926da13-d5b7-4a08-825e-f68b62d7cb82", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0d62f1-ec6b-4b21-b3bf-779cd6dbdacc", "sighting_of_ref": "indicator--b7669966-c199-42d0-8e40-7bbf190e3fff", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587d950d-6d1b-4d4d-bba7-42659bc61697", "sighting_of_ref": "indicator--b7669966-c199-42d0-8e40-7bbf190e3fff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa948250-e2ae-44c2-93bc-c03da77427c6", "sighting_of_ref": "indicator--b2b723d1-af11-4d57-804d-107ef2f4d137", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67615661-e352-4f75-b00b-18063320483c", "sighting_of_ref": "indicator--ec336328-4f0c-4517-aebd-95685b04effd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e67daccd-0fc4-407e-9e44-7b868679d957", "sighting_of_ref": "indicator--ec336328-4f0c-4517-aebd-95685b04effd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e436e22-5f37-4e1a-b698-af67c0b4e066", "sighting_of_ref": "indicator--9b7dde4e-686f-4cac-89f9-77eede50e8ad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1bf798-ebf6-4748-9633-b03716cb7feb", "sighting_of_ref": "indicator--885804a9-a899-47d4-bf0b-4db7a990fd17", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae43809-bbe6-4d25-bb75-a2dfa4690fdd", "sighting_of_ref": "indicator--afb5751a-2c88-42f0-a5c6-31531fc297dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c8eee1-aa9b-41c5-bea9-ffde43ea647d", "sighting_of_ref": "indicator--0fcb6ea5-6731-4135-9558-8d60af5bebd4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830a50d6-1016-4a82-b2be-ea73cb787b47", "sighting_of_ref": "indicator--15d3688e-c8a9-4a72-b529-baabd971de85", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d685b529-1c67-466e-abb7-321bc1ac1327", "sighting_of_ref": "indicator--f2e50e00-a51c-47af-98fa-aa90363478e9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20cdc6b4-3d5b-490c-8938-a7e62f029201", "sighting_of_ref": "indicator--861d16e4-fa96-463b-970b-451b9b08203c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534871cc-a9ae-4ef9-9a22-acef2270774c", "sighting_of_ref": "indicator--4b990196-f600-4aff-aae1-ffa10762781c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43eed92-1848-404e-8ed3-73190304f516", "sighting_of_ref": "indicator--7c141915-951b-4461-8280-762f536d26de", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7720d215-88c8-4751-895b-4a561b5c542a", "sighting_of_ref": "indicator--d9e25ee6-4a88-46c4-bee8-ad744da5155a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec2f8b8c-9d19-4a30-b7e0-98ae36ad0fd4", "sighting_of_ref": "indicator--ca8d26a4-e3ed-4c0f-b1f1-622876d2731e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5927b166-fce4-4c38-ab39-04783f79f62f", "sighting_of_ref": "indicator--e2abbb58-56d6-46ef-bf9e-039505048f41", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb11ba2-ce8c-4818-95ca-3dc084a38cef", "sighting_of_ref": "indicator--aff105b7-e926-48da-a3f0-d1bc643df48d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e7213d-6d9b-40cc-b9a7-5f4e1cb2329f", "sighting_of_ref": "indicator--a84af285-13a7-4f5d-b555-df21051d3a74", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3667cca-9a74-491e-9382-7a7ed32d7ba0", "sighting_of_ref": "indicator--78d16937-627c-4784-96ea-4b40393c56a1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e2bb72-757b-47c0-acf8-f0296837436a", "sighting_of_ref": "indicator--f089a9e1-b8f6-40e1-af1c-4eec92cad6e4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ded917-b4e2-479f-a94d-1e9ad0a9850f", "sighting_of_ref": "indicator--eaba5bcb-0179-48bd-804f-d53892a23542", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76112109-54ef-4247-87fe-ddd49470a4d7", "sighting_of_ref": "indicator--d44c35b4-1f33-4f6e-8c8d-2a15d8734560", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f974f03-7eea-4b03-b536-41ac01fc37b6", "sighting_of_ref": "indicator--dab36d37-d6da-4051-b935-07929606c0a7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54601034-b5c5-4860-b38b-c6baa5e39190", "sighting_of_ref": "indicator--a1c587e5-f3d4-461f-8549-82ee929e835d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59cb53f9-af41-4438-8739-722747db784a", "sighting_of_ref": "indicator--a1c587e5-f3d4-461f-8549-82ee929e835d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2e407f-6d3a-4589-a164-3452c5afb755", "sighting_of_ref": "indicator--eb6877f0-caa3-4b86-8918-870b73f92f36", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2267a84d-47bf-4204-853b-73c838b1cbbb", "sighting_of_ref": "indicator--2b29c4b2-9bfa-415e-a67d-5420d09f96fc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87b5554-1757-4247-bbf4-6930c1fbb1f1", "sighting_of_ref": "indicator--2b29c4b2-9bfa-415e-a67d-5420d09f96fc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa23219-366e-44c3-bd39-a0ab37276933", "sighting_of_ref": "indicator--be8865a6-8da0-432d-9faf-11a5520de0b6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ee41e5-f0a6-4070-8595-95823c262cd3", "sighting_of_ref": "indicator--9f66e55d-da7b-410f-a08c-4a7c40bcb705", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2cd4c5-10b0-4415-b73c-6715b5780add", "sighting_of_ref": "indicator--9f66e55d-da7b-410f-a08c-4a7c40bcb705", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d94d0215-e0ac-4245-9b5d-fe8bbf7b4a12", "sighting_of_ref": "indicator--17e85aae-3ac7-44c2-b38e-0878bba5f46e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a612840-767e-4bee-bd11-c683a98e3edd", "sighting_of_ref": "indicator--17e85aae-3ac7-44c2-b38e-0878bba5f46e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2cf05f5-69cd-47c0-94d5-4e7cd7352f7b", "sighting_of_ref": "indicator--f416b81c-66aa-4e9c-9b11-88474b03e5e4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9aa7eec-b711-4c76-8578-b6e7b7a63327", "sighting_of_ref": "indicator--f416b81c-66aa-4e9c-9b11-88474b03e5e4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdfb38e4-bd25-4e88-a220-17fa18f31dfb", "sighting_of_ref": "indicator--0bd552f4-af61-4b12-9b6b-1c98eec1061a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c161194-ecaf-4309-a567-6fcea272161a", "sighting_of_ref": "indicator--c1baf093-0ee2-4d02-9c14-2f06e2aa1f3e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0f43cc-6c18-4f12-940b-05f1f17fda49", "sighting_of_ref": "indicator--13a728c1-dae6-4460-9bff-f4eb28acb01b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aebb5eb0-f15d-4d4d-8017-5d20d2e58ff3", "sighting_of_ref": "indicator--13a728c1-dae6-4460-9bff-f4eb28acb01b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3446ab78-33cc-45e8-94ce-fd6d6fa9c4b9", "sighting_of_ref": "indicator--d94a49d4-44e6-469f-b2fd-a13f2bef3a4b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9e1027-ca78-4b6e-ac1e-01c642119a34", "sighting_of_ref": "indicator--b91dc139-4fec-48ff-b7b5-348fcfa56ed3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19de223-dea4-43d0-801a-bbec1268dbe7", "sighting_of_ref": "indicator--1fe0b57b-ddcb-4f4b-9dff-99e861a698c4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c943d484-7601-4580-af84-f16747833e4e", "sighting_of_ref": "indicator--20fa5286-f940-4836-866b-8cf3fead7a72", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f4eda1-0bcf-4a9b-857a-aace9fdb3ef9", "sighting_of_ref": "indicator--7a4475bd-3a8d-4109-9749-ec91024194e1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8190233a-137d-462b-82d0-cb52625644c0", "sighting_of_ref": "indicator--46635836-d499-435e-a76b-50b57b260ddc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e97ecfe-923e-4656-86de-3a3950a6ed56", "sighting_of_ref": "indicator--46635836-d499-435e-a76b-50b57b260ddc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d210a19-ce64-4429-a102-cdf1f59bf6b8", "sighting_of_ref": "indicator--6862006f-8980-4284-b5fa-7a6e003a5771", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8371483b-7996-42bc-80cb-517f1e50ef0b", "sighting_of_ref": "indicator--e13c6617-98b8-4b51-942a-abfb62d11c0a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b78334-b7b6-4102-ae60-2e24d357c5a2", "sighting_of_ref": "indicator--362eca0a-aecb-4c7c-9ee0-58d970de10d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebcfd410-8675-4fa9-bd64-0b94080d6df8", "sighting_of_ref": "indicator--817a5c51-629c-46e4-b384-0d7e5518f179", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418f4b4b-729d-44de-86da-e125ed69f539", "sighting_of_ref": "indicator--3c60a5e9-8879-4246-b193-64be518d301b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd29110-7f27-4011-a743-d64084c9c74a", "sighting_of_ref": "indicator--fad507e4-66fa-47cd-b2a0-23226e1dd344", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fe12a4-567f-4179-964d-ddc8a91b32d4", "sighting_of_ref": "indicator--7178d47d-07af-4248-9dd7-9823f45bc0cb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6a0c24-c0fd-4e23-a8ed-782cfe2e1b1a", "sighting_of_ref": "indicator--67bfb718-1b2a-4c5b-bef0-18e952207416", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0b6bea-9ce2-4ba8-8c16-5331c5f754a9", "sighting_of_ref": "indicator--a4bead4d-3c25-42f3-89dc-3ab04afe3aa5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e7a766-73c3-4839-9a90-73e2e7bebd44", "sighting_of_ref": "indicator--dd1b2f35-17d8-40c2-93c1-ad82ad4faf75", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81fe4dc-46c0-426b-9fcd-00d4083e602d", "sighting_of_ref": "indicator--dd1b2f35-17d8-40c2-93c1-ad82ad4faf75", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7214ea0-b7a7-4dee-9d7c-6764229e3be4", "sighting_of_ref": "indicator--9268c611-865c-4715-829a-3d7588a9b6c8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6aefa5-411d-4d22-8ef2-ece3cfce133a", "sighting_of_ref": "indicator--6812b598-d0e3-4f98-9ea2-6d4eabafef4e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec4aa92-2110-4a06-ba95-5a29be44ae46", "sighting_of_ref": "indicator--17724bb1-7e73-4e30-aa2d-1b8d15015d4a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7090c611-4e73-4b05-85a3-65977c7b3470", "sighting_of_ref": "indicator--7600092d-12d5-485f-8099-1792233571ad", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a47bc96-1d2a-4fa7-ad48-47dc4645d503", "sighting_of_ref": "indicator--3dce6f0e-8fc7-447b-a86b-b22dbeaac98b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351ef665-b050-44a5-98be-a5a564ed206d", "sighting_of_ref": "indicator--3dce6f0e-8fc7-447b-a86b-b22dbeaac98b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc7b262-5f6c-41f0-8cff-03691b1c6b9f", "sighting_of_ref": "indicator--f1aea353-b1e7-4b09-9691-7c18eb00af07", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e31385ea-d1cf-43e8-9c00-022e0b17ed64", "sighting_of_ref": "indicator--f1aea353-b1e7-4b09-9691-7c18eb00af07", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c407ddb8-0bdf-437f-ba6e-f9d761c17c8d", "sighting_of_ref": "indicator--2715441c-fd46-4776-a9d5-973a2624ac0e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc050685-ff78-4a5a-9892-169e13d9de93", "sighting_of_ref": "indicator--640de8c4-c0a0-4c9e-a291-5b95177c1a68", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb84f235-46f9-4446-8be8-ee817aac3fa6", "sighting_of_ref": "indicator--02d02b33-5146-40de-952b-5e7028915308", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e4adb3-4421-4b54-97f7-2e71573c0351", "sighting_of_ref": "indicator--1f10caef-ed40-4957-9e80-5dfa499b4488", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd14865-20ee-462a-852b-f0824878790d", "sighting_of_ref": "indicator--c7a1c086-99a8-4828-8a23-d451e3a1a9c9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4249119b-13b2-4868-8376-304bc483ed72", "sighting_of_ref": "indicator--77e2f91e-32ab-4729-897f-09c941d1b353", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b9b9ac-ebb9-4850-a065-ac4a5e19677f", "sighting_of_ref": "indicator--aef60b79-c0bf-4751-96c9-c7a8891fef6f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23756ebd-47b5-42f5-a815-082ee0101060", "sighting_of_ref": "indicator--e0755a5e-15c9-4fc1-b97e-9d9eae12d815", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94849574-45ac-4871-8650-f179bc863f33", "sighting_of_ref": "indicator--e0755a5e-15c9-4fc1-b97e-9d9eae12d815", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94140c7a-580c-4743-9ee0-1804a61292d0", "sighting_of_ref": "indicator--6d0eeca9-a77b-4751-817e-ae6d0bd0b843", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a19b9c5-5b2e-4073-9119-0052db8c509d", "sighting_of_ref": "indicator--6d0eeca9-a77b-4751-817e-ae6d0bd0b843", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c86fa3-134e-4b73-a15a-1b54ca17887f", "sighting_of_ref": "indicator--c77477c7-22d0-4acd-9b9f-8b53839e76da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7428c713-d5c8-4f3b-8ecb-4437135de11c", "sighting_of_ref": "indicator--0ec3c626-3d55-4c52-9051-055123dd6332", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd17f1d-cbf5-49d8-8249-fddba12d7030", "sighting_of_ref": "indicator--bb3808af-6c94-4556-b75a-bd7111d3c0f0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6f6b5b-f3ff-4c0a-8caa-c534daeb32e4", "sighting_of_ref": "indicator--ebb7a1f0-335e-410f-a516-7f2a0110093c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5969d0e9-2f49-47c1-9bab-4f95c7b0ec95", "sighting_of_ref": "indicator--80d51ccf-0c3c-4417-9408-d4baeb6f0114", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb31ebc9-7282-4a20-a7eb-47e16c4bff34", "sighting_of_ref": "indicator--294f6b41-d741-4268-b364-51695946bf93", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e3da17-d5c1-47fb-b7e4-6a4673909e27", "sighting_of_ref": "indicator--a9457dd6-cee6-441c-8c69-91213b79ec36", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318cb36f-4558-4fa1-b05e-d686a3fc1487", "sighting_of_ref": "indicator--a0082655-a9f6-43b7-a320-2028542988bb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a56ea2b6-0931-449e-8594-db1754cd2a4b", "sighting_of_ref": "indicator--6bd320b6-dce3-4f23-a132-ff7f257c651d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c90a63a-6f11-4eb3-8f01-5039a2412121", "sighting_of_ref": "indicator--0b23e8bc-0f4f-4e80-8280-6aa8b2610016", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f96ecd9-ad6c-4aaa-a122-653805ab048e", "sighting_of_ref": "indicator--ca106cee-927f-4986-9944-d3b4b2ef364d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72dee5a3-9288-4f23-9b6d-c81b7cb440b3", "sighting_of_ref": "indicator--11811b37-1d30-415a-bc82-117f7dbe3740", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dbb29d3-6d40-46a2-a1c1-e2c135fc4ebc", "sighting_of_ref": "indicator--90300e39-41e5-4de6-9417-2b4ca200732d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d7e8ea-9096-40b8-880d-5b9230598ca7", "sighting_of_ref": "indicator--9da297bf-a7a8-4d45-b0fc-3cda8e20dd89", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9085243-1af1-432d-b74c-7474a68c8c6b", "sighting_of_ref": "indicator--7c63b079-fa1a-4c81-868b-0b89f491896a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a36d9a-9755-40e7-8419-2ea45ea26d15", "sighting_of_ref": "indicator--be53e74b-1422-4d16-b1c2-020153ef7308", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb93fc0-1b1c-4e23-9035-fa034e066ce5", "sighting_of_ref": "indicator--2db0df84-df02-4d89-86f6-51164c219c60", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b42dbb-a015-4e07-b969-3040d165d242", "sighting_of_ref": "indicator--a2283b40-e9c6-4f88-835b-64b41af942ca", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f5e62a-7ed2-49d7-8bda-32e8b3f1d023", "sighting_of_ref": "indicator--fdb99939-dd12-4218-b349-00f1e8e3fdde", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60200316-9f8a-4dc2-979b-b51dde69fa32", "sighting_of_ref": "indicator--ab4e8202-9027-4d0f-aa2f-f6001e502149", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040937ea-f13e-414c-a228-61a50d93605f", "sighting_of_ref": "indicator--7fca86c1-446b-41df-a208-80f8a5ee20ab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41de2b34-f563-46dc-8e62-176b3b2c2e65", "sighting_of_ref": "indicator--eec55ea0-c01c-4f71-9e86-cb9d47bb48c4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce3d4e1-3311-42bb-ba56-fd65541ce1f8", "sighting_of_ref": "indicator--e991bd4c-7b9a-439c-8596-d17cfd489753", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc739e8-d5dd-4e43-a537-d5112a014e67", "sighting_of_ref": "indicator--3525a3c3-c025-4510-80c6-954eb9ef1662", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99aa4c05-0461-4549-a4bd-76956d5b2a2f", "sighting_of_ref": "indicator--31c4694c-33aa-41e2-940d-8a73f4db8f23", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401588da-cd53-4b1c-acd0-5e4a2bc94dca", "sighting_of_ref": "indicator--72e381ba-e4e5-49a0-ad4f-873dd2e6c243", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb1f2a0e-4722-4d3d-a85b-f2ed48d812cc", "sighting_of_ref": "indicator--cd1c1f79-a28f-4203-b0b9-3fdb7a876752", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bafcd76-c4de-4dc8-90a2-71d3b7a3ff11", "sighting_of_ref": "indicator--e607d7b8-375e-4d25-b44d-9fe6b2be07f9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f611e6c3-e3fc-4807-b4ab-9867fc2e2e69", "sighting_of_ref": "indicator--78aa5978-766f-4741-9940-66b22c6b5799", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9ec357-de04-45d7-8de5-413aeb1e6b4f", "sighting_of_ref": "indicator--78aa5978-766f-4741-9940-66b22c6b5799", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401ec9fa-4581-47d5-bb71-b765cbe50aa9", "sighting_of_ref": "indicator--77c28a33-dab0-4e0f-aea4-8c2f864435d3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba61d2d4-02ce-41a1-af49-d4dba3ad3367", "sighting_of_ref": "indicator--bda554a2-924d-46b9-a549-2def088ee765", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b709de-6fdd-4d85-b62d-a913febfec42", "sighting_of_ref": "indicator--554ce0d3-ea1c-49b3-8482-d510c3621332", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e419918-b609-4625-8dc7-926b2f8b9c71", "sighting_of_ref": "indicator--554ce0d3-ea1c-49b3-8482-d510c3621332", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd4146e-9c52-47db-ba30-2558c812bd6a", "sighting_of_ref": "indicator--ca777130-a265-43f3-b889-7a58d2714a12", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419367f8-7f41-4a15-bddf-3121d10f34c4", "sighting_of_ref": "indicator--b5ef4b28-be51-4f73-89c3-c7b57e1f0372", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb288fd-fe60-4981-acec-4251eaac28bb", "sighting_of_ref": "indicator--a49d3864-1f43-49af-9028-53675463a246", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522de7bc-7978-46f5-9ab4-ed36d695796f", "sighting_of_ref": "indicator--a49d3864-1f43-49af-9028-53675463a246", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b08f099-9873-4a70-b722-0364da228408", "sighting_of_ref": "indicator--003a4aeb-534e-43bd-b1de-ba4041b405a9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b3cfe9-21a8-4b00-b267-f567d35bbcfd", "sighting_of_ref": "indicator--46750f70-d28c-4464-8da5-9df24f5eb2fa", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06c996f-0c7b-4c71-a744-2e4283fb16dc", "sighting_of_ref": "indicator--1731da33-a2be-4c98-98c2-7309d7a9a584", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f80965-b26a-4bad-b28d-19518df40666", "sighting_of_ref": "indicator--20b3a30e-1df5-488d-bba4-1d3999a7a0c9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79792556-2c11-411f-b312-106c0f04b9a9", "sighting_of_ref": "indicator--f0203298-7313-40f7-9be0-81cebc01851c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba404a5-cff3-4137-9a8f-365a9ccaff2c", "sighting_of_ref": "indicator--f0203298-7313-40f7-9be0-81cebc01851c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c454c9ff-105e-4ad7-9a11-3ef09a18e186", "sighting_of_ref": "indicator--3e8c72dd-ca8b-48e9-911e-b8cf7bf3c730", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1015f6e-dfd9-4352-bc6d-e10af53b95f4", "sighting_of_ref": "indicator--b098071a-4b2a-4efc-ac6d-cc588feba844", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7b46c4-7822-403f-8135-acf70089b59c", "sighting_of_ref": "indicator--42c15ee0-6726-4989-abdb-8f7b19bd1048", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e173102-169f-4726-b953-4b669b734141", "sighting_of_ref": "indicator--42c15ee0-6726-4989-abdb-8f7b19bd1048", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4075a45c-c5ce-4eac-9723-9275743891c0", "sighting_of_ref": "indicator--373b91c8-b6c5-4597-8c0c-373213f715a9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34777775-5222-4d1e-872b-c39b9094f174", "sighting_of_ref": "indicator--22bc9c87-d246-4786-a5ce-f2f7179d99da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc08618-ec46-472f-8219-5a9cd2ddae6b", "sighting_of_ref": "indicator--7f0e1106-c397-46f9-aa85-bddc70a2c615", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec79c392-25ba-41d1-8ad6-d28895336c0c", "sighting_of_ref": "indicator--a2387cbe-8c28-45cb-982e-8d552dabfd07", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb2ece4-58e3-4e5c-a164-571d9f44a474", "sighting_of_ref": "indicator--e8e10848-4f0a-463c-87db-023b2e29648c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e3d177-acb0-464b-9330-9eb5b895ac78", "sighting_of_ref": "indicator--1970a054-1eb3-4de3-ade7-3f4f8334734d", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63af5533-1970-4e53-825c-8a42d0506844", "sighting_of_ref": "indicator--85649418-d012-4a43-963f-ea3e51860f5b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c050ec4b-74b7-42e6-9161-8deb92e1adf6", "sighting_of_ref": "indicator--433b890b-5a5c-4e68-8689-9dafe2e22c9d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--133cd4a7-7ae5-4ed4-b728-67ae17bf9b21", "sighting_of_ref": "indicator--1be25896-fd61-4c85-9092-fd2451ad448b", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b75628b-a5a2-4d5d-b7b6-123babfb7f24", "sighting_of_ref": "indicator--1be25896-fd61-4c85-9092-fd2451ad448b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22bf628-39f2-4e42-ae4e-43c92fbda17e", "sighting_of_ref": "indicator--afefb457-be33-470b-a2c8-103789b895e2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb5b0a2-8dbf-4864-bfad-505709811d78", "sighting_of_ref": "indicator--afefb457-be33-470b-a2c8-103789b895e2", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b852c89-ecc9-4096-b11f-ed4645df4653", "sighting_of_ref": "indicator--b4ff2498-23ef-4dfd-8f4a-7df3d2978024", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f50032-77b6-4df2-89a5-371f8cef98c4", "sighting_of_ref": "indicator--31e0e59f-bd89-458d-bdae-2f4b4e9ced8d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c54ed0-4de1-4b68-bd9b-bd151abda16c", "sighting_of_ref": "indicator--aade96aa-f120-4ff5-a5a0-0d3df46bc0bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df0a0d1-2995-49c8-bbef-0e9f8ed4db66", "sighting_of_ref": "indicator--57e1d999-97bb-443d-a132-bcc3909e3838", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efe6cdc-7b10-4f41-982f-3f00e558fa9c", "sighting_of_ref": "indicator--6c7d2da0-b9bb-4294-ae78-5a344a867926", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57307345-ad9f-4a7e-ad68-0174f8aad947", "sighting_of_ref": "indicator--6c7d2da0-b9bb-4294-ae78-5a344a867926", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1f5f17-9cd3-4c69-9343-fb6f4ccf3234", "sighting_of_ref": "indicator--6c7d2da0-b9bb-4294-ae78-5a344a867926", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcd9f65-fe34-4070-8d3b-53d407105fd8", "sighting_of_ref": "indicator--7aa539b4-78a1-451e-95bd-82f746ef3dfe", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586567e8-5c04-4029-95f4-e3a52e0516a3", "sighting_of_ref": "indicator--37b45b7c-ba6e-40ee-981d-58afd5c6b3e5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b31b599-d765-45a9-8c6e-465540c5a4df", "sighting_of_ref": "indicator--83cb5f37-4b8d-4fe7-8614-1f392049d316", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f13fe949-aa03-4afe-9905-c78ce44a70ce", "sighting_of_ref": "indicator--83cb5f37-4b8d-4fe7-8614-1f392049d316", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e98f3ee4-629f-495b-9501-523c8f22199e", "sighting_of_ref": "indicator--697f4d97-9326-46fb-a536-7e465e84615a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930768f9-d3e8-41ca-a461-3e440b0f2a75", "sighting_of_ref": "indicator--697f4d97-9326-46fb-a536-7e465e84615a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef9b372-a5d3-469f-ab56-ff55fc22dd27", "sighting_of_ref": "indicator--a7e7ca2f-686a-4ac0-b172-dfd4faf062e7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7629cf0f-9bc6-47ce-b485-474d9d6f2a51", "sighting_of_ref": "indicator--9b3c6c6f-edd3-48bd-bcad-c87961727019", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb75379-a464-4f94-b91c-e5881ebd7ddb", "sighting_of_ref": "indicator--835fdbd3-514c-411e-9e0d-4f15cfc73368", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f23cfed-cb4e-4e77-9c35-e1c367263962", "sighting_of_ref": "indicator--2f74ce20-d545-4bb6-b2b9-6bad2acffecd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d33ab18-d7ee-453f-b4ee-d4d055e2efa6", "sighting_of_ref": "indicator--2eef55fa-a4dd-42e7-a678-3f4ab7254885", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50bc5132-8ce0-4052-a323-cae268ee8783", "sighting_of_ref": "indicator--1d236c7f-6d17-4606-9c2a-6d41a13400ee", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88eb3370-a15d-4f41-b3b8-ce77362dfe08", "sighting_of_ref": "indicator--4769d7f7-02ec-42e6-93ab-ce6008a2d8b7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0edbae30-82b5-4ffd-b49d-20681978c1cb", "sighting_of_ref": "indicator--4769d7f7-02ec-42e6-93ab-ce6008a2d8b7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e938cb-0729-4dcb-9049-52367e1f22a9", "sighting_of_ref": "indicator--297c24e3-2428-468d-a8b9-4b1be2c7fda8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0c8f03-b349-4776-a837-19edb178b20c", "sighting_of_ref": "indicator--239283f5-c4de-4979-9edb-426ac34c593c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79dee48e-1310-4220-ab65-f2094b5d8e3b", "sighting_of_ref": "indicator--c0937963-b507-4ca0-a4a8-fef8650d161f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ab2609-f7b4-4315-8901-0648383cd440", "sighting_of_ref": "indicator--eebef5f9-cdab-45fb-8b89-5a0868169395", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa6317ce-f66f-45af-880a-c27e8b1d2128", "sighting_of_ref": "indicator--a7208221-17c9-44da-ab85-b3eedd67b8ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de20c545-468b-421a-a9d6-2aa24c4e0581", "sighting_of_ref": "indicator--1b697edb-f39b-40aa-853d-9ed281ef41c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0cdd772-8b53-4bcb-8680-fb1573fcb48d", "sighting_of_ref": "indicator--b7e156c6-3e63-47cb-b093-9a6db0b36826", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--115b8260-d66d-4b89-afba-b100ad8e43ec", "sighting_of_ref": "indicator--2d52fb0f-9fc3-4950-a437-032760b1da41", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96222b4b-846d-4c65-bdb5-d2fa9cf8fdad", "sighting_of_ref": "indicator--3c09cb0e-3eda-4e5f-ae31-019394af7daf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df39609c-d830-4de4-a868-f89cb22d0584", "sighting_of_ref": "indicator--4ea3ef92-4c61-479b-b977-975f47563e58", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85131054-8c60-4c53-a209-15a704c82924", "sighting_of_ref": "indicator--dbfbab4e-a846-431d-b3aa-485f2f306c6c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288818b3-d519-452e-b8e1-9703ba0996d7", "sighting_of_ref": "indicator--93f7b940-06fe-4e70-be83-7d36fc945052", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ba9c84-4167-4b39-a9a9-084688302b9f", "sighting_of_ref": "indicator--4794993d-353d-443f-8479-042912298a97", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c967de5f-aa37-4083-a3b1-d5041db54dab", "sighting_of_ref": "indicator--32e92b43-3ce7-47c1-94e9-9b7741b8991e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4d23f3-9854-402b-af2f-314aa53802ef", "sighting_of_ref": "indicator--ee5333c3-73ef-4717-b8d1-88874478b7ef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de88147d-c4cc-4f99-900b-3494b94a0650", "sighting_of_ref": "indicator--a0a6c00e-7056-4658-9dbb-fb67658874c0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee317bb-4b8a-4855-9529-5aaf3440a6e1", "sighting_of_ref": "indicator--e292ca45-d794-40ca-a7ae-63370e693329", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aaf666f-70e7-4132-906b-c9d9fccec8b0", "sighting_of_ref": "indicator--4e4b912b-a130-4a5f-a795-beeea0c1c0c0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61cd0e0-fe75-45e8-814d-7b4cfeeea519", "sighting_of_ref": "indicator--db3d14c3-b471-4003-8f8b-430bec697c1d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962d149d-39e2-4c49-9285-61cbce85efac", "sighting_of_ref": "indicator--db3d14c3-b471-4003-8f8b-430bec697c1d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767e16ee-7568-46d0-8d1e-0bcd423f4946", "sighting_of_ref": "indicator--baea86b4-c42d-465b-a607-7f90cab34e48", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6f3a02-4387-408a-8fec-20efff781d60", "sighting_of_ref": "indicator--4636a507-4e38-4037-af50-d16a308a7ae9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca335ac-4fad-4b2b-a05d-9d1357d7cb7b", "sighting_of_ref": "indicator--9c700244-5c1b-414c-a2bd-3f9ea6f206ce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d104001d-d305-4d65-808a-d419290d9587", "sighting_of_ref": "indicator--9669554d-a1be-4984-9033-b44761ceaabb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3772ab-e1ad-4dea-9d2c-f987bf6b0492", "sighting_of_ref": "indicator--9669554d-a1be-4984-9033-b44761ceaabb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97542322-5aef-4e21-a7b1-0bea6693ddcd", "sighting_of_ref": "indicator--b02f2031-5831-4c89-b4d0-a5cf6d926aa6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9fef28-262c-45ee-b9e3-d250039a67cc", "sighting_of_ref": "indicator--2526cfc2-d9cf-4610-96c5-3a047c19d11e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa41555-e99b-4b79-b7cc-4b08416c9f20", "sighting_of_ref": "indicator--c4a4220f-babc-416e-bcd0-383363c41ddf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569cfea6-54cb-4541-8d2f-fa35b7a93f61", "sighting_of_ref": "indicator--c4a4220f-babc-416e-bcd0-383363c41ddf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04edbd48-423f-4444-a3d1-76cc1106e34c", "sighting_of_ref": "indicator--e371b40c-b8ce-434b-8388-8d3d479ce563", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1941e3da-53e5-443e-a824-06d796444550", "sighting_of_ref": "indicator--77ecf4d5-97c5-4b11-83ef-5f751b972f6b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d182e0-a130-41db-a8a8-afa771b5f522", "sighting_of_ref": "indicator--4c46740d-3768-4684-a3d1-50b9c4c99e09", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c6d0a31-bfbd-4cac-943d-f3aa7c566013", "sighting_of_ref": "indicator--263327d6-ee5b-444f-862d-d36cd7333ddb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d53588b-ab9c-494f-adf0-0e30a4688926", "sighting_of_ref": "indicator--59120f2f-db0f-4f0c-84f1-684315505734", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a0b5fb-513c-46a1-84c4-4779c317bc70", "sighting_of_ref": "indicator--9e738051-64e5-4747-9291-2505b1261212", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff644f24-ec62-49ac-bf50-758ed74bb7d4", "sighting_of_ref": "indicator--d0517317-ac98-4d18-8aa3-8920760b7d3e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a52d565-abcb-4f01-9d55-f176ab3b29a3", "sighting_of_ref": "indicator--d0517317-ac98-4d18-8aa3-8920760b7d3e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8314f69-1310-4631-a89e-286307e8731a", "sighting_of_ref": "indicator--8595f563-3966-4156-b12f-88af662d70ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b699e987-f0ae-4c60-9b0c-d5f767a46f28", "sighting_of_ref": "indicator--a78ad2c3-2ae5-44a5-95a4-8d57f6f48ff3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a907c72-c500-4051-b89c-3c7bd1a77886", "sighting_of_ref": "indicator--bb479423-bd14-4429-a489-64cab653a154", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16552121-7499-485c-9f33-660621845edc", "sighting_of_ref": "indicator--47e94cd8-cc12-4015-b8a1-c54ba41e3c5d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de340eb-20df-4b5d-b2f2-1335afb9a053", "sighting_of_ref": "indicator--e0ecc34a-dd70-4d87-bc93-eb68cd78bf42", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab632068-c7e3-46f2-a12b-81a1e6d53879", "sighting_of_ref": "indicator--6162c62f-55e3-4611-bb55-6cfd145944f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89510f73-3321-4bea-971f-ab21442cebb7", "sighting_of_ref": "indicator--8f924275-cad1-45d7-97de-12c399214a95", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c663b5f-310d-4efc-a736-4825511ac4e5", "sighting_of_ref": "indicator--4da5abb1-64e9-440e-bee0-d45d45d0e9a9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--427fc3a5-653d-494b-b0e6-4036f1641f5f", "sighting_of_ref": "indicator--6727315a-b828-4338-992b-aa1bf12b29ec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61dab521-d06d-47eb-bb80-2c63c9111ab6", "sighting_of_ref": "indicator--632a6de6-028e-4167-976e-e4b9276d8414", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2538319d-17ef-43b5-b850-9f1f493f8044", "sighting_of_ref": "indicator--0bb88f39-2ce6-4e75-ab46-c115fb16fa2b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1c2573-e3c4-4ca9-a32a-4c89336ef6f4", "sighting_of_ref": "indicator--0bb88f39-2ce6-4e75-ab46-c115fb16fa2b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16245328-ebeb-4828-8998-465d22f457ff", "sighting_of_ref": "indicator--6d025a14-f18f-4221-ac6b-767c19b68595", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d0d225-807c-4e7d-8f95-9ba536c7af6f", "sighting_of_ref": "indicator--f83f973a-d0cf-41fb-8974-2db3bff4f49d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aeb9da1-2a16-4744-b11f-83d3d49aeee6", "sighting_of_ref": "indicator--e80100c7-1019-405e-998a-ce171ba55baf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cac1894-7048-4d50-9030-fd81efd15457", "sighting_of_ref": "indicator--e80100c7-1019-405e-998a-ce171ba55baf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306868d0-2678-4975-bdf0-da7576a808c4", "sighting_of_ref": "indicator--89d587b7-a7d6-4f6b-b403-98c71a8b924b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c79fc61-46d7-4df7-a37f-8138e64e6e20", "sighting_of_ref": "indicator--0b94c93b-516a-4c64-8d5a-d1b963b593f4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e6a313-f694-4a77-baca-669c77e479da", "sighting_of_ref": "indicator--4d33779b-ca1e-40f5-a9f8-9e3c3ce60ceb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d95c63-92a3-4bef-ad15-e6a5cba5118e", "sighting_of_ref": "indicator--7ce74382-e38c-4836-a2e2-3aa2d13efbe3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71232e44-7e35-4aeb-bbfd-aacba940970f", "sighting_of_ref": "indicator--376df3ce-70c3-49e7-8f6c-2887eda04a1a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087801bf-8da1-43c5-a409-24e8850f0a3d", "sighting_of_ref": "indicator--f4adfb02-fd24-49aa-8d53-1c961a0925cc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e4fdb4c-8a81-4654-a507-472034517346", "sighting_of_ref": "indicator--be710430-99a8-4420-95cf-ad7f71178e55", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f52b7e-9e00-4b16-96b4-963d3dd90569", "sighting_of_ref": "indicator--c4e1927f-3918-466a-b445-5af302d3159b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41091b43-5bd1-4fe1-a147-3acd81cd5ffe", "sighting_of_ref": "indicator--c4e1927f-3918-466a-b445-5af302d3159b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387ce3bd-4fa1-47c2-87ea-afba5965c094", "sighting_of_ref": "indicator--de6205e9-ef9c-40ba-aec1-b580a36201a0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518f75bb-69ee-4792-8e75-c107a006566c", "sighting_of_ref": "indicator--afe02a73-e028-4174-8b65-6b3e65c824f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d07844-8c1b-4d12-8954-c53740302ca2", "sighting_of_ref": "indicator--4ea288ae-2033-40bd-a2bf-ce6f4cb1c49f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af148dc-abeb-4736-9d57-b1f2649ccfc6", "sighting_of_ref": "indicator--2134d68a-bcd9-4ac8-b3c7-7abea07628b6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b12a86-7308-4216-9d33-152f54c36e19", "sighting_of_ref": "indicator--a70de9df-f02a-411d-b984-4de06dc47fa7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803b2570-dc47-4aa5-aab3-781658a9f2fa", "sighting_of_ref": "indicator--a70de9df-f02a-411d-b984-4de06dc47fa7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e301d961-b313-41fc-b7d8-d3508c664cc8", "sighting_of_ref": "indicator--06f281e2-396a-45a8-8661-7adae89dd0e4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4628bd0-ddfa-4d23-a95e-2a1c15ea34e8", "sighting_of_ref": "indicator--38ec4cc4-eea0-4712-8320-b5e695571ba7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8152b6e-390f-4109-b21f-2b775ebe1fbd", "sighting_of_ref": "indicator--d8289815-6084-480c-bcbd-89a805c0b341", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124c241c-63d9-4e50-a0f6-123811562f22", "sighting_of_ref": "indicator--1c132aaf-255f-4cc4-b136-c07d2b29b547", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795060cb-0103-4ead-b955-ad7e1e3574ad", "sighting_of_ref": "indicator--6be956e8-7b2e-444b-96fd-85646328389f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e1734a3-4353-442d-a0e2-ec65c1eda8f3", "sighting_of_ref": "indicator--d861707e-bc9d-4652-b227-7dd2353bcb3b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9cefd49-a671-4f2d-86f1-abfb12ee3a5f", "sighting_of_ref": "indicator--352355cb-e830-4216-afd1-234cb9f3ff64", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a726f50a-b761-4874-9cfa-4c19b4ea38c9", "sighting_of_ref": "indicator--bf4def8b-7a52-4038-9c37-b9e74c16afb4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d29a2b-7f70-4e66-961b-25d9ea214a6e", "sighting_of_ref": "indicator--bf4def8b-7a52-4038-9c37-b9e74c16afb4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1cd1b1-24ff-4ed1-80a8-d1c922acf50a", "sighting_of_ref": "indicator--a3636539-ed44-4ac5-9e88-e6093c00894a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc6d1d7-b410-4f1f-9a14-2782f8fda0e4", "sighting_of_ref": "indicator--85d8d226-6957-4b86-80ff-cddbcff0ddf3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68642b24-8e5e-4f28-a937-77ec479e66fb", "sighting_of_ref": "indicator--9fee2866-8b84-49c8-99ed-5251e610d3cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6dc16d5-7b08-4671-a09a-bc4347657284", "sighting_of_ref": "indicator--1ee2bd6b-05dc-4e7e-b330-2859b6c91c6c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d079f634-dd95-4647-9708-ea0e5f09215a", "sighting_of_ref": "indicator--1ee2bd6b-05dc-4e7e-b330-2859b6c91c6c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81fa7209-48a9-49dd-b081-cf172dff00e3", "sighting_of_ref": "indicator--150dd061-b8a0-460d-bf93-4d10aa16b815", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6921c66a-24c6-4a54-bd53-e1242433de8c", "sighting_of_ref": "indicator--148d0c54-df5b-4ee0-95cd-c656b5485587", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a856e2dd-ea9c-4da9-8210-45bddb463361", "sighting_of_ref": "indicator--148d0c54-df5b-4ee0-95cd-c656b5485587", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f7699b-2739-46e3-b5c8-5f83d3759bdd", "sighting_of_ref": "indicator--a7a830d3-041f-4e0e-9894-63e38f065534", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839cc572-42d6-4e5e-b9e6-a132bd96d326", "sighting_of_ref": "indicator--a827e175-2857-4f74-adde-d16c69622264", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9fa3f59-e4fe-4fd5-a3d0-442c4d5c7962", "sighting_of_ref": "indicator--7156c2cc-34f9-4f98-88c1-d6ed77ea381c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a7fdbe-5da4-4662-bae8-73dbb9277893", "sighting_of_ref": "indicator--08c87457-0ac1-4256-a0d3-8f0574a0352c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a46082-2e3f-4ae4-8546-031ad6353e6d", "sighting_of_ref": "indicator--95266089-1b0c-4106-8e2b-1152f8f9e591", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b78b10-0561-4be5-af95-7c0e813e7b7b", "sighting_of_ref": "indicator--1f339727-46ce-4ddd-b161-d33900a6087d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949c09c9-00ad-4e03-bdb3-8145c407d966", "sighting_of_ref": "indicator--f9df628d-8766-4d89-9b80-6d8c68cb6186", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe44315a-7bb2-4f7b-a948-00d3938efc90", "sighting_of_ref": "indicator--c238a9f5-d6c8-4a9d-a727-3de1ff3663a7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56072c7c-e3d2-4cb1-b10f-5694dfea03e1", "sighting_of_ref": "indicator--a6b0b699-c434-46ce-a5fe-b418b4e5a1f2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc1887d-8352-4b55-bc7d-6553c6824c6b", "sighting_of_ref": "indicator--ffdfc942-31f2-4ced-856e-e305ed117f40", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d74c207-5fcc-4136-b190-76ff70afa327", "sighting_of_ref": "indicator--5b7d3fa5-ab21-43ee-a405-1e9761415b6a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3fa6ba9-f0d9-491a-b185-dcc41eb46841", "sighting_of_ref": "indicator--6c66ea1b-9909-434f-97fd-95146ef202e3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c40a8da-bf60-4c0e-a4d5-32d3ecc2d40e", "sighting_of_ref": "indicator--5c503077-eba4-4455-b657-a9b7b4db72c9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3f379c-fcc1-415b-9d6a-67341d17c538", "sighting_of_ref": "indicator--efd309d6-80bf-4f80-aabe-75dab5fc2dc0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5047b444-a57a-42d0-90ba-a45e8729d979", "sighting_of_ref": "indicator--5ac5ab7a-ac24-45d2-b086-03349bdeeca4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f143c2cd-3dfe-4df0-a87e-40a732406287", "sighting_of_ref": "indicator--c4f37c5e-afab-44a3-811e-544ef3a885ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca89c2be-9db4-4965-90ad-be8a15c39f18", "sighting_of_ref": "indicator--19c5b6e7-dbb4-41c1-a25a-35e0055ac9ac", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a3d43e-0ab7-4755-aef8-815add9f695b", "sighting_of_ref": "indicator--19c5b6e7-dbb4-41c1-a25a-35e0055ac9ac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a3aedf-e7cd-494f-b5f1-8bfd95e97ddd", "sighting_of_ref": "indicator--5fa80b49-2278-4bdf-bf04-d2ccfe8858bf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862ced39-e2e9-4d1f-b4b0-3d1833686eb6", "sighting_of_ref": "indicator--a1d36f79-4ccc-4b6a-aec5-aae57ebf3d75", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed170a0-fe42-4755-bdc6-4dea8284a149", "sighting_of_ref": "indicator--a1d36f79-4ccc-4b6a-aec5-aae57ebf3d75", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbea35dc-9ca4-4bf8-8e8f-1845b26ae338", "sighting_of_ref": "indicator--e795b470-ecb6-446c-a2e8-62b89d2896d9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a3a047-f2cd-4f78-902a-f925fc212adb", "sighting_of_ref": "indicator--fa22525b-cee6-4e1e-a64a-7bdc02a923ba", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d4cdf8-b281-4bae-b416-0ca4b13c9f8c", "sighting_of_ref": "indicator--fa22525b-cee6-4e1e-a64a-7bdc02a923ba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605d3a8f-2d23-43c5-97b0-db2ecfbb9b23", "sighting_of_ref": "indicator--9b29ec97-bf37-4f1e-858b-5a205864502f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27426f94-4d97-4157-9a2c-3c34c3227fb8", "sighting_of_ref": "indicator--2db19d26-a5c7-46e0-823c-202740f74189", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9afe3a7-92af-463f-addd-e0d4183271b5", "sighting_of_ref": "indicator--cfaf481e-9301-4f1e-9f64-113fc642236a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4430460b-05ac-4a51-ab39-f1e231cd9240", "sighting_of_ref": "indicator--efe854e5-9bd2-4168-bbcc-e485a6f6adeb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0839d452-d655-473d-9902-7bf212ebfaa3", "sighting_of_ref": "indicator--5a6140f5-9d2e-4470-92f9-afe3ddf5aeb2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a179906-2fa9-4e7d-814e-bd0c85f425ac", "sighting_of_ref": "indicator--7afac961-54d5-4430-8fd4-0df74eb90979", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4750ca63-485f-43b2-9637-2a6717380c6a", "sighting_of_ref": "indicator--1da2143c-426d-4585-9cb1-846853882b56", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa33b377-254e-46ec-8f2b-5348dd72d5e1", "sighting_of_ref": "indicator--b10fe9f3-050d-42fe-90d9-b2eb9f51208a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70fd8558-c6b0-4c0f-b8e3-6cb2318391cc", "sighting_of_ref": "indicator--268060e3-c49c-4589-b83c-59eb222adc77", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363099bc-850b-4d19-bf8b-360c9746023d", "sighting_of_ref": "indicator--774dd3a8-2e74-410e-b84c-3e1bebe2728d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bedbe08-ab73-444f-8596-cb67015ec61f", "sighting_of_ref": "indicator--b63c5bf0-10d1-40ce-8ac0-f02c9f604d34", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c28ebf-c844-4ea9-a6a6-fcb491054571", "sighting_of_ref": "indicator--843a3ca3-5579-443c-9ed6-9318cbc0d834", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e6b3100-05e9-47cc-80f4-5f7469c4dfc5", "sighting_of_ref": "indicator--5c76cd60-79c3-40c6-a4bf-38ff0b1cec52", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98523cfb-fc80-4105-9811-d0854fe61cf9", "sighting_of_ref": "indicator--1ad2bc44-528b-4c8e-b097-dd7a0a1e382b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2d4d9d-2932-4e0f-9a06-a768faea7669", "sighting_of_ref": "indicator--267a6c2b-3c23-4d04-9b1d-55ea57388af1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6afebbd-cb3a-4b32-81a9-c7d46b209380", "sighting_of_ref": "indicator--01e4b00c-79af-4f62-b54f-05ae7a7de1c8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5dae44-8825-4cc0-958c-4441ad8f482b", "sighting_of_ref": "indicator--c1c563e0-9e9b-4ac4-9037-da1131bd35a6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e53c22-04c1-4de2-bafb-4302be77004b", "sighting_of_ref": "indicator--89f4a0b0-2a24-4d02-a9fd-f55d5e2f781f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--728fc1c9-fd6f-4c86-8c18-01966f5b0355", "sighting_of_ref": "indicator--2631d557-9e39-4b6f-867f-5aa9e7de4958", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca86fc81-c671-49f8-b6af-ea62c4b0f342", "sighting_of_ref": "indicator--fc0196b7-702d-4681-bea1-f472019b9ec9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a4b2e5e-0404-46fa-b206-b21252e99d1b", "sighting_of_ref": "indicator--fc0196b7-702d-4681-bea1-f472019b9ec9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64fe5868-7c09-4d9c-8463-12b79bc5583a", "sighting_of_ref": "indicator--bc410685-4544-4e7b-a712-66b1d089dbe5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea72876-d2c8-4594-8e11-81a187216a69", "sighting_of_ref": "indicator--8640c62c-c63b-4a31-b724-6d111f63072a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65820510-3109-4ed1-a981-2048dd131099", "sighting_of_ref": "indicator--b7d6bb70-aac6-4db2-ad19-254c66e752e6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ef4b2e-5c86-42f1-953a-dfda9a769165", "sighting_of_ref": "indicator--45e3c1d6-d380-4fe0-b867-3f25da74c88e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c7bff8-b6dd-4dab-b047-2998dafc9197", "sighting_of_ref": "indicator--45e3c1d6-d380-4fe0-b867-3f25da74c88e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--684daf7f-30aa-4b69-8ff3-d2a06adfc717", "sighting_of_ref": "indicator--f1a23108-8303-4e43-87aa-3b4725b52e4a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c537ccd-fd69-44eb-8e83-9e6c05aa0a50", "sighting_of_ref": "indicator--32841429-2388-4f56-a6ef-bebf14739a2d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945b810e-1056-485c-aeab-a59d252ced2a", "sighting_of_ref": "indicator--32841429-2388-4f56-a6ef-bebf14739a2d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0c1fd4-96a3-4240-909c-4d2c0ce5d506", "sighting_of_ref": "indicator--a1982300-d52d-49da-a099-832e170bc8b9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--657c2dc5-b63e-4e86-85d3-38bd2ef78b45", "sighting_of_ref": "indicator--c2b0b3d9-f7bf-420f-a626-8c4ef7344ce1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29fa527d-115b-4cbd-82d3-e2f1236dcf05", "sighting_of_ref": "indicator--c5142dea-f31f-482a-ad88-e412c564584b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def7374f-5f98-42be-8391-395f5c06a408", "sighting_of_ref": "indicator--c5142dea-f31f-482a-ad88-e412c564584b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3146e8c2-d2d3-4dbe-b23f-650068343e49", "sighting_of_ref": "indicator--fa2fc92f-e12b-4fa1-b422-b3316beaab85", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d86218-49a3-4e7f-812d-79cdca91ffd1", "sighting_of_ref": "indicator--fa2fc92f-e12b-4fa1-b422-b3316beaab85", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f48ae31-1593-4e8f-b9c6-45cd64d06255", "sighting_of_ref": "indicator--1ca15342-621f-420e-8f84-c0d6e51b31ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78cc5742-8a53-4c75-808c-58f9ed8531d4", "sighting_of_ref": "indicator--07adf769-a71c-4f0e-b52d-5a3295d7f7b5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8836d96a-96e2-4bec-a07c-bd5b6f745d27", "sighting_of_ref": "indicator--26d1c6f2-1ce3-41ea-a0ce-474fc4143fad", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3d31f6-ccd5-4dca-a17f-784967f75fd8", "sighting_of_ref": "indicator--ca111951-7efd-4efd-a919-4947dce62368", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b51593-14f1-499d-b9e4-abdc77da633d", "sighting_of_ref": "indicator--2afc840e-4083-4fc8-8ffd-8508019b52f6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d006a1-daf4-4fea-a6cb-c3fd4020b02f", "sighting_of_ref": "indicator--b25da1ea-b15c-4f6f-baa0-b213f7796aad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dbd7306-b270-4c74-8842-078113c48be4", "sighting_of_ref": "indicator--30e0160f-b84a-4526-b007-14d30508fc2c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d1425c-db25-4bcb-bc8d-ff0700e49a11", "sighting_of_ref": "indicator--58b29595-d4a4-4660-a683-81f71d6dc741", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0be1dd-1919-48cb-a26b-39deb1960d1c", "sighting_of_ref": "indicator--58b29595-d4a4-4660-a683-81f71d6dc741", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ebe96f-b305-447e-9be5-9c6f7d757fe3", "sighting_of_ref": "indicator--66a4ee65-d7d3-4073-bb55-31d42fc4faec", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--580da2df-81bf-45ba-80d8-54cb7842c7b2", "sighting_of_ref": "indicator--45fd3b5b-df72-4088-af9a-6558a6873130", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2ba7d5-451a-4a10-a481-6c9613ad6dee", "sighting_of_ref": "indicator--45fd3b5b-df72-4088-af9a-6558a6873130", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84739ac1-5ed8-4e65-94b0-5ee4dec0c88f", "sighting_of_ref": "indicator--10874fe0-2a76-4ea9-87f5-51579f833f9c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4ecce6-b80c-4626-8086-be8a07cd0590", "sighting_of_ref": "indicator--cfc36271-5133-4677-9f46-7eb8bb7cf3d2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c61d999-9fb8-4c9b-b826-526a1c4134f6", "sighting_of_ref": "indicator--cfc36271-5133-4677-9f46-7eb8bb7cf3d2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa2c9f3-4951-40ac-8b76-e9baf334d31b", "sighting_of_ref": "indicator--3b00fb3f-a7a9-4c85-8268-147a1b0e0ef3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b610df-6e55-4c85-9973-f2924e887d3c", "sighting_of_ref": "indicator--7399adf4-0129-4454-93f5-351fdcc1bbdd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efdc494-24a9-4246-a4b4-0627d2e691e1", "sighting_of_ref": "indicator--7399adf4-0129-4454-93f5-351fdcc1bbdd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f046d4b-d52a-4c8f-8516-3c94e198436a", "sighting_of_ref": "indicator--a0a21f40-a636-4b55-b3a3-15f87baaf68a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064ef619-77b6-409c-85ba-6b9c3aead8fa", "sighting_of_ref": "indicator--010296f0-5363-44ec-816d-2fb67eb2f76c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebfb71ba-240c-4875-836e-aaed30ec075d", "sighting_of_ref": "indicator--7948eb2b-d368-4df0-890c-13628358e011", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6477edd-6886-4509-ab7d-4bb14371dbc5", "sighting_of_ref": "indicator--901e6d31-69a7-4b53-8812-731a5a70a518", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8728472b-54f1-42c1-9114-cf7495d450ff", "sighting_of_ref": "indicator--91dc8757-05bc-4092-9dc4-90f71af68073", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2bd7ce4-9bd4-494d-8a4a-f452c8d28d35", "sighting_of_ref": "indicator--f9a039c6-7a46-4c68-ab4e-c1281235a50a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4751d009-947e-47a0-93ad-f1f254acbc9e", "sighting_of_ref": "indicator--f9a039c6-7a46-4c68-ab4e-c1281235a50a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79b65a9e-b40f-4919-accd-fe52496a01b7", "sighting_of_ref": "indicator--17c4f4f6-c94f-413b-bbce-d438245ac6db", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc404d9-aef1-44c7-a06e-57648193a90a", "sighting_of_ref": "indicator--17c4f4f6-c94f-413b-bbce-d438245ac6db", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e9a81a-8989-4dbc-b02e-afbd669d34da", "sighting_of_ref": "indicator--dc44470e-4cae-48da-820e-3ff8abf4c712", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db58fe9-a581-417d-a7be-53bcaecec19b", "sighting_of_ref": "indicator--dc44470e-4cae-48da-820e-3ff8abf4c712", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06205984-50b0-4ccc-a295-9eb98a4df04b", "sighting_of_ref": "indicator--272f4edd-66be-43eb-987f-fafeb2943a37", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06737d83-604c-4353-8e39-1bf961f4c724", "sighting_of_ref": "indicator--76380d41-d8f9-4903-b838-a02bc009fe19", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f760f30e-394d-42e0-b519-82b956c63ed9", "sighting_of_ref": "indicator--8abd82e4-9621-49c4-85fc-63c1c3d7fa68", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c641df61-3029-43f3-827c-161f6806c0ce", "sighting_of_ref": "indicator--7ab7455a-f765-4e18-8f70-d2351f648c7b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6f54d1-ece4-4e86-89ac-1e67ff2fb41c", "sighting_of_ref": "indicator--36e1000c-9096-4a55-a6e1-8502fdd2ddf2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12691b90-c368-4478-8803-734dc5e562c0", "sighting_of_ref": "indicator--6b082b23-d6eb-4da1-bdd5-863431fb5350", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ffebcfa-58ae-4899-9ac1-b042aed5bdd1", "sighting_of_ref": "indicator--6b082b23-d6eb-4da1-bdd5-863431fb5350", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--628698e9-7ee9-4bd5-8a88-efb36f55fbdd", "sighting_of_ref": "indicator--fbc90caf-af35-4aae-8dcf-db662d78d14d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df20f0a6-9955-4a44-bfc3-8011a6f7ce9e", "sighting_of_ref": "indicator--9812e573-7135-437c-912d-bd56beeb4955", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6cf927-78a7-4c1e-bdc3-5d42e7c2e423", "sighting_of_ref": "indicator--aa7d1f08-6ae2-4b70-af67-b67d23cc3950", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be826aa-1d04-4a58-84e2-755f61270f65", "sighting_of_ref": "indicator--aa7d1f08-6ae2-4b70-af67-b67d23cc3950", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73695f26-fd86-40ea-9228-3f1a94851794", "sighting_of_ref": "indicator--6551acf9-87e7-4542-b6b8-5618212de576", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44274a6a-69f6-4504-8e58-801f35553e35", "sighting_of_ref": "indicator--6551acf9-87e7-4542-b6b8-5618212de576", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99327b8-4fb0-4c15-99a5-f48d653be5bf", "sighting_of_ref": "indicator--7a4d4edf-96df-4991-9990-daa3a9d807ac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888106a3-d06f-4e6e-8d4f-53013c7f39a6", "sighting_of_ref": "indicator--f0b5df54-54fc-4cff-95b6-71fd56fbd663", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae96855-a2cf-41b6-9b82-6d47e0a54ce3", "sighting_of_ref": "indicator--f0b5df54-54fc-4cff-95b6-71fd56fbd663", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2147adc8-506a-48d8-abe0-1d55a390b7ed", "sighting_of_ref": "indicator--58f4124d-1368-4d46-a6be-d942164c77ff", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef59dee0-5c8a-4297-a686-71706da05900", "sighting_of_ref": "indicator--58f4124d-1368-4d46-a6be-d942164c77ff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb1c33a-3ce1-4d0a-9d48-b7bd1b5192df", "sighting_of_ref": "indicator--d61ccd00-ba06-4715-99c2-26bfac690543", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d525c2-43c1-44ef-9915-18921cfd6147", "sighting_of_ref": "indicator--b626a9ef-b3bc-4d77-b3e6-19adaa883800", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93b8e92-a743-47c0-bd50-f015b66b1ae8", "sighting_of_ref": "indicator--19168ff3-c407-48ef-8c1d-65241ad8adb7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc9eda2-edfe-4651-9650-1d26580921a3", "sighting_of_ref": "indicator--09394937-17d5-49f3-827b-97be0e2539ac", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a10735b6-8f72-4bc0-b970-8fafcffc690a", "sighting_of_ref": "indicator--09394937-17d5-49f3-827b-97be0e2539ac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eddc93b1-d36c-4a71-af62-1cd701cf96cb", "sighting_of_ref": "indicator--6cf4c80e-9302-409e-8a78-70cb402279b8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886b9f44-10c8-42e1-9c68-cc1effccdb26", "sighting_of_ref": "indicator--8b689c11-3e74-488c-90e2-f1668ff412e8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323b1b87-f943-4ff0-9eec-4e0e9172998b", "sighting_of_ref": "indicator--8b689c11-3e74-488c-90e2-f1668ff412e8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70fff724-2855-438f-881a-d6f854de0f8a", "sighting_of_ref": "indicator--abeb38da-1073-4f30-ac4a-c7203f850d15", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76583c3-d722-4625-befb-4502a6d42b8f", "sighting_of_ref": "indicator--abeb38da-1073-4f30-ac4a-c7203f850d15", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a1ff1a3-5a45-4f09-a272-96147901ea97", "sighting_of_ref": "indicator--82937a53-4d0c-4a5c-be37-a752a078c906", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02dbb978-15a4-4261-af4f-99e05efd4c00", "sighting_of_ref": "indicator--431a08ca-5e79-4cf4-80e0-d3e64020551c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30b20ea-08ce-49a6-acba-859c80de7755", "sighting_of_ref": "indicator--54f61e60-b484-4cd7-a371-f3d38e5c3764", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e799fa-98bb-4c4a-a56d-28dd31e735fa", "sighting_of_ref": "indicator--0d37f029-4cdd-4399-9370-576dd39a117a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecae5f3e-6378-4dd0-a436-30dd8d4447eb", "sighting_of_ref": "indicator--0d37f029-4cdd-4399-9370-576dd39a117a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1afea0c-e691-4edc-81b0-4e5fe7f80c0e", "sighting_of_ref": "indicator--8eba1d24-f0f5-42f6-a40e-ecfabf5c702f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9486bf07-6564-4617-ac13-4ae23fe5cda8", "sighting_of_ref": "indicator--8eba1d24-f0f5-42f6-a40e-ecfabf5c702f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80bb09a1-88ef-45b1-b061-aa801618cc29", "sighting_of_ref": "indicator--e34689fc-f11f-45e7-b049-e0b0d4f84597", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c09c9d-f45e-4c3b-b931-0d73608712e7", "sighting_of_ref": "indicator--e34689fc-f11f-45e7-b049-e0b0d4f84597", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a581a574-3fa7-416d-8235-6ac72a8bcd46", "sighting_of_ref": "indicator--d1b39cbe-9904-45e4-a3f7-d428c11f8622", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9246ab-a65a-49a8-8b9b-c3ff4072baf8", "sighting_of_ref": "indicator--d1b39cbe-9904-45e4-a3f7-d428c11f8622", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d706e613-9875-4baa-9496-c9af693d796f", "sighting_of_ref": "indicator--30bc42f6-6fd2-4b6c-8de1-2fbb935cbb4b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b0b39c-af5f-4f64-a983-3162433a1c56", "sighting_of_ref": "indicator--30bc42f6-6fd2-4b6c-8de1-2fbb935cbb4b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2458c888-f18b-4928-98d8-09bce7a63e43", "sighting_of_ref": "indicator--67bd2bf7-3928-4161-a45e-14bb10e83b7b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e65fe956-2889-435b-815f-21d0cc053791", "sighting_of_ref": "indicator--67bd2bf7-3928-4161-a45e-14bb10e83b7b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6707ca2-afe7-4e6c-8969-c5ba2218dc7f", "sighting_of_ref": "indicator--6a183755-c4f4-4f89-b646-0f96a30fb14c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a3e3baa-ce9a-466d-8267-c97d9372f975", "sighting_of_ref": "indicator--6a183755-c4f4-4f89-b646-0f96a30fb14c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d4afac-63f8-4aee-8aaf-73038dd65f97", "sighting_of_ref": "indicator--19961b49-4e2e-448d-8ca7-d6b85e73ddaa", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1fff541-f4a0-4db8-8a6b-fe103033360b", "sighting_of_ref": "indicator--19961b49-4e2e-448d-8ca7-d6b85e73ddaa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0fe253-071a-4b4c-9cc7-290c56246215", "sighting_of_ref": "indicator--66af70a2-bea9-4537-9391-0e657fdb7d18", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7bf4123-23e6-4bd1-9e15-3686a7e42f76", "sighting_of_ref": "indicator--260e1623-29b7-4aff-9541-1e97d6412abe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf22089c-793e-4e45-925d-3a0d6039a897", "sighting_of_ref": "indicator--f5994684-f503-4400-a268-865621cfdcad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70854eee-3ba9-4fa9-a333-de5126c46158", "sighting_of_ref": "indicator--f05921d2-baff-4eb9-abb4-4fb818f71ba8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b24e58b-8366-4d5e-841e-ac1d3659da3a", "sighting_of_ref": "indicator--71e5f937-575c-4a33-a650-3f37c2c90ab2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6158a864-231c-4e84-a84c-8258a2fde9dd", "sighting_of_ref": "indicator--71e5f937-575c-4a33-a650-3f37c2c90ab2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3bf96c-4b0c-40e9-9fb0-2e6b2da38288", "sighting_of_ref": "indicator--c966d231-8e87-461f-ac09-43a4936488d5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b8b3c5-c7c0-441a-80c6-b53f1eb21357", "sighting_of_ref": "indicator--fa3232b4-6733-4ed4-afc3-31a7279d178d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b590b094-9736-4821-9af3-9c48d789d816", "sighting_of_ref": "indicator--6a0874d7-5687-4836-9886-de7c3b4f1cdb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dbc16ff-d2e2-4386-a308-9aac9c3dd82b", "sighting_of_ref": "indicator--6a0874d7-5687-4836-9886-de7c3b4f1cdb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65fa3ee1-cd10-4748-973c-8f70e3fb832d", "sighting_of_ref": "indicator--66f65551-f74a-4c7d-ae21-f90c5512e28c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbaff89e-9e2f-44ff-9072-a85c7af4297c", "sighting_of_ref": "indicator--66f65551-f74a-4c7d-ae21-f90c5512e28c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4cca8e-b74c-44aa-8811-61075f948920", "sighting_of_ref": "indicator--6e7642d5-269a-434c-9681-edd201dbe536", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976e647a-2924-41cb-a257-a9ed8e3a3fc5", "sighting_of_ref": "indicator--f2c9d79e-9161-4066-89d9-e80ec1d3696a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750c956c-6994-40bc-b8c6-f51858fd8abb", "sighting_of_ref": "indicator--f2c9d79e-9161-4066-89d9-e80ec1d3696a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7081f14-6cb5-4a99-b873-fea2f1380638", "sighting_of_ref": "indicator--6be404aa-271f-4782-ba11-68a0b3f3dc16", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8477f81f-6bdc-44df-84f8-eb652872a0d8", "sighting_of_ref": "indicator--6be404aa-271f-4782-ba11-68a0b3f3dc16", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d53af67-8233-4647-8487-b6d43c1875c9", "sighting_of_ref": "indicator--7c5b8620-d477-42c3-b29c-39da82dd3944", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71aac86-ee0f-4449-897c-4a29c61079f2", "sighting_of_ref": "indicator--0ee22512-01a8-408a-a835-ff96e24b7025", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ff3a62-795d-4c3b-bc5a-2e91ba069d41", "sighting_of_ref": "indicator--0ee22512-01a8-408a-a835-ff96e24b7025", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f3ea31-7e63-4e43-b3dc-ef88816b5a04", "sighting_of_ref": "indicator--daa61891-2767-4ca3-b9f5-7448d63f6d35", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d7f7b4-bfdc-43a2-b0a7-5ac40448f520", "sighting_of_ref": "indicator--daa61891-2767-4ca3-b9f5-7448d63f6d35", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aee50bb-9512-4ddb-977b-1b635b05d159", "sighting_of_ref": "indicator--66faee44-6888-454e-9657-3d55e0c4edde", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c85d5e-7239-4c45-ba64-a28f64836f32", "sighting_of_ref": "indicator--2363ff42-8bff-47dc-87e2-1092a1680ebe", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4d0e1c4-0c85-42ef-b7a2-ddd6086f64db", "sighting_of_ref": "indicator--2363ff42-8bff-47dc-87e2-1092a1680ebe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9656fa-8738-46c2-bf51-7884fa01c8a7", "sighting_of_ref": "indicator--4ba7413c-c483-414c-945d-322d2e4f574c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96479526-c181-46d0-a622-7f786cdcfbae", "sighting_of_ref": "indicator--25cbca42-2a09-4dd1-a2dc-e835296504f7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea86107-f660-4cd4-850d-76381f3f48d5", "sighting_of_ref": "indicator--74cf6b6c-ad8d-4e6c-a8eb-f81695275d04", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e8960b-8200-44b4-9034-fd3fc109271f", "sighting_of_ref": "indicator--74cf6b6c-ad8d-4e6c-a8eb-f81695275d04", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77a2e43-8d28-48c1-bb47-54b4a085bda4", "sighting_of_ref": "indicator--395bc26a-59d6-4dd6-8e94-fac6c4efaabc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c547f7df-27f4-4221-ad51-9b5336c5ed16", "sighting_of_ref": "indicator--af2e5952-512e-4bcd-bd45-39ca12488ba0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d565acb-8171-4754-80a4-4319f19b1ddb", "sighting_of_ref": "indicator--307e7064-b637-4986-9822-746a677efd63", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ad6253-4f00-4c38-b20b-1a92b7961af5", "sighting_of_ref": "indicator--9814d4c2-2752-4550-8641-f34f07e97199", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94bd016-fcad-4d02-a114-3d006744759d", "sighting_of_ref": "indicator--90dbc7c1-8000-4eef-a309-0c432dcbd520", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3bf6857-c823-40b6-9a5e-f41fef6dd895", "sighting_of_ref": "indicator--e7dd060b-dcd3-46e2-812d-9ce9a5427eeb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213c5df5-51f1-4005-a1cd-43faaa499355", "sighting_of_ref": "indicator--8e4e21b9-ff67-4644-844a-6a8c7ae2e8fa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1361990-1d97-41a2-afb1-3db6d2576fb5", "sighting_of_ref": "indicator--dfa43952-44d5-493b-8420-3d808bc402a4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433600ce-db1f-437a-973b-6404ea2a57d3", "sighting_of_ref": "indicator--84c2d0f4-490b-44b1-a2a7-fff585939f3d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288961d5-69fc-48c4-970e-ab52eddc2546", "sighting_of_ref": "indicator--d76c3ea9-4f51-475f-b23c-e1d14cb3a027", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69dfff49-c4fd-48e4-a461-0c2bdad9d581", "sighting_of_ref": "indicator--d76c3ea9-4f51-475f-b23c-e1d14cb3a027", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd99d500-fe05-4c0a-aee2-97daaa637aaa", "sighting_of_ref": "indicator--ecb88bac-d962-4834-8afc-5bda8f5b9218", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9126134a-0e43-4c89-ae86-1ab71643761d", "sighting_of_ref": "indicator--9b857408-a278-4a3a-b0fb-aed2bef29e11", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2447a8f6-ec7e-40a1-9ea9-a75ec8283101", "sighting_of_ref": "indicator--9b857408-a278-4a3a-b0fb-aed2bef29e11", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f20053a-631c-47a9-9c5c-c9616ca5cfdf", "sighting_of_ref": "indicator--22e5fc4b-9cfe-4a7d-8ea2-aca2da766b3b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f03f85d-09f6-4500-b0fd-17e1db150f31", "sighting_of_ref": "indicator--cf059ea9-b254-4e0e-9d6c-9f489d294091", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dbcf497-f17b-4f7c-b879-fb445c29891a", "sighting_of_ref": "indicator--3a51f522-5cee-41a1-8ba6-6ed84f3fb7e7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac2ad63-dd90-47e6-8907-ace0012efe1c", "sighting_of_ref": "indicator--3a51f522-5cee-41a1-8ba6-6ed84f3fb7e7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1e54f3-8275-4550-9fb3-4f578e5ce492", "sighting_of_ref": "indicator--16cbab60-4163-45e6-bcda-b6a1d3b13c20", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88236900-f7cc-48e4-b831-f7ea36912952", "sighting_of_ref": "indicator--2a529e18-80e7-412d-bcf7-2c5202125bf5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd401d0-f19e-4758-9772-c00d1d50a5fb", "sighting_of_ref": "indicator--b1830a36-3dff-49d5-9fff-49d9a40b2029", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d6f2d3-82c8-44d3-8738-c31a5e7e934b", "sighting_of_ref": "indicator--b1830a36-3dff-49d5-9fff-49d9a40b2029", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b494918a-e411-4fc0-8bb0-f714eb841ab4", "sighting_of_ref": "indicator--3d854b66-6c8b-41dc-b241-1f5d34a0ca47", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3333129e-e778-4910-970e-607dafe4a8e8", "sighting_of_ref": "indicator--3d854b66-6c8b-41dc-b241-1f5d34a0ca47", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20343b2b-85af-4cfd-80e9-35d18a8f30d6", "sighting_of_ref": "indicator--46800b39-9c18-4506-82ad-db1e7f0e9d64", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc23d0c-e593-4b0b-bf40-3e44cf64fb7c", "sighting_of_ref": "indicator--bcfa87ea-c424-403d-bc6a-b74d3097c578", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e992bf-6044-4ce0-b267-99101511834a", "sighting_of_ref": "indicator--bcfa87ea-c424-403d-bc6a-b74d3097c578", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d64aad-3291-48e5-b1ee-ac901b12ea74", "sighting_of_ref": "indicator--6d79d2ff-4d1a-4f25-8e22-106c10169cb8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a10f5b-a147-4024-bc92-d38871431718", "sighting_of_ref": "indicator--d7e4f882-b1e3-47a4-9773-1715c141d144", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48afc21c-f51f-4f77-b9ba-253075e693dc", "sighting_of_ref": "indicator--beb4ce90-977d-4766-a06d-7dd038a0ad76", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe08c00-f14c-4a6b-9737-01c1b1bc9261", "sighting_of_ref": "indicator--c1748a80-f30d-4e50-a964-52d0072396c1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf2e8bb-d833-4f6f-a326-1ca8d99ce465", "sighting_of_ref": "indicator--c1748a80-f30d-4e50-a964-52d0072396c1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085bd756-6786-4119-9f4a-022c7b02f08e", "sighting_of_ref": "indicator--a73292fd-0bd0-4fc7-9731-a7598af7ac3e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07dfe1e-7a28-402d-aede-54bc3820a978", "sighting_of_ref": "indicator--3303e521-5155-43c1-9c86-a1824c5e4425", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a6ad96-d19e-4b45-93cb-925c66d93ef0", "sighting_of_ref": "indicator--e8327de2-6001-4bb5-a506-e6e66fab7b5a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddeb72be-6547-46a4-a907-93e3e30ec14c", "sighting_of_ref": "indicator--68702e1c-3195-4f54-8d55-bfea2306fa32", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6079ac7-5925-4406-b118-2b3619007016", "sighting_of_ref": "indicator--a25b7e11-b658-4811-aa7b-cb40df24514e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d4af4d-0df2-48ff-98d0-6fe7957486ea", "sighting_of_ref": "indicator--30effa4f-d89c-407a-a5a8-552a9ccf8d8a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aafbb99-447c-485a-9e32-86b688f8c094", "sighting_of_ref": "indicator--30effa4f-d89c-407a-a5a8-552a9ccf8d8a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5173c1-c092-4891-8131-366ac054b39f", "sighting_of_ref": "indicator--d6ea9a48-ff40-4fa4-9079-1ef1c3361663", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5676c7bb-626f-40fa-862a-29821498a846", "sighting_of_ref": "indicator--580d0a85-e65b-4911-ad03-5f18f23ab0b1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--441366c3-8b34-4e9d-a19f-6844a295dec3", "sighting_of_ref": "indicator--580d0a85-e65b-4911-ad03-5f18f23ab0b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d1b969-4887-40ef-8ee9-74d82aede56e", "sighting_of_ref": "indicator--65e7ebb4-0e32-4a50-8a36-5e2f9787db3c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a110b19f-91ab-452f-8f21-125eae6af086", "sighting_of_ref": "indicator--87a19728-cac2-4593-a822-7d514ecd52c8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc8627c-9b3d-4431-aa29-aefdceedefe1", "sighting_of_ref": "indicator--8fab17d8-7dd7-457c-bebb-4b63646ed105", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61f8a03-61ac-496f-9891-4e67bda7f40a", "sighting_of_ref": "indicator--8fab17d8-7dd7-457c-bebb-4b63646ed105", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2594a7-1537-4336-99af-862c9a467721", "sighting_of_ref": "indicator--9f9e1cef-1cb3-4838-835d-e576f6419e72", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d2d8db-cfd7-4e52-933b-d6521090fbe8", "sighting_of_ref": "indicator--9f9e1cef-1cb3-4838-835d-e576f6419e72", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c836c1-88e8-4fa9-9010-186d16e35ddc", "sighting_of_ref": "indicator--b9a3faf1-0454-4469-9d73-611183d7ff35", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe1a7eb0-fd0a-4e2e-a4bd-3cc641f1dba1", "sighting_of_ref": "indicator--b71abee8-313f-4eca-950f-caff49cd159f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c33f262-869b-4c08-a18c-33e8c4a78c7b", "sighting_of_ref": "indicator--b71abee8-313f-4eca-950f-caff49cd159f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1450a3a3-dca5-4c04-a8d2-6859b3bf110b", "sighting_of_ref": "indicator--ebcf4f7f-f49f-487e-be35-7ea92df88482", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2470e776-fcb9-4b77-92b1-6b6c6244abb3", "sighting_of_ref": "indicator--3c18fa07-7a8b-4088-8742-238cb534bb8c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce8bc0f0-0ccf-47a2-90c9-99b946ace8fc", "sighting_of_ref": "indicator--3c18fa07-7a8b-4088-8742-238cb534bb8c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a7a440-5947-45bf-a851-0dd268f8c13a", "sighting_of_ref": "indicator--f4973c3b-ab1b-491e-9683-f40ec8e006eb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cae5e7f-df97-42cc-8646-6c71dcfd6b76", "sighting_of_ref": "indicator--0594a066-c204-480b-834e-e7b4005441c9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23021e51-ecd9-40c4-b27b-34aaa0a01169", "sighting_of_ref": "indicator--b6c645da-05c9-4914-9556-916f0eaddf94", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6fc7b2-c6d4-46fc-9228-9f3ab7354930", "sighting_of_ref": "indicator--b6c645da-05c9-4914-9556-916f0eaddf94", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2b3261-764e-46f9-95bd-792aa9ed4135", "sighting_of_ref": "indicator--d0a93bc2-94d3-46a7-9397-82bfe157b984", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8035f90-5b32-454f-94b3-0d780b1eeb17", "sighting_of_ref": "indicator--d0a93bc2-94d3-46a7-9397-82bfe157b984", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6091e8d-5900-47b1-a23c-bb7027f908ec", "sighting_of_ref": "indicator--f1dbde3f-0aef-40c1-b735-b7d1a18e8504", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bccc4f2c-b888-476a-a23b-3d3637ccdd08", "sighting_of_ref": "indicator--f1dbde3f-0aef-40c1-b735-b7d1a18e8504", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d16593fe-8d34-4a80-a457-57ab64b808b2", "sighting_of_ref": "indicator--1bdf36eb-f7a7-4626-ab25-9454f45e31ed", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e07b33d-2498-44a4-8ec5-fb57a173dcd9", "sighting_of_ref": "indicator--1bdf36eb-f7a7-4626-ab25-9454f45e31ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43644ba1-09d8-4c19-99f7-afb3a49fcf5f", "sighting_of_ref": "indicator--ed260c51-3c71-4a5e-a46d-804896f90c30", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d80a906-b3c0-4c66-a34d-5c27902f2039", "sighting_of_ref": "indicator--0fdf09b1-1576-446a-a514-348b6f9af894", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd46827-b564-4557-8dd4-39545840e6f0", "sighting_of_ref": "indicator--cb1a79c3-0559-4786-9d32-d6076464694f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe23520-5719-450b-baf0-2c8ba9def96e", "sighting_of_ref": "indicator--4f9a4fc0-760e-4f2c-a0c9-ff71f0dc72d2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05bffebe-7f9c-4168-a7a0-832252568e3d", "sighting_of_ref": "indicator--096a0650-258a-412e-86c9-74ed71eed671", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--281665d3-ff8f-40a4-a489-1d9e0861acc2", "sighting_of_ref": "indicator--ab2b5ad7-2250-41b2-a575-27cc0e65f04d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28f1a01-cf87-4b40-b4fc-ed8ef3242b7d", "sighting_of_ref": "indicator--dac7d409-f84b-4f25-aa47-47e83f1462a5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5439b40b-05da-4abb-9ceb-3e41ae5089b1", "sighting_of_ref": "indicator--5cfe34f2-ebc0-429d-bd3f-dc0dae933135", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710abe76-7b9d-4343-8207-96eb4af6141e", "sighting_of_ref": "indicator--b2d9ffa5-6192-40f7-bb26-6a0c58913176", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8287d3-1ef6-4e08-90ee-2590c7f60c05", "sighting_of_ref": "indicator--751b0614-25f2-40ee-a788-8889f63b10fb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb7fed3-a1b8-4f8f-877c-e9cff958dd36", "sighting_of_ref": "indicator--7802fbdd-80a4-49b9-b707-f0ea5a460944", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bacc08e-a988-43a3-bb47-6d962f94ac55", "sighting_of_ref": "indicator--726d0999-d1b9-44f0-bbbb-15fe24c614c1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db4f350-07ff-4760-a1a9-216949e89361", "sighting_of_ref": "indicator--01dcaa44-3e52-482b-a98a-05d465ba5a0c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c8d0c0-958f-4c9d-8995-f77a23e09807", "sighting_of_ref": "indicator--01dcaa44-3e52-482b-a98a-05d465ba5a0c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b944da56-8c72-4d1e-99fc-e8a1497d4237", "sighting_of_ref": "indicator--d0a76fbd-1e07-477a-8c10-cc097a9a9d43", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ebe2203-179a-4b6d-983c-3c649142158a", "sighting_of_ref": "indicator--106215a4-dc51-40cb-912a-e05411aef5dc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a289db06-d282-4db1-8e04-db495581220c", "sighting_of_ref": "indicator--6041e59f-8ae6-4020-9ae6-a1887d2d9b7b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe43cf4-dbe8-453c-825c-a5daeec17e38", "sighting_of_ref": "indicator--f3cceef4-30e8-49d4-8884-df7e8adb8800", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512d5eaf-8c58-4ff3-a480-24063893577c", "sighting_of_ref": "indicator--528e38fc-9e8c-4855-94d6-6d3f6e314705", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc73dca-01d2-48f0-97cc-138c47ce1278", "sighting_of_ref": "indicator--528e38fc-9e8c-4855-94d6-6d3f6e314705", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9222107e-a099-4196-a3ed-e1bd84eb04b5", "sighting_of_ref": "indicator--e0d6ea3f-af8e-490b-93c7-b93a49ae0475", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ddcef13-4ad1-4571-a5d9-0058c22d2be1", "sighting_of_ref": "indicator--e0d6ea3f-af8e-490b-93c7-b93a49ae0475", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b1906fe-beee-4996-b775-d61d66d7994c", "sighting_of_ref": "indicator--64d3af33-3316-4bc2-b6ca-5d2f166d7877", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6787e0ae-35c6-4a75-b859-5ba36bf677fd", "sighting_of_ref": "indicator--0aa7e4d3-f364-4662-888d-ecaf2b9d92ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e241422-113d-4e6c-a440-063180714526", "sighting_of_ref": "indicator--140d6758-0f2c-46c4-9f2f-7f8e38b42751", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd071522-7232-4008-986d-758799b58688", "sighting_of_ref": "indicator--f361caa9-dd28-4e3b-a04b-3f3ed0bb0f58", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1aa585f-986a-4fcc-afc0-780fbf56c6e3", "sighting_of_ref": "indicator--1d3c7c90-68ad-49f4-9dcb-219cc3732849", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd5dc3d-4ad2-4e6f-a633-e9d405302881", "sighting_of_ref": "indicator--1d3c7c90-68ad-49f4-9dcb-219cc3732849", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e49bfb2-08a6-4e26-8477-e33b326236cc", "sighting_of_ref": "indicator--2d02e3ff-1d88-4267-aaeb-6f46fc8ea5d8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6562c20-de3a-4415-98b1-bd711b363eab", "sighting_of_ref": "indicator--447c29c7-9985-485d-baaa-07957c73600b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0817830-1ff0-4ccb-877b-32daa1867f13", "sighting_of_ref": "indicator--748c01dd-a16d-46bb-8f68-bed0c1ced9f0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e215a6be-737f-4757-872a-8a52c2b9eacf", "sighting_of_ref": "indicator--748c01dd-a16d-46bb-8f68-bed0c1ced9f0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a63f8d9-5e3d-4ed2-b715-437904d9883d", "sighting_of_ref": "indicator--fdd4d368-f143-41af-8a2b-789469b5f04c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f49c285-01d8-43b9-8fc2-f4f4bbac8874", "sighting_of_ref": "indicator--a4179d11-e274-4d7f-a9b8-edd4c47bb7b3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--540dae00-096c-464f-ae09-4976f4dfa593", "sighting_of_ref": "indicator--aed194fb-359a-476a-9658-f18b993108f3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ea0111-ce18-4f40-a371-a8556cdf8b63", "sighting_of_ref": "indicator--aed194fb-359a-476a-9658-f18b993108f3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836dc475-8605-4646-8620-d6701f328aaa", "sighting_of_ref": "indicator--3d65804a-ccdc-401a-b1d1-da434480a343", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c354391c-e0c4-4803-823e-6b1faf7fd05e", "sighting_of_ref": "indicator--3d65804a-ccdc-401a-b1d1-da434480a343", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c88f3f-da26-40c6-acc7-de7e282dadd5", "sighting_of_ref": "indicator--9e67d510-430e-43df-86ad-11ac36c00038", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010082db-1486-4667-96e7-fbe988b7eb6f", "sighting_of_ref": "indicator--5d484a21-09a1-453a-9a05-5722362d9203", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46ed381a-8abc-4b25-a429-9d2029b7dd54", "sighting_of_ref": "indicator--5d484a21-09a1-453a-9a05-5722362d9203", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018a70ac-3763-4fb0-beb5-1d3a85c4d4f8", "sighting_of_ref": "indicator--e004d152-5822-48eb-af78-852cf7dee796", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a234807-dbc0-4666-bc30-a850218a7acc", "sighting_of_ref": "indicator--e004d152-5822-48eb-af78-852cf7dee796", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e86d877-f774-43c5-8871-4c79d9c33371", "sighting_of_ref": "indicator--03271a64-cb03-4967-b66c-7f288275e165", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb7a29b-5d7f-4c77-bc1c-84a8d9e2996e", "sighting_of_ref": "indicator--03271a64-cb03-4967-b66c-7f288275e165", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0e17a9-8bb3-4ecc-a9b3-c714f3012cc3", "sighting_of_ref": "indicator--31af92dc-e4cb-46d7-8ee3-e1cda3bdb2d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de22bb38-d12f-4d49-98ec-824b49b264a4", "sighting_of_ref": "indicator--47e83d11-f2cf-48a6-a2fb-3ddda7364761", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4167cd9e-ed09-47f7-877f-5499a1e8ee5f", "sighting_of_ref": "indicator--055ea612-4947-47e7-a403-245c86cf3df8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a57dc2-0042-4ac0-8c1e-f1a9f9af3eea", "sighting_of_ref": "indicator--ab5f28bc-dae8-4aef-a05d-da80654256f6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb66c1d6-9cd1-4cf7-b575-4d9b8429b93e", "sighting_of_ref": "indicator--40922375-30fd-451c-9391-a44417f5911a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf49e20a-bedf-43b4-8fb6-008d703b5a28", "sighting_of_ref": "indicator--1f797b52-e82f-4000-b540-15824f59d0d3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d588baa4-8b6d-49b4-82d8-ab1ca71d5f00", "sighting_of_ref": "indicator--1f797b52-e82f-4000-b540-15824f59d0d3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240297c5-6bba-4ca0-ba6f-baee163600f8", "sighting_of_ref": "indicator--c857c8a3-206a-4316-a8b8-68c59d7fea19", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--106ff208-4219-4c5a-af14-69649647588a", "sighting_of_ref": "indicator--c857c8a3-206a-4316-a8b8-68c59d7fea19", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3828798-52db-40d6-ad1b-56ed4365c693", "sighting_of_ref": "indicator--8ab9fa00-c168-4c4a-8a02-ad72570662ce", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--077a5be3-9f5a-4a8b-ba6e-33de0812fe7b", "sighting_of_ref": "indicator--8ab9fa00-c168-4c4a-8a02-ad72570662ce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dbea006-9b62-446c-87b2-fa8c8fe6fe43", "sighting_of_ref": "indicator--966eea3e-63f8-4d47-abd7-57447ec934d3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9332fbc8-e9eb-4011-9328-d78c8e99fddd", "sighting_of_ref": "indicator--966eea3e-63f8-4d47-abd7-57447ec934d3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60dfad8-e7de-4e94-89bb-fbc662909caa", "sighting_of_ref": "indicator--346a14f5-bfbd-4f9c-a8c7-f14483bc7996", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9dde51-928b-4def-850c-6d7a2a816cd5", "sighting_of_ref": "indicator--9d85e094-0653-4e80-90e6-c41f04679492", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2250602e-ec89-4508-8c05-b48dda47ce62", "sighting_of_ref": "indicator--d01ad5ff-6e66-4de6-a2a1-93e560dc826b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9795e26-0f48-4496-b307-14979cbc394e", "sighting_of_ref": "indicator--ef279e7e-c66f-44f5-b5b5-609510aa8b80", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9fa2c91-56a7-49ff-ad3f-5f1e5b8a7459", "sighting_of_ref": "indicator--283a34bc-0989-4ca1-9086-00a285646d24", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5e4ab5-0d42-431e-a636-a11116625be3", "sighting_of_ref": "indicator--66664c35-93bb-4bf2-b3f4-0954a6909d98", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464750cd-d688-4a66-b283-ed94a4ca5c7b", "sighting_of_ref": "indicator--cd26d7d9-abd9-4095-95fb-205ccac34740", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065e4c7d-6219-4dcf-b760-27df361e5da7", "sighting_of_ref": "indicator--cd26d7d9-abd9-4095-95fb-205ccac34740", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e98197-239b-4340-946a-dab9a1a8bcda", "sighting_of_ref": "indicator--fbee883b-f358-4ec6-844c-ec78d8847d3d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee7879c-25db-4c75-9bd5-bdbc38a02565", "sighting_of_ref": "indicator--f1f720ed-9b78-4601-a7cb-0b550d906f63", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1cf6b8-4473-4b31-bc06-7ca319485309", "sighting_of_ref": "indicator--f1f720ed-9b78-4601-a7cb-0b550d906f63", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4f4cc8-2f9a-4f81-83fa-4ef89867bd3c", "sighting_of_ref": "indicator--8ab13a9e-dacb-4252-8577-e3530fcc684b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3ccec1-557c-4c8b-9492-3013b5cc625f", "sighting_of_ref": "indicator--d1f6db28-a3c2-4884-85d5-24136537a0f0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c7bc98-8938-4d42-a2f9-7b732bced900", "sighting_of_ref": "indicator--6282c67c-5a10-452c-8883-2d89cbac14a2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78455a89-9d07-4358-9896-5c13819e9a03", "sighting_of_ref": "indicator--029a9425-40aa-4532-ad1e-50c4caf22f89", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afa6bd74-3c01-4762-8541-4bfc19a34f17", "sighting_of_ref": "indicator--029a9425-40aa-4532-ad1e-50c4caf22f89", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43bcaec5-d62a-42d3-a17d-4520ad86bdb2", "sighting_of_ref": "indicator--7150d464-5b76-4b85-b547-3b40464db0bd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de97f75-7dea-4da4-9db9-9554d43b4f54", "sighting_of_ref": "indicator--a2ca5b83-334b-4d76-84cb-1eddb09170cf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6519d8e5-ccc6-4814-9746-b485d312ceff", "sighting_of_ref": "indicator--a2ca5b83-334b-4d76-84cb-1eddb09170cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdbb42ea-ef76-45a3-9e24-5f892da3c218", "sighting_of_ref": "indicator--feb66033-ea32-4532-8673-11077aea974a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a91927-dad5-4dc6-8bd5-05dc05e71a69", "sighting_of_ref": "indicator--9f9d3a0e-5cb3-4104-acd9-20ea8ae49539", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db95a822-d2b9-4562-b780-342720648203", "sighting_of_ref": "indicator--40c6034a-c2ff-4631-9018-7055190d3943", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b5ad8b-d706-4fa7-8695-6cd7084c3fe2", "sighting_of_ref": "indicator--a9c0387b-0494-46d4-88a7-5b10b0169086", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee32f0f0-e945-41cf-8844-9b621e6a1be1", "sighting_of_ref": "indicator--04314493-91d1-4f36-8f99-e58157b72d54", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2537d004-0f27-4bd7-8b6d-538d8cfd2d4a", "sighting_of_ref": "indicator--04314493-91d1-4f36-8f99-e58157b72d54", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1cf194-654c-47d3-91a1-08285a955207", "sighting_of_ref": "indicator--d29a2a1e-9b07-448f-88bc-412b7ce7affc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb295e3-772a-4c43-be05-b7fd80e2b373", "sighting_of_ref": "indicator--955a3036-dc8d-4b3d-a5ac-2ec33cddf755", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60c5471-bf0b-438d-b7be-6209ee1a3814", "sighting_of_ref": "indicator--955a3036-dc8d-4b3d-a5ac-2ec33cddf755", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2902928a-7a1e-421e-82b3-925371d2fc99", "sighting_of_ref": "indicator--d30a8b59-360a-4a2a-abd8-6e40e5fb55f1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac38706-709e-4052-94e0-942d7380b219", "sighting_of_ref": "indicator--1edec539-e939-41d1-acd5-24d1f0602cd8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9812101b-3fd9-49b6-825c-d7ad4d9694d3", "sighting_of_ref": "indicator--95417a7b-ec95-44b1-888b-d3320af6cc31", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab70287b-46dc-46e1-a988-bbbde8390cfe", "sighting_of_ref": "indicator--99403a35-6a55-47ba-ad7f-23b8250309fb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a87286-ca14-4349-be26-f1a838be73aa", "sighting_of_ref": "indicator--8b68d1ff-10e8-4d4c-b1db-13092473583c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca90764-07d5-4e24-bc20-50b9661bd9bc", "sighting_of_ref": "indicator--9d8d6e53-5704-4bf3-97e9-2f6b47dcf861", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1e2ba5-0043-4870-a275-6abd5dfa56ce", "sighting_of_ref": "indicator--e6843c7c-6ee8-4d42-bc60-15a40fa03fb1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d0b39c7-69d4-430c-b76b-2e397d468210", "sighting_of_ref": "indicator--2ca1048d-5ce0-472a-b9cf-1e0e14cd11b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f585852-6a26-4f9c-9818-907c7daeccf8", "sighting_of_ref": "indicator--b2c911d0-2dd4-4b8d-86b3-6c8ec0227cc8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db2c9dc-df27-4d3c-a35e-28105f0002c5", "sighting_of_ref": "indicator--79f2089a-ddc7-4ca0-9038-92d13326ab79", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055644a1-a5aa-45be-9ee9-d65a3bc83245", "sighting_of_ref": "indicator--461b8b6a-1a09-4de6-8dad-62f321d7ed83", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbaf69dc-6f6c-4dcb-854d-183c13bea6c5", "sighting_of_ref": "indicator--b95f7b01-4569-4fc7-a1cd-88f1ade0b46b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b97227-aba8-420d-abd0-3367145188d8", "sighting_of_ref": "indicator--0a97d5df-83eb-4aea-9d11-97fb3534a293", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60540370-f82c-4efe-8dfa-518ff7f6cb10", "sighting_of_ref": "indicator--eece9425-7286-4920-9031-91c8736cd79c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52898ba6-febf-49dd-b00c-9ab5093c6566", "sighting_of_ref": "indicator--47419444-c2eb-4a57-86c0-57de6a5fc291", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596d8e4c-14c4-4228-9779-f65dc2a99f10", "sighting_of_ref": "indicator--8451c7f0-1922-49b1-9462-e0710396177c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0559bca4-f6fc-4f11-a2fb-b9ff661f7557", "sighting_of_ref": "indicator--c4cf0b27-cf94-4bbd-92c5-88fdb636439f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35043c87-d6f9-43cf-a65c-578c70276959", "sighting_of_ref": "indicator--0fcea738-db58-4851-9240-cf6bc11d2d94", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2df383-9b56-4c97-be87-3c14002b1725", "sighting_of_ref": "indicator--6f71b218-f78a-4df6-ac6f-fc9f585b348c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6e5ee8-75cc-483a-b327-9d93bf40be7e", "sighting_of_ref": "indicator--fc0ed34c-0386-4aa8-b685-9c2f61a4c630", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e646d7c7-5492-48e1-9ce0-11c1627d7248", "sighting_of_ref": "indicator--c456436c-0fd9-4ddb-8e3f-31446f82b05e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a1f246-2afa-4f5d-aaf2-e78f8feb5b27", "sighting_of_ref": "indicator--9a17a47a-937b-4302-84ac-af5a12bd7ea9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1420bd-0cd1-4c10-93ab-4fc99d6042bc", "sighting_of_ref": "indicator--9a17a47a-937b-4302-84ac-af5a12bd7ea9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f889619b-28e8-495e-b0bf-fe58b6e6ccff", "sighting_of_ref": "indicator--56eff6b5-f169-48f9-a180-678884702558", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e565b780-0daf-4b86-aa24-289bee633bb6", "sighting_of_ref": "indicator--8eb7408b-558a-4f5f-9cce-8dc4d6726200", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe12b75-845c-4782-958c-99de32d2762f", "sighting_of_ref": "indicator--eda69fcf-cb96-4457-bdac-81b696d81acd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6680c299-ec84-44fc-939e-31fa3a39fb80", "sighting_of_ref": "indicator--eaa5d35c-5a1e-4deb-b2d3-ed6f64b934dc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0d56d0-c1ae-4862-b0fb-ce8e2d6371e9", "sighting_of_ref": "indicator--eaa5d35c-5a1e-4deb-b2d3-ed6f64b934dc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b65574-0a41-424d-9f71-67604b450aeb", "sighting_of_ref": "indicator--d2f95295-23d9-4260-aca5-1bd9277b19ac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f47ab52-4ea1-453e-81e1-6b50e363e641", "sighting_of_ref": "indicator--065bd48e-d4ae-48b9-9a9b-a0ad5c45491a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c981f9-0518-48fc-9919-7a7b3b3f06dd", "sighting_of_ref": "indicator--065bd48e-d4ae-48b9-9a9b-a0ad5c45491a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824bffee-311f-456e-8354-22aab710f29a", "sighting_of_ref": "indicator--9d815abd-5b73-47cf-aa4f-2854cfe13e7b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e515b8-f767-4747-82e5-dad7875e8080", "sighting_of_ref": "indicator--8752a22c-a996-483b-aa23-a99cb9f1bc38", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26d8b96-f0ed-4866-962e-568e3809360a", "sighting_of_ref": "indicator--d600e40d-41d9-4490-a493-d21080a9e13f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced32e18-988b-4f5b-99d5-eae0fe93276f", "sighting_of_ref": "indicator--b7fea02f-635e-4940-b4d3-aa7178f9b810", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90ac729-5f19-4b77-939e-988030f22f17", "sighting_of_ref": "indicator--298f5b0e-fdec-4175-8461-9b3fef514bec", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f9c9c3-e517-413a-aceb-105c82b60074", "sighting_of_ref": "indicator--f046d1e1-8ed9-4429-ba87-c1781d4dba30", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec424f5-7881-4714-a02d-19f7251853cf", "sighting_of_ref": "indicator--4a0f7bfb-86eb-4723-a453-a14abf4ecc00", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94d8361-7176-4722-abca-3dcc7cbeaaf0", "sighting_of_ref": "indicator--f5719375-7333-436c-88df-7bf87c7e3392", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d47dd7-5e9c-4382-8a17-464b01de4156", "sighting_of_ref": "indicator--f5719375-7333-436c-88df-7bf87c7e3392", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946c2902-f9d6-4edc-9f92-13aefc1908e2", "sighting_of_ref": "indicator--54011e04-e955-4e9f-a1bc-945287b4f96b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b81802-eb81-40f9-b752-19137fb84403", "sighting_of_ref": "indicator--3add6476-561d-49e7-a28a-2fcab571433a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6549991-f222-4111-9325-28cc4176c741", "sighting_of_ref": "indicator--279e60b8-89d2-4a64-9893-ef16d1949b7b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47542ab2-031f-40df-a5a5-e5cd0e2ed1a6", "sighting_of_ref": "indicator--279e60b8-89d2-4a64-9893-ef16d1949b7b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48c0dfe-b897-4837-b3b5-4b203397a721", "sighting_of_ref": "indicator--188cdb4e-8355-4ff2-b2dd-23350a0ae15f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f89eb348-5e11-4713-a555-31e377bc38d8", "sighting_of_ref": "indicator--ff000ebe-6d73-44b5-a336-20ce06009329", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cab828-825c-4621-a388-a8572569038c", "sighting_of_ref": "indicator--2d734737-e4d2-4660-ac91-40bb21cf6dc4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6395b49-2785-4222-86cf-c13bf6f86fac", "sighting_of_ref": "indicator--895d9ab6-7031-4251-aaa9-75f1e8ce7ae3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013c4994-fa3b-4ae3-b5b8-18ed9f886b96", "sighting_of_ref": "indicator--be42d7f0-a19c-447e-b37a-ca92205bd561", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--184cf9a6-22f6-46eb-872b-7ac26444f42a", "sighting_of_ref": "indicator--e1b0151a-4555-490e-9b4b-8fa3433a0e99", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc64d06-9361-4dcc-8672-46e5d34b2e36", "sighting_of_ref": "indicator--20e59d26-2af2-455b-8955-35ac0d1f8ee1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ce94f8-6113-4393-bdc4-8f28e65a33d5", "sighting_of_ref": "indicator--d7a4350b-6b29-4e0e-8578-5471eb4260fd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f43b5d6e-5268-4cbc-a4bf-6bd0138a5e8c", "sighting_of_ref": "indicator--4ba0c00e-0abe-436e-877f-dd351c18aa0b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14578db8-b38a-4707-9bb6-07b9a7b76a8d", "sighting_of_ref": "indicator--29e97356-a259-48e6-9e3a-af1a33fe7dd9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1370a35e-49e6-4dec-ad61-4b61f837f1d2", "sighting_of_ref": "indicator--53ef888e-cd95-497c-901e-c154c06bfbce", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f88a53d-691d-49a5-9789-c9e0dde8992d", "sighting_of_ref": "indicator--cc7d81e2-a1ec-4d3f-8af8-fb6f51ef6cdf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1bc1a9-5c23-47b2-a8d7-b3afd96b3a79", "sighting_of_ref": "indicator--0509de72-c2bc-45eb-b7d0-9ac6602658f9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3240dfb-580f-44ea-b97d-aeeec409edfb", "sighting_of_ref": "indicator--83d997d6-6e86-4842-ac05-0f2be86cea28", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800cde62-ed82-485b-a803-fee17fd03202", "sighting_of_ref": "indicator--8ce0f613-4c32-4797-94cc-12c0838b7556", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c54d4a3-f791-4523-b4b4-9c92ad710ed4", "sighting_of_ref": "indicator--08e3378b-9f1d-4e60-95d7-2ed073f64565", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9a48e4-cda3-460d-8970-9715003d4c7f", "sighting_of_ref": "indicator--ddee7bce-f374-4e0d-8345-7bb8aa057c63", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5968aafe-0a25-4706-af7e-210b92b89c1b", "sighting_of_ref": "indicator--e7c60ee2-3767-4ce1-aec2-478b0218eafd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77447fa8-c3d6-4407-bb0a-70eef6736b3f", "sighting_of_ref": "indicator--64209182-aa41-4eef-98b6-e8623c4b8601", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12f7440-d0b3-4907-b829-4a6048f7bda2", "sighting_of_ref": "indicator--c5dc388e-4f07-4346-8296-0d40c1d83f47", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff56787-0063-4dbd-8db0-035828c6c2df", "sighting_of_ref": "indicator--72c9bb53-eddc-42d8-8af1-476070c4edba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b982e5-290d-4454-ae86-b30d886c42dc", "sighting_of_ref": "indicator--7998e0e4-c5ca-4fe3-b28a-eabb56347af4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080434ad-8bc3-4808-9a2e-ed18d85fee4c", "sighting_of_ref": "indicator--e7581870-5e50-41fa-abf0-c4ec4ab2eece", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2c505e-9fa3-4925-9f81-602a474b2c76", "sighting_of_ref": "indicator--e7581870-5e50-41fa-abf0-c4ec4ab2eece", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dff700b-f23f-4e50-8af0-222f77c34187", "sighting_of_ref": "indicator--9d17d391-5a2f-491b-a2f9-f7455b6545ea", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09596da5-77e7-4e3d-a9f4-3759177c7272", "sighting_of_ref": "indicator--9d17d391-5a2f-491b-a2f9-f7455b6545ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97cf5890-abcf-4db7-8668-ac3708039ac1", "sighting_of_ref": "indicator--b50bf662-c2c2-4986-a323-123b0da62433", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8da5f86-30b1-46d9-9345-b47f93fb5fe4", "sighting_of_ref": "indicator--96c10083-cea0-4f45-9f6b-22befb97d283", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bcea94b-6a25-4f81-9481-5f5fa50e7513", "sighting_of_ref": "indicator--be2df3bb-2d04-4fbc-a217-4a983696c069", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d0ad1c-e594-4939-8b3e-640058691248", "sighting_of_ref": "indicator--a46cb447-3a3f-4bf3-bdb4-cdd4f219b328", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a296a919-0b97-44bd-8adb-37de3afa0575", "sighting_of_ref": "indicator--d0a28063-8145-4be1-a5db-2ecc59c57e8f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27e02b8-b3c6-43c2-b9d2-17bc10f30744", "sighting_of_ref": "indicator--c1130635-025a-4c51-86f6-83cbe141134a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f211289-1b75-4c4d-8e8b-3839cea6f5cd", "sighting_of_ref": "indicator--9849e5ac-58e5-4ee3-b4c7-48f9c9148971", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc117a39-8a72-4568-ad8c-e2b9f319f42b", "sighting_of_ref": "indicator--7b0071b8-a503-4802-9923-fe87894e2ea6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ecf43a-20c1-4587-8273-b82f3c910b04", "sighting_of_ref": "indicator--b3d6cbc0-2fe4-48b0-bdce-2141d3fdc53f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99331404-ef7e-4ed1-ad32-8c25e2e476f6", "sighting_of_ref": "indicator--65fd9347-bb23-46b5-9474-d7af7a7628b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6de9692-34c4-4946-966a-d001c4402185", "sighting_of_ref": "indicator--b8c0e57e-bd3a-4179-b72c-4bea5b512c22", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ced845-c2ec-4c11-9693-c85db6a34728", "sighting_of_ref": "indicator--39c7d5df-c98b-42b3-9b50-004915941468", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36fd2dbd-0797-48d5-92c9-c36a9fae1dd2", "sighting_of_ref": "indicator--fd5a781c-a56a-4064-917a-ee52d73ca101", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da620128-f45d-4235-8c8b-c0884695ac65", "sighting_of_ref": "indicator--fd5a781c-a56a-4064-917a-ee52d73ca101", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb93647-b798-471b-84a4-cd1254be1fde", "sighting_of_ref": "indicator--79c9812f-383f-41fe-95c1-e210d14c8f8e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747f6f32-2341-456b-b81d-ebe731de3527", "sighting_of_ref": "indicator--9613e90d-b45e-46df-8838-0afb1154c2a4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065ce716-6aa7-494a-87c4-ab305b854ebf", "sighting_of_ref": "indicator--c4307d7c-7eaa-4323-beff-95863c3ac7d4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc98f10-ef27-42ea-98c9-f533d9b21f4d", "sighting_of_ref": "indicator--38591985-9925-4eb9-993a-90d3fd62a848", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ee456e-e971-4622-b19a-e34315bd2f42", "sighting_of_ref": "indicator--26766e26-d212-4725-b184-161287be4e61", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aead3788-29eb-4d96-87be-ef92bcf9677d", "sighting_of_ref": "indicator--26766e26-d212-4725-b184-161287be4e61", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a275f8b4-8c0d-4ff3-ba59-db97fbe2bab1", "sighting_of_ref": "indicator--191526bc-1a3c-4d7e-bbaf-e8c66104654a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46e1e31-4562-48fb-afc3-762059ac6d24", "sighting_of_ref": "indicator--5a24be56-32d2-4a82-b9a3-303603944e49", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b399c1-1e4e-478c-875a-7f485dbe4137", "sighting_of_ref": "indicator--4b47ec30-354d-48d3-a253-be41d281d51c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84aeaf7c-d12e-47cc-a93b-4e048221ac56", "sighting_of_ref": "indicator--00293bef-fa08-44ed-b5c6-c110f31ad520", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b69a8fa1-d7cc-43b1-903a-5a6965ed8489", "sighting_of_ref": "indicator--127a1d8a-75d8-487d-ac9f-67f5a9ea89a6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173ca1fe-b82e-4713-aedc-e7eaf7a93e1f", "sighting_of_ref": "indicator--127a1d8a-75d8-487d-ac9f-67f5a9ea89a6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6a40b7-77d6-4d72-8b05-925165ef73f0", "sighting_of_ref": "indicator--1df3b16d-75bf-4f85-93a3-0a56ba481891", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9d1554-93b2-492a-b6f4-44c51ec1437f", "sighting_of_ref": "indicator--1df3b16d-75bf-4f85-93a3-0a56ba481891", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62f7f91-8ecb-4641-9d28-8c403ca61b65", "sighting_of_ref": "indicator--d4f6cd81-910b-4dad-8ed4-0fc56c464b29", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a05da13-c405-4b94-8a83-71295c7f848e", "sighting_of_ref": "indicator--d4f6cd81-910b-4dad-8ed4-0fc56c464b29", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea06795d-4cfc-4694-a121-71602a8d68eb", "sighting_of_ref": "indicator--a24942c9-e8a4-4a04-9522-4f3df8ae3570", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13bf92dc-acc0-4c40-af26-efe39d7755b4", "sighting_of_ref": "indicator--a58d1c0e-7dc2-4f56-9b5a-fee277ba18ce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048fa518-3954-402b-9a5c-36da0ef98b51", "sighting_of_ref": "indicator--0991d800-6e29-4e90-b092-e6c94869916d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5542f18b-c322-4118-98d6-3f94fee48835", "sighting_of_ref": "indicator--0991d800-6e29-4e90-b092-e6c94869916d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2714d1c3-6942-4222-beeb-33b61ef77df3", "sighting_of_ref": "indicator--5fd4eed5-4c48-4168-a95a-dbe5153e674b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3d734b-1f68-477b-afbc-537e87b8f234", "sighting_of_ref": "indicator--5fd4eed5-4c48-4168-a95a-dbe5153e674b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b2c005c-7e18-471c-ae53-2241a7d36b39", "sighting_of_ref": "indicator--1ab4696d-a092-478f-9b5a-5ee0f661e413", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fcbeed-d058-4fb5-8b61-6bd4964fb2e4", "sighting_of_ref": "indicator--1ab4696d-a092-478f-9b5a-5ee0f661e413", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8adf9058-0584-4d9d-bf37-9213aa1be45d", "sighting_of_ref": "indicator--80a3e91a-0801-4960-94ef-078efd060ec0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c44cb8f4-a947-476c-ac9c-b87d348848be", "sighting_of_ref": "indicator--80a3e91a-0801-4960-94ef-078efd060ec0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c400872-898d-4535-bd8f-dec905d070d1", "sighting_of_ref": "indicator--55c450ee-bd86-406b-879c-318e42e420f7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8c54a8-74d6-4ced-9592-c84c30446850", "sighting_of_ref": "indicator--c444f78f-1687-49dc-a39d-f16a02ebabb8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50df0b5-d610-40a4-9456-8286fadf70ce", "sighting_of_ref": "indicator--d6cecf4c-8cbe-4482-970c-9688df497de1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f180ac-32db-4bda-b2fd-086c04694a59", "sighting_of_ref": "indicator--e055ab3f-9a8f-4a27-ab50-45b4c622c350", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff685c7-160f-455a-9118-ef67f599a508", "sighting_of_ref": "indicator--816f2297-3c6e-4939-9bf3-2caecf3bf254", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c949783-c5e9-4437-b8d7-9be94ee1d28f", "sighting_of_ref": "indicator--e4c9ee89-d5ca-4ef1-8ab0-aeb38b9a6a4c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13fae502-a4f6-4e74-bed1-a2d2de797872", "sighting_of_ref": "indicator--c634b37d-dd21-420d-82c2-277edd4e1a27", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094999ad-904d-4055-adb5-84a7b09c4632", "sighting_of_ref": "indicator--84a346be-8ec8-4127-baca-2071ee2a55e1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e235ccbc-8e76-40d1-af4d-d3fe05ce9657", "sighting_of_ref": "indicator--558dad3b-4b91-4273-9a3c-029241d0a1f7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b72a847c-992a-49fd-82ba-055a6e9375e8", "sighting_of_ref": "indicator--b3f353c1-3e42-4cd5-8b86-3a2f12bc600e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb74cf66-9514-4e04-8096-607312308ac2", "sighting_of_ref": "indicator--b107b6f5-1e11-4e7d-8505-e2a71405b676", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b798ca-9e3b-463e-a96f-324f9a949fe9", "sighting_of_ref": "indicator--b107b6f5-1e11-4e7d-8505-e2a71405b676", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4cc27c-e36b-406a-bbe4-11a650c85c8a", "sighting_of_ref": "indicator--06edc1ef-48bc-456d-b724-7ee438f93dc5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--756746f6-beba-46f7-9af1-d13c203cf88f", "sighting_of_ref": "indicator--978dd11c-14ea-431e-be30-cc3ca2211826", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4ac2ed-203f-4bc7-86c8-b1df9c2c6aac", "sighting_of_ref": "indicator--978dd11c-14ea-431e-be30-cc3ca2211826", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f015fe7c-3b19-464e-a02d-3693f714fdac", "sighting_of_ref": "indicator--09fe348f-5a5c-4b3e-8975-e481adf6fa70", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--704e4e50-f9c4-4725-af48-0c8a79b7a80c", "sighting_of_ref": "indicator--7164aa59-1afc-4de1-bcd3-abb8a73d581c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5093afe-4a78-4d8b-9073-e1053a983128", "sighting_of_ref": "indicator--f2059b81-a004-4e35-acda-736259363651", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c62f08-8d1b-4be8-ae1d-8d3aa98175c5", "sighting_of_ref": "indicator--31da1278-cf42-42c5-97c1-b988f5355972", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--987f0970-15a3-418a-ae10-23ff6e888746", "sighting_of_ref": "indicator--cff6e7c9-bde6-4096-a60b-55e9b79969dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d074a3bc-4b5a-4c1f-b9a3-e1cbd73300f6", "sighting_of_ref": "indicator--4a716ac5-cb36-4bbf-a184-f36d639a766b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d708ca59-630f-4d02-8678-e44428e9983f", "sighting_of_ref": "indicator--169828bb-b447-4e33-a5e3-e57ebc0b1dba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0d72f5-953f-42cb-aea6-1cb73b59b99d", "sighting_of_ref": "indicator--9e74b9a4-9d4c-4c73-8e5a-2c36b363a3e8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f139663f-7966-4316-b456-5b2e10f74ced", "sighting_of_ref": "indicator--588f43de-b062-4061-b340-5c32b5cd6759", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162d71b4-47d3-4939-9ed7-8a0c8e05bf69", "sighting_of_ref": "indicator--69582a17-9447-4f60-b4a0-d6e008c9bc06", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff23646c-a4b6-42a2-a9ac-c0c499de1f29", "sighting_of_ref": "indicator--69582a17-9447-4f60-b4a0-d6e008c9bc06", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dccf2ca5-4dd8-46de-88f3-14cfda182481", "sighting_of_ref": "indicator--fab49e42-4960-4c63-af42-dcd0b8cf947c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f5c8724-a619-4b3c-877f-326cdb763af5", "sighting_of_ref": "indicator--fab49e42-4960-4c63-af42-dcd0b8cf947c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b82c1fd-44f7-4f9c-b26f-b850fcd0f180", "sighting_of_ref": "indicator--67bf3aeb-20e9-4d1d-8f3a-8e1511582c42", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff953174-0cb2-40ed-8c50-e9e300abc786", "sighting_of_ref": "indicator--00b880fb-08f3-4572-9dda-5e2f5ebf6fef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f095b637-9f87-45fc-8e0b-f0188deabb65", "sighting_of_ref": "indicator--6a047358-c369-4e67-bf87-a9d0023889cc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--062fd672-6735-4517-a4f7-28ba7608617f", "sighting_of_ref": "indicator--79568d9b-2f36-4192-8b5e-4b0efc8cd1da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b487a5-8a4f-4602-bedd-47337e74276a", "sighting_of_ref": "indicator--53bd4ded-0299-4101-bbcf-9562083f0e17", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aaf0f57-14a4-4463-9bee-dc4424feb697", "sighting_of_ref": "indicator--582c2eab-db9d-4295-a7f5-6c7c8e57f437", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7ba615-cf84-40e0-bc09-34e0766bed28", "sighting_of_ref": "indicator--1ee4463a-98d7-4822-a00b-2419cc7f946d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eda0a39-0fb7-47f8-ac6d-340d8389f3a4", "sighting_of_ref": "indicator--1ee4463a-98d7-4822-a00b-2419cc7f946d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88897031-f353-42b6-8916-fa59406609ed", "sighting_of_ref": "indicator--77bd2113-e7bf-48c4-ace0-aebebb4560f6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65bd007b-7621-4999-958e-0ba7cb1251b7", "sighting_of_ref": "indicator--999cd9d7-6881-4276-83d2-b4b13131dc55", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--541cdfc8-7233-48a1-89a0-f5fbfc94480a", "sighting_of_ref": "indicator--f6906daa-914d-4a1f-bd33-755013d53eed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b661b2-956e-4eaa-ac7c-6edeec91089f", "sighting_of_ref": "indicator--cf58ab23-b802-4e98-92cf-ba185c1d2561", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d253b4-f7b5-4064-b684-2f1e5fe264f1", "sighting_of_ref": "indicator--7fdd9594-2450-4b3c-8a92-4253e59c455d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57628ae7-828f-4a53-9b67-2e9ca418317a", "sighting_of_ref": "indicator--d71ff4b7-07fd-43db-94cf-ea56593de7b7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1662777-405a-4180-883a-a45995cbcb3d", "sighting_of_ref": "indicator--d71ff4b7-07fd-43db-94cf-ea56593de7b7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7cc3676-d99c-4d02-97cf-d10fc9779bd8", "sighting_of_ref": "indicator--c77c4d50-60b6-4740-92bf-3027bde6486f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a9323ac-a241-4a15-b2d7-8dfb254d4a39", "sighting_of_ref": "indicator--3831a1bf-2eb0-4227-b797-2690f3d6693f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3586c29-7b90-4137-9766-cd14342b0307", "sighting_of_ref": "indicator--fb2abe79-f4ab-45ef-9752-0f064273043c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8410256-55bb-4307-a4fc-b69be0b0712c", "sighting_of_ref": "indicator--30ee0918-622e-4940-87b5-5d5facd94cff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e987c708-c36d-45a7-b91c-20d46dd19137", "sighting_of_ref": "indicator--7470d629-48c8-426c-a8c6-255ccfa2e53f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07562454-06e4-49c0-a4ec-e25acf50346f", "sighting_of_ref": "indicator--824c1613-6017-44dd-96b9-35337790196d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5a742c-3fe3-4d41-9935-201b0e498d87", "sighting_of_ref": "indicator--b21f3d78-bfc2-46f3-924f-9415129941a3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a89dd674-ca27-448e-8954-e98cf7b8399a", "sighting_of_ref": "indicator--29e006f4-137b-4fbf-a60f-253557ad3fb1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0578056-eed1-4dd0-9dec-843f966d1897", "sighting_of_ref": "indicator--29e006f4-137b-4fbf-a60f-253557ad3fb1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4057cf09-7e75-4a9d-9a3c-a9875358f622", "sighting_of_ref": "indicator--49ce88c9-3b8a-446e-a5d2-4778dc4244d4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243c43a6-17d3-4648-91be-61d7da3412ba", "sighting_of_ref": "indicator--dd713bc5-c638-472b-908a-9bb4d861cedf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291dbd9b-c257-440e-aee5-ddd93935c211", "sighting_of_ref": "indicator--4b39863e-7da2-443d-bef2-a4e28b425d9f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46553290-9909-454e-9c4a-f7ec5b5358cb", "sighting_of_ref": "indicator--502e8c05-c8d3-4a9f-a702-0fbd8e7cbd17", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464e9db4-8cc4-4820-a14c-91f404f1e8e8", "sighting_of_ref": "indicator--8c55b7b2-1d68-442a-9351-0af42b5cde25", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ae2ded-2e31-4667-8f1d-cf186677fd05", "sighting_of_ref": "indicator--c4374b8d-d004-441a-b775-2643dbdf918b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca31940-0176-4a6c-a06d-5aaa48682ecd", "sighting_of_ref": "indicator--6929cc99-974c-4e70-9992-f7393b811a89", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eac2aa9-5db5-4115-b614-7b94895ad337", "sighting_of_ref": "indicator--0cc40b00-40b4-4ec6-914c-0d5495cef06e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45abdd0a-c912-47c1-a9b4-d610a4e5a587", "sighting_of_ref": "indicator--048b3db9-ba60-4905-85ce-e28104162321", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6ba977-634d-4915-843a-e87952bd3888", "sighting_of_ref": "indicator--278519b9-f5c6-4b8f-8346-fcac4c469aff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b490dac-7a11-4a5b-b597-78e6971d4e88", "sighting_of_ref": "indicator--c2220f05-bdd1-48bf-8099-e49afa6045e2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb641ba-5561-47a1-9702-4f4b89f75169", "sighting_of_ref": "indicator--d8098a49-a0dc-4384-b147-1553ca84af30", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63003703-b6a3-4419-b5ad-61f311ddb83b", "sighting_of_ref": "indicator--3d741710-7d9f-427f-a8ff-d348c329a744", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c18c23c-eae9-4c85-aa69-ac6e279ff33e", "sighting_of_ref": "indicator--a7e4d133-d513-4355-83fc-b490bd87ecfe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daaabe71-1ef5-4851-ad55-fd73c532531c", "sighting_of_ref": "indicator--2e2eebc4-07d1-488b-8149-b7b9f1ad0c51", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccebabe6-1833-4633-9d39-d6a4f7b99429", "sighting_of_ref": "indicator--c9b94c0f-cbad-4465-b5e9-655d5129d470", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c844a6f1-d06a-445b-8acd-9e77ba6194f1", "sighting_of_ref": "indicator--939bdc1c-6b58-4915-baa0-b1069b76de68", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df36157d-259f-402c-989c-31755978572a", "sighting_of_ref": "indicator--af49089d-03ad-4013-a6dc-4695b8e7dc63", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--736bb4c1-9b85-4e35-8ba5-016a0ce75914", "sighting_of_ref": "indicator--683ed0ee-eda3-4f0a-be8d-8ad0c8568a93", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d18e6a-18e9-4826-9e29-f15d8a9a626d", "sighting_of_ref": "indicator--89211e89-cfb4-48db-8707-ecb34fa36630", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e319b8-cbf4-4c05-8e5c-9db3787cbaf8", "sighting_of_ref": "indicator--66cffbd5-0449-4ee3-94c9-5edbab8fbe84", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d8240c-fac8-4186-8e3f-965055e01e2e", "sighting_of_ref": "indicator--8cf3c59a-76af-4000-bd16-a17dc68e0e43", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb351204-b627-4a62-aa88-ddb5ec13be0e", "sighting_of_ref": "indicator--6f0d4bb1-81f4-4ff8-8c1b-f8fad65792d3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d55533-8ac1-47e5-8b65-4ee7c97e3d7d", "sighting_of_ref": "indicator--ea190212-e81f-4c2a-9a62-594a896053c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef956c4-8abc-448b-bfd9-06c3e9455cd4", "sighting_of_ref": "indicator--cf80c6a7-f58c-478a-a606-47a7a7ea3c37", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61e516d-6afc-47c4-abd9-9f5accb0ea68", "sighting_of_ref": "indicator--3d78d280-a805-49ee-b47f-26a7c7f411e4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40a3586-ee92-444b-9535-e7596ec05e25", "sighting_of_ref": "indicator--ac3c16f7-ce30-4a30-a69b-cc624380bb15", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e442646-675c-48fc-972d-c42d31bbbf40", "sighting_of_ref": "indicator--fa49fa8f-6960-4cb5-8fe2-eee93a3d07b3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5fb5421-002f-42ae-a09f-ea155b27b60e", "sighting_of_ref": "indicator--7951980f-4c5e-48d8-8ff7-9d0a0ae6531b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddcf44b0-db7d-4669-acec-bd822e39c4ce", "sighting_of_ref": "indicator--32e65660-e240-41de-a2d0-3ec7c977c911", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a76f04ea-6e6e-4a89-8599-17d826873922", "sighting_of_ref": "indicator--76b29f85-acd9-4f93-b7d8-624c1fd1a640", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae36289d-9d1e-499b-82c4-0e48132a6a85", "sighting_of_ref": "indicator--6a2e1ca7-b073-42a7-a094-c5e6e7b70020", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c67c3a1-1e7f-4d53-ae2e-3feef82c927e", "sighting_of_ref": "indicator--0790a321-a4f1-45af-9b82-0e08d7858c65", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b2d1433-677c-461e-a515-5342471b357a", "sighting_of_ref": "indicator--7311206a-7880-4135-9264-bc065303fb46", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--140d086a-58d2-4964-b219-d298c12840a1", "sighting_of_ref": "indicator--69817b63-86e2-478f-9a9f-cf440d1bbbb3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d5da29-ea47-4356-99dc-c915481c5588", "sighting_of_ref": "indicator--9e1e9f30-f7a8-4f69-9bc3-22f07a88c83e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a6d774-b844-41e4-88b6-218b8bc1c861", "sighting_of_ref": "indicator--0a8cec03-1354-4f26-8ab8-c5d36577bc7e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7cc48ea-2aec-476f-be12-41c5702cf49b", "sighting_of_ref": "indicator--c01f8fe9-f6b0-47cd-96bb-fae921be1874", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a5fddd-4b5e-4d95-8f78-4a13fb3016bb", "sighting_of_ref": "indicator--feba05ca-36ba-4a68-9ea8-1125a7dcf5b4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97f1770-5c00-4614-842a-eff0902037d4", "sighting_of_ref": "indicator--74c3beff-42ad-41d5-94b2-b7efdcd3a464", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff86eb4-8116-4b92-ac0a-5328ef5a1e0f", "sighting_of_ref": "indicator--70d149e7-113d-4326-8ca1-a6038f7e9922", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976584c3-beee-42b1-bd50-475b1e75132d", "sighting_of_ref": "indicator--d3b0bf9d-bb38-49be-ae66-db9e500abb15", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9861d2b5-a7a4-4c98-bba1-c57a4ba67f14", "sighting_of_ref": "indicator--6be61506-5f97-4892-a37d-68377ce3e6b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c67e47a-5112-4a6d-bd27-22dd1dc22126", "sighting_of_ref": "indicator--1d41513c-0c68-43b5-8344-128caae02d48", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c338d7a-48e9-4322-b356-7daa5da87d63", "sighting_of_ref": "indicator--add0f052-c65f-47c1-8e05-cbe9b26ace40", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d524bf5-d3b1-4033-84fd-60f20445d5da", "sighting_of_ref": "indicator--4b863884-b731-48a1-a15f-e7f8ae335c57", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d08d22-79aa-4e5f-84a0-2eb4839cb851", "sighting_of_ref": "indicator--52c25e6d-b762-46e1-98e6-f3cd8f3c4f3e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffdb63e4-4170-40a1-b591-f79c44ca85eb", "sighting_of_ref": "indicator--5d00f19d-be7e-4e3f-a04e-32652274c07b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45936056-c542-4dc9-bf02-da5b90d352ad", "sighting_of_ref": "indicator--76288fd1-4fc5-4fed-ad87-6351a6d1c06d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e548ab02-48ad-4a7d-877c-adf091c86b68", "sighting_of_ref": "indicator--ea2bc29c-5cd5-4099-a309-a3af6d7c3acf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57d89a0-9d9e-455d-8820-4bad4c792f98", "sighting_of_ref": "indicator--877a8967-8aae-4e82-9643-6bcbca840ad9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf64736-d6a3-47c9-b4d6-f0fea5320969", "sighting_of_ref": "indicator--14121e33-5b16-4402-a623-e5197ba369e4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8263f6f3-a2f5-480a-9e5a-cadb4f7f73b0", "sighting_of_ref": "indicator--7025a199-2ca4-4814-b5cf-cab74d714e1d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7541cbb6-c27c-454f-9581-d71bc47fe889", "sighting_of_ref": "indicator--90070b2c-90c1-461d-8c64-ba17acc48c41", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23f5418-41af-4f05-925e-c3d1b72f7132", "sighting_of_ref": "indicator--aefd5ddf-1aba-448f-b550-c06661e37d2c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bbfdffc-fb45-404c-9981-2cf8594b27c8", "sighting_of_ref": "indicator--c390e1d1-390d-492a-81c2-0b28e342ec7e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--341d9a3f-e2f4-4526-b522-03cd352100fe", "sighting_of_ref": "indicator--6224e6cc-952b-438f-a72a-44a9102412cb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6c2f27-a1bd-4909-835a-40442a355c54", "sighting_of_ref": "indicator--2e3f09d6-0bc1-40bf-a640-f2837042a12a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed172207-c297-415d-98ec-e21f57ba2daf", "sighting_of_ref": "indicator--e397bb21-4c0b-4731-853f-3155fe06375a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e0a928-8159-4f46-9c3c-c079be04cbbc", "sighting_of_ref": "indicator--7c49997a-99b5-4ffd-9b33-b08448734730", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7abe1d91-a089-4907-9f7b-25a2d0d23646", "sighting_of_ref": "indicator--534e9c74-9578-4456-b5fe-6adb35404f25", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c6e1fb-bbb1-45d2-b61e-1a19502ca7fe", "sighting_of_ref": "indicator--19ff17d2-cf72-4c1f-91e7-ae46d8f7f07a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ce9a2f-351a-4fe9-ab4a-d94ac6c9f3f8", "sighting_of_ref": "indicator--0bf5bb55-1885-4adc-b549-6c04b32ba5b7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45622f9f-e229-4696-b8dc-f17f7c6edbe6", "sighting_of_ref": "indicator--d87a9a0d-a22a-461e-ae0b-a6ace41aa073", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7b1e68-f0c2-490a-87ed-135a3b6590a0", "sighting_of_ref": "indicator--6b4f1103-ced5-4688-95b2-706007ff4373", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2bebb6-d459-48f1-b8f1-722a7ce32d61", "sighting_of_ref": "indicator--ad6fee1a-0eae-418a-bde7-38fb53f02bf5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93132cf-7839-4705-ac0c-03ad12be9a1b", "sighting_of_ref": "indicator--9b4dcec3-5dda-4af5-9c91-2ed7fe577f2f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b855724-7a7d-463d-998b-4d0525a525f8", "sighting_of_ref": "indicator--76f57419-6c79-496c-928d-1a3786f22750", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de154c3-ce0e-4b7e-a9d8-757fedda1e2c", "sighting_of_ref": "indicator--566a540a-16b3-4182-836d-9e727703e4b0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b436c0cb-8d76-4f64-ad0e-4746f60dfcb1", "sighting_of_ref": "indicator--ab3002d7-21ce-42dc-940a-f8b5124567eb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c34498d-9de5-45bd-a603-9739b408781b", "sighting_of_ref": "indicator--502b3182-b193-4cfd-8bc0-d02cb35b0425", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b5f137-109b-4377-9b2c-0468f3397434", "sighting_of_ref": "indicator--3a1b58ba-d9d2-43db-a318-da1e93dbdac6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d22cc4b-c41c-4ec9-a64f-45dc60a8d1ff", "sighting_of_ref": "indicator--7cc90650-92f9-4b80-91a0-cd2688fe3094", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37483103-8c4e-491d-a136-10f38a1b8926", "sighting_of_ref": "indicator--769a9abe-5046-4e08-9d0b-233369e8f884", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6dbbfa0-a5ca-48ea-a55d-8b1276030049", "sighting_of_ref": "indicator--e23f47da-14f6-4588-90e2-d1941e84279c", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc64181-3ccc-466f-a137-855797f03c9b", "sighting_of_ref": "indicator--fd5602eb-83d2-42a6-90c0-5fbd040745af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923e0229-d9a5-4da5-8808-cde9acfc7acf", "sighting_of_ref": "indicator--dc3ce9c4-8442-4ae5-92f1-69b36f5a5cf3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c90fd00-4a1f-47dd-83e9-bb760ecb54bd", "sighting_of_ref": "indicator--82a22b65-a77f-4354-a775-f2c41cfce56b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022fec38-dd3e-4202-be9f-e1ea5df87d80", "sighting_of_ref": "indicator--720025a4-ea83-4612-af3c-953f4bd3cfae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--788850b1-583f-4dc1-bc46-9fe1139aba33", "sighting_of_ref": "indicator--817d6965-f3b8-4db7-a6da-a8279747ee2d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23c9960-f4cc-4db5-862c-f0a65b5d2e37", "sighting_of_ref": "indicator--5e190236-0c9d-4478-ac6f-6609295f4a03", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e22ea397-830c-41d9-84ad-34d1e22403aa", "sighting_of_ref": "indicator--cfd192ea-d812-4c05-b13b-db7b324b3d8f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d368aee-2747-4d77-8cf3-dda6c7bbd204", "sighting_of_ref": "indicator--774a9a97-756c-43be-846c-eca95f8cc489", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ded889a-acaa-4c3a-84f7-a73f7211e447", "sighting_of_ref": "indicator--16e67d34-c25f-4452-9cc8-7b8500779ba4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429498e5-647f-4709-abbd-17b9691e6792", "sighting_of_ref": "indicator--783215e7-87b4-480f-b321-94059c1ec3a0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c05300-0ba2-402e-a224-161f5eb7238c", "sighting_of_ref": "indicator--d7450a8d-09f3-4d06-a5d6-e41a53d5bf83", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853ae387-0480-4969-a73d-2c18e94f724a", "sighting_of_ref": "indicator--d7450a8d-09f3-4d06-a5d6-e41a53d5bf83", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235f73f0-2fff-4adb-b420-5f44cca7e600", "sighting_of_ref": "indicator--097c4d6c-c79b-4357-b9b1-f6d8cbf53174", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ef2ddc-96b1-4e2c-b323-88357bf3b556", "sighting_of_ref": "indicator--097c4d6c-c79b-4357-b9b1-f6d8cbf53174", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a164fc-07e2-4544-b9ac-3a515339ee82", "sighting_of_ref": "indicator--953bb002-8d01-4acd-85b8-0b1932841e6f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3493a87-4588-4479-b8ea-4844bd90914f", "sighting_of_ref": "indicator--4b483117-a127-4e41-b3c7-0813aac17301", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97efbbc5-9fd8-4191-a2aa-f6df4b90e5a9", "sighting_of_ref": "indicator--b9891372-33ae-4555-b241-a9e4802168ae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f98709-7524-4392-98b9-801ff0d5a152", "sighting_of_ref": "indicator--08874c30-78a2-42ab-84b4-d9fde6b50bf9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f081a8-b0ef-4310-b411-dd6d4c42b027", "sighting_of_ref": "indicator--a57ef29d-9c84-49ea-a03d-0b241ef83b1a", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae319e7-64b7-4495-810b-d6503768c741", "sighting_of_ref": "indicator--a57ef29d-9c84-49ea-a03d-0b241ef83b1a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052a8089-2947-4f5e-8ea2-b78b8417e48e", "sighting_of_ref": "indicator--f5ce9816-09fb-4760-9fba-0f8148e90251", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49da7661-b489-48fc-818f-a902d7521600", "sighting_of_ref": "indicator--60002f12-9198-4b29-b54b-b55a2d3de803", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274ece68-bc6b-4e19-b987-771127e99f55", "sighting_of_ref": "indicator--580b1574-57b9-4a04-aaa3-f255f585a399", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4fcec55-ea43-4109-ac5e-994c6ffb220f", "sighting_of_ref": "indicator--f04a5a7a-8ab4-4ec7-a890-47447eaa1c49", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e725bc-b0ac-4202-ae4a-1fbb649522da", "sighting_of_ref": "indicator--59809430-fa33-4322-bdc0-873bc2b2e616", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518da584-0852-4862-b421-0084fbc43144", "sighting_of_ref": "indicator--2384b8ea-c8d7-4888-bb64-0a3c2598c876", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fcb8ada-b35a-4b26-976e-1c9922b661fd", "sighting_of_ref": "indicator--0dbef09d-38be-47ce-a575-e5f2693d7ff7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26e9b79-0c6b-470a-8638-41118fe35c50", "sighting_of_ref": "indicator--55d1cd67-c259-4f32-bc5f-3de9a686b7b9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc032bc-5276-4962-b2d7-5c43717befcd", "sighting_of_ref": "indicator--0c56e5e7-085b-4482-a1a6-1b0f1a3e2929", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e69d0d-49b6-4e00-b248-334e64e29f48", "sighting_of_ref": "indicator--d1060603-e0f1-4e59-a289-ed08b7f1c8ce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64bbedf-f13d-4dd4-806c-d75e0144262a", "sighting_of_ref": "indicator--5f11030f-16ef-481a-8c70-71d53e7ae56f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e531743e-001a-496d-ae6c-b89ac3d5a8f3", "sighting_of_ref": "indicator--f40c135b-ee96-4c95-b8de-40d83aac9424", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45657325-6c6e-49e8-8746-d4ebff7aea65", "sighting_of_ref": "indicator--8119874b-f876-4c19-bbc2-660d948e07a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a55508-fd9e-41bd-8476-962ecbffb1d7", "sighting_of_ref": "indicator--b185c69b-71d6-4b0b-b39a-bbe197b21f3f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b1669f-8eb2-4aca-98a2-2d400ea9398e", "sighting_of_ref": "indicator--afa7b0ce-4870-41a2-8cde-7d1b8a94defd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12205c6c-9878-4058-b943-60ce4b714428", "sighting_of_ref": "indicator--af778f5f-a354-4195-8e9e-1619b324d94e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d15c70-9e3a-45a9-b272-fc2096c8efc3", "sighting_of_ref": "indicator--66aee6f9-c08f-4874-8ff8-c767c58ea59f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d387be-4a80-4267-867e-cce2bb2ab937", "sighting_of_ref": "indicator--66aee6f9-c08f-4874-8ff8-c767c58ea59f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f78ab0a-a0b6-4a29-a3cb-147426b3055a", "sighting_of_ref": "indicator--dbaeb4a0-0dbf-432e-a19f-36628025dffc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898a9e43-2ea7-4cf7-9735-e9bcf21f7567", "sighting_of_ref": "indicator--0e65a2d4-a88c-4901-bf2f-72450e9aae89", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e826642f-3537-4c82-bac6-dbd5c2c6d47f", "sighting_of_ref": "indicator--317be414-c7bf-424e-8ff4-6b8210c4c6da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae168792-3b47-4f69-916d-a8012fdeb425", "sighting_of_ref": "indicator--3121dd1e-015b-418a-a6b2-178eda0a755b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2250f7bb-13cb-4991-a7b7-b9e444c20dbf", "sighting_of_ref": "indicator--b7d6a907-6189-4bdb-b97f-6564301b8317", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--606ced35-c327-4ffa-986e-881f530e7315", "sighting_of_ref": "indicator--176230eb-d434-432c-ad07-b00a2ca4da13", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6acb2fc9-307f-478e-8ed7-0698186a7457", "sighting_of_ref": "indicator--c0347cc0-d8db-43e3-8bcd-187e28dc2ce0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afdd929a-f023-45d6-9ca0-04d9ff4335da", "sighting_of_ref": "indicator--c0347cc0-d8db-43e3-8bcd-187e28dc2ce0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f14ba8c6-0281-4698-bb37-36c2a551d3c0", "sighting_of_ref": "indicator--5e27adda-8ccc-4b39-b138-bf51e8ea4a90", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a48465e-d67f-43cd-aa45-82997a3ee8ef", "sighting_of_ref": "indicator--5e27adda-8ccc-4b39-b138-bf51e8ea4a90", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35aba69-5b56-4bad-830f-7ef32a6bf6c6", "sighting_of_ref": "indicator--80f4c90f-8ef0-4c28-b03c-11bfcf44e60d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1ce922-9581-40e6-af61-996c8da8b7e4", "sighting_of_ref": "indicator--30210c08-5f55-4b82-a113-137c151be333", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea7044e-13ce-499c-ba28-03846508a0b2", "sighting_of_ref": "indicator--50e26858-ec74-46d5-aee3-5cd1124c2129", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa33ee72-0e69-48e9-bdac-5a2320bb6233", "sighting_of_ref": "indicator--6d66e8e8-a757-47ae-a812-72f9f828628c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a82a45-7a34-4b75-8432-f6abb26de0d7", "sighting_of_ref": "indicator--fddccb8e-b652-43fa-af9b-d858cca48f1c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ad6f69-ff3a-410c-a8d5-1a22620bbf7f", "sighting_of_ref": "indicator--fddccb8e-b652-43fa-af9b-d858cca48f1c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc6adfeb-ca6f-40bb-acdc-4c076d276f6e", "sighting_of_ref": "indicator--46b78c00-5bd5-4b17-9a6c-a9d41a0122f7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c933dbf8-8b2d-4491-9a96-ce28ed3e2f86", "sighting_of_ref": "indicator--46b78c00-5bd5-4b17-9a6c-a9d41a0122f7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d72e0cf-173f-4001-ae4c-5c16ae9d1874", "sighting_of_ref": "indicator--b45eaa9e-59da-49e4-9321-3f60591a0998", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2b9bd2-34b8-4ba6-a3df-13bcfcf08429", "sighting_of_ref": "indicator--891018d7-6a84-4ea4-bb16-d8da2b488bd4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910ceb63-c1c6-4039-82c2-021d9714a39c", "sighting_of_ref": "indicator--263c4889-e5f9-483f-a095-c126bd9f4476", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a1f582-1f75-4936-ad25-cd5b62434404", "sighting_of_ref": "indicator--ea8774b5-a629-42ef-9184-d6784fc303d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9095f6cf-7cdd-44d0-beed-5257dffd6a80", "sighting_of_ref": "indicator--eb57cca3-f154-453a-9ed8-f111dc6257f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec4d332-99f8-4ee1-a40c-54d029a8bf1c", "sighting_of_ref": "indicator--f5ccf51f-4a8f-46da-92b5-6579f95bfdf4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9937e1cf-bc39-4093-bb62-ea7bc7d74508", "sighting_of_ref": "indicator--32317e8c-c12b-4b13-bd19-bbc492ce62fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e20ee2-2d32-40f5-b2e8-284287eb346b", "sighting_of_ref": "indicator--751fab53-837e-4309-823e-ca5bd31dc0f0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce9ead2-79ed-47dc-b408-65a4c8749d04", "sighting_of_ref": "indicator--7a865411-4df8-4e03-86bc-c941147a31bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a61c4d-483b-479d-872a-67e5125dd4bf", "sighting_of_ref": "indicator--b3c7cf25-28a9-4211-93f1-4672ee05fac7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a9745d-8402-4258-9bf3-4f62e49b65cc", "sighting_of_ref": "indicator--bf388aca-d48a-44be-80b3-ab8461c335a6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0618e656-4f26-42d7-b007-850fdd1bb2b6", "sighting_of_ref": "indicator--73b44e24-4556-4b2c-82fc-c49c5ab7e8bf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fda6b62-a071-478d-9a9b-0f6cf124abb3", "sighting_of_ref": "indicator--e05ef0ba-2633-485d-b450-2a2d19967172", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9190347a-01b8-43a0-8af6-3727f885b928", "sighting_of_ref": "indicator--35547bdd-27a7-44e6-a862-74b2dbc3a39a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28483ef7-7037-43ba-abc8-e34da3158c48", "sighting_of_ref": "indicator--b6220965-2b1e-4f5e-b101-cf7a2fca248f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da998507-d0fb-4160-b3ad-2e3de4aa1f11", "sighting_of_ref": "indicator--cc4e9127-6ccc-465c-83ef-48129b783c41", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62b8761-05c7-410b-963b-60f107cca97d", "sighting_of_ref": "indicator--d02082bb-c86e-4c98-90c9-0ae704825442", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ae8202-a569-4789-a85d-3cb989943407", "sighting_of_ref": "indicator--553255c7-1391-42a4-b264-445c56326bac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db59ece-5f0c-48be-81b7-4474045b541a", "sighting_of_ref": "indicator--d392e594-2e7c-4d11-9c82-f75ec0c2a731", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2b256c-b652-4595-967a-9807ea1df757", "sighting_of_ref": "indicator--71e7441b-3c6e-46ce-9b1a-4d5c01412f20", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ceb216a-af66-4783-b6af-56f0beb8984b", "sighting_of_ref": "indicator--f463b733-28cd-4a39-ad3b-6d30fd61f151", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896437f4-9eea-43ac-ae4f-18b2bc41e8ae", "sighting_of_ref": "indicator--a605e710-fc95-4d20-897c-59dd6a4f8038", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87020a1-84b3-4ae3-a5f9-1348d27c2641", "sighting_of_ref": "indicator--69368c9b-e3ea-4136-9ad3-fea5f6a45649", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ca1903-72c7-4ec8-aadf-83f205102e52", "sighting_of_ref": "indicator--69368c9b-e3ea-4136-9ad3-fea5f6a45649", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992bc5bf-2757-46fc-9e66-a18715445392", "sighting_of_ref": "indicator--31335638-012e-4628-bb0c-28662586f942", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f854bc-2ace-4b16-89ff-e89dbcce30aa", "sighting_of_ref": "indicator--e0ab69a5-3349-4c47-b242-e97e6bf1923f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f42d82a-0a84-448f-9ef7-14f078904dd1", "sighting_of_ref": "indicator--d62af449-cdec-42ca-9193-669d8ce14454", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008b8807-6fcc-4698-b1d6-ee8ef1c8c2e7", "sighting_of_ref": "indicator--d62af449-cdec-42ca-9193-669d8ce14454", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f3ef97-4bf7-423a-b2c0-ed105e9049cb", "sighting_of_ref": "indicator--4b89fa08-3f75-4a06-8704-929e29cdaa05", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420444e0-f33d-4ab1-9693-6bb1726c00d0", "sighting_of_ref": "indicator--4b89fa08-3f75-4a06-8704-929e29cdaa05", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45478e0d-65db-4f85-80cf-134200a97408", "sighting_of_ref": "indicator--e11d53ea-3b21-46b0-b908-02ad0b66e3da", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d89077-01cd-4bc3-bb28-33af8f23ad2c", "sighting_of_ref": "indicator--3521ae23-dddb-48d2-974f-0add8d556b5a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01046eda-b33f-4071-8c3f-c0a9da2c932c", "sighting_of_ref": "indicator--f9d0d443-3bd2-465e-a3e3-340dcd3beba4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0ad24e-64a7-41de-94d0-5873652f93f3", "sighting_of_ref": "indicator--bbe91c0d-2373-42be-aacb-5da20caef55d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e9ca16-8743-449f-8d85-158fcaaf80b6", "sighting_of_ref": "indicator--54fa8a09-b58c-45e2-a3c8-f6f3732c8745", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ea6a3e-2430-4772-a7ef-62bd9dda47d6", "sighting_of_ref": "indicator--0bcc5e48-0f08-4d0a-a24a-cf60962e8695", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b30cc9-3798-44ca-b4c1-4e58661c71c4", "sighting_of_ref": "indicator--7c0c3660-e205-4a73-b9f7-6a11a5b1c4d3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6bf497-dac5-4987-aac0-adb19aa964b8", "sighting_of_ref": "indicator--4c30216e-598b-440d-865a-413c28200244", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df14b222-3707-4fda-9e94-ce034b13c480", "sighting_of_ref": "indicator--4c30216e-598b-440d-865a-413c28200244", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d5ec27e-1f56-4e21-a724-165b179993a9", "sighting_of_ref": "indicator--4bc184bd-eaba-49fe-b086-34c6e9f71f9e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959343f0-3813-4ab3-932a-816e195c6e46", "sighting_of_ref": "indicator--4bc184bd-eaba-49fe-b086-34c6e9f71f9e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d5fd54-0872-439f-95cd-1b06252c7e66", "sighting_of_ref": "indicator--8f55c55e-f8ed-4f36-be36-c5d9552b81d2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb9a0e8-acd5-4c15-b7c6-22dced246d53", "sighting_of_ref": "indicator--030e5df2-dda8-4cda-8991-0722dea392cf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523c3959-1107-47b4-8fe3-420221422a1e", "sighting_of_ref": "indicator--030e5df2-dda8-4cda-8991-0722dea392cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a111c8ac-dcc7-4f58-8569-5b72cf79318c", "sighting_of_ref": "indicator--2753f11c-7c2c-4dc2-8e47-92b1a25c76d3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee567b5d-9090-4b90-8caf-8f903542df0c", "sighting_of_ref": "indicator--d6dcaba1-3bdb-4b09-ac8c-09cb83fdf119", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ee151e-28fc-4282-b52a-c93db1c9f1fb", "sighting_of_ref": "indicator--5ef29aa5-405c-41c3-9478-2847db3f3ae1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc3937e-c054-4f48-a010-ad2672c6e56c", "sighting_of_ref": "indicator--aea6982e-2e28-49c6-b3b6-cd9a0b611917", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b60a2e5-8bad-45c6-9e1c-dc6a9eded169", "sighting_of_ref": "indicator--4f4e7d5e-6f6e-4ae5-8d3d-b68514a6b6bd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556fd9b2-5243-48e6-9ebc-1c590810f052", "sighting_of_ref": "indicator--317da780-abc2-48ef-988e-5588ece7b97c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52fdcd12-720c-45ff-bc1d-66e39118b469", "sighting_of_ref": "indicator--091e25ae-9690-4582-b42c-43b4383ec4b1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb595a3-fac9-4140-91f6-28bf600db15d", "sighting_of_ref": "indicator--e7d7ac42-0ef1-409d-be57-2c1aba82ed0d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48939a2c-1e3b-4dd2-a1b1-303bb536c11a", "sighting_of_ref": "indicator--688dbf8d-0368-4534-b013-d5c2394bad7f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5bdd968-63e4-45b9-8abf-76bc4e1d17ea", "sighting_of_ref": "indicator--177085b0-6d16-4db8-961c-fdc8877f91db", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78baba10-95d9-42d7-b5b2-b1d651969101", "sighting_of_ref": "indicator--e8e4ac26-6ebf-4703-834e-9a0e8b608f26", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d614d65-22be-4366-b1ea-149c9c2bf73f", "sighting_of_ref": "indicator--e8e4ac26-6ebf-4703-834e-9a0e8b608f26", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670969d0-baf5-4d8f-9d46-bbf83927dafb", "sighting_of_ref": "indicator--8eb035d6-a9aa-4b63-ace6-0d0ee93c3fd5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3c7f8e-640e-488b-ab04-472b0438e382", "sighting_of_ref": "indicator--f3596dbe-f3a7-4f8b-897d-5a07f5252fe6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4293f6ca-a4ee-451c-9c0f-74436473cc89", "sighting_of_ref": "indicator--f3596dbe-f3a7-4f8b-897d-5a07f5252fe6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42acd03-8963-41d8-8012-5f998e3d2ca4", "sighting_of_ref": "indicator--2c9e6dc9-7d74-45fc-9f90-bcd936867516", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5feb0853-8993-4651-88a5-5441f45fb72e", "sighting_of_ref": "indicator--e52b2689-6ce0-45a8-a52b-90754e6a2ffd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764149dd-1616-418a-9846-9368a49feafa", "sighting_of_ref": "indicator--e52b2689-6ce0-45a8-a52b-90754e6a2ffd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c512e704-08c7-4c48-8e78-746c015b11a4", "sighting_of_ref": "indicator--45d27fd1-3cd3-4cea-984c-b2439c8e9473", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42fed183-4de0-4a06-aa89-0ebd2314f74f", "sighting_of_ref": "indicator--1f47c060-ebcf-44be-a909-71c8bf41c333", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e74818-6d30-4e26-a1e6-59912fb57d88", "sighting_of_ref": "indicator--1f47c060-ebcf-44be-a909-71c8bf41c333", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3a6c9b-51b8-46bd-ad7e-18ab0b6bab38", "sighting_of_ref": "indicator--89c5dba6-47ba-4153-9143-0c4f36187c8b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d02ca62-39cc-4e9b-8cdb-2843220a2106", "sighting_of_ref": "indicator--89c5dba6-47ba-4153-9143-0c4f36187c8b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d0db18-47be-4642-8dc0-58cd73cf6a3b", "sighting_of_ref": "indicator--7558fdb1-e7fe-4471-8f18-01f7869ead76", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea17aaf-a497-4526-9d90-82d246aa6fa9", "sighting_of_ref": "indicator--7558fdb1-e7fe-4471-8f18-01f7869ead76", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210f722e-2cc8-4ee4-a2bc-ebdbf065752c", "sighting_of_ref": "indicator--f0bb58e4-d838-4f1e-9373-deb4a89ae1b8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c92842-c071-4bcc-86c8-704e3fdd943c", "sighting_of_ref": "indicator--6827ad38-aa8b-4174-abfb-e8622304bcb2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed0ac33-3ea7-488b-ad3b-69aa90f5a3ea", "sighting_of_ref": "indicator--0fbd1ea0-715f-4a06-ab0a-5979e7d451a4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab146e86-872d-44a1-acdc-8187803d1ac0", "sighting_of_ref": "indicator--0bfb8722-83f8-42f7-b18e-88ccd197c82f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8a1d8b-702f-41ac-9c4b-6306d1694b40", "sighting_of_ref": "indicator--2f52ffa2-4925-4a27-ba64-44f58107971b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d605e9-4336-4d3a-b6d4-557800389506", "sighting_of_ref": "indicator--868e204d-0d3a-45ce-ab58-528bf7fcbb2f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3fcf3c-ab04-41fb-b3be-244dbd688b28", "sighting_of_ref": "indicator--868e204d-0d3a-45ce-ab58-528bf7fcbb2f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92fa8d94-d735-46f8-bcf5-99edb0f41afe", "sighting_of_ref": "indicator--19b4132e-7dcc-4963-b22b-09b07f5a4686", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88782e29-c421-410e-af90-fc0c198bad5b", "sighting_of_ref": "indicator--19b4132e-7dcc-4963-b22b-09b07f5a4686", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd042149-15f8-4340-bc65-e8b48b4ab0b9", "sighting_of_ref": "indicator--4ba97bdd-a4b2-4c91-8b71-caeebda6fcef", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc17516-8aaa-44db-b911-2123a8520160", "sighting_of_ref": "indicator--f254b60e-13ee-4e9c-ad0a-99c71a410991", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7519ae5-94cf-424f-8bdd-77aec740cba0", "sighting_of_ref": "indicator--02497f25-1e06-4935-a20b-93065d5ad2e5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee414f6-10b7-4c8a-81d7-85a74b51f29f", "sighting_of_ref": "indicator--1b41d137-5d13-44d7-8518-0f0980d1c15a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fe59b2-7c40-4cbd-9c71-5e3ab9233d2f", "sighting_of_ref": "indicator--1b41d137-5d13-44d7-8518-0f0980d1c15a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c8902e-1faf-42e1-9400-a43127be31f9", "sighting_of_ref": "indicator--c8506119-0e2e-4b32-84a8-92116a4759fb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34fd706b-7090-4f04-9592-6126b2e3799b", "sighting_of_ref": "indicator--26d53905-e490-4725-8e8e-5dcdaac3b7be", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4bace32-9ab8-4670-997a-38ce5fce7de7", "sighting_of_ref": "indicator--8556457a-4a80-4081-a720-baa4c6e8c283", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97844af6-a34e-4b51-886a-4ff055028bee", "sighting_of_ref": "indicator--fad57bd7-f50a-474e-b00d-a6138e307822", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84fca364-b009-4930-b02b-dc994ee2ff21", "sighting_of_ref": "indicator--e1cd0e07-fe06-484a-b696-e3ee7b2cb5e3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5eafeca-6971-400b-b0a8-b7d1c22b310f", "sighting_of_ref": "indicator--016af8a1-10ac-41af-a129-925121325e87", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbcf8a6-1b4e-46dd-b116-53a02fc93a9f", "sighting_of_ref": "indicator--0a75e301-13c8-49e2-9b78-b73e6d0aaa43", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e231e789-cb91-43c7-bb0b-9fde91c39546", "sighting_of_ref": "indicator--0f3049ae-d68c-4afa-a4bc-801b2b887810", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8e837c-af97-4041-b0cd-68b373c24a01", "sighting_of_ref": "indicator--83299ed8-78d9-4f34-a423-685619b03417", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9448469a-6d14-4392-a9f3-4714cd796a3b", "sighting_of_ref": "indicator--13dfc9c3-ab48-4402-ba3b-6951e9a09adb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d512bdf-4e69-4492-b742-34c477d967f4", "sighting_of_ref": "indicator--fce2826f-6500-461d-a580-7edbd8649d35", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f61f33e-4c0d-44c5-a200-348fcc9d332d", "sighting_of_ref": "indicator--7d91cde7-9df7-4da3-bd9a-d30b7022b021", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc410285-ede9-4dbc-97f8-dfdcf98a330e", "sighting_of_ref": "indicator--3f4fc0b0-c9d5-42fb-9fb9-a82de588dcdc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de01057-d92b-47a5-9c08-c7cc884f9ce5", "sighting_of_ref": "indicator--3f4fc0b0-c9d5-42fb-9fb9-a82de588dcdc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4387ba6-618a-4d75-a431-535479150772", "sighting_of_ref": "indicator--4dcbae0f-1aef-40cc-b823-2cfad70710cb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cbad38a-7d23-4c5d-9aed-8a654a337e05", "sighting_of_ref": "indicator--858edfa6-d5b7-4dd0-832b-31b7419d996e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90094b0-f0ad-49e6-87a4-c263bc8f6cfe", "sighting_of_ref": "indicator--487ad951-315d-4319-8028-13ed1ea20064", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acaaa31a-6b3b-4339-a960-d761850b5491", "sighting_of_ref": "indicator--af146d15-47a7-4ef9-b817-a0c08918547b", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3481afe7-470f-48dd-8648-8c92001fc27c", "sighting_of_ref": "indicator--4867afc1-1d2d-4186-a198-46f05c486ada", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66089fb-ca56-4f0c-88ec-daf29c42e198", "sighting_of_ref": "indicator--7206fe13-9778-4749-a40b-8f154dd2df95", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28bf7605-cd20-4c25-adf4-9594d8cd7de9", "sighting_of_ref": "indicator--7206fe13-9778-4749-a40b-8f154dd2df95", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76807fcb-f94c-43d7-977d-cf39fe534066", "sighting_of_ref": "indicator--fd7e83d0-77c0-4b5e-8223-11d36a58e22b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2cc896-84a2-409a-a04f-3111ae71b5a4", "sighting_of_ref": "indicator--fd7e83d0-77c0-4b5e-8223-11d36a58e22b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e8b907b-4fa0-4219-bb1c-2cfe48475956", "sighting_of_ref": "indicator--eae1bbdf-8c86-4661-bc26-a96fe700a0ec", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a79ca9-585e-427a-91eb-deb6300efbeb", "sighting_of_ref": "indicator--eae1bbdf-8c86-4661-bc26-a96fe700a0ec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d61e4e-eeeb-43d3-b909-dde2f094ad07", "sighting_of_ref": "indicator--d697603c-dd2c-4f66-8e2f-7dbc66d30907", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce39c3c-f92e-44a6-98c0-0f6ef1df935c", "sighting_of_ref": "indicator--d697603c-dd2c-4f66-8e2f-7dbc66d30907", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7017c0d1-07cd-4ac6-af58-6e82468abed3", "sighting_of_ref": "indicator--695a6823-ae9c-4d0f-9214-22359871afa9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--299b4356-3c33-4b92-825a-8f7842a540e1", "sighting_of_ref": "indicator--695a6823-ae9c-4d0f-9214-22359871afa9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b607a8-7eed-4c44-a78d-3c965b19a6d7", "sighting_of_ref": "indicator--423a6c02-6b8b-4d87-a1fa-424bb038a72a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32cdb8e1-6622-49a2-a59e-58c5e20603ca", "sighting_of_ref": "indicator--423a6c02-6b8b-4d87-a1fa-424bb038a72a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144f6059-72a3-492d-9fe6-523226f69da3", "sighting_of_ref": "indicator--bb9e9301-1d64-40dd-bc14-0a220457331c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978d9d24-3aad-4cde-9547-931ff91641c9", "sighting_of_ref": "indicator--bb9e9301-1d64-40dd-bc14-0a220457331c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff87b92-4aba-4dd9-a9ad-46bf2857abf4", "sighting_of_ref": "indicator--1c09d204-7dcd-4467-96c9-dffd855a24e3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a2d2ff-c61b-475e-84d8-84ab4d7fe698", "sighting_of_ref": "indicator--23c6b357-6178-430d-80e6-43e01e6c1ffe", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b3f441-2895-4a61-bfaf-de2b2eda3499", "sighting_of_ref": "indicator--06762b11-4483-4ab8-b2ff-f7f26c908d44", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd631aa-eee7-4523-bea3-083ebd37cf7e", "sighting_of_ref": "indicator--06762b11-4483-4ab8-b2ff-f7f26c908d44", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c63c6ab-7cfa-443e-924f-261458c66c6e", "sighting_of_ref": "indicator--08eae449-afac-460f-874b-f5e7b8ffb0f9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36fa6526-157c-4fef-93ea-59269437fe10", "sighting_of_ref": "indicator--08eae449-afac-460f-874b-f5e7b8ffb0f9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b9cd89-3564-40f4-abbf-b728da652e9a", "sighting_of_ref": "indicator--faadd429-3877-4db6-9f88-910b9900a3c2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87690c9f-34e5-4be1-885c-457f677a1496", "sighting_of_ref": "indicator--5081d150-73e5-40c5-8b3e-c0eaf3a3fe0b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c3b891-4b8f-4a0f-91fd-4b93f8b941a3", "sighting_of_ref": "indicator--5081d150-73e5-40c5-8b3e-c0eaf3a3fe0b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef1bf04-cc0c-409a-b874-edacd8254545", "sighting_of_ref": "indicator--ee39731c-5efe-442b-89a4-1131b82b99bf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73c9e96-1d6d-4689-a332-3750234e7d5c", "sighting_of_ref": "indicator--94c4968c-8785-492f-b645-b442dc3e3ab7", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2165e8f4-d1b7-4308-b4c9-c1557686b2e0", "sighting_of_ref": "indicator--8978f44c-7a44-4e59-8b77-da9dc532cd47", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eddf174-3057-49f3-b77b-a9f605d8ec76", "sighting_of_ref": "indicator--81b1369f-8a5c-4cb0-b761-88fa7d4cc7b1", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03b6475-51fd-4f25-9fb2-82d083520be3", "sighting_of_ref": "indicator--81b1369f-8a5c-4cb0-b761-88fa7d4cc7b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96770ff5-1135-41ab-86e5-20ef364933f3", "sighting_of_ref": "indicator--e063d04b-947d-4a50-a700-e860d0f0ab0e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f031d79d-84af-41d4-a342-3e0db23cf478", "sighting_of_ref": "indicator--cbd775a8-bd39-4158-9c36-c16c2ebd4be8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9f7171-1a8e-42e7-aa67-a22dabdeee5e", "sighting_of_ref": "indicator--4386e4f6-0f7e-4f9a-8251-4898c58b6df4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4b5769-5cec-4ff8-8564-e2adfd8a1f69", "sighting_of_ref": "indicator--0be7415d-e88d-442d-b2cf-385ef89b0ec2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b3f8b0-14a2-4bf4-98b4-623b85f0965a", "sighting_of_ref": "indicator--9593dfd9-bfef-4b47-b2b9-d154ed958d71", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca40bcf-7bc7-4493-8f00-3b146c179f29", "sighting_of_ref": "indicator--7eeb2646-9db2-4086-950d-91cbe28fee3e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c17565-9bcf-43ce-bc7c-19a5dcee357c", "sighting_of_ref": "indicator--2167f235-ace8-4f1f-81d6-7e26494e1674", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118c8184-fb88-4ede-96ad-8f9d166c8e37", "sighting_of_ref": "indicator--3df021a0-1ba9-4e90-a7e5-5733e4a9dd61", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc60fd0-ae7d-4b2d-98f6-2de63b42c5af", "sighting_of_ref": "indicator--d893edc0-504c-48e1-9de4-19916c797315", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf403cc-5a03-49dc-9cc9-99c883933149", "sighting_of_ref": "indicator--d893edc0-504c-48e1-9de4-19916c797315", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92decdab-eb3f-4e6f-ba95-10d50acb225b", "sighting_of_ref": "indicator--9ed928e4-7037-4e54-ad21-db2da8c705f7", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6fc621-b138-4f39-9f3e-959a7e8af16a", "sighting_of_ref": "indicator--57910475-0ff1-45d9-ade7-d7264a9a9b32", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70bd6d06-ea83-4007-b37f-041c7d15f18d", "sighting_of_ref": "indicator--b5b6901b-0885-40f2-9846-227afcbd3ef2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d50b922-41d1-4fc0-af0f-472195af460f", "sighting_of_ref": "indicator--22e768e9-3bc5-4ce1-80da-54dba46409d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da07eeb7-5c21-4d8d-b41d-5a1ddd1d1688", "sighting_of_ref": "indicator--a511cd6c-4245-4e20-bc36-7def7c0546e0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154dbddb-e568-4d3b-9be8-efbeec05663c", "sighting_of_ref": "indicator--a296f363-f2b1-41e7-a426-c2054b2c84a9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d3ffb3-fb57-4f45-9154-f90546c1a975", "sighting_of_ref": "indicator--fb70c507-4b76-4d43-a9ed-d6c56c5a5e8d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880a8262-dcc1-41a8-98d1-24d33f5b0fa8", "sighting_of_ref": "indicator--162b130b-7c74-4545-b219-c1a843e5ad92", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbf4a92-8a91-47f3-96fb-1f7e0aac5f69", "sighting_of_ref": "indicator--d42ec3c9-d570-4163-9973-c2aae3d007aa", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d558d1e-ccf5-44bb-84cc-e681b4b03b37", "sighting_of_ref": "indicator--1da3facd-0d66-4411-909d-d62fcdb8deb2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc42739-7381-4039-b718-54ae538f8d7c", "sighting_of_ref": "indicator--55daf1ed-3c77-4fbe-8daa-82e0d0848abb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd9d2fa-8bc5-4f6b-8dad-d4db26a6658f", "sighting_of_ref": "indicator--d960a8d0-cd0e-49d1-9402-2a782f742707", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22769a2f-3b37-421b-9559-64590bc80046", "sighting_of_ref": "indicator--137c2962-552e-4534-bb08-5fa0bced28d9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfeb1cbf-3f6f-4ac9-9ea6-ee41868954d3", "sighting_of_ref": "indicator--865c7d97-4f9a-4e7b-9580-5e1612c483f3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414b0c95-1881-4ef0-8ee3-3e78fedcaddf", "sighting_of_ref": "indicator--69a99df9-f497-4256-a365-0ccfb053ce41", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1b57f8-95ca-448c-a523-623389e20d4c", "sighting_of_ref": "indicator--e62596ea-9c51-48b1-8ce2-576232699199", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c73bf53-388d-4ddc-abd4-9c0d1b4a6893", "sighting_of_ref": "indicator--e62596ea-9c51-48b1-8ce2-576232699199", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b39558-b7df-45ac-ad99-c053681aa32e", "sighting_of_ref": "indicator--c555a8a8-1dde-4526-b9ff-a9cc7763b920", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64742c1b-87f8-4e05-8aca-e74b40ff9903", "sighting_of_ref": "indicator--c555a8a8-1dde-4526-b9ff-a9cc7763b920", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5df9875-7e7c-428f-bf32-6fc1d073c401", "sighting_of_ref": "indicator--680c8944-8339-4097-ba7e-a97972056cb6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d0373b-e529-4afe-8710-a571a8d1d412", "sighting_of_ref": "indicator--680c8944-8339-4097-ba7e-a97972056cb6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3082f4-28fb-4d7a-934e-3c4399a978aa", "sighting_of_ref": "indicator--652f6c96-112a-48dc-9b8b-5e73d6fbb1f4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0e70d9-2865-4187-aade-9d442fcba6e9", "sighting_of_ref": "indicator--652f6c96-112a-48dc-9b8b-5e73d6fbb1f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74713381-0b2b-4b0b-a5e6-d7d22e4b46e4", "sighting_of_ref": "indicator--13c580c7-fa9b-433c-90a3-2499cc88aca9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6946fb-8f68-4df7-9390-eb8cf038a1fa", "sighting_of_ref": "indicator--13c580c7-fa9b-433c-90a3-2499cc88aca9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34a053a-91a6-4821-9d74-4b834853ce45", "sighting_of_ref": "indicator--14646431-055e-4ad1-a84a-1e6a5dc9f322", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6300b3d2-12f1-4f1b-95c9-c75bbceb0183", "sighting_of_ref": "indicator--14646431-055e-4ad1-a84a-1e6a5dc9f322", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0777a2c1-9d44-4dbe-b567-a9b8399529cb", "sighting_of_ref": "indicator--13558f28-fa44-47e6-a2ab-7ed6fa7641d5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0caf66db-e84f-491a-84d8-266ead25be5e", "sighting_of_ref": "indicator--ff4bc610-1a0a-4a3f-a83f-abfc03003cf0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad0f21b-3aa7-4591-8a27-399bc705d894", "sighting_of_ref": "indicator--e9e0b94a-f7f8-493a-b668-5a8d34708b60", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c003e72-a489-474a-ad70-39f6ea2b803d", "sighting_of_ref": "indicator--e9e0b94a-f7f8-493a-b668-5a8d34708b60", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32bc271-b341-43dc-8641-885473263c4d", "sighting_of_ref": "indicator--e9e0b94a-f7f8-493a-b668-5a8d34708b60", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c99f178-b3c0-40a3-99ca-c7c9858c2fe5", "sighting_of_ref": "indicator--5ada6877-6e7c-4f46-82d1-75f070926ee4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5890c3e4-3bd5-4ead-8a3a-f4a287fe544b", "sighting_of_ref": "indicator--5d513680-efdf-4f85-94fd-fa9c87e8a4a2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c780e74b-0d25-49c5-b2f2-4ab953426fcc", "sighting_of_ref": "indicator--759a0156-1886-476f-8792-6e1b1918219a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e98eeb12-2d0a-4bce-bc59-6602a793e845", "sighting_of_ref": "indicator--bb551de1-d742-402a-95b4-ec05473e39b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1189c015-52b2-48e4-87ad-2e6f8cfa9815", "sighting_of_ref": "indicator--cb4a7afa-5abb-4724-9ac1-0dc7fa11eea4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428d8427-900a-4714-95d7-4dfa5f702fe1", "sighting_of_ref": "indicator--260b43cb-5093-467a-ac71-67c7b38e9cdd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d5ce8c-f708-4db1-975b-3fd5dd795edd", "sighting_of_ref": "indicator--4752ff14-39be-4e9b-b83e-3d82f5f4b5f3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a21d8cf-6f89-4eec-9aa1-80152ba9b4a5", "sighting_of_ref": "indicator--405ff690-76f9-414f-a759-87af6ed7cbf6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494a8e51-2fe0-4d96-984f-10d43ff40676", "sighting_of_ref": "indicator--633a898b-48f3-4642-a815-ef61749b1bc7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b9082c-869d-4a7a-93fe-cb9a521abc54", "sighting_of_ref": "indicator--38fc8c8d-fcc3-4886-ac52-09b69ec528e2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f5ec2e-b78f-49bb-b3b1-6c7f85f7e35c", "sighting_of_ref": "indicator--2b9b3ac7-0129-4612-80af-c2978ab022e6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f3db3e-ad26-42fb-aca1-efa75a5bce4d", "sighting_of_ref": "indicator--76b2a880-d594-4611-8d98-58f01767ef92", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7969ff36-648a-4e4f-b1be-30c1c641e658", "sighting_of_ref": "indicator--f4ff09f5-686b-440a-92d9-f6194053ddab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d253ce8-da9e-45d2-9082-f3527d6fedc6", "sighting_of_ref": "indicator--294de185-03e0-4b69-b293-603b5dc38f36", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22bcda45-7c1f-4d23-aea9-bf1548713ecc", "sighting_of_ref": "indicator--0d4b115f-7373-4fb3-a64a-702122528533", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63d9797-f3a4-4991-bc1c-f25bdab69898", "sighting_of_ref": "indicator--6a1094f1-6de0-41b4-89e7-cbe1fdadc2e0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b7ec83-0cc0-4450-b6c8-18f1cc3c49aa", "sighting_of_ref": "indicator--b4cec801-4397-4cea-bdca-25efe7e5bd79", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe92759-472a-4931-b656-6eadde33af73", "sighting_of_ref": "indicator--9e82eb5f-1523-4fe8-a775-1db265d3c135", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ce99f2-6afa-4ff3-ae69-c0e36b0cb928", "sighting_of_ref": "indicator--1bd00a81-4058-46fe-8aac-751b618a2e9f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f595b7d-a3c8-4d77-880d-3c1769a02fb3", "sighting_of_ref": "indicator--339b652c-4b75-4074-b90e-600238230ea4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4698d9c5-8499-4094-8b8c-db8b22f32f43", "sighting_of_ref": "indicator--0ac6d8b6-5f61-4d17-b481-adab3bf6eef5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63a23b5-05d5-4b9f-a8e9-154d7eace4ac", "sighting_of_ref": "indicator--0b62fc6b-689a-4c6f-b72f-e720f6e09b84", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f618069-6e20-4194-909f-9285a47cbdca", "sighting_of_ref": "indicator--31c4c3c4-1e09-4075-8ebd-e50093fd4115", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28293646-4335-478d-85c5-9bfd47d06ff3", "sighting_of_ref": "indicator--508c79c5-e996-434c-91f5-8ca72c73ef66", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866eb0ec-108d-4081-b9d7-9e8e949cc034", "sighting_of_ref": "indicator--b0fa1252-09a5-421c-8d9b-121b843ed88f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef154ebe-45dd-484f-a6b5-c2c1e1e96c32", "sighting_of_ref": "indicator--d95f8649-46b3-4676-840a-6db765ce7c2a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed273d0e-4db6-4c41-bd9f-07856c8b6c88", "sighting_of_ref": "indicator--d22b786b-3516-4f80-a350-684768840c92", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7c4084-61fd-4a13-8cfa-6ed509d7667d", "sighting_of_ref": "indicator--cd960399-29b3-4a75-ae88-4f4de490628a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66fd8d34-4988-4144-a25f-935dd154a9f2", "sighting_of_ref": "indicator--79b7d702-638c-48e6-a444-1e4a78e9b1c5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b72e50a-8ef3-4958-9980-0faf3d545e92", "sighting_of_ref": "indicator--5412418d-778e-449a-9516-797fd3f61d0b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb326ae9-8998-4a8a-873e-15a78b12a1cf", "sighting_of_ref": "indicator--c2b8235a-3bc0-4a98-a474-bded5f9da799", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69dfcaef-3c54-458d-af84-2248ae1f2296", "sighting_of_ref": "indicator--6da8560c-5f84-49bb-bb4b-860c5185fbef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3909c76f-1a0f-4bcd-a444-4fd171146a75", "sighting_of_ref": "indicator--0908ba06-54ee-4693-ab7e-1d0afea972b4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec265608-6b01-45b6-9671-f551bce7a188", "sighting_of_ref": "indicator--e772cf87-c18c-43d3-9c8d-d540953c09ad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68c6407-a021-452c-b79b-2041f39be8df", "sighting_of_ref": "indicator--9cd58733-7bed-4105-b44d-2d583869a63c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ae3a27-a64a-4f77-9e07-66dfb533b2ad", "sighting_of_ref": "indicator--f8229316-a426-4c9f-a85b-367ced246894", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a9cf04-f411-4bef-9745-f5060feb2b9e", "sighting_of_ref": "indicator--a8392ba4-d8e0-489b-8f7d-7d18f9fe2e7b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b613308-400f-449a-8aba-a49fc50ede75", "sighting_of_ref": "indicator--d083b336-babb-4be3-bba1-2244008250a2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a178072a-2265-4a2b-8be1-b217f1f535a9", "sighting_of_ref": "indicator--a00cec90-4de3-440b-9460-af3f59164e00", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274a032b-a2dd-4173-9cb8-70fb5db4e317", "sighting_of_ref": "indicator--48083b1d-8762-450f-a660-c70158d2364f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471e1f02-52e8-478c-930c-b47a14ddad9b", "sighting_of_ref": "indicator--a44eab37-9f57-46cd-bd82-4273878c8d49", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a276a084-f407-4b9d-a4d0-6c83173d0e06", "sighting_of_ref": "indicator--41ea80d5-041e-40fe-8c09-6f8ed104c191", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400f43c2-13ec-4cb9-a389-6b2dc4158468", "sighting_of_ref": "indicator--25aabe77-c532-4b48-accc-c6b7c9ac1c0f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46375bc1-af53-430b-a533-a24bdbf0f8b8", "sighting_of_ref": "indicator--fedf7130-70e2-41e7-8fc6-30e5cccf3662", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5fb043-bbf2-4917-92fb-053283da22bb", "sighting_of_ref": "indicator--b889e294-1c17-406c-b1a5-a3e8b5a43ed9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5482ba6-2863-4ca1-8c2e-b4fa57a16989", "sighting_of_ref": "indicator--32104e96-ad97-4898-8312-881ee0685b55", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66fd9220-5b55-405e-ae8d-b8633957f669", "sighting_of_ref": "indicator--7fa3bac8-6883-4459-a090-1a3b163234a3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39654e8-6e6b-4e24-8dbf-fa8248da9e0c", "sighting_of_ref": "indicator--ce1dd2e5-da63-498f-9bdc-f54c9f71b25e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ff1027-60f7-47bf-9679-de4342e1c961", "sighting_of_ref": "indicator--1bfaeb79-c9b3-41a5-9ba4-de68494936ae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6fd576-d890-43f2-965c-16a1791b1913", "sighting_of_ref": "indicator--caa05616-04a9-4f5b-9e30-d17ed3c110c9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb2bc09-9c36-4472-882c-e58db5250671", "sighting_of_ref": "indicator--02a7406a-c1f6-405f-87ef-23c1b80b0ba5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b4e5f39-6951-441e-89f5-c182dfad800f", "sighting_of_ref": "indicator--749b12d3-c68f-414e-b1cf-7c8cbbce115a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd59ee8f-dffe-4332-9953-da4f2765fd1a", "sighting_of_ref": "indicator--d22255ac-259b-436c-b0f2-c119b41e3515", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a4c106-eebb-462d-ac22-0831d5389662", "sighting_of_ref": "indicator--d912cea4-d363-4b52-92c4-65a6c97408e9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0e7e05-fd43-4b78-9df4-0c62289c40a9", "sighting_of_ref": "indicator--aa8ad05e-5b42-4f63-8ec0-fcaba9523d77", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f94018-c418-4d25-aabe-8cbc8c67e18e", "sighting_of_ref": "indicator--6907ed9c-b0dc-4063-adb5-545c95951677", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c520e8a-ec9c-4386-9116-e83384436a2f", "sighting_of_ref": "indicator--ea87bc18-2ead-469d-b624-c0d0f1d3d289", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb634194-ffa6-4caf-971c-936850257d6f", "sighting_of_ref": "indicator--cec74f3f-1f8f-4e8b-bfc5-a891472033d8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af13b688-c8e4-4d68-a16b-42fa5588be46", "sighting_of_ref": "indicator--4213f6b6-5c2a-4837-83c3-2f8f5186b276", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c214bfd-ef51-454e-9a34-8e4ff66a64c1", "sighting_of_ref": "indicator--37663019-2e11-4f95-b01c-bc3cbf3f1fcc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69196911-96f0-492a-be1d-6a82282c3e7e", "sighting_of_ref": "indicator--c8eef53e-7994-459f-8034-30787366a4b5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd542581-9972-4d09-9eda-6d535b1fe2ab", "sighting_of_ref": "indicator--8e4a3186-e120-44ab-8c0b-af0ae8c76c07", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fadd9a54-bdae-4e3e-91a1-d954222825d7", "sighting_of_ref": "indicator--139d395d-c877-4ce7-bfee-525f3a10456e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb96c5b4-db34-47ce-a4db-4e3e3013b544", "sighting_of_ref": "indicator--e6bd2d8e-b27e-41b4-bd8e-ad3a7ca8372c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd234800-4986-4e60-ab8e-ab6dc652ff33", "sighting_of_ref": "indicator--4433b07d-14a1-4174-aa61-9bae475c41e7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be44a19a-06d7-4408-83ad-5f32e2da9977", "sighting_of_ref": "indicator--71c9960e-fe69-4f57-9723-cb9f22f01fb3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf13cdf5-8fd0-46a5-bf81-ca19177f9e79", "sighting_of_ref": "indicator--e3bd88ee-2444-4c61-913e-5be81b9ba7f0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d688017-3466-49e8-a314-b393dde8ab0a", "sighting_of_ref": "indicator--74907dc8-11d2-4bd6-a6c0-7c74178fdf00", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f90301-6b7b-4352-b2b4-a883eb509c1d", "sighting_of_ref": "indicator--ad73f759-2b58-440f-a22c-2ee709548b61", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a0ff089-bb31-46b3-bd32-fb1a2a2bb7e3", "sighting_of_ref": "indicator--8a384e1c-876c-46d6-aa88-8062588b9e4b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551576e4-4188-40df-aa5b-950b15c5757e", "sighting_of_ref": "indicator--feb5c364-941d-497b-9739-6bdfe481ef4d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463d66e4-bbe1-4754-9b58-9e4ec98fff32", "sighting_of_ref": "indicator--97206a60-7221-4bad-bab9-375c10af6e97", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad17ce3-7a55-4a98-9f8a-4b87a052a2ab", "sighting_of_ref": "indicator--ead67eba-37a2-4a3e-a8cc-87b540751a5b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851d7667-5ee8-40f9-8724-b8a5e3ea47b4", "sighting_of_ref": "indicator--464d8c16-8b1b-417c-a5c0-45369482f944", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84490529-489c-4eca-aeda-a6111c8daad2", "sighting_of_ref": "indicator--b837911f-563d-4ece-b203-9a32fae21103", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bdf5d15-a1ff-446f-9d47-3aafbc3a9d66", "sighting_of_ref": "indicator--cc08cdda-ac49-4858-92fe-5b6bbc7d0c37", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3049f5-9a0b-42c1-b177-08658204a7af", "sighting_of_ref": "indicator--a794e35c-3e3c-4e25-9b6d-90a9b0b9c396", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcc8016-4307-4847-a8f0-91b7152519c9", "sighting_of_ref": "indicator--46856a80-07fd-4a73-8509-b27262a884eb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39017775-b412-46ac-be4d-194f186d8744", "sighting_of_ref": "indicator--d025d1cf-529b-4a4f-ac0c-8bb49a16e5a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fcaacc6-2c65-4cc5-bf7f-bf44c6ee6aeb", "sighting_of_ref": "indicator--5608afcd-448c-4c9b-8dc2-b8580b5ff143", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09bce7b9-ef50-43eb-9133-87fc5bf63ac3", "sighting_of_ref": "indicator--cbf22bcb-e62b-42e9-bdda-9f8bc98b156b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f768abdc-7295-4cf7-925f-579f8d6d0fc5", "sighting_of_ref": "indicator--d0d53b0f-238a-4548-8045-6f2110aa8018", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d897bf8-2ced-4544-952f-7ab4ba2080b7", "sighting_of_ref": "indicator--2653877d-32bf-44ec-bf58-89bb9bafa86d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8679f6-a502-4deb-b8fd-38b0df4cdb4b", "sighting_of_ref": "indicator--f6f6a52b-bb0d-476e-a6ce-a704d4274b54", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--430ed71f-3c5d-4df2-a8b3-b6a2df35a0f8", "sighting_of_ref": "indicator--daa9a2b9-9e7f-40fa-a517-ba6a28cfda7f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1aea99-f9ba-4555-be7f-bf713cadd145", "sighting_of_ref": "indicator--f2e9feba-1837-4e0f-8f5d-f36d8442c282", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2908d6e-2f2e-4322-b24f-1bb29d10f27f", "sighting_of_ref": "indicator--d36bebc9-4084-4e89-9735-9544d5b5a231", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c753318-bc58-4d7d-81aa-a485767ade6b", "sighting_of_ref": "indicator--864e8aa4-3c2c-49f1-9865-20c541f52d5f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ef4913-a58b-4d03-8cd5-4ab627c53ebe", "sighting_of_ref": "indicator--363794c2-966e-4ed2-a77e-517c99899bca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5116f4a-210c-431d-a733-1c66ec1a820d", "sighting_of_ref": "indicator--375d2191-c78e-406a-a3d0-a19748d249b7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a10199-47ea-48a9-920a-e4c290a20162", "sighting_of_ref": "indicator--ce65eed2-0652-4794-b384-ea0130a124ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30f830b-0ae5-47cc-af7e-c43d8545ed01", "sighting_of_ref": "indicator--9fba82ef-cd82-4ed1-858a-a6f9c42d3bba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9267e26-7a8e-4eb2-a261-6a00a7d61557", "sighting_of_ref": "indicator--23f2c8eb-d9e5-4aeb-bf8e-74d0cabbcec6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85711a89-0b4a-4dd2-821c-391f2beeaee3", "sighting_of_ref": "indicator--cd318844-1ce7-4578-8282-c8e479dd1a4e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88914eee-04df-40d0-9c54-631cc02367d4", "sighting_of_ref": "indicator--5a0d56a5-2b0f-436a-8c40-748c3de5dd0f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8d407b8-eb93-4da1-9e61-4a9deb7f85b9", "sighting_of_ref": "indicator--3a44687d-8f67-4c07-bab3-124f24bade02", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6602313-0195-4ce7-bb2d-8cebad75ad83", "sighting_of_ref": "indicator--f5e0ac89-9963-4997-b72a-889768e0cb5c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac580ee2-5824-4d14-b60b-d2efcc576067", "sighting_of_ref": "indicator--ec7c35cd-62e3-4b61-b906-3415fea4df29", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0484c435-e603-4523-8d3e-5220071bb9ef", "sighting_of_ref": "indicator--00f84879-f2dd-436c-bfe6-0ce5bf464207", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--539854a1-0acd-4cc1-a459-0318a2b30986", "sighting_of_ref": "indicator--caf85a34-db2d-4449-817c-9e0ea9e04eae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d8ef4d-7fcd-4f14-a819-1d8abdf61f1a", "sighting_of_ref": "indicator--8f6a004c-65ca-4664-96d9-37e8a8576349", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f725c363-685a-4e8f-b1d0-3c65249f8eb2", "sighting_of_ref": "indicator--eaca20bd-9cf5-433f-b089-1095b8cd7ffc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c3f90d-9f6a-439a-b515-83b5b428801e", "sighting_of_ref": "indicator--2fb85d47-c6af-4420-a357-e8ae9cfc5ed5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--434a4871-923d-4c69-b171-53df2db59995", "sighting_of_ref": "indicator--ea5572fe-124d-4f94-9ed8-ac709fa53153", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f9944e-b642-4514-a614-b5eacaaab880", "sighting_of_ref": "indicator--18983e17-717a-4c71-bd3a-1eb17fa9ab9b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5525a8-89f7-4c7e-9aaa-99b0fb7df2ba", "sighting_of_ref": "indicator--eda59be8-f6fd-4214-aee8-95b197f06dce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247828de-c7c6-413b-87d2-111755d2cb2f", "sighting_of_ref": "indicator--cadcaa5b-f0d7-4c8c-b398-ca8c1a4d6017", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fcdb91-34d1-4422-b8f7-8d9101c148be", "sighting_of_ref": "indicator--b13035b2-ba37-4bfd-ac29-673b273ab14a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14cc34a5-b824-43bf-946b-d21cbb1c9178", "sighting_of_ref": "indicator--676c8070-ffe8-4bc4-a8a3-c57657524d0d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--728ecc79-c913-4b51-bfde-6a8d2a09cac6", "sighting_of_ref": "indicator--ad1fa47f-043e-4b23-bdbe-f9ead44c919e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abbeb205-3892-4320-89d4-9b3730440410", "sighting_of_ref": "indicator--a7e9e1fa-0f11-418f-9cac-c780cc6742bc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7af205-02b3-4bfb-ba4f-6781c31f00a0", "sighting_of_ref": "indicator--778df597-7bb4-42b4-8f8f-f73d1653ecc6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec92dbae-995f-456c-b298-059928c4b948", "sighting_of_ref": "indicator--41dce3a7-7f5c-458f-ac7b-8ac96e12486e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75f89a2-c030-461f-bee9-b3b9ea008a1a", "sighting_of_ref": "indicator--ffc44fcb-4eb0-409c-9910-37b283a9720e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce941672-e1b7-499e-9150-7c5af48272f0", "sighting_of_ref": "indicator--0b6d9bea-a5f0-42d5-98da-fa193652af35", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca3b903-cb90-421c-91e7-a07289f89fd5", "sighting_of_ref": "indicator--77abb707-536f-46cc-8701-04fbbc32ca6e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeecb34b-2307-4c8a-b2ef-b8a1880350c3", "sighting_of_ref": "indicator--f7b6dcb7-4a2d-4157-bef2-d25c6af1a381", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--223b60d3-284c-4e10-bbc7-efa4a83debd5", "sighting_of_ref": "indicator--4e6f7b83-2219-48d9-9f9c-d340581a0a92", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e389fae-286f-4481-bd4d-a0aca06a619d", "sighting_of_ref": "indicator--81616e6d-b324-4dfc-bd54-84551a80046b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1139dc4-f597-46c3-b47c-854d6d087aa1", "sighting_of_ref": "indicator--0ff1bee3-a8d1-4942-a293-61bc4e876b20", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a87b6a-2748-4fca-a579-458625e7a359", "sighting_of_ref": "indicator--1bce8d5d-9cfe-42d1-9d92-332435a83432", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766b9d15-cc52-4be3-bee3-5a7b6a026287", "sighting_of_ref": "indicator--9d64a71b-9b75-4df9-922e-fa1637d37391", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a90453-da6f-4d83-aac5-5e31ea1e5b52", "sighting_of_ref": "indicator--f47b698b-8a34-40a0-88db-98c85000313f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df56c068-c884-43c4-a6b6-69b443dbdf19", "sighting_of_ref": "indicator--233086ec-e5c7-4313-a361-0c3a0aecf36a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e53b0a8-ab60-42c1-b1a7-ba0fcfbc8b1a", "sighting_of_ref": "indicator--e2ae3ac5-f4a9-4c97-9472-5a34ac33b735", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5860e7a-efc7-48db-8859-7ef13f727e5c", "sighting_of_ref": "indicator--5118045d-6ecb-43d7-9335-1a3ab6671cf7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7acda3-eb05-4ac0-9d70-0e9cf5679e06", "sighting_of_ref": "indicator--da0fbc0b-7521-41ea-b51c-f492b187517f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a833eab2-bcdb-4809-aff5-6131dd144b43", "sighting_of_ref": "indicator--fe78ddbb-c88f-419e-ad3e-e9e26b096165", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba5b73fb-9a99-4f94-81e4-72b4b2b07883", "sighting_of_ref": "indicator--717ee331-8cfe-412b-a6dc-a1a0cd61cdc2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41aa092-1d56-4f82-9e5f-6747cc73acbf", "sighting_of_ref": "indicator--02a14927-d7fc-4ceb-9319-5d3b2cc0e4d0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c375d7-4e9d-419e-9c6d-8ff1bdc379b0", "sighting_of_ref": "indicator--41109780-0db9-4f40-bbfa-47720f6ebaeb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f40359-eb89-4110-ad0a-f614cbc47264", "sighting_of_ref": "indicator--f072bb34-88d0-4016-af29-57f556a81a30", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4290fcee-8d8e-4261-ae90-f1f9f074f7e5", "sighting_of_ref": "indicator--e620e542-2655-4cef-8163-a229300205a5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1212af-29ba-46fd-85e7-f214887d29f7", "sighting_of_ref": "indicator--cd5f51bf-e3a1-4cbb-a470-d6a292ee513d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21581b4-fa67-424b-8ae5-508b85bd17c4", "sighting_of_ref": "indicator--ed80cc4a-e157-4a1a-a5b7-ea5b9738d02a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d16e5b8-98b0-4797-9ccd-48847130e242", "sighting_of_ref": "indicator--270d3bdd-a226-47d8-b7a3-70fdf5ea07ce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e3e59d-d516-4f9a-97bc-c872ebb4fbac", "sighting_of_ref": "indicator--b9f716f8-2ff9-4e93-b1cd-34c995024204", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650d5368-e6ff-404e-a197-466188920b3d", "sighting_of_ref": "indicator--440228b3-e00e-43e1-8668-86b8c09a1149", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a0cebf-164e-4c36-b7d1-ebd1c3fe3381", "sighting_of_ref": "indicator--785c6f91-ae5f-4048-a9d5-5e7d563f3f2f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c941030e-0e75-42e9-a8a1-6124f7203e98", "sighting_of_ref": "indicator--32837a8b-99f9-4564-bf30-c6d5ee853c0f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2fbced-5069-424a-a9e9-6dca71595ef5", "sighting_of_ref": "indicator--8b9559b9-9ce5-4e4c-ad5a-b67ff362fce0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c827ac6-82d9-4f19-8fc9-440c4cd519ec", "sighting_of_ref": "indicator--8d5d415f-250a-411e-b623-fcbe42701c04", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71881c01-d708-4a43-ac7d-e0652c619997", "sighting_of_ref": "indicator--c511a113-3d8e-4bfa-90d3-c31b7cc468eb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b03c546-cf06-4381-9ba0-3efd161538e5", "sighting_of_ref": "indicator--6a094a34-1a09-487d-9a9e-c8a290148bce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1705695-6bf6-4e0e-b0d9-5ecaf721e09f", "sighting_of_ref": "indicator--c75d67f8-a502-4726-aba4-f137f479354f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4322989-d7fc-4bcf-a8ca-fec5b223059b", "sighting_of_ref": "indicator--89232a90-ed98-4df5-b928-c31a96b2da97", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c1d23d-1b44-4c1c-805d-74219acdd69b", "sighting_of_ref": "indicator--8a1d9c71-b413-4277-b09d-87272d7d0f19", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1107169-c180-489f-ad93-bc8f0065cba2", "sighting_of_ref": "indicator--f6dde7a1-6dd6-4e48-83e3-c4ae7d2fb472", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3be5be4-4f2b-4273-860b-7944d7619b18", "sighting_of_ref": "indicator--198bc626-ad64-448a-8cc2-b085e7cf1f9e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5177a27-127b-441c-b5ed-583bd6c2b7c3", "sighting_of_ref": "indicator--181e1e67-0e88-48fc-af56-3fcda8e55d3d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3042a28e-ea8b-4df7-8182-f125f78184bc", "sighting_of_ref": "indicator--1fad238b-422c-41b9-86e3-abe6a773c9c3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8208e0-88a4-4ebc-9c78-5f7ce0ba8b13", "sighting_of_ref": "indicator--3863cfef-38ae-4d68-a7e0-78adc3eb9904", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf1cd1d-cb9c-4334-8e80-7b49e6b12d6b", "sighting_of_ref": "indicator--50fcac6d-e398-4c48-a7fc-7af5b6920736", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e721432-4d7d-4b26-8b42-bb64a990b014", "sighting_of_ref": "indicator--f9fa0b4a-449d-4468-bf4b-5ca9b35191ef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d876511-117d-4c0b-84f3-59318ac22be6", "sighting_of_ref": "indicator--53bc32c8-f903-4eba-bcb4-6df2cb400510", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f79a3800-cafc-4204-9b24-ad6a3f3c17d7", "sighting_of_ref": "indicator--70cd08bc-cbd3-451d-a118-88bf683e2f19", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3f3828-3bb7-4236-9bee-eabcc490ca5f", "sighting_of_ref": "indicator--af137ab3-b6e5-4300-bb05-c6bc5de1012c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9ff9f1-6f22-4b62-b78a-f79036bd8a3a", "sighting_of_ref": "indicator--4b2afb58-4fd1-418f-8724-b661805963f6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c803fffb-fb70-49fa-9472-b096cd8707ff", "sighting_of_ref": "indicator--2007731b-f70c-40c1-826b-9ad46993b7cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a3f74e-4703-4df6-8260-c0ea5a1ffd40", "sighting_of_ref": "indicator--b7e8831a-6aab-4ee1-a569-67010182b594", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0783cd2-2d97-4cec-8a96-a165d2e4e4dc", "sighting_of_ref": "indicator--fee5dc02-dacb-42a9-ac9c-b3baa44bcaf4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f1425e-3bb6-4f30-bca9-e32084defbea", "sighting_of_ref": "indicator--aecf96c7-8a6a-4b92-b861-72b945ae20a7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9cab168-dcac-46be-9395-7f28f2e3573a", "sighting_of_ref": "indicator--71179128-a802-4c7f-9dd1-86d0f06d57ec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e08ee69-3d0e-446c-8f3b-483c7b87984c", "sighting_of_ref": "indicator--7f41b47f-7d6e-46d1-8d85-b72bb15e320f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80828658-36f9-45d4-9402-0e38130a91fa", "sighting_of_ref": "indicator--f17b091b-5b01-4ef4-98cc-588a58c6bd9c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--501c0071-ad19-4b57-a7bc-371fde68197b", "sighting_of_ref": "indicator--5e066721-401a-4886-ac40-72f8c148f54e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917a1de4-9803-4886-b867-a11180cb1b89", "sighting_of_ref": "indicator--0b245970-0700-46b3-a275-500a7ea10f74", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007adc05-f007-4f4d-a94a-0d2e3853894d", "sighting_of_ref": "indicator--793b3d36-caa7-4f18-8155-192da67da6c5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f119b940-b1dd-461e-9549-dfc907f754c7", "sighting_of_ref": "indicator--d8ffe863-c426-4fb5-8c2f-d23bad485720", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26e2b70-d36e-46a8-9e8a-ef05ba9725ab", "sighting_of_ref": "indicator--df2d90fe-d8b9-4e79-ab08-a78b001fbfd7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261029c5-dc34-40b6-b05b-1081b51f2291", "sighting_of_ref": "indicator--72acab99-7afb-406f-8e85-c2b9f099b7d8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42b6a88-30dc-484b-a2e5-6200c9ea440d", "sighting_of_ref": "indicator--d26a3568-ce38-4ddd-850b-2112e38948f1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ddcc3d2-2982-4ccd-b767-0abe706841d5", "sighting_of_ref": "indicator--e77db01e-1dd0-4601-99a3-ebe172d37cf5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4a229c-f27d-40fe-87b2-73682188bfcb", "sighting_of_ref": "indicator--23a4e832-a608-4e5f-9c79-93110977d095", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2e5e1a-6235-432b-815f-97095f8695ca", "sighting_of_ref": "indicator--710621cd-6623-4949-b3e8-96526a6f549e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a337c1db-3c4a-4fbb-b427-6bfe1a6c7414", "sighting_of_ref": "indicator--d80ef93c-f4d8-47e1-9a45-b7c4cd17cb02", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb016f92-ad29-4526-839b-b0cc341266ea", "sighting_of_ref": "indicator--9659a771-772f-4cf9-bdd1-46d15520e741", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf3287d5-f310-44cf-bc63-5f123d408c16", "sighting_of_ref": "indicator--a1684360-70e5-49ae-8bf5-c18b373672ae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--198755ff-74a8-4a2e-8bb2-274524e8a18d", "sighting_of_ref": "indicator--1e68c253-a518-4f57-9123-224c846685f6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc810d2-1521-4d01-9e74-f8a543ded6f4", "sighting_of_ref": "indicator--6f84ebe5-8bd8-4d20-ad9c-80f9256f9365", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83abde93-209d-417d-8e57-a388bdc72d28", "sighting_of_ref": "indicator--9635f6b3-7d44-4b7d-b7dc-7f4a9c33f933", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1aa4fd9-cf17-4247-ad2c-5e5f94d2f223", "sighting_of_ref": "indicator--6691881f-21e3-4af1-a93a-00232da6cb41", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d079856f-5298-44ff-87d3-b93e5e81f695", "sighting_of_ref": "indicator--82a2b43b-3878-42db-b4ca-a1a8c62374a6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9916493b-efd8-4da3-a441-72b14754dbe3", "sighting_of_ref": "indicator--f73035e1-507c-4232-b062-38ec3bf37886", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26000b68-cb5f-487b-be03-bbf379b8448c", "sighting_of_ref": "indicator--2c1a8785-8b07-4765-8d26-4b1d80e46003", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff44667-b57f-41e3-8f9b-467fd73df4d2", "sighting_of_ref": "indicator--354e6716-2751-4b67-a0c1-59bff793c567", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53bdc268-de72-494a-84dc-aeb1ac07019c", "sighting_of_ref": "indicator--615391bc-c679-46fb-a60d-8e9774b8e205", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81049a26-9e80-4ac4-961d-4605bdfc1deb", "sighting_of_ref": "indicator--866123e1-0fd7-494d-b62c-95c7c0b967f3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e750e1f-bd76-4f76-95e6-6c9baac863a7", "sighting_of_ref": "indicator--9eb0ccac-e211-4e60-b5a4-8eb1a6289f2d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e441876-1ce2-4559-aa21-545f940c70ea", "sighting_of_ref": "indicator--cf9a4022-df36-4aa7-9a4e-8c7bf7574113", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed57b68-6597-4fc9-877a-a553f679288f", "sighting_of_ref": "indicator--db81610e-295b-44ed-8078-e2616c995587", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3759d145-6df6-4382-8b63-05ff07e85ed0", "sighting_of_ref": "indicator--f6e12d39-2e97-493d-be33-4d0a8deaec58", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f73f437-97df-4206-8b45-81c95e0a343b", "sighting_of_ref": "indicator--b0bfe42f-afe8-43f7-b065-99ce8afba99a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7443a465-386c-4510-b637-f10cde010d10", "sighting_of_ref": "indicator--ad0d2edd-4a2a-41d1-93af-542c036f5046", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25179e2f-1012-4632-97bb-09b27fbc7178", "sighting_of_ref": "indicator--4df00fcf-6f5d-4e57-9f6b-4523fafbdaf6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a055584-6205-46d2-ac18-9327f3575e2b", "sighting_of_ref": "indicator--c187a437-5b7f-4232-8673-693a19d1c809", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d6f185-36ad-4e50-9325-ca114ce3e2f5", "sighting_of_ref": "indicator--28fa52b2-a2e0-494a-b45a-8c0603e95dd9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b4773f-c839-4fb7-91e8-a63f3b8146de", "sighting_of_ref": "indicator--296fb53c-a82d-4126-bb9c-140ef0f11ef2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30fa36ff-f793-49e8-9867-c6c3150a0df4", "sighting_of_ref": "indicator--1cd48875-6ebd-4938-8482-7751e027fcbb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df97cbf-4308-49c1-a0c5-eb71ad6faf68", "sighting_of_ref": "indicator--5c7049e5-c3a5-4ad9-88f2-5b299420e2f3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a15e71-4df9-4926-84e3-521c776533cd", "sighting_of_ref": "indicator--aef5afea-9921-45cf-abe1-90d6b1a8404e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4396fb37-26d6-461a-9a61-d2263125592f", "sighting_of_ref": "indicator--d68acde0-44ed-4f94-9fce-446ce5b55252", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec0f0b07-66d7-4c15-88dd-7214d4b795d9", "sighting_of_ref": "indicator--a3a15a59-2598-4f5a-8559-4a67f0bc53d8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e40df0-4d9c-492e-aa02-544ac6d2fbd2", "sighting_of_ref": "indicator--7c0594ca-93b1-4839-89ef-3b6d24e78735", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fcc6d36-7c3c-4efa-9602-86223d6ed134", "sighting_of_ref": "indicator--b3238ddf-bd1e-4296-ad2f-1e796397cc0e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e700394-b57b-4318-91c7-e907f7c38875", "sighting_of_ref": "indicator--b97e2b9a-6353-4f52-9c19-4f6f8c07e12c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a2418d0-c1c7-4f5a-abf8-faf862fcfd4c", "sighting_of_ref": "indicator--697e8f99-ee00-4868-8ab0-4dd9dda6ad0c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c97d9e9-6a9a-4054-8a17-7445e228dd7b", "sighting_of_ref": "indicator--f5a02329-3341-43b0-bd9d-e8c140cce863", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd507d3-c49e-463b-b75b-3dd6fc277dc2", "sighting_of_ref": "indicator--c35e742f-e65f-4726-b9b1-87b0bd62a606", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132f4eb7-3d43-4217-9c18-bc1512cac0d8", "sighting_of_ref": "indicator--9280f867-56bb-415c-8877-7b57b661f387", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7077033-dd08-453a-abc3-ba549575ee61", "sighting_of_ref": "indicator--ced3d06b-33ae-4616-aae6-1ebf92b259df", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc59579d-46e6-4893-9ea4-076b7add735c", "sighting_of_ref": "indicator--df3a0b91-e0e8-4def-8917-082e3134c592", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bfb5b8b-f92f-4b28-97cc-5995c7d82de4", "sighting_of_ref": "indicator--dfb579de-9211-4d6d-922c-3f051fd28a41", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa91c5f-55c4-4af7-802f-8a4de7ff5ad5", "sighting_of_ref": "indicator--da21642f-c7a1-488a-b687-c15c9975b7a9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5337f991-f8dd-4d8a-9ecc-470772bbfff1", "sighting_of_ref": "indicator--696656f9-9905-4f1e-992c-60040e022b66", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26273378-5d04-4274-8f3d-30a2c0c08411", "sighting_of_ref": "indicator--5f333216-1b68-4043-a593-40bf9f61105a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004a4db2-ad6c-45a9-b342-79acba3d3cc6", "sighting_of_ref": "indicator--f1591745-19dc-4966-937e-afd7b261eb25", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e3a2b7-8e0f-4bc5-805b-dbc4b208e720", "sighting_of_ref": "indicator--f13143cb-735e-4264-a621-514a310c436d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0abd650-f910-4bf2-938d-5b57f4c6a5f2", "sighting_of_ref": "indicator--7c129d9e-cd8a-420d-9dea-fb0ce606c949", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc8a41f-5383-4ccb-b068-3b443551946c", "sighting_of_ref": "indicator--d758951e-eb8a-4044-a6dc-9cc0961a2b23", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2675b543-cf57-4eea-ac7f-f5f0288bb6dd", "sighting_of_ref": "indicator--65842b04-4a4f-4af3-a01b-ebf2ad6bcfb1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e724a7f8-177f-4efd-afdd-85dcda6ced71", "sighting_of_ref": "indicator--76e7ab7f-d53f-42d2-b6d7-b72d6d63e6f8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c28b99-d5fb-4994-ba04-fdce2d404f0c", "sighting_of_ref": "indicator--656e6a68-9f52-4f4e-ba18-4171f007f11f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d122b5f9-e031-438e-8246-d45fd653ee87", "sighting_of_ref": "indicator--7ef6b62e-827b-461e-a45c-aaedae8cc41c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab849e71-ac87-4a28-9f06-d8f748585ed5", "sighting_of_ref": "indicator--64a8fb13-5a66-4161-8b51-6d892bbeedb5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d5cfeb-4a03-4130-8836-ac7bc77dba2c", "sighting_of_ref": "indicator--1695aea7-7cf1-41f4-85bd-c83bc950d80f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96919f37-fcef-4912-ad9f-8fed324ff59e", "sighting_of_ref": "indicator--389e06c5-e4bc-4b17-b3aa-3fc63f369d08", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--505ba2c8-d6d7-4d3d-9d0e-e0098bbe9d8a", "sighting_of_ref": "indicator--4f6093a7-8e6b-4761-93ff-86fa9e7fb122", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--296d188c-7ef2-42c9-a52e-a6537090a98f", "sighting_of_ref": "indicator--4df95b5b-95e9-4a74-93c3-d9e507184b8a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc83eb5-b036-46b5-ab5d-3e2bcaf7473e", "sighting_of_ref": "indicator--ce48e7b4-d709-4aa3-8a7d-bae20b80fdc3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db9701e-dcb8-4c79-a049-64294fe836ce", "sighting_of_ref": "indicator--318ff754-2d71-4557-8bf1-2e50fd454674", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9998e72e-8272-4134-92c9-dcbd0c116d77", "sighting_of_ref": "indicator--cb677965-004b-47d4-902c-332836a23286", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99921d6-719e-48a1-94ed-8ecffc8bdc08", "sighting_of_ref": "indicator--8eb3c56f-31c4-4d8b-a285-fbeb46572061", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ccfb9bb-96c5-4d73-8bdf-5e288eb79a9b", "sighting_of_ref": "indicator--252ca049-3471-4ddc-ac6c-cc872a9e93e6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebef2c3-1fda-46f8-88ea-1047cc407c21", "sighting_of_ref": "indicator--e2269b47-b73e-46f6-adb3-75b0e9c31883", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc67cbc1-dbf2-49e0-830d-f4d29326ae0b", "sighting_of_ref": "indicator--f4eed9b8-7fd3-4989-b284-7fc168d0bf1b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36fec89f-3cb4-4bfa-b116-ce987a5cc024", "sighting_of_ref": "indicator--9182e38c-71d9-48c4-b7c3-ed601e1b874f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a605ef3c-bb55-40e1-b5d8-df40e7f65691", "sighting_of_ref": "indicator--321b94c0-8fcd-4647-9091-7284765fcf70", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51924ec-9a09-42f8-b380-68919c1c090a", "sighting_of_ref": "indicator--8c00e39c-dea9-4d8e-a608-032f81897548", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd18080-7070-4aa6-9243-f12993f61f06", "sighting_of_ref": "indicator--075b5bba-ccab-4f54-a5a3-9c6f4a1c161d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc032f6-e705-40e7-b8f4-bafd17233fa8", "sighting_of_ref": "indicator--4adae599-7d82-400b-8368-ecee53d229a3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68e5c04-df69-4eba-8389-ff5f16b3c1cb", "sighting_of_ref": "indicator--ebb199f9-eebc-4f4b-9365-fde31aaa727d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386b28c7-3106-4392-8ba9-59accc6a6df2", "sighting_of_ref": "indicator--10ac263d-6002-4a08-9a58-a1615604aad6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12702e37-61a8-4d28-a9ba-da997492f00a", "sighting_of_ref": "indicator--6b2eae23-49fd-4996-9f84-919a3639ba56", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1278c3-973a-45d9-94e8-846526fed38c", "sighting_of_ref": "indicator--df5be199-1ef3-456a-bb3f-5cb1e5bb58b8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34396aa-fc7a-4d36-85a8-35a6bca7d5d4", "sighting_of_ref": "indicator--6b3fa002-3fb6-4487-8b91-8f95d9f02db2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973727e6-47c7-4365-bbfd-005b01e2af4a", "sighting_of_ref": "indicator--d697565a-46f3-47c8-bac0-980a012c2571", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65974ba-65ae-4b75-a8c4-8626d8fd47a9", "sighting_of_ref": "indicator--07756772-7ea5-4b2f-8a80-b9e7132d9e08", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75f361a-5f6a-465c-a52d-ebe5d3f7a334", "sighting_of_ref": "indicator--4cfb67ac-81f8-427a-85e4-ac664de2d832", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fbefddf-f3c9-4df5-9fe1-985ca8615f2d", "sighting_of_ref": "indicator--b927c194-6797-45e3-835c-cb45d12eb537", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7e931d-a54a-482d-a26b-d26c381b2ebd", "sighting_of_ref": "indicator--7ce01d97-aed5-46d9-811e-64d73b8a6e8c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--098c1c6b-c29b-45d2-81e6-d3015b9e3c11", "sighting_of_ref": "indicator--9205adf4-00d5-48ad-84b0-11dc26e90d1a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26f6cce-dfaa-4576-9301-6a0425a891da", "sighting_of_ref": "indicator--5390d9ed-1d1a-4f91-9cb5-7d34a20e0fe9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00172d60-8272-4bb9-805c-194e29c18844", "sighting_of_ref": "indicator--46fe11be-4580-456c-8d70-b8cdb3339fba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4aa61ad-01ca-439b-b685-8472c7dfb119", "sighting_of_ref": "indicator--8b33cc65-19e7-4d75-a6ba-8d400c83abe6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--646a05bc-98d9-4645-8268-2158efd7e791", "sighting_of_ref": "indicator--50015b31-5cc9-4728-b629-b79e71c4570a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5564d019-a318-47c5-a201-526b38def606", "sighting_of_ref": "indicator--3a9a1fe6-28dc-4aae-9e6e-eb5d8d588860", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34882ff-f9ff-4af6-88fc-8518448f25a7", "sighting_of_ref": "indicator--357aae0b-cbc4-43f0-9b2d-5a47443069e4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b746d78-ca84-4f6c-a32e-d35775462c97", "sighting_of_ref": "indicator--fc77bac4-4ee4-4d65-9dd6-981149a193fa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095a12dc-6f75-4ca4-97d8-4bec19c0afb9", "sighting_of_ref": "indicator--f5df51dc-13bb-4675-8141-2322707380de", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--254293c1-dbc9-486e-91e0-508c8349413f", "sighting_of_ref": "indicator--7390f383-14b7-4a68-822c-4f433db4114f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68a57be-f109-4603-bf34-4f75847afbd0", "sighting_of_ref": "indicator--8c4754da-42a8-46fb-ae01-6db4d542be47", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c69330-3dcc-4ba3-bb7a-af739081c7ee", "sighting_of_ref": "indicator--14f2d7eb-a201-4952-a700-5a0c5ff2e35a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68aa5f3f-5742-4af8-8ae2-84bdc17d19b7", "sighting_of_ref": "indicator--b3ae6e14-aeca-4435-9a79-a8830e166193", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1524f5f-0b6d-47d3-a16f-bea48a50ccb0", "sighting_of_ref": "indicator--c1686867-f921-490b-9c92-76efa7431e24", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5643235-4223-4cde-8b07-97030b2b96cd", "sighting_of_ref": "indicator--4bae4260-82ef-4106-93a3-3873019047fd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7a5096-a469-45f7-af48-09602a1846cb", "sighting_of_ref": "indicator--3f5ef14d-7a9f-4a33-badc-b46f1dee11e9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8963fe6e-3832-4fc0-999f-d77861f25d12", "sighting_of_ref": "indicator--0d1d3475-ef03-4bcc-9919-83745e9a819c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323dbd3e-83cc-401e-adf4-89481ec943a4", "sighting_of_ref": "indicator--4adf0cfe-4a67-4b45-9549-fcff0c6cecdf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da38736-65c0-4d34-9953-73303fc935aa", "sighting_of_ref": "indicator--138f2653-346f-42c6-bf79-e348cc973c91", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f996aed-cf07-4de4-8cd2-632fea2ee343", "sighting_of_ref": "indicator--e6b414bd-c795-43cd-ac03-decaebab78c8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1f9feb-ec08-4dd2-bccb-4c34c6c0c7bb", "sighting_of_ref": "indicator--dd30cf56-dcb3-4f99-8d20-db9bbcd7a182", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f28ce54-7c51-48c3-8b82-b7436df3ea47", "sighting_of_ref": "indicator--038afa2a-a0ee-499b-8b64-ad2887ef3488", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd52056e-439a-4e3b-b310-45950160560b", "sighting_of_ref": "indicator--37b070ba-2536-4b66-a4e8-f2d1259b7e5e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--813b66f4-ce69-4957-ad05-7c3bfa42fe6d", "sighting_of_ref": "indicator--db3b4a0e-7490-4d39-bebf-73712085f8d4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ba7a49-ac96-4f68-87f4-d73981ac45d1", "sighting_of_ref": "indicator--be0a3119-721a-48f0-a493-ffd55c033a87", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534d3d29-a534-4f3f-8d1a-8915ae57dec2", "sighting_of_ref": "indicator--7ffeacd1-0ab9-4ddc-9b5a-16f7c3784f02", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1eea8a8-30b8-4219-8c2e-1ce765337231", "sighting_of_ref": "indicator--4fa67e4f-4cc3-4a57-a7d2-df2639772dec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116b894d-84e1-46c2-a9d6-b60d426a7251", "sighting_of_ref": "indicator--80c0e954-47c1-4e04-a073-042d73ba8ac1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2921c6-d6e3-4f68-acb6-5a535c23180c", "sighting_of_ref": "indicator--77392882-ff39-45d9-99c7-b764b3af664a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f04499a6-bd0f-4ea1-92a5-5505ec2ce8ea", "sighting_of_ref": "indicator--a23ea3a0-14ce-4366-884f-d4d7769d733f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9667efb7-4f3f-47f7-9077-05c24fb077f0", "sighting_of_ref": "indicator--4ab8bdbb-ff72-4cd6-973b-ae03fdc74af5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea018e9-8d9c-4ab4-8d4b-a22049df67a3", "sighting_of_ref": "indicator--73e7f03c-82a1-4757-bc6b-c5c198abbdd1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53481bc-20bb-4517-ad33-9f57abc1cacc", "sighting_of_ref": "indicator--1dfca330-1112-4bfc-bc08-9db47d8b38e0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20857275-060d-4b26-b09b-bc031912a23a", "sighting_of_ref": "indicator--59cfbf15-250b-4f04-97e3-42a631b1aa50", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b07987-c9af-478c-98db-b407c67b3d35", "sighting_of_ref": "indicator--be3e7c7d-3739-428f-aaca-8e56bc65a03d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc5c334-15c3-42d2-99b8-7c0d93f7a864", "sighting_of_ref": "indicator--50750105-360f-45c1-80fb-b116e17b917b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e140c30f-b1ca-493a-8f1a-220aab90acfc", "sighting_of_ref": "indicator--fb3f0aa1-3ec1-48d5-82e6-62c8ac8a947f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a6224f-88ea-45e8-8be5-a1512b8e1779", "sighting_of_ref": "indicator--579ec904-7f11-4a94-9e18-6f9b306877cd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08875a3d-762a-472c-bf2c-7ef56853a813", "sighting_of_ref": "indicator--a2626bff-61b0-4cdf-8e1b-61e616b88b5b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df77802-18ba-424b-9d6f-502c2aaa2dda", "sighting_of_ref": "indicator--9ee8d6d1-3e93-4a12-867a-55c89b24cf7c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3afe6fea-b5f6-4b8b-842d-d630544d1fe1", "sighting_of_ref": "indicator--6d88656b-3944-42de-8aa0-41f0e3185023", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50230820-2efe-4d6e-92ba-e269cf73dc8d", "sighting_of_ref": "indicator--04f39489-b81e-4163-8a1a-0e27c1724725", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5593252-41c9-4836-b5bf-2b2f9e052b2d", "sighting_of_ref": "indicator--ecb0d45c-025f-4836-a46d-efce015182a9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be139f81-b2e7-4aca-9cf7-6221fcb2bca1", "sighting_of_ref": "indicator--cab6c65b-d76d-4c25-8f23-5afa894c66bb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6b80a8-8afd-4909-9b7e-5a4ac6630ffa", "sighting_of_ref": "indicator--6a201c8d-6ba3-4ab1-b881-e4b82ffe3fbd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54bcc821-6539-4c4d-b09a-8c31d48c4534", "sighting_of_ref": "indicator--18351270-b9d9-443e-96e7-90f72bb4edeb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fcff2ca-3f3e-43fe-901e-c69ae399c4f2", "sighting_of_ref": "indicator--2e473c0a-d7ba-418a-96b2-2b975c1d3cfd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88bc6dfd-67ef-42ce-8575-3b81ea315239", "sighting_of_ref": "indicator--fa8a38e5-3319-4690-ad6a-2a51c31097aa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96d6985-93d7-4a0e-a7ac-a7d042e34796", "sighting_of_ref": "indicator--4e8cd43e-0634-4e18-8fa9-aa8b66c27d24", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44b9dd8-5553-4474-81f4-75cbc8703e24", "sighting_of_ref": "indicator--fb73346e-30ee-47ba-9fe9-a89aa32ad12a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77415d5b-19f5-4e43-bdc2-9777e9730ed8", "sighting_of_ref": "indicator--a71b87bf-d799-4ed6-b046-4ae884f282c4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c538172-4e3f-41a3-b860-157c3e770e1b", "sighting_of_ref": "indicator--f635c0c6-0e72-45ab-ab34-4b735fea7d0a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b8e0b20-db94-40ec-b2c9-c8d55efdfab5", "sighting_of_ref": "indicator--96f36801-adcc-4c9b-86f3-396a9f509356", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527182db-0bd2-4def-9d45-2723155eb6fd", "sighting_of_ref": "indicator--950bbf1f-7677-4631-b313-b1cb19ea9279", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd7ff28-05dd-4a38-8e4a-e4da5436f50a", "sighting_of_ref": "indicator--3f031264-1b7a-4433-8752-6b22aa06478b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107b42d2-509d-48cb-bf86-78c4a9516b38", "sighting_of_ref": "indicator--04a983f2-b490-4c6f-9896-4474201e5c85", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3c5b2af-d86f-49b8-83d2-481c9aa7a736", "sighting_of_ref": "indicator--ce0e141e-a4ce-42fb-99a7-63ab437abaf7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725c1a54-e9af-495d-8e9e-975315c5df42", "sighting_of_ref": "indicator--9d0318cc-6c7b-4090-b7dd-3f74d717b45a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c63d819a-0429-425b-aa85-2bcc1e95b9b3", "sighting_of_ref": "indicator--575f56d6-d6a4-4915-90b8-cdb9bdd22210", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c7ec9f-f486-414b-bfdb-ee9728016607", "sighting_of_ref": "indicator--7fe65140-2896-48b1-9dbc-3ef9e025237b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4be961-763e-464c-a590-a6e8772c455e", "sighting_of_ref": "indicator--b35e1ab7-4203-4233-8f7a-b6e98f7b0400", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6146777e-a1a4-4873-83be-3955c041650d", "sighting_of_ref": "indicator--4200069d-d23c-4304-994e-61a33ecaf96a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3886db-8595-42ad-b3af-24e7214f97ff", "sighting_of_ref": "indicator--a7fd22ab-1ce5-4a28-aa06-7dfc67677bfc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf3ef220-ea3e-48ca-9865-6c75e6c403fa", "sighting_of_ref": "indicator--32030899-f45d-4289-93a6-23cb3a65870a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9194bc24-2a34-43f9-baed-6611cd84cd9f", "sighting_of_ref": "indicator--654f3694-0786-40bb-9e70-5a3a504ead43", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f979a9-7835-4a9a-9d52-fcd20b6a99fb", "sighting_of_ref": "indicator--63eb7d48-fbd2-4fd1-855f-645a81505265", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--629d764b-1c34-4fd7-84b1-c4261a9ddaa3", "sighting_of_ref": "indicator--af36795c-39d2-4906-86fa-32f7e63290dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea71b46d-94ed-4c1d-995a-52956feba011", "sighting_of_ref": "indicator--71fd2c16-5da8-4e48-9246-2be7d41ff083", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e921b2-aa24-49f3-859d-00e8390b886c", "sighting_of_ref": "indicator--e6a634e9-f661-4478-971f-4af52b1b1654", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d26218-da4f-49d1-aee9-794640b740c0", "sighting_of_ref": "indicator--7e22c934-9242-4b87-aab0-b592aa48d0d6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5484f7a-7ab8-4038-a453-b7356f2fc2c6", "sighting_of_ref": "indicator--4c787632-8f89-4e33-8e71-3f4be68b9fa4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52213fb-0d7d-4dd6-8c52-759736a2fcbd", "sighting_of_ref": "indicator--f6c9bf9f-7eb6-4b2b-bc1b-91475a748b2b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722d55a9-147e-427b-a590-b270a18051c0", "sighting_of_ref": "indicator--ba003adf-188c-4289-a2d4-ab9e1935c642", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248c6dd9-fc52-47d3-b978-801fadacaf76", "sighting_of_ref": "indicator--62b8ad8e-e892-4f5f-8817-c22bbb9cd4a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd70e947-e5d3-4c65-9a64-a68963dd3ad8", "sighting_of_ref": "indicator--4110cc94-7d6b-4f2f-a256-8308a8079ab3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df557f5-b5cb-4dbe-a39d-ad8fdc676d73", "sighting_of_ref": "indicator--bb469aa7-29b0-43c7-8a12-29098cd0feb7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23be2055-97cc-4938-92aa-3522c6d3ec26", "sighting_of_ref": "indicator--9a2052cd-3cd6-455c-9856-05f8d2146e89", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f13463-749b-4c00-9135-78dcb026114d", "sighting_of_ref": "indicator--28b91772-1d4f-430d-8875-15d8c4502a5d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6fe7c04-79a2-4aee-9782-3ee7ad9579e0", "sighting_of_ref": "indicator--5ba03228-4291-468a-a1e9-cc80098a4389", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0a1b6f-1100-49c2-95b9-7b663b0e8251", "sighting_of_ref": "indicator--54fc8d82-d7b9-402b-aa77-fb8ea450f1ab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27fc1c1-8f56-4729-b3a8-7da85a3c5d16", "sighting_of_ref": "indicator--53c990e0-acd2-467a-86a1-c6751f56604e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33381297-568a-4cbd-afe8-15eaa76073e6", "sighting_of_ref": "indicator--1c426433-55f4-4883-9839-38ddb8c454e8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ccf71af-c1b4-4723-ac17-ca5edf190c63", "sighting_of_ref": "indicator--421748d4-152b-4721-8f82-0afc534e1095", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bdf207a-39ab-4e86-ae7f-b32143994648", "sighting_of_ref": "indicator--e6b20920-30f7-428b-87de-5e5ac8e166fa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83906d3c-40e2-43f8-aa22-ea4e2a39e3b0", "sighting_of_ref": "indicator--e53b76e3-c83a-4d84-8e9f-1014be6eae9c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3c1184f-5fa2-45f2-bd21-97e6c348b3a7", "sighting_of_ref": "indicator--0401a441-1bf8-4b3f-9672-985a3a256535", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd8e0bf3-eb5a-4c18-9401-561978b6e724", "sighting_of_ref": "indicator--34e5084a-b269-4899-8cbc-8635058aa26b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f2a195-086b-4225-af3b-0406f4c0627c", "sighting_of_ref": "indicator--c2af64e0-519e-4b44-85b3-19b8aa7ce0e2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c7cddc-e354-4395-a02c-1e0b5f1b551f", "sighting_of_ref": "indicator--740596d0-8b16-40b7-8aa5-fae332cb1e6e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e58218-b3f9-4296-8f3c-1741238ba593", "sighting_of_ref": "indicator--77507e02-931d-49b0-922f-1c927bc960bf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9270cae7-5f24-46dc-bead-4b32fd389e7b", "sighting_of_ref": "indicator--65b72bdf-7d9a-4813-a4d7-52eda1dfc851", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5404c12a-44f3-437b-a536-3775f0573f3b", "sighting_of_ref": "indicator--d0a67ba4-17c9-4d82-8e55-b621a0adbc07", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49063407-4ccb-4957-85ed-ca8761b85c18", "sighting_of_ref": "indicator--4b153526-c3d6-4634-9137-87ac64f53ccd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e84e6a-1e1f-4084-b2cd-f3d36438476a", "sighting_of_ref": "indicator--5de317c1-e116-4308-904e-cbe2c260e372", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45af7118-e643-42e9-9922-8c17f53c9085", "sighting_of_ref": "indicator--f94aefc4-6214-4e11-8d99-003e2da59ad4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad689527-66f9-49aa-93a0-46fac56d5fb7", "sighting_of_ref": "indicator--ab630ea2-fffe-4ef0-b26e-302535f47a36", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b4f4500-63e9-4c95-a4f3-5cfc0617991a", "sighting_of_ref": "indicator--21af0901-b271-47fb-84db-e276a19f5537", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d39bc5-534e-4696-a63d-6852ce991b8c", "sighting_of_ref": "indicator--4452adb9-3815-4dc7-acaa-122e8245b8be", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61efcdaf-dfc0-4ab0-ba3c-be05c6d3f83f", "sighting_of_ref": "indicator--89c54003-e8f8-4e8e-a4b6-30c16597af13", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69abe98e-f46c-4b5b-8ccb-11f87836c749", "sighting_of_ref": "indicator--1be7c59d-1165-481a-82b3-bfd3d8a4ba4d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfffbfa-4a2d-4285-b4ea-91f45bd21f35", "sighting_of_ref": "indicator--8750a17c-ac96-463b-89db-840cea806535", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c2970c-4138-4820-9e81-eeca436b4bf4", "sighting_of_ref": "indicator--6d837e91-3254-4c8b-93c6-00798c465939", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a09035-d2f8-4283-9325-617002dccd08", "sighting_of_ref": "indicator--6690b77d-402d-43e5-a12c-9d42545affc9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--319cf4f2-f403-410f-b788-0cf058c7a809", "sighting_of_ref": "indicator--9a691862-5f3b-432e-8d19-7d842a222a74", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26837e28-a443-448b-91a8-86ff2f49650e", "sighting_of_ref": "indicator--321be75b-cfe4-4d3b-b350-bca3674b1eb1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c210e09-9dc4-47a7-bd8d-4ff2a03695f7", "sighting_of_ref": "indicator--0e8b2c29-16b0-410d-b058-d5b3492e0c4f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b391af72-71bf-48d4-a4c6-f838721fb7da", "sighting_of_ref": "indicator--1e845b14-75d4-4fae-b816-7a124f68eba8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c801e0-26fb-4540-970a-9221afac717d", "sighting_of_ref": "indicator--e5804130-63a1-4dbf-8f49-33afafd7d54c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ac6f47-e2eb-41cb-9df2-0e520316cf92", "sighting_of_ref": "indicator--beac06e8-4f10-4212-83b8-bb14dd68b6aa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e646e133-20d8-48a4-9bc0-1bc7ebc8aa51", "sighting_of_ref": "indicator--2bc69dff-79dc-4eb2-9290-b82ea26aeb21", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--352190f8-1ec5-424e-a937-13c63cb7fd9b", "sighting_of_ref": "indicator--823ee5f5-7e00-4593-94ca-bd0a64770fa2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1678034-9dde-4e02-a271-fc0ca865db1d", "sighting_of_ref": "indicator--bdf015d7-e4f1-4845-8153-d0c50bcf4aa9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06dfe72f-9a2e-4cfb-b4c9-960de5e5c882", "sighting_of_ref": "indicator--a38ea1c7-d58a-4246-9047-594f7ba1453f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff113efd-c601-47f0-a775-53d2f4f89977", "sighting_of_ref": "indicator--7365672d-3234-43ae-955c-f684e7885af8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2884b906-c17d-484d-98f4-e27d73bdb9e3", "sighting_of_ref": "indicator--bfe79de2-72da-4e2b-8e70-9e04251db8f1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3342b2c-ca3d-4018-aa3c-a1c6dc0d87c7", "sighting_of_ref": "indicator--2fe77ac7-bd1d-47d0-b149-c23bbcffe9f3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1d083b-4bf5-4a6b-a1bc-8ef4edb4420e", "sighting_of_ref": "indicator--96bfed48-3026-4bd6-9acc-1496d0038907", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf15dd01-f9dd-4456-bdfd-f6ff4f4ce7d9", "sighting_of_ref": "indicator--7f60d016-6327-456c-b511-639135c92d7d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf1561b-6452-4196-9963-b9b5b7917475", "sighting_of_ref": "indicator--f34fd284-6555-4e26-a0a2-db4811f80abb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41258bc4-7229-472d-9f7a-607e2a3f6df9", "sighting_of_ref": "indicator--0bf29498-a219-4978-b29b-66214a1a16de", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97bc0449-db4f-4729-87e4-87079485f219", "sighting_of_ref": "indicator--48b117b7-aa7b-4895-bf17-57368a77601b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b394210c-81fb-4060-820e-fd9034388ed3", "sighting_of_ref": "indicator--87b4b799-5513-4459-8399-1b61278bda4e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec3f1e4d-abee-4f02-bce0-105f195fa5a8", "sighting_of_ref": "indicator--deed6b7c-5470-4a45-b9cb-90f32554a76a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee24bb19-3d38-4580-be41-c219f41a936d", "sighting_of_ref": "indicator--a8924c7c-586a-4dad-8396-112f7f9a9373", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d137195b-2435-4253-b238-5f81a2242162", "sighting_of_ref": "indicator--75aacab3-bc77-49c3-be5d-400f6052469c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e697103-9e4b-4b20-a3c7-239f0fd1ffef", "sighting_of_ref": "indicator--03d58f45-d75f-4450-acd7-829de7918247", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065d41a8-bebb-4cdd-b317-bbcd50a9ca8e", "sighting_of_ref": "indicator--2e7c9482-2173-4fc9-93d7-9d0f474875d9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a247a9a8-0d59-45e2-b7ca-461afa17f72d", "sighting_of_ref": "indicator--6081b782-4a1b-4b46-8d91-44f84ee66a02", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad7f9a2-ac63-40d6-91a0-de2a7fdbf1d5", "sighting_of_ref": "indicator--8c7d75c2-b4a7-426f-b813-2b6780963096", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ca7282-d8ca-4aec-a3cc-283677f91bc0", "sighting_of_ref": "indicator--0ed7010b-9c89-4c2e-85e6-503635a37c31", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091dc08d-313e-4d18-b1d7-d74c2b23e41b", "sighting_of_ref": "indicator--e94aebbf-25b1-4218-b4ca-4ff39275ad5f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5054b4fe-8c35-4547-ac9e-aee43edbfc42", "sighting_of_ref": "indicator--937f2e06-64bb-4b9c-9fb2-5445803e5454", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4a29af-5bc0-4405-9f89-2f39e9a08851", "sighting_of_ref": "indicator--ddeb14a7-34ef-4112-b478-2230830fbf22", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f5bbb1-249a-4561-acca-28d8c2372f89", "sighting_of_ref": "indicator--46008baf-d7f0-4701-9d79-9e258b693a61", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88cb536a-3561-45fc-bd00-7d908f88d084", "sighting_of_ref": "indicator--52aa4ec7-38dd-4f58-bd7a-4436df3d4222", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf55eb2-b6b0-423e-89d2-bec5b6a3da4f", "sighting_of_ref": "indicator--14af79f6-8b93-4d07-a02e-bf484bea9ec9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b926f1-3004-4d0b-a663-c1fb54957552", "sighting_of_ref": "indicator--fa860162-8139-409c-95a3-44a2f6f722e5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f749387-98fe-4d1c-8939-a9be596df7af", "sighting_of_ref": "indicator--11b82087-9088-42cf-81ab-04ded6a06855", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419eae46-2f6d-4034-bd26-a0701f58cde3", "sighting_of_ref": "indicator--86975816-99e5-4f3b-bd5d-d55c569fe566", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0961441-0fe0-4ae9-bbb6-eed03ca7dd2f", "sighting_of_ref": "indicator--65bbb2b8-11e9-4dc1-b360-d91201a79336", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b5ac493-5fed-49d0-a8df-b6d03e28dce0", "sighting_of_ref": "indicator--02013687-f654-4059-924d-e0edb51e43f6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b695c3fb-84e1-4683-8961-8c1017cfd8cb", "sighting_of_ref": "indicator--5cf3750a-63bd-493e-8a17-ec42a7fd8a08", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--325fcd7a-69ce-42fc-a715-1b7e1af82418", "sighting_of_ref": "indicator--05684b08-e1c6-44d2-9cef-adec9de78d35", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3265fcb8-b56a-498d-a9e3-b8b23d45774f", "sighting_of_ref": "indicator--392f0064-ed91-4c5e-a817-6ce6a7dfa788", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b543d6cc-4054-4ed6-97d4-8226bcc56732", "sighting_of_ref": "indicator--dbcd0ba5-51e2-4419-a717-9933b2459af9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09748d1-baf8-4f0b-b8ec-64f661232bbd", "sighting_of_ref": "indicator--ba9e5394-2d70-4d1e-aecd-3eebde54d8dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ca5e3d-87d8-44c5-98d5-13ab2c034fbd", "sighting_of_ref": "indicator--ff52550d-37b2-423c-9225-64b7e6f41d14", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3febee-12ae-49b8-824d-72d277d14bed", "sighting_of_ref": "indicator--da1faae0-7c33-44ca-9155-0e699a3df251", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e624b148-314f-4c2b-8389-648ccf80c2c9", "sighting_of_ref": "indicator--e7edd051-ff78-48ad-8faf-6510d8ac7e1a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd706f5-24c4-4123-b4dd-ea96412725a2", "sighting_of_ref": "indicator--71db28e2-a6d6-4b3d-abd2-5cf998aea504", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3899973-e9d5-4cea-94df-429455398c1d", "sighting_of_ref": "indicator--7c74b734-b44d-4701-946b-99c15cd3afef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13fd8c36-1d75-46c8-9ca9-c6edf786a9c3", "sighting_of_ref": "indicator--93f1544c-83ea-4954-b59e-43100b0ac5f3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e8b0b00-362d-49ce-89c3-27d578c1eb08", "sighting_of_ref": "indicator--5098aaf5-24fb-4899-84db-98519089b687", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8175da30-563c-4f94-aaeb-b1e5fc426e91", "sighting_of_ref": "indicator--75ddf82c-a056-4d1b-aaf7-44191443e695", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca795e99-bdf0-4d41-8b82-41823974ae11", "sighting_of_ref": "indicator--6024c342-3f39-4a25-8ebf-8856ca3816cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94bedc58-8189-4b9f-957c-331af44b9441", "sighting_of_ref": "indicator--bfb1dc09-2cef-4d69-9b06-d190353f0b10", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0273d905-3692-48b3-8e84-fc213234a7fb", "sighting_of_ref": "indicator--4199df8a-fc61-446b-a934-237e164a9437", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b7ad91-da35-4821-86e3-36d35712d631", "sighting_of_ref": "indicator--8fa95bf7-902b-4881-a8a6-f100bbabc327", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984f8b12-f54a-4b5e-9193-d8ddb7c6b871", "sighting_of_ref": "indicator--ec8de13a-6159-4347-95cd-b4fc8f04bea4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b902070b-f903-485e-bb79-07641fba40c7", "sighting_of_ref": "indicator--446a5943-cd39-48a4-bb64-e17167863ee8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b20675-1ead-4cd9-aafb-d4f9b8ac5e8c", "sighting_of_ref": "indicator--d89b3aa0-4bf3-414d-9f60-0a73cbdf4ac0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ab7d1e-4698-46b1-b74d-752d26a9f13e", "sighting_of_ref": "indicator--2791e49a-f176-4079-a466-ceb8d17af542", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b267f1f-30ef-4d5d-8535-50cca2c76255", "sighting_of_ref": "indicator--c9d9ad33-a416-4c6c-b49b-0bf61546033d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9de858e-203e-4e53-9509-c3b0455e3efc", "sighting_of_ref": "indicator--b1cb07d1-27aa-4b26-8894-7eac88257a98", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d7c5d8-838b-480e-97a3-48a45825e090", "sighting_of_ref": "indicator--48b1e432-152e-4efe-83db-cf71ee06836c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5833692a-f58c-431d-90de-875a61908e20", "sighting_of_ref": "indicator--cd1e2bc4-60f6-4d61-9b0b-355d04474bcb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--211c534a-dffe-4666-99a2-0d9f1a928301", "sighting_of_ref": "indicator--252fa082-0ce6-433c-8b6d-dfb0e274f1fb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e058527-50a7-4816-9557-9f28f38b40d1", "sighting_of_ref": "indicator--3e4fcc52-7f5c-4458-a428-bf3f7442114d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d576bfeb-bc81-4fd2-9052-08eb94866d62", "sighting_of_ref": "indicator--550000df-6ffa-40a5-9fee-64abd12638da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f86396-fe8c-49a8-beb9-89e44970f510", "sighting_of_ref": "indicator--c7276a21-43dd-4b7a-afed-f702b35195fb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53cd9184-f117-4560-b2c6-79c1b2070b75", "sighting_of_ref": "indicator--78dc753e-de40-4ea0-b10d-a6d27e9991e0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4abec7f6-bacc-4db6-8f13-1b2b3075fcb2", "sighting_of_ref": "indicator--ca65769c-d3df-4496-8ed5-1dfa3fd7f651", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89eb5e81-0431-4d3a-81ee-ed61fbc874ac", "sighting_of_ref": "indicator--0ade4482-e2b5-4d41-9c73-0a03cccbbcfb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23e6a8c-48f7-4ebd-9188-0f4b02282cc2", "sighting_of_ref": "indicator--c4c151b3-417c-406e-b961-8bd77aec2eb0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f89b9b4-1b1f-4c31-b6e1-eb1fb556c149", "sighting_of_ref": "indicator--85db972a-9c5d-4e5f-a3dc-7298b48b5329", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d79eddd-638d-43b9-b74f-ce3be3375aa3", "sighting_of_ref": "indicator--345fce39-e63a-496c-99e5-d363f612816e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06bac058-e17f-4e3e-9947-79fd0054751c", "sighting_of_ref": "indicator--5f52e988-daac-4ee0-82ef-be854a175ada", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d553f5fc-b678-4fdd-a34d-38ae1a20934d", "sighting_of_ref": "indicator--b753aa9a-d0b2-4fd3-8e0f-cfb57795a149", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4114625a-e62f-4fcc-a285-702b8c5d780f", "sighting_of_ref": "indicator--0bffdbaa-e606-465e-8287-b9f32459f7c3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6892598e-4702-47b9-9e3f-a487966a41b4", "sighting_of_ref": "indicator--9954a448-a454-4bea-8737-3ffc8ce738d1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2f1490-b34f-4f06-b447-9411f46c9120", "sighting_of_ref": "indicator--e5d19a19-f4a9-4ccc-88ab-f461e4dbf2e6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d91f570-6d56-4cff-8292-dce07196c143", "sighting_of_ref": "indicator--3b3d9a56-0e62-4c21-a4ed-2ce11275f049", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0074e2d2-cb18-4af3-8381-ad9111a6ce14", "sighting_of_ref": "indicator--947b1164-c9f6-4dd7-8ac9-d8b98dfe0c02", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3268c7-9bc1-48d0-aa2d-e71350b2f873", "sighting_of_ref": "indicator--8b0e596d-3c10-4c80-adcb-bc78a927943a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa47715e-3fc4-47d7-976b-1e04e3e27dd2", "sighting_of_ref": "indicator--709fc513-d3fd-4ee9-a6f2-adc93e4b2fa5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6824eefc-bbc2-4869-a886-576fb99ba5c4", "sighting_of_ref": "indicator--36381368-38b3-4858-bd62-4a954562634c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c1e77a-d929-441c-b9dd-5e641f68019b", "sighting_of_ref": "indicator--bc7e5d91-54c0-4e39-bada-236bfeba7e83", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486fe350-c756-4e9a-a5a6-d1095fcca6a5", "sighting_of_ref": "indicator--46823ac4-5144-47aa-87d5-f32b58026129", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb28613-1cf4-4942-9912-ed306542b691", "sighting_of_ref": "indicator--18868a7a-d598-49e0-a3be-b7da839b6a4a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ef18e0-24b8-45bd-83cb-bd746bb0ec9c", "sighting_of_ref": "indicator--fe359012-70d8-40b2-ad19-418bc17c517c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093844c8-d32a-4958-9983-65711e23d103", "sighting_of_ref": "indicator--77552a3f-2e10-483a-a4e2-8e35cc72b972", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662ba640-a4e5-4409-a52f-37bdc65c562b", "sighting_of_ref": "indicator--123c5144-8ed7-4cf1-9696-81969f8f3d24", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28a8ca2-a65c-4c9d-bd79-83eac96ccbdc", "sighting_of_ref": "indicator--181bf79f-e996-41b0-b838-b54b47fe5c23", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24baf9d-c761-4504-adf9-b3532816c778", "sighting_of_ref": "indicator--4f02fed2-6d9c-4fa9-ae4c-cb0525dcd91f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41760eb6-8e8d-4791-9660-994c3e235ad1", "sighting_of_ref": "indicator--c406e4f6-79b9-4246-a9a4-cd1a9a81dcd3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579ec19c-3890-4e5c-8ad8-1683173cdcd5", "sighting_of_ref": "indicator--8d94501d-9137-4c3a-b2f3-994c39d30f29", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cda1073-728a-4c39-9f7c-e45f9e8bdfc7", "sighting_of_ref": "indicator--db629dff-30b7-4db2-98d9-e7308fdccef1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662c0f26-ff6e-427d-bdb6-e700d9696e25", "sighting_of_ref": "indicator--dd0f6c54-dd5a-4228-8461-c27a3a898ee2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3dd7cf6-7ba5-437f-b32d-89e123bd98cb", "sighting_of_ref": "indicator--8f013df2-b055-4a2c-b035-b078b9070498", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd94bff2-275c-40e3-97a0-a870c8ceebb3", "sighting_of_ref": "indicator--801f8393-61bc-40f9-9bae-b18daab808f1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a4c829-b716-4c27-a65b-8e1975a7a24b", "sighting_of_ref": "indicator--32b020f9-f75a-43fa-9572-e50c1ee525b2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c007eb6f-5465-4c00-aeb9-9610315a01c5", "sighting_of_ref": "indicator--bac4bd99-410c-4d8b-a724-724e9b52d1ff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e1c3c0-d14d-44f7-aaed-9a2eac12c2e7", "sighting_of_ref": "indicator--2b1eb405-8738-4914-8216-fd073ffc26a4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd14dbd-da9a-414f-89b4-fd850bc6549b", "sighting_of_ref": "indicator--76e5a842-a550-4da5-a10c-9eecdfde9649", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d0ae07b-c149-4afe-a22f-d2bd12f3ab4b", "sighting_of_ref": "indicator--e54d0f81-4d38-42d5-8f00-b0acba252a7b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab860d83-78a1-41b7-a7d1-4e221a5b93bf", "sighting_of_ref": "indicator--1336d6d8-6967-45fd-8f9f-43ed306e7d37", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d19ed5e-e779-4929-b977-2da2827c6882", "sighting_of_ref": "indicator--cdf99d9a-e9f8-4bb7-874c-77d2da3cf1d1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b41fd5-57fb-4a44-a6ba-0574443bc64f", "sighting_of_ref": "indicator--040d8a63-a811-42f7-88e6-59d504493521", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdfda1a9-1949-4482-aec1-a8bf0ee8a6f3", "sighting_of_ref": "indicator--2bc531eb-c3f4-42b3-b9dd-679bd4118589", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b52a2c9-0e5e-4655-a7d8-3bf570897261", "sighting_of_ref": "indicator--3ac29adc-6df8-4b68-a207-271875c6df3b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3573d77b-a4d6-47e8-88c6-56b7931c65b7", "sighting_of_ref": "indicator--70e26eb1-2810-4cd2-ab47-5fb71b378ac1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30522f94-682e-4ff2-a20e-3a6243233671", "sighting_of_ref": "indicator--f4ef5e20-c126-4268-ac98-72db02a83af0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--749fd1eb-85eb-403b-8b4f-97400717efbe", "sighting_of_ref": "indicator--1c72d7f3-6551-435d-b17a-85f56bd0a2da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc09f61-537d-42cc-b2cf-f61ac8c86a67", "sighting_of_ref": "indicator--a06c4276-870f-41bd-9af2-a9f8a76e4e4d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3eb7d3-201a-46e9-91e4-e58d712d17b8", "sighting_of_ref": "indicator--58ebdfae-4290-45f7-9ebc-3a4effb3776a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd622e4-c914-482c-9c8b-e216ce048535", "sighting_of_ref": "indicator--253c1b62-60e4-4fd5-880f-4c1f22579ac4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b1ebb4-b9bb-4e6e-bed4-be35f22927a4", "sighting_of_ref": "indicator--77ed1792-0d4b-474b-86c5-a613afc38ea6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad88652b-d275-4ca6-b0e1-3aaac2681323", "sighting_of_ref": "indicator--fbb1fd64-6a4d-472e-8469-6c9ae948b2cc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d695c8-b598-4dbd-9864-05f2997a5f64", "sighting_of_ref": "indicator--38a35f29-765e-4455-a6ee-3e558c2d17ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eabcdfe-c1ff-4722-b2ad-b3ed54613802", "sighting_of_ref": "indicator--0a218d32-e386-409b-aae2-ba22e96ed052", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--876df713-7bbd-4129-b2c3-437fea673514", "sighting_of_ref": "indicator--1ec03ccc-41f7-4de3-b176-8e156a46917c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8581cad7-0eac-4b93-85b1-0acdbacd2574", "sighting_of_ref": "indicator--7d745ba6-3e7a-482e-9ce7-459a404d1831", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00ace52-5706-4fbd-bac5-26146f63d536", "sighting_of_ref": "indicator--080f904f-c580-4f88-bc78-b91c72252e4a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54576bd1-ae58-4043-9cd3-c561dc9ad3d2", "sighting_of_ref": "indicator--f2dfef47-58e6-42ea-8f4b-8fe06be327ff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f89ac6-5b1b-4c58-b224-5ae8569d1fad", "sighting_of_ref": "indicator--2a9493d3-79ca-4e8f-8220-cc0aa6a5c043", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--289a5259-e3f1-4fbc-be54-b1afb3ffaa4f", "sighting_of_ref": "indicator--98126b5a-5fe6-4043-b30d-a2de28b0964b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81af77e4-b10a-4242-ac4e-1ffb103e526a", "sighting_of_ref": "indicator--4715ff90-fbb5-49a7-9f0a-360892204124", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad12b32b-ec5a-49c2-a4ba-ac3ef775f40b", "sighting_of_ref": "indicator--d6923476-7b91-4a4f-9a95-62e36559d8c4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0727c2ea-0fd1-4f82-a626-8a63d17bfbb3", "sighting_of_ref": "indicator--29dfc214-242f-4ea0-ac5c-2db05e2780d0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ddfb99b-0018-4be3-96bc-c2fc37514117", "sighting_of_ref": "indicator--f3cbea65-1942-411d-a9a7-9480a3fb77d1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c38bd9-bb67-4b6b-a519-7f15f1231aa1", "sighting_of_ref": "indicator--7a00c25e-802e-46f0-92b6-1c76228b7db0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d23583-af22-4d1a-988d-2e4e6aa6e44d", "sighting_of_ref": "indicator--807c9903-3c84-408d-8ce4-4a28400c42cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fddf5a7b-68fd-4699-9f8a-2757903de4f4", "sighting_of_ref": "indicator--81d2e647-4932-4c25-8f05-b7710e101f92", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1fc4d0-c487-4bdc-af1b-1615e8161d01", "sighting_of_ref": "indicator--9c9afbd9-1369-4e2d-8a7c-c0c0f3049b8a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98404878-7d7e-4c25-92b9-c761f2b752a4", "sighting_of_ref": "indicator--6666fecd-2abe-409f-b186-1638b2c018e5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1e27d7-5980-4c3b-9474-ac8dc8e786ed", "sighting_of_ref": "indicator--4c7ac52f-1415-4ee2-b0d5-6b1c0b8b1d10", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d272b8f0-34ec-47ed-810f-095055af4055", "sighting_of_ref": "indicator--e8242d85-1333-434e-bfff-9b40f343ef74", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0f3eca-5d1f-4ef5-9dc2-dd7a8a978f37", "sighting_of_ref": "indicator--ebbc8399-a5bc-4b30-aa6b-bb1538e328c3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801f5787-aa6c-4560-8160-c9819ec4e696", "sighting_of_ref": "indicator--cc6db971-6223-444e-be98-fc2f396945db", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce36394-d150-4ffe-9fe7-4044f3cc9002", "sighting_of_ref": "indicator--f285cbec-16b0-4391-affd-396306edb554", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123c17b0-fe75-43f0-82e2-3ac3f3e0fac1", "sighting_of_ref": "indicator--8f9ea86a-119e-4966-bb17-93afed3cd3ec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34b6aae-927c-40db-af7b-7aa72186439a", "sighting_of_ref": "indicator--8af493cd-874a-4454-90b6-d4a451a6e396", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaaed7f2-e9d9-42c5-a961-591273f577fb", "sighting_of_ref": "indicator--2f435176-0912-4f0f-9feb-d71f668aafbe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de17cd86-9201-4a5f-837c-d7e84858b0be", "sighting_of_ref": "indicator--a743609c-5d8f-49d6-a2da-d3aed5bbc223", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--081f8c8a-9cd0-4546-a7b3-170e5963c60a", "sighting_of_ref": "indicator--9d526fae-9b8b-41c6-a52a-153ea585b375", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d88c22f8-d5ba-436b-bcf1-96ddccf06bd8", "sighting_of_ref": "indicator--dd6e2e4b-89cf-4bb7-85ef-96344fd0a094", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298e66c0-17e4-4646-bdb8-74754f883bc2", "sighting_of_ref": "indicator--3046c907-eb33-4c1c-9a18-c27086827a0a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--982711e6-2fc1-4987-b8d4-4cf2d8ac7283", "sighting_of_ref": "indicator--94d9b880-47d6-4917-83a7-96c2ff670a6c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7362366a-16ce-416d-b193-5158b1168493", "sighting_of_ref": "indicator--7b000981-1e7e-4b09-98ab-66208a8f1972", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10fa1151-6018-4586-8455-5335e77eff78", "sighting_of_ref": "indicator--d12df492-4ad8-41e9-aaa3-ad281ce4b0f3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f678197-8a7a-420a-8d0f-999d7701a302", "sighting_of_ref": "indicator--fcc8332f-0b10-42f6-8014-6d905025f377", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c4746c-857a-4315-8e73-1892d2691303", "sighting_of_ref": "indicator--30977d54-f48f-4658-8a69-81ac177a3170", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca989181-2d30-4cda-9a29-28a747488e8d", "sighting_of_ref": "indicator--55f8d1c8-9e76-4593-9836-09d63b288861", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2235e02b-e460-4dcb-802d-f695f6da97fb", "sighting_of_ref": "indicator--10401171-3a88-4129-9520-c50ea3295f4b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503375a7-3d6a-4b27-99ea-9f2ac33d0e71", "sighting_of_ref": "indicator--14e9fa80-dacb-469d-b615-87d82c089733", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a497edc-4c1a-4a79-bd4d-86a47ca23b7c", "sighting_of_ref": "indicator--f0f552ae-5f6a-4fcd-9cbc-16af5f6a3e56", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542302f1-2c9f-4e66-87bf-a0b94f428238", "sighting_of_ref": "indicator--cf67a048-8019-4b05-b8cd-66e07fdcfbb4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce4670f-98a5-4c09-8bb3-5005987e60f0", "sighting_of_ref": "indicator--7a464902-e3f9-4809-90ff-8ef53f3150ca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c584e3-170b-4ab5-86e9-55ea90f5b458", "sighting_of_ref": "indicator--803bb749-d3de-47f4-96da-0c1ccc0fed89", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f36c44-561a-49be-8a04-08b57708d03c", "sighting_of_ref": "indicator--31bafea4-d7d6-4293-87f1-61531734882b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e5b86d-6d69-42f3-9e42-165ec0f64d02", "sighting_of_ref": "indicator--ceabc408-aea4-49e6-9ff9-9f3b1e68a0c3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f7ee0a-7894-46b3-81c4-51c5476e696d", "sighting_of_ref": "indicator--75fc1240-f06d-4bf8-86db-ee2b24458281", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04826d8e-fb6a-4f5c-b219-40855bfe4691", "sighting_of_ref": "indicator--6770dcd2-f593-411b-ab06-16e7ebe00ca5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5835a4f-8d61-43d8-8f7e-f29c4feef1cb", "sighting_of_ref": "indicator--7e47403a-1c9e-4353-be90-95583fbdc82c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee104a26-0b5f-4810-b27d-37973ca018a0", "sighting_of_ref": "indicator--61d9800e-f036-4046-9ba7-4919d566c237", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c38721c2-bd3e-4c00-b282-a39c1ea7629c", "sighting_of_ref": "indicator--3d3b553d-3736-4ad3-b7b2-b0956d09a716", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92c88df-bfc9-497b-81ce-c7508a536d6d", "sighting_of_ref": "indicator--a61ae2c4-0627-4216-a4ba-45563227fc37", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b24f3eb0-eafe-4b06-8fed-9fed59d9d282", "sighting_of_ref": "indicator--68ab85b5-695b-44ec-91a4-eddc5ef17ef3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7feae5-1dee-4944-b827-3dd3ffb4b741", "sighting_of_ref": "indicator--63c19272-109d-47ea-903b-bcf45641828a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9841491a-7db9-48b8-812c-fe93beb211c3", "sighting_of_ref": "indicator--dee97c8c-1fe6-44b4-99e9-4f18fb96aa71", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea5e5412-3fae-4de8-affd-5decfcd991ca", "sighting_of_ref": "indicator--9c35488f-1f1d-4245-8e10-6040940f295d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb961f7f-2d36-4f29-be66-9b05500abf4f", "sighting_of_ref": "indicator--66187f64-4de7-400c-ab25-05be42b8fa8b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417a3c34-03fa-4b27-b171-de20c90e7665", "sighting_of_ref": "indicator--aa937cdb-d3c5-4bd3-92f8-3afaf6e71755", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134ba80c-c905-474e-b210-7e97f9894a6e", "sighting_of_ref": "indicator--076fd932-c006-4f1a-9fd4-de60d1075a23", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7c77c4-5574-4d06-865e-76123face470", "sighting_of_ref": "indicator--8715d1e6-4c85-44f7-93db-87ece36080ee", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5b0265-0e65-426e-9343-06d21edabae7", "sighting_of_ref": "indicator--4bf02097-2f2c-4c6a-8384-77667de44993", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872df8ce-372e-43a2-9f18-66b5ca5c9ae9", "sighting_of_ref": "indicator--25dff6dc-9418-43fe-b83f-e34d983e0a9d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e93930b-05df-4e5f-9eaf-b424c5790c54", "sighting_of_ref": "indicator--9f5157d0-136e-463a-9c68-7f1788dda636", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71b17eb-bc4e-48b7-97a8-8d571d31104e", "sighting_of_ref": "indicator--336cddd3-c784-4085-89cf-eed8c2acf63b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29bdf18e-ecc3-456a-9c67-5f0543522531", "sighting_of_ref": "indicator--96e25e94-170c-46f6-b5d1-774b0a578e5c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4aa357-b908-4248-87ad-8e42ed941c14", "sighting_of_ref": "indicator--b19d8d9c-4c2f-4bdf-9988-7ea2f1c1ffe1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae0d143-3ee6-41f8-9248-3f74d371fc7b", "sighting_of_ref": "indicator--13b3151f-3707-4e83-a9d2-a0672432c324", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0d34ff-36f8-4ff1-ab00-6f463cb62b7d", "sighting_of_ref": "indicator--4d6be905-532d-4739-865b-554fe2f2511c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1957ac3f-1f4e-4202-b4df-785a5d0aec86", "sighting_of_ref": "indicator--739c4c26-0bc7-44dd-9b34-0da0f8f54488", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db82dbe3-a0c4-4180-b152-a337816c0dac", "sighting_of_ref": "indicator--5a817a35-5e92-42b0-bc1f-8d3c206ba209", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fef50e7-f116-4594-ba4e-7ce6f0192cdb", "sighting_of_ref": "indicator--623a5969-f129-42b5-9be6-9501fde91f0d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d521dd9c-2707-4dce-88ea-929bcbd000d8", "sighting_of_ref": "indicator--519f1a48-551f-4f81-af1c-9074b1d5d32b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1ad692-2af3-46e4-b5ba-46e0b8d7096c", "sighting_of_ref": "indicator--05821ac7-b1cf-4caf-b05e-9bbc7fe117f3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ff2658-6c02-4b45-aaab-a8e02d40e36e", "sighting_of_ref": "indicator--29a6288c-201c-41c7-8d03-7c4c75233f5e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3866bfa-da6e-46c1-be15-78fb71f5867c", "sighting_of_ref": "indicator--14ea3886-55d9-4603-a339-aed0b307de8f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d768a0-fc95-4d3e-8d20-d090f335e89c", "sighting_of_ref": "indicator--64593d91-d242-4459-86fc-e6d146e0623e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d79083-0e08-4f43-814f-96e5476c79c7", "sighting_of_ref": "indicator--b455299b-ef87-456f-8b95-4b9288d635df", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb8dd58-40dc-4efe-ae5b-a13ac8da87eb", "sighting_of_ref": "indicator--300fc8d2-20ad-4605-9066-1cc8c80a90fd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3668b8a7-51b2-4057-adb4-81d37862ca8a", "sighting_of_ref": "indicator--6cbf28f6-6ab4-414e-ab2b-29a686c3890c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d677653-3a7c-44b3-b3b0-3e725a1a9f54", "sighting_of_ref": "indicator--9b82a36e-c3f1-498a-8ade-4b0687d89f8c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5897896-3f6e-4540-9325-fb7560030eb8", "sighting_of_ref": "indicator--89bd03b2-2640-402c-ba72-64f46e6f98f6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2617b4e9-6e0e-4480-a636-6bf26be357ed", "sighting_of_ref": "indicator--ea354c0b-453e-48c3-af1b-2950406f6e7f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b254732-0823-4c24-837f-6689867e0cd0", "sighting_of_ref": "indicator--54959796-66b6-4617-a047-29dea2dae2f9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d701b191-7e51-416d-8adf-4f4a9263994d", "sighting_of_ref": "indicator--6ddc92e5-c711-47d0-b26b-2d3ed447a513", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff06b3c5-0191-461d-ad67-ab2f0cf4ba35", "sighting_of_ref": "indicator--9b8f3d17-5f48-483e-9749-5ab860657296", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c57ddc2-f9c9-46fc-b542-cfd5e2f9b2d8", "sighting_of_ref": "indicator--270f59f9-6bcd-49cb-bb18-5e677f36bb32", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139e8c20-072b-4079-8237-edcfdb946e12", "sighting_of_ref": "indicator--48dd444f-8fb3-4695-8a04-3deb248b71b2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4da34c9-50f5-439f-890c-4e3afe06c93a", "sighting_of_ref": "indicator--43cbb877-596e-463c-af53-539c1f5522ff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5bd19a1-c835-4340-8c52-f775a575afd7", "sighting_of_ref": "indicator--876a7f20-9a53-468c-a14a-5c58217b4915", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--370477d1-7542-4829-9f84-8806d1c5353d", "sighting_of_ref": "indicator--137c1d3a-6b65-4970-bdd4-c606d825cdb3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d8ca9c-8de6-4e00-a451-723119bb24e9", "sighting_of_ref": "indicator--910473ba-0632-4d5d-a233-14fc52eebe5a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d46b956-e4f0-478f-89cb-9e3ee856c079", "sighting_of_ref": "indicator--a4177544-22a3-4fe6-922a-df14c5dba744", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073f9c9d-8928-4a4c-b741-abebe8e7679e", "sighting_of_ref": "indicator--97e70a71-62bf-4d7b-96af-a74237f10031", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c0310ed-6b3d-4f35-8ec0-0c2e839552c2", "sighting_of_ref": "indicator--33e15240-86ab-4996-a77a-9e72b488d413", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d85a7cf-5897-4cb0-ab0a-46d733b089cf", "sighting_of_ref": "indicator--795d55ca-5ad7-4a4d-9995-0e4401333fd1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee10c14-eaae-4a21-9d63-30bae1d14394", "sighting_of_ref": "indicator--1ed3ac74-aab2-45c9-9211-ad0707f69970", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c978283f-d40b-4bb9-adc7-69dfc190e2a8", "sighting_of_ref": "indicator--ac8e04a7-40c7-43d6-8ac0-f81057278f27", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae3cb5f-7de3-4da4-a953-bfcff94d6682", "sighting_of_ref": "indicator--6ce46083-3baa-4970-a960-dfa249714e4a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb195270-f379-46bf-be0b-ab94348dd9be", "sighting_of_ref": "indicator--2fc9ceaf-cfa3-49cd-ac2e-96e6466e3a37", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d26aed3-6668-45a2-83a4-71a6ef0cbda8", "sighting_of_ref": "indicator--d295868c-9845-45ee-944d-2f4e8eb69efd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e173da-77c6-4bb0-8219-e925cb5666b5", "sighting_of_ref": "indicator--29604bb7-0e25-496c-b2ef-f9ab4d253c10", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a8bdae-93ed-41c3-8980-8c9601a671bb", "sighting_of_ref": "indicator--a0af8f46-913a-46ac-bac8-ada749abdf66", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe167a6-d428-4034-976c-e852cb7f1b32", "sighting_of_ref": "indicator--aa344e0b-74c0-438e-bd0d-2c044afbe39d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01cecff-1b81-43c1-a267-2ad52850c6e4", "sighting_of_ref": "indicator--c3eb6723-4abd-4379-96a4-7e5d2b9b9ab4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9564b09c-c74d-4384-a54b-e314fad8c45a", "sighting_of_ref": "indicator--977b1e7f-e337-4b0a-b371-0e087f35c862", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb158db7-f5f3-4f75-8b05-cc2cc7569761", "sighting_of_ref": "indicator--bf5b2657-a9d3-40c9-80ae-bc9b9e76abbb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--164811cd-908c-4e82-98f9-453bd10b5399", "sighting_of_ref": "indicator--17993700-e36b-402c-87f2-f8797858a082", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e432d42-a6a8-493b-aecf-6376567388f5", "sighting_of_ref": "indicator--f302a076-5831-431b-9c14-e8044bc261aa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d366d36a-ea7c-4c72-969e-5e21065e4c42", "sighting_of_ref": "indicator--da3d9ef5-ca4f-4208-aae6-d22aca9240e6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b462899a-ddf9-4a70-b782-7d89b3c2dea1", "sighting_of_ref": "indicator--990ef6ca-db1d-4845-99c6-4d38f3b16f6b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1c0126-5432-4a6c-a056-ef6429499122", "sighting_of_ref": "indicator--e31c1c8b-825d-4f23-8a48-3892e47df090", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad24808-c67f-4deb-8500-840c529b0a0b", "sighting_of_ref": "indicator--a1b82cac-1fdd-4d19-bd54-65eaef56bc6a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa6ade14-e61f-4305-891f-02f4a1a42f3d", "sighting_of_ref": "indicator--883792ae-cc9b-44a7-a635-802dbb7681f5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f36701-5c59-43f6-a912-af73bbaa95b0", "sighting_of_ref": "indicator--7a0ca584-a887-4539-9be0-348aedfd58e1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e86b59-a90a-48f5-b735-ee150a07121f", "sighting_of_ref": "indicator--b968c1db-95d8-48b0-866e-dace314356d8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37c0500-76c2-49b6-86c1-a0921bf964de", "sighting_of_ref": "indicator--d616bea2-a8d4-4801-99c9-fb4c0f43dc37", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4dc774-8cde-4734-9246-cc7e3df00f17", "sighting_of_ref": "indicator--f6b2d2c2-aee6-4c85-b06a-ba23b48ab793", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da24165f-697e-43b0-bb76-2b43a3129aab", "sighting_of_ref": "indicator--e07a0b18-fbf7-4367-b9cf-47b2f13dcfcb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb417186-f4cb-4fb7-8b14-6c1b34006b6c", "sighting_of_ref": "indicator--f2940891-b734-4c4a-8d73-20bd883d1f9b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ea5bc3-87bc-47b9-970a-e713be246277", "sighting_of_ref": "indicator--c667fa8b-a104-4311-8dc2-dd82b60986b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c50d2bb-5907-4530-9585-61171275d811", "sighting_of_ref": "indicator--3b50fb76-b5d8-4c47-9aed-0dbf1bea1350", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ef8e46-88ff-4c5f-b996-317c5680c50f", "sighting_of_ref": "indicator--2a3cc8de-cbff-40ec-a493-17a75966840f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab52efa2-0ea7-4dfe-943b-13436e383428", "sighting_of_ref": "indicator--c80cb179-5e3f-40de-b980-515f492cd80f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ef3044-39e1-4b45-8670-2cb246e24b14", "sighting_of_ref": "indicator--ccbd6920-cc36-4eac-a49b-fe2656c21eb1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38cfdf3e-0592-4593-9af9-23dd10c48ea1", "sighting_of_ref": "indicator--e811cdb0-66f0-4c99-a0eb-61059e5a41c4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2062b27-1942-4601-9525-60e5d1c27b13", "sighting_of_ref": "indicator--101de2cd-0aa3-4e4a-b36d-d4cb621aa767", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e931ff-5875-4cdb-9820-01e83a9c9b30", "sighting_of_ref": "indicator--c397de4f-e5b6-424c-8bcd-943fc73f9e06", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb437fe2-0b19-43fe-9455-29caa17677b5", "sighting_of_ref": "indicator--6c2227e1-1e01-4e6f-b426-18160c205e6c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7dba97e-4cd0-45df-8486-91fae46cb1bc", "sighting_of_ref": "indicator--cf2badff-db38-4659-8722-25d5dfab361e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30ca03b-e8c6-46cb-9cba-f5d46479c498", "sighting_of_ref": "indicator--18c3857d-f65c-4ddd-b664-39584ec1ddc8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd535e05-380c-45dd-9e11-13cc5e9088a1", "sighting_of_ref": "indicator--34b00da5-9fa0-48e3-b880-cf27a359c31f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0647561e-6fe1-48ea-98e0-10e1ff990122", "sighting_of_ref": "indicator--4ab8e81d-64fc-424c-8366-e7c0856661c7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e342ff-fac5-4ed5-a17b-4569087b626b", "sighting_of_ref": "indicator--f5748dbc-faee-4101-9005-2f622ff6d7a6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e40861f-b998-4774-8732-4c6e1e11c867", "sighting_of_ref": "indicator--66d26db2-06ce-4954-ad4c-af48927c5706", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c96f2f7-a3cc-4343-bb01-d0cdc33c483d", "sighting_of_ref": "indicator--3e74b735-9b4d-4c7c-a8a1-c5e749452b4e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d0f5ab8-e400-48a6-8251-7ef5a2f78abc", "sighting_of_ref": "indicator--d76e0321-6465-4e24-b0de-385c4b85c616", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0497f63a-f6a6-4a06-8b44-177b157b41d6", "sighting_of_ref": "indicator--57c9d657-ba95-4997-9c41-9b6204ab48d3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74bbc9a8-cdfa-48cb-9aab-41f40bfebf6a", "sighting_of_ref": "indicator--60d8c3d7-446d-48b8-a10e-a4568dfd49f8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae3b480f-0dc6-4c2a-9ada-8f508782e629", "sighting_of_ref": "indicator--56120603-aa53-4b09-8526-54443ce8c08b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74976be-97d2-4863-b4b4-fc4e841f2c23", "sighting_of_ref": "indicator--645d6665-b591-4884-b86f-43be3cb46599", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e02aec18-3b05-4db6-898e-aa7096de6b0b", "sighting_of_ref": "indicator--b1cc2b7a-e7de-42bd-a7e9-de9b8fb6322a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b142fe-ec2f-4534-96d7-2e1b1a9310f0", "sighting_of_ref": "indicator--a2578c26-2575-4bda-8a63-83b80cd3a2a7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe09d7ee-a579-4ae6-8ea7-586968f1ea1e", "sighting_of_ref": "indicator--7d8950e7-b37f-43a2-a46c-66b21ce51495", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d0e8bf-a92c-4e94-a851-72de36ca6213", "sighting_of_ref": "indicator--d64a9f9a-53b5-458d-833a-f3f1d2b0b47c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d398a076-6492-463d-8e28-537d11a638ff", "sighting_of_ref": "indicator--7de3a218-9485-44bd-afe3-9e5c25f9a92c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ebaa12-0014-4cda-92b6-1b6fbc32a66a", "sighting_of_ref": "indicator--dae09111-e50e-4343-8475-a97b90edcb0d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8c38c6-a23d-496b-a8c0-33d3a6268f3f", "sighting_of_ref": "indicator--dba70066-6636-4fa2-9a13-fcabe7e47dbc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e030b4ee-0881-4e58-beee-c16b91350742", "sighting_of_ref": "indicator--653b3bd6-a399-42aa-a416-2054cad09000", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a163ce5f-fa8f-4d67-b5bc-e045980270e2", "sighting_of_ref": "indicator--7844c55e-85a2-46ec-bd91-2d513b849b52", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c7d39c-f452-465a-8a16-53c21161dd2c", "sighting_of_ref": "indicator--881b0daf-7a77-456f-a12b-51181eb19b31", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9bc11d4-d286-4dac-acfd-39afcca718ac", "sighting_of_ref": "indicator--174ca728-7457-452a-87b2-ae0c945efae5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e558419-a59d-4830-9cbf-f149e2d2b8f7", "sighting_of_ref": "indicator--faf9430c-4387-4d7b-9065-6aace3648510", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b717aa1a-f710-47e0-966f-3e903361b464", "sighting_of_ref": "indicator--2038bc37-3573-4e61-82f5-6d4e03e4d817", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6016a7d-7ded-4cf4-9a98-47cd68265004", "sighting_of_ref": "indicator--9024968f-0ba1-4321-af29-f41f3e4a01d8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d854627c-2464-4a21-864e-6935324d91ce", "sighting_of_ref": "indicator--cb4da2b1-314e-4962-843c-bd0adcc60ec5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7cb34c5-827e-48ca-ad21-bd3090719fcc", "sighting_of_ref": "indicator--44925c77-137a-488d-ac38-42da3bd68cfd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02918daf-b031-4938-8e86-a0bc94cbbc47", "sighting_of_ref": "indicator--f04da65e-a097-4240-ab79-f1f3aab158dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe7241ce-1b43-4856-989e-46624b83def5", "sighting_of_ref": "indicator--91b73aa7-82bd-44b7-9755-59862146c108", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ee2215-f58a-4124-990b-96ab4191c147", "sighting_of_ref": "indicator--2e6d4695-604b-4550-8747-0b64e3b1969e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c2d3549-634c-4c27-a478-4300577e70b9", "sighting_of_ref": "indicator--6e7d363b-e24f-4384-93ba-f2e1d31a086b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af51082-5a32-4337-b7f2-297b71441002", "sighting_of_ref": "indicator--6292c93c-9819-49c6-9a9a-2eb7adb53ef0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f631632-e9f6-40f0-8697-8915a8d25888", "sighting_of_ref": "indicator--70b994bb-d10c-4331-9e94-bd6f25248ad9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15dac5b-fa4f-462c-9b3c-57a9c685d545", "sighting_of_ref": "indicator--aef05644-cf30-4786-97f3-3b540d7271d5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ff000f-bf6b-4f72-a57a-e1553ce27de1", "sighting_of_ref": "indicator--288d0f2a-fa72-42c6-9280-fa1052970dfa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e628457f-d6db-4f0a-832d-56a7209f84cb", "sighting_of_ref": "indicator--cafaa570-1995-4fa7-9716-4c9692fdaa7d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ab8a90-f068-47a8-9c58-ccc9f1e09eb0", "sighting_of_ref": "indicator--4737a14b-d066-4c32-89e5-75c76c9d18da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455f030c-3e2a-46fd-870d-a4a16173a888", "sighting_of_ref": "indicator--71da1711-b301-49d4-8bed-69019fc92e72", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09684da7-3968-4087-ac08-0a07959ce21d", "sighting_of_ref": "indicator--bab337a2-8ef3-408b-966d-b48fcfc99cac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd72037c-d2f8-4b63-915d-cf1488302232", "sighting_of_ref": "indicator--4d9f9c0a-e8a7-46b7-82e6-85e9f1930035", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d4c9a2-71e5-4fbe-9499-fee8630d3c31", "sighting_of_ref": "indicator--df53a939-c71e-4858-8657-593c7a3db632", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41d63d0-a5bb-4883-9cd6-d003e930b0ce", "sighting_of_ref": "indicator--ef2786ee-c5eb-420f-a521-a005b9d69653", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218d1d86-a8bd-4efa-9eee-ed9bf0cbfbaf", "sighting_of_ref": "indicator--013b040a-1eca-48e4-9737-1ca46595d8a6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08919eea-c281-414c-8efa-7ab5ef55b389", "sighting_of_ref": "indicator--f3055d9c-4caf-47d4-aaff-d850b4119225", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965986d7-2f9c-45aa-925f-c4f12812962a", "sighting_of_ref": "indicator--9d5aac5a-3be6-452b-bf90-591c8029e7e9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd3a909-1db7-4391-9b13-ffa570309a49", "sighting_of_ref": "indicator--42f67d6e-925a-4f3f-9d32-dc9647520f78", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051b729f-fb6f-491c-a87c-d2f30d13eb8a", "sighting_of_ref": "indicator--5c3f5d4a-76ef-449d-8e4f-235e18765bb9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a8b96c-a63a-41a6-aaad-b4916cf88a64", "sighting_of_ref": "indicator--45475302-b81c-4743-8528-f0165400b386", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0c252c-a4c0-47a4-b796-bf6632d888b5", "sighting_of_ref": "indicator--2c854c13-9428-46dc-ad0f-29a1cab8fd1b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5b34c2-2402-4a72-bd6f-746683a3de2d", "sighting_of_ref": "indicator--cfed7220-58da-47a7-8291-c9a9947c59a1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066e42f0-364b-44bc-ac06-bd89798a589f", "sighting_of_ref": "indicator--78c35fbd-24f7-45a9-8e0d-78c8c512a613", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e550a4-6a83-4a7c-8dde-a13e507b6297", "sighting_of_ref": "indicator--9bc04ad6-ed45-4cb8-a59f-0ee8020e8301", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71063fe-217d-42e2-8be7-9966bce65659", "sighting_of_ref": "indicator--04d84ec9-99ad-40ba-abd4-e6a5a807850a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7505c0-98f9-44e4-a4cf-3fd63562c6ba", "sighting_of_ref": "indicator--82ac60f7-90ef-400c-984e-0f63ae61bc73", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--889edf09-567c-4e70-ae8d-0a74dc473c74", "sighting_of_ref": "indicator--a4640477-d610-42b9-8042-db88fed62bf2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4851280b-f4c1-4d0d-a527-07fe64fc1375", "sighting_of_ref": "indicator--42bcbb1f-0839-4781-a072-497c9bb54638", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55bc19da-a35a-4a85-bcdd-23cd60d361b2", "sighting_of_ref": "indicator--379184c8-30ef-4316-af18-09b484ce1a9b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9a9d31-fd0d-4005-be27-966c451fa8c6", "sighting_of_ref": "indicator--2b223f22-a150-4a41-8c6d-c5997fddf0dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5325e4b-135f-448a-9dd6-6b299716978d", "sighting_of_ref": "indicator--d8de0e0e-9038-4d8d-acad-c7b9a5b03e9d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134d061c-0d90-4a16-9e6c-3f8ab426a7f7", "sighting_of_ref": "indicator--0242fc24-c3c9-4262-928b-f2b5c214c4a5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c62952-6083-4376-b4e9-f04b80793d2e", "sighting_of_ref": "indicator--b7d5c59e-56f5-48a3-8baf-4412cdb2a90f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8da52b3-c0f1-438c-82e2-60a0d09ee9e3", "sighting_of_ref": "indicator--c169c2ab-6f02-41d9-adad-31bc63c8c634", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d94204-2083-4ad2-bfec-b2b8ce6fab9e", "sighting_of_ref": "indicator--99cc288d-208d-4f5c-8e18-725589d33ffc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f706640-bed4-4842-90e2-13b2a8078495", "sighting_of_ref": "indicator--1defc742-d648-4abd-8f63-47fcd3cfb80c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82da8069-41a0-4ee4-8ca4-ddc9f1b2c8f1", "sighting_of_ref": "indicator--4182d517-e6c7-4bdd-97de-f2df80c01b9b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce528cb-9f1a-43a0-80ba-fb1de27fe2d7", "sighting_of_ref": "indicator--3ae8594a-670e-4e40-a53c-0a4d4ab01740", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1eb0abc-b6fc-415b-9c3b-da46232451df", "sighting_of_ref": "indicator--564a2949-11bb-47a2-ad54-8eac6f9a1d58", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f88a5eef-21ac-4fca-90a2-5629f0859d60", "sighting_of_ref": "indicator--1740da66-75cf-420f-8ea5-436d46ef36ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbe2233-af9f-4bec-b02d-6eb30f90301f", "sighting_of_ref": "indicator--86ad359c-7c69-4d3f-b4b6-5f80740d3939", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17589b0d-6287-442e-a869-ce8a9a52c103", "sighting_of_ref": "indicator--baf17c9a-4f0b-4b21-90e9-1d2d5f743626", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9f10eb-1edd-4fdf-9425-0e65d38dc86a", "sighting_of_ref": "indicator--536ceea9-7f18-4c0c-8a09-ef78d2757a0f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b6a252-166e-4514-9ec1-d4c8115d352a", "sighting_of_ref": "indicator--fa60f603-400a-44cd-a2e7-25fa8b1a0a0b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e611318-b357-4e76-93dd-3a3cda4aa86e", "sighting_of_ref": "indicator--8b4a39b5-df55-42c1-b750-680c1c427ff1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c4b940-11b2-4084-a11f-a639c245ec85", "sighting_of_ref": "indicator--5290a892-25a4-4159-a9d8-e0a22ee76b44", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d57bb47-0355-4c1b-87eb-c2b9ead96b56", "sighting_of_ref": "indicator--3d9111bb-d6b8-4aac-8a80-6e39d8622a70", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f43d6e-a688-4f4d-a23f-597128c841c9", "sighting_of_ref": "indicator--b88426a0-4899-446b-921f-a677c80ee32e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e22c0d5-3697-455b-bf7c-feb8a1465f20", "sighting_of_ref": "indicator--5e1d3c27-9214-41ce-97ff-5a16d7193df6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae0350b-63c9-4be2-8975-5aef4a8c3095", "sighting_of_ref": "indicator--eaf7c726-ae97-423c-9789-202e43211d01", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8229016-159a-4e90-8d48-35cd3716458b", "sighting_of_ref": "indicator--080e0539-31e6-4f42-9f9f-687b01423255", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70bba69-1668-44d2-a5da-2ffd7b8d5586", "sighting_of_ref": "indicator--1ccd28b7-0a7e-4223-a978-7376e5282817", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dfd9bd7-f465-4f05-923c-fa907d955025", "sighting_of_ref": "indicator--907dee0a-90ae-4d61-95d1-6a759b8c2f1c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34dab3ef-9748-49d9-8005-5c64544c2551", "sighting_of_ref": "indicator--62f4840b-cb2e-4aa3-82fa-ce94988c42e9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168caf2a-926b-477c-a296-b453109ab88c", "sighting_of_ref": "indicator--500ba4b4-5a0f-432f-81f5-09debcca30d5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc2ab3f-eaff-42f5-a5fd-d4d856eb202d", "sighting_of_ref": "indicator--07dc35dd-0d83-4aa5-8056-50a69fd72f18", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b589fe-78ff-4e40-b7aa-a0fc1facc580", "sighting_of_ref": "indicator--c1c52acd-2b15-4564-872a-fbc667067f75", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a76be814-862c-49a2-b2ab-33d1e38dace6", "sighting_of_ref": "indicator--cb92655c-7cac-434a-95a3-0d362109c2b3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39117868-37fb-4290-b453-fbdfd295c92d", "sighting_of_ref": "indicator--f13dcfa1-a1a3-4147-8892-c5560910fb95", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa244b2-16e6-488b-8690-4e1b6097d3ae", "sighting_of_ref": "indicator--aed7f78a-7068-4344-ac87-cd70c33892b3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6bae950-974e-47bf-b193-2f5bd651aa32", "sighting_of_ref": "indicator--8d430b63-b86c-44b1-a764-7ba14735e860", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e58ff3a-7e19-495c-a3a2-23327c4a2e91", "sighting_of_ref": "indicator--49723379-ad91-4b76-84e0-403d27779e0e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b880d8-b7f4-46c1-ae65-f1947e198088", "sighting_of_ref": "indicator--49bf7427-3bdf-4bb6-8fcb-96b8982e3398", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82542ba0-4859-4036-ba16-8bdd6db3df97", "sighting_of_ref": "indicator--e84a542a-72bc-4d58-b906-ada825ef1006", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a45aa32d-1c31-4f10-8c53-bff7262153e7", "sighting_of_ref": "indicator--2dee346c-2869-430b-b60a-3b2c8017c89d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ce09b8-f148-4629-a410-7edd2b9bdd99", "sighting_of_ref": "indicator--16581e75-8f56-4427-aa7d-9c62dcd88a1b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e9d24c-0236-4c87-99d2-76846c486c86", "sighting_of_ref": "indicator--5086bf7f-1be0-43ae-8ccd-ae615de4dacd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271f750c-ccbc-4791-b1eb-ca207142682e", "sighting_of_ref": "indicator--cbfc7102-b9bd-4b5a-b10d-612bee8a4fad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07259cfb-08f4-4384-a994-8c4d569d37a7", "sighting_of_ref": "indicator--836842a9-55a2-491e-a056-e7100e2cc03d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bdef714-c3f7-4a1e-b030-32571f01f168", "sighting_of_ref": "indicator--66c5c0c4-e3f7-4285-a289-10e0d27cab3a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3570f74e-115c-4c1e-8c10-64e962513f71", "sighting_of_ref": "indicator--d118b1b7-8961-479c-a703-d4b03c13d10e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e831f063-7328-40b6-ba47-440b2dc8d29d", "sighting_of_ref": "indicator--44846b37-ff97-40a2-abfa-5433e1979546", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569fd212-3175-4ca6-b216-5ce6b39fc18a", "sighting_of_ref": "indicator--38ec0246-c767-4690-9dc7-d9f11a443775", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed53dd9-f7b4-4ed3-873a-bdd8caeaa839", "sighting_of_ref": "indicator--92934f72-1a63-45e6-907b-84ae933f421e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc3563ba-b06c-4c8f-b9b4-ea50cd6a1257", "sighting_of_ref": "indicator--c0c7a473-3c59-46f6-b5f7-cffb0e849c31", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f4a7dec-6c2d-4186-9972-f46abe2522d7", "sighting_of_ref": "indicator--344e3849-5a90-4c76-be43-2ad230cd38bb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28b9df6-31a3-4126-8fb3-03f8f050f58d", "sighting_of_ref": "indicator--6093c2c0-fc53-4c94-81cb-77b093273a0f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75cb2452-2bb6-47e3-9a29-09ff5d2c4f1a", "sighting_of_ref": "indicator--dc60880e-ff00-4ea6-92a6-8bee65ae0a99", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee64cb6-5712-4991-8874-3955358e169e", "sighting_of_ref": "indicator--f6205dc8-5ca4-4ee1-98f5-96297fd14c3d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3161660d-0d24-4c0c-99fb-5dcb8df50cfa", "sighting_of_ref": "indicator--23ed254e-3e20-4fec-ae49-9335e30993ee", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ca9a8b-57b9-46c1-979d-7b118529e2dc", "sighting_of_ref": "indicator--245346d8-cbbf-425c-af9d-fbaa58ce90ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb76f3b-cead-4585-be64-96e1df6f76b6", "sighting_of_ref": "indicator--92f76a4b-a2f4-47cb-8893-4d2fc8b9ad5a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e21b84-0ca4-47e7-b092-f8bb44c33ef6", "sighting_of_ref": "indicator--471511a8-2bdf-4718-845b-2fa572b67919", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a990913-cc9e-4575-90d2-ca008a9ed165", "sighting_of_ref": "indicator--a5663cb0-8a52-42b6-9ceb-090eb87872f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a36a912-7db3-4934-b97f-0cb669ba71e5", "sighting_of_ref": "indicator--cc2d16a6-fd14-40c7-928d-c0f697fe3247", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c865c2c4-4b20-4d97-b4ec-4c45ce569d3f", "sighting_of_ref": "indicator--fe8ce18f-dcf1-40f2-a119-18c6d6d03d3b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3314cd8-043f-450d-b3c8-4c0755ca0090", "sighting_of_ref": "indicator--cb2d8e5e-1d06-4bda-8003-759f916a47e9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb52e1ce-fedf-48db-9636-497f78a3e11b", "sighting_of_ref": "indicator--16d805a9-105e-4224-b8e5-d3b67ced1cd2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709cb7e9-dd61-46e0-8711-b209ca2fee21", "sighting_of_ref": "indicator--af9b87c3-4dba-4303-8c23-615e721e731a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec983ca-f134-4aed-a125-47041795b3ab", "sighting_of_ref": "indicator--7bd3e741-1672-4ec9-90a0-57c80345e058", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c50131-1c2e-4a2a-afb3-0673fa475039", "sighting_of_ref": "indicator--6b58e506-184a-4bf1-9e86-5f0d0e11c455", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fadda4e8-89e6-4c94-b3dd-190cc737945a", "sighting_of_ref": "indicator--5b2eb8a2-09c3-45c2-af25-63061c742018", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4920598-efc5-404f-89c5-e6ddbbf5cb2e", "sighting_of_ref": "indicator--fba03ee9-724a-42ae-871f-75d78c0e737e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d9ba19b-5cbe-40da-9c61-2952f692aaef", "sighting_of_ref": "indicator--8092363a-f949-467d-b6b6-be71e38594a7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01705a2f-4177-4a2e-ac8c-baf37b82dd86", "sighting_of_ref": "indicator--0be9f10d-f453-442f-a25a-f793fec1f546", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621ca95d-9c98-4f8b-ae21-f61873fb4d5a", "sighting_of_ref": "indicator--4533e642-1ea2-4736-9513-c7ed4b68fa84", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd16af55-aabc-40d2-aa07-a16e54edc540", "sighting_of_ref": "indicator--031454e0-c6e4-42d9-b517-5a78078c1376", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3bf485-f642-4046-a8d2-9c320557974e", "sighting_of_ref": "indicator--188a1da8-d9b3-4a52-be56-b3def35afb2d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b05aeef-ab49-468b-8db1-655fbdb4c792", "sighting_of_ref": "indicator--4f6f8b77-84a2-4c94-abc5-dafd1f4a5140", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4136a5-a46e-497c-b278-ced449a0390c", "sighting_of_ref": "indicator--3caf1c4f-6d77-4c3d-8674-ab0ece77c768", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af606c6e-32ee-4301-9928-1b7e1bda720f", "sighting_of_ref": "indicator--83b1a9aa-0b46-4b12-8faf-6cc717e63e1f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2bca936-cb11-44c5-ba30-0caa7f6a2563", "sighting_of_ref": "indicator--3c1db245-c319-4f93-bfbd-3a87bd0755e5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4ed86e-238a-4c18-a96e-2e6cd7aa1f46", "sighting_of_ref": "indicator--503b32e7-340b-4e3c-a90b-ca6a7c986dab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e72655-d24c-4fe9-a5ea-1e21238388ee", "sighting_of_ref": "indicator--821e2ca0-e015-4e1e-a415-d1ca0668be22", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c8bbc7c-c991-4f01-ad55-640f61c40673", "sighting_of_ref": "indicator--a42da0eb-ddc2-4888-a5de-48b644413447", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f46e71-d4bc-4610-a66b-0b49429d8a00", "sighting_of_ref": "indicator--9110eade-17f3-455b-8652-644c05a109b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65eaa3ba-77d1-40aa-8b12-6b21caf9cf9c", "sighting_of_ref": "indicator--ff63bca6-b3b8-41de-aff6-ba3588afba63", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e468d914-04cf-4e8f-81c1-8809c8718c7b", "sighting_of_ref": "indicator--af17509f-c173-47f4-a703-32c283bbd45a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82dcef31-1773-4a5d-8624-c500088260b3", "sighting_of_ref": "indicator--b619c943-a5e9-4fbd-8f50-7f613eab4af9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad37892-06c6-492c-b9fb-9e0aba8ede1d", "sighting_of_ref": "indicator--62fc6218-cf5a-4661-a09a-38609eea68d2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2941ffad-5fa1-4baf-9829-70968e609815", "sighting_of_ref": "indicator--7f42a94d-fe21-46f2-9bab-213d832b034c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c6b8e30-2a3b-419d-9441-765d4f4b19c1", "sighting_of_ref": "indicator--72e0f327-9f54-4ef7-8908-0842d8444832", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2c9709-fe60-4785-b25e-58c90f955147", "sighting_of_ref": "indicator--3a00d796-9d22-43c3-97ce-5c68ff17d3d1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3dac2ea-03bf-4c30-90e0-696ac68e6cad", "sighting_of_ref": "indicator--514b4340-071f-4a38-a7f1-ae6b20fd135c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d34092a-a82c-46b3-8d56-7f1e3f77454c", "sighting_of_ref": "indicator--842ea1f5-cbd1-4afe-8fb3-5bb7c2bac0cd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70137ad3-e810-43de-a5fc-326b597a488f", "sighting_of_ref": "indicator--736eca34-a487-4a93-9a72-078c6824d0f8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa085c5-13cc-4668-b72a-9bb0ab3adcc7", "sighting_of_ref": "indicator--7127a9a5-239b-40ef-99b1-c54d84a69ffe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d4af16-c9b0-4d7d-a304-8bf18ef784fd", "sighting_of_ref": "indicator--f1cfd062-bcb8-44fd-bfa2-1b24d9abaee4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09868dc0-74c9-4a3d-8dc7-8b62ecfc3c59", "sighting_of_ref": "indicator--b6b37a34-b184-4e05-a87c-370b0de57fdc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d906c1c-a003-4ce0-83a2-0ec11b17f4d7", "sighting_of_ref": "indicator--47b861f0-1492-4bc5-aadf-efd7b8758097", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f43b8c4-ee14-40ed-9b87-76799909c692", "sighting_of_ref": "indicator--56d41e43-8b68-4833-8e70-ebd9468ed6eb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4c0d87-6874-433b-a83e-d74cc7431615", "sighting_of_ref": "indicator--2f00bd97-362d-46e4-8217-cc1f5b9fc00a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc709c22-2a92-4332-ac54-add1e6af5e4b", "sighting_of_ref": "indicator--e8e38841-51f5-4603-8a04-f3718eaca1a0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--758c93d8-e1fe-40e1-bb01-16b46eab424f", "sighting_of_ref": "indicator--d965469e-bef4-4228-bfc3-f09a35f82f23", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--562082c1-93a7-46a7-b7b4-35febe1e3a4a", "sighting_of_ref": "indicator--3b49e99b-f4cb-4c72-8aa4-c197f8f11fd5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028ca12d-3069-4f90-8b75-f22005fe0709", "sighting_of_ref": "indicator--958621eb-6039-47d9-a17c-cb9426679a23", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d402e3-b60a-4604-b194-b04acc8b4cfb", "sighting_of_ref": "indicator--c9d07622-92ea-4238-9375-bb50a180a365", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abfc9b94-f719-461a-957e-d334346019ee", "sighting_of_ref": "indicator--0f39a64f-8caf-4fc4-89d5-a4d813c3a7c9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb186a3a-d61c-40ba-8f90-bc25e71b42f6", "sighting_of_ref": "indicator--9ab8b428-5014-4589-be1e-663042858b0f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6556f09-d9c1-4c57-a192-e74d32da5c13", "sighting_of_ref": "indicator--2d5d8716-464f-4d81-bc6b-ebccd878548b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa08200-c6b1-41f2-8c1b-4cdc1793d703", "sighting_of_ref": "indicator--91701bd9-9a0e-44f5-bd89-42899cdcfc20", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec3fb63-c1aa-4c30-9a0a-7b55cc8f4c62", "sighting_of_ref": "indicator--20b9846f-38e7-4c84-b69c-de30bab328c8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f99ea3d-06f2-432c-b16d-26e9a9c6e040", "sighting_of_ref": "indicator--c0fd4b37-d0b0-4eed-abb0-c8f7091216ec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--672ddda1-a10c-4c5a-a3cb-f0210ae66766", "sighting_of_ref": "indicator--3ae829db-23b3-4d74-861c-7bca5ffad705", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d826a12b-907e-4b05-ad24-57a29d736d15", "sighting_of_ref": "indicator--571e1b31-7135-4a75-abd6-b70532ca61aa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01849d85-6e12-4c32-b3bc-642508e99eba", "sighting_of_ref": "indicator--b1e85fb8-a713-4d24-905e-276eee45cba2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f5479a-27a5-431a-84a6-0566cd764a07", "sighting_of_ref": "indicator--e1a5139a-5fa2-4a20-a5ec-279468626d2e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cda0213-376f-4270-bca8-32fb793da07e", "sighting_of_ref": "indicator--c500bc0d-2156-4fb2-b99f-bf1b672689e7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe6d988-af04-400f-9717-8f914773cd0d", "sighting_of_ref": "indicator--7a4d3771-c080-47ab-9c6c-106305ab0790", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4918edd-6cb7-4d64-a7e0-01477779729d", "sighting_of_ref": "indicator--619fd685-fd7e-4771-9b68-bb4ae6ee876e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75a9ca3-dd62-4b8b-93af-c2ee637de66c", "sighting_of_ref": "indicator--609426b8-6d6a-4095-adb6-c02d1b096bcb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e487985e-bf02-45e7-9b94-d6a42e903c32", "sighting_of_ref": "indicator--a466633c-4a88-4ead-9a5b-bf77992f2946", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cafba98-72b0-4bd6-9066-150b6f96bdb2", "sighting_of_ref": "indicator--1b349755-fa90-4025-a914-a769a33f6911", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e360909-4899-4da9-8b3b-f7f3b0fced65", "sighting_of_ref": "indicator--bdb63329-ba80-4c24-96a6-5f3d8026b25a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5481887e-68a9-443e-bdb5-9e4266da720a", "sighting_of_ref": "indicator--3786b9f0-800f-460f-8aec-535ceff30824", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a9fefc-10b3-4670-9343-6c1cc60a0f0d", "sighting_of_ref": "indicator--22dd6f72-8e19-4410-9bc2-0007afac0a1d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b122be-fdfa-4552-aa32-b73d8c9d47d7", "sighting_of_ref": "indicator--cf987bff-5dd0-49a8-a0b3-269cd61fa940", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75db3d22-7d99-4c94-8832-edccd0ca630c", "sighting_of_ref": "indicator--020a6dd2-a7ce-4b8d-8d57-77946572352e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5efece86-803b-4aa3-83bd-358741d26fac", "sighting_of_ref": "indicator--da7b5640-f943-4baf-9efe-d7e915c06f78", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d311835-6bd5-45ba-bb0c-2124053c63da", "sighting_of_ref": "indicator--00acd522-1733-4716-9345-4c2e2b5eb46f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d5dff2-a299-41d7-b91f-2f0cc422b1a9", "sighting_of_ref": "indicator--ea8032b9-9ed7-461f-89d1-31b70e1b82a5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30898d0-216c-4bac-bd59-5651da51950d", "sighting_of_ref": "indicator--2d485cbf-123c-4e55-bc5e-228a5d3e3899", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3b3c1e-7a27-46a7-b205-1f685b5db071", "sighting_of_ref": "indicator--ff966c6b-76bd-48a1-b891-c5702975c003", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22e19ce-409a-4a84-baa0-78980c1756e6", "sighting_of_ref": "indicator--5e5c4979-b220-42e7-a3c0-53d73725b016", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd25c50-6fc6-43a4-988a-e2cdd1d97765", "sighting_of_ref": "indicator--7e149c49-c349-4824-a708-83ec63248a68", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea156cd9-7f3a-4432-9a76-276139b95b7a", "sighting_of_ref": "indicator--656de02a-7a23-4311-a0e6-e977502e6e41", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a08305-2839-45f3-9cff-07aafa737de4", "sighting_of_ref": "indicator--491e9590-e057-4d0b-b2f4-cbf9f9c89d5d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c30a0c-f78a-42c6-9336-b4c6dc5946dd", "sighting_of_ref": "indicator--4049cc32-9817-4ff8-a113-4a7d8e9eb5a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db76061-26d9-4d65-940f-8d7e787005a5", "sighting_of_ref": "indicator--ce5bd97b-cc03-4760-875b-99e3ba5c3354", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49848e6e-4b82-49d0-9ab9-9dc3075d7dd7", "sighting_of_ref": "indicator--4a2fc532-df98-4981-b779-ef28793499fe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed54de3b-0673-458c-91f4-c5e6b8647533", "sighting_of_ref": "indicator--e4bf8cd6-df1f-476c-8df5-02688f97bf40", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3feeca85-4811-4150-9fe5-d232f6662461", "sighting_of_ref": "indicator--2d39f9f4-82a4-41bb-b268-36a0a396c3c1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e39e8a-62b2-48c5-b71c-7f7ac69cdabc", "sighting_of_ref": "indicator--5c3dec5d-2f88-4e2a-be0c-b9faa733e008", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d6aebe-a7fb-42d8-9d88-9b92101cfbff", "sighting_of_ref": "indicator--3f90e188-8b5a-4dc1-8381-30e938b260af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4c02ad-34a7-4db8-8277-536a3df1cf33", "sighting_of_ref": "indicator--e813d160-b00e-4159-90dd-cd8936ddc2ab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb35546e-13d8-4704-a670-56bade26ac72", "sighting_of_ref": "indicator--06f437a3-30d7-4cdf-8aeb-586f7be5c3dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040a52cb-0538-452a-bf21-e9ec8e3e272e", "sighting_of_ref": "indicator--1476718c-a8bf-4604-98f3-5a9382144ecb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a79dde-9002-489d-ac05-49620f7e9cc5", "sighting_of_ref": "indicator--21a3a745-cd40-49b5-98de-1904ed90ba58", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d91e8d5-455a-467c-8659-cfc2844c03ac", "sighting_of_ref": "indicator--091d767b-9410-4434-9fc3-70b9e9876829", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c0e18e-f4dd-46c0-ac5c-8624b54e39b6", "sighting_of_ref": "indicator--f9b87318-be43-47ab-a357-d1f4e25a5ab5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87fea107-a795-4bbf-9a51-211dca3dd19a", "sighting_of_ref": "indicator--e9cd7a38-95c9-4333-8caa-ca225ad83667", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dfd2f85-e166-4770-9203-d9bceef3a151", "sighting_of_ref": "indicator--38f75a62-4ab9-4f18-8b69-540eb428d6e3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a78861d-11ab-4425-8cfe-5460836a14c2", "sighting_of_ref": "indicator--f3adbac4-53e2-49dc-97a4-9caa1cb9ca65", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a892b0a-272d-49af-b203-51815befd34a", "sighting_of_ref": "indicator--24ef88fe-dd56-4fb3-833e-fe7fbbf68f4e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8853e14-2f05-4cb5-9dd4-0e87626b1002", "sighting_of_ref": "indicator--9cbe030f-ada7-4b41-a6ae-6da871f87928", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e94bc02-31f9-4552-8ffa-971a03ed93de", "sighting_of_ref": "indicator--3bf2e05b-db18-4c76-b87d-1767945d5c70", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a333bd0-064b-4b6e-88c4-014055720a60", "sighting_of_ref": "indicator--4e67b6b6-3127-49f9-9add-a982a6a0f3c7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776c98a4-c603-443d-a8e3-31be0b3ad2c5", "sighting_of_ref": "indicator--37f33381-e971-4cc9-82fe-86f16f6dbbbf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c87a11-a2ff-41ce-9985-1215414bf527", "sighting_of_ref": "indicator--55f38180-f0af-459c-a2f9-a0f72fdfd5f3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd48ab38-d8ec-4c8b-9620-b8a63e9441e5", "sighting_of_ref": "indicator--4c2f53e3-0e07-462b-ad06-44ff3745fb57", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb452810-76fb-4f3c-8730-4ad5d6057b6a", "sighting_of_ref": "indicator--adffd8f2-6ac3-4104-ad59-7bf57ca5138e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0ad22e-c2b4-46b4-bf77-d7f2af8759b7", "sighting_of_ref": "indicator--47bc5fab-8e35-4474-9fe8-58ce0b4313db", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c068635-91ba-4358-9755-ff5ee3e83959", "sighting_of_ref": "indicator--43c35cb0-2185-445e-8e3d-520f36228ebb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965a19d0-b111-45c1-b9ce-7b1b7406767b", "sighting_of_ref": "indicator--ca2ef188-6b57-4647-9561-ea7f0e74092d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8563b76f-2f17-485d-a723-67437894afca", "sighting_of_ref": "indicator--dbb8eb80-09e7-4920-a05c-e9943121e2f1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de76078-6e19-4592-93b5-1084bf3b61b8", "sighting_of_ref": "indicator--d42b90ed-ec34-4ff7-8cae-f8f8d168ff38", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f22f4f6-a4d0-469c-b409-c76b982d4deb", "sighting_of_ref": "indicator--6af4b249-e1dd-4159-9294-0dd4e9bc325b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959c5496-45a2-479b-8702-3008161e8fd8", "sighting_of_ref": "indicator--c898d3c0-97fb-40f5-8fe0-d82ba16352b7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1d6f5a-9deb-4bf2-8310-84c507f7d22d", "sighting_of_ref": "indicator--0f941d62-f25d-445e-8c9b-14bd95b50ad1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54606890-37ae-4750-b158-8da1f3de95d8", "sighting_of_ref": "indicator--8ad42039-8ee7-4f3d-bf90-11438abb695b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6aec97-339a-4472-9531-6694793d921e", "sighting_of_ref": "indicator--0c8bb372-0368-4077-b0b9-72f8079dae9a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9ef8d6-0367-4092-9287-04e64fcfd587", "sighting_of_ref": "indicator--82c58c99-8e02-49b5-9143-e9ff2ed18cce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e24b8d-6147-415c-84e5-a0afb04d93ba", "sighting_of_ref": "indicator--8e85606a-5709-4184-8392-870006be2e7e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ae14f8-2924-4257-8dd7-243014e1b1e8", "sighting_of_ref": "indicator--b6442a5e-ad17-4d15-bf28-feb713a443c1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82cf85d5-a785-4630-82d0-940c9a056c49", "sighting_of_ref": "indicator--80019814-faad-4547-8aed-0e90c657a734", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195fe3d0-c8f0-4ee2-aacb-f9e6b9e3c154", "sighting_of_ref": "indicator--7c0b9631-0194-4f1c-9232-995be2c5b570", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0a310b-af59-45b6-be3d-068d71392021", "sighting_of_ref": "indicator--0b2d7fcf-949f-4bd0-a377-307a3644d9ec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--457a4575-476b-4381-bbb8-80f0945c48d6", "sighting_of_ref": "indicator--d375e7d9-2f78-4c3a-aeb0-2ac27a863e7e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9318d1-0875-4c2b-a631-d517c907d67a", "sighting_of_ref": "indicator--fe54099b-9dad-401f-b180-088c38af4aa5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a1d72c-c5ce-4bdb-9309-91569cff92a8", "sighting_of_ref": "indicator--e3fcf3c5-08d3-4046-86e1-435676b3345a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fbb06b6-45c0-4ad3-814d-eff6d63fd643", "sighting_of_ref": "indicator--046e196f-da93-4d70-a35b-9089a4884ea5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad2805f-a9f1-4365-8914-728333b28047", "sighting_of_ref": "indicator--e1ca5fbc-6e43-461e-a1d4-564971466b6e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f05b744-fa26-4004-9d31-8b944b5e5331", "sighting_of_ref": "indicator--742cbc04-7f90-4547-ac4c-2cd8765e2174", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7ab047-5ada-406f-9969-e306c652c3c3", "sighting_of_ref": "indicator--38a66c2d-f4f8-4019-a78a-ab59705153e7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d6cc65-c8f3-4259-abbd-caf3b3a9503f", "sighting_of_ref": "indicator--21ed5e8e-fcd6-4174-acae-fbef1bf7bb55", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4d8d2c-4e14-4ad6-8765-a8ae04680e01", "sighting_of_ref": "indicator--7bfa6ad4-a0e6-4cf7-908a-7c36d39553d2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104fb503-d8e7-49bd-aae9-ad22bf58720b", "sighting_of_ref": "indicator--15bf7cb1-05d9-4e03-8fd3-81bfbb5e101e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d9c2210-85b4-49af-adaa-c06a519a7622", "sighting_of_ref": "indicator--73f7580e-f727-4a8b-9967-5cdc811e2480", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bdfc6d-223f-4ec2-a30b-2ed2f0c1f638", "sighting_of_ref": "indicator--c88f102f-f58b-4cd2-9d5c-0550fdd04792", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc6c9ec5-9a2b-4261-bad6-fde4e659f005", "sighting_of_ref": "indicator--a39b85e1-a1c1-446c-ae79-393d728043fe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683c3d7c-ecb4-4ab9-861c-976102b65f37", "sighting_of_ref": "indicator--aa7a89b1-a3bf-4558-9d01-59735f023fe4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd02e82b-e286-4779-8d51-dc09098b10b1", "sighting_of_ref": "indicator--56efefcd-f73b-44ff-a35d-5118b1dcafa6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--646c1fac-85fe-40f3-8b91-c40f872875ff", "sighting_of_ref": "indicator--b6a4fef6-2f99-4f7b-816c-70137e53e11d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84707fca-44c1-48d1-a1ce-ea984f3defd7", "sighting_of_ref": "indicator--98e2561b-c190-4dd4-9e05-be00be1c1bbd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08047564-8ce3-4be8-92e2-2353d4fcb56a", "sighting_of_ref": "indicator--0dd2e892-b8e2-4cc4-8d59-2d31799d0cfb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa27bad-4af4-4065-9deb-8575ecf641ee", "sighting_of_ref": "indicator--fe1bff81-5d05-4754-888d-886cdb4f9d22", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b47e69-fe84-4b72-bf56-6f128606f5d9", "sighting_of_ref": "indicator--5afa800d-8f3d-4cf8-b434-06bdf35705c1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128d0480-420b-4c24-8b59-5dbce8710698", "sighting_of_ref": "indicator--3ff219a0-7ed9-4705-8d2f-2cd8478cc7ec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab22197-214b-4c89-9add-05c85e35ca07", "sighting_of_ref": "indicator--1305a6af-8f99-4570-b37f-e2d81a0d0446", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992b1e64-aadc-4ec5-871f-d5a4cd1f3c74", "sighting_of_ref": "indicator--742f8720-3ed2-4344-bf50-58f1204c28f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b35d6280-67c7-432f-81c1-e55bf1c16f1b", "sighting_of_ref": "indicator--762bd119-28a7-4037-94f5-342341fc3ca4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741a1dc6-119d-4c60-bf4f-02dcc0520b00", "sighting_of_ref": "indicator--fe428613-8f75-4428-b580-ca7de5e70ca3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd33f1e4-21d7-4707-8e7e-92f0ca2ad7c3", "sighting_of_ref": "indicator--e7831117-8c39-407b-82b3-4a3e749128ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4d161c-2b3c-486f-8ebf-2a4227269dd4", "sighting_of_ref": "indicator--2fb4c0a4-0dab-486f-9774-5197d1c84d7a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70f2625-8138-4254-9ef1-d2b71234d617", "sighting_of_ref": "indicator--021caf4e-191a-44bb-bbdc-172aa47fab60", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d02359-b9c5-4d2e-88a5-79ce78cdc9be", "sighting_of_ref": "indicator--02f83331-754d-416b-bb44-d62ce004751a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6eb9908-bb8f-4f0f-aa85-e9ae05b3e01f", "sighting_of_ref": "indicator--c9bfc01b-7359-420f-b725-1caf877c1152", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42af33ea-8b3d-40db-8265-499d1fe8fee5", "sighting_of_ref": "indicator--94d0c5e8-a228-4a5c-b459-b1ef41ccfbe0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9f0617-2183-427c-98c6-fd16b9bd71e6", "sighting_of_ref": "indicator--9dbd8ed1-6b56-4e98-9a22-307ce131d243", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e71c8d-c7d9-4f71-bd02-d251dfb1e63a", "sighting_of_ref": "indicator--04152ff9-f350-4536-a679-973690027629", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816760b0-a7fd-40c5-8d5f-4a579464856b", "sighting_of_ref": "indicator--1a2614fa-7b31-499f-a060-af67eb9b63ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462bdd6f-1898-4da7-87a9-c69b4b22c912", "sighting_of_ref": "indicator--eb6f7a03-da60-4298-85c0-f4802002bbe5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1f7cdf-9500-4c1c-b398-de1082b4776a", "sighting_of_ref": "indicator--d05cc0d3-1bba-4f8e-860a-091523facf9a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967e43a2-2332-4706-8657-2df26966996c", "sighting_of_ref": "indicator--7cc4e85b-a2c8-4bad-ba02-5dbc914c1c34", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d0a4b2-9f79-4fdb-b882-ea510a2e1dc1", "sighting_of_ref": "indicator--0d47a943-fcb9-4b64-9a46-c3c3e050093e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7da7d4c-e917-4495-8ff0-16100b228ff8", "sighting_of_ref": "indicator--c94f3f13-0fc6-43fa-bb92-86ea3d0c0c7e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143aad30-a8e5-433e-832e-69ba07d892de", "sighting_of_ref": "indicator--fdd32380-1d58-4636-9e94-46c1c2513fc6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f256f35-33d9-4c1a-93c4-208135e19eca", "sighting_of_ref": "indicator--c87f4d72-2b05-4c71-a512-43693a88b92e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66c2341-f3cd-45b4-9c4f-1462031c016c", "sighting_of_ref": "indicator--a565692c-d7b8-4c47-a703-d99dcdfc126c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a73687b7-9867-4887-97d5-a0ca56e0df82", "sighting_of_ref": "indicator--cdf3c0df-1f6a-4aa5-926c-97ae2f11cc54", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01bbccd6-0310-4ab2-9404-98ff90bc5af3", "sighting_of_ref": "indicator--71633ff4-b3e9-4f10-9175-a676d90a57bb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1adeda-590d-4f98-b49f-c5421e4b081d", "sighting_of_ref": "indicator--4b9dc9c0-cb8f-45a9-aeeb-14a32efc5f30", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c595b4b1-716a-4c3c-bb81-f142a400d8a5", "sighting_of_ref": "indicator--edb9066b-cd21-4317-b961-daa09e144dd0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d52dd9-7b74-481b-8916-8159bcb4003d", "sighting_of_ref": "indicator--ae761138-d5d1-44c3-843d-940758196a65", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d3194f-0e3e-4929-872e-efb5ec47306c", "sighting_of_ref": "indicator--75c56a62-a70c-4ba4-a970-c82f4883d3e1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--350cf305-3d35-4d7c-a423-d7d60928c0ba", "sighting_of_ref": "indicator--fb59725a-f6f5-48ea-b050-3fef3d4a5eef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045e09c5-2bbc-40b8-99b7-39eb9e5d058b", "sighting_of_ref": "indicator--fe731f0e-607f-47e4-bf5c-2c35f7802de2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4580fd8c-a735-4368-8fb2-30f83297faa6", "sighting_of_ref": "indicator--fa0f5869-88ec-4453-8cfc-f2bce720de1d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617d6f84-fd08-4dec-8402-49dedccbe578", "sighting_of_ref": "indicator--67d3f03c-688b-4c9b-9964-bb9ff6e70c3c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0718663-fbb1-41cb-9716-8505298c5764", "sighting_of_ref": "indicator--41c065f0-7707-4faa-a8e7-b5de63917469", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3588f8-466a-484a-a110-789491cc6046", "sighting_of_ref": "indicator--efe5ff66-28ea-4f73-aef4-cbb29bbe7e7a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6732cb4b-08b2-4921-a39e-612d10e9cf96", "sighting_of_ref": "indicator--fc98fd3a-05c9-438f-80ed-d15386420b78", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad16119-055a-4ca4-b080-277717ffd82f", "sighting_of_ref": "indicator--1250cf38-38d9-43c5-9652-7d8931f68043", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3d148c-5f50-43ad-9ba4-47793ba92431", "sighting_of_ref": "indicator--34371622-851b-4cd9-84ad-ebf8a70091eb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb590e41-ae4e-4cd5-9549-522b1721cc71", "sighting_of_ref": "indicator--ce3807ad-de9a-4f7c-819c-8bfe43b9683a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8232cc4-2535-49ba-9488-1eea29c65420", "sighting_of_ref": "indicator--f23400b3-79be-4e27-b577-55c14eb66d64", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb566b5-6a68-47a9-8c80-0b58394ac22e", "sighting_of_ref": "indicator--64879795-cf53-44a2-b042-514876e3ea22", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed484ce1-73ee-449a-af44-814520b5c6de", "sighting_of_ref": "indicator--a29dac38-8b15-4f01-9985-8bc117002b04", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed29d864-5e05-49ae-997a-021ec4843b59", "sighting_of_ref": "indicator--3f05058a-002d-4c1c-9dd5-6b25a53486c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb069660-01fe-4232-afe2-ad52918973fb", "sighting_of_ref": "indicator--bc81cc20-f667-4d86-992d-0a2f715fb299", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a014440-0fc3-4829-baf7-e954a1ad2d89", "sighting_of_ref": "indicator--1c316b1b-4138-4a42-8ffd-1403d2e6696e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a4ed036-697d-4382-bc5c-f8f108d6cb21", "sighting_of_ref": "indicator--f0c94ab6-8721-43b7-91a5-e4b733a5a2b2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77913fdb-e90a-44fa-90bc-5e76df48dfa7", "sighting_of_ref": "indicator--5f090bcd-d79b-4480-bee2-f3a3eaee1d94", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37967db6-3b20-478d-80db-cb0f968cad50", "sighting_of_ref": "indicator--cac3739e-0f38-48a1-b0a7-b287a8156e7e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c95e02-1af4-42a7-a3c9-8903170f6ec6", "sighting_of_ref": "indicator--3fbb4300-a758-475f-939a-2cd0c7ee9509", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ef5d31-4c4d-4cd9-9460-87f631bda099", "sighting_of_ref": "indicator--6e13055a-d26b-4c02-b3ba-4b5f13dc5802", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de91dd4e-dc2f-4c19-a881-228450872527", "sighting_of_ref": "indicator--49a62b4c-932c-4f79-af0b-fd38b2d1e77c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b626a5-2c28-44d8-8a76-78579c049818", "sighting_of_ref": "indicator--22ba6764-348b-4dc3-9a31-bafd91fdc3ee", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fec0ae7-2a3d-4c1a-b6f7-bf0a9627d396", "sighting_of_ref": "indicator--e36d046f-d3ee-4cac-beca-f3c2ce7e2c9f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcbc40e1-7f6b-499e-83a2-9a6e4e5b1b95", "sighting_of_ref": "indicator--5722b3ca-45ba-4312-bc3c-db8a6b1a3dc4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c04d43c2-3e52-4314-8dd0-97f94c988fad", "sighting_of_ref": "indicator--296c6c76-9ffd-40e4-b2f8-0bd81e4de383", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51ff268-6f52-40f8-8ad9-ab43c4e5f9e9", "sighting_of_ref": "indicator--78eb580b-e954-47c9-b98c-4679391fc792", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2594afd4-6f58-45a5-b00b-30ed731f2ef7", "sighting_of_ref": "indicator--57f2068d-ae30-4bc8-8f6a-12c379d4cb66", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0954ef0-b4c9-4517-b6d8-e37ed57f52e8", "sighting_of_ref": "indicator--caf3fb4f-6a56-4c2d-a8bf-63e9926e8b96", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d57093f3-ddf0-40c9-b701-b11cdbeec609", "sighting_of_ref": "indicator--9d4b619d-8f81-4c9f-9b62-7db84a2d5d1f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647212dc-0521-424c-aae8-985e61c936a2", "sighting_of_ref": "indicator--27999a09-23d1-49a1-93d8-0082ba7bce6c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8a0d63-5400-4eb3-b4db-9047f2679460", "sighting_of_ref": "indicator--7d83f50c-943a-43fb-9256-f9b1d73d2a7a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74d2869-6de8-46ba-82a2-becad8eb73b7", "sighting_of_ref": "indicator--f69f223f-21f7-44c7-81af-f05d20541b61", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae91286-6256-4aa6-924a-30b7f544f03d", "sighting_of_ref": "indicator--49aa1cce-6d7d-4514-9110-d402bdaca1d2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b64ec7-3b76-4867-b27d-a31d71552066", "sighting_of_ref": "indicator--14436eeb-d354-45c9-9e70-a13f6a5ea8e2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8881b0fc-7982-4bbd-9d0b-1046b6fec3d5", "sighting_of_ref": "indicator--73870c89-4da5-43f0-a6ab-9db0454a1fc5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d567ef-093d-4c4e-8a43-83c1edee437a", "sighting_of_ref": "indicator--a6172e2a-fcbb-444b-9e54-943a371ee20f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc077c2c-c6eb-4b32-ba86-1d39fcc672dc", "sighting_of_ref": "indicator--ec27830d-1bc0-4400-b1a3-d1bdcd5ae65d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3a9caa-f69c-4ea0-8cc6-caf08fc6d782", "sighting_of_ref": "indicator--3b08e8e2-4c53-424c-b327-0d12a7088881", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c0bce8c-589f-4b8b-8e50-d0078377a4e6", "sighting_of_ref": "indicator--27124bb2-d68e-4301-9bae-9a27f05e5493", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681e62b5-f6ef-4908-91d1-e748b2fa9b66", "sighting_of_ref": "indicator--4c680332-7b94-4982-8127-292d74ae7a70", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d349c3d-eb0d-425d-b4f0-54a7edf79d0a", "sighting_of_ref": "indicator--e934c462-8d21-4559-999a-129c4153704f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d57ae5-b419-4a4f-b622-317dc00477c4", "sighting_of_ref": "indicator--06a1b4cb-d558-4be8-9979-542fb3ff86d6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8fe6e5-710f-4483-b195-7ac08f173c1e", "sighting_of_ref": "indicator--b97170ec-169f-4e8e-aed3-cfad8c496bb5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2308ca-0cd9-491a-8f64-29d7d0786db0", "sighting_of_ref": "indicator--615bf66c-d32c-4514-837a-f9e49993b7bf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef768f22-1012-41c7-b8d4-ca226bf64009", "sighting_of_ref": "indicator--96462d32-fc4d-4dde-ad4a-59fb8682f3a2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b135da9-6202-49cc-9103-1a4031a2bd5b", "sighting_of_ref": "indicator--2365c403-9490-4d23-a07e-d09f88401a16", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2780481-26e9-4ac0-8104-949f851494af", "sighting_of_ref": "indicator--76632d28-9fe2-49a1-b87c-3e1eff675711", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13324f21-bd84-4bb6-9919-c8c68bb5c1d4", "sighting_of_ref": "indicator--9bbf3413-76db-48a3-8cbf-ff82348f2f96", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4cad274-53c0-4790-88c7-70d6eeded6b6", "sighting_of_ref": "indicator--54441d7d-a326-4385-bfcd-7a11c27cd621", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba387c41-2f10-4c3b-946a-d50c1bfb5006", "sighting_of_ref": "indicator--d433f5de-471f-45f8-ac2c-1383d74c1773", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79e9ffe-b659-4fb6-9dec-c409a59e73dc", "sighting_of_ref": "indicator--f375cf3e-d62c-4c8b-beda-6056c3586891", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51841a8b-b683-491d-94a1-7c8a47f1473c", "sighting_of_ref": "indicator--ae8665dd-c100-4e33-b11e-cc015a776eae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1785d6d-abac-486f-95bd-7c13dbc4e0b5", "sighting_of_ref": "indicator--aaed30b7-c132-4db3-8ab2-a948164882ad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bfd823d-f217-43c9-bf1f-3fd981ea0e0c", "sighting_of_ref": "indicator--a2f6374b-3425-49e9-b118-e3b8aceb6f44", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9156bc-ccad-4ece-8ccf-fbfa34886550", "sighting_of_ref": "indicator--81b496b4-1082-448a-8a53-5da2661bbcab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584a6d54-a534-465b-9409-967a7c149234", "sighting_of_ref": "indicator--72353740-e6e5-4f1d-b78e-b5dea22afd98", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e07da27-c361-4857-b497-170e9bbdf28f", "sighting_of_ref": "indicator--60a31383-3553-4a4f-b00f-de2bd6e75dfc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2362f8-3a16-4804-82fe-01fb7c0b941d", "sighting_of_ref": "indicator--50f251d2-d872-4dfa-9b63-6d72d529b8f6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51982589-0120-41e1-bc05-ab29ed70c9ac", "sighting_of_ref": "indicator--58bc3a91-b07e-43cc-84ad-49349ba16687", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a37071a9-9dd1-4475-8766-9440c598392a", "sighting_of_ref": "indicator--ab07b285-761f-4df0-ae8a-535cd1067e96", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46bd9c72-3eb8-4e87-9439-26f114a80c91", "sighting_of_ref": "indicator--15a1838f-1e9a-4aac-ba74-850de0150d2e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0084d0-5c61-47fc-a576-0b2e890de0a5", "sighting_of_ref": "indicator--d4294c4a-259f-4cc9-b68e-e1a2c3e2c910", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4674dfb-9d29-43c9-bfd4-a0ef27d363d4", "sighting_of_ref": "indicator--750548b8-4fb8-4bc5-9cc4-0bd9266cb7e7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5555d785-36b0-478c-9e48-d06f020d3a7a", "sighting_of_ref": "indicator--541529c1-342b-4620-aa47-a9143463b3c2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426a6823-19d5-499f-9755-cf50999019ed", "sighting_of_ref": "indicator--d2b39836-3867-4f35-a371-14a5bcd248bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe81b74-73fb-40df-9ffc-b8eb47697e3e", "sighting_of_ref": "indicator--71ebd5f1-20de-4899-8eef-97de5baad52a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf60db11-3fc5-4a20-b6c0-077ceb857d69", "sighting_of_ref": "indicator--795d5c2b-819d-440a-8b49-d3a26c9c495c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94127bca-8164-43aa-9ac9-a898c87a73da", "sighting_of_ref": "indicator--fc46f2f8-9569-4629-960a-382db940b1fa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d470c8a1-22de-4764-a0b1-9292d6b7bb4a", "sighting_of_ref": "indicator--054ae3a0-bfc4-4772-8b2a-974aa3b7f0f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8034a64-78d0-4d0b-bbc2-39c355d2e253", "sighting_of_ref": "indicator--64caf558-4dfb-4fc1-bb29-e199b518d01b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26dd8227-576f-477d-b0a6-13862bb04dd5", "sighting_of_ref": "indicator--199e00b3-3302-4e82-87d8-51e6f0e5e5e7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5040538-285e-4116-bb97-7bd4e4b3bb87", "sighting_of_ref": "indicator--ebe41e26-1e84-405d-97f4-1d1e65b542a6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec81a69-9d89-48f8-b26e-4590aea2acdd", "sighting_of_ref": "indicator--9f966506-2e96-46ce-8c9b-caa1b0a1cbb8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7461c29b-c0ba-4c5a-b5cc-7087f79d9b26", "sighting_of_ref": "indicator--e7270140-4ff6-41f3-9853-63198ed3ca7e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74623ff-bc8e-4f17-bc03-0d879331e262", "sighting_of_ref": "indicator--e1dbcd15-b28f-4a97-acf8-14c361aaf5ef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1a6d80-cd77-4710-8bd6-d3017ff6faae", "sighting_of_ref": "indicator--9b180160-b5fb-4280-a1a8-d12addfcde5f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52da6835-4f94-4d2d-a085-e64ae24bab0a", "sighting_of_ref": "indicator--332d0994-4765-4682-95a3-6dee619d41c3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44d3184-7e4b-423e-a873-1482b8e95a72", "sighting_of_ref": "indicator--3414d8de-f60f-4b16-8a95-9e7afcde73f0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68e92d7-ca56-49d5-bdcf-1c153fec5953", "sighting_of_ref": "indicator--f1d81f0c-ddda-4d7c-8224-68992d9f1c1e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e5da35-75ca-43fc-9774-489953746418", "sighting_of_ref": "indicator--b6a8588d-68f6-49e9-ab10-f03bd3023602", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9dd1441-9b3e-42b8-a74f-f06c4037e774", "sighting_of_ref": "indicator--6debee95-a621-4f96-9eab-ec1592f00114", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b0e0d8-bebf-4269-a587-a0f34bf42961", "sighting_of_ref": "indicator--9c434533-c462-4175-b748-79df75f1a4ab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b6f222-8383-438a-9c64-616eeeb73d53", "sighting_of_ref": "indicator--862ad3b0-9fb8-4976-a722-e1f8f2cc27bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51a2bb1-fc6e-48c4-b154-0a031210246e", "sighting_of_ref": "indicator--23861467-dd6d-424f-a8c4-432f68d3d05a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba32d190-d242-4d44-89ff-2c9764076ac8", "sighting_of_ref": "indicator--5f4fdfe1-a2c8-4f79-85c4-1b0ca74778dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c214bd61-a91c-4b63-a9b6-f38296ff5bcd", "sighting_of_ref": "indicator--69cc90db-0b51-4faf-9fb5-b462487ec53a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd9a63e-e358-470e-b9b5-352882fe921e", "sighting_of_ref": "indicator--041ae89f-1eca-4ba3-9283-8068a74084af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e3c331-a394-4e0f-9265-3b4c2cb31ad0", "sighting_of_ref": "indicator--26ebebfc-37ad-47b2-9398-5fbc8324e167", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7d8f94-7ac4-4390-8d90-724ac7617a16", "sighting_of_ref": "indicator--f560f1ce-2563-4ecf-85fa-410957e65f67", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e79b8e-9624-4846-82d7-b14570f06c4d", "sighting_of_ref": "indicator--4e600204-ca69-4b84-9b88-e3b46bfcb746", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4f8b4e-4b81-4c21-9a7b-97802309ffae", "sighting_of_ref": "indicator--f37b4e19-d69e-4aec-b1d7-2d1b991aa01f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea7b466-00b7-4e4f-b5c5-3542de343d5f", "sighting_of_ref": "indicator--29aa8d82-7ba6-40b8-ae0b-f5e8b11c4660", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a791139-867e-4d2c-979b-53688e6e0792", "sighting_of_ref": "indicator--555f7f9a-ea3d-44e5-89ec-b34e80002271", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ef4cc0-d3ef-47e4-af6c-5c0a6fad9042", "sighting_of_ref": "indicator--2feabbec-386e-4077-887a-6bc930920306", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1939a5-c742-4081-824c-2fd7da65a577", "sighting_of_ref": "indicator--6a41bb41-4655-4522-bf64-9e435dff5022", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba18a38-db4b-4818-bc3c-53ae40b18c8e", "sighting_of_ref": "indicator--62fb864a-7b12-4cf9-a170-750b2eb178a5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d304179d-1f5b-4d71-9450-57f6ac4d629f", "sighting_of_ref": "indicator--08565895-5f54-4c89-acb3-184edf7aa0be", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde5d3d4-b4d8-400a-a6f0-60c7e599ad3d", "sighting_of_ref": "indicator--83fe2949-56ba-4803-afad-3e657fc70562", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b05e31-bc0b-4228-ad09-48b190ea5495", "sighting_of_ref": "indicator--69617857-4c58-4c75-905c-fac550301603", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43839a59-86e6-4781-ae95-82616eeefb78", "sighting_of_ref": "indicator--82456fb5-d48a-4ba7-aabc-e7e292b02d19", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a7f175-2550-4e54-91d5-d4f9b9ecd270", "sighting_of_ref": "indicator--826fc847-fb83-4866-95be-7cfcdca53052", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0200b330-3997-468b-9c74-42d06d2c811a", "sighting_of_ref": "indicator--60120d30-4bf7-4af4-8e02-3033a0ac6403", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09bac58-ccdd-4c64-96d8-bd0f766dcf7c", "sighting_of_ref": "indicator--287af586-c333-453b-a4e7-348a6f7f2c72", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--215f1438-8d87-458a-bf47-9919ca4e486a", "sighting_of_ref": "indicator--25511e60-e0ce-4d35-9673-a685c39bbd0c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eada8385-a51f-439a-b740-5dc9f231a6d0", "sighting_of_ref": "indicator--c022f7b6-8fbe-4a0e-bb92-5a2a417f432d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bcea4cf-3faa-457e-8fcb-52aa421d7cb0", "sighting_of_ref": "indicator--ab48ee60-3588-4aa8-a5e7-d9b0f97c030d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ee00eb-0128-4ce7-beb8-515451e8ebf9", "sighting_of_ref": "indicator--da434134-6dcb-4857-9b4a-aa10f3a4c11b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5cce3f-4e50-40f8-b73f-8f432029978c", "sighting_of_ref": "indicator--cce97720-c4a3-4eb5-a2d7-e646b3074cbc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52581d0f-3ab2-4baa-9759-37c5c8af8f8f", "sighting_of_ref": "indicator--7112f232-efbe-4718-9621-843712643ee8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5576b6b2-1f60-40b4-8703-c21ce10e1604", "sighting_of_ref": "indicator--e97deb56-43c8-4286-b59e-83a9d4b0c787", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--860a6d26-dd26-41cd-ab15-bfc06ca61cf1", "sighting_of_ref": "indicator--1f3f9c76-4111-461f-b297-6e1224198270", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91254b3d-d195-4e64-a025-33c141efba16", "sighting_of_ref": "indicator--c4ea8b93-c9e1-428a-a910-41383b1029cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d351d12-59b4-4886-81dc-ea32dc147432", "sighting_of_ref": "indicator--26415849-7549-4001-900c-b9ba5a1af374", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673b23ea-bc85-477f-81e3-fd2557ac9d74", "sighting_of_ref": "indicator--67b12a80-c724-4585-b978-39edc1f98f28", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091da1df-eafd-4327-8488-05c581c09134", "sighting_of_ref": "indicator--32379b85-a2b4-420e-80ff-647f1d14989c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c990d978-68b1-40c9-9d71-aaf349054f6a", "sighting_of_ref": "indicator--a7d08a47-42ed-43da-b609-a81adb01fe5b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36378f5e-3978-40fd-8848-ca1af836935c", "sighting_of_ref": "indicator--396a37fd-13ba-4676-87d2-228ed30b7c5b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--622d7ef6-af5f-4e79-b3a5-79891192936b", "sighting_of_ref": "indicator--45e87825-c6de-4fe2-a6ac-d1917e8bd593", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57fc2e1-a298-49fc-8004-07a35400ea31", "sighting_of_ref": "indicator--4737bb7f-691a-4fdc-a0c9-b000a1e16e58", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815d7d96-76a7-4e23-a85e-2216b2c89615", "sighting_of_ref": "indicator--61ce1b35-1a79-4914-a075-b852452db5ab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028c8f4e-e016-4175-aa79-57029e3b4c9b", "sighting_of_ref": "indicator--388dbe3c-d115-46cf-aa9c-f0a962d46d49", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--705b2c2a-5eb1-434e-aae3-be9f2d6eb84b", "sighting_of_ref": "indicator--d9cb5a1e-5d09-44fc-b01c-1cf0cc4cc4ff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63aa69ff-ec0c-4b54-a0d3-0603c9619738", "sighting_of_ref": "indicator--b83b1642-1f42-4807-a5c4-e70dda264090", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e33feb1-63d2-41ca-90bb-b4549e327b25", "sighting_of_ref": "indicator--1a8554c8-a8e7-4ca0-b57f-5ef4c59512c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ec28b5-f992-4df8-904f-8d936e76b45d", "sighting_of_ref": "indicator--1b02133e-fd1c-4053-bdcf-dfddc8ba6d75", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f549d8e7-67ad-401d-95bc-5a353e0a8a27", "sighting_of_ref": "indicator--39984e55-f177-448a-a918-98735541e04d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de94254-2fbd-4700-af4c-ab62981253a8", "sighting_of_ref": "indicator--1dc3329f-1716-4ce8-bda0-5280fea99adc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43ec614-d9f2-40d2-9bc8-ca191a765e71", "sighting_of_ref": "indicator--aa248d56-5517-4a4e-a33c-a2ecdbfa11ae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4d5b30-26f6-4064-b884-82ad2f365e58", "sighting_of_ref": "indicator--5d4d0207-9a50-4240-9a76-877b2d4e0e5b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3cb402-43fb-42f4-b3dd-2c32b2d7b6ae", "sighting_of_ref": "indicator--be8e94c9-ee6f-4050-a792-1681bbc83210", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74405645-1bb8-4058-95a7-80808f830d01", "sighting_of_ref": "indicator--f6558440-a69e-40bb-bbe7-370cedde3352", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270e833e-588c-41d3-9c70-7845bb27ef57", "sighting_of_ref": "indicator--81369ee6-9526-430a-87d8-61d24ff619f0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c24585-a341-45f8-a1ea-14d9e3369498", "sighting_of_ref": "indicator--e6ef502c-cf3d-4a76-ab08-9b3029adcd6a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3e91d3-96e4-4a47-99e7-c3834cfce94b", "sighting_of_ref": "indicator--218a610d-cd8f-45ea-acf6-67a03a363da1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5685c92-8391-459a-9fdb-e33b61b8ef44", "sighting_of_ref": "indicator--72a53b26-3c80-4ebf-96b2-64d3ea229405", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26bf52e4-edad-4092-81ed-6a9b315871a0", "sighting_of_ref": "indicator--a56b4dad-c38b-4ba1-8cd4-857d854dcc14", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868d0f9f-d746-42a9-bbb4-7625d287b7e4", "sighting_of_ref": "indicator--ed76f63d-a1c4-4123-b0c3-ca4f05d28683", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad91f8c-6967-4d24-8ea5-811b1ff9c334", "sighting_of_ref": "indicator--c07e1a29-f1f5-49cf-9741-9ba367dea9bc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970c6d86-3bfc-4a90-9d2c-9df877a887b9", "sighting_of_ref": "indicator--2a4484e8-dbba-4a41-b608-291a218509d0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c7f451-c43d-49ca-9624-5329b1a261cd", "sighting_of_ref": "indicator--7ceac16e-5a78-4384-aa03-8310b1a90b84", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0aa9bc-6c3c-4d8e-8d55-d75b68268961", "sighting_of_ref": "indicator--3db95875-17ca-4c42-942f-fd8cb947dbc0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7027f9b2-010c-4256-90bf-3c58f4a5107f", "sighting_of_ref": "indicator--1d6293c5-667b-438b-a93f-964a2eda7d83", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f2cf6b-ab8f-42cb-97c2-1f23b7130e8c", "sighting_of_ref": "indicator--01353f81-6965-4536-b6a3-f3974acb8532", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912456e3-6933-4c7c-b3ea-60bc1edbe65e", "sighting_of_ref": "indicator--c1142bda-af87-4ce5-bc9f-cf5590b2f69f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d18760f-94b1-4bff-9c0d-12be7382b134", "sighting_of_ref": "indicator--ee77fab7-7130-4059-b780-44df90902f1f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d74c44-66fd-4ec4-bf83-9d876e2bbeb1", "sighting_of_ref": "indicator--a4971d0d-7b41-425c-9734-27bdbb7937b9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66024b3-6bd7-4041-a569-e5646f561c25", "sighting_of_ref": "indicator--78099788-e2f4-426c-9cca-405eefabfc57", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d8aa46-32a3-4027-9081-44f0edbb5be7", "sighting_of_ref": "indicator--bd3630f5-0686-47ba-be1c-eab1feb4b5fe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399b90f4-f22d-45c6-91a3-51d9e09790b7", "sighting_of_ref": "indicator--7168af1f-298a-4d52-b550-fb69dbc3554d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8038ca-53dd-46f9-b9c8-316b4111e200", "sighting_of_ref": "indicator--846b40f1-2c46-467d-976c-7af05565b75d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e5436d-bbca-4fdb-8ade-14b41bf6a7f7", "sighting_of_ref": "indicator--c9fd70c8-0225-429f-b61f-6e9108f23d1c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9698b297-038f-4d90-a1ca-fd01d4f96a4c", "sighting_of_ref": "indicator--461b5d2d-b062-49e9-b4cc-3d998f27742c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3232d2b8-ee55-4d0f-a36f-3edda82ecf1c", "sighting_of_ref": "indicator--f84196a7-a5d2-4878-82fe-a2f6e22f8bbc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487574af-7330-4952-89a8-cf18713acfee", "sighting_of_ref": "indicator--a30ee1dd-849e-4c7c-af1c-e18d6d3c560d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c116d1dd-05ec-4334-bf11-68141c4073ce", "sighting_of_ref": "indicator--01190cae-07d5-4334-a471-4c56a226a3f0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12136e28-7674-4f27-ae4f-c29a2f26acb6", "sighting_of_ref": "indicator--eeeae814-8329-49de-8407-836a55ff9d2f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea355ee-f7be-4c8b-8b89-e7dbab3d9def", "sighting_of_ref": "indicator--830085f0-f2c3-4c7f-9097-d334fec0b4ba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72223314-d01e-4354-a0ca-900ed68fa89d", "sighting_of_ref": "indicator--3a2ecb35-afe6-4f52-8438-8b40d8a415b6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c215c88-dabe-4053-9e5b-e1b3ee408245", "sighting_of_ref": "indicator--71536dd2-ed69-4c0f-9abf-27b10f68124b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a39ccbd-0021-4a5e-8cab-a203dce33d5a", "sighting_of_ref": "indicator--f3632413-ca2e-4265-b17c-8ec15aafa40b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2d7457-b3c8-48e5-b05a-43490eb6291e", "sighting_of_ref": "indicator--7844d1fb-d035-4abb-825d-3d011871ea86", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79e83c8-375e-4dfc-83ef-4bba59222bf5", "sighting_of_ref": "indicator--5c72537d-4d0a-44ca-a4b9-fcba9ef55649", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfbaf3d7-3acf-4f86-945b-971cebf7948b", "sighting_of_ref": "indicator--56b0cf2e-39c8-4676-9252-cf6a477d9834", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b36e6fe-dbf4-4558-9931-1b5a5cfd0986", "sighting_of_ref": "indicator--c0071617-a830-4b2a-9b1c-64c736dc8ae1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78cb6d51-b028-4442-b6c3-cfc3ffdac54c", "sighting_of_ref": "indicator--fb87c11b-d859-4613-83cb-bd436fbf3132", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c9eb2f-b1fa-487c-b4d7-cd9874def5a4", "sighting_of_ref": "indicator--4ad54e63-c1f9-46f9-b554-731217a7853e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83546147-04b1-4b15-ab4d-a444c547b3db", "sighting_of_ref": "indicator--1f7df0b3-36c8-44c4-b296-6cbcc2a73959", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5a86de-78f5-4deb-84b3-cf34861e6f3c", "sighting_of_ref": "indicator--5b17a445-c2a4-406b-bccc-2f8cd9c84393", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6748fa81-4683-4598-bf0c-1ab96e409993", "sighting_of_ref": "indicator--fde4c1f2-47b2-4192-85ed-0da6f435eb56", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e3826c-0e30-4a0e-b09d-7d12103caa48", "sighting_of_ref": "indicator--66ea320c-a361-4afb-bbf8-32645d81af42", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11ad792-4981-4821-ba61-e7783997996d", "sighting_of_ref": "indicator--32015cfd-2def-4a43-9b83-6963d3cb9f6b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307f90d3-6d09-47cb-a35e-80e1762a45e4", "sighting_of_ref": "indicator--ba2c4452-cb13-43c7-bac8-ae87f44a75d9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5331b4-161f-475f-853a-dde62271847e", "sighting_of_ref": "indicator--51c12b6e-5639-4e0a-8784-18ce2c06fbd5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e60600-8c3b-46ce-9468-5cdc970cfa22", "sighting_of_ref": "indicator--2f76464e-4aa1-4ab3-bbdc-a1853fe2aa17", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e4237f-c3a7-4428-86fa-061dc1238409", "sighting_of_ref": "indicator--85aace1d-8e73-44ec-a0e5-2bee6d65c0a0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee179a31-da1b-43c5-967f-83614e500b35", "sighting_of_ref": "indicator--3aff3dcf-b32c-44ed-abd5-a170d10fef96", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe139189-7e4e-4ed0-8052-5f1aee02ab44", "sighting_of_ref": "indicator--10116ab5-5898-49c8-820b-0e623e185481", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54e8aea-2254-4a1c-bb0f-a7d66e62f3e8", "sighting_of_ref": "indicator--faeb3b7b-9bea-4762-87c5-9804fecb0d30", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c2f649-2c44-49a3-9c6e-36262beab053", "sighting_of_ref": "indicator--926682fd-1174-474f-9947-a594e2b0ec71", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47d653c-1712-4751-96df-e10658b4fb0f", "sighting_of_ref": "indicator--2afb1a3a-5503-46e1-a23d-82f16c2a4f7f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c3b37d-bfa7-4efc-8adc-e92934d8727b", "sighting_of_ref": "indicator--92cd7786-8a5a-4a16-9231-63468502062a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd175a4e-07e2-4747-b7ad-bf431418d312", "sighting_of_ref": "indicator--47eba605-e290-4d1c-b94d-d8cdfd6a28c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a78178-728a-4c80-8f11-c926bcf49acd", "sighting_of_ref": "indicator--38bd8772-131f-4633-b69e-53a786b3611f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f0e305-d7d9-42c7-89fc-cfce0bbd9aac", "sighting_of_ref": "indicator--99395bbf-b983-474d-8df8-2e1123c9167e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f2a739-0e00-4dae-931b-52d5f3e9a3a8", "sighting_of_ref": "indicator--641d629f-86e4-4775-9f8a-28765e665222", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb971a2-cd58-4e72-83b7-6abd58663622", "sighting_of_ref": "indicator--3308d558-123c-4d59-b912-af03f41cb951", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84a2884-73af-4a64-a83b-2d6e7467b6c7", "sighting_of_ref": "indicator--85725f8e-291e-47cd-8c46-8f07ea2cec8f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22949a15-42b8-49dc-91b1-c8e6adbaaf3e", "sighting_of_ref": "indicator--905f364d-096f-415a-8021-7d3b5728cef4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87abd1dc-4f6c-49cf-80fb-fefb161b5e98", "sighting_of_ref": "indicator--84377351-f8e4-49c2-b42d-51471fb43bd3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64bb2322-ed67-44b6-92c5-579c6cc55536", "sighting_of_ref": "indicator--a30d9e06-cb16-43b9-9655-e6e5602dc86d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16abe126-eb4e-4903-9947-c1673b1d2f84", "sighting_of_ref": "indicator--ca54c2c9-292f-4956-87a3-adcecc9b79f5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a0ecf3-1a12-453a-88b2-21ff1c4a3968", "sighting_of_ref": "indicator--a3958167-1459-42b4-a05d-27ee065ad7bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d784b2-e887-450d-8a0e-5e30228cd806", "sighting_of_ref": "indicator--acd1d75c-4bae-478c-bced-b1157a6459a0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee04742-befc-42d4-860c-4f0fd446c5c7", "sighting_of_ref": "indicator--534e7fea-ff32-4b0f-9397-476e27afd865", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328f541c-af3c-45d4-ab56-ace4de5acce6", "sighting_of_ref": "indicator--2a6f8fcf-fe41-428a-8634-57883d592900", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1f1238-eca2-4f1d-a03e-883776e44c75", "sighting_of_ref": "indicator--bbe0eb33-83a7-403a-bd85-d0e74965d97c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68fc51bd-1199-4101-9718-6084692d7d9a", "sighting_of_ref": "indicator--0e82fdb1-baff-4088-a0ed-d0012c5455fa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324f5eaa-d4a1-47ed-bc47-3943844a52fd", "sighting_of_ref": "indicator--fbcf6173-2363-4bc6-bdf6-a19030ad53bc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c97280-c0ff-4a33-b4bb-95e580bba538", "sighting_of_ref": "indicator--8fac8691-1506-44a2-bca9-8af305ae20e7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d0b7d1-95ee-42d0-8b5b-15555fd1a1d3", "sighting_of_ref": "indicator--b3e0577c-c476-4e68-ba0a-6fd98fd602b8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78cb19f5-e7bb-4a48-a887-3b5d6bd7b821", "sighting_of_ref": "indicator--f28362f7-165b-4dde-8b13-34f4b66b0eb4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aed2906-10b8-40cf-863f-8b237f6fd69d", "sighting_of_ref": "indicator--575fa730-4a8d-4024-9404-ab4992d86a5b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bdd32de-5ebc-4891-9f19-b4ff62552641", "sighting_of_ref": "indicator--cb9f2b55-ab80-47a7-a09d-7019ca1f60fd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce46cb8-de2d-49e7-a120-ffcb8c3b6c1a", "sighting_of_ref": "indicator--3f79858e-d107-49b5-81c2-830e1ee8d7a0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e47f40-d221-4322-bdf5-39e2fa66b598", "sighting_of_ref": "indicator--107a27fe-f402-4e34-9670-5cd504d01c56", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797c5e4a-b7b2-4713-8c0c-6b42228f4e44", "sighting_of_ref": "indicator--85d32e4e-3a4b-4a64-90c2-a914db52d850", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f2b382-f2b2-49f3-ba23-b6e131740b6b", "sighting_of_ref": "indicator--d9fa2d34-d9f3-4790-a8fc-83eafc0fd3f6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180df404-c6a8-488d-aabf-c6a89ba3ea27", "sighting_of_ref": "indicator--dd291146-3dcd-4b70-a237-b5b7a20ad253", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99470310-41cf-4574-9739-b66a5364497c", "sighting_of_ref": "indicator--3f2d2477-7331-462b-9ba1-d75717f7d979", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b0d56b-7b93-4099-b54b-9f7c6c176cbe", "sighting_of_ref": "indicator--eaf3e2c3-3d9f-4511-9421-4b08e308d9bb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c322110e-a505-4db7-8fad-4cc72ef17417", "sighting_of_ref": "indicator--a8d0ad36-fa3a-4749-a2c2-e3fdf2e0a51b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52301fd1-af01-4388-89e9-9c50a47a2fea", "sighting_of_ref": "indicator--4222a861-bd56-4e65-8717-57c788a7f246", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3e7f84-6b54-4188-93cd-901e64e81a75", "sighting_of_ref": "indicator--66fe78d7-85b3-4d1b-aa35-3a0060bf9ab9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fea1c2e-91e5-490b-bda8-438fc37d1c47", "sighting_of_ref": "indicator--8f3685e3-9837-47bb-bf5d-6c892f41aa24", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab76e75f-96e0-467a-88d7-96f9f81d8141", "sighting_of_ref": "indicator--044c5d39-df4d-4989-9a56-8aa4ac6afe22", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fed0ac5-735e-4e04-9940-ee0a8ce6e155", "sighting_of_ref": "indicator--92c8faa4-e027-4299-89ea-365f6551a801", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c1269f-559b-42fd-a62a-f723085d7da5", "sighting_of_ref": "indicator--5b3c344f-ad17-446e-a959-7c59095f6e77", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c0e5bf-bea8-420b-a6ac-ce840966f712", "sighting_of_ref": "indicator--a482c718-3491-4085-a55f-ec678a7c570d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a46e70-a4bd-4283-84ce-c904146bd369", "sighting_of_ref": "indicator--868a0757-6dd0-40f6-8d3a-f9a82d371daf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81212cad-feaa-4fce-a28f-1ef2368c2bb1", "sighting_of_ref": "indicator--cf7e5844-603f-431b-a0df-8d2f303bae15", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1561629-cac9-4244-ac12-009d67074de9", "sighting_of_ref": "indicator--57f8d5ce-46b1-4b22-95c6-0ab4b7f8690b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c457dcef-0889-4e41-8170-3f091e012829", "sighting_of_ref": "indicator--eb89c454-598c-4327-98a7-c742d17ca57e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7928f7ad-7448-4311-9e20-5a34c03b4626", "sighting_of_ref": "indicator--f9f7ca88-3a07-445d-a7e1-1d00f25ca06f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab6360d-ef8d-407c-abbd-07ff9549de46", "sighting_of_ref": "indicator--1592ee4b-daba-4531-9b82-a39d93555537", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803dd227-4bef-4d7a-8c35-c9067b72b775", "sighting_of_ref": "indicator--a50ff85a-ea56-479a-829a-be9c08b54ec0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd24dea-b4c3-4bef-80de-3a2538c8a51c", "sighting_of_ref": "indicator--6f3b544a-cae4-4fe6-9e0b-75cd835c4c88", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b82a2e3-247d-4706-9c0c-8ba02f317176", "sighting_of_ref": "indicator--642cdcaa-ec82-41df-b0d8-c66e8c117010", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fbbc9ac-f167-4c15-aad8-5ba4ddb9b5fd", "sighting_of_ref": "indicator--3f1786ef-d749-4c6a-8132-a61fb8ac048f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6860fe59-c470-46ee-8b86-e43bcd654a14", "sighting_of_ref": "indicator--d7047871-467c-482d-bd24-8c413e845aca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d54d6d-03d9-4410-9d6a-187b2bbd2f29", "sighting_of_ref": "indicator--a730f67b-6073-431a-a8e2-91bc6e98941b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc165eb0-e822-48d7-86ba-8cce6240cfa2", "sighting_of_ref": "indicator--13ea9773-43d3-4d63-b2ba-7b43a32b736e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a6276f-15e1-4937-8dfe-80d1fce6a729", "sighting_of_ref": "indicator--72c49116-5fda-459d-be7b-6bb280ed80cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c29b9a4-0eee-485c-aa02-04a549047f8a", "sighting_of_ref": "indicator--f05031b4-40d4-4bba-a208-e944d9f26dbb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15b3595-48fc-40d9-9efc-f49eb804f5a5", "sighting_of_ref": "indicator--6fc52560-e441-4455-9bda-1a26048f1a17", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ab3276-dc08-4eb4-be7a-9f99f11abd3e", "sighting_of_ref": "indicator--0cc1aa2a-2361-4ff3-b643-751963ede5ca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ff1fa7-03bb-462b-9f7a-691504f60ea9", "sighting_of_ref": "indicator--d141087c-0508-406f-bc76-46c363ac66fa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--956c5169-8564-470b-9ffd-d755f8af53b3", "sighting_of_ref": "indicator--af089c4f-18ca-4870-8dab-28833cbbf2a7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd1ec2a-8c1d-4cbb-94e9-e7571c156dc4", "sighting_of_ref": "indicator--cd33ca4b-22e9-4e96-b28f-cb5fb7ce2745", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15fe2222-d043-42fe-a8e5-63206108ea72", "sighting_of_ref": "indicator--0ecef088-a467-45f9-a8b1-006911130624", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7a4af3-c458-4ae8-abd0-6cff891a7f15", "sighting_of_ref": "indicator--b0514cc2-8164-4813-840c-9a74824aae27", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03c0e7a-3ae6-43c7-8f14-644965ca3afc", "sighting_of_ref": "indicator--9dc57979-cd7b-4bc0-80fa-04005ac15418", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35399279-7303-44b8-b9c2-e84b2d71d2ee", "sighting_of_ref": "indicator--abc32820-19e3-4b08-9fc7-c94c0f06af66", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27134a1b-b195-4300-b8c4-2844d0f6b715", "sighting_of_ref": "indicator--8f00d022-ac8e-4c07-a2ea-b21f7ab08985", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c3857a-5606-4dff-b630-c5fd306bea4e", "sighting_of_ref": "indicator--4f762e1e-89ee-4bab-9ceb-b9a6438df74e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531c57f9-e8b6-4eaf-a162-33844f2cac5c", "sighting_of_ref": "indicator--d2dd5485-cb23-4b86-bf46-39e8e739544e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e2c12a-28d6-46cc-9862-0bd008acfa54", "sighting_of_ref": "indicator--68d13f44-dd6d-45bd-8d09-b81b602584dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac6076c-cf75-47d8-909e-01e71112145a", "sighting_of_ref": "indicator--8b5c9519-4ac2-47e1-9335-17b87e78a17e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--334ec563-5add-4d6c-931b-ffd92e5331a1", "sighting_of_ref": "indicator--9d2287cd-0f47-47d3-9376-43bf09ec4235", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc4220c-f860-437b-b948-6ee9d663f678", "sighting_of_ref": "indicator--c25b2cf0-72d1-48cf-b94a-d1d919b1e172", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e52e97e-94fc-40b9-ab1f-cd3e9fa6cd65", "sighting_of_ref": "indicator--ca2a1d4e-de53-483a-b054-15f1a86f8c53", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4242dd79-3b0d-4356-aebf-779df88e6bd4", "sighting_of_ref": "indicator--b176cfd4-e6eb-4eec-83b3-2cba8e835b14", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1738a1d1-e802-46f7-8003-dba401c54b53", "sighting_of_ref": "indicator--bc059d65-a0ef-4d3f-9016-699b73aad147", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df672bcc-47a9-45aa-aa5d-72a9938cffaf", "sighting_of_ref": "indicator--c5d4aab0-4806-4ef6-a001-ef718fedc75b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2434ce0-7c31-449e-9a7f-b93a9e258114", "sighting_of_ref": "indicator--f6ab0839-31a8-4813-a05a-55e22b2db998", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de6b16d5-e78d-42ee-97d5-871dd15e67bb", "sighting_of_ref": "indicator--edae0f4d-37bc-4279-8afc-0899ef3d651c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d556f56-733d-44ab-b2ed-46a4d4f817a0", "sighting_of_ref": "indicator--a3cb17a4-c98e-40c2-b7a0-f216cd37b07d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50aa6512-2a8c-4253-9309-1a17e4731a80", "sighting_of_ref": "indicator--683e46db-cbc6-43d9-9e82-01ef97a1a47c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b6cf02-e3ff-4314-b2b3-7e0b97bd182d", "sighting_of_ref": "indicator--d609b567-b953-4200-a4df-e38455e81010", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba981bf5-1ce6-4007-b2bb-37b436451ba3", "sighting_of_ref": "indicator--33f5d991-a3e8-472b-a5e1-0bbe99e5c9c2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76cecf56-d75c-414a-847d-a3ec670212bc", "sighting_of_ref": "indicator--4d66172c-c48a-4dfd-ad89-1a59b83decb9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16ee126-2b07-4467-97f1-d6b82ac2d0bf", "sighting_of_ref": "indicator--2234d69c-436e-439c-8e9d-d79b74c75cb5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be044d8b-24ab-4181-ac71-a0cfcf80d1a1", "sighting_of_ref": "indicator--6eb89402-b166-4f01-9b01-c5b814da6330", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7c6170-6ac4-452c-b9a1-747772341ef1", "sighting_of_ref": "indicator--65d05076-69da-41d4-9f50-98d6068e7630", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61da7de8-5695-4a17-b898-d7b720735b5c", "sighting_of_ref": "indicator--fc60185f-ef4b-4eaa-90c0-b52a3bbed549", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--867d9162-112e-4ad8-bd58-6bd8d107c0c0", "sighting_of_ref": "indicator--bf1dc385-3bf3-4a27-b26b-2ea85b7a0820", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f20405-7f49-4b7d-a4e3-4b30e22d2ad3", "sighting_of_ref": "indicator--4a335703-8031-4f5a-8397-09d255c98089", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8eef028-25aa-485e-9495-f945df1e2e11", "sighting_of_ref": "indicator--28af628b-48ff-4385-b225-874af134c855", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f30a7c-dc01-4c9a-9820-ab57f4ab6bbf", "sighting_of_ref": "indicator--2850857d-351f-4936-9e0a-5eb4a5174223", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e7ce2f-6161-413a-8dda-0c227eefc873", "sighting_of_ref": "indicator--7c741972-10a5-4019-b354-95ed9a0a2efb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6cc5de3-10cf-466f-a1ef-27855df59826", "sighting_of_ref": "indicator--57ec3b81-33d0-4928-8f91-6914feff69e9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed54c66-e0ee-4015-9576-5af7bcce3d01", "sighting_of_ref": "indicator--3d328b56-bf9c-492d-9621-5f68635448e4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a77ab281-276f-42c6-8a1d-20413900deea", "sighting_of_ref": "indicator--31e6951e-6ea2-47a8-862f-024b57384429", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ce37dc-6312-482d-a53a-3eea78e7bf0c", "sighting_of_ref": "indicator--c04a5b1e-b9d7-42e5-808c-929990c2bd4e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fccd3fe6-b5a6-4a43-9939-4093ce7724fd", "sighting_of_ref": "indicator--29db4f24-4e27-463c-83df-8a0944a4e2b4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d2bec1-870c-400c-8414-1626fdd3bd3d", "sighting_of_ref": "indicator--238dbd75-2aca-41b9-b134-998bf3cdf588", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c672a5e6-7e85-445e-a54b-7ffc90a7c066", "sighting_of_ref": "indicator--e16cc462-9bb0-49f1-a19d-ca2891b6660b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e3324f4-9550-4d72-8d30-1e08b1902b9e", "sighting_of_ref": "indicator--5d773f39-d5ea-4bcb-b3a6-a2695728aabc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d930516f-b4b4-4aaa-9301-594c08609eb2", "sighting_of_ref": "indicator--4e148f5a-2228-4b47-ba3c-41d93de37957", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f099220-acc3-48b3-b8ff-f8d88a7b392a", "sighting_of_ref": "indicator--bb63bf7b-26da-4ded-b95b-3932650f8f9c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190bada9-e8f8-4e39-ba19-05743bd93281", "sighting_of_ref": "indicator--037ba74e-f338-4ebe-b806-619c5a4211dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d02547-e1e6-49df-b580-68f003a4160f", "sighting_of_ref": "indicator--ccf7c482-ab75-4e14-a68a-3635c8f597df", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--931f7f16-a1fd-4695-a459-3ce237a21690", "sighting_of_ref": "indicator--b714d70c-def8-4ace-ad96-4a43c4af2d33", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102e610a-869f-4ff2-82cb-c1abd5d7ae10", "sighting_of_ref": "indicator--0c82f4b2-4b97-4400-a26f-3e86ec590571", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3840cbe1-c3bf-49c2-a005-245d8b551944", "sighting_of_ref": "indicator--d2b8aba7-b89a-42b2-91b4-c0c15bbfddc8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a8330e4-1451-4306-bc7b-74131ac77ce8", "sighting_of_ref": "indicator--2fa18df9-bacd-468c-8fd6-b6c0ff268f74", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548d2698-8d1f-4859-9cae-1e02038c7c44", "sighting_of_ref": "indicator--2894a4fb-d0bc-4b8d-8333-710d700bdbe4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46ae22d5-9626-4854-a95f-dcbb0c244fb4", "sighting_of_ref": "indicator--427dcba7-659b-4b33-9951-ede28541aba8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d43863c5-03d2-4c55-8ee0-30f5472bfee9", "sighting_of_ref": "indicator--0b363a00-531e-4a7e-8359-d38825ab3219", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf43894-c911-4d78-9371-e02a2296a3cc", "sighting_of_ref": "indicator--84f9bb4f-021b-40f5-819d-12672386e747", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00aa0ed2-53e6-43bb-9788-da5293659bdc", "sighting_of_ref": "indicator--beb9a957-ea29-4f5d-a840-c93e0380b5ec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2c3ba0-72e2-4952-b773-6799869d8177", "sighting_of_ref": "indicator--dd82e15f-9bf3-44e5-9c19-9c608baecc7c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62607118-3dcc-4da8-965a-4e47d733c0a6", "sighting_of_ref": "indicator--52044b6d-627e-4db6-8f45-26280db04991", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b179b604-deca-49f7-b126-bdcd43381c48", "sighting_of_ref": "indicator--54a807cc-8925-40d7-9d16-ace9680c8ebf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37c7443-f281-4af7-a2f1-89d556322085", "sighting_of_ref": "indicator--a77e0d02-6295-4a1a-82b7-136f11b3331b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c2b29e-72b6-4f43-97d6-9013232fadf2", "sighting_of_ref": "indicator--5f027b77-e259-4026-80b5-5fd68b43bd5f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da65ce46-c82f-4c92-ae84-5a82632b6573", "sighting_of_ref": "indicator--77064fb6-d1ba-4a28-a869-ab6036335f75", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b952fade-a93f-48d7-aea4-b5db92d20b8e", "sighting_of_ref": "indicator--b7ce34b6-16fa-481d-a7cd-241d0bc55fd3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c0336c-0716-486e-86ee-26f1c2966666", "sighting_of_ref": "indicator--1825b468-93a5-49a3-b10f-5cc52c98081f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752fff2b-6fed-4d21-82d1-894d950164b1", "sighting_of_ref": "indicator--9fab2c4b-a6a4-47d8-a08c-f33f1c18a269", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce592095-26be-44c7-9c39-049693dabadb", "sighting_of_ref": "indicator--e26b7a2e-395e-41ea-a559-eb837ec9b06d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a82af03-801b-4ccc-94c0-3d3a235beb65", "sighting_of_ref": "indicator--500fc890-b303-4462-a161-05130fb7eb72", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4edf4799-0c80-4d1d-ad07-9daf4e65a4ed", "sighting_of_ref": "indicator--01bfab8b-5766-41d2-960f-7b3a03d28414", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824b8fbb-4a30-4f1c-9bc8-e9c5eb101709", "sighting_of_ref": "indicator--64917df3-603d-466b-a2e4-1f2fbbc79b23", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48c8972-b17d-4378-905f-9c5a80676367", "sighting_of_ref": "indicator--6394dc63-6903-4682-bd77-b1c252439c1c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e45115c-78da-48e2-a448-ce114f1a3632", "sighting_of_ref": "indicator--42e2cca4-84e1-49e4-86cd-73061e5aaf3e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d76661-5a71-43b7-bd86-1ccb3336cb71", "sighting_of_ref": "indicator--086bd4a7-64ce-4988-99c2-db6481c92892", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a53706-04e2-463c-bee0-79bc04a64d20", "sighting_of_ref": "indicator--10d10852-5d42-4653-a604-b9dd3aa938c9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b31210-c045-4048-a756-1ed2b5a041c0", "sighting_of_ref": "indicator--1276aba3-5820-49ac-87cb-72b8fd4e2a4e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f30409f-bb9a-4839-a099-4ae2e2d0915e", "sighting_of_ref": "indicator--3c670d4e-6b45-46ca-8acf-0b663f513a74", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b047e93b-3623-415b-86ef-48aa16e086b4", "sighting_of_ref": "indicator--75444648-ce7b-4dad-9dbc-dce6957b6921", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1172a57e-af56-49c6-a962-2f630f275a72", "sighting_of_ref": "indicator--ae50c6ed-ffb1-464c-8ba1-0fceff256ef7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345219a0-30e6-471a-b477-104b3a202437", "sighting_of_ref": "indicator--7c751301-9c3e-4cf3-b2dd-07cf6aa1c9da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca375eaa-e9ce-4890-8184-95bee0b8c653", "sighting_of_ref": "indicator--5014af7f-95d7-483f-a605-d4eb4381a3ae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--519664d4-aca2-40bc-8440-1676e96725ab", "sighting_of_ref": "indicator--c0e3c746-c653-4354-bd4b-9f93cd62ffaa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb43503-12a2-420e-80a7-1a0e7f7b5d15", "sighting_of_ref": "indicator--ce7d41fe-46d3-4fcb-a8e9-7664309772be", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed1d03b-31bb-414e-b928-5dfda64161bd", "sighting_of_ref": "indicator--da0214b2-f083-43af-9d47-a6cf94ad71bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8158110f-b3de-48f7-a1eb-9c9353047275", "sighting_of_ref": "indicator--f98a9169-56a6-4c35-87d4-df38937107af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2820d66-053e-4517-85dc-7477bc67d3e1", "sighting_of_ref": "indicator--a96821c1-fd51-4bba-a46e-0361bfcdeb0a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cbc8676-ad77-49e0-9b42-82069f512b60", "sighting_of_ref": "indicator--244c579a-810e-436b-936a-50039c3cc5a4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950f84d5-f542-416d-b5a7-8fa396512d1e", "sighting_of_ref": "indicator--dad6f7dc-e157-45b2-a226-48e22ceef24d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f54ec0f-d12e-4033-99d6-9f9ccae9c69c", "sighting_of_ref": "indicator--e108c37c-47a5-42d2-bc02-a494a65f4f2c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5398eea1-be67-40ba-a034-2a29a92ebcfe", "sighting_of_ref": "indicator--4bb933d7-ff56-4779-a6ee-0c90768b777b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229ab769-7b26-4b07-b644-bdbdf463701a", "sighting_of_ref": "indicator--7cb040d5-c207-4806-a1c4-83f1d65d17b7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127470cc-9c17-4e4e-95b6-879f090a1f28", "sighting_of_ref": "indicator--3d2eef58-2a91-4494-b298-1a018466045d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf1d5b7-8595-45b0-bc92-67381d0dd4b8", "sighting_of_ref": "indicator--a19f4988-6975-49cb-8a8d-8cbd0bcfcda8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa077aa-b26d-45be-a46a-9703f76468d5", "sighting_of_ref": "indicator--20f0acae-4c13-4eb0-babc-78af379bf70d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e57490-8aad-4fd1-b3bc-597ae1c1a061", "sighting_of_ref": "indicator--1fe2bf43-d9c2-44de-ba18-952f355c3f8d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29fbf8b-7e89-42c4-8963-786bfe0eda97", "sighting_of_ref": "indicator--7a726a0e-f6da-4bfe-aea3-7d045a42b4cc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee1be45-56f0-4f13-84d5-015cba7a6eee", "sighting_of_ref": "indicator--e72c337e-de71-4009-b4f7-05d750fd6d02", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73679d72-8048-4227-8a12-9ee03a1bbd6b", "sighting_of_ref": "indicator--611f053a-f677-4e6e-ae5b-14eddfb14cf9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3207573-e3d2-45fb-aa86-a25cfd23423b", "sighting_of_ref": "indicator--36ea4bbb-88da-44b4-a581-0632da24e3d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e538d44-a089-4fef-93ed-38672e603bb3", "sighting_of_ref": "indicator--8f3f1579-0988-46c0-ab54-0fa978744bcb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156ead07-7910-4092-87cf-bd71d3d05cec", "sighting_of_ref": "indicator--b805d31c-0ae2-42a3-8539-a6ddf9489827", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a7b7df-16b4-4080-a7ce-b1ebfea373e4", "sighting_of_ref": "indicator--b45e136a-235d-49b1-8125-3a4f00b0df54", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f33cbf7-df0d-454c-ade3-0564a8da025b", "sighting_of_ref": "indicator--c9c2df2a-718f-4ef7-abec-cba4a19938aa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f3cdf7-4767-47a4-befc-bc3487b2540f", "sighting_of_ref": "indicator--e4650e92-ad5c-4fd1-9aed-1a1fc0c00290", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f273f5-ec4c-479e-9a02-7facfeae7c8c", "sighting_of_ref": "indicator--3e938b52-9823-4ce8-bd7e-2b5c6bc0277b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee72ac8-c5e0-4dbb-807a-c0deb7a9dec6", "sighting_of_ref": "indicator--55d3dc0a-ac4e-4b0e-8c5f-025f90f245bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95110bbb-62c0-4eef-a034-0107fe35061e", "sighting_of_ref": "indicator--a02588e2-5187-4830-85db-bfcc0a2c8993", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f4fe73-33dc-4336-8d7a-89e9a77e4cb4", "sighting_of_ref": "indicator--1f64df87-a4d0-4efe-8ca1-aea5b875bf22", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c97b53-2ac1-4473-818b-4118eb17d300", "sighting_of_ref": "indicator--c69ced38-e46e-4619-baae-5c3c74e5d53b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e06823-5152-4629-b296-a38398c1b0c4", "sighting_of_ref": "indicator--7b2f91ac-0784-49e6-b4b1-8c7988a1ce05", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67655c0-c983-465a-8634-f4bccd9f65f7", "sighting_of_ref": "indicator--a74fb518-89da-489e-a943-14adf3eeb93e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac61d67-3744-4237-aa4a-d8d338a8c6ff", "sighting_of_ref": "indicator--353ed3c6-0dd1-417d-af73-7e0f19dfbdd1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cbaaafd-0cc8-48f9-9cbb-4c8e6a4dd0dc", "sighting_of_ref": "indicator--103e113f-57c7-4e19-bf23-5c3f4a791345", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc571cc9-fd0b-4550-8391-5a16ae66c16e", "sighting_of_ref": "indicator--df5a8b7a-7e68-49fb-a073-6840de3d1c7e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f25431f-7c94-41f4-b5d0-3d33dbb6ead0", "sighting_of_ref": "indicator--c18adac9-8f23-491f-8d9b-deb0415bb4a3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685556e0-3d04-4a64-b0e1-c7746e51b333", "sighting_of_ref": "indicator--e7c8000f-f541-449a-adf5-310549d9fccd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d4c68f-4f8c-489a-9800-d30c943dbc8b", "sighting_of_ref": "indicator--107651ff-10e1-4bd2-9452-3aaeb6daf137", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17825a17-b13a-4cdb-bf78-7f53150af87a", "sighting_of_ref": "indicator--65febb98-c8bd-4c93-be39-1ba72559aaeb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1439d125-4ef1-4838-93ee-9e7e62a84786", "sighting_of_ref": "indicator--17091fca-c96b-4b8b-a075-b965ecb235de", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d7bc6b-9970-477f-bd4a-9a4ca00ef5c0", "sighting_of_ref": "indicator--a85abec6-7c42-400f-b863-aee2a4dde14a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4424d6ba-f967-4778-9cf9-5efbbe27128d", "sighting_of_ref": "indicator--7bec17fc-084f-40a5-8ed9-16a182d67626", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611cc1d9-7738-4f94-a2d6-dc0a536b984e", "sighting_of_ref": "indicator--450a457b-5605-4f26-8fef-4c7d1d45e471", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34089e30-a722-4713-a813-a3b93225de81", "sighting_of_ref": "indicator--55401cfe-f2a0-4e49-9fb2-7121c948ad33", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fcea197-9f32-48d4-be45-bdd6a09cb6ce", "sighting_of_ref": "indicator--0c52933c-c58c-4e33-93ef-7f36cc9052ba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35172770-e4f8-4d8d-a7df-04c7e4847dce", "sighting_of_ref": "indicator--f7136b61-726e-4b00-89b9-a181e8280a1c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b66f90-c455-465d-8003-60469212334f", "sighting_of_ref": "indicator--8ce0919b-7246-4f89-9388-f851f8d9b686", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fda9abc-38fd-4822-9fbd-edce470d24f2", "sighting_of_ref": "indicator--0efcc573-4fea-4c21-8116-3d2c5b5e906f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85eb5226-dd52-4e77-88e1-6b4d5346c052", "sighting_of_ref": "indicator--3f11f4a1-9788-4470-8f0f-08f69caa2bf7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e1b862-d4ed-4688-832e-2db0c23c4666", "sighting_of_ref": "indicator--888c9576-5a38-4750-a1bd-dbb4b4e330a7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f72a13-619b-4a99-9825-c52602ed6e94", "sighting_of_ref": "indicator--795af80a-2d4b-452e-b2b7-fbefa9f64645", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48502ddd-505e-4a18-89f1-7418bc56809f", "sighting_of_ref": "indicator--74164ffe-72f9-4d78-afd2-aaacaabf1eae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e13928-2436-40cf-82f3-5d8e84691f33", "sighting_of_ref": "indicator--807d1e49-b7ed-4ced-b188-f888ef49e40b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c92c68-6403-4b4e-b694-0ce9a1d96ba3", "sighting_of_ref": "indicator--b4d56720-50eb-4b15-8efe-4e26c1f7272e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d765fd7-2fc4-410d-8344-37beab1fd9de", "sighting_of_ref": "indicator--146c5767-0c59-499a-8787-204c19521983", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5c2f3f-29f8-4946-ba07-41332fd84b3a", "sighting_of_ref": "indicator--505cebb6-ef85-4813-ac4c-03df0291b8b6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b403cc87-1e94-467a-af6d-4048cdbb1e35", "sighting_of_ref": "indicator--dd97ac63-c19c-4c13-9c7c-0bbb96f89e9b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae42137-ef0d-4741-9b72-64065f5f7a03", "sighting_of_ref": "indicator--8b0f612c-ba87-47b3-a494-03b84810e62e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e1710e-92ae-46b0-abd0-8d9149bb8b8b", "sighting_of_ref": "indicator--167f3692-625d-49a6-a862-137c0794a0ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1e67f2-cb2b-4704-a894-ae1d2027c0e0", "sighting_of_ref": "indicator--f4d5b1c1-c841-4129-b624-c2d30758b701", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60594bc0-6074-45ae-81ad-028472424c81", "sighting_of_ref": "indicator--96f7ed05-fa28-47f3-9ece-ae2a40dd3611", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dce8f98-d664-4eb5-921d-c6de77483c27", "sighting_of_ref": "indicator--e6b7e6bf-d8e3-42d3-b142-8d4eb977d5ef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276a5e5f-c719-4c10-86ab-5b6e2009f834", "sighting_of_ref": "indicator--86ce6584-3df6-4409-842f-e5e85a8846a5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd26a7cd-1677-40c9-a7c7-9ff96d85bde0", "sighting_of_ref": "indicator--226e65ca-9737-491f-a8db-c69841da2fa1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d646ad47-87c8-4513-8c5a-4d1e4437efea", "sighting_of_ref": "indicator--71485320-0b16-403e-b391-4eacc69fef75", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a938644-0d83-428d-8af8-47606edf4d9c", "sighting_of_ref": "indicator--225f6693-b340-4624-bf00-2d7605371309", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca1bd0d-bcdc-47f1-bbdf-f76174f7261f", "sighting_of_ref": "indicator--0cd9f368-a098-4248-83b9-b9658c7d66ab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc1a7c0-a498-49e0-a49a-8543cebba37f", "sighting_of_ref": "indicator--1eb50a07-0a03-4f5d-9fd5-a86e45b62aff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ca421f-61ac-4215-89cd-298c32ca077b", "sighting_of_ref": "indicator--53205a7d-d864-4244-b12b-d1b0993dfba6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cfff63-c12c-4e6a-a7e3-d0568fad5415", "sighting_of_ref": "indicator--db7f122e-e6da-4b03-9957-2e73aaabc85f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cadb111-d5a6-4361-a73e-80af7226efae", "sighting_of_ref": "indicator--c8a647ae-fa91-438f-9567-19d0dc9d24ba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e5ef7f-a742-4b52-8daa-dd30e916f791", "sighting_of_ref": "indicator--425568bc-d5d9-4945-9faa-20d31729d3cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2264a199-3dc2-471e-9bc5-0def717f04a9", "sighting_of_ref": "indicator--9b3afd24-0969-443d-bda2-5cfdf84d6685", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1d4dbd-665e-4f46-b01b-e8b449a91f6c", "sighting_of_ref": "indicator--89f682fa-3dd4-4eb2-8fa5-04bf80d8d51d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39905f6f-a79f-47f1-866b-2d3f71745b23", "sighting_of_ref": "indicator--d67b1c2c-1288-452f-817e-e5a0733e0fc9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc34ad8-a43c-4bfc-9902-7304a74ec49e", "sighting_of_ref": "indicator--11c92198-e383-42cd-bb7b-b39917f89557", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57303672-50a7-4cef-b33b-20d03fe903ee", "sighting_of_ref": "indicator--360105d1-af82-4d24-93e4-6c7cf11d2648", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50bdfe92-42df-4fd6-9042-12f69a01daca", "sighting_of_ref": "indicator--aaaf07bf-2488-4743-9d77-0d1e1a1a826d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f43f5b-88b9-4543-b7be-07a9f5b7d7f7", "sighting_of_ref": "indicator--d4c21fe0-c9da-49c7-9d39-eb389ef2bd71", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1369503-d7cf-4680-8b22-dfe4179112bb", "sighting_of_ref": "indicator--4441c067-92de-4f92-9df0-9ba140bd9be8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a807ab-d5a9-4331-b7b2-e7191391a145", "sighting_of_ref": "indicator--58fd6b42-1653-4b35-ac09-218e2bc0c582", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c74e528-9c39-45c0-ac31-5e6472027c4c", "sighting_of_ref": "indicator--9bd2a49e-a0d7-44aa-9b30-5cfe481cadc1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c4dcce-7ddb-4fc9-ad68-657a0c1bcb05", "sighting_of_ref": "indicator--09cf7daf-ed76-48d1-ac0d-8c36ab213313", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5799f424-5605-4aa9-bbe2-cb040cfe326f", "sighting_of_ref": "indicator--40e19176-0ee8-4b39-87f7-344c466abeaa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--702d76b0-d6c3-4714-81b9-6d17287178a6", "sighting_of_ref": "indicator--ccbbe061-e945-472f-987b-e61cf2d1cc19", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207c15fb-20f2-4bc5-96e6-0b16b121a7ee", "sighting_of_ref": "indicator--e88fdfd1-1f68-448d-8c74-6e13e1b58de1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6131b3fb-8801-4f81-b1b0-f499113d0ef8", "sighting_of_ref": "indicator--9b1e1f61-38c4-4ddc-999f-280bbf8c9bdc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db83243-2359-4386-887f-c0b44419715a", "sighting_of_ref": "indicator--7c101de6-91b4-438f-a3e2-9c60d1944653", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff89fecb-940b-4d80-b543-41991eb89f37", "sighting_of_ref": "indicator--51af7eed-3f41-481e-9a61-8328ccf938fd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549d1fa1-e828-41d0-9af1-3b122ee00567", "sighting_of_ref": "indicator--0678ca41-c39e-418d-b2c4-484b3896e905", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6d13b4-f446-4c44-af1d-c06c3aa42d94", "sighting_of_ref": "indicator--fb7152e2-9e18-4297-88c3-d7676900e7f5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d8f1975-5b9f-4351-8295-7d201a9500d2", "sighting_of_ref": "indicator--4bfae729-9661-4ad0-a0aa-700d502b198c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca1e1f6-b4e3-4d25-9606-933f41ac429f", "sighting_of_ref": "indicator--49adece1-9ac0-44e6-8c91-2290088b4341", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--658db91e-978f-4915-b51c-04ae6b2c359d", "sighting_of_ref": "indicator--c8018e23-5041-48cf-8b3f-6c875e9556bf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2834b1f9-28ee-4d5a-badb-60642e7b7b9f", "sighting_of_ref": "indicator--602f2eb5-e934-4f75-a3ec-121a8ff57533", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5bc536-6639-41b3-9b16-fd553a6760c1", "sighting_of_ref": "indicator--228200cf-4f1c-42bc-a6ae-4036f0b65d59", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f404329d-fa3a-4a16-8942-a9be1e466c65", "sighting_of_ref": "indicator--f75a1df5-4429-4fd9-a518-778406f173e4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ff0d62-4f6a-4206-859b-2671f5645fff", "sighting_of_ref": "indicator--c2fe45b9-ea91-435b-be90-16ab4fa22ddf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4205695-0c96-4b0c-9cf9-1d8f37f5dc7f", "sighting_of_ref": "indicator--7ebd039b-34ae-4429-887e-951f06a28c16", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd45e505-d729-47cf-95bd-62961964e8f8", "sighting_of_ref": "indicator--675bf946-4d3f-4678-9c60-ba34e66aaee6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a17577-91e6-42f6-9ce4-825d8d30652d", "sighting_of_ref": "indicator--6f00cd2d-7436-47ba-ae46-95ef577c8d38", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965c0677-e8c8-4aea-841b-b767264235d3", "sighting_of_ref": "indicator--a443ca38-3031-4925-ad58-05b2d8cf9d12", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e2c6b9-0864-4044-bcbb-4517d47074e2", "sighting_of_ref": "indicator--5935f638-cb14-4814-902e-0be0d6692eba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe967305-663d-4913-9391-bd766269142c", "sighting_of_ref": "indicator--c4f938de-8319-4636-9cf1-267ec50e217d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0797763-ec2c-4e53-919b-813326c6164b", "sighting_of_ref": "indicator--14228868-9649-44aa-86b0-34fbe200c1b7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78aac82e-6a19-46b3-8caf-b0c57667ff51", "sighting_of_ref": "indicator--2ddbc466-9a7a-4f53-a894-48a1b3a277c7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1fb7af-09ce-4891-b3cd-0529558e7446", "sighting_of_ref": "indicator--fc7cbcf7-b867-464d-8b4b-9a45c46a475f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5db3011-de55-4fca-83a4-15cb76e99839", "sighting_of_ref": "indicator--48ca1d61-e314-46ce-8783-ecf7a5465c49", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681c9674-0ee0-4817-89c3-7b0d9dcfba6e", "sighting_of_ref": "indicator--40c0817a-c380-4495-83d8-dc521a71d453", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48024347-a67a-4b03-9941-627c8347626a", "sighting_of_ref": "indicator--ab2801df-d605-4a09-977e-b034a48c92be", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0d62e7-ba23-4454-b441-759a1e7179e8", "sighting_of_ref": "indicator--6c156f26-ab9c-47c0-8150-c39c097f99d6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ce0e5e-45b9-4bb5-a71a-19fde541342c", "sighting_of_ref": "indicator--9bfc033d-5173-4c82-8ddf-30832ed03ed4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc7f93f-d776-4e0f-bca1-184b5f5716b8", "sighting_of_ref": "indicator--45448a06-6552-4e07-956a-0578a278b0f2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d35141-12ee-4208-b639-059918ea7e42", "sighting_of_ref": "indicator--cfdc0daf-ae11-4fd8-92e3-36ab8323d4cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04135698-7ba5-4f9b-8676-43e9b052b866", "sighting_of_ref": "indicator--5e5eed0e-e8f7-4779-9bf6-8fa7f45cba7e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7068b55-cad8-41bb-9e78-a0b988bae214", "sighting_of_ref": "indicator--b908b087-534e-4e60-9769-936be9f78d8b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b1539c-2fba-47eb-8699-f3dcbb51f9ba", "sighting_of_ref": "indicator--89c5f0bf-3300-4d67-8a24-1d52b1a62ffc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5def8798-18f2-468f-a59f-198d061c61e8", "sighting_of_ref": "indicator--04fc56c1-b685-4988-b4e8-ccaf5ae9a012", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0978a6-2e9b-428b-8a3b-3dd1f979c498", "sighting_of_ref": "indicator--8159d84b-9cf6-4c98-9829-133120ff5326", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c41165-91c5-4c64-9966-bca5feccc369", "sighting_of_ref": "indicator--12be2a3c-4da1-4359-985d-ed9bd01c175b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6664da3-1d4e-4090-a35f-6f061044f568", "sighting_of_ref": "indicator--24b85877-a8c3-4833-8d15-70663517ef9c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de358d5-151d-47b0-ac04-979db634d2e8", "sighting_of_ref": "indicator--b87d459a-11bd-41ff-b9f8-192f96c6f9bc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a9aee1-92d7-4279-91a0-b6badcce3f91", "sighting_of_ref": "indicator--32007cd0-6d8e-4b54-b5c9-e0fc5a6a263d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b60be02-a996-4808-8535-95aa53f685ef", "sighting_of_ref": "indicator--9414eb51-3823-4be0-829a-3f5a59da10f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e4f09f-b568-4865-aaf7-bc2db7f163b3", "sighting_of_ref": "indicator--97004abd-0155-452b-8cc3-0711a3bd68ae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a6b065-2375-4d66-913e-e2d7422590e3", "sighting_of_ref": "indicator--b9cce9a1-9e5c-4b24-bae8-d8d3ca88c37a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a616f619-c779-45f9-8844-286e5e5b19f9", "sighting_of_ref": "indicator--e20fc257-6c32-49b3-b636-61e27d88a923", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8178acc-09a5-4ac4-baef-919bb7f43723", "sighting_of_ref": "indicator--2668400f-4cdc-43a6-af10-855d243a2af4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7211a35-3119-404d-a507-dc0774f43479", "sighting_of_ref": "indicator--cab47e0d-d226-49d0-bee2-8e0fff324612", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3e8c8f-0d36-4700-9405-3c9d1534aa24", "sighting_of_ref": "indicator--0aa2b92c-2e99-4740-8798-b6dafbd6536e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09711f1-2619-406a-a7ff-8e6c310c783d", "sighting_of_ref": "indicator--79dd770f-eed9-49d1-b8d4-3a4193134a41", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a59c05f-feb8-4ab2-b126-1db9decfdd07", "sighting_of_ref": "indicator--4ba90346-052c-450f-8388-e3ed328d29a3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a64367a-6864-451b-a8c5-178e1c07d502", "sighting_of_ref": "indicator--bc8816b0-e107-44e4-b850-7f40ec98e3c0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc760cb-4b8a-4ed8-a5d9-8a257e239e9e", "sighting_of_ref": "indicator--ceb68036-fe1d-4e6a-bbfe-74a6727d6d24", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41aa28c2-b441-4a18-a4b8-759028e7b395", "sighting_of_ref": "indicator--a995826a-7a91-4bea-86df-19f6de74b8a1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29674743-392c-4551-9453-c6127323b19d", "sighting_of_ref": "indicator--e6d42ea9-59f3-49be-9cea-02d77a4d1879", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a5940e-0a85-45a2-897a-5b6cbb92bb07", "sighting_of_ref": "indicator--5e218c35-61b6-4695-bedb-9e46e80ee7b2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be16d4bd-5b86-45ec-b048-3e1b1b8ecfa7", "sighting_of_ref": "indicator--cc337fed-e399-47e8-bac5-c515d2fbf067", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--199f0c1f-a383-4ab5-a192-58d47a97b1b2", "sighting_of_ref": "indicator--3e4aeb7b-dacf-47d8-9f77-2d6d8e4ca145", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8cfb9c5-f71a-4d1a-a566-0f32677ad744", "sighting_of_ref": "indicator--c79f0a0a-2350-4724-a0d5-050a536b96ae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20333c39-5dd4-4e36-95f1-757da9020c31", "sighting_of_ref": "indicator--8617bbec-224c-4dbd-b7db-e8f75af1e5d9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee944a79-8aa1-46d6-b59c-25972de37636", "sighting_of_ref": "indicator--95f69dc7-6033-4098-97db-272191bcc91b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be1ea03-7a6d-4719-a7ac-d47d7564e65a", "sighting_of_ref": "indicator--f62ec0fd-209f-4d5d-8c1e-937f8c0d5ae1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25206fb-cc8e-4828-a27f-ac5eecb806da", "sighting_of_ref": "indicator--87211ff2-1f30-4f45-a03c-1a1e1c3f33f3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5806a57-7b33-448b-847d-92dfb3aac1db", "sighting_of_ref": "indicator--7abbb307-afc8-4b16-aec0-9897c5dfca34", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a226d1-a7f9-4bc4-90e0-1bded0c37d44", "sighting_of_ref": "indicator--452df2d6-77e5-43aa-b9fb-a319a430c11b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1cc4732-53ba-4543-b4b3-a83e86850236", "sighting_of_ref": "indicator--881044ff-06b9-4f7a-90c9-c135271e8640", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7350741-102f-4b1d-a91e-b1cff4ba0a66", "sighting_of_ref": "indicator--3ece3f6c-fde3-4cce-96bb-aebe732685af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a852f15-ac1b-4649-846c-4fd96d9a3b33", "sighting_of_ref": "indicator--9392436d-cf7e-4752-ac78-472570d81d29", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55bd7bb7-700b-4152-8fde-a10e08676201", "sighting_of_ref": "indicator--96dbf88f-05c0-44c3-b366-eecca7b2cac5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba346466-5b55-456d-bdd2-3ac701f9b1cc", "sighting_of_ref": "indicator--6c25d599-3d94-4768-b1f8-68ed8c57f780", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf613e6e-c4fd-4cc4-96d8-e04f51506c92", "sighting_of_ref": "indicator--a1d579f8-f72b-4f2c-8abf-39001a792aaf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f8351d9-44bb-473d-a5c0-228aa835681e", "sighting_of_ref": "indicator--7c3e51f7-82eb-4bb3-8458-4f2034766948", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5bbf6c6-727a-4ea5-9f8b-b1c7d4b1f0fd", "sighting_of_ref": "indicator--4a8b3f7e-5a41-4970-80e5-903af410dd41", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4021d7-c9ff-4783-9345-24f24337888f", "sighting_of_ref": "indicator--b1640558-d79e-4e40-8383-ef3777dba89c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e583a7-9d56-4df0-aa11-4d00f6c3e1f7", "sighting_of_ref": "indicator--8c9379fe-2fa1-457b-a18e-582e151b29cd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb57dc0-f28f-4801-af71-46735a68beb2", "sighting_of_ref": "indicator--e3050c37-df07-459f-8805-584ab15f6422", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bec77b2-6894-47ff-9638-164005362d46", "sighting_of_ref": "indicator--0aa539a2-3d65-4e06-b3dc-11a10c9ee857", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21a7e34-2a9a-43e0-b9df-ed326dca61c4", "sighting_of_ref": "indicator--9b3e6092-c0f7-4765-a884-b90cfcd7b4b7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b7d6a18-519d-4fd2-ad56-4f735954612a", "sighting_of_ref": "indicator--b54af5c7-86d3-4b80-953f-49eb3517aab9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--389af758-1424-4739-9119-5c73a2ef6916", "sighting_of_ref": "indicator--249bd07b-38f3-4284-aa71-7e125b366947", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a0b801-03c1-47fb-b1d9-2fd9d24afbdd", "sighting_of_ref": "indicator--00a0e21e-c928-446e-a914-29106ce2efa2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e119ae83-5eba-4cb3-9618-468c8a2950bb", "sighting_of_ref": "indicator--7f662562-256b-46c7-9d1c-16140d7c4f6d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5cb0534-4f9e-4986-9904-d6661c8ae0cd", "sighting_of_ref": "indicator--c6665a07-87e2-4031-a423-5e5425637fcc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d14e610-490b-4c38-a5b4-986644fe2423", "sighting_of_ref": "indicator--08cac0dc-967a-4b55-97f1-5ffd9e59e445", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f981e9c-6684-4830-aa02-7e1448815274", "sighting_of_ref": "indicator--b27db15f-8db6-407e-8d6e-076e402c87ef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c898a9-1257-4779-bf0f-4feb5b806f04", "sighting_of_ref": "indicator--6bbf1226-c01d-4d48-855b-11ce69e2d762", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7998fb-7592-4485-a882-7cb2f215a8dd", "sighting_of_ref": "indicator--0046bbac-3efc-400e-a8c0-0a41959d8c22", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36fc159-c932-4496-b07d-bb70beec67e5", "sighting_of_ref": "indicator--aaca8e7f-f9fc-49cc-b979-fa8e7c017d29", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1db642-b23d-436f-87a8-fd91699d9ddb", "sighting_of_ref": "indicator--4ba38f93-01eb-485d-8ea6-84ac78afd096", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e330a96-99ed-44ac-8432-628b3df2c28c", "sighting_of_ref": "indicator--e7476390-8b58-4e15-b27e-7c52f900808d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503cca82-bced-4a88-886b-3f0b8f8ba7d8", "sighting_of_ref": "indicator--61f55113-798d-4d80-b18b-9e91f4a39fb3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d123b0-d69d-4d01-ac6e-3a0d475a9e97", "sighting_of_ref": "indicator--4f790839-5def-45cb-bfd7-aeba8970d5e5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab66a2f4-61b3-4e4b-9160-924d3fc26ca2", "sighting_of_ref": "indicator--811c1d70-1504-40ec-b902-279828020295", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef583601-5cfd-477c-8748-23de8671e78e", "sighting_of_ref": "indicator--d7cf0378-e368-4df3-b802-842597433363", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6ace47-b56e-46ff-97b8-34f9637a11b2", "sighting_of_ref": "indicator--a869e7b2-ac3d-491c-a6cf-d078c348ba0b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a474b6-43e0-4e2b-8960-fe1cd195aff7", "sighting_of_ref": "indicator--5264abe0-5d71-44a9-b763-e3dbacacf5ae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e9cb2c-6b98-4125-9bba-46d803036f36", "sighting_of_ref": "indicator--fc20fcce-4d6a-42fe-a68e-068436bc44f1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038007d2-5649-49e3-ac9d-409a4d14537b", "sighting_of_ref": "indicator--2cbe369d-6068-4b91-96ab-db8767857a8c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ebf089-b851-4e0a-9cc9-67e26a9ba8f4", "sighting_of_ref": "indicator--b3b76b0e-a9f9-4a99-b36e-5bc0d35370e8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40cf399-b9ea-4e68-9fa1-579203d96f30", "sighting_of_ref": "indicator--0b517d69-21e3-4c2f-b7c9-28a2fe75c810", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--749f5ae9-3676-4543-91ea-f92cd705dffd", "sighting_of_ref": "indicator--bac85de8-1e7e-417a-a744-ab3a0f3e9529", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f88b0f8-728d-42cb-ad80-970ecc27eeca", "sighting_of_ref": "indicator--91a61789-83d4-422f-90b8-4e21f8fde003", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c3cefe-764b-418e-85a5-aabb693c57b9", "sighting_of_ref": "indicator--37f0996f-8a5e-49dc-bbb5-d286ee30912b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f792b7-2270-46c1-8b2d-4b34f54eae74", "sighting_of_ref": "indicator--bfefd15a-6b17-439b-8f33-a9c9a409fda3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30fa40b7-f79f-4949-942d-125437c6c6e8", "sighting_of_ref": "indicator--55fa293b-112f-4d26-b260-6c5709534c6f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932dc188-adcd-4f59-975e-4687c65cbcc5", "sighting_of_ref": "indicator--bc69a25d-1b2d-4cff-8ffb-fce01934172c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c5b6a0-dbb9-4221-ba74-cd38a2315b14", "sighting_of_ref": "indicator--006741b7-dc7e-4b69-bebf-a0225763f368", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1e5802-1bf8-4299-b246-cd2b6abc0e37", "sighting_of_ref": "indicator--cb9432d2-637f-4fe4-bb64-a39c36a9838a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668c434a-58c2-445e-8d10-aac8e142cb06", "sighting_of_ref": "indicator--15266fe0-3a2d-4ad8-868f-f2593ac8dd1a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60983093-4e03-4ae7-bc22-f9a3f0773b7e", "sighting_of_ref": "indicator--72951523-0fd7-4c60-bd85-ea76abc46776", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a1b4540-b769-4930-ab63-332244d8edcb", "sighting_of_ref": "indicator--06911c60-f7fe-4158-98bd-57a557be03bb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f88791b-d84b-4874-989e-dc08ae6e62c4", "sighting_of_ref": "indicator--82e0e847-e164-446b-976c-f74ce53c505c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191bdc37-80af-4da5-9056-009280e185f3", "sighting_of_ref": "indicator--55dcc574-47bb-4769-9d50-c6c1176c1137", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3502915a-74d0-47d5-bb8b-71452fc63155", "sighting_of_ref": "indicator--d7dc3e13-c061-4f39-beed-17c19c2e76f2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ab87e9-f142-443d-8d3d-af309caaa654", "sighting_of_ref": "indicator--aa7220ed-010b-4c1e-b138-f62dafe6ae0c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d155e8-8ba5-4039-88dd-5d2a169612bb", "sighting_of_ref": "indicator--1b67046f-c1f1-4182-b093-8faea4ffd73b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647b2735-fee9-4508-8008-d366d757706e", "sighting_of_ref": "indicator--16633d11-c9ca-4b85-9041-a6c5bd4c54c4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70c0f32-5680-4874-9b8d-c8ff8e762e9c", "sighting_of_ref": "indicator--9db82b1a-07c0-47a2-89ac-5d21811c6430", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406af442-73c9-408c-8aa6-7af1fb3b3857", "sighting_of_ref": "indicator--4379ad50-acf9-41f1-b789-96ed711f60e1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b0ce8d4-eac3-4185-87b0-ec34686622bc", "sighting_of_ref": "indicator--12d629c0-5a67-4a93-bed5-f4ce94d1db49", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415c6d2f-2952-498d-8d9d-ef3be9319e56", "sighting_of_ref": "indicator--c88721b6-e1ae-468c-8f83-d0c7cb8c4ed8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a352ff-f2df-40b1-b6f0-378d058c28fe", "sighting_of_ref": "indicator--7604ba6d-3a90-4d2c-a404-4facd017f1b7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b18dada-c63d-4395-88df-248f4fd325b7", "sighting_of_ref": "indicator--b0c10341-638f-4981-991a-34f08bdc94ef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4eb5a1-730f-40ef-9fd2-a3e2c4a1a986", "sighting_of_ref": "indicator--f0f48ef8-1290-4a57-a442-589fc6ec530e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7807578f-4ca2-4e62-a4d8-8caa57ad282c", "sighting_of_ref": "indicator--bef915be-6fe8-4434-a1df-f09f145cce02", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23bb09d-96a0-45b0-98a1-6be195f371dd", "sighting_of_ref": "indicator--cc7ecb01-dfcf-4a11-b0ae-e8d53f8e300e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1abde72-7b2f-471e-9bcf-e95455bc1b08", "sighting_of_ref": "indicator--41f40086-60bc-484d-a142-cfd06f911206", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d908c5a-c25a-4a56-88ca-4125e68370b1", "sighting_of_ref": "indicator--62e1eea9-1916-443e-ad50-d34f95108e7b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29aba64b-1cc4-4ace-983a-949c00ddff69", "sighting_of_ref": "indicator--ae60f6c4-6554-46cc-935e-c81ccfb3f902", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412c9a66-db8a-4830-a115-3a972dce2cad", "sighting_of_ref": "indicator--12995fee-c0e7-4ce4-8164-669fc8a9e043", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e693a13-87f8-413a-9d52-cc93a4fd7626", "sighting_of_ref": "indicator--78101456-06d8-43b1-99ee-6762558f3130", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afe0f35-0885-44bc-acdd-eb32ff652f71", "sighting_of_ref": "indicator--cf308273-b285-4864-8e0e-ad3e820a5069", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e78714-5f64-4111-88ca-a516d2ce976c", "sighting_of_ref": "indicator--3c8e633f-56b6-49e9-83ea-068424a2e6e7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b0025bc-6399-42aa-8793-05cc122e572a", "sighting_of_ref": "indicator--58f4eba1-7f42-4bf8-bac8-8fdd64aac9a6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11942108-ccfc-472a-afc2-0b69b484f5d7", "sighting_of_ref": "indicator--64a5ba0b-ede0-479a-b5ac-89c0a48b9f76", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68dd429a-0584-47f0-a4df-c7246aaebcaa", "sighting_of_ref": "indicator--ea847a59-c840-485b-98fa-445064428e5b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29053844-ff10-4d55-8f27-612fe1de145c", "sighting_of_ref": "indicator--3574c099-e4b3-430a-b260-3886e4b58ee7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb33df9-f4bf-448b-83f8-736745b875ab", "sighting_of_ref": "indicator--04c3b338-b71c-400d-9104-a49a6abb464b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8bec92-1b8a-498f-a9a0-84bdf9f97da1", "sighting_of_ref": "indicator--b7f521bd-b430-4350-bbb1-11641bca2026", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf2646e-91e0-4723-9439-c1e2e7155f77", "sighting_of_ref": "indicator--5cd2e7f6-283a-4e7d-8d62-79880384a273", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e69d6af-577e-46fd-b499-e8e7612e892f", "sighting_of_ref": "indicator--28931b7e-18a6-470d-a3d6-ac8dbe5550de", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412cc237-70cf-4c4a-bf7d-4f1e74e77feb", "sighting_of_ref": "indicator--bd669fe8-e9b6-4f13-8281-2b31fc0a7a7f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8b9863-63ce-4cac-ae00-e26e7f8b6c09", "sighting_of_ref": "indicator--5bb8612e-f554-46a3-8d73-b2f76665a851", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad76abc5-9263-41c3-817b-97503db6362c", "sighting_of_ref": "indicator--3cbfaa54-81c2-4ef8-bdd4-ff56ac2e0059", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87bf44a9-c050-4bd1-b699-8f11c142ea42", "sighting_of_ref": "indicator--01f9435e-424d-4a20-92ff-a54bb0486b2f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f16d29-1283-4475-8775-9d582d5c2b69", "sighting_of_ref": "indicator--0a29bb29-e5a2-4ec3-a6d0-5ce52d58ef2d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13909e78-f52f-4491-bc15-5720b2af01d4", "sighting_of_ref": "indicator--19880408-2cfe-4688-9603-30b34410feca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade1829a-ae07-44f5-9ad0-0a6ca5b20fcb", "sighting_of_ref": "indicator--78382a0d-e8f8-42e7-a776-3da5fc4b2dad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb2f86b-7825-4023-aa30-97f046be7f2e", "sighting_of_ref": "indicator--9f2558e1-f1a3-4a68-8d5c-351c9c4eb2be", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d57681-7ae0-43d6-93af-54b928efb87f", "sighting_of_ref": "indicator--47a8a061-17a1-4aa0-9ead-c263ebfb7700", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5b4275-d407-4e93-b7c0-e8a7f7d130a0", "sighting_of_ref": "indicator--95f8e083-2d32-4492-ac5e-37e985ed2767", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6fae64-af52-4345-805a-4b7b43f45ff0", "sighting_of_ref": "indicator--7cfb657c-85c9-425d-a988-cc528943e828", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5346495-7120-42d8-877a-d06495575503", "sighting_of_ref": "indicator--2eaef677-7dec-492f-ac68-dd43bb7999a9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4198425f-d673-422c-b646-7b911e9492f0", "sighting_of_ref": "indicator--dfa751b3-a9dd-4058-ab07-85274cb87892", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349b0f8e-4057-4218-affa-d4c53e3bda67", "sighting_of_ref": "indicator--53ff27cf-df41-413b-991e-86516806062f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46d5fdc-6a63-4d67-a70e-9cfbdb2261e4", "sighting_of_ref": "indicator--fdeadee0-d6d2-4e01-94ef-84c42fea55c5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--577efb4b-29fe-4e3f-805a-f9b9f7aa355f", "sighting_of_ref": "indicator--9929f9e2-d3f5-477c-b154-430b02e97fd9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af79fa1-c897-4baa-8b94-d6ff3dde127e", "sighting_of_ref": "indicator--d976f541-7fe8-4521-9dbb-68e6c9f83326", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e65f5aa2-4dd0-4a65-8737-9f4b13bbbcc8", "sighting_of_ref": "indicator--850d7054-8e97-4794-aff2-a919116aee97", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e496c4d-0509-4775-8f03-40ec556a4be4", "sighting_of_ref": "indicator--624d14a2-58a2-4d5f-96ef-f6f626fdf4a1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcefe6ec-6143-4379-896c-26b521fd8d70", "sighting_of_ref": "indicator--d8fa76ce-93c1-44e1-a5e2-504aaeb563ac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e359201-1c34-4a98-9866-e32f2c5e6dc7", "sighting_of_ref": "indicator--ed8cdd47-ea34-4118-b71a-3e63d3366be2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a046d84-9fba-4120-85d3-7d30c819936c", "sighting_of_ref": "indicator--7e3840ad-2e66-4b6f-a1ea-cf6c5660e503", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73573d45-344f-4817-a940-3714823cde1f", "sighting_of_ref": "indicator--1f7d6436-c5fb-4357-8b49-c7dcd5056abc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55cf5b3-86a4-4366-8f39-4f7ad1843105", "sighting_of_ref": "indicator--49e592d6-b803-4c5a-953f-82cdec7a98f7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1fa76dd-1756-41d2-8e15-14235c191ab8", "sighting_of_ref": "indicator--ba05e0dd-14c4-41d8-a782-e70c2654d8ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d203e1c8-2634-4737-b7cd-40c99cc6ad39", "sighting_of_ref": "indicator--aa2d2d46-397b-48b3-9837-8a12071b4b73", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78d35d8-9868-4e90-aeb6-9969649f3fc3", "sighting_of_ref": "indicator--60a3c6d8-215c-4cfb-bd6c-e8c72e8f4932", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0591f8-4531-47f1-90a1-14cabf144427", "sighting_of_ref": "indicator--2e2ac9de-9d72-476c-bc56-b572b4cb7b1d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f572f38e-54ca-43c8-b3b0-13d273052cd1", "sighting_of_ref": "indicator--5cd10d56-0cfe-43b0-bb61-5bed3f594825", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419f2617-6910-4738-a0fd-067790ff0140", "sighting_of_ref": "indicator--f791c708-3916-4754-a57d-6a816d1b9668", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc50cf69-52b6-4638-8847-b7e602a20044", "sighting_of_ref": "indicator--4832debe-2c5e-4a57-a95a-b33c3961c11a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--445ec8e0-b8ed-415a-ba0f-5208d15bf554", "sighting_of_ref": "indicator--11ec137f-3957-41c6-88aa-3ee508607c6e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd3554f-6c88-4d46-bc27-b5a9a4c26a4f", "sighting_of_ref": "indicator--b66520da-8db4-4f34-8139-882e26b6dff7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f7a1fb-0f4e-4af5-abbd-6f7729f6aace", "sighting_of_ref": "indicator--d97eded8-b045-4937-a8b1-5c8ee8dbc7ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641de927-785a-4ed3-af7a-03a3f8d8a427", "sighting_of_ref": "indicator--0e5806fc-f87f-4f34-b82c-b03fc94e69d4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17fe131-b687-4b87-8a32-5800d31bbcad", "sighting_of_ref": "indicator--073146d2-6424-468c-a4b2-049e41be98a5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0293b480-7be2-46de-b615-65554102c06f", "sighting_of_ref": "indicator--4e30aa73-d278-40fb-b0dd-df61c65032b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d207dece-140e-4853-87a8-ad84c58006ef", "sighting_of_ref": "indicator--1b6bf73c-7739-4703-8ea3-095ff7956fdd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecaf2a57-633f-4f53-9b35-08a386a8893a", "sighting_of_ref": "indicator--48a0cca1-018c-4652-a760-c1d875f96bd6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed593ac0-8c31-432a-9b5b-84adfa6ab605", "sighting_of_ref": "indicator--c8360d30-4f3a-4855-9c84-0217da521391", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174626e1-500b-4fc5-b322-054ba9ce8ce0", "sighting_of_ref": "indicator--4237737f-9dbf-4fd8-8555-a164f18a7b12", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82bbdf48-d4dc-4bf2-9445-bf2f00b482f0", "sighting_of_ref": "indicator--ab59ac9a-d901-470e-ab52-5875be283026", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96bf24e6-fa42-48f5-be00-8caf73869633", "sighting_of_ref": "indicator--2ea091c6-7e02-4736-ab4d-c8ae80066089", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf6b12e-f103-4217-be9d-5d887449fe04", "sighting_of_ref": "indicator--60305359-60d5-4da9-a552-83aa95b69691", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da52f328-116c-4169-88fe-2480fd9e7b52", "sighting_of_ref": "indicator--a8dd8dea-266f-4ff7-abea-6174bef238f0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c16d77-8482-4179-8132-26c3a5cac797", "sighting_of_ref": "indicator--7651bea0-b301-43fb-bc16-8e2b656a052f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f409a0f-3a8f-4460-890b-aeebc5558428", "sighting_of_ref": "indicator--689c5c86-607a-4b47-accb-aa3b7f11dc06", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559fc877-2697-4dc1-8b01-a3130cb23f85", "sighting_of_ref": "indicator--618cc470-26de-4db0-a9de-9e2187ad89a5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c15c7c1-7913-46e1-ae32-65ccc24ee3ec", "sighting_of_ref": "indicator--1c093a35-a0e1-4983-b8cf-0a4885f802d5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5fe1a68-e4ca-46b9-bc7e-b732c2ed62cf", "sighting_of_ref": "indicator--fc117809-174e-41a0-b951-9fb991495cca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70cbe862-a69d-406b-b83d-b93daede0353", "sighting_of_ref": "indicator--5e884628-bee0-45f5-9f86-4076b61b9231", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8181a53a-7fb6-475e-8e90-4c223622f9f3", "sighting_of_ref": "indicator--3e39c0d0-ddc8-4cc5-a44f-092a9bad780f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ce2fa7-44b8-45b0-a7c4-29287d43ccab", "sighting_of_ref": "indicator--b2695b01-6b86-4c6f-bbbc-d715360c7235", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c09867-46c4-4c47-a19f-d97f4739978c", "sighting_of_ref": "indicator--ff6c4318-ba2d-44f2-ab36-97bb46bccc06", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf2fdb3-0ab7-4c47-8ba4-9b7ed399f94a", "sighting_of_ref": "indicator--f3b88358-b669-4e74-b736-4d90f5686c26", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f42b550-3f13-47df-ae95-374d08da6be5", "sighting_of_ref": "indicator--f7314082-36e9-4fea-a179-8f3d6a6b3e89", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf048959-209a-406a-bc7f-b3b903ebd5de", "sighting_of_ref": "indicator--2be27727-7a22-4213-83a6-c538aae1397a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c62b5cb-b1b9-4436-9529-d7f8fad591a8", "sighting_of_ref": "indicator--5e6f9e1f-9717-480c-9bfc-52533f0b0505", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0696c81-168b-4452-b5e7-17ca30ec9eeb", "sighting_of_ref": "indicator--46be11c7-de36-4ee6-b42f-e77b11be1109", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef733c7e-4438-4d85-90bd-16f182764f2c", "sighting_of_ref": "indicator--3c344682-0d96-421e-8104-17b35785f53f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f0d054-1f3c-4b9d-bad0-e07c69860cf0", "sighting_of_ref": "indicator--8c6e54d5-3932-4555-8f9f-ff3bda82771a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b99c12-ab13-44c3-abba-11f07251f24d", "sighting_of_ref": "indicator--7919d590-26c9-46be-885a-91bf90cf9155", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f43120f-0812-4549-86b5-2ea5aff268d2", "sighting_of_ref": "indicator--83e7d03b-3a71-4b1f-8fff-115f65b41349", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a5de7a-7f1f-489f-820a-c4a87fd168b0", "sighting_of_ref": "indicator--a5bf655c-7847-46ef-a7ba-5892d5059074", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75d71eb-707f-4da5-8bed-9ab26324279f", "sighting_of_ref": "indicator--1a79a78c-f335-41d2-9511-0c307a4674d8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c8d3ed-88bf-45d3-8d57-ccf157e0bc68", "sighting_of_ref": "indicator--d75428d7-d1f1-4147-9d93-bad9b6427420", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2028b5b2-0450-4599-a7e1-7027c1f1b6b0", "sighting_of_ref": "indicator--97a685a8-bba8-4b5e-8c1d-9e1bee316400", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3775ef9-9015-43d9-b481-484a99d3edf4", "sighting_of_ref": "indicator--ab92423f-e2f3-48ea-bc51-ecda490eb1a9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab95376-c0d3-4c7b-8a5a-37c45c2af3e1", "sighting_of_ref": "indicator--42548c74-9ea7-4adb-bcb0-9334c2dbdcf1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb38661-ac90-44d4-8c7d-6c2842a4db71", "sighting_of_ref": "indicator--1197bcac-9e17-43d1-b182-74a007ee36b6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c62a07d-1659-4f39-8ba2-3624a02381b3", "sighting_of_ref": "indicator--f16c326c-13b9-41fa-9e0e-1707d72fb033", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991597a6-6c19-42a6-a2ba-0c8ce2ac8931", "sighting_of_ref": "indicator--42e1dce1-a055-44c8-9bf9-af909b54fc6e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5703d491-e1b2-4cc7-9578-2888c909fb03", "sighting_of_ref": "indicator--c2f0d095-0860-43ba-8b23-40b4b46f96df", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c411ef-9055-4ac3-a4e0-f0f70707ffc4", "sighting_of_ref": "indicator--e67807a3-96ca-4160-8ea5-de47d71200d1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20377723-1d14-4bb4-8d93-ab8a50cd983c", "sighting_of_ref": "indicator--23015461-1ff2-4af7-9b67-d84c6a2a77b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5ebd16-3de4-45e8-9f87-9611a196e8f9", "sighting_of_ref": "indicator--a442c23e-b238-444b-a42e-7ba11a1fe2fc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db4ecf65-4978-4dcb-a087-a6cab51cfe9b", "sighting_of_ref": "indicator--4ecbd43b-87a0-450a-af6e-034872ca0082", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5b4cb7-19b8-41a5-bb58-26a251c613dc", "sighting_of_ref": "indicator--a657253e-1667-469f-a721-caa7e2d521cb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66efec63-8863-4c03-bc03-cbfd91407bc0", "sighting_of_ref": "indicator--7e0994d9-22a8-429f-a3e0-22e28e8dfbb0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15245a74-13b8-4d0e-8073-e714019397d8", "sighting_of_ref": "indicator--5d60187e-cab9-4397-9d55-3b01b3670867", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be355052-cd4a-46a5-a068-4868b66b638a", "sighting_of_ref": "indicator--795d92cc-9971-4c5b-b975-f455ec75c57b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4422bf6f-9a75-4a57-a3bd-3dc8f628a62e", "sighting_of_ref": "indicator--cdc8e48f-a11b-44cb-9b93-09a0a5611671", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2ce3b6-d88a-41b7-9688-f5ba15aea7e8", "sighting_of_ref": "indicator--10aa4118-1807-4243-bcf7-43795f623e3a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d394d8f1-3071-47eb-b330-ca12f6a7598e", "sighting_of_ref": "indicator--d23514cb-14ed-411e-b809-3e8026a8d70c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45eadc72-3691-4969-a898-ad34e5f31572", "sighting_of_ref": "indicator--caa15eea-7ca3-4cdf-9c4b-d15c41449142", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81fa3d03-e523-4f1f-91f2-1569ed25c310", "sighting_of_ref": "indicator--56cf6c09-028a-4591-9b16-8f46b5ba786f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d894a9e0-a2a8-4e30-bb08-4598b81c828e", "sighting_of_ref": "indicator--00f07eac-b25a-4ac4-b7ac-fb1d9a1a3db9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c10633-a35c-4ccd-b7a6-8906a0af2330", "sighting_of_ref": "indicator--db443fad-953d-4ed9-98b9-34a7ef32713b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26a1a2f-0e4b-46b0-b2c8-5a5f02b3644e", "sighting_of_ref": "indicator--5af3b8f1-dce0-48d7-bb7c-e8005e3b788b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970a0dcd-0fd0-41b5-b3ea-73bde21003ac", "sighting_of_ref": "indicator--e34cd4ac-a618-44da-97f1-ebe9553c51ef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb88c56-5b66-450f-8f64-153178b0e0a7", "sighting_of_ref": "indicator--2921d5d2-a130-4b21-983f-15c30ffa8926", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c736333-a358-4ca6-bf45-43194b76168a", "sighting_of_ref": "indicator--0d7db600-b3f5-41c7-afac-0c7a6c6418e4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a7623ff-f2a8-4d48-b05a-8ec8aada4e9c", "sighting_of_ref": "indicator--49c57066-79aa-4183-86a0-fc0570a0ce1a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48ddbea-27bb-4907-8a8e-dd1000a1a12a", "sighting_of_ref": "indicator--95b4bba5-3f03-41f7-b4c7-b4cb98435d51", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b5d271-81a7-4f67-b80e-ae022ff07cfd", "sighting_of_ref": "indicator--ea623f21-d3bc-416f-a44f-97e78c2f7f31", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1321ad9f-ba35-47bb-b016-8f005af3524a", "sighting_of_ref": "indicator--d72021c6-5639-4df4-a2ed-2aa62a06296a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e553191-0076-4494-a37c-b42b493a0d25", "sighting_of_ref": "indicator--0a68260d-e933-465c-a75f-f5a650027ba1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--506a14b6-1e6e-4def-8545-2dab8b9f500b", "sighting_of_ref": "indicator--acf42881-6e3f-42a3-beb4-95aeada987b2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a110b46-2920-4f5a-a434-e0c558ea392d", "sighting_of_ref": "indicator--338780ce-b024-49f6-b016-5e55a5541db2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab52cf28-43e9-4579-abc9-88befa364943", "sighting_of_ref": "indicator--d7eea531-9602-4d08-93dc-b2711cfd3347", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc39467e-afe5-42aa-8cc1-2051b4d60712", "sighting_of_ref": "indicator--f0f42a4f-794f-43eb-9666-4291d46fc961", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2765ed1d-232c-4ea5-be6e-02ced1a17278", "sighting_of_ref": "indicator--bb32bf97-cb9c-4ef7-9de3-e4960d0f6e0e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f67a1e-88b1-4071-bf7a-9b22965437e4", "sighting_of_ref": "indicator--a9bba4ff-2071-484f-9e3d-e75085e5dbdd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f450aa8f-e99d-457f-9466-736eb03207ac", "sighting_of_ref": "indicator--05e634f1-bcad-4a6f-9f88-d5582893bdb5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8ed0e9-4497-4896-ac5a-f305100ed8da", "sighting_of_ref": "indicator--d6bb5d51-368e-4896-b5ac-d1ca667ceeae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71467b16-6c93-46f0-bfdd-c7436661c923", "sighting_of_ref": "indicator--4daea610-faa0-4ca9-9fc3-a038cb705053", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6db951e-9657-4ea7-ab64-c6b59df2f75a", "sighting_of_ref": "indicator--d5c496da-9e78-4708-b214-45d07f64bf29", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e1bc42-d900-4e18-adf9-15015a84124e", "sighting_of_ref": "indicator--8c15fef2-6328-41c1-ab73-567cbc3f59ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047ea131-303f-439b-9aac-07f8249e4e55", "sighting_of_ref": "indicator--a239c22f-4b74-4b1e-8546-bc7cf24c4fa1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b8bdfdf-b494-48f1-9439-df82beae5d5c", "sighting_of_ref": "indicator--acbf9fe0-8de5-42e9-997b-771ac95f012f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5870396d-6837-4feb-b594-c62a3d21052c", "sighting_of_ref": "indicator--25be2b9b-fa8a-49dc-9ae2-d8bfe8b08d54", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba6fb4d-8fc9-4f33-9535-5733cdac30da", "sighting_of_ref": "indicator--98002d7d-fd68-4511-b99e-4244f84ac788", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48518643-a72c-4c7b-8a0d-1a0a7f42fc5f", "sighting_of_ref": "indicator--942f8965-b7b5-4524-a281-54c63b289298", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977ee7a8-aabd-4919-85b4-31395b81f336", "sighting_of_ref": "indicator--896c47d7-df38-470e-a527-88bff600c128", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffecdf8b-1553-47c8-a6dc-b240cdea01bb", "sighting_of_ref": "indicator--99b06cbc-bd44-485a-b2d2-531b26fd33ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7a8c47-a190-457e-a822-06e8abe98310", "sighting_of_ref": "indicator--d8eaced3-e9b0-4e53-a3d7-308c5f55f8b7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb3f145-1686-4678-b382-c2a0f0d9406e", "sighting_of_ref": "indicator--cd24b2a8-c1b8-4e3d-aa7b-dd2fffa9a847", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50788f4b-8be3-45fd-8e3a-453235940ac5", "sighting_of_ref": "indicator--12c3b8ae-6e25-4deb-89ce-a478ee056be9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc26ad2-ff7a-4e4e-a5da-5697e8bbe1bc", "sighting_of_ref": "indicator--a25f93ca-b560-4566-af54-15fd85d90e8d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9967bf19-cca7-481c-80bc-b852214a72e4", "sighting_of_ref": "indicator--cb2c88b9-c32f-4458-8c7b-d77e5248d613", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef5c892-3aeb-4e89-8294-6224756781e0", "sighting_of_ref": "indicator--5e992dd8-616a-4135-a478-8f1f7ea5f400", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323d1eb3-a020-4b87-ab7c-6056ee431e86", "sighting_of_ref": "indicator--80725cb7-ce8c-46ab-87b2-cb68831bc7fb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a38dc88-95da-486d-be8a-7118141ab464", "sighting_of_ref": "indicator--e6670582-dffe-4590-ab79-b245272db1ff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47a8e2d-48a0-4b22-9c8f-2119ea99b22c", "sighting_of_ref": "indicator--3b6c3d04-3846-4b74-a98c-a9592c0d4868", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5cb124c-a98e-434e-ab42-4ed494b20b54", "sighting_of_ref": "indicator--9dd7e33b-16d8-4611-a8de-a97497d5fcee", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c396ab-b1b1-448e-a922-d4a0866fb225", "sighting_of_ref": "indicator--04af156b-4e1b-4674-aed8-7a52dff91328", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd00cb86-8fb3-41a8-b75c-10ddd52ec24a", "sighting_of_ref": "indicator--20ff51da-437e-4760-8a43-272f9c5f8b18", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d78be1e5-fd63-466f-83bf-9a503f7625e1", "sighting_of_ref": "indicator--b1094dcb-4aae-4d54-be80-c43bb6cb701a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb4b34ec-4bee-4c6e-a6fa-ab525ae79e63", "sighting_of_ref": "indicator--bfa54c81-0c1a-4b21-b967-fd5759f6ba05", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21fd046d-7ff5-4902-99c3-f5f834e8acdd", "sighting_of_ref": "indicator--96875010-e486-445d-85bf-340195dae5b5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79339788-fc00-4811-8943-73c7b77bb041", "sighting_of_ref": "indicator--2b51b4c5-9c3b-4ff0-8477-9821885145b5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7fa15b-2cb2-4818-b13b-4f8d6a0399f2", "sighting_of_ref": "indicator--0f1c88d2-a751-40ca-a052-1fed40df9f1d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ad2e6e-8f16-4b45-850e-9c537ab5b0e8", "sighting_of_ref": "indicator--816e4845-e7c3-4663-aa86-2bf1e4ae3f11", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4136583-9461-43da-a512-e610ee74a861", "sighting_of_ref": "indicator--857dc431-8a70-41ca-bef3-db456a1bfc5f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15cee4f2-148b-4198-a9af-29694dc02a12", "sighting_of_ref": "indicator--d5969189-4758-4e03-ad54-492087403f83", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16693f0-dff7-48db-8993-4ce60319b607", "sighting_of_ref": "indicator--f34e58cb-e7b0-499d-a215-b8b9dcbd2be5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7127bd4c-2f84-4ab6-83cc-abe93ddb4dbf", "sighting_of_ref": "indicator--50a04d5a-c220-47a6-a9bc-c52a65fd7b89", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf69d27-b49e-4471-a9eb-a1185a5c92b1", "sighting_of_ref": "indicator--e32cf348-c71a-4e6d-a8b3-7721937b2413", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3dd01d-9f98-49d3-b86d-485a7bc78d91", "sighting_of_ref": "indicator--d73ce0b6-ea72-48e6-bae0-23422d3b8b95", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa78900-7b91-4db4-ae29-cabee4897d9f", "sighting_of_ref": "indicator--ef7675ea-ab6e-4dac-afde-885ea797a572", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70aa40e8-52ff-4caf-911d-060bf8a9889e", "sighting_of_ref": "indicator--2a17f4ce-2372-431b-9b02-eba6256b3c09", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23713eab-e826-4733-9430-09eb545c9d7c", "sighting_of_ref": "indicator--5e3218f4-9933-4433-9bf2-04b9a4fd0802", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--744d0d6b-82f0-4d22-8633-3e8e935a01a7", "sighting_of_ref": "indicator--85d2fedf-33f5-4dac-b5f9-b36cd2590711", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9235315a-7d43-403e-940b-81a345b2c1c4", "sighting_of_ref": "indicator--a51c0abc-cfc5-4efc-b563-068f045f88b6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8ae3c3-7866-44b9-9e64-b78c99bbc70a", "sighting_of_ref": "indicator--9a47e8b8-202d-4ddc-ac97-984d53feb50c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0f0dd3-08ae-42c3-b838-e7ce3ce431d1", "sighting_of_ref": "indicator--c5acd686-cf51-4e6a-bd0b-66747826999f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd063fba-19d5-44c9-a01b-db46d96abd69", "sighting_of_ref": "indicator--242599f2-64df-4f9f-bc6d-89d0344b3846", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea87255-91b0-467f-ae8b-8e186e33d5fe", "sighting_of_ref": "indicator--8b1e6e1e-e1b7-4a8a-92ef-d809b54d11eb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6786b61-571e-4cf7-9e0e-ad5dceffdd24", "sighting_of_ref": "indicator--20042415-f88e-4990-9519-932a4e4a556c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521f9863-1976-4431-8f65-ce39caa9601d", "sighting_of_ref": "indicator--287deb33-4b77-4e1b-ad51-3cb963e58522", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6bfe60-37ff-47a8-b415-07b9595803fc", "sighting_of_ref": "indicator--c493145d-aab6-492d-919d-8143dbfa8052", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d21ce1bb-b6b2-46ba-8bc3-0b317ef976c1", "sighting_of_ref": "indicator--58606346-36a4-4a3b-ab3d-4238a748eac2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8961b02-5931-45a7-99d7-496a1fd9cd7f", "sighting_of_ref": "indicator--ace66373-b445-40f4-a647-56e1465a9c77", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e65358c-d1a0-4834-9be3-6bf46f31fb18", "sighting_of_ref": "indicator--fc506f3f-569f-400d-8db5-47ed1e121b6e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7b2496-bfef-4e4d-bdae-2d00429ece1b", "sighting_of_ref": "indicator--d11cd25e-333b-4305-bf1e-34e83934d96c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1c6488-f3de-41ab-ae9a-dfa4d7ea3a6b", "sighting_of_ref": "indicator--e1b71dbe-562e-4313-b306-fbc518982b2d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe67ddc-482d-4a17-8760-eb1c91174104", "sighting_of_ref": "indicator--a26a3791-98c7-46e8-b5ea-18b4607ed551", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11cc173-5b17-4475-a990-5e6df950b053", "sighting_of_ref": "indicator--4c4e408c-eb6d-4f87-b342-b4a47d97ffd0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb131c7-abbc-457b-b4f6-ee639777f2de", "sighting_of_ref": "indicator--3ea048ae-cb94-47e5-a109-175282641476", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc100f9b-b43b-47bd-aa48-a314afcb7a7e", "sighting_of_ref": "indicator--afc3beb1-d357-4678-b839-d518e259f8b7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f9e789-b378-4b31-83f5-828ac858f2a7", "sighting_of_ref": "indicator--288c5e7f-13ec-4431-984c-6421d329e179", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70eee5fd-ac1e-46a9-8fc5-4e94723ea936", "sighting_of_ref": "indicator--a458b258-a064-496d-8490-7cb344e267cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e57cf52-6177-4df4-9378-e56eab61ed8d", "sighting_of_ref": "indicator--e4ee0b65-dbc0-44e3-8265-fa3498e1fa80", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0cb70d4-7917-4e41-9d3a-63b8b72c1af5", "sighting_of_ref": "indicator--ab824fa6-75de-4d08-a65f-70e3055645b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99d2877-b516-4c69-a446-d7e6e701bf29", "sighting_of_ref": "indicator--5d90db80-96e3-43ee-9ee9-c6b21ed365df", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaff5008-2edf-4f52-b255-94633f46f3e2", "sighting_of_ref": "indicator--907c19a1-1c97-4baa-a0f4-85cccea0daa7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc088acc-91e1-47e3-90d0-cb09f3e43a06", "sighting_of_ref": "indicator--c7212c07-5ad4-472e-b51c-bfd1d9230367", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28aec7a6-43fe-43a0-bc60-a61f08581170", "sighting_of_ref": "indicator--c9ef960f-3ad5-487c-9008-39d0b173246b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0f4b23-067c-486b-bea2-920d301f36a1", "sighting_of_ref": "indicator--da280c0d-d1c1-42dd-8e8a-e1690a74b314", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8868a38-3fed-49aa-8fae-393645e5a51c", "sighting_of_ref": "indicator--b8ace936-0221-402f-96bd-ae0e447cd9ec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ccdd5f-2e53-4962-9157-ae0c429fef1f", "sighting_of_ref": "indicator--75f640a0-90fb-430e-acf2-4108e2656f41", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097a4238-088c-4f33-bb98-32af231d412e", "sighting_of_ref": "indicator--1805504c-90fa-4f9e-9ddb-1e7b3ed373e5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d39bd0ff-a646-44e7-a0b8-8c5b718f6d96", "sighting_of_ref": "indicator--f2bcca0f-943e-4f5f-af80-cc15e49af9ac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea8c8b4-500f-462e-85b6-0b20fa139a38", "sighting_of_ref": "indicator--d6801ae4-ff13-423e-9d8f-5048e9768c35", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--220ea470-a22c-41ec-a231-d01cb55db536", "sighting_of_ref": "indicator--425a7dec-6a6a-45fa-953f-2add56eccec6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21308a0c-5071-428c-b073-fc9faae851eb", "sighting_of_ref": "indicator--7e0ee1b7-ea5d-4c1a-9b94-f635d0964b83", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29dbb563-7f06-41b2-90f3-e2dca44c3a02", "sighting_of_ref": "indicator--17753119-e4e8-42e7-82ad-b45b936d8546", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b5189d-05fc-4093-88db-51bd7f678a2d", "sighting_of_ref": "indicator--cc61f2c9-3606-41e3-a92e-42b86a67752f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e5b267-41a0-4564-b447-abbba290397b", "sighting_of_ref": "indicator--024f6ee2-225b-4cca-89ff-8af95d4f2884", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--649c413b-5199-4c5f-a6b1-c0802c7a6582", "sighting_of_ref": "indicator--00df2b21-4c4d-47f9-9dc1-d61d9cbb2ae6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9711a2-4b96-4533-81d4-aa0fe59dbf56", "sighting_of_ref": "indicator--69a5eda5-7cde-441b-be1f-1ba40c829a2b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a29783c-8499-47ec-b187-3af074445906", "sighting_of_ref": "indicator--654c09f0-cf45-4f8c-93a9-418b1e173241", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165156d2-8f82-412a-9ccd-f167c5866680", "sighting_of_ref": "indicator--32595826-b62c-47ee-9096-43ee7df1d8a5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c99d6f-f75a-4006-a244-defbbee9cf54", "sighting_of_ref": "indicator--5edef546-0516-4143-8532-ea00572dcec0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8357ce-5f86-4614-9096-bf9fa7935007", "sighting_of_ref": "indicator--ffc77e9c-8cf2-48e7-b5f1-5fe64b55660c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51aed120-e6a4-4026-b872-d188b0090770", "sighting_of_ref": "indicator--72049480-01d6-48fd-a1c9-ffd50e556946", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00da13d-3ef8-45a5-adc8-541b34bcf771", "sighting_of_ref": "indicator--d9778dbe-8b20-43c4-8a14-eae408f6e920", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a787a0eb-f53a-4817-931d-79542a644570", "sighting_of_ref": "indicator--64e14402-29a2-412d-895c-c5da74c2510a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2db8b67-253a-4c69-9ff8-30980c58f228", "sighting_of_ref": "indicator--80821a7f-7a12-4c1e-a2be-03d9fe2542cd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5342896-857f-4374-b4d2-d768f9395729", "sighting_of_ref": "indicator--576920ea-f4dd-4d71-b2b1-c94e8b952fdb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12eb9ad7-ebe6-4fcf-83fb-c9e605c451fe", "sighting_of_ref": "indicator--fc61d05f-bfd8-4994-80aa-43c8bd3bcd7e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b1b296-cffc-42be-945d-e72f756484d4", "sighting_of_ref": "indicator--832ce27a-e2e2-4f56-b334-88b5451a3925", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ed6629-ae33-41e6-bff0-8302159e433f", "sighting_of_ref": "indicator--b5e98441-292a-461c-98de-8ecb59ef5adc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b245cad9-5e9c-4b4f-89ab-607aa4316efd", "sighting_of_ref": "indicator--66cc84e5-4979-40c1-ab7d-302cf3cd1f65", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84643707-61e2-4dc4-8df6-e6f88aa7afe0", "sighting_of_ref": "indicator--a82aa62d-c679-438d-be7e-c7e938aa7bc0", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b30a2d-6745-4820-871c-e3f25893b5bb", "sighting_of_ref": "indicator--b7f95432-cd19-48c2-ba12-7d7c19fc56eb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a907928-9e26-4d80-a38e-751918682371", "sighting_of_ref": "indicator--0f197d3a-81a9-4b8c-a6b3-8bf97cad215d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b28b178-cf9a-4578-a703-f8f1f5a19142", "sighting_of_ref": "indicator--90736309-8242-46ba-9d66-96c665fa40b4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4d80457-a2a1-4dd1-a072-a99871e1f8b1", "sighting_of_ref": "indicator--a6d2a63d-d55a-485b-8ed7-8c249f94d1ed", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0218c974-7a7a-4455-8d3d-d8886618f85d", "sighting_of_ref": "indicator--ed5c4d3c-1561-4493-88d6-3b42483f891b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96dcb30c-b3f2-4e1b-a594-a42588963d86", "sighting_of_ref": "indicator--80f64c1a-e4d6-4923-9e75-cf3b6b46babd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bca9c9b-0983-4a5f-8804-0c79acc86a0a", "sighting_of_ref": "indicator--e0570230-fbba-4993-ace6-d74dfc92c1d2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58bf8c5-f4db-4df5-8799-07bedab35e3b", "sighting_of_ref": "indicator--3ab6e9a8-321f-4c82-88ab-7a3eb1e1590f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d9bf0f-3a99-46aa-a64c-ca1a30587d43", "sighting_of_ref": "indicator--2929dec6-da86-4914-bde0-247b984f9269", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b45b261-6f4c-423a-b640-23dafe606ebc", "sighting_of_ref": "indicator--c70a637a-3f88-4ba1-a41a-0c9a22788afd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca942bf-a4be-447c-8211-65e882f95c87", "sighting_of_ref": "indicator--7a250608-b511-40f5-bac4-4619c5100191", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c7252b-7422-49d8-b5b2-75fe0953375b", "sighting_of_ref": "indicator--fdf1f659-bb88-46ac-9ba2-c68d30810a0f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ef4e67-5d20-499b-a2a1-8c67d04a7ef1", "sighting_of_ref": "indicator--871392de-54d3-41cd-b8ee-487716d37408", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19cf6bd2-08aa-4686-90e3-f57bd0df15bb", "sighting_of_ref": "indicator--16d7e6a1-09fd-4dee-81b0-133ac11c7c03", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad879c3-e966-4732-9bed-2d9c96eb20af", "sighting_of_ref": "indicator--f46f77d6-d212-474b-812e-57dce6b92072", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f70e72-803e-4d6a-8bf4-940469494e91", "sighting_of_ref": "indicator--c30d73d0-43a8-427f-9dda-4b03104e80a5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be315b4-30cb-4420-99e9-cfcf41770035", "sighting_of_ref": "indicator--05d664f2-24d7-49e1-ac48-3a02010c1c15", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d551f2-74b7-46a2-90b2-46033ac6a12d", "sighting_of_ref": "indicator--d7182199-fa56-47ed-8162-ec7639c847f6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98884a00-8510-48fb-bc78-36aa374fe3de", "sighting_of_ref": "indicator--10063ea9-a450-4e0d-9a55-1a7f22d6c943", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4eeaae0-6ad9-4552-aed6-56005719e01a", "sighting_of_ref": "indicator--fc21ecd8-bee3-4fb4-b961-17b8b0cfaf50", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7328d7-9315-4831-bf54-c2e0860b28ca", "sighting_of_ref": "indicator--84a67fb7-fa35-4fbb-a2a8-a2442b946cbe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65944ff6-5e0c-4bd7-800a-781b022db997", "sighting_of_ref": "indicator--34d78356-d9ca-4734-948f-9aaa18c8acc5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779cf2e6-0581-405d-afee-5585fbc9ee3b", "sighting_of_ref": "indicator--7cca35e3-3805-4f81-88ef-87dd0b6a2517", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b02b5e-b3d0-4133-8003-de60563902b0", "sighting_of_ref": "indicator--01e8b62f-de2e-4ba0-865e-dbb83b8ca048", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53aa1ef-6237-4ef5-807d-479d06221f32", "sighting_of_ref": "indicator--88a8b8a6-6dda-4903-9dc5-1536395251e5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef97e68-9216-465f-9937-283314804fd3", "sighting_of_ref": "indicator--466c8ce5-9dea-4ae8-87d3-56bb71c8232f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5374ec16-2b42-47a1-8579-4578490c77c1", "sighting_of_ref": "indicator--d3cad18c-d1c3-441d-a76b-bcbd1155f072", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5de32b8-75c3-4a2c-b9ea-a5bde1ca0f0a", "sighting_of_ref": "indicator--13e3fa03-95d1-418a-8ef3-8183f2ee6917", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e6031a-b3c1-4541-8f06-c808151a48c5", "sighting_of_ref": "indicator--09843fcd-8317-4e1c-953c-2fdf776127dc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0296520c-5c25-4bb8-93c2-021fe3a9b8a4", "sighting_of_ref": "indicator--59e3b9dd-0b44-4686-b818-75ffa683a41f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057e74e8-7379-462c-bcb4-cafd2d249dcd", "sighting_of_ref": "indicator--60f8f8aa-229f-403e-8236-d9f515969ef1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66d2794-367c-4b06-8d19-0e7b5783c278", "sighting_of_ref": "indicator--97ab190b-c615-47f1-9de1-586217ddbcbb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc97153c-c910-4277-b975-6cc81eb4b4e8", "sighting_of_ref": "indicator--7ebcf417-1b54-4250-b3b7-6318396364d5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3495905e-b775-4a2f-ae0a-cda8a290e997", "sighting_of_ref": "indicator--6e1ab042-5a01-4de0-a50d-fcf2004e6e9a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9b5e00-a5e4-4ef7-86e7-0373c865768d", "sighting_of_ref": "indicator--7bfe8bcb-7653-4507-9065-1c112c45bac8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6fd4c2-9861-496f-81fa-13b3d2e16980", "sighting_of_ref": "indicator--a84d6da5-2f0d-40fb-9163-3d71cb7f71f3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc9c859-ae01-4a77-b19e-7c6e85270663", "sighting_of_ref": "indicator--065b06a1-319f-4b74-b9dd-7d5973fc8059", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc767674-efc5-4c34-a35a-40ac7e979eed", "sighting_of_ref": "indicator--46066cbd-d6fa-4e58-ab51-56b1d54d7192", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace5b4fd-96f4-4e8f-91b7-b7916a652a72", "sighting_of_ref": "indicator--9a3c91b3-1ee4-4a3b-a223-c134fd948c76", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd53004-daf4-4084-a2c6-998e4870afa8", "sighting_of_ref": "indicator--4dd49475-0c6f-49e5-b475-aa912cfdc494", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754347ab-009c-4c1e-b3de-2e5711a7de78", "sighting_of_ref": "indicator--a60fc6da-ea73-48e0-bcaf-a02dac3b4096", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2c67ea-d2ce-4935-a345-f7a906ed2841", "sighting_of_ref": "indicator--df9ea022-b648-4e59-ab22-d18d0b3d13cb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a94f076-010e-492d-9c49-3e7e5540856c", "sighting_of_ref": "indicator--cd4328ef-2235-4270-8cca-780ceb33b5c5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--805348a6-323f-4f99-83b1-ee733a674a1f", "sighting_of_ref": "indicator--78a4763d-bcee-4ad0-92c9-6aca7ecfbe1f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d82a1ee4-b756-4e03-bbee-39f6d75bbd5e", "sighting_of_ref": "indicator--71d86326-2bc5-4139-8858-b75e93c0fa28", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd9398f-7771-48d2-942e-e2d33dae2ffe", "sighting_of_ref": "indicator--eeeba49a-99d6-4218-9c31-c15cb3e23e0b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61e5f44-b11f-46ba-aa40-68a2d542f7f1", "sighting_of_ref": "indicator--9eb1ecd3-386b-415e-a5dd-6672cc987f30", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc38b6e-e5c3-4fb4-b30e-901c45afaf7c", "sighting_of_ref": "indicator--d44bbf94-1dc4-4d5a-af3d-22933957aa19", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b540961a-ce55-486a-95e4-e81b409dec20", "sighting_of_ref": "indicator--6320ecab-d082-4549-8db5-73affa63caf2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f98b9e3f-0cd3-4f50-a4d7-4c007e8ff3a3", "sighting_of_ref": "indicator--4dfa521e-fcd8-47a6-bb04-8cad049e78d5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb5702d-30d5-4fa4-91a2-ddad999968f4", "sighting_of_ref": "indicator--de907ab1-5231-45cf-9b26-34e51f2c47ec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be0b1dc-10e6-4167-8d74-e9c49bfe48cc", "sighting_of_ref": "indicator--9bc3cb3f-96c9-4d9c-8760-8cab1e3ede54", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8fc6e1c-fb17-4a0d-9a63-d5f3ed949584", "sighting_of_ref": "indicator--bc59c222-7f30-442f-8dcf-f34deed4d45a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a5015c-7059-4427-b405-deb6188fada0", "sighting_of_ref": "indicator--f67c2c76-e616-4067-9c33-9d4d3ff80104", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f9aba3-78e2-49de-a2fd-3046a2fb23e6", "sighting_of_ref": "indicator--fbae9e76-cb57-474e-bb2b-5f3a220f8be5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52fc7bf1-bf50-4f21-a547-b4822a8c44ca", "sighting_of_ref": "indicator--5baefd26-3ad4-49e8-a6ea-d1a645a76942", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eff4f5d-50e8-4d1d-b8c7-8a4c00dac9a2", "sighting_of_ref": "indicator--3cf29701-6a9d-464f-b4ed-bf662d6ec1b8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7de597-6d16-4c08-8465-a41b0ab742e4", "sighting_of_ref": "indicator--f5ec7788-8082-4ec2-aec3-1cf7cc9c5947", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ad8773-2de3-4196-a6db-72257375a15c", "sighting_of_ref": "indicator--2db3fc1f-a507-46a8-bc88-6d2876ae4361", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371cd204-e6c5-4d7c-95c9-c179ced81630", "sighting_of_ref": "indicator--6fd36c22-9dad-40cd-bcd6-43d129a76c38", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b11789-533d-441f-acd0-07896b701f7a", "sighting_of_ref": "indicator--3c2ea7c4-cd3b-4d83-9b32-20a8a49fb055", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50bdc11a-6660-4783-a633-ed7dcc595dac", "sighting_of_ref": "indicator--f0be8ef3-a873-4ab4-9cce-7ed722bd3bb8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29503412-486f-4e8d-b18b-8dce2ad6fa7c", "sighting_of_ref": "indicator--811011fa-dc09-49c5-a492-c6bbb7b9754d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81788c6a-b65c-4137-92a9-d10b9471716f", "sighting_of_ref": "indicator--e11847d8-9b63-4f35-bed9-913bf2f16f01", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36daed41-73ff-47bc-b4c1-da801acbc864", "sighting_of_ref": "indicator--2d22a978-b542-4e27-b60b-d2b85dc8000c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b99c145-937f-4a6b-a8e7-c05129d2b070", "sighting_of_ref": "indicator--4877e61f-44c7-44e1-aa82-37d8aea5bc9a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dddae9f8-33bd-465d-8362-efa3defbe2bb", "sighting_of_ref": "indicator--42c8f2c2-a648-4833-b300-f0f2e24d4b6e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c84095b-67ce-4c4f-87fa-b82a8b93b7f2", "sighting_of_ref": "indicator--c9836010-6559-49a8-8eb7-0fd8e9d691a4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a5aa46-1f7e-436a-8389-a75ba1a0aacd", "sighting_of_ref": "indicator--6c820a45-4480-4edc-952f-bfcb300a6448", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f4e645-bd00-49ed-8c47-1ce4826e1d8f", "sighting_of_ref": "indicator--4c3d0fb4-5624-4d87-a10e-d134f2382080", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d143a625-c905-4461-90f7-8fe7396c2b4e", "sighting_of_ref": "indicator--828cd3d1-d6ee-47f6-9c53-8583e5564c69", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac73b3c0-7423-4167-98ec-cc06a8c6a505", "sighting_of_ref": "indicator--a15cef26-c718-42aa-b753-9d9e73112083", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1486c14-616f-479b-a3ac-e5e13ce5b9db", "sighting_of_ref": "indicator--08a055d4-e240-42d0-9987-872e2ec0c9f9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c9279b-7ebb-4913-bad1-125162a6b09e", "sighting_of_ref": "indicator--19ca3105-6f3f-44b7-ace2-eb3e8e3a85ec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44576f8b-4982-494c-a1e5-0171ae6301b5", "sighting_of_ref": "indicator--8f2dc502-3388-41c1-aaf9-8b39022917ce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dbdcd93-76e7-4628-b161-4d93f103cf65", "sighting_of_ref": "indicator--0603b321-9ffd-4eca-b4ef-865e6f7a9fb0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de9fb9c-df04-427e-9791-75fa43084b54", "sighting_of_ref": "indicator--9f37c64c-9c82-456a-8b48-6cea83014678", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14fa5610-e3f2-4476-9b03-ba15a9b563e8", "sighting_of_ref": "indicator--cc9c1579-2520-4a84-8485-07e95b0f1d78", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0892d277-7e52-49a1-93d5-60b28e8dcfd6", "sighting_of_ref": "indicator--eb7e1e53-9c94-4bfc-84a2-a389b40a936a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cedd5f94-0bbe-43e6-b81a-907c33b8d423", "sighting_of_ref": "indicator--73496b12-e271-4d4e-93fd-0c75efb4801b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc683d8f-a880-4d6d-85de-3ff5718a9ffe", "sighting_of_ref": "indicator--8fef021d-9b28-4823-9b3b-5e434dce48cd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28442a2-a6c6-4912-bc5d-01d214e72fc2", "sighting_of_ref": "indicator--adfa457d-584c-4484-adff-44ff6bdac2e7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--208432ef-6e0f-4a41-93e2-b54524d064b8", "sighting_of_ref": "indicator--8831316a-21dd-4423-92e1-9a55f88e3a68", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b380e3-0d9d-44a9-897f-57a0026f99e0", "sighting_of_ref": "indicator--37e0e4ba-643e-4d2c-bc43-d766612cfb6e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182a8140-6f29-49b2-b95c-73dd2cb5fa18", "sighting_of_ref": "indicator--f8295121-815a-45d2-838c-5c0844bc8cf5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19134544-c007-4505-9326-fa3522f89f38", "sighting_of_ref": "indicator--685ae3b5-6fb9-49f4-a76a-4ddeb37bdac1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc276b34-cc36-4e47-9247-65c694fa1285", "sighting_of_ref": "indicator--d39d3388-f23d-410d-8112-0d3626e34e8c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a853074-6f86-4f2e-b1b4-ccca0132063b", "sighting_of_ref": "indicator--20793e3a-8b24-4619-a0b1-9f87e007b640", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0a9908-2f7c-44fd-865b-b1308a224cc2", "sighting_of_ref": "indicator--0ae0745d-3a3d-40c2-926c-0771f34c8e05", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64685042-f832-43cb-9ad4-26756e3e3864", "sighting_of_ref": "indicator--c3af4a6e-6fc1-497f-bf19-29ae575258df", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91361013-595e-449a-a54d-1feafe1d8aa4", "sighting_of_ref": "indicator--d2e7675b-f06a-49bc-afc2-543704f4c6fb", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd92db27-544e-47c4-bbca-a6b19c5faed8", "sighting_of_ref": "indicator--64ed4aef-5613-43c6-87d6-eba49f314ec5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d88355-505a-42bc-8c11-193c5f9e0acd", "sighting_of_ref": "indicator--2e307067-2fab-46c9-b122-da18cd677d4c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ec990b-d483-4bc3-8737-9bc52653642b", "sighting_of_ref": "indicator--569f4e3a-4f58-49d7-904f-d4be3dd30194", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab69be47-f208-4c9d-95a7-44365341794d", "sighting_of_ref": "indicator--559a4a96-8668-44bd-a62e-d2da82c1f74d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7f6d9b-b520-49a9-9a33-47e520d9ee8d", "sighting_of_ref": "indicator--6c6718a8-4a67-49d3-8c0a-073595accc41", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e9d041-036a-45f2-8143-b9dbb100621f", "sighting_of_ref": "indicator--3fc9147a-24d2-4bed-806f-e909e7c2153b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be91d5bb-1059-4f53-a233-ee5138f95525", "sighting_of_ref": "indicator--84c11db1-abc8-47b2-affe-412767a0f75f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb559b66-eabd-49a1-824e-d7fe59bb5f8e", "sighting_of_ref": "indicator--9f321b74-65a5-4f40-b7e0-5d88e815ca72", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b64b89b-bdaa-4204-9f29-bb003be66544", "sighting_of_ref": "indicator--c68e03cb-103b-4214-aae5-5eacd7dc93d6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47cd51f-1f5c-4e57-9ed3-128c78a1a53a", "sighting_of_ref": "indicator--af88f022-a280-4908-b4c9-86dee4923f96", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154512bc-1035-4f98-b269-18c702e401ce", "sighting_of_ref": "indicator--af2e2a66-177f-4a69-a80f-f68264609b65", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321451f6-73cc-4110-a23b-2ca4fe7409b3", "sighting_of_ref": "indicator--5bae901c-54c0-4998-91ac-c531b7c39de1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ffbee0-c682-487a-b645-c763c1065837", "sighting_of_ref": "indicator--3fa0b4ac-d5e4-4a32-9efa-f2b89e9c3490", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae55900-f72b-46a5-8092-3f10abe3f27a", "sighting_of_ref": "indicator--0cb272a3-5230-4fec-bb5a-190c584cf97b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d00cd584-063a-47fa-ac57-d34f6865f697", "sighting_of_ref": "indicator--49e19bc7-e44d-4ba0-9080-53b57b236284", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee1e667-288c-4606-9ba1-bf52f60655fa", "sighting_of_ref": "indicator--86f5350c-4466-4878-bad4-a5ff045eafb3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc85dff5-4ea5-442a-b255-825125172cfe", "sighting_of_ref": "indicator--f17e6878-948b-4bb8-935a-42cf1bfd1439", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30319d3f-6e93-4b0c-94d6-0018f8b7c82f", "sighting_of_ref": "indicator--23fb6199-dfc9-4522-a0bd-03844ad24e1d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a01f14c-e696-4de1-bd25-616962b4e099", "sighting_of_ref": "indicator--8d9471c7-8425-4072-b796-43ef89de36ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3d3687-813b-4a07-83d7-e60d51def592", "sighting_of_ref": "indicator--1d6a9c64-3fe9-4f2d-a574-dcd82e740f4b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f15529-c04c-4ef2-86b5-0ff34e67691d", "sighting_of_ref": "indicator--ca435a2b-51e0-480f-9cd1-a3e937097ac9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3a9c90-4f02-4665-9e98-4ebf09590d04", "sighting_of_ref": "indicator--f519ca59-cd23-45c0-82c9-e9018401a44e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6e1120-acf6-4206-babe-ae2534a2174e", "sighting_of_ref": "indicator--25603542-a74c-4f7b-9dbb-06039810494e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86786aa2-6837-4c1f-a105-376980971604", "sighting_of_ref": "indicator--4163fa7b-b9f2-4c7c-a154-f07267742b19", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d74556-dfe6-49a6-8958-00f446cc0fb3", "sighting_of_ref": "indicator--0f8fdb60-97cd-49f9-9b5f-027c0ec98026", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fcbc1e-10b5-4759-884a-275356d09a99", "sighting_of_ref": "indicator--e885e796-6daa-48e7-87d7-b2240d135016", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d646c3c-ba39-4c16-8ee1-fc07df20483c", "sighting_of_ref": "indicator--d6e38cdb-e183-4bb3-ab0f-a8cc93e938b3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb00d1a1-306b-4e3f-99a2-d1a177fd6c48", "sighting_of_ref": "indicator--d281c810-10fc-40c2-b5b1-b880bff6d754", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30c8d0e-1e0d-4ac0-94da-3cfe8e11a0c0", "sighting_of_ref": "indicator--bc7eb475-08c7-4fb1-b493-e26cafae8128", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6f9b44-7eb3-4e62-b6f8-2834b22e22b3", "sighting_of_ref": "indicator--43e71cfe-cf84-4165-adf1-d69d786b06fc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6a478d-0ac2-40a6-9304-1250ebf5a4cb", "sighting_of_ref": "indicator--dabe3279-dc4c-44b3-9fcd-5e60b27d6eab", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04625ae9-b2c8-4292-9c9d-01c1b17eeb5c", "sighting_of_ref": "indicator--7490de98-0b54-42d9-95e5-4b3be219663c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4115ce4f-e6d7-4203-a7db-8c7dfcff900a", "sighting_of_ref": "indicator--3192c408-3f35-4b7f-9c6e-f30e9bbae9a5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--519ccc0c-1bbb-4340-bc66-b51c94ab2608", "sighting_of_ref": "indicator--eda87511-bc6f-4d01-9588-859158cca510", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a7e8a5-4e21-4551-a346-25b10566f235", "sighting_of_ref": "indicator--ef382471-241a-4bda-92e3-6aa97db6dbbf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7dcace2-0dcb-4c4b-a6da-c4d6eeffe072", "sighting_of_ref": "indicator--28281ed0-82fb-4a4a-a25c-765829312904", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d0cb25-dc7a-477a-9134-75203c43ab92", "sighting_of_ref": "indicator--29a2be0e-25f6-4968-8aa1-76f8baca5397", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a1d19e-245a-487a-a51f-d4042c943931", "sighting_of_ref": "indicator--1e6ff747-f653-4d26-a0a6-b9bd0572a9bc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc015114-4f3e-4f10-832c-0cd7e8bc435e", "sighting_of_ref": "indicator--4e1a339c-1f9c-489b-93fe-dfbefcf9c9c1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--541a143a-3086-4ce8-b14f-b1a1b478572e", "sighting_of_ref": "indicator--a26d83ab-c859-4e3c-83f3-de2869360ce9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e873f538-6061-4850-8b70-ac2ea2ae556e", "sighting_of_ref": "indicator--04ecddae-41d6-4a61-adfb-6ccb0fc0cb30", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5b371e-9d2e-4fc8-abed-e10fa00d17c9", "sighting_of_ref": "indicator--0142bf6b-bd7b-426b-bd7c-891abc2dd1f6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560dd3ec-ebfa-4632-82a0-a1b48679b37e", "sighting_of_ref": "indicator--542289d3-e854-4843-9dbb-0af7f833a2b9", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8396df9b-b496-4ac3-b4f3-5f6f50a96044", "sighting_of_ref": "indicator--65412139-7b11-41fb-8879-b4877cc601be", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8d843d-4c02-469b-be47-59020c693505", "sighting_of_ref": "indicator--fd3dd4f6-0243-4b75-a346-31f9e9dde90c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04349e2c-4371-4c22-b2f9-ee9f461c00f0", "sighting_of_ref": "indicator--474aac72-6fc5-4f8d-b09c-8a09a9546029", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7ea560-3276-4eae-9ee7-695a7544086f", "sighting_of_ref": "indicator--a2f0e16f-10af-4728-90f3-af2ec82c3208", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca983b7c-b21d-4f58-9666-4a498e7fdcb5", "sighting_of_ref": "indicator--eba130af-8509-4932-8fc1-90ef4c3d8dbe", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e98a10-4db9-4caf-a3e2-7b4b0ea4971c", "sighting_of_ref": "indicator--8a17a858-0e22-4a84-a4b0-3047d6dcd020", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725f0291-25f3-4659-8c0d-3990742bdb4b", "sighting_of_ref": "indicator--9ad114f2-472d-4ed4-96cd-7971695ee2b4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd6b279-8d8a-4658-bc76-effe5788bc9b", "sighting_of_ref": "indicator--2baa7340-1303-4ba1-868b-0ca88e173b11", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e53c7eb1-51b8-4704-bfef-1efd3052afda", "sighting_of_ref": "indicator--770f3117-03d5-4f44-b21d-3b232589990f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7e8fab-e0dd-41bc-b6b2-19c5033eabf2", "sighting_of_ref": "indicator--e8d26147-4aaf-47d7-84f2-691aa1b5e37f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37771bc-b723-4dd5-93ee-cdce3ef1663d", "sighting_of_ref": "indicator--da92db0b-424a-4140-95c8-5a1f8013d7a2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803e8e4b-1506-4f36-acbd-fdbe05b71f4e", "sighting_of_ref": "indicator--7e328eb0-00d9-4ef3-b303-b4f60b3d23a1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d38585d-f45b-40d4-92cb-64ee2cb17eb1", "sighting_of_ref": "indicator--dfbeb742-10fb-4490-a7b9-4a37d6a14096", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19cd0430-ceba-4b98-9689-ff1175c3720b", "sighting_of_ref": "indicator--3aacb6f7-bd77-4557-8660-5f8a0ff9cf74", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff31324-046f-43f0-b08f-6ce25dd8e05b", "sighting_of_ref": "indicator--02b23d55-e538-4ad2-9f27-ba9293512510", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7891247b-c551-411f-adf6-af5824ee6ddd", "sighting_of_ref": "indicator--18d4c47f-5629-4fd7-a6bc-bafa22efa75a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d360a2c-1895-4b8b-b052-afb36c979fa0", "sighting_of_ref": "indicator--391d32b6-8d17-43b1-b6c3-e8c8d0e71a67", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751de091-4921-4e57-afff-d91bc20e1c90", "sighting_of_ref": "indicator--fe9d54b2-4945-4fad-b167-fbed30faa6a1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ab42a2-329d-49ea-a430-a314201a15c0", "sighting_of_ref": "indicator--c6271dab-1891-40ae-b387-7a5be888cdb4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0faa94d-d5f0-4588-9a75-c1c5ac38eec6", "sighting_of_ref": "indicator--2e23f13f-c240-4216-8407-319e15930ca6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c0e9d3-a497-4edd-a276-c3bfa89e2300", "sighting_of_ref": "indicator--dc76a092-a416-4b6e-97b1-28d89a39adbc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a72ead-c68d-4d9f-a0b9-5aac753ff8c2", "sighting_of_ref": "indicator--8b79884b-ca63-47c2-9dd2-26e305ec2288", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc418bf8-0db4-4787-b8d6-be69c70a2d36", "sighting_of_ref": "indicator--976e70ac-eeb8-471d-b781-647246118ae6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15eff6e-2680-478e-b7d0-983e7e027b74", "sighting_of_ref": "indicator--a1897bd9-e975-4711-ad16-61ac5d7cd48b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b12247-3ee2-4dd0-a075-a71068dd0531", "sighting_of_ref": "indicator--9910e1fb-607b-46ed-b1b4-191c65a08163", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd8fc95-5f92-4b73-b2cc-91c3cf484cda", "sighting_of_ref": "indicator--a5220835-9a1d-41c6-bc3e-0234e704d36c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa7cf57-2e55-43c9-ab9e-cbbf4d23ff7b", "sighting_of_ref": "indicator--114be554-bdad-44fa-ab12-1954b60f670f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a575e004-c3a7-4e71-9ad3-fc1c2e3470ef", "sighting_of_ref": "indicator--b0f720b6-ef97-46b7-8513-8bc15bc8e82c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15efd7a3-ad05-4164-9532-44f13105aae0", "sighting_of_ref": "indicator--df349a4f-ea2e-4840-832a-e735b859a441", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1b0ec4-3942-48c2-9ae1-81e4a37fc90b", "sighting_of_ref": "indicator--ffba18de-8ea4-4d45-9807-ac133e0b4ab3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc022a3-18eb-4051-b53b-16b618e9886b", "sighting_of_ref": "indicator--6b7e74d2-6d56-4e5b-ab54-91c72099dc57", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91daa0fa-5213-4048-b7fd-d9e80eae22e1", "sighting_of_ref": "indicator--123faf59-4f44-4744-be6e-6391c415062a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e61f6a-9681-46c5-ba59-3f7209bf63ad", "sighting_of_ref": "indicator--8593d52b-dde8-43c8-b526-aba36e21f36f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7bc703-888b-42e7-b0ca-1f37dae6f509", "sighting_of_ref": "indicator--a8a6dbd1-8217-4ea3-abf6-7a35c970c33a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7a56c1-f6e4-46d6-8990-457c80de756f", "sighting_of_ref": "indicator--be9b7d66-bc35-41c9-85bc-db46c840cc99", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee03f5c2-aa02-42e0-8326-dc250add1d61", "sighting_of_ref": "indicator--d650c563-c348-4640-9024-7281c07ed5d6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00185bf7-f214-4000-b45c-c66e0be3a663", "sighting_of_ref": "indicator--faef3f0b-2307-477a-a0f1-2f2e4e6cc464", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6445c3e-f95a-4164-abdd-6634801c68ab", "sighting_of_ref": "indicator--6fd9ac91-d271-4fde-b33a-d6ec2d64ce51", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152da7b1-e6f4-4ff7-80a1-8088aa82b0f9", "sighting_of_ref": "indicator--18c71a6e-08af-4c26-8612-5b1e6d54c1dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc0bb9a-76e2-4415-81cc-ce032c0988c1", "sighting_of_ref": "indicator--06ba6b5e-2e7a-4fa2-81b8-c05d82b82dc6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc185ac9-61a9-48e1-825a-23afcbde98e8", "sighting_of_ref": "indicator--104900ba-384e-4e2b-9c16-057d6b9f00ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30824fd-cd2b-41be-be90-1fa6500b88c0", "sighting_of_ref": "indicator--2dc146d5-d37d-47cb-b944-0fae77bfcdaf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de23769-586a-42ac-a911-57dd8cbe0a0e", "sighting_of_ref": "indicator--9e93e483-66cf-4904-b037-074712593d63", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5328bfbc-f9cf-4720-a1cb-415b5172363e", "sighting_of_ref": "indicator--e59f64b8-33e4-4ea9-bc7b-5b9706e937a2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf740f04-47de-4e63-a73a-a58d99812f73", "sighting_of_ref": "indicator--6cd941f9-93c2-41b0-960e-5032abd9fe1c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5142947-7b4e-4833-b65b-08dab4e30ca3", "sighting_of_ref": "indicator--de2a809d-760a-4ecb-83df-7fc6ba773c5e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230d64b2-94f9-4c4b-8768-c44b18974e05", "sighting_of_ref": "indicator--b84a1b31-ae9e-4a73-99a5-d65cc4dbc40a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252f93b5-b9a5-4aee-a76d-6c8ae6b69102", "sighting_of_ref": "indicator--d19f0a63-7c59-4f9d-b7bf-65de32533119", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130c42a1-ea33-4655-90a4-6fdfe640c63e", "sighting_of_ref": "indicator--d150faf7-7cfc-496d-a979-3ac5290963a7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57833191-59a7-47d3-ae07-79bbd0f01847", "sighting_of_ref": "indicator--bde5e25f-b220-4404-a080-b84866c3da6d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7eaec2-0f50-4168-8567-df76088ce541", "sighting_of_ref": "indicator--51fd4da0-56fb-4c70-86dd-b6ad6561b287", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576a9e18-7adb-4c72-b1d7-9486e07d5a4d", "sighting_of_ref": "indicator--eb0312b3-f75e-494b-9848-63234f139642", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabe302c-afda-417d-b69c-efd925b4313e", "sighting_of_ref": "indicator--b32726ac-f9e6-405a-9839-cbe2b70ac4e5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88440dd-b473-42b8-b485-636ac3fa5672", "sighting_of_ref": "indicator--88d81ebe-3394-4982-88a0-92a3af970ff5", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4685e3-18d1-4dea-b828-1803a1829f06", "sighting_of_ref": "indicator--47cfe1eb-002a-484c-af82-5a61459b421d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d8ac38-cc2a-4dc3-8bb0-f5b4435f1599", "sighting_of_ref": "indicator--11818fca-0b24-4f04-9f0b-ea71438f3a6b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ac65b4-6e77-40ce-9175-2fab3ada6818", "sighting_of_ref": "indicator--cf9fc878-1dec-4aea-9786-884c5782f35a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40087b0d-3e64-4656-9c7e-bb52c725dc30", "sighting_of_ref": "indicator--cf69ee7c-9a22-4200-95b2-861b00ba2f60", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930541a1-d6dd-4b38-be21-c6c42e4801ee", "sighting_of_ref": "indicator--cb7f6c17-3be2-4015-82f0-62d8dc50d9ee", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89ad846-3c60-4397-882f-338e41edce40", "sighting_of_ref": "indicator--d165dab9-9cb7-400a-b04c-b978f1891346", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b456be7d-060d-403f-8bd9-7015516fb1a0", "sighting_of_ref": "indicator--79e3afc8-80dd-4075-90ff-f6e0842b7392", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9351b045-fa70-4dd6-9d4c-33dc2ccfc92e", "sighting_of_ref": "indicator--88c8cc17-af91-4fc7-b9c0-b1c0c99f7be6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0baefcac-6686-472d-bdea-dd748f38496c", "sighting_of_ref": "indicator--6a1aeebd-2671-4f18-83ee-8d4d081c67fc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f5d2e3-7f59-4ecb-88f7-5371867fddb6", "sighting_of_ref": "indicator--65a0b343-d5b9-46a8-a492-95971f947acc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633163cb-a144-4833-aecf-f609a735ee69", "sighting_of_ref": "indicator--50c0e7f4-d1f8-4a3b-910d-e9abcdcd4039", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eadb5a4-c687-4719-a800-9b74b38fb74e", "sighting_of_ref": "indicator--2c9a1d0d-d4f4-4e39-a33b-a6d5d24c3010", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988f9b50-1a37-47ea-bf7b-7665e439b6a6", "sighting_of_ref": "indicator--c3fc10b7-9492-48f5-8236-d7eca0466f62", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba927ca2-cfb7-4fab-a3be-47cc47f1dcce", "sighting_of_ref": "indicator--2f9a704a-f755-416c-ae12-ab18821c1a74", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2186a5ad-8825-4bab-b0f7-beaf28886000", "sighting_of_ref": "indicator--585d1792-ccca-43ab-b9b7-7faa67cc12f2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095a629a-d263-4e80-ae53-bbac40a654d3", "sighting_of_ref": "indicator--1133a02c-3236-4da9-b956-5beae5a62d6a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7075f06a-0796-4b77-9b13-65cb750a11cc", "sighting_of_ref": "indicator--ee62cc35-9704-41a0-aab3-7bb613876c71", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3add7254-f1b3-4863-b05d-143db79f4e8b", "sighting_of_ref": "indicator--81f14f75-3acd-4913-880d-28477e628b95", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3cb4086-008a-47ac-8dd8-e0d9a304bbf9", "sighting_of_ref": "indicator--2100ca4c-1e69-4101-bb4f-6bcc14cee97c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082854ed-3b00-404b-98f7-0b9b3b68472d", "sighting_of_ref": "indicator--f3b6f132-e296-40e8-bc5d-8007fe68c2cd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26786c9b-d15d-4d1f-9e72-3fdc1714fe4c", "sighting_of_ref": "indicator--290e8e8c-178d-4084-b677-34d67da6cdf4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af6d2c2-d409-42b7-bbcb-69f867832cea", "sighting_of_ref": "indicator--517a37c9-5b51-41c2-9397-af3874138ea4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f89a46-bfef-4aec-be4d-3ec702e6f591", "sighting_of_ref": "indicator--81369f92-f94b-455b-9b4d-7431a818ece8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d488d4bc-27dd-446e-b704-b8bb65fcba3a", "sighting_of_ref": "indicator--0c7e8ded-63db-48e2-bbe9-333e820d52bf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4724940-0025-40aa-8b67-f0c26517f9dd", "sighting_of_ref": "indicator--ce3d3db8-7526-4582-809d-288c59ae9d85", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f476ce4-fa7f-466c-9570-30ca578194f7", "sighting_of_ref": "indicator--6fe12c93-00f5-4385-914e-9f73efae6b65", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38d8e54-02a3-4d1e-b107-dc0f18817972", "sighting_of_ref": "indicator--4a8acf72-ae73-436b-99ac-a65ccf8b3925", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea9115bb-8308-4a83-97aa-c3c0807651cc", "sighting_of_ref": "indicator--788f63b1-bd9d-4989-abc4-8223cba21eda", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321eba13-cab8-48b4-8765-a270a2e2c232", "sighting_of_ref": "indicator--df02ea74-623b-4106-8aef-ebc99df5e7f3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae163b1-e291-4428-a3ef-0db69e780356", "sighting_of_ref": "indicator--14baa8b6-1e0c-4598-ad83-2434082c775c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7cf6c1-c221-4f50-ba6b-c92f42de785e", "sighting_of_ref": "indicator--46214ae2-eea0-4091-bee3-465230067146", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f58aec-5a0d-428f-8c48-18bd745d894e", "sighting_of_ref": "indicator--1af5a784-92a8-4168-80af-1deb5c811f73", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6257c421-d22c-4567-8cbc-a2817078687b", "sighting_of_ref": "indicator--46b18a3d-e665-4c56-9e80-f16da4302cf4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9ee318-c555-4cb2-8c24-0db5f3702db1", "sighting_of_ref": "indicator--1d6d9457-2e68-4a63-aac2-9811a667bfcc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2538cdf9-c870-49cd-a0d6-f77005cac179", "sighting_of_ref": "indicator--7c990927-f401-4319-9d4a-e75d94a3430e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09606a75-e2ee-4b77-8aad-2294c4afea86", "sighting_of_ref": "indicator--d24731fa-d19f-41c2-adfb-9da48eb47018", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11096975-eaee-4bcd-b836-50c8f6043ec1", "sighting_of_ref": "indicator--056fb4e9-8a06-41c4-a3bc-b399d4c9b37c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cfc663d-8d4e-44f2-ae24-4105cc47be85", "sighting_of_ref": "indicator--39ba7795-8758-4f6c-9878-ed9fea225c96", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3a618c-c3cb-4434-b0a0-ba1d20ed42e2", "sighting_of_ref": "indicator--4849cfb0-c2b9-41fe-8319-f4dfc84fa940", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af32de0-3ad4-4ed4-ac12-84cdd9a2c3ab", "sighting_of_ref": "indicator--27c70ab9-fc98-4d26-a9a8-d8274ed4c5c7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37457a8e-a76e-4228-aaa5-5fb16210d6b7", "sighting_of_ref": "indicator--8c96db23-0c90-43b5-9f25-aef8fa900bf9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694381cb-0dfd-438a-9c2f-53de7db65bbc", "sighting_of_ref": "indicator--7337add0-3635-464d-82ba-8b2c16758064", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e5a010-92c9-4400-9e70-ad26227da686", "sighting_of_ref": "indicator--97d9b99c-a8a1-4d02-b826-72644a1aed9c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71819b3c-16d8-49f2-8d87-09eadf139989", "sighting_of_ref": "indicator--9d240526-7c6b-4a32-b140-490d682c76b8", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b750ffaf-049c-4918-a28a-45d5971211c3", "sighting_of_ref": "indicator--3d67e12c-6a85-4f19-aeeb-66b8f07ecb98", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47b1aca-fe89-4b75-a3ed-cf81b737453f", "sighting_of_ref": "indicator--d1acda6e-e316-471c-8dc5-956748dfc91d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42370bd5-e587-4ec4-8e77-308bd9e0cbba", "sighting_of_ref": "indicator--6cf61dc1-680e-4807-9ea9-f905655dbc14", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74133bd-0459-404c-a370-8b92eb14fc09", "sighting_of_ref": "indicator--9c95861b-1dc0-4274-b69f-810735aed4ec", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1293f069-b2fd-485c-b1de-0ca82e31e690", "sighting_of_ref": "indicator--dc6f7844-8f56-4c47-8c25-1c1fbcd4aeb9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70479d1e-fd50-4989-9d73-84b6378147d8", "sighting_of_ref": "indicator--c8e52237-7b25-49f8-870b-2c936241b85e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48c4984-6f40-4495-8c3c-7f81a40f1d01", "sighting_of_ref": "indicator--7ab44732-dfe1-493f-bfb5-7278162da40d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e545f7-035a-4c76-ad60-4ec97537949d", "sighting_of_ref": "indicator--aa1b50ee-86a0-4cb4-b452-933b3265b00d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf0fc32-dae3-4824-9844-f73f51926940", "sighting_of_ref": "indicator--2630ae8e-21a8-47a4-bc10-fde18858813f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718727f8-58ef-40e7-a8ef-8a65945b946c", "sighting_of_ref": "indicator--3f6a401f-afc5-4a4d-988d-f946ec75fb0e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c12081f6-ff10-42fb-a3b3-391e5dd123da", "sighting_of_ref": "indicator--c8a0e125-5b95-492c-bc5f-d466db872206", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf651c9a-9db1-4d6f-80f1-3cfd2f3eaeab", "sighting_of_ref": "indicator--2dcd705a-9f42-436a-87b4-4a4c57629d69", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--075496b3-468f-420a-9572-da82d43125cb", "sighting_of_ref": "indicator--5d5637e4-9125-4acb-9953-595a4a725f13", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c00a3b-b84b-40df-bd87-7ddb8516570e", "sighting_of_ref": "indicator--17869b1a-4195-41f5-ba22-6ea41fd7dc10", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbeb70b4-f17c-4d31-911d-14eaf4611697", "sighting_of_ref": "indicator--9ae00a45-47dd-4ba0-9bfd-bc28b60c17ca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75f62c0-2bb7-4e7a-b3c2-a07395950e37", "sighting_of_ref": "indicator--e11d6094-a8b9-4e19-af05-0da74ddc6049", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1997025c-495c-4b35-bf48-407a5cc5638c", "sighting_of_ref": "indicator--3165ac6d-f692-4077-917c-2db9233e68fd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec91d74-a1e6-45ff-8daa-36da9f0fd31b", "sighting_of_ref": "indicator--3165ac6d-f692-4077-917c-2db9233e68fd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23f439c-cfc2-45c1-bfd1-ccffd3ed8f39", "sighting_of_ref": "indicator--a02a2957-29b6-4bfe-8259-8e6b62df991d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e971d3e7-3a41-4180-b4cf-355ae68be0c2", "sighting_of_ref": "indicator--4e8b405b-2f8c-45b1-85bf-4a5daddc8861", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89305c56-5479-4b19-8091-d40ce4e770f6", "sighting_of_ref": "indicator--10475879-fa02-4bf0-8362-032ddf71f89e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7550f5ac-7bbb-4724-91be-1a802ca2144c", "sighting_of_ref": "indicator--c1d311ce-4703-4ff9-9784-5c608570d59c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32c5a28-cac7-4e8f-93e9-296a4ef39f98", "sighting_of_ref": "indicator--53c3f738-86ce-4c34-aece-f15c23b67f3b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00248d3-d38f-4998-bd57-b2d9b5111c58", "sighting_of_ref": "indicator--4eddd9ed-39ba-4c8e-8e37-cb3a944a2533", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90fd4b56-3aa4-411e-8688-2579b2360c95", "sighting_of_ref": "indicator--4d099674-207d-419f-bd02-aafb9466d3ac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a0af2e-7882-4eee-b1e3-2110946bb3ee", "sighting_of_ref": "indicator--da08539f-4470-49bf-a2a9-83379e82cf29", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ff62122-d206-48a7-a04f-77dd6088046a", "sighting_of_ref": "indicator--1a9ab7b4-f023-479b-baf6-3c5bec2db259", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c79cbb-888a-4caa-a683-7e944fc20fb6", "sighting_of_ref": "indicator--cef4f37b-3566-4df0-803d-9ef87ceb7c49", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c1ae7a-9b7b-4758-b291-35217f0f9f9a", "sighting_of_ref": "indicator--0a9270ea-f00e-4d28-b4b5-f14b24c27cf1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a9d1d3-2f1d-4319-b775-c98a584e1f9f", "sighting_of_ref": "indicator--98ff1b39-9047-44fd-99a1-c3de82aea991", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ac95b7-6abf-48e5-9630-07879c315384", "sighting_of_ref": "indicator--473e8d39-9c69-4dec-bb50-18ffe4b7c9c8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be73563-b6ff-4d58-afd7-ada99bbe5631", "sighting_of_ref": "indicator--8cf4651a-04fc-4a10-bdd8-3a9e7b3452e2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542bf52e-d0d9-40db-bb40-ac1ff940d4a1", "sighting_of_ref": "indicator--2e80c6c4-047a-43d3-8898-493a592ad186", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582192b7-f554-4876-943b-6662f4d49017", "sighting_of_ref": "indicator--37642d54-04a4-4a2a-ab60-8bbdde9a88ee", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ecf5c9b-ea00-4ec7-94c1-dd42569a950b", "sighting_of_ref": "indicator--a971ee96-90e0-45c5-a659-7ce98bf0b07a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7bebf4e-5a51-4ab8-ae15-ed087e9a85c2", "sighting_of_ref": "indicator--89ea0542-9ded-419c-9ad8-3cfea6887a55", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772ef6a2-7096-427d-aa05-f1c4aac057ae", "sighting_of_ref": "indicator--da29be7d-735e-4dc0-8dcc-a88fc98655a1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb706be2-2d01-4020-b439-ef83114410b7", "sighting_of_ref": "indicator--19150544-0837-4c32-a77d-4398af85562d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--defabde6-b32c-4e8b-8015-4a471c1c3161", "sighting_of_ref": "indicator--5e624ad1-46fd-4989-ad5f-03bd176fe639", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab07968-9ec0-4964-a71f-6d27b30eaf34", "sighting_of_ref": "indicator--d864210a-605e-495a-a44e-f995c6a945f5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6395bef-7b30-4191-ad31-b9c982592d5f", "sighting_of_ref": "indicator--47439e21-9bc3-4143-bef1-1cfa173a725f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a0fbf4-ab7e-43ed-896a-bbe945e68357", "sighting_of_ref": "indicator--949ca298-34fd-4f03-971d-ae32f0ab674b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc8b659-432b-4454-ba89-3eb4ae707725", "sighting_of_ref": "indicator--3f11e615-0ae2-47de-9eb9-f0128094927f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65636e00-304b-43d8-a56e-8bdef5303c03", "sighting_of_ref": "indicator--f9e20d7e-4dd9-4725-b4e8-2c23319ce12c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9dc0fe-9d97-47bc-93b9-f47709e0e541", "sighting_of_ref": "indicator--930a81c4-b35e-4ba6-bee4-733b73552268", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6b7f5a-2907-4d50-a7b7-fccddca0f71c", "sighting_of_ref": "indicator--44fb1e60-0953-471f-abe6-cfbf0cbc59cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691add7c-3561-40c5-a7c0-b0f384830e2b", "sighting_of_ref": "indicator--59a80ad3-28c4-4e5a-ae97-6c44e336920d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d249a1fc-7bae-43c2-aad8-3d5426ad112d", "sighting_of_ref": "indicator--0dcd7429-14ae-4ca2-9d6e-a63ba106355b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01a5629-bade-44c4-9b17-c89427f87f1d", "sighting_of_ref": "indicator--ce91b624-903e-47b2-af6a-8d3ca6f809d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad7c027-8509-41cd-ae1d-c7657677036c", "sighting_of_ref": "indicator--25b5652a-21e9-4363-84f7-8559feb650dc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad9b31c-3d7c-4adc-b347-9bf17c9c134a", "sighting_of_ref": "indicator--c05b18ee-dfe6-4c40-80bc-973b69def837", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c60acfd-f463-4134-b332-1d3fc9bae3bd", "sighting_of_ref": "indicator--647b1b90-3172-4a2b-99ac-c08487b54096", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76d9d3a-45bc-490d-be2c-30a4b9b723cf", "sighting_of_ref": "indicator--88adaeac-7832-4f7e-a8c9-89ec5c85f916", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f21d81e-fefb-4cee-b303-6ecbc2b79e0c", "sighting_of_ref": "indicator--117baf8c-0f70-4dae-83e7-b3596e071904", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39994654-5a8b-48d7-b858-2e5cc38a8047", "sighting_of_ref": "indicator--cd861875-62ef-497f-b647-36f352cb14d1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e561700f-d78d-4d0d-80b5-1979fa110498", "sighting_of_ref": "indicator--48795169-d4dc-483b-b936-af7b5504b816", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf830ee-4c86-4ead-a2d4-4e2750a59214", "sighting_of_ref": "indicator--d11929e8-f70b-42b5-95b9-bd32c9908c04", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4868fb-2a21-4dd8-8860-bfdfde50b3b1", "sighting_of_ref": "indicator--f2242e1b-b1fc-4c6b-b73f-ad70246b8c75", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1a6c43-bc67-4fe6-bc08-fd9a735b88a5", "sighting_of_ref": "indicator--f28179d1-db44-4d02-9e78-592b308847a0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db587cfa-a963-45a1-8ec4-25fa9c8770fb", "sighting_of_ref": "indicator--549067ab-75eb-49ef-9ca3-cfddba4c7ca1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba89a91c-028d-41f1-a5db-09f5dba96613", "sighting_of_ref": "indicator--31505b56-6709-4a78-a98a-08f06221e1c0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438398f2-3543-412e-a548-7a301f8054e0", "sighting_of_ref": "indicator--5786c513-1c64-4c9a-9baf-e8ba5feeb066", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc27035a-19ad-4512-9a16-54901d68f2d8", "sighting_of_ref": "indicator--936eb877-1f14-4ea9-8da4-fb8442aa9d91", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aafdaf7d-6fbc-49fb-a57f-734f35a4fd38", "sighting_of_ref": "indicator--1e6bfe5e-f2b2-4bb8-b13b-63c0a2fc91a0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d35e4cd-ec82-4176-8355-763dd74cf442", "sighting_of_ref": "indicator--b828dd2b-c080-4e3d-99fe-720a1e2b5ae4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad778cc-d4a1-4956-9030-8cb2f99bb5bf", "sighting_of_ref": "indicator--744c337e-aafa-467c-9f98-954f9851a412", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef6c2b9-9bb3-4fb0-9fd2-a986c3e68270", "sighting_of_ref": "indicator--a5ba2105-4221-4430-a021-0503bed6a852", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c05a039-aad2-448d-82e8-28bb4089b52e", "sighting_of_ref": "indicator--190bcc7b-e286-4c86-8397-6491b60ad113", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4336804f-ac2d-4a78-adbd-1f947fdc206e", "sighting_of_ref": "indicator--61f23f32-ff7b-4a2c-a58f-8a0b9129438d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c7de2d-8c01-4711-8ea2-7fbd09fa14a0", "sighting_of_ref": "indicator--730e3ccc-d34d-4def-bcb3-240a2a61c654", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2e9a4a-0a58-459c-aed3-92668b0ef6b8", "sighting_of_ref": "indicator--8bd417b5-f7f4-485f-81d2-576e1b4503ae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682bc917-323c-4aa9-8340-c998fe541f25", "sighting_of_ref": "indicator--1c90e84f-1e6f-4952-8a99-ec6c36549e5b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2bccba-6d2c-45bf-8152-eb79dbc7abde", "sighting_of_ref": "indicator--7ea50afc-a1a6-4cb5-8249-b476bf380450", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe79a7d7-dca9-432b-afd8-c904966d0f71", "sighting_of_ref": "indicator--09902c6b-83f7-4f4c-a6f8-81401132dc42", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5083ba3-c766-4c01-a4e5-2dd4dcc63a46", "sighting_of_ref": "indicator--4deaa5bd-7da7-49e4-9c09-2029cceaa78d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2801309f-e23c-40e3-9c01-d9260c58b337", "sighting_of_ref": "indicator--e1501f26-add1-4e07-bef5-6f8d80092282", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd776ab-f6ef-49cc-bbe3-cf5bd69b2e8f", "sighting_of_ref": "indicator--637c1900-dfa7-4aaf-bc9a-0eb96ece04aa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f621cbd5-3153-455b-81e9-fb7cdcc16188", "sighting_of_ref": "indicator--cee631d1-164b-40f4-8921-3fa475393ce5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a22e9e-4548-46ab-815e-914907c942d4", "sighting_of_ref": "indicator--3e6faa8d-462c-4638-9c40-b71877f3a5fe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ebe7cb9-1a50-492c-bccf-3c3886f78ffa", "sighting_of_ref": "indicator--2b4e1c02-ecb0-4fa0-8d94-f417375944b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904b82ef-fdf9-48cb-a5a0-de6584f38bc2", "sighting_of_ref": "indicator--fabda013-6fd6-4049-9a48-39ac38ce6d8b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24420a27-a070-413a-a993-f14a2210258e", "sighting_of_ref": "indicator--1df82c96-c093-4ec7-b9e7-85556a6575cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed912a54-9f7e-4262-a6ba-041edc73cb33", "sighting_of_ref": "indicator--086e2911-9d32-43c4-a0df-9f95c52a8d3f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4fcb50c-e163-4a9a-9b5e-6456584dbadd", "sighting_of_ref": "indicator--677ecbf9-417a-4437-9437-036bac804f5a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3c4c1e-cc92-465d-8e04-3eff272cc796", "sighting_of_ref": "indicator--ec4144a9-324d-4649-9422-c5019e31a8ca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82e13c5-b7d6-4ea5-9ad9-244eb893db96", "sighting_of_ref": "indicator--567d7dc0-9632-416e-addb-9cdf12f05c0a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4c3954-86ae-41c1-9090-951c6b5d048c", "sighting_of_ref": "indicator--cb159073-429e-46af-a2f8-0ae8c74ee61c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3638f50-0d80-4e20-a6a0-144cfa886a10", "sighting_of_ref": "indicator--e218414b-91d1-414a-911b-e8ce0cdd731b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d89e95b-4fbf-40e5-a67b-33b827d91ace", "sighting_of_ref": "indicator--bf071a09-a632-4d0b-8531-caa3c19105a1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9ca069-7c06-4f59-861d-90c72b0bb451", "sighting_of_ref": "indicator--79131364-7992-4f6c-8465-bc44fa19c4d6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50325e80-be9c-4901-ae20-f4b21ea6b06b", "sighting_of_ref": "indicator--6288a8ff-0c5c-42cc-bca0-5300b925660f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e08d749-6473-47de-9400-7f9332bb43ad", "sighting_of_ref": "indicator--fe721faf-8ff2-437f-8c02-6a336f9c9b4d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e14302-a91b-4fd3-aafb-77605f2b2c38", "sighting_of_ref": "indicator--2750fe63-4d17-48ed-a849-47457795f057", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aff2521-c44f-4d7e-9ee5-528a59a0a50e", "sighting_of_ref": "indicator--df02bc62-34f1-4879-b97d-686d43496aee", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7e219d-6a9a-465a-ae2c-61e79031d701", "sighting_of_ref": "indicator--b54b96c3-1e72-400d-b49e-e763834cd848", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3d4bb0-18e9-4308-b87b-3f843c7dd894", "sighting_of_ref": "indicator--c1bda182-337c-4486-991f-f8ae18c68d50", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b6339e-6277-45ed-aabd-2c181d6f2c4c", "sighting_of_ref": "indicator--3815cad5-e317-4aeb-83db-161e1c87db3e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74898b63-58cc-4522-8895-43d713ef8438", "sighting_of_ref": "indicator--e05a429c-b278-433d-93a1-b26d87313a0f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c78e8c-e069-4364-be60-fc7f8f6aeae6", "sighting_of_ref": "indicator--46e94049-c346-49b4-a2a0-aa0543017f2c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8c32ed-3e88-4a8e-a81a-82d392ee2e97", "sighting_of_ref": "indicator--1a16396d-f4ee-4dd7-9fa8-6f514b9c22c0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ad7df2-62cf-474c-8d82-3ae60f3b8a64", "sighting_of_ref": "indicator--d48ec8d3-e2f3-4e98-881e-f677a329ba3f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477b8e31-9ae3-4b39-9f41-c70cda1e4065", "sighting_of_ref": "indicator--d2828422-3d84-4981-b04d-bff2b3c7abfd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34561f59-29d8-47ab-ae00-bcc0492f66ce", "sighting_of_ref": "indicator--b0969910-378b-4f8d-ae74-33eeda51ccb7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c379af74-e941-4aad-b713-44e9f01279f7", "sighting_of_ref": "indicator--65dfc81f-e2ce-4264-ad3b-bcfedaa772b9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0090f1ce-8db4-49f8-8d46-c63f9d0ffb8d", "sighting_of_ref": "indicator--83a9ab7c-3f7a-434c-8504-34709ad4e4af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb65524-0fd6-4ebc-8e79-3ae60aa85a6a", "sighting_of_ref": "indicator--6f55883c-02ab-4e38-9c48-fcbef61d44b4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484bb3cd-3323-4855-ae2c-564ec8c9972b", "sighting_of_ref": "indicator--cee9cb8d-b468-4fab-8d6c-6ada28229474", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc12af9-ba5e-41b6-aca2-09ef753d5821", "sighting_of_ref": "indicator--7323b94e-e363-4a43-95fe-b3b0e19875e0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d787f360-7ea0-4b7e-b47e-16dc99e68046", "sighting_of_ref": "indicator--bc77cffb-4078-4548-b94d-45ab3b6da266", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869ff384-4166-403f-a4c1-9e7bac5777cf", "sighting_of_ref": "indicator--464b8839-708a-44a9-b5ad-d773fcc1d776", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504a4a31-7a33-460e-87f2-1b445ebe043e", "sighting_of_ref": "indicator--4f017dbc-3d42-4d6d-9935-00d2b1c579ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cddbedbd-1d4c-41db-b76c-2b468f1718e4", "sighting_of_ref": "indicator--09acba3f-6b5c-438d-b103-50a9c8783a83", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a92361-99da-4132-9e71-1f291ef5406b", "sighting_of_ref": "indicator--5a937721-303d-48d9-88da-b91af36be3fd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d64dfb0-3cef-4df0-a2d9-e08723755023", "sighting_of_ref": "indicator--c1a75aeb-610c-4848-ad4f-37d6e369deee", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa847357-f554-4e46-812c-1e4ef733ead9", "sighting_of_ref": "indicator--2c91aa03-6a5f-4a8d-ad53-79825f6557df", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b073d4-e077-4e29-825b-cf23281f6c31", "sighting_of_ref": "indicator--7fce8d47-47f5-41a1-be9e-70b6d291dda3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8c626e-3665-4479-b325-70b060d9d7e7", "sighting_of_ref": "indicator--d6371070-b737-417e-92ff-446846d0f254", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285caf83-b28a-4525-b1b6-cf441cee3e24", "sighting_of_ref": "indicator--14241f62-5b19-429a-951d-b57168b36df9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab4f330-6ce7-48dc-b59b-8e5dde4caf87", "sighting_of_ref": "indicator--c9de8942-e1a4-4bf2-b11d-069fe343d9ad", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c32a3c10-d38f-4ce9-804f-ebb50751a52f", "sighting_of_ref": "indicator--6edb9b56-3fe7-493e-bf91-772a6640df94", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e34ef89-0d6b-4859-ab95-dc5aabe6fe18", "sighting_of_ref": "indicator--1d4301a9-2976-44c8-87c2-1014855b8018", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc2f8e4-5c86-4b96-bc7a-23a0ea8e21e2", "sighting_of_ref": "indicator--3def663c-e73f-4c82-a4ba-504c5410c945", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13bd68d6-314b-4373-b6dd-b885db68b69e", "sighting_of_ref": "indicator--2f6e96d1-c4e7-4079-9d80-3363b5f57e6f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c79ec2d-2e34-401f-87c7-780d6b89f164", "sighting_of_ref": "indicator--5289f251-afd5-40e8-ab87-0e6eb9b310a2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed662557-68ca-4eb1-88fa-d379c9069dd8", "sighting_of_ref": "indicator--8e4ff3e2-3935-4233-83cc-2e42076e29c0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a74e30d-c23e-48dd-bc9b-43c6f4f485a3", "sighting_of_ref": "indicator--e9ca5111-3fa3-4a5d-9bd7-27a07b9135da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fd7abe-7fbb-41e7-aede-18db77f9a9fd", "sighting_of_ref": "indicator--7dff9287-d25e-49be-b517-b074cc567178", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48dc7c5-f3c8-47dd-8ef3-29cd4985ae2a", "sighting_of_ref": "indicator--5e5442e7-0a70-4e1e-a944-90b9858fd427", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b6ce65-091c-42d7-b307-546e04a737d8", "sighting_of_ref": "indicator--99e57bd3-3b23-4ffc-b109-010eaf2b31cc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca69d6a1-dc48-4bf1-9fc3-7328ed372fbb", "sighting_of_ref": "indicator--387ab2b7-11f3-4bea-9469-bb5fba31829a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88eccf2b-21f5-4357-b678-4dd0da1b66a7", "sighting_of_ref": "indicator--80f883d4-49c1-4655-9d09-b00cb812e272", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e363edfb-15ca-48d8-8deb-48c9061f006e", "sighting_of_ref": "indicator--25ce01c8-cac4-44ae-9187-7efa0501850e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c54ca25-eb9e-49c6-8c69-08216b2c9ac2", "sighting_of_ref": "indicator--c19f5dc2-b7da-433e-a51a-cb197bb8241a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae25760d-09a1-4979-bdd3-5f24b85ac427", "sighting_of_ref": "indicator--346293bf-2f3d-4711-b801-34a465161185", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a370f3-8d01-4b0c-87ec-0c240bbb50d0", "sighting_of_ref": "indicator--05ee29bc-3aa8-4f34-9a16-129de7f3c7c7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6deb43da-65b0-4246-9eaa-ad4b20b8e21d", "sighting_of_ref": "indicator--293a18f7-da3e-4619-97e5-3af15466ce8e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f95f3f-a3f1-4b01-9a17-a14e04690bcf", "sighting_of_ref": "indicator--bb98a22d-59c7-4ab0-b401-729ae7316401", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb85ff09-4654-41b3-9877-ae3ca2c364ec", "sighting_of_ref": "indicator--c54ceccc-6b8c-417b-bfde-513763dfd858", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405312cc-c9f6-44d8-aa7d-ff0f641132f0", "sighting_of_ref": "indicator--62b8f4ed-2f35-4296-878a-9f2258fc4aea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07dfc1c7-e854-4fc5-a81f-0d987b70638f", "sighting_of_ref": "indicator--ec9e3c9e-1735-4e01-a694-c5709a477c2b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb48937-e741-4a95-8efd-1a913f3ffc39", "sighting_of_ref": "indicator--31d63e9b-4eb6-43d0-863e-5ad4982f4b96", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35fbe5fa-0f91-4208-887e-6459d8b1f982", "sighting_of_ref": "indicator--2cb3d649-d010-4fad-b218-f417f60c9d63", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd42b9d2-a6ee-46e1-aaa5-3eaba31d8f21", "sighting_of_ref": "indicator--3d025658-d03a-405b-a883-c1fc7e68487d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2751b88-5cd2-49a7-8bfe-0cafc96b39de", "sighting_of_ref": "indicator--4db210ef-f4ef-44db-bf93-fbe97ef1f2a4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd5e1ee-ca01-40a7-a841-a7136f59fba3", "sighting_of_ref": "indicator--fbeea554-3e95-42e1-bf79-4dc0469ab553", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02b18d9-0aea-429e-9d86-af6d05429886", "sighting_of_ref": "indicator--1ff3a816-dd18-42da-b5e7-3fdb1093fc04", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ca4ee6-7326-4932-8341-680de12be776", "sighting_of_ref": "indicator--796effcb-beb2-4a51-b3a2-64fcf84b467c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58460999-f58a-4dcb-9e02-1a1019fb877e", "sighting_of_ref": "indicator--98dc7247-7388-47a5-bd0b-e7069610f714", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100c502e-bd03-49e6-9355-617724680aa9", "sighting_of_ref": "indicator--e2cd5934-39b6-48e8-a407-1fd2ff465fdc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8dcb59-2201-498b-83be-eaceddacf263", "sighting_of_ref": "indicator--6ad9c729-ba60-43f2-be65-dcbd3d4adda1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7da8be-f076-4041-95a3-a7cf8e8b1978", "sighting_of_ref": "indicator--1a3804f7-88d3-473d-824e-740bed604f8b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aab83c0-435f-4f29-b6f7-a2380f3e9d70", "sighting_of_ref": "indicator--f965fdaa-0a0e-4b51-8986-bf71e3d820c2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e7da68-9713-480f-8c68-3848fd138089", "sighting_of_ref": "indicator--3900d991-f9a7-4a5c-be46-e4a17bac7f0b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8179d90-479e-428f-a83a-02930c781634", "sighting_of_ref": "indicator--7be37d9a-621e-4ad7-9050-e53ff51d271a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bfd3395-bbed-4b80-8c6f-9576a8801902", "sighting_of_ref": "indicator--b76297be-60c0-4876-90b1-9411b6c13efd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc04eac-9bef-43d6-9111-17c3b258571f", "sighting_of_ref": "indicator--a1282209-d89c-4a8a-aed7-835ef04452e7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee363e7-88b1-4145-90a2-b666796a8329", "sighting_of_ref": "indicator--9586eab7-0e2c-4b12-8c0d-7c34efc90ab4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d9486a4-f127-4757-b0e4-94737ce6760e", "sighting_of_ref": "indicator--ae021b06-7dc4-415d-acb0-701669d42ae0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41475f76-5229-48fd-b3e5-5898621a1c6f", "sighting_of_ref": "indicator--b5edaad5-f4c3-4f40-a7c8-ca0b17e7ae48", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c841c780-9afa-41a3-9497-d1f1acd192dc", "sighting_of_ref": "indicator--6b6af0b1-ccc3-4e89-8ac3-18859454039e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f09143-56da-447b-92b7-5a3e31e7269b", "sighting_of_ref": "indicator--2cc54614-3aab-48d1-bb59-15073a18e89a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718fc47f-5e1b-4ed9-b411-245730497629", "sighting_of_ref": "indicator--df083210-4b1b-4543-a216-08dcb88036c5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70a48b4-d753-42ba-a055-4013cdac5207", "sighting_of_ref": "indicator--858a0847-a337-43c3-8d88-02491dcc19a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3de2978-43f3-470b-86b2-75a91c9c341c", "sighting_of_ref": "indicator--0ce49cd8-81b0-41e5-be94-4474f590d88d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc4727e-5c7b-4de5-af46-fe0717916272", "sighting_of_ref": "indicator--c3405708-7820-4f91-aef7-50759c5d7a95", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8333b45-c45a-4166-9f72-fb395e7e2dd3", "sighting_of_ref": "indicator--b4187fe1-421b-4c47-98b7-6498197b9d4d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0926577-60ab-4c74-9ac8-ab671d8d5c12", "sighting_of_ref": "indicator--2cb4f846-7add-4dfd-9171-55496bbd02a0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8929ab5-9bf1-4f6b-b90f-32042c56bb26", "sighting_of_ref": "indicator--a0ef68d8-adde-4c38-b791-9be4ed957cf6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af807af5-191f-409c-89d4-980a2fa36ad2", "sighting_of_ref": "indicator--4dcb137b-26c6-45c8-a04d-0e3d039d9e76", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f54dd59-2780-4e5a-9eda-e054ee567a44", "sighting_of_ref": "indicator--3ba429f3-d2d5-4d0c-9799-d6c1a23018ce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--319f9565-2281-4f55-9a3b-eb80cae38ec7", "sighting_of_ref": "indicator--b654b957-7cc7-4cce-8fb1-1f6d1431c723", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e21b6d-d7e8-4eb7-9aef-c67315aff1f1", "sighting_of_ref": "indicator--a3a4ecf8-61a2-4ac3-a765-c82a3d7abd83", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b30dfc-9165-40b3-9002-f4ef36a4a6c1", "sighting_of_ref": "indicator--32ac315e-b740-4161-9213-2e9be286941e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b6d30b-ee9b-4111-9c6c-3435659dc1a9", "sighting_of_ref": "indicator--9a53bd78-d7a1-4edb-9f1d-4506df31f0b4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d49940-1a34-4bc3-bc7d-6d42470e1768", "sighting_of_ref": "indicator--1db5bc32-73fe-4014-b840-ec12c9705013", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d24d2ae-171c-4115-85b1-b3c5458a6ba8", "sighting_of_ref": "indicator--8ef10d53-b609-4288-bd35-43431467ec4a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa68acaa-5023-44c4-8352-40492e918b8c", "sighting_of_ref": "indicator--34196e0c-5909-4b71-9204-fdfae79d36a9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927a39c2-be93-4583-bd32-a9dd61b57fca", "sighting_of_ref": "indicator--2cb5aa09-f2e4-45a3-92be-a6bd0c93d908", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c270792-be8e-411d-82fc-687a9c2cec42", "sighting_of_ref": "indicator--c7718fc8-88ec-43b1-97ce-695f0d4b7969", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d7b86b-26c7-447b-8e34-889928d76879", "sighting_of_ref": "indicator--eceeb671-edae-411b-bf2b-6b2d499d32e8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1423ad8f-8303-472f-babb-7e0f31d6330b", "sighting_of_ref": "indicator--21317d41-0205-4b98-b43d-ab353bf04ca5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa305086-b5ac-4b60-82d2-e31277da0401", "sighting_of_ref": "indicator--1c270a46-c57a-4042-9e5f-17b64299ad75", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d568238b-58f2-4f7f-b8c4-f6f190fffe6d", "sighting_of_ref": "indicator--704545a5-aca0-45e4-824a-eb798b83c333", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4553f7cc-1a57-4d14-885e-230b5362790e", "sighting_of_ref": "indicator--75f900b7-fc9c-4ba3-9356-40cb7ed3800c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7bb89a-efbe-4005-91ca-215b7d94d0b4", "sighting_of_ref": "indicator--8abba843-6158-46d4-9989-e1f63a3359fe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d6318c4-58b4-46fd-903a-188f2ede977f", "sighting_of_ref": "indicator--8ea0ee00-40c3-430f-9070-ce0d1c4866fd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5bec416-297c-4e5f-bbaa-690eda9fcc5c", "sighting_of_ref": "indicator--1a13d3e3-2d98-4090-b478-76cb088e4d7d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6bef04-61f6-4979-83e1-7fa438ad1b2b", "sighting_of_ref": "indicator--c1dfd026-3315-4218-999e-2985d9e0c576", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d870a7-42ce-4692-be53-7e20d32af910", "sighting_of_ref": "indicator--462c8a49-321a-4ceb-ae5b-bb79ee27a2b2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d5cc49-4835-4ca0-b82b-8358d6b4298e", "sighting_of_ref": "indicator--f57fec80-4f1c-4772-b78f-c69a161b1c9c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c44b4153-57b9-42a5-97d3-2823bf9eae93", "sighting_of_ref": "indicator--a392f37e-e557-4270-a97a-c4f4df756155", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9e81d2-2281-48fd-b301-5f6f44aef198", "sighting_of_ref": "indicator--0fc12aef-f894-48b4-9346-6bf36c78038b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e459f6-45f9-4069-baaf-0abf37391167", "sighting_of_ref": "indicator--39f7793b-5085-43a5-8561-e1bc0569bf10", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4442dd2-a05e-4baa-b3ae-7ea0b46f8202", "sighting_of_ref": "indicator--47012d03-9210-4176-9d1c-97ee6e3274c0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33894dd-af8f-4919-9583-017ae95426d9", "sighting_of_ref": "indicator--6b1fff21-5cb3-4013-9eeb-4bc8382ef859", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b759f7-ce63-4bd4-922d-6aec945ff430", "sighting_of_ref": "indicator--5126ed23-97af-4265-ab5e-684485707359", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0067ccee-7adf-4d8b-8c6e-430a6037d897", "sighting_of_ref": "indicator--f0aedb39-63b0-4a2d-99b2-9ba747c8bf29", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9eff8b9-860e-4cba-a690-523018dd2907", "sighting_of_ref": "indicator--3e6fc992-ea77-405c-9af9-2bad609a4b94", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d051bc3-fed9-4594-bf20-ed4dfbc8fb42", "sighting_of_ref": "indicator--c16433b9-573d-4daf-9ba2-3c15d5bcf796", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72ad4db-a89f-4c8e-b327-1e4ada2a795e", "sighting_of_ref": "indicator--ef9d2650-6666-47ec-a16d-0543e14dc546", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de36866-abaa-41bb-93d7-a10ea60beb43", "sighting_of_ref": "indicator--c005e79f-65fc-436a-9f8a-d93849bf2b6e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066f4f82-0376-4026-8c91-6c9e45933363", "sighting_of_ref": "indicator--153b1d5b-dfa3-4983-8973-cd1b8187be8a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708ef74e-7873-4263-a513-7b388888dbd9", "sighting_of_ref": "indicator--c70cb741-609b-49eb-b22c-313efb51eb11", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0fef7b5-0e06-4999-94be-fde3496b775d", "sighting_of_ref": "indicator--921b056d-b74a-4c13-b022-276698f667f7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf3cdde-8200-4b16-936f-2678be5ce3fd", "sighting_of_ref": "indicator--137f27a0-61ee-4d50-bdff-47af543b50df", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027595d8-c1b9-4459-9e3f-fb1e9816e12b", "sighting_of_ref": "indicator--00e88d8e-94c0-4b08-be7c-e22edb6bacdb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83944c2-0a49-45f4-8e62-f2f195aa1b09", "sighting_of_ref": "indicator--7bcaee96-944f-412d-8d11-154474283d90", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5bd7a7-929c-450e-b335-929d2198f8be", "sighting_of_ref": "indicator--bca8f7b9-4a49-43e3-8505-2caacc0b9515", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0fda237-9288-4b2c-aa79-3b2cdd237925", "sighting_of_ref": "indicator--77ce76e9-934e-4626-bebf-6d02ebc589d4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b7b9961-de95-416e-a312-db0f0cf13d29", "sighting_of_ref": "indicator--816177a0-cb6a-4ecb-9f4a-b47d8af5e0fa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f172a8d-8785-4fe9-a89a-1557441fbd36", "sighting_of_ref": "indicator--00a0a913-f0ef-4518-b9c8-9e2d70c32d53", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf2772e-006d-4d74-8d60-18a31f49258e", "sighting_of_ref": "indicator--835d4aee-902f-4c57-871c-33d422529c69", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99abee25-24f5-455e-8d1c-e8153fb7df4b", "sighting_of_ref": "indicator--87c2717b-ad9c-409b-8fea-f8eceec43b21", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba58dc9c-d39b-44ba-b2c7-2ecca5f46d8b", "sighting_of_ref": "indicator--416faf20-b14b-4ea5-ae5b-9efa5a95a069", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7f3e07-c974-4a22-ab3d-464d6a76261e", "sighting_of_ref": "indicator--47df179a-0565-4cb2-873b-873507bd36c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938f7b69-a4f1-4a74-94db-704e01fe6317", "sighting_of_ref": "indicator--63f47f62-5e29-42bb-9436-ddccc63fa7ca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15f527e-f3b9-44f2-a6be-edc78b9bb0fc", "sighting_of_ref": "indicator--5c79898f-caa3-451b-9f69-799d2bab07f8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41245a31-056d-42a8-a0c5-3bf7517503a3", "sighting_of_ref": "indicator--01f8f3f3-bc3d-4371-8b77-696ab7501a80", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73938d9-78f8-466b-9d0b-ea29fd62f10d", "sighting_of_ref": "indicator--6849dd6c-2a65-400b-bce7-04a916562518", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1121f11c-c744-42fb-a4e3-fa5363906e64", "sighting_of_ref": "indicator--652360ae-3655-4ce4-b440-f7da68d7152a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edea07b2-1464-4bfb-920b-e94465d372bb", "sighting_of_ref": "indicator--fbc17d33-d41b-4b69-bc92-ab8e2c710bf0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03c2349-3b42-4796-b9fa-74ee3f64bb8e", "sighting_of_ref": "indicator--eac26499-174b-43d6-b3cf-d82cd12a2a04", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca7ab3d-e121-41df-8fcc-be3455995221", "sighting_of_ref": "indicator--bd16bb4d-b882-457f-a070-f4f619683170", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd9effb-d336-4c3a-a301-9fae3516c475", "sighting_of_ref": "indicator--c6a6b2b6-50ff-4fd4-beab-19d06859b77a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ca225c-6544-403f-b3a4-6f7ae6d8cbf2", "sighting_of_ref": "indicator--cc03b9fd-9758-4646-b8dd-e2daaa5132ee", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8303b494-c72a-43f4-bc56-956c518138c7", "sighting_of_ref": "indicator--30b65b4d-04b0-449b-835a-7fa4b5f6950c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e61f06-515a-4d3d-9e15-6e5739600b41", "sighting_of_ref": "indicator--cb67f776-1951-4fde-b2fd-327a5607a36b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1478f59-e1c0-41c9-ba69-50214d292571", "sighting_of_ref": "indicator--106d69f5-149a-4047-9c17-442eafa78c7a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4632f3c-c13f-4e04-bb7e-d0fc90037e3a", "sighting_of_ref": "indicator--00f16e1a-c728-49d8-9a22-7ecea8b1a5fb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb54196-537e-4cab-8372-01a6857adf1c", "sighting_of_ref": "indicator--ac5e487f-5cef-494c-a9e4-3ecba26516d0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a6448c-7cb6-4644-a038-f7a7566a32da", "sighting_of_ref": "indicator--253db928-e53a-4644-9643-d754eb4f550f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--465d69d5-bc7c-4958-801a-c20a9f2d0c8a", "sighting_of_ref": "indicator--99ced0c0-9c82-4507-9060-13eb26e52a4e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--223e50bc-fb8d-4375-a269-8ac43f5a7590", "sighting_of_ref": "indicator--37490e96-a7fa-4f8a-be57-d4e0c5f8beff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4672c4-d4aa-4b2b-9837-c4e049694a2d", "sighting_of_ref": "indicator--b59700df-ba1c-4419-a8bb-2d706d7c3730", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795e0bdd-256e-4205-986f-4bf5c8a084f3", "sighting_of_ref": "indicator--bef51824-f655-44f1-99be-91db429364c8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52514c73-32b6-47e6-a396-7e890dc4b278", "sighting_of_ref": "indicator--e4054724-2905-4a60-bda0-cb7f10743768", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--289a0c34-a478-4271-a059-ad83851aa952", "sighting_of_ref": "indicator--c4567a24-2a74-491f-aca6-4bffb5436c93", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9425c8a-5ba5-4e8f-bf52-d886ebbb6398", "sighting_of_ref": "indicator--636ed0bd-1b95-4120-8de8-974b423a1270", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fab96b3-15b5-4060-939b-5e0e76f4e5d8", "sighting_of_ref": "indicator--36e1453f-45b5-4796-9fc4-cc585e057fa1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3bee17b-3de8-4422-8773-9a1355bd2fc4", "sighting_of_ref": "indicator--a5b34a6d-cadb-4470-92b0-5e9af1802fa4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd45384d-c84b-429c-bbe7-421a1b317845", "sighting_of_ref": "indicator--5dc8d87b-e531-40e4-8e98-f52ba4331a45", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b005036-9a40-4bff-b128-444ecb288320", "sighting_of_ref": "indicator--cfc21c35-67e6-44b7-8dc6-91759896a05c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c045d14-1ba3-4e59-8845-86aee63eb04f", "sighting_of_ref": "indicator--a95a31ef-f0c9-4160-9a57-7b530b3a72ef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d0376a-ba9c-4694-9281-832499208cd1", "sighting_of_ref": "indicator--c9cef5d9-0fb3-4e52-9a54-687829c2ddbe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f65294-1993-4894-be2b-13e539e04f71", "sighting_of_ref": "indicator--d7a07d64-46c5-42f1-b048-5ee998c262af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--844c6be9-357e-41d4-8b19-fce892ca8821", "sighting_of_ref": "indicator--21098485-09e9-47e1-a9a3-f981e9ec04fa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c015a4ae-f1ac-41ce-ae78-169e15e76a65", "sighting_of_ref": "indicator--6eb69f37-9d22-49c8-a3a6-79035e73ae17", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f272be6-fa28-465d-8a67-f66aef4e29e2", "sighting_of_ref": "indicator--68ac21ca-a0a4-4edb-ad4c-480dd3a95543", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd43c18c-7305-4200-96d3-f5677bbcb76c", "sighting_of_ref": "indicator--a46bbf20-fa70-4d6d-8e24-3f8d437112fa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26aa5ceb-94a6-42be-bf10-2fb85ab96c52", "sighting_of_ref": "indicator--3d11357c-c5cc-4a0c-94ca-3b82c4143f03", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0381a7dc-f316-4911-84f8-b7a66f299e2e", "sighting_of_ref": "indicator--5a145007-0f14-49fe-971d-07464f4a09e5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0097c82-3307-4886-9012-9bc02cecd593", "sighting_of_ref": "indicator--63c89e51-50a0-4541-8150-f71379753acd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0486ce-7290-4657-9882-42fb5aaedb00", "sighting_of_ref": "indicator--d08dd220-bb22-4254-b1f1-b8932de989b7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2889483e-147e-4076-86af-fb47c2054623", "sighting_of_ref": "indicator--d15a11df-cd55-47c3-b4d7-64411015ffcc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--148337c2-87d7-4d10-a5ba-c6769f1e5cfb", "sighting_of_ref": "indicator--9e565eaa-d504-4c75-a4f9-69e5e4ca82cc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0708662a-a22e-49b8-be65-ff0461044e1c", "sighting_of_ref": "indicator--f864ddd1-992b-41f7-8fed-fe4425fc2a9c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59fdbdd-9425-41ac-b6f2-74b16a76718b", "sighting_of_ref": "indicator--ec8600d5-2a05-4fff-8dbb-35658ab53c42", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a51f841f-cecf-4fc0-8e21-6febd3f79635", "sighting_of_ref": "indicator--93b2a10d-77a7-423c-af00-9a60c532d796", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c94281c-1936-48df-9c28-8ae266028584", "sighting_of_ref": "indicator--35e1d31b-b0cf-47c4-9c72-af0d1a480df7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b423f5-9441-4e97-88b8-1d8bdbe27880", "sighting_of_ref": "indicator--7a38c0a1-ca5f-4ffc-a9b5-deac87c6076b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6609a4-3c61-41b3-8177-b0ad0706f42a", "sighting_of_ref": "indicator--54473cc2-7ede-46bf-a874-c9925969ec6f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273ce52a-cbc4-419c-8150-1b2709a6882e", "sighting_of_ref": "indicator--76d5eb73-0193-4b60-9d72-31390655f867", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609eaadf-1edf-4382-8dac-9118db319df7", "sighting_of_ref": "indicator--d5b67b9b-f078-490f-8fe0-10cdb38ca267", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16eb80ec-24c2-4f5b-a643-1e0bcb41ddea", "sighting_of_ref": "indicator--c5c07e22-6261-46b8-98b8-24e0cb733a75", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5164934-adeb-46ad-857e-005a41fda2a0", "sighting_of_ref": "indicator--a09e05b5-91dd-48c3-a171-c6b35f69c82e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--209ec38f-d3e0-41c8-915e-18a6326911c0", "sighting_of_ref": "indicator--fb89e13a-7467-435a-9f07-b6156e49ae62", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90724b97-4537-4cbc-9528-e79595b8b221", "sighting_of_ref": "indicator--94d49955-9366-4264-a3ad-82c6237c1820", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebb15ba-59e2-4f57-918f-498bb6ead223", "sighting_of_ref": "indicator--48b52996-93d9-4362-b7df-f90567ea82b7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b606a8d0-e565-4c68-984a-9bc6603206b3", "sighting_of_ref": "indicator--83f79a0d-7564-44e9-bcce-1721977df767", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c560a9da-944c-4642-9ff5-824503fa50f8", "sighting_of_ref": "indicator--eddabddd-4e2c-45d9-9be9-a1a9b8109132", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576e1394-394f-49c6-b730-996e03916ffd", "sighting_of_ref": "indicator--12103334-c180-46f0-9d0c-72e8ffe33312", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da7a04d7-dc2c-4230-b184-316532bb1b88", "sighting_of_ref": "indicator--39581cc3-a7b5-436d-978b-5acd4a6bb7f9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f5af4c-1eeb-4188-b97c-6ef012118519", "sighting_of_ref": "indicator--f8269452-ffde-4515-a5c9-b5400434ce96", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be409f00-71d1-4462-ace7-b2c6d9e34502", "sighting_of_ref": "indicator--e3483b5f-2501-4c86-9532-7bc42c1e4e02", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ed8de5-7611-4bad-b447-c6bb254258d6", "sighting_of_ref": "indicator--89908423-1880-4d2f-8207-3b2ffc423ce1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a771c7ad-9c78-4ac0-abf2-93f9c55b6b4e", "sighting_of_ref": "indicator--ecc6b51d-407e-4596-86db-86aa4d5fa4b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba55cf3-8b88-4f43-9d66-52101b8c4349", "sighting_of_ref": "indicator--f35f6d20-a314-4a31-8c43-96c0e9fba362", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e56d9f-e286-4c0b-9d61-5f54696c4a92", "sighting_of_ref": "indicator--d9a20e5a-b05f-4b79-8332-fd9e522ef786", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8564ed56-ecd7-486e-8775-1db271b3c225", "sighting_of_ref": "indicator--3fb898b4-3ab4-461b-9c2d-30b151ff984b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b038e2-f8b2-4d34-9d6c-47cb87440725", "sighting_of_ref": "indicator--9cabc665-72fb-4ce6-b52a-12d08f7685ac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48f4d15-0db6-4257-9783-94340b023b2a", "sighting_of_ref": "indicator--738390d9-2fe8-40fd-ba15-d968ee9ea0f8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df9e656-acef-4db1-94c8-2dbc926c3442", "sighting_of_ref": "indicator--7ef279f8-0f26-4988-b4fb-0976b8f5b458", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2482c29c-7338-4a52-b604-a058c694752c", "sighting_of_ref": "indicator--8ca98c7e-363b-4d6f-9d76-27a126bef8d1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6dcfd8-b03b-459c-9e77-d62b914c7588", "sighting_of_ref": "indicator--a4b18e67-6312-4715-8489-f50cbb7601d2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b10d88-eed1-4525-991d-453f2ae2c7de", "sighting_of_ref": "indicator--e31466b7-145f-44a2-81e1-6f4a3b8b26db", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0135acd1-93ad-4741-a084-c8d6185cfa06", "sighting_of_ref": "indicator--cb864888-5f9d-4071-921f-9b05ca61c685", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4506aa-4832-458a-b1ad-d38607554ea5", "sighting_of_ref": "indicator--cea16639-f121-48dc-b453-68c9f25abe86", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b210c1-7fe8-416a-86af-52cf4c13084b", "sighting_of_ref": "indicator--16276938-8767-4ea2-8c81-602f3869103f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3346f57c-a0a4-4a64-b436-36e8d5805cb4", "sighting_of_ref": "indicator--8d4d14aa-4d71-4ae5-971d-fb170769e434", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a3acad-0f77-4c07-8dbf-279892a238e1", "sighting_of_ref": "indicator--6376c51c-2e0d-426f-8534-75fb6fd354f0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754c87e9-0775-4428-8512-eb9786556418", "sighting_of_ref": "indicator--a154f269-8b3b-4529-9047-38d5e8db91bf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d702e2fd-b1b5-40e1-95e2-4fabbcffc2c2", "sighting_of_ref": "indicator--9c470dac-6683-4c5a-8e76-4406307c9152", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912af0e8-4938-408c-a0f0-065f749c619c", "sighting_of_ref": "indicator--fee14f5b-b15c-46fa-bded-71111d019712", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e27ad5-ede0-49ce-b3ec-64b66da55b48", "sighting_of_ref": "indicator--3868f108-0b31-4cf3-a822-59700baaa661", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6b1ebb-51bf-41b9-8734-c9a7702f9d0f", "sighting_of_ref": "indicator--705b3528-ec43-4b10-9c13-988567359426", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc794550-afcf-4a47-9b7e-b16959167eee", "sighting_of_ref": "indicator--5cff8c1f-64f5-4134-9832-786fc0922eb3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--325bf969-1509-4384-98a2-27cf2d7c7f4d", "sighting_of_ref": "indicator--f99a4dbe-084d-46dc-940c-d31385a9157a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42dbb6a-9500-4e44-9bc0-c87e31004c29", "sighting_of_ref": "indicator--b6465304-1fc5-4432-8649-51bf7efc6167", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc92768f-363e-49f8-a2ca-3b1cfb546181", "sighting_of_ref": "indicator--58fd2bb1-66d4-48aa-8ba6-8f8d567e64bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69fd0ab-5aa7-4eca-ac3b-92f216cac8f9", "sighting_of_ref": "indicator--b45b9491-4ce2-4d35-9c66-c5603a0fb6fb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17931604-6beb-4d14-866e-4e9026a3cf57", "sighting_of_ref": "indicator--c184e9ca-72e2-44c1-a72c-02d8df702a7e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad32419-3c8e-4882-893f-7c1639c27e6c", "sighting_of_ref": "indicator--08ad870c-45b9-4ab4-b271-599c30116ee6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be081892-501a-41ec-b275-d8fcea3af014", "sighting_of_ref": "indicator--514a5c4a-fc72-4eed-aeb2-88d7f1f95d59", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad58de88-6b96-45fe-b7d8-d60830961463", "sighting_of_ref": "indicator--b098a191-614f-40f5-ac58-9dd19de87aa5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99074d98-7e3e-4707-ab82-5ea2e9c4f327", "sighting_of_ref": "indicator--ab37f85a-6edc-4c2a-977f-064240b3a4fd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52457a7-6b07-4753-9a8a-5c40fa3a1fa5", "sighting_of_ref": "indicator--660ace68-34f6-4b76-bbb2-725e9cd8fc3e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9345a1-591d-4176-b40c-a4b9c804cad3", "sighting_of_ref": "indicator--3de62900-d3f4-4bd8-85db-3da6cf4ad11c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926fbfdb-d9b6-45ba-82ea-4fb9ea242059", "sighting_of_ref": "indicator--33b5fa81-5be4-47c7-b4dc-9b9aafd2d753", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b8898c1-c4ff-4f13-b68f-7828f3b5254b", "sighting_of_ref": "indicator--ef1fcc6e-b2d5-47e3-8b0d-4f7547c240a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb88e15e-73a1-46b5-8b80-a8aeb3c933d3", "sighting_of_ref": "indicator--5982532a-f673-43bd-8433-373b40bed2ff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee44c0a-eec4-4945-996c-30dfb0f52c6e", "sighting_of_ref": "indicator--3fbaa452-6911-41e6-a6b8-68499383f696", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b04f091-7a70-4768-a463-9bc9d25ecb49", "sighting_of_ref": "indicator--77340730-50b4-4b20-958b-5074e3aeef40", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd597b00-a85e-464e-8f6d-d78939589477", "sighting_of_ref": "indicator--180e4783-ae27-49da-a74e-b6e833641bf1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7414465-b2bf-4998-9394-65e17970d195", "sighting_of_ref": "indicator--245a8d9b-a62a-40b7-b732-0b32473e48bc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a29e9e9f-1bd9-4baa-ac31-c02442cd55be", "sighting_of_ref": "indicator--66a3fca6-faa6-44bd-998d-a663ed5c4732", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a742820-9ee1-41f0-80fa-08fa9786f6f3", "sighting_of_ref": "indicator--643b67af-ab5f-4942-aa2c-81cac4600843", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--807d0dd9-f6de-4c75-a447-70224dba7ac6", "sighting_of_ref": "indicator--c937166c-a5a3-4a7a-bdbc-24f75e43dd52", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--054c31ee-88b9-43f1-acc4-d1f01848c7c8", "sighting_of_ref": "indicator--ac44b1e0-946c-4b2a-ab48-191cb3265575", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0152f5d2-3711-45c5-b87b-0fb196068203", "sighting_of_ref": "indicator--d0eac4b1-cdd5-48ff-8ade-4dd86ec228cc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd46d59d-17a5-47e2-bcb2-12fe48a30f6d", "sighting_of_ref": "indicator--bf1f4792-0eb1-440e-9ced-ee7831aad7de", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--501d6e5a-fefe-4eea-91cd-1029bc98080e", "sighting_of_ref": "indicator--5a29030d-7a8e-4700-a321-534fc5883b3d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e12bd4-2b1d-40ca-b77f-a14013a67322", "sighting_of_ref": "indicator--058e7ca9-cab4-4334-b1d9-17172f1b0a75", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a1a23ad-0049-463b-96d0-90063458a475", "sighting_of_ref": "indicator--78a7ec34-825a-498c-942c-82f397be1c07", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60e3ef2-7ab5-42db-82e5-62826171b4d0", "sighting_of_ref": "indicator--80af1ede-b855-4495-a68c-025721b5bc65", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411f4cdf-a9ed-4e2f-8e07-40b2f8d58890", "sighting_of_ref": "indicator--66573f44-4ec7-438b-a4bc-9318001742f2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--821a9c32-264e-4177-8b64-58bbd6957628", "sighting_of_ref": "indicator--ee2a5f3f-5f85-4c43-bc54-14a184b76810", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef25d54-ec75-4092-accd-f0bfe250d9f6", "sighting_of_ref": "indicator--fae45d50-752c-4425-a3e6-6335936f1d1a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99eb2ef6-f5b4-4c57-a899-2aa860400fb3", "sighting_of_ref": "indicator--cfbcd3be-55dd-4ee5-be76-2a7efdb2dfcd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eddf97d4-13f5-46b9-8348-581d27149523", "sighting_of_ref": "indicator--0caf43b2-1f73-440f-a17a-d5d1b3c028ae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebfdda7-e33f-4bb0-a57e-7c52d280abd3", "sighting_of_ref": "indicator--a4a39120-64c1-4e96-b02f-905d4d515e4c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e80acca-a887-41a6-9dd4-48d11499efc2", "sighting_of_ref": "indicator--26660148-bc72-4960-b1e0-01fb49f7c240", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836b0501-77a9-4cb4-9732-21747372af8c", "sighting_of_ref": "indicator--d43fb3bd-58f1-4288-89b9-01a406fc5188", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4adf61c6-6870-4940-9342-9d4cd835d995", "sighting_of_ref": "indicator--3d3bb983-d3e9-4a2b-81c5-412121e0476f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8fc67c-5861-47b5-8840-c37f9f9cd249", "sighting_of_ref": "indicator--66b8c263-c19a-4ffc-ae35-110b54d176d3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a6a6ab0-1ce6-492c-b0a7-6d8ceb75595a", "sighting_of_ref": "indicator--2cbc9877-c294-448c-8520-6653bc48e2ea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b95cd6-f019-4861-bdc2-871153f0ab55", "sighting_of_ref": "indicator--308016d3-04a4-49fc-b2c4-a133df7e7b0a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c124d5b7-60bd-4487-9553-65cce66bb4ba", "sighting_of_ref": "indicator--784acecd-6697-481c-9b10-1c85cf029db8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53449be8-bd0e-4642-8ec3-bed4f17bf2fa", "sighting_of_ref": "indicator--603e74cb-589c-46f3-af0e-6746c1417157", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f2fcdc-f70a-4f4a-927b-05a12e8be2b9", "sighting_of_ref": "indicator--2f705420-b9ff-414d-ae49-930217d2f34c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d37a2c9c-23db-4360-afaf-10bee8d3e316", "sighting_of_ref": "indicator--83ba9b4b-7d07-4eed-84d5-2f89ddecf2c5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6ed0e50-e9f4-4fca-8ac6-d77fb4d77a4c", "sighting_of_ref": "indicator--d4ac30e8-fad1-46a7-9b7c-a56fb1e65e9b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce429b8-b5d4-45ab-8bd4-741da2c6b9a1", "sighting_of_ref": "indicator--d37dc860-a836-4366-9cb2-d4cfc6c949f2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5650e45-97fe-461c-883a-befbd1df3522", "sighting_of_ref": "indicator--c66b4288-bac1-4ffe-acda-3775cc8d1cd0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0402fe2-b70a-4b84-a847-265dc850d185", "sighting_of_ref": "indicator--16d60d3c-ade6-4592-b577-262cabab9261", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f25915f-df54-47f5-902f-598676f17d3a", "sighting_of_ref": "indicator--98a00264-5615-4808-b049-91b69d0dd4b9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96b48c4-cc5f-41ee-a755-df3d8a4e903a", "sighting_of_ref": "indicator--527e7af6-d658-451c-91ba-b23800d6225e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df4e637-5e91-480e-917b-d1b01c83840e", "sighting_of_ref": "indicator--27e25de1-0ae2-4b91-9153-880f2fa11f83", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e0546e-d467-4f52-a1d8-bdcdc28da7e5", "sighting_of_ref": "indicator--4ac61397-2e9c-4d68-80b2-11487972cdfe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372d2681-7cf2-41ec-bca8-760645e8d820", "sighting_of_ref": "indicator--ef38f217-f776-4c9f-9e4b-7b56c6aebef6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49163e50-93b5-44ac-a708-46a2395ebdf4", "sighting_of_ref": "indicator--1670f986-2a44-4854-a340-9e799c31c1b7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f046c2ac-a4b0-4a00-b8da-2a0a4b72909a", "sighting_of_ref": "indicator--d2aec2ce-c9cf-4765-bda6-c8e9159cbf8b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7331300c-8256-4b95-9854-90418947c666", "sighting_of_ref": "indicator--a79553fc-d721-4623-8795-438366b456eb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9161065a-0759-422a-bf09-1d316da7e567", "sighting_of_ref": "indicator--da30ea58-3b48-41f3-a782-cf6e8f39163c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f45a84-8d58-41a4-93e4-a7f13d04a30c", "sighting_of_ref": "indicator--01249862-69b6-41a5-a036-6f3622e62e10", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a2e7b2-a273-49b1-a582-b0bfcbdab142", "sighting_of_ref": "indicator--038e8456-f7c3-41e2-9ee1-a27ca14979b9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87f555e-04ab-4b5a-a522-cced75ca38f2", "sighting_of_ref": "indicator--09e816e1-f5b5-4c29-aaee-ee51f674e2cb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ca20dc-43e5-4161-a12a-f7d4fc256dc5", "sighting_of_ref": "indicator--a880a864-55e5-42c4-bb37-f988ab444c2b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d66c29-b432-4d21-a09e-b851243a4330", "sighting_of_ref": "indicator--bd83aa55-7a9e-4d75-b00d-957b683b60b4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1192898-dd17-4d13-aee5-bdceab44fe0c", "sighting_of_ref": "indicator--29a9517b-0891-4890-8c4b-b98f9232a4c2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5870c0da-3690-4d87-aa45-92dde2766dbf", "sighting_of_ref": "indicator--f81e1ed3-90d2-4615-913f-80f265b26240", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac4cff4-3cb4-445d-8816-209508dd6cf3", "sighting_of_ref": "indicator--d2b0f2c1-27ce-4e57-8439-26e06b3daf37", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c0f8f4-ef02-4088-86cf-3d16b6813493", "sighting_of_ref": "indicator--6b207557-7db4-46ed-a06e-69b20ba9c2a4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ba8978-bd98-4280-b40e-0501fe3135ab", "sighting_of_ref": "indicator--280467ed-5340-4ad4-a522-2b3fcded2a8a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1263d915-d8b8-4a9c-a1ff-59cbdccedbc9", "sighting_of_ref": "indicator--87970ed5-5c99-4898-9da5-e28d977011d1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946d1e18-2c6b-4933-887e-19592a38fe33", "sighting_of_ref": "indicator--85c6f6c3-d692-46df-b1b4-4963c73b8589", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3efce6de-9956-4d74-a6a5-20823ca39f17", "sighting_of_ref": "indicator--25b292f2-9623-43aa-a9f6-4ff286dee210", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2448a570-1a53-4625-84dd-6cc205678c9b", "sighting_of_ref": "indicator--c62ef0ce-eb4b-4da6-aa8f-4f5e128f8a6b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5521ee5-91b9-43a0-8aee-2a4a4d622401", "sighting_of_ref": "indicator--13c629d1-ebe3-4941-942d-de1c0470a6a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8496a7b0-e96f-419c-89e8-b69c9475885a", "sighting_of_ref": "indicator--a8b63406-a221-4da8-834d-e02fff84fb51", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--793756a5-b844-435a-9a9d-a8e92bcfbdf3", "sighting_of_ref": "indicator--b37443ad-c9c3-414e-be70-c19f0505f8ac", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6bcf9c8-152b-4e7c-9a1a-1620d9905499", "sighting_of_ref": "indicator--b5393792-1323-4c99-b331-6d0969f0eb19", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a13cb52-39dd-46f2-9f8e-12ae7e5ba524", "sighting_of_ref": "indicator--6dec7bfb-fdf2-408a-81fd-9919323ac499", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d772b62-6c69-46b9-a41e-56862c8247bc", "sighting_of_ref": "indicator--187c08de-eebc-4b02-9869-183c018a0dfd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f74eef0-f2d2-4204-8770-90a5360daa7f", "sighting_of_ref": "indicator--169fbc3c-2051-4eea-b7c6-78a5d8b19c45", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb0ab20-73b7-487a-b1e5-94a198bcf6b3", "sighting_of_ref": "indicator--909949ab-a2bc-4046-b1a1-5a6013d6a618", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de0180d-cc87-4ae1-b968-5c30ed622c3d", "sighting_of_ref": "indicator--c22a9961-9816-4290-a539-ac37e1234d15", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862fe993-8366-4481-8ebf-90e3f24067fa", "sighting_of_ref": "indicator--34e41e09-0363-43a8-86e5-dc7218dffe51", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37711c6b-5306-4fdf-ae2e-a3d4405f4822", "sighting_of_ref": "indicator--cdfcd405-a64c-4802-97d8-31eae0e6ff35", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d6a219-9cca-40e0-a91c-dab4a6229e9f", "sighting_of_ref": "indicator--2fc9b5dd-954e-42e2-9032-b7d7b98ea5b5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91b9545-9cf0-4af4-89c3-448f98ab2c65", "sighting_of_ref": "indicator--1b378a73-7194-4186-b2f8-c5b35857754f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15b0f63-37fc-4de7-8ef1-913e1e96b388", "sighting_of_ref": "indicator--723c30f3-d853-4e6a-ab77-bc3866ec5c38", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f03cc1-c552-42b7-8aac-0b1c2d89ee4b", "sighting_of_ref": "indicator--c24aa0ae-26e5-47fb-8f75-8e08306097bc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c16e47-d951-4159-8c51-51ab007b83f5", "sighting_of_ref": "indicator--cc74e203-53bb-4727-ba2d-addb1ce64085", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c582195-dc17-427f-8f56-282f0e1298f4", "sighting_of_ref": "indicator--47397f04-5ef1-41b5-82dc-867d0dd3a01e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d07a744-5332-4082-a18f-356e10f5bf7d", "sighting_of_ref": "indicator--412993c2-8a56-4b84-a899-6afadd887b55", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3508c1-84b9-4746-8378-beaabc9cf524", "sighting_of_ref": "indicator--c397a383-2e8c-4ad4-a5d1-4a23f8aa56f7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7704c66-f15e-4e38-ad61-aadd4873d90a", "sighting_of_ref": "indicator--e27eee95-f700-4087-979c-0b938f410c6b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04a9518-d7f8-44d8-b848-82642e5736be", "sighting_of_ref": "indicator--3d6cf82d-446c-4860-9e6d-d0ea5407d403", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b96cc2e-da6e-46b4-bc91-6f28bf2876cd", "sighting_of_ref": "indicator--8afcfb50-1964-46e9-9c61-13e7a0c25101", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad88d02-9459-48df-b490-1ba11b1fa55e", "sighting_of_ref": "indicator--6fad9f5d-6813-498a-9f72-c91a439cd36d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7458937d-ca32-4de2-aaf3-67784c3d037c", "sighting_of_ref": "indicator--85950d25-2d48-45af-8c08-2944c586e6b2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e88663-1a2e-408a-bd78-9ae9971b35c0", "sighting_of_ref": "indicator--1193b275-287a-4771-8ce1-0ac1f601e02c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64bf2f52-f1aa-429a-98cb-4221f344997f", "sighting_of_ref": "indicator--5fa601cc-d6c6-4769-83e5-93951c4df482", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cfceaab-243f-44e8-8e70-3123f03916fe", "sighting_of_ref": "indicator--72ddcbbb-92e6-4a37-9388-3d2d3bf755ba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44fef4e2-28f7-4146-b55b-29d3a17b9b97", "sighting_of_ref": "indicator--3ebb288c-8904-4826-8740-f89da8984a51", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5d196a-5d79-4ded-a28c-6290c5649715", "sighting_of_ref": "indicator--fde8a0c9-11af-4a61-acd1-cbc9b93eed4c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe843ff-9e0e-4d2a-8ce1-c0ee7fc85429", "sighting_of_ref": "indicator--8df6ee82-5587-47d5-bee5-e4dec1bf31df", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e8ea3b-b3ee-4fb3-9f43-74129fac6101", "sighting_of_ref": "indicator--43aa0792-e7bd-44da-81b2-c6cea6fc4ec8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--939e34ed-5c94-478d-80f5-697074d7730c", "sighting_of_ref": "indicator--f211dc56-b3ab-4071-b765-e70c95ef2df7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66a109b-1c9a-43b1-8272-612827269252", "sighting_of_ref": "indicator--e89d7a68-e26b-4dad-abf9-d3b2b2cf8294", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02011d7c-3f5f-4a29-9ba8-ef0b6d7eeea6", "sighting_of_ref": "indicator--1b9bbb09-94cc-4636-9556-c829238f7860", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1945d80e-7723-4f6e-8073-94836c060cb9", "sighting_of_ref": "indicator--4334a4c2-4930-44ae-bd9f-5adcfd951fa7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494587ba-b9cf-4d4f-a82f-9945ee5880d2", "sighting_of_ref": "indicator--37881467-bcc8-48f3-937b-04d3d161427d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8dfaf8-b5ce-4c04-b648-ddd18a9eceed", "sighting_of_ref": "indicator--9685806a-7b3a-45d7-8407-6cb43708de8e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f9487c-b3ec-4fc2-88b1-c2f091b6f9a4", "sighting_of_ref": "indicator--7f76fedd-9526-4381-9974-7ad38bc272f1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3df5c6-82ef-477d-9c08-df5255bf5625", "sighting_of_ref": "indicator--cb28539d-17e2-4cbd-9f15-744e5e1e91e2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17cf0274-09fe-42de-ba88-c02dd330796c", "sighting_of_ref": "indicator--1483343d-8b51-4724-8635-573f61cac633", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a68a60-654c-46ea-bb51-07691668ec71", "sighting_of_ref": "indicator--9ea14f94-3339-44cc-b27a-97c850bc0947", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371f994d-e3d0-46c1-8723-392888a0224f", "sighting_of_ref": "indicator--1c779180-1c49-47f7-8aca-ec88ff7333e0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f032a8af-8181-49cf-99da-0321066ddca6", "sighting_of_ref": "indicator--5f8578d9-9d0e-431a-a345-b473c201555d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e39fa36-e611-47a4-b471-80d55e885a6b", "sighting_of_ref": "indicator--ff0f8d3e-7b13-407a-90f7-37d3c972c3c3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec4ffbb-f538-440e-8919-5dc810cbecfc", "sighting_of_ref": "indicator--a41e1df8-125b-41bd-befe-9e812f709fea", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eec6be9-a89c-4029-bc10-bfee7a57a772", "sighting_of_ref": "indicator--63c31f10-0ebe-4d4e-a26c-a26415950d08", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f890b8d-5e70-4b9c-aa71-84c161047ae0", "sighting_of_ref": "indicator--8a0e5998-8c3b-4fe7-a783-d6999cc8a9d3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac094ad-4078-435d-9237-daa3f6993d0e", "sighting_of_ref": "indicator--12601691-9948-4e10-80ab-d5e9e6a9f6e1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2d0952-0ae3-47af-9d82-d48dcd4c6c0f", "sighting_of_ref": "indicator--35437ebb-a70c-45d3-bdb2-396a8d1d9d40", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00bde11-a94a-41de-bb24-e8a4ede94f9b", "sighting_of_ref": "indicator--c3586e68-88ba-4ca2-b93e-334df8557b8b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31689e37-4fbb-4bca-9861-1170df241674", "sighting_of_ref": "indicator--0e12c83d-1a46-428e-a51d-34d2652f07fc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe389721-7d23-4e6c-be5b-040054538731", "sighting_of_ref": "indicator--243ee6f1-3cf5-478c-afad-a2841f803490", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fea4de7-31fc-43ee-8589-8d2ebc95bf65", "sighting_of_ref": "indicator--f96b3e22-4268-48a6-861c-13a45082b010", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b72e38e-14b2-413d-9af8-d90c3d00542a", "sighting_of_ref": "indicator--8fda755e-6cc0-4003-b5b1-bbd4339e5b10", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3cd4f8-8c6c-4091-b888-bd41ce6dce90", "sighting_of_ref": "indicator--6319380e-a4cd-4fd3-92dc-f27f5805673d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94cdd310-b8f0-4a2e-b28d-fb3797f22640", "sighting_of_ref": "indicator--a1866123-062e-4f71-8987-d292ed9c66a7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--671c0847-3a50-4c33-a6d0-75b9a95f7bf7", "sighting_of_ref": "indicator--c5f2e2c9-4184-4013-9e41-2882df06cf61", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2799e3-9b4f-4e7f-9f46-bdb91846d67d", "sighting_of_ref": "indicator--1c03b9c7-99a2-4c23-90eb-81944618c0aa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29cf361c-ae13-448f-9d23-4e9b7b06819f", "sighting_of_ref": "indicator--57c062e6-f366-48c3-81d6-b2453186bf3b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efce1806-8eb7-449d-82f9-e6058dc5ca02", "sighting_of_ref": "indicator--0928449d-6d93-4a3f-aa2f-204ec58abb8e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd25103-c90e-4386-a861-c416c4dbb91b", "sighting_of_ref": "indicator--ffd7bdd8-3c5e-402f-8921-3fa257a3dfff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91b54f1-568d-4605-8991-6c00a86bbe31", "sighting_of_ref": "indicator--78d16b1b-83f0-4c3c-9214-dbc9a6585887", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1cc4a7-4185-4b78-8bd4-3d02937cd25a", "sighting_of_ref": "indicator--5fb7ba71-8837-45dc-89e9-70fad367f9e1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e9c477-36fc-4f7f-9fdf-842e21ff9483", "sighting_of_ref": "indicator--200743e0-5977-40f4-960d-504d9c075a88", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8453bf66-e9c1-4bbe-8404-af8a26aeede3", "sighting_of_ref": "indicator--d8a4eba6-be4d-4bc4-b92f-7025bc80f761", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7fc141-bd5d-4780-9bd7-f16b040cffae", "sighting_of_ref": "indicator--13d2a9e1-34fb-4902-86fc-2389dfb4253f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a2d7272-9147-42a9-bf7e-474eaba2408a", "sighting_of_ref": "indicator--b842f0d7-ebe9-4d57-b620-27113b4820a2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51e0451-05e1-4c18-97e1-b470c1fcfad3", "sighting_of_ref": "indicator--004e8a07-a32e-4f86-b078-8ea92c46b585", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fa860f-0b2d-42c1-83fe-82c8a2f6904f", "sighting_of_ref": "indicator--01d06b00-22e8-4704-b869-f662a8df53d7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fbb4690-b618-498a-8df6-60ce6a75c8b5", "sighting_of_ref": "indicator--d3880da7-dcf5-40de-801c-60a15e728e75", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f38c68-f630-4658-8225-ee4001a85769", "sighting_of_ref": "indicator--a9d73c22-d2c5-47c7-a613-450e3b0f3837", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089d637c-e7f3-4df3-a5e3-00e28fcaf5bc", "sighting_of_ref": "indicator--87a92271-1739-450c-8ce6-787e4a3f42f7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9708b22e-fc75-4c16-bfb8-6b801e5e09a8", "sighting_of_ref": "indicator--7b66d80f-c1cd-44e4-bcb6-1cd041f1cf13", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d70fc8-6a21-460a-bbc9-7ddc0c8ab73c", "sighting_of_ref": "indicator--9d625312-4009-4623-8f96-a48af7a0600f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e266be-4323-42ce-8b08-297d0a092c17", "sighting_of_ref": "indicator--4c63ccaa-ab51-455c-b9cb-525b2932a767", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf31c20b-5047-4f11-85ab-6f77a8459ee2", "sighting_of_ref": "indicator--25fbc97c-96dc-4d40-bc76-436205a8eec8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0cafd86-19a2-4405-93d3-0dab40c1db0f", "sighting_of_ref": "indicator--68f45113-66fe-4969-9ef9-3cbbcdfa45c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57108527-c565-4776-9fbd-7591e8664d39", "sighting_of_ref": "indicator--941f3a0d-d022-4f14-9f02-7f40a7f1a7ef", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a962c0-d0a6-44f8-abd4-d24d1b9e0305", "sighting_of_ref": "indicator--99ced4d8-dd69-462f-a744-133da0078289", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446b76d6-ffbd-449c-bd9e-00eeddd6acb0", "sighting_of_ref": "indicator--4bacde11-626d-4206-b5fe-e1ff7997d74a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f6d6b1-d9db-4a68-bf94-2d0519a8015d", "sighting_of_ref": "indicator--b0012778-cc02-49d1-a316-8d6e8497e287", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9dcde51-bc48-47d1-a8a5-e6821a2ef02a", "sighting_of_ref": "indicator--2355732c-2bbb-4adf-b030-d05e93ed42b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cbbadca-b6b1-42b2-91a5-b55abab78c63", "sighting_of_ref": "indicator--8553d9ef-4d2b-4146-a7b1-8a3db1ddf340", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e612fa01-f10c-48ff-b2ec-571c5c57a728", "sighting_of_ref": "indicator--61a69a13-2bd1-402e-857a-e98640434eb8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20afbeeb-c455-468a-ae8a-c1fb085f6394", "sighting_of_ref": "indicator--12ce5bad-8bf2-44b0-8028-ad2eff8dc52a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a4bdcd-6449-4a61-bac1-35df54a25822", "sighting_of_ref": "indicator--44f9db41-5e5d-44c8-892c-b54f6588263f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e2378c-6951-4000-a7e8-60695bf494e1", "sighting_of_ref": "indicator--b43b73b2-a1ed-4ff4-a598-68272a8e1932", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba2ac07c-e280-4855-99dd-e085a80e4ba5", "sighting_of_ref": "indicator--ed408fd8-15b2-4ea3-b2fb-bb1374b40df5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--215b900a-b5cd-4eef-aaa5-05030f391518", "sighting_of_ref": "indicator--97ec8479-c865-4ce7-a8a1-72694243f5ff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b403fa-ba16-4f09-a9ac-fcb073a428bf", "sighting_of_ref": "indicator--a0492e15-aee4-41e7-a10d-1416164db24a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80c4ec82-a0ca-49e8-b6d3-d9ff838f0ecf", "sighting_of_ref": "indicator--27dee7e7-d5af-4e15-8240-e2ce9405c4eb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d3d066c-f8e6-4dec-b46b-7157a2094ff6", "sighting_of_ref": "indicator--59ff8da0-0359-455f-8e1b-bcde2cb417b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635ce5d9-d4ec-4440-b6aa-998e96fb66cc", "sighting_of_ref": "indicator--e24420f2-c594-4687-8e54-5f61122d3b80", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f2a93f-ff64-492f-8df7-0d498deea347", "sighting_of_ref": "indicator--73925333-b4c9-4fd3-816c-7de996a6015b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9ae651-f4cd-461c-9336-963d818647c0", "sighting_of_ref": "indicator--fa74fc3e-0d08-4669-b20c-7d15c5e74a87", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c086761-6a4e-4f93-8add-4183e6010285", "sighting_of_ref": "indicator--12624075-bb56-476a-b9bc-c96b61364c2c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ffb3f2-c8e6-4e61-8689-c0e841dfdb4b", "sighting_of_ref": "indicator--858c5ee9-c0cb-4f68-842e-1910d6dd9c40", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd56491-b574-4eac-bb25-794c73a3b957", "sighting_of_ref": "indicator--6756b694-ce84-471a-9541-a387eeca163c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b0b86c4-3c33-4005-937c-e9b6d3af870b", "sighting_of_ref": "indicator--f38f5ca9-8f10-49a8-97f7-e6a412842d02", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04df7db0-ab8e-4618-a61e-cac9191dfa0a", "sighting_of_ref": "indicator--0b0a3ab9-dbb0-457c-9b1a-6bb3559b2c65", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4cf2c7-f58a-4994-9b98-d454a1c1011f", "sighting_of_ref": "indicator--612414e3-7817-4a9c-9665-835929274ecf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf196096-7a86-44d8-a4f4-227f5b465db8", "sighting_of_ref": "indicator--036d0994-89ca-45f5-8ff4-1d2ce31218a5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93ece35-c892-464b-a61f-38b31f8d9c6b", "sighting_of_ref": "indicator--a7ded5a1-e522-48e6-9f98-f5d628c3d699", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356a022b-d9d9-4f12-b2ad-98098a63e1c7", "sighting_of_ref": "indicator--e9c1c314-c815-4a1d-a032-ff6d53f93c4c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169877d5-925a-4943-b8e5-654b176a5514", "sighting_of_ref": "indicator--bf2f2398-6663-4c95-9537-309bb32f201c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f1f269-de6b-4355-9057-2e9dd2dc2327", "sighting_of_ref": "indicator--9861fc35-8e4a-4aa4-8102-2428674852b3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36bd798-daf6-4004-ad43-87770c3c0b11", "sighting_of_ref": "indicator--97daeacb-c09a-491a-a779-92f6bf1e532b", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13875fd-3d57-4277-87d5-44be2c361dc1", "sighting_of_ref": "indicator--283e6f33-ad49-4034-905e-3a7bb1198bdd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8973a4b9-9d16-4f9a-927c-b511a60fb554", "sighting_of_ref": "indicator--283e6f33-ad49-4034-905e-3a7bb1198bdd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1da4a33-8258-453e-b09f-7bcc891760ea", "sighting_of_ref": "indicator--eeb42a41-c8d1-48b8-a9b7-872d068b86bf", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a0cc0e-805c-4a14-b5fe-fa39832d85bb", "sighting_of_ref": "indicator--eeb42a41-c8d1-48b8-a9b7-872d068b86bf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8163385b-15a2-4e62-a00c-d927b9af1c41", "sighting_of_ref": "indicator--cc226751-e6e6-4b2d-9e89-a9e8d8040a64", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ee37cd-c842-455b-874c-608446312976", "sighting_of_ref": "indicator--509eaa82-9a46-4462-b068-45ff76d5e336", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd30526f-2803-4917-9056-8c8ad10436f1", "sighting_of_ref": "indicator--4962ae1d-c035-4abc-bcdb-a9bda2eafb43", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a73173-73ce-4ab3-a126-d430ba8dd7a7", "sighting_of_ref": "indicator--6799301a-1be7-44d8-b264-57ebe14069cf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648adffb-036a-4df0-bc35-5232fc1824e9", "sighting_of_ref": "indicator--f9660e41-60e1-4fbf-be89-95a5db90d355", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd61ade-3d54-418b-a949-c2973d1af6f4", "sighting_of_ref": "indicator--ef9cdcb7-be47-432d-9956-ffd10484a5ba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e799a5e-f139-42b8-90a6-eada48952d61", "sighting_of_ref": "indicator--67cf600a-f9a2-4b04-94f8-567f7b39b8fd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f5d39e-2dd8-49b9-9932-077a3a01ce1b", "sighting_of_ref": "indicator--af12e427-cd62-427b-8dd3-d79bd6023c23", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29773b5-2348-4cd0-9416-b484fa06f869", "sighting_of_ref": "indicator--82b2b063-ad83-484f-8bfd-5dff1cece999", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca209f3-4471-4fb0-9100-297139ba669c", "sighting_of_ref": "indicator--40efa04d-4c0f-461d-94ca-23192d9d46ca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c6707a-aeed-423b-902c-fe5e174b890b", "sighting_of_ref": "indicator--dde38172-017f-4d9f-a680-7e196c5e0fa3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd61f9b1-b928-477e-9376-73e8671e19a1", "sighting_of_ref": "indicator--ba1779e0-16a7-4108-a0c9-e4de4ac95c06", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee7b0b89-b97f-4e40-b29b-403081beb03b", "sighting_of_ref": "indicator--72dded08-0950-4ab1-a833-c38cc797e15e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84369e94-b6a8-4df5-8994-f3beb827dfc8", "sighting_of_ref": "indicator--e585a582-3c94-4f07-a486-b5118ad574da", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fafac0ad-d472-4eb7-a0bc-4d2e7e9982e4", "sighting_of_ref": "indicator--94edd291-f733-4e67-99fe-8617d570ae1e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f60dec-f540-452b-90e5-71195ca4a2b4", "sighting_of_ref": "indicator--7f3e9145-1ade-4782-b06a-17387abb3a38", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282e478a-f41f-47dc-8f39-b25244382cf0", "sighting_of_ref": "indicator--27acaf7e-a483-4487-824e-e88de16873b7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db3096f-a037-4bfe-ae97-cdc99bd5ef95", "sighting_of_ref": "indicator--636a64e2-e991-4806-98da-474c96450036", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30dcdfbe-47b9-428e-acb7-02dab1e81992", "sighting_of_ref": "indicator--faf59b4e-4f1d-4fbf-8e7b-cc89b97005b7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb03c0e2-9f81-4623-9dce-cc2f981784dc", "sighting_of_ref": "indicator--b6e85e75-0d04-43e3-a1c2-8f6de0fa0b5c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b70f76-dbc8-4250-977e-5226d8585e44", "sighting_of_ref": "indicator--ee527c10-161c-4f5c-b273-b89b5df5aaa8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cac59a9-2ae5-48ae-99bc-c6a67d46d45b", "sighting_of_ref": "indicator--349cf693-fa4c-4093-8f4c-16ea48642de4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ca7ee9-36d8-4c1b-9709-4e15fd66e4e1", "sighting_of_ref": "indicator--466f0790-565d-4bff-8221-814d8f08f616", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2edb7c4a-c6a7-4932-9e01-a0603366de96", "sighting_of_ref": "indicator--3567aa94-0ec2-425b-80b7-0a8db4612849", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2a91c7-378c-4b7e-8b59-3b086be416a3", "sighting_of_ref": "indicator--073a3070-04ac-4673-a31f-4b125d45185d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff115ccc-01f1-49e7-a345-442378f9d7a8", "sighting_of_ref": "indicator--15ee66f5-66ec-4d6c-b3d8-acc2e33a1a2c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa3c7f5-c7a9-41d0-af15-924a82e5e60f", "sighting_of_ref": "indicator--5fa8cd73-ffcd-4eef-afb6-cff8c1042697", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d41d54b-cb55-449e-b950-266e6f7076c5", "sighting_of_ref": "indicator--ec2ac2ae-009f-4981-947f-198d1ad9c1db", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9decaee-47ec-4e84-8c5f-4e71a8eb0e8b", "sighting_of_ref": "indicator--a1992a45-fb70-45f7-82d0-6fbc5a5d0366", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac37697-c2af-4c94-b1e4-6cb7913f3975", "sighting_of_ref": "indicator--5d42dfda-335d-43fe-974f-2ddeae7a980a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c973d2b-8983-4662-9d29-ccb6e1789963", "sighting_of_ref": "indicator--68decb4b-0b42-47f8-a64c-c7cba851087c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f261cd-5db9-4cfe-8d59-7bb18fdfc124", "sighting_of_ref": "indicator--c9908301-c8e3-4211-bd5c-9743a6341edc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f725b80b-b414-4349-a931-bd82a79a3d46", "sighting_of_ref": "indicator--fd731641-fc4e-475c-80d6-30485d9114c7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3a066c-8be6-4985-95ec-7e38e9e7ef7e", "sighting_of_ref": "indicator--86448a9a-8938-41b6-8692-673473a2e7b4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c687a103-324a-4854-8b51-94de2292d0ba", "sighting_of_ref": "indicator--bd31aefc-d541-419d-93d0-c78f002f0782", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00cdfae9-5136-4410-9751-9e2e2f7a48fe", "sighting_of_ref": "indicator--96ad8458-10a2-4f43-85a5-16f797030a62", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce44188f-783d-4f2a-8802-98a1e09c1e3e", "sighting_of_ref": "indicator--879a11a5-41b1-48e4-aed0-0489e794e6ca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19e476d-ddcb-4080-b4ed-0af02fd0e844", "sighting_of_ref": "indicator--9371ba1e-1266-4803-b4d5-54112acadfa6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2d9f02-8f5c-4cf7-b69a-195f0c6c12a7", "sighting_of_ref": "indicator--e56cd60b-dab2-428f-8051-25b79ed60ed6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e0047d-1f2c-4ba6-bd56-785a6d540890", "sighting_of_ref": "indicator--3d269833-ba7d-4308-97fe-db23d0857c6a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3663e77e-a408-4982-9758-993578921f98", "sighting_of_ref": "indicator--ef5f9fce-9722-4430-9f4e-8a9f7889a275", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45fc0982-297f-4748-9606-3ff2f02d2b5b", "sighting_of_ref": "indicator--07b09d1b-47c9-49db-b9e5-2db8d8a0cf74", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80a6864-9264-4283-a6f9-58e1c3410f2d", "sighting_of_ref": "indicator--fd099b38-70d3-49e3-9775-c1b4ff39d68a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f618d8de-c05d-498d-8ef6-f704342706dc", "sighting_of_ref": "indicator--37beacca-1b0a-405d-82dd-f4f9d1a5ccfc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb10451b-9a40-4332-959a-85da1e8c38a2", "sighting_of_ref": "indicator--93d17e55-dbb0-497e-828d-2ebcea23fcc8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be58e5b3-4804-4bc4-ac2f-477a17270b28", "sighting_of_ref": "indicator--5c3f85f1-756c-4535-ada1-5eba19d2bf33", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205cbdaa-f79b-42fd-b022-1b47160de455", "sighting_of_ref": "indicator--6ffed6cd-0d6a-40e6-ba4d-3231e021b545", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e39c3dc-954b-4e14-8149-3f7ca09cd8da", "sighting_of_ref": "indicator--be4bbfd8-28e2-4fc9-8d91-2941736cb394", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcf723b-84ad-4747-98cc-b69cb3abba2a", "sighting_of_ref": "indicator--3fb3643a-dc65-4e35-ac62-17d117417729", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88529e30-372e-4d96-ae5b-fa522c242d52", "sighting_of_ref": "indicator--15a6f201-0d30-427b-a473-d72d3f03634e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451d0fc3-a473-4cdd-a4aa-7a3fde7f0dfa", "sighting_of_ref": "indicator--53de93c9-cb91-4e1c-aee2-999b8b16f755", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2598ae-c1cd-4dc3-926e-05b378d20314", "sighting_of_ref": "indicator--4ccdc6e2-a5a2-4d41-a083-8cb13e08196a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f412b9-ed08-440a-9c9f-454e511e562f", "sighting_of_ref": "indicator--a1c67fcf-d939-402c-9a39-401566718c62", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d69c01-4acf-4384-9b3d-70f44e9f32b8", "sighting_of_ref": "indicator--61acdaca-14f0-428e-a587-3b39593a524b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6cfbb4-f7a4-4220-a0da-182a80cc4ff0", "sighting_of_ref": "indicator--b0c856fe-50d5-4b8f-92be-b17b805381f5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7630d895-b378-43c5-8d13-55b32ae54750", "sighting_of_ref": "indicator--d9cc546d-1a36-42a0-ad84-586166c26c47", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb74f2f-0e72-4f45-87eb-0a8b72b217fe", "sighting_of_ref": "indicator--9ed41385-03e4-4344-8167-1e2277424b1c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b008fe-a1e2-43fe-8871-23e86afbab4e", "sighting_of_ref": "indicator--35e0f951-ec26-4b5d-9911-c3734ab34ab8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3ac373-ccb1-491c-89b8-f0acfe10a4c4", "sighting_of_ref": "indicator--f8eec09d-cdb6-4643-8371-7bbdd4a59205", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aaf72ea-64b3-4564-a4e9-a66de1c7e468", "sighting_of_ref": "indicator--28d3e951-f09a-4045-af64-eabec16e2691", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfee7737-c7ea-4db4-9d5f-7de667a222b0", "sighting_of_ref": "indicator--bd222bc9-260e-4337-bac1-e4b800682911", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43eb7d6c-7f3c-484f-a5a1-a827f70ae6f6", "sighting_of_ref": "indicator--be77d570-f187-47af-82f7-1f839184c285", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3688c1a3-f78c-428f-87b8-814099134000", "sighting_of_ref": "indicator--e537dc4f-e184-4aea-81c2-c3084aa14a83", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be65dd9-8456-4289-8ba9-ecdf1fe709e1", "sighting_of_ref": "indicator--4069045d-15bc-4144-99ce-f8b73a1381bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccaf6234-237c-4bc0-9ae1-edc938fb59bc", "sighting_of_ref": "indicator--f387a5f9-0a9d-4300-8ea4-9fda87262854", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6b8e81-9d1b-49e4-93df-ec9783f0ea2c", "sighting_of_ref": "indicator--9ad5fb51-287c-4133-8323-719d6f7fcf25", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bba35b8-0ea1-4445-ae82-baca0ca07ec0", "sighting_of_ref": "indicator--d00b4b3a-5581-492c-816e-2f8d3cc2ac9e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df0a063-92e4-47c0-aafe-566fd95e5f33", "sighting_of_ref": "indicator--0113ff91-3350-40e3-83d8-f5df862b968a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ae5df7-d0d8-45fe-bf83-ee73f2160843", "sighting_of_ref": "indicator--f11275c3-7a63-4110-ad9b-9bec2b33ae2e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356c8da0-5b04-4be6-b1a9-c499b7e3e669", "sighting_of_ref": "indicator--ef5d7894-fbaa-4dd7-9acf-6d4189c98d01", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce54ddb1-b8f6-4e0e-b88b-8cac0651dcc8", "sighting_of_ref": "indicator--8b1eff7b-094d-4ea0-8a71-a3ff6530423c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9147a0c-f0c1-4cf7-81d6-f7bcda2b991f", "sighting_of_ref": "indicator--a3f5e501-7560-40a0-aa8c-9ee218a6ac86", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8decc37-4c2a-4be5-9d53-151c068442ab", "sighting_of_ref": "indicator--63a790e8-3e9b-49c7-8baf-c570014e9fbf", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ec90f6-5489-4397-bf61-fb4f30581677", "sighting_of_ref": "indicator--124f9bdd-e2f5-4f04-8924-e1679a45c7aa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c127a2-297e-4b5b-b867-8613c0384c21", "sighting_of_ref": "indicator--26cb4de6-a3c3-4beb-b0e8-477c14474faa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7d9c6a-af68-4476-8b54-cd3f03d114c4", "sighting_of_ref": "indicator--0b23d275-e94b-4ae1-9b4a-6ff6234a74d9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2726d2d-9eff-4c23-ada7-a43d7604737b", "sighting_of_ref": "indicator--bdb38da6-8aaa-4859-ab64-56821a973129", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5459c42b-c941-42f7-be2a-b9ac91b401d0", "sighting_of_ref": "indicator--9d4c8d7d-3ded-4dd6-a139-80295083e3c7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ffa26fd-ce5c-4bac-b643-c7e7b5cf4967", "sighting_of_ref": "indicator--61562df9-8de1-47d0-bc15-a58cfb636c25", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f86101a5-153a-4649-9a79-99285ce1c504", "sighting_of_ref": "indicator--a3214573-dd9a-4348-8ea3-2aca2b7af043", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5fc4908-7498-4319-a39f-1f700b73c10c", "sighting_of_ref": "indicator--ac74d09d-43c5-4430-ac79-26917c67aa88", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd6c91e-53b3-4b5e-9b5d-43eebbac953c", "sighting_of_ref": "indicator--8c8a8d15-819a-4021-86ef-02d197a6fe85", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ff1895-2b2c-4901-8d28-2b16b749767b", "sighting_of_ref": "indicator--d26900ee-2957-4829-9fba-a3ecd59b896b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a12aa8c-8884-4f8e-8aaa-1cdb2ac55b33", "sighting_of_ref": "indicator--bb4252b8-9eaa-4858-8297-25566f6dad0a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e88a7f2-ba15-491a-8407-7894758de368", "sighting_of_ref": "indicator--b8dbc06e-3eec-4a14-acb4-13d354c888e9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1ac050-af9e-4a8d-8294-aac2736b4de4", "sighting_of_ref": "indicator--b61a3012-c6b3-418a-80ad-535f33f85cab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a8e0f1-38a8-4aa5-8691-a9d1c766966e", "sighting_of_ref": "indicator--60f0a310-379c-495f-9326-0505c7135923", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da148d0-c74b-4ae5-8fc1-883dcae92b2b", "sighting_of_ref": "indicator--4d615eb6-f3eb-4f50-944e-2db447c921af", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d73127c-4755-4730-885e-c8d3c955b803", "sighting_of_ref": "indicator--bea9ce9f-b486-4150-91fe-48b90e6b5ff9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b834a85-374f-4850-90d1-eb4546afdaaf", "sighting_of_ref": "indicator--5c26965a-a02e-4ac1-8ec2-5aab1b5e5839", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d3f911-9aa8-47ec-8e9e-4949aeb1d3f2", "sighting_of_ref": "indicator--84a3c1b8-2628-4d3d-9792-63286e579b30", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ba27af-b7ba-47c9-9bae-dc6bd17f7e8f", "sighting_of_ref": "indicator--1474f253-0cf1-4941-9638-e8543c14a0b3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ddcdaf-4383-4b83-87e3-df72666d6e1b", "sighting_of_ref": "indicator--0391bb6b-8015-4037-8a66-6ea501e52ebc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--447ba57b-b4aa-4617-896e-bdb8d1b12d3c", "sighting_of_ref": "indicator--173ee50f-9961-49b1-9fea-6f064fec315c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82199ea1-ce0a-499b-be32-028b40832ba8", "sighting_of_ref": "indicator--460c574b-582a-41c1-bc7f-a48941007e7b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8e014b-bb89-4b45-a525-8c33e0cf26bd", "sighting_of_ref": "indicator--db64dc32-098b-4b56-8d98-db7a0e51707b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5461262a-3c9e-4713-947c-7e89151b29df", "sighting_of_ref": "indicator--e35e9763-08a7-46dd-826a-4d2f7da077a2", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a401ab-bd25-44f9-aaaa-78a5e5ad6889", "sighting_of_ref": "indicator--4f01ca42-4e4f-48ad-b879-d97e5f1cd2dc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7e8036-710e-4d6b-a472-853662414fa0", "sighting_of_ref": "indicator--fbcc1c81-770d-415b-a6b9-a51fb098ec4a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0383e8-6d04-4b5c-8efe-0c1355bc6f2d", "sighting_of_ref": "indicator--aaa3cb93-a268-4c7a-8423-d2dc0409ef30", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9807d2f7-33a0-437d-b3f7-b927dfab2c6f", "sighting_of_ref": "indicator--b365e6d9-aaa3-4396-9347-6e5d25c9dac8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2baba8fb-6bde-4e93-9788-5e51be09e3ca", "sighting_of_ref": "indicator--b5f27a5f-fe39-4ce9-bcf3-d0ea868c8189", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a421fdff-2686-4798-a4b6-11943e7dea96", "sighting_of_ref": "indicator--c79014d5-7418-4336-b113-efebac216d0a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681cb97e-b9b9-4c23-8a6f-521d53b7699f", "sighting_of_ref": "indicator--a228e1a1-fd1c-441a-953c-1962eafe835b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a5f623-4554-42b7-9778-941dfe8c5f72", "sighting_of_ref": "indicator--7baa5718-ff8e-4a87-b667-df8ee17accfc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c26a53b-5106-456a-866e-377138b92f1c", "sighting_of_ref": "indicator--301538ad-bb04-4eb1-8ef0-4e25bb7e7035", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446a6b27-d52f-437b-a505-02cd756866d8", "sighting_of_ref": "indicator--7c77d845-39d6-4650-b5c1-80602c21ed69", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60fc7255-603c-4793-af57-48b5226c0e91", "sighting_of_ref": "indicator--c1882554-7437-48a7-a70d-f7e078fe26be", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d251006-c4c8-42b4-828f-c5ea71778181", "sighting_of_ref": "indicator--d00052f9-5c3f-4157-a08a-7c9d9f9f8d74", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d76bc16-c7b8-4546-b931-79507f2572c7", "sighting_of_ref": "indicator--34f3e16c-d69c-4482-ba94-aa2fbc2efe5d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d03336-2785-47a9-aaee-0a5f61a251e1", "sighting_of_ref": "indicator--bc8feade-4d31-4a9d-9f12-bdcca208ad09", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce535e6-7a82-4ba3-97a1-1b5a2b6ecee3", "sighting_of_ref": "indicator--dcd83eb9-f1ba-4704-9ddc-60f1250c95aa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6171ef60-df5d-4dea-a67b-294806e7ca01", "sighting_of_ref": "indicator--35ce11a0-aa08-4c57-a29d-58915edb73c6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2d1ebd-e4f1-416b-a938-2f0cc8d8fcad", "sighting_of_ref": "indicator--b384a629-dbea-47f0-ae95-360b13a622e0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667072e0-0e08-4826-8816-2457663344c2", "sighting_of_ref": "indicator--e9a14e53-6fb4-4709-87ab-5e18b9f67183", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d65cf95-fb37-46b1-89b0-a32af2d1b152", "sighting_of_ref": "indicator--4ae6d9af-8a58-403b-81cc-a8dbb7cc53d9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20563e2e-96d1-4652-b660-2349647d5bfa", "sighting_of_ref": "indicator--ddf66e7e-fa0d-4d12-9303-5e6a301d7248", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4a06cc-8484-43a8-8130-78c94f5f06ec", "sighting_of_ref": "indicator--8ffbfc75-e777-44a3-b681-40ad12f25ab1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d18f1ab-a74a-4afd-b035-55389e709499", "sighting_of_ref": "indicator--40e6a8a6-966d-4fd8-a3e4-2b058b5331db", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac2e800-3e99-4ae5-b50a-aef40efaea03", "sighting_of_ref": "indicator--542338d8-96cb-43de-b7eb-481978a53c3e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8edd45d2-3111-4bee-83c7-d3ed087f870a", "sighting_of_ref": "indicator--a62c78ce-c8f6-4104-9d8d-9d89c19ee8ed", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb0d6f3-80f2-4cdc-bf3d-050441237009", "sighting_of_ref": "indicator--e568a6da-cbef-4e48-a0d0-1037e389c1ba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea8cc57-8904-4a12-86d2-825eabbedea6", "sighting_of_ref": "indicator--16be8d7c-c024-4c6f-ab4e-4b462e9900f8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f194331c-1a26-4a9d-8416-2a5d41644fea", "sighting_of_ref": "indicator--ab314475-2f35-435b-8d43-8a66292e6191", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804a9810-b089-4421-a7e3-361619d6e388", "sighting_of_ref": "indicator--73ba7861-7c29-4392-8f51-3b7ab7377321", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e04dd8-78ee-4c85-b99b-e535ecd7179c", "sighting_of_ref": "indicator--af701113-b84a-4023-ad9b-ce26b5d10bc0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880fd0f3-b12b-4894-995d-926cb658e189", "sighting_of_ref": "indicator--bc30392a-d21e-434f-8e8e-9d45e525d6a9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2cd399-45be-4911-9c91-9545625e3401", "sighting_of_ref": "indicator--9eb18e2f-2b53-4ed5-bc51-cf24399872df", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67df6b3f-fe63-466b-99ed-17ae78dbc835", "sighting_of_ref": "indicator--cac84e5c-1007-4ddf-9347-d5b1ce00516a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec4946e-ae92-4fb1-b428-0827412393e3", "sighting_of_ref": "indicator--c459f98c-a8cb-4eac-ae8c-563f8db0e235", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7fff8f1-87ab-49be-b488-f821865d674a", "sighting_of_ref": "indicator--7e3e14e2-abf7-4f45-937a-22fea4e1733a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eaa0129-7e76-486b-9533-f48eb570edf1", "sighting_of_ref": "indicator--e07cf3fc-92fe-44ea-abe5-8481c67b3d95", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c4ad7b-03c4-4037-8068-abcd717735d5", "sighting_of_ref": "indicator--9552f54d-463b-49f0-b96c-1c494395add8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476b24ff-de07-4d30-9066-589bdaff30d1", "sighting_of_ref": "indicator--3d7e93ef-2e4b-4ba2-82d5-86bece14e444", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe575c3-6a64-447d-89a3-e2b78330e815", "sighting_of_ref": "indicator--8874e932-6e4c-4ce3-8e00-c82286cbced4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e3aa62-f6be-4df7-b54b-dceffc3cb210", "sighting_of_ref": "indicator--4398d7d1-bee0-4336-a2e5-41bb3099d59d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb66b470-7eb0-411c-a6b9-41f91f82aa68", "sighting_of_ref": "indicator--5a7a5fdf-750e-4e89-b5d0-940d57b826c8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b2dd75-a4cc-49b6-bd74-2a35a2fbda98", "sighting_of_ref": "indicator--cd7fcf19-239c-4c23-b5df-4cc98030a385", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ffab988-232a-45b5-b3ea-9dcbc57b7530", "sighting_of_ref": "indicator--62b1cbf7-409f-4954-9785-7f2d1295453a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a124854-5109-4770-b162-0ef2d736292b", "sighting_of_ref": "indicator--753acb12-e6e7-44c6-9184-68273c192abd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--608f5290-0fec-44bb-aa1b-30310a17fc8d", "sighting_of_ref": "indicator--3e330787-9c58-4739-bbd8-5ee2f148b862", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2848b136-d8f5-4fd7-ab78-71659e8151ac", "sighting_of_ref": "indicator--c166bea2-fdfa-4068-a1f0-1f94aa86cf8b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990ff539-277f-4042-8fe9-e5e04a84b047", "sighting_of_ref": "indicator--7f15c881-4a8c-42a4-819c-55989234a291", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af08ebc-28b6-4271-8fdb-2c318e589663", "sighting_of_ref": "indicator--9ac9b5a1-86a4-4eb4-b373-62f78255e6ce", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ccf7ad-ceab-4420-bc39-4788d20601d0", "sighting_of_ref": "indicator--cd2a035f-1d44-4816-8ad9-7be8dd1bc5bb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a939d92-7e95-46f4-a4df-3777272740d0", "sighting_of_ref": "indicator--8990aff6-1d58-4aee-96de-c119ba8bc6f7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10afe140-710e-476c-9072-371b9042f6d6", "sighting_of_ref": "indicator--47f25c66-e15c-4688-a56a-6078b972107a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ad020b-9266-444b-b984-9834cfdea93c", "sighting_of_ref": "indicator--3b02c948-e2b4-48a5-aa85-19ec86331caa", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18890ad-96f3-42f5-8b80-853f85719118", "sighting_of_ref": "indicator--497c461e-5617-45cb-9284-a631996e8026", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b789aeca-6fd0-403a-a87b-c0d1f5e2e298", "sighting_of_ref": "indicator--86a6c051-c844-4457-9fa3-a7618eafd187", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012d5b42-6524-4350-9745-62b3b619905b", "sighting_of_ref": "indicator--401f801c-9955-4955-86db-2e17b9011ef9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61114dd3-c1dc-43a6-843c-2d5bb3856d5d", "sighting_of_ref": "indicator--efc22c3a-6c10-4e5c-9d04-bba3c1892c09", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f747b6-b1ae-451a-9698-233f51063c60", "sighting_of_ref": "indicator--23d1b4b5-fe67-408d-bb46-c4def492e0a1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f0f783-a4b9-487e-84c4-ac73f9bb19a6", "sighting_of_ref": "indicator--c70347c3-3135-4240-983c-aa31ee086e68", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51618ac3-f353-44b5-95ae-6b8a8d42d52d", "sighting_of_ref": "indicator--c1fd509f-9482-4da6-ac98-bcd54ad520ff", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5997c42-8e08-4f10-b0f3-8935e62c2f3d", "sighting_of_ref": "indicator--31c7c073-77c2-43c9-93f6-285e4bc3de15", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c89771-a1d9-4f30-b83c-4e9107ffeb75", "sighting_of_ref": "indicator--ec0c19cb-86a0-43ff-8c10-1fcc4877efcb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f695e196-6e93-4b58-b1cd-a52559f116b2", "sighting_of_ref": "indicator--a1316774-93cb-49f2-98f0-fdd6fd3ba552", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2fca549-f114-4d06-84ad-0ce75795833a", "sighting_of_ref": "indicator--f583109c-bbd9-49ce-b324-b6b5eef3b72c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111f5c81-0828-4e1d-a1f6-fa31507dca64", "sighting_of_ref": "indicator--bf16f1db-cd4e-4919-aea5-5e41b837b0b7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120a1504-6d8b-4a6c-9461-d99f4d30aeaa", "sighting_of_ref": "indicator--42234c01-eb43-4f10-965d-372e9ce08717", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637d0235-d44c-4fae-a5d6-54e621536835", "sighting_of_ref": "indicator--ff04e0fd-2a65-487c-9c3b-a628fd6b6082", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebbe27c8-7f5b-4742-995b-74213391a161", "sighting_of_ref": "indicator--618d3455-97ec-457e-ab41-acb6c7a66e29", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c98f08-d15c-4338-bbbe-a2ea41ab5d60", "sighting_of_ref": "indicator--69bf263f-68b8-4848-be19-838a44024222", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922ea3d8-aac1-4215-8a2d-676d68dd4363", "sighting_of_ref": "indicator--c4e3cb46-b5d1-4665-8f67-f8d3fd69753b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b1fda5-8e3b-48ae-a16e-8fa5e11d8d1d", "sighting_of_ref": "indicator--d4f40f96-e212-4361-a77d-93630c50bad4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87026627-3639-4c48-b9c6-26c1b73ed16c", "sighting_of_ref": "indicator--a8ce38a5-0d2d-4498-9476-9b09b35074fb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48a4afa-84f0-4712-9256-9d76bdcd6d91", "sighting_of_ref": "indicator--a5fdc91a-5426-4dd5-acb8-8827e393efd5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70fd5fd6-a07d-49a4-910e-f887d464d692", "sighting_of_ref": "indicator--ca165e47-a3c2-4f1d-a549-e08351b066c1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d872f6e-b813-4a27-9a36-da4967404bdd", "sighting_of_ref": "indicator--c733dccd-db32-4b5c-8346-3b01d93021c5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f13396d-0bea-4901-955a-74553b8ef17e", "sighting_of_ref": "indicator--8a455a85-f173-4bb5-9cac-62eee4e2f8ab", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d74294-8687-4fde-b0be-3d5486f1d79e", "sighting_of_ref": "indicator--981724fc-2039-4c30-9bdc-08504b5c5158", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f798437-5e0b-4eeb-8bc3-8a27f8caa793", "sighting_of_ref": "indicator--fe806efc-949f-4c51-b0ce-3884384a00dd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7f54e5-c271-44f5-9c04-90b350bc92d5", "sighting_of_ref": "indicator--8aca22e1-2a3a-417f-a652-2cdfb29eefca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d772f6-ce55-4d78-a3a8-86a921613e6e", "sighting_of_ref": "indicator--242fcbee-aa74-4203-8caa-f7a9e6a845dc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3119474f-b3c0-4959-9e26-f854eb4fb536", "sighting_of_ref": "indicator--a19d3a5c-da13-4c06-b72c-cceb76b5204e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a78911b-4ec8-453e-ab24-e8d7161c2465", "sighting_of_ref": "indicator--430c840f-f4cf-41dd-95ac-ce67347552e1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c337515b-b7af-429c-b509-cc1e4a1ae60d", "sighting_of_ref": "indicator--a8a107d5-a648-4f9f-87a6-c532a6c01983", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff1a7b0-7a9b-47ec-91c1-c2f574fe89e3", "sighting_of_ref": "indicator--5d777759-c3b6-43e9-b07f-36a5353a0b51", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d229f1-ffb7-43e3-932f-338b64f4a225", "sighting_of_ref": "indicator--b020d0d6-6e01-41dc-9e67-dea2c93b8392", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df19161-c2ba-4d66-882c-c66b0779b183", "sighting_of_ref": "indicator--e6d6d817-993b-40a4-8726-70b99808f938", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5471098e-1ace-4a55-a82e-da770d5e8e1e", "sighting_of_ref": "indicator--41291b5c-cb35-432b-8eb8-1db764e52c91", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1fd782-08b4-4f0b-9632-1759234a084b", "sighting_of_ref": "indicator--dcde56a4-ddbf-4bc7-99e9-6abf20134f33", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77356e93-dcac-4bfa-a36d-fac231c08d40", "sighting_of_ref": "indicator--a51625a6-4571-42b4-b18a-d9446225b65c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e7d84f-b881-4d30-a7f5-711d5c025d58", "sighting_of_ref": "indicator--a090d635-7dd5-4ec6-ab56-32b0f5f66c61", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b09e56eb-a1e3-42e5-ae4a-e39bb6bd752d", "sighting_of_ref": "indicator--9126ff0e-e1bd-41e0-8730-df048bd24ff1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffcb5ec7-53e8-4d50-9f2a-47ec80285581", "sighting_of_ref": "indicator--b50d88c3-c499-411e-ba04-c7445f6c712b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5791bc-849e-4376-a7bc-71f86e1ee079", "sighting_of_ref": "indicator--5aa31dfc-d9c8-49c4-beaf-48ae159b8077", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4acf4a4-62d7-4034-9f03-d3db8ac01cc0", "sighting_of_ref": "indicator--5dea26a7-5d41-4f48-b204-460e9bfeb3d6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7157eb9d-e2c4-4463-bd8e-e2ee359c4293", "sighting_of_ref": "indicator--3d0dd333-19af-4f4b-8b95-c632fd6414e4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33d2cab-e376-4d4a-8840-076600b408c3", "sighting_of_ref": "indicator--f8df5550-670b-4e58-91a6-239a3e2c1850", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8bcd59-0bfc-4391-9299-89107a6e40ae", "sighting_of_ref": "indicator--594ee8dc-2909-4b9e-b4b2-73d4f5d39bc5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b50a0908-bb70-4545-8581-9ba979ffc646", "sighting_of_ref": "indicator--f7dfcf2b-fadb-4d8f-b8a7-623a62459418", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1aa633-62f7-46c7-8a63-8032e9e59e9c", "sighting_of_ref": "indicator--86f17855-cc13-4749-83ba-a2e6fe633fb8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d7d6ec-7fd4-4ab2-aba4-43554cad240b", "sighting_of_ref": "indicator--c59e1eb9-3997-45df-82d1-bcd0ed57b101", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a4a00da-2c07-4537-ac4d-0b3faba80afe", "sighting_of_ref": "indicator--9ff1b1ce-0bf2-4e1f-bd04-8cfc8b61f8b0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24411d70-9de9-4455-9fd3-78f4ca06345e", "sighting_of_ref": "indicator--8fb2b97f-b2b2-4906-a16f-edea1280f6ec", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6c22e3-7182-410f-8ce0-50d3c2e13253", "sighting_of_ref": "indicator--e2efc960-e09c-4357-b510-77b2231b441a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1648d479-0858-483a-ba88-9c3b9cc397dc", "sighting_of_ref": "indicator--a1c23ff5-780d-4440-900c-43f458d403d5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dbfc118-4b86-417c-accf-a04867b87c62", "sighting_of_ref": "indicator--8d3a173f-40f1-49e1-8e2e-a5b06ac9b766", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300ca21b-8412-41f7-a5fb-836ea87a7109", "sighting_of_ref": "indicator--14e03098-bb58-44b4-89ff-10ed2bcc5095", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c901f539-57b8-4b36-a3ce-28c26e22647d", "sighting_of_ref": "indicator--5601e58a-0bfb-48a8-84e6-b2d854146fc4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd1497c-22bb-491f-856a-97cf21432200", "sighting_of_ref": "indicator--a6c10ff8-59c2-44f7-ba91-fbe33bc50698", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a65dc5-1cda-4535-9153-bb5e5a4d164d", "sighting_of_ref": "indicator--a635183e-a3b5-47d4-ba47-1eb9c2d2fd3d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be05ba93-3cca-4817-be88-d22e217905ca", "sighting_of_ref": "indicator--76780521-374a-4604-94f2-a7d99dd05ed8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68a77a3-3cba-4522-b89e-fa9f3405058e", "sighting_of_ref": "indicator--b486ab6c-6cc7-4d63-abb1-be05d759d4f4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f0ea83-6474-4872-a03a-1c694f9c3482", "sighting_of_ref": "indicator--54e67491-a8f3-464d-8312-1168dc385dd8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20cbb3d8-e052-44ab-a8f6-53b4481615f6", "sighting_of_ref": "indicator--282022aa-eac7-4559-8722-0ac937c894e6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50cde0b2-32d4-4168-b83a-34d02b856da1", "sighting_of_ref": "indicator--80c88307-ed4e-4abd-b7cb-06e182ba5c2f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6eb4ff-7eb3-42cd-99aa-5a5a72fe9a37", "sighting_of_ref": "indicator--173e6364-4b02-4706-8f97-03c168e3ca49", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ddb776-7591-4de5-8275-c087515f09d0", "sighting_of_ref": "indicator--b4336e7f-d845-494c-8caf-d7abadf85696", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75315585-9466-436c-8209-6b3a8f8cdfd3", "sighting_of_ref": "indicator--3f1b2e21-c4fb-4239-8b13-e4f089cfab86", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e5621e-e8f8-46b0-b8fd-fb65d290395a", "sighting_of_ref": "indicator--671e27fb-9616-4748-8591-b564cb37a161", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac885a96-a23c-4f10-ae0b-fcfd01a500d9", "sighting_of_ref": "indicator--bd55e4ef-e715-415f-a52b-c41d4a184c72", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2b1a9e-0c37-4f42-8dc2-1677e29e39cb", "sighting_of_ref": "indicator--3412dc9a-065d-494b-b02c-83ca5c2a3443", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c230d40-47cb-4a6d-bfe1-5aeeee6be721", "sighting_of_ref": "indicator--a4ab70f5-cc13-4f14-a163-1ff2231adf90", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb8fd66-d6f3-410c-994a-9cd3e908678b", "sighting_of_ref": "indicator--18ff01ee-62ce-4581-8841-5ff9db2c818d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1130b98-ed62-4b07-8b3c-81e6e872d356", "sighting_of_ref": "indicator--2c255846-3f45-4df3-8eb6-3c3f4ab1c012", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b664b541-e033-4b1a-b9c6-4af92c70c703", "sighting_of_ref": "indicator--e3c5c54d-8fd2-46c2-bc0b-1335ac2ad7e7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df476e5-5f8c-46ea-a7a6-aec7a911f57b", "sighting_of_ref": "indicator--7233b385-90ec-410f-b8be-7561fd5659b3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a804113-2244-488b-81ba-1152203141c0", "sighting_of_ref": "indicator--ba52d6c6-20cc-4967-ae3a-ba0bc5d69506", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e15df0-8c5e-473f-a20c-1cd0e3c9bf86", "sighting_of_ref": "indicator--ee1e44ca-f819-4e0c-b23f-f1f339539752", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe0b493-56a7-46ee-9559-4d8a4858cf7c", "sighting_of_ref": "indicator--7a8be18c-8dce-40ef-8200-c1c4375cfb41", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8b4c1d-4fbc-4aa3-a4e1-fe37dfdb16a1", "sighting_of_ref": "indicator--871f9600-b6a9-4170-9e9b-9d3e56a0cb59", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c1dea5-d15a-487c-83c5-1740a3ad662f", "sighting_of_ref": "indicator--122699bc-5f15-4857-abb6-7185130c0945", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b524d6-5891-4555-b24b-6da3b44f45f7", "sighting_of_ref": "indicator--242d987d-de14-4510-ab02-fdc0e144bd42", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dab0d02-ff4f-47f0-a237-d723e17d8990", "sighting_of_ref": "indicator--7c24d96c-6fe9-409e-9619-9167362f3d15", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc97db75-c397-4573-aae1-578a7df01d4f", "sighting_of_ref": "indicator--a0fe7114-ef4c-4269-b1e0-af0868f6113f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898b9614-915d-4396-8a45-84a51e8c6834", "sighting_of_ref": "indicator--07fb56b7-16d2-4601-9cba-de2e136d4181", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ad026c-4f48-4cd9-870a-2a96c1f62e00", "sighting_of_ref": "indicator--1125f7a1-c6d5-4007-aeab-75bfe8141656", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca1d753-0a50-4e9c-85bb-1450e4b2c611", "sighting_of_ref": "indicator--269afe63-d48b-4e97-9ce4-006d23d82688", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75160cf-11ac-42b3-82bb-b1c9108e3be2", "sighting_of_ref": "indicator--49b936b7-22e7-4277-a90d-049876e9e01c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcff2c2e-0288-466c-acd3-e95d47a7afbe", "sighting_of_ref": "indicator--6206433b-7229-417a-8e18-5d1128384ffe", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c72efc-48bc-4076-92db-50767a9b9a1e", "sighting_of_ref": "indicator--037a6ada-2899-46b6-8dd2-200fb9312625", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b1dd96-2b72-4f8d-8b14-943f76660bae", "sighting_of_ref": "indicator--3973861e-56a1-4445-b7b3-cd0adb28cdae", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc553d7-8105-42ee-abb0-cdda4f331144", "sighting_of_ref": "indicator--11cfba3e-8c9b-470a-a08e-febd0c4136bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7f4111-6a21-4e09-91df-bbc9e1f5406e", "sighting_of_ref": "indicator--fe192bda-2b2c-4a27-8bb1-11c0f16eb0f0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32d8798-daac-48b1-98a9-e1927b9d18f5", "sighting_of_ref": "indicator--1ce1aae8-c6f3-4539-af93-fd1bfa87000e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a756d8d9-1754-4b53-9ed0-a2ea4b8078b6", "sighting_of_ref": "indicator--a5929759-8e5a-432a-9215-c82db29382f7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35500f09-a281-4a2d-a016-4aea0f8474e8", "sighting_of_ref": "indicator--976ef38d-687c-4ed1-b2d0-670fefb4a90b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7bb7637-5887-47eb-9026-fefb2cd56a8c", "sighting_of_ref": "indicator--306a74f7-a6d0-46a9-adc7-ce442d411f50", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5a09c3-4f06-4fcc-ba92-a418bc868b5a", "sighting_of_ref": "indicator--1995d429-6686-4928-add4-190ca4096c29", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc45468f-ac15-40b1-9934-0409d82be63d", "sighting_of_ref": "indicator--6ab2a635-cd86-49c3-b914-346692a1996a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56607894-6e17-45a3-b4a4-811e401a2bbf", "sighting_of_ref": "indicator--65379dc7-5288-41ac-b5cf-196eed19eb67", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef31b53-ae08-4df8-b107-9a1f5e2436bb", "sighting_of_ref": "indicator--311e7758-d326-4746-8c7d-f801691914a8", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb33e817-193b-453a-a6e7-44f22e07fb7a", "sighting_of_ref": "indicator--ace6f6ce-b7f3-471e-8870-8ebaf7344575", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62544985-4e20-41f0-b1bc-89519a4afd7e", "sighting_of_ref": "indicator--28ef0e8f-6a81-41e1-ad0b-f775e3a3986c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb7f2ad-1e37-4de1-b84a-e1a21a421048", "sighting_of_ref": "indicator--ad3052a4-18f7-4625-8cf6-73b21a8198d0", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ec598c-ab23-4a77-af5e-1885142c6f0e", "sighting_of_ref": "indicator--834c1ca0-4857-4250-97f9-b8db0881d083", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0caada2-eeb7-4c5f-a887-80d91b614f0e", "sighting_of_ref": "indicator--574b8e98-8402-48fb-85b3-54122b3b3b45", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd19aff-99b4-4ae5-8378-50eec5c4f814", "sighting_of_ref": "indicator--80c70fcc-874b-4c4c-b2ca-10a69ef9726b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d49c34d-1bc4-4378-86f1-e1d3c86f8d28", "sighting_of_ref": "indicator--09db2899-2b6a-4469-accc-e37c9c2ad2bc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14bed08-54f6-403a-b603-ef051e049b84", "sighting_of_ref": "indicator--302a72f9-ef98-4dd0-a29e-f54398bc9ad9", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc5c5cb-87b7-4d83-825f-ae9a5132f990", "sighting_of_ref": "indicator--50c013d4-4c97-4a5f-bb12-0e6b7067373d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--135243a1-a581-45ff-b83e-3186a384132e", "sighting_of_ref": "indicator--9ea328fd-aaa3-4e89-9aff-b94c017fe474", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f446aa64-1c49-4ea7-846d-1523538f55a5", "sighting_of_ref": "indicator--ab5b8c73-92a0-4f45-a14c-903d1afb5462", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30dd62b3-6f06-4ff6-9f2b-ee6f86527f50", "sighting_of_ref": "indicator--f254432b-084f-47b7-88f0-8030021ea103", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4294e40b-22a6-446e-9d56-49c07af9d655", "sighting_of_ref": "indicator--e488e32d-259f-40da-88b7-acf0f4531a9d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33782ab4-67d0-4741-8bbb-94c38ea8526f", "sighting_of_ref": "indicator--cacae9c6-27e0-481a-ac32-85f4819d7ae2", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f4a08b-8d54-40b8-b22b-493f2753348d", "sighting_of_ref": "indicator--6c001801-f1ed-4076-85ef-10acbc8968bd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b50a5866-fdc9-4311-a1e2-79d9a0bc7fa9", "sighting_of_ref": "indicator--74388af0-0365-4c0a-bf53-79f8cbd177d4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29be7971-47cc-4ddc-821b-3d991beb15a4", "sighting_of_ref": "indicator--74388af0-0365-4c0a-bf53-79f8cbd177d4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7d98c6-b379-44c8-bec0-4119b41c7e90", "sighting_of_ref": "indicator--830071d8-0d2d-4ce5-a583-2a1688889009", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5f1130-d168-446f-bd94-de6868b21ffe", "sighting_of_ref": "indicator--07bbc30c-8958-4ae9-922e-fd59ecb2e91f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d33fa1-d06b-4d8a-8078-d971db96b448", "sighting_of_ref": "indicator--65a6a49e-15b2-4f09-9d73-d8daf66ecc31", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d57afb8d-fa2e-47aa-82a6-17ba8b92422d", "sighting_of_ref": "indicator--65a6a49e-15b2-4f09-9d73-d8daf66ecc31", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e5e2df9-897e-48f1-a65e-7c0e53bdd88d", "sighting_of_ref": "indicator--f539333f-918b-45fc-9dea-ade1ebe512f6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f996e3-782e-46a7-b0e6-0c2d1f3a5f62", "sighting_of_ref": "indicator--f539333f-918b-45fc-9dea-ade1ebe512f6", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22527a92-a068-442b-a8f1-efdacd85fc96", "sighting_of_ref": "indicator--fe70e241-b5d3-4d38-85e2-e3da5d710299", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5303475c-682c-4e7f-9810-2a07a3af2396", "sighting_of_ref": "indicator--15949412-6bee-40e9-95d1-7a596773825b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb10aaa-b5ed-4f53-bed3-b9c605d0d735", "sighting_of_ref": "indicator--4bea938e-1909-45b5-a094-372515a5163d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a3848e-891e-4dde-8972-6a1558f374cc", "sighting_of_ref": "indicator--d4c2f5bf-e132-45af-8639-ecb4f00bd99c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366ed279-2501-476c-bf67-61607ee1d52d", "sighting_of_ref": "indicator--245db759-d233-4840-ae18-78a7b74f1bee", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b180ba72-c568-4fad-92bc-72a8dbd47c07", "sighting_of_ref": "indicator--b94ca7a8-27d5-434b-96f2-bb48cc22dcc4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e599278-0213-4ddd-b412-db4f5fc33d50", "sighting_of_ref": "indicator--4623e75f-264b-44b5-b9d0-5ff07052b099", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e4c0db-0047-4474-ab96-9e867507c264", "sighting_of_ref": "indicator--4623e75f-264b-44b5-b9d0-5ff07052b099", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b106f93c-e6a6-4e6d-b882-0217332d6b91", "sighting_of_ref": "indicator--c6a6b01f-eafa-4eed-98a3-5d68d4ab4bfd", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9a8995-c25f-4bf2-884c-bb98b9d08482", "sighting_of_ref": "indicator--c6a6b01f-eafa-4eed-98a3-5d68d4ab4bfd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f16b66-5e11-43a6-844c-8974ae38213a", "sighting_of_ref": "indicator--51573161-3fbd-481f-a6e0-d67d66c6aec4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bce0e22-b941-4236-84db-641f37d0847c", "sighting_of_ref": "indicator--51573161-3fbd-481f-a6e0-d67d66c6aec4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005baa69-b499-4883-be35-734b7267b20f", "sighting_of_ref": "indicator--b8e0b50f-dd49-46b1-9983-08f5e6fac3fd", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167b8f86-7377-43cb-bee8-ea634c767ef4", "sighting_of_ref": "indicator--059904ce-3deb-4e54-a898-b3667c4a992a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d8c9eb-ffd4-4403-ba25-bf2363da61cf", "sighting_of_ref": "indicator--dbb87c07-4a53-4413-a066-207ac674edf7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe2ae90-a0b0-491c-a1a0-bd6c7a4f9f8e", "sighting_of_ref": "indicator--042d6b49-90ea-4923-926a-a44e24751bf5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd95f62-da32-46e1-af15-2843b7ee1b79", "sighting_of_ref": "indicator--db64688a-fc95-4543-9edb-175caea092c4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2090ab3c-adac-40e9-8a6c-a49dfc3d374a", "sighting_of_ref": "indicator--a00d91ec-3d45-46a9-99b4-4e37f7859f7e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e6ec3cb-dc1e-4a3b-bc54-098c732b5fad", "sighting_of_ref": "indicator--a00d91ec-3d45-46a9-99b4-4e37f7859f7e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0bf448-d26c-46a3-9ccd-8d3b550bf78e", "sighting_of_ref": "indicator--8bffc614-c8e5-4852-9c2d-4e84fa4d4163", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f2d68a-b175-4ae6-9600-eb7337097fb7", "sighting_of_ref": "indicator--c55e2a77-13a6-47de-b843-d28ffee99aa7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c2b6ab-07c3-49e0-9234-51d94eee3bb4", "sighting_of_ref": "indicator--a5b26d71-466d-41c5-a924-35738a931f78", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e14f16b-b38c-412b-94e7-214a43c83544", "sighting_of_ref": "indicator--e8816a87-bc02-4360-85c0-ca3249543c46", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b0016d-e894-4998-9d32-d1f94c5dfdf8", "sighting_of_ref": "indicator--4aa6786c-6b5b-4c36-b475-d01a6e4f22db", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79917a8-63fb-47ef-b328-baf3fbf52de4", "sighting_of_ref": "indicator--2b79b44c-507c-41bc-9a5d-b87f145797df", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8aaadc-426e-4a88-b7ea-4179b29d8b2a", "sighting_of_ref": "indicator--2b79b44c-507c-41bc-9a5d-b87f145797df", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a0a35b-49f6-4e61-a5b6-318eede43b8b", "sighting_of_ref": "indicator--8f7d5e39-e625-4260-94d1-47d6dbc7fd8b", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34b02ae-bf00-426f-9c49-ca40d50ca83d", "sighting_of_ref": "indicator--8f7d5e39-e625-4260-94d1-47d6dbc7fd8b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a0ffd5-8bf9-4195-bebd-c37e9ddd2789", "sighting_of_ref": "indicator--0274a8af-9bff-4d1f-9413-4bf22604ec4f", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3da0019-4c95-4b52-be2e-84404e1a3a80", "sighting_of_ref": "indicator--22b5b377-4373-461c-b7a5-ca0ee776f770", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc99c971-83b6-4af7-aa3d-abaa3a9acbbe", "sighting_of_ref": "indicator--22b5b377-4373-461c-b7a5-ca0ee776f770", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e636fbc0-76a6-4631-a605-8c300065a4d9", "sighting_of_ref": "indicator--1cf6567d-5c21-40a9-8e2d-ca18fc97a530", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e17e243-47cd-4c75-9117-1b38f5fbddeb", "sighting_of_ref": "indicator--1cf6567d-5c21-40a9-8e2d-ca18fc97a530", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5c4d7d-4c6c-410d-bf37-fd156c7bdfcf", "sighting_of_ref": "indicator--c270f9eb-c447-4bb8-a3d2-be5abfe8f2ba", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b810b8ae-666e-4b04-85d3-0f4239b07761", "sighting_of_ref": "indicator--ccff4097-8c3a-49b0-9c91-317f9b451184", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--953522bf-1119-4172-a921-3a98bf2416ca", "sighting_of_ref": "indicator--ccff4097-8c3a-49b0-9c91-317f9b451184", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca62ea0b-854c-4203-aaaa-8a8111edd5ae", "sighting_of_ref": "indicator--47345224-ca9c-454f-b237-e5480e79b376", "where_sighted_refs": ["location--6edb891b-13d3-4d00-8840-255c12c36fc3"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84af99e5-a9ca-4d86-9aab-a3b53d7b75a1", "sighting_of_ref": "indicator--47345224-ca9c-454f-b237-e5480e79b376", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa46a30b-7af5-44fc-b9df-1ceab6eec8bc", "sighting_of_ref": "indicator--c3490f5a-f8ba-4a05-bcaf-eeaf81a7fe6b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33dfbbe4-0389-4565-b411-925f5995a749", "sighting_of_ref": "indicator--651543e0-926b-4698-b1e7-6d823e282e39", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b81de25-500f-4431-a678-ca13c0ac4f60", "sighting_of_ref": "indicator--4d5bfa6d-cb98-4907-9c3f-e88b994a856e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a09257-f381-4b9a-adc6-756750aaa43e", "sighting_of_ref": "indicator--e2c5f9d6-43ac-428d-b618-83c881b05c40", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--281175a1-f383-401c-bed7-de72d5554bb9", "sighting_of_ref": "indicator--ee71baf6-b27d-4623-bec0-ca0493c35b3e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4de640e-972a-447b-a6e9-2f903e2d9559", "sighting_of_ref": "indicator--ee71baf6-b27d-4623-bec0-ca0493c35b3e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e207b20-b2f6-4d6d-bafa-3ecc4f90325c", "sighting_of_ref": "indicator--0d2304bf-e38b-4e5b-9867-e4c9338871c4", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018c950c-e0f4-4548-bad1-8ecf76b9d041", "sighting_of_ref": "indicator--0d2304bf-e38b-4e5b-9867-e4c9338871c4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd8de84-a414-43b6-ae8a-371661673984", "sighting_of_ref": "indicator--6dd3aebb-4cc1-45b5-a954-8d8c82de15dc", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426f2c63-549b-4e06-8824-eecfcb394dc7", "sighting_of_ref": "indicator--6dd3aebb-4cc1-45b5-a954-8d8c82de15dc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c026935e-1c31-4e47-902c-be576fe40245", "sighting_of_ref": "indicator--b26cec41-e9c0-42d9-a95d-46736bcf468c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6f8676-94d9-40ea-b9a7-2919ef604b92", "sighting_of_ref": "indicator--b26cec41-e9c0-42d9-a95d-46736bcf468c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b6a73c-0527-4141-a570-80a4ccb60278", "sighting_of_ref": "indicator--22246aa3-45b3-48a8-ae32-e1efb334fcdd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fdecc13-bd3c-4c7e-a264-71c76bbcce8a", "sighting_of_ref": "indicator--ba2f4c9f-a9f6-4e51-8ed9-c5898bbb848d", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11eacb81-8be1-41bc-a98f-af244efb89da", "sighting_of_ref": "indicator--ec160017-29fa-4a85-9a54-26ffd1e9f32e", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb85b09d-0504-430c-ba3d-719fe236342d", "sighting_of_ref": "indicator--ec160017-29fa-4a85-9a54-26ffd1e9f32e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e71e7af-9b57-4900-ae21-df7b2bde00ea", "sighting_of_ref": "indicator--62c34042-31cf-464a-8491-b72c792e90b1", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619bad89-60b6-4746-8f41-f04a4884234a", "sighting_of_ref": "indicator--62c34042-31cf-464a-8491-b72c792e90b1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce214d3-f56f-4c74-95a8-36e1eeab885a", "sighting_of_ref": "indicator--bb8c1845-27f7-402f-8852-3fffe6add1cd", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34a1d2e-e99a-481e-824a-f66b6ef97663", "sighting_of_ref": "indicator--feaf1bc9-bb21-4c9b-8add-e9cc73e2c4de", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6635a8d4-83a9-4cb1-8a6d-68575d1748af", "sighting_of_ref": "indicator--d52eebd7-bf65-4b0a-8630-6c007a177e70", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc29d8b-e4e8-4cff-8de4-70dbc38a0956", "sighting_of_ref": "indicator--7da2929d-cb55-4b7d-8f4c-4cd8dfb9b934", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd1805e7-529f-4759-8cbe-09919c20b83a", "sighting_of_ref": "indicator--066bb1ab-a1ee-434e-bbab-0e2d7ded89db", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1438c63c-e389-465d-93d6-c92f28d1d0b9", "sighting_of_ref": "indicator--9a334463-b974-41f8-869a-03b89aedbfc4", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ccee90b-eedb-4507-9499-889cf8e42e1b", "sighting_of_ref": "indicator--6a0deeab-993a-4bac-b110-de8d5f4caa39", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0278372a-0d1c-465b-beb5-698d012bacaf", "sighting_of_ref": "indicator--d6b92e1a-8f43-4a12-8ac6-9dc30779b28d", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9744470e-c5a5-4989-a2bd-d3855000acd4", "sighting_of_ref": "indicator--1294e7a7-e9f6-4a37-b382-fd3e6d0b6133", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29c3e49-7b1d-4dbb-91df-9b454c197eb6", "sighting_of_ref": "indicator--ee5fe9fd-6a28-409c-8126-c1551e47df70", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6354d5b-c868-4669-be87-4e69a2d46764", "sighting_of_ref": "indicator--0f60e22b-8cf3-48f1-beb4-5f32d9d4989a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b25d95-251e-4a67-a255-571188f3d281", "sighting_of_ref": "indicator--87dddb2a-f078-4fbf-a6be-30d4846c062b", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a165dc9-c813-429e-b272-e77a7506389c", "sighting_of_ref": "indicator--3813e35b-9eb1-4823-a6f7-5d758472a9de", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07714944-337a-408c-989f-83492a2b4a4a", "sighting_of_ref": "indicator--5fa7a5c7-cfa1-4100-899e-c55bb2609dc1", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8665ca1a-e211-430f-9e85-636c0bc31538", "sighting_of_ref": "indicator--cfb2867f-d2f5-4ff9-ac54-5a8485fcb8cb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ba1cc5-9874-42f7-9146-3c4ed97df16d", "sighting_of_ref": "indicator--21ceac5f-b584-4ac8-911d-e39cfbc14f71", "where_sighted_refs": ["location--a150a196-e463-431c-b48a-ba9fd834315f"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675f9749-0080-4982-adc8-1b9bd0ba4411", "sighting_of_ref": "indicator--4d869fc3-bce8-470c-a055-360305f2a0b6", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c91b69b-bb07-4429-8046-8bdbc411aa5e", "sighting_of_ref": "indicator--abeae687-ae54-4410-93cd-09f0545a5cd5", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae8a7c5-adee-4830-8ed8-ace3a761a32c", "sighting_of_ref": "indicator--79bd5837-5829-4a2f-bcea-94a1936446e7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd94077-5d61-424e-bfb1-06cb4fad3143", "sighting_of_ref": "indicator--3d93e205-5e9f-4995-be7c-f01d984ff55e", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64dd0f4e-92bb-41f8-b9d2-ff764863dec0", "sighting_of_ref": "indicator--43968930-6622-4897-87ae-526e0ea3c0df", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89edc77-bd39-4180-b6ce-5f777b15d217", "sighting_of_ref": "indicator--03dddd7e-7797-4686-a530-56f6891855cc", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a36987b-60de-455e-801f-87f9b91bf1e1", "sighting_of_ref": "indicator--68fc4972-42d7-48f5-bfe4-7a040317252f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18de2d5a-0110-4d36-93c9-495325adf487", "sighting_of_ref": "indicator--eeea42d3-b9e8-45bf-bba3-44b32ae0b626", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18b6730-3ec4-4f35-ab23-eac5d8c52b56", "sighting_of_ref": "indicator--4c87e267-2736-4ba8-9e1d-e7c8d4de4bca", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df32ef66-9420-44d9-a23a-7ed7dc9ff830", "sighting_of_ref": "indicator--c7f9ce8e-bab6-48e0-85f9-d794a0270790", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a011ad09-84ba-4c9c-a9f0-4118c60a911c", "sighting_of_ref": "indicator--c7f9ce8e-bab6-48e0-85f9-d794a0270790", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f89a60d9-5da0-4151-b8bb-5bad45be726d", "sighting_of_ref": "indicator--feb284c9-be03-4dee-9ca7-7520f817da04", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f9215d-5b9b-4f61-9407-300f652dc25d", "sighting_of_ref": "indicator--9967407a-4a67-4f75-9c92-efbaa6909602", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e395306-83e7-46a1-a148-fa1859afe92d", "sighting_of_ref": "indicator--347c8fbb-2102-4450-a6f1-0bec0f5c67d3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b800cbeb-3ad6-4c27-ba4d-d899b8ccf52c", "sighting_of_ref": "indicator--eca21290-3765-4298-a6c0-bfb9c27260c4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05d5ef7-dcce-44eb-a414-d6637b1a7334", "sighting_of_ref": "indicator--93c235e1-f2ce-4213-977d-3d2757d5f3db", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38fa5b9-d2cf-4bb9-a84d-7df1578bba43", "sighting_of_ref": "indicator--aa8b1848-8b5b-4220-b517-ab6900d86e68", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14948571-0e47-4e13-9911-dc2ac5d818f8", "sighting_of_ref": "indicator--e3eb599d-2ef0-4d3c-b797-8c77aefbe3e7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5045d31-43d5-4583-9802-41a89354162a", "sighting_of_ref": "indicator--52d666f5-73a1-4f7f-9658-e88908c0ce1f", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a2c15d-ab81-472c-9883-47a2939e15d1", "sighting_of_ref": "indicator--e87d5909-0ddc-4675-a58a-b2497d8c7cac", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b23558-3b29-427f-8e96-1ae8ccd3264a", "sighting_of_ref": "indicator--d4cd6407-2bfb-41ed-ba3a-336853d09770", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34e31c7d-4b37-4b8c-a587-3475f703cf1c", "sighting_of_ref": "indicator--ba36b736-84d6-42ce-bebf-80e8f1934436", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f97ea24-4ea3-4518-a07f-39a6c31e2c68", "sighting_of_ref": "indicator--949d7476-3513-479a-a66a-bc17764f9e14", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a877b24-4f18-45b0-9324-43244381d132", "sighting_of_ref": "indicator--c4377e01-5de3-4cc3-b423-9339f6e3b9bb", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34bdc5f2-1272-4f4d-85ba-9a287594deff", "sighting_of_ref": "indicator--e96de1b1-1e3b-4f6e-999f-d1307b8a7c7c", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da943893-6b15-46ac-9d2f-c323bf2943b4", "sighting_of_ref": "indicator--d5f578a4-517e-4fec-b715-8381a6454fb3", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9431e727-32ef-45f8-91d2-4d683ffb9c6e", "sighting_of_ref": "indicator--d5f578a4-517e-4fec-b715-8381a6454fb3", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc4d3cc-03c4-48f1-8d5b-92b37c796b56", "sighting_of_ref": "indicator--15713cf4-7f4f-43e8-9586-b96037a5a091", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc464317-9d0e-49ab-a2aa-3c879201533b", "sighting_of_ref": "indicator--b92d1f82-69a3-4fe2-a6e6-25d83c9e64a7", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7028ac3a-7bc9-4f4e-9e88-8145f05cd95f", "sighting_of_ref": "indicator--b92d1f82-69a3-4fe2-a6e6-25d83c9e64a7", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa39a16-d1c5-4687-9c59-e4c76300f949", "sighting_of_ref": "indicator--9371bc57-cba7-4d34-a531-88537e812b09", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388cd08a-bca4-492d-bf20-029a613cddaf", "sighting_of_ref": "indicator--68245f55-0584-42b4-8927-3a8a5b93159a", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a5451a7-a47a-438b-9924-01ee52461b53", "sighting_of_ref": "indicator--68245f55-0584-42b4-8927-3a8a5b93159a", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e15190a-3291-4f6b-a012-aac04f495080", "sighting_of_ref": "indicator--cede53a5-570f-4a54-9c0f-e1adad97fd98", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4646d549-b673-49cc-b4f1-fd254dae2538", "sighting_of_ref": "indicator--cede53a5-570f-4a54-9c0f-e1adad97fd98", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44916b98-feff-4b1b-a8da-5e6b5b71a06e", "sighting_of_ref": "indicator--bea4169b-aabd-407f-a72c-bd24bdbd4c00", "where_sighted_refs": ["location--30e6aca8-070a-47e7-9a89-cfc275e55917"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b6e567-8cf9-4f5b-b4ee-acd78a4f0c5a", "sighting_of_ref": "indicator--0760362a-a024-4bbd-9e31-14cb46f91a41", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24b5177-1128-475f-833c-c404fc4e40c7", "sighting_of_ref": "indicator--e0c1398d-e5a5-46ed-8ab3-e17efa58de83", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62064c7-d464-4a29-843e-cf0ecc91fcb2", "sighting_of_ref": "indicator--14f2ebbb-72de-4c32-b028-0080ad469be7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b67c46f-89ce-4a62-9802-e5da635a2649", "sighting_of_ref": "indicator--ffd54217-6329-4971-bf73-49e0a3e5cf3c", "where_sighted_refs": ["location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2"], "first_seen": "2026-09-05T00:00:00.000Z", "last_seen": "2026-09-05T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "report", "spec_version": "2.1", "id": "report--e0788fd0-dd6e-4ff3-b9e4-26d5a721eca2", "name": "Threat Report for 2026-09-05", "description": "Daily threat intelligence report — honeypot bruteforce, web exploit, and anonymous proxy detections.", "published": "2026-09-06T11:00:01.504Z", "report_types": ["threat-report"], "object_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "location--30e6aca8-070a-47e7-9a89-cfc275e55917", "location--a150a196-e463-431c-b48a-ba9fd834315f", "location--6edb891b-13d3-4d00-8840-255c12c36fc3", "location--16c9f80c-5078-4ca5-a240-7f3c244b5eb2", "infrastructure--41a91cad-34de-4c15-a211-cba98b76ea68", "infrastructure--af2a79dc-f5c6-4490-b4ad-fca24da30758", "relationship--c4b1f814-8796-490c-ae23-1e6fbc5aad5d", "infrastructure--1a043d64-b6f0-4bdf-88bb-b3a5b8d1218e", "infrastructure--283a3413-9ac5-4319-ae75-ab7c969c3203", "relationship--597632e3-cdc1-4017-9476-4b07c756fbc8", "infrastructure--dd89cfb5-841d-4d47-9939-932b270319cd", "relationship--b0fb412f-1a3a-4540-9e5d-ec749a75bd16", "infrastructure--54248e06-00a0-4fbd-8d07-5e75b1e38491", "relationship--ae56fc39-15d6-4317-a061-a8ab049cd338", "vulnerability--6725651c-52bf-40f7-bf2a-10fe38562d4a", "vulnerability--d96c63a7-fed3-4abf-8334-a600fc9571df", "vulnerability--a9662e46-4e5c-492e-8f0c-d8a68b711852", "vulnerability--cf0a3d8b-5957-4e13-907d-8b0816ebde95", "vulnerability--45ea53f5-26e6-43b4-97c4-33add5bebbf6", "vulnerability--d3d48e11-98c1-4f64-b1db-624611a10a69", "vulnerability--b3bad351-28c5-4f35-ba75-f7a777173900", "vulnerability--501b7c00-c25e-4982-b0bc-0bcf23f7f8f0", "vulnerability--09e8004f-6e38-483e-978e-fb0f092cda87", "vulnerability--8399d8a5-0d5c-4353-8f5d-9a5c90460c8d", "vulnerability--4ce13f05-f038-43d9-ad03-f2a70de257be", "attack-pattern--5e475c1d-71d0-43e0-9f8b-68c3071ac97e", "attack-pattern--9f6bd0dd-9d9b-4eea-b75b-9f1c56fe33c8", "attack-pattern--d867a213-be6c-4d69-afb6-caeecab59af3", "attack-pattern--8a8bb6e4-b7c8-4514-9164-c7db99614575", "indicator--ed2080be-d991-430a-a1f8-f848ad78071c", "indicator--31305f69-a2e5-4956-a42e-c8e2b39494ed", "indicator--eb4bf741-4671-4565-97e5-8914c570c5f3", "indicator--62d6b61b-72ad-4773-95d8-33f926a7d268", "indicator--caaeb2b4-f869-43a0-b746-3d556069a194", "indicator--38bec5bf-27ec-4dc9-82b3-c7cdd102442a", "indicator--979f06cb-1026-4e6b-9d82-f8ca4ae1c548", "indicator--a0133f3a-d5fd-4d28-a4cf-f5e858078c64", "indicator--0a7d9571-1eb7-42d4-b0e5-0c855cada229", "indicator--dbd096f0-d1f7-4448-9b6e-864639c65ee6", "indicator--3e5f5ee8-d4c2-40d3-bab4-951cfd07e47d", "indicator--3bf5f26d-c104-49e8-b460-d626b0f1f867", "indicator--e2423073-56e4-4941-a490-5d5781feb0cf", "indicator--4f21eaf3-c402-40b5-8b37-d45b7127db06", "indicator--0ae8d9d2-dbab-4ba5-8a86-9c1c70420c8a", "indicator--962e7b25-f1ab-4b79-b289-d8e283fcaa9f", "indicator--38e607cb-1d26-40af-b05a-fd640579ab78", "indicator--8d6a2be5-9d1c-4951-8473-93a9b2e9f5c1", "indicator--5960b0d0-2749-4103-b092-61af81b05126", "indicator--15c8bb78-4d09-4fd7-9b81-68ec28bde967", "indicator--4b65fd3a-941d-4aea-80b9-02222c962f1b", "indicator--aaeadfeb-5203-47af-a8b6-3e3f9023eab3", "indicator--7559966f-fe4a-434f-8a3c-5edf3abf64b0", "indicator--87394484-0a14-4e60-beb2-a71ebf3d9142", "indicator--9a14d9e1-5b74-45aa-a3a1-5c38a97c331c", "indicator--c9ec7524-cf21-4ac7-9d44-db9cc73469d7", "indicator--fb2f47fd-52b0-46ea-b8e1-f9c9ba5514fc", "indicator--9e1a0866-727b-412e-840c-b47b016cde74", "indicator--3a7ffa7a-7048-4949-b8e4-6563d3f50f9e", "indicator--79ff54fe-bd9f-462f-a0ee-2660d795d5b5", "indicator--ce53387e-d36a-4445-ad1a-6ca1422ba250", "indicator--972f7621-d5f5-46b2-985b-37e8a4e3db8d", "indicator--f7003c01-c513-4117-a346-915cf06f3c20", "indicator--7dd4d7a8-b4a0-4651-a549-bdc07e857187", "indicator--32f7ee51-3cc5-4901-83a7-4f50408308ee", "indicator--7498776d-0106-4581-8bb6-7bd1c93d5bc8", "indicator--afa92c22-3040-497f-b335-ff2e7b8edbad", "indicator--ecbcff35-e91a-441d-a1be-b278b4658a67", "indicator--f05186a7-498e-45df-aed7-049f46df74c6", "indicator--e9969642-58ac-4263-af4c-d8a5d00966b2", "indicator--a74471a3-bf82-43cc-a032-cbfee5ff37bd", "indicator--84251e81-8ff4-4272-89d8-6b3804e409c0", "indicator--01cbe03e-ddd3-42fb-8342-396e86a1f993", "indicator--3c18a422-3ceb-4557-afaa-de04cd256957", "indicator--af431532-a483-464e-92ed-7666c09bbfc8", "indicator--4b266b74-4828-4b61-b5dd-e814e9f8a3c0", "indicator--7707710c-2913-43a0-bc40-d8aa66b5c128", "indicator--2a4be2c6-f6c4-4cce-8829-70de874ed46d", "indicator--d6bbe111-60fa-4052-b6c4-2745f59b78e7", "indicator--15d3f51c-976b-4689-a604-da2740193483", "indicator--c3bf36a4-3912-443d-8d7a-8ba12a6ad572", "indicator--bf5c095b-6b3e-4d6f-beaa-ff64646f232a", "indicator--ca93e152-bb12-459b-85ce-7adfaa2d5bd4", "indicator--cef0f698-32e9-4bc9-84dd-5b84229ced9e", "indicator--4fe01844-f598-46fb-b2d9-ede74badac79", "indicator--8e27c4d9-f8b6-4bf0-981b-259e97c976ba", "indicator--9e57e66e-8166-4ff4-a9b6-1acb6c0c926e", "indicator--4552d1ec-a4eb-4956-83d4-896725dc4e72", "indicator--c5d090de-3c06-4dc5-88d8-faf8a5c805d8", "indicator--6158db68-2210-495b-a1c4-361e09d8c4fc", "indicator--861e3ba9-4522-4997-ae90-ac1948a6aca1", "indicator--873b79b0-6013-4d69-95bc-1f0788d453a6", "indicator--01a235fa-8687-495e-a2f5-4434d7f7c608", "indicator--cca97691-940f-4462-9d10-a0323e5b4895", "indicator--7264e03b-a5c4-40c1-9040-2610aa8c0787", "indicator--af587685-d0a6-43f5-83d7-bd1f98f6050a", "indicator--d2167b37-9e5f-438f-b0e9-d138781617f9", "indicator--6cb3a9f0-9090-4dc2-9eaa-9aae654202a9", "indicator--ac4c8d02-b83f-4540-9ef9-c39a5afb25e1", "indicator--4fbb6de8-0a79-4ad4-8e33-1abda88fd6e0", "indicator--553f5690-1aae-40a9-9918-a2d1518439af", "indicator--958dd2d1-a92e-451c-913b-cf47f27d6e65", "indicator--44bc7621-29c2-4a82-881d-41f944eef455", "indicator--fa2f0796-8190-4e53-aec1-332eabdc1507", "indicator--a8ce3ac5-b16a-4afa-a7a1-301535400601", "indicator--639ab49f-9034-4d2d-b0b5-6c23b44bbab9", "indicator--f01a9fdf-9d2f-4721-94cc-757ecb20efd7", "indicator--538eeecb-1ad8-4601-a2aa-a030e8cca938", "indicator--4ac1ae7f-5786-478a-9732-4d9a6391483a", "indicator--d23f2e66-3b71-4764-9b27-aff77bde42bf", "indicator--fd4e171c-7ea4-450d-b3e0-b54267745a64", "indicator--f6198a40-6030-4214-834e-07ade1beabd2", "indicator--8361a9ff-2b4c-4f03-b173-ff8af91c5f1f", "indicator--3399f831-3eb0-4aa3-9703-93694a48af0a", "indicator--6de87f5a-78a1-45c8-85a5-c13ec336e2f3", "indicator--5d68cf4f-6d6a-446a-803c-e7476fafd0be", "indicator--a98bcf82-66bc-40d8-b80a-ac2b962f3bac", "indicator--8943de5d-baf9-4869-9107-90ee6a318455", "indicator--58d6449a-ffae-4061-87b8-9e70ff7af567", "indicator--de209b9d-dd8a-43b2-9a53-bc4e7d0f453e", "indicator--db38467b-4e0a-4719-9b10-8cff4ab840aa", "indicator--67cd2e20-ed52-425b-9f39-57eb3fe61e1d", "indicator--b783e183-80fb-4bcb-a526-b2c920845858", "indicator--b3a335e2-2bc4-4be9-aa43-515f2b696433", "indicator--1b61d505-f9f3-496f-ae88-a01bcd97d8b0", "indicator--d10b340e-72e8-46b1-a97e-0dcb7f6cc483", "indicator--1cdbfa58-32dd-4793-b3c8-ce7ed76748b4", "indicator--646a362b-0a9e-45bc-b9d3-83b76930e395", "indicator--935aab5d-0444-4055-9159-1185c29b7fee", "indicator--5e59c363-bd8f-47ed-abf1-8a652fbda5c5", "indicator--72ba4f54-f84f-4273-9dca-5458373a8527", "indicator--2c369436-285e-4c9a-a4be-3c39bfcfc28a", "indicator--06d738fd-edf1-41c0-8be1-5d16f29ec159", "indicator--2fbac7ba-28a9-4478-96e2-733d2c63c51e", "indicator--47c50846-9212-4450-8608-3a6b12d73869", "indicator--daa8f094-4b66-4908-b0b9-4cb44aa27d2d", "indicator--45a01796-6e56-4ee0-ad61-aab22226dcdc", "indicator--eeacaa58-9a05-48e2-be68-f3926bfb7ed8", "indicator--140ce233-8c19-40e0-95c3-bc924bb6238c", "indicator--ea77b173-8012-4ffc-9fa7-5ec320ca6bf0", "indicator--020ae1e5-35e4-48a3-9925-fb3b84c95735", "indicator--a1b7dc00-97e6-46f5-afb1-f6bb16b734fe", "indicator--b6bcf9e9-2edd-4c94-808c-ef1d2e1b51e8", "indicator--37984574-ac0f-4301-a723-ade594440922", "indicator--2b433529-f14b-41a6-8f22-3b53c1ea8365", "indicator--08b61fef-022e-4649-adf6-09d77aebac01", "indicator--1b1ba0e8-101b-47e3-8832-d1e4738bf3f4", "indicator--52b58672-7049-4d45-8307-ff62f6108085", "indicator--401d601c-20c7-4832-a23d-e2b73680bc7f", "indicator--2466a354-d1db-4032-95fb-287594fd82dd", "indicator--54bbf692-5ee0-416c-bba8-8487a954d0bb", "indicator--b6a5b31f-ef0e-4f3b-a515-743221f15142", "indicator--ab83b60e-7d53-40f2-a874-fd80915ad750", "indicator--9eaa4b6a-15a7-4e88-9dfd-e455360c0f6f", "indicator--aea43e19-6ef8-4f2d-9cfe-c4fdd2711979", "indicator--0dac07f3-b505-4650-8a5b-78f0e8059781", "indicator--5757b26e-fb78-4539-989c-6b1b53254440", "indicator--938dc461-741f-47df-85ac-fc339cc10b08", "indicator--51c7a867-81e6-4daa-8c63-d92a08be962e", "indicator--288bf80f-5674-4b0d-a642-24f2fff4d5f5", "indicator--8f409bd6-1cca-47a3-a6c0-6d1b3fe6ee83", "indicator--d98a220a-4cbc-40a4-acb9-ba978e5b26e0", "indicator--a858cc10-b0e5-490c-9563-71f63255b463", "indicator--c15fa695-d1f8-47d2-8503-3f425fcc4c7c", "indicator--3a99a87b-d8d9-472e-a281-5d3b02e8a6bb", "indicator--54a55d4c-dcfb-45fc-8f52-048e7b7f0c06", "indicator--aa16d935-07fe-4458-9732-69bf5faa7f3d", "indicator--833efa65-14da-4208-b0f2-fa279d93edfa", "indicator--084e6f2f-b25c-44fe-aab4-07f275ac868a", "indicator--77e5184a-f8b0-4eea-854f-903ab60c65a2", "indicator--14ee7335-0c50-4ef8-8822-b8a1936ecc68", "indicator--341348ef-0980-4bfa-851b-590e1392c83e", "indicator--776aa21f-98e1-49f4-9888-c1b1066c9222", "indicator--d6f5cca6-e616-4a2b-ad21-e153d997940f", "indicator--dd1ca906-fc2b-449e-b2a4-3beca51db095", "indicator--11dc0fe1-dfd3-4fda-8228-f037220d6026", "indicator--45b24592-4558-4415-a0a8-49048d5ef1db", "indicator--8da6a806-2f6a-4e40-b20a-c9624f06c3c9", "indicator--5f6ce2e6-75f8-4aeb-afe1-1d37b40d3585", "indicator--57104359-6ad8-4e37-93f8-f0b151f8cba2", "indicator--bba97617-5091-4eb6-8f4b-ca82910bf801", "indicator--f63607a5-28b5-4762-b637-d7e15013b7ca", "indicator--5c81e10c-e3a1-458b-8b4c-c1ad2df8b1ea", "indicator--a7675b65-60d7-4469-a647-c2a8b8878f4b", "indicator--3c34d125-d7a7-42a6-9dce-2099d32405d4", "indicator--54e50290-d5a9-4f74-83bb-29d39d1b1dee", "indicator--4905e6e2-59e2-4725-be99-a466cf225027", "indicator--a3e2c904-7f5c-44ed-a96a-19b105b71124", "indicator--2047d87e-117a-4bba-ad24-b2bde09d73aa", "indicator--623d22eb-2fdb-4329-80af-1d5d28228335", "indicator--bedb05c0-2434-4eed-885f-919b11da104b", "indicator--a6edc71a-3616-4981-aa35-94f7155f4f5a", "indicator--6ecafc0a-65c3-41f5-87e5-a7e80eb210dc", "indicator--4fd45008-b4ec-4802-9124-4039e1d044d5", "indicator--2910b65f-5638-492b-8014-1a0e1d5aed81", "indicator--3f368ee6-672e-4c57-8bd4-c1ae3729013d", "indicator--0b847792-de61-4664-b66b-9b3d1d3ad956", "indicator--048d3add-1591-47ab-8340-b4da58cd8ebc", "indicator--17f35650-7768-4d77-9a23-eedd1fc071a0", "indicator--25ee041b-42ed-4e7e-9ccc-02a31ba2ad0d", "indicator--e4d22a12-a552-435c-a54f-3973a37aa8fe", "indicator--55e77735-51bf-43b7-b8f5-c72c1131b079", "indicator--004e981c-55fa-455e-a738-ad6c844cc538", "indicator--21d4a92d-6e33-47a6-83e2-c385d27676fe", "indicator--591adc08-7f59-4002-a46d-1f5129781f4b", "indicator--aa8db17a-03ae-4075-a588-ce2edf5dcdd9", "indicator--7c803919-ee95-4ad9-adab-1607def78d37", "indicator--4d97a383-78fe-408d-bdd8-6bfa54754c70", "indicator--d3da19f0-e266-4a27-b2a4-967cdfc1daa7", "indicator--46fbe13d-eed0-46b5-8948-645cb3d58581", "indicator--ba372989-eb1a-4528-9eef-60f93f26ae5a", "indicator--c6884bed-cc21-4b5a-9710-d8e4d3703c1e", "indicator--fe505427-3cc1-4878-831a-7a0748b81988", "indicator--5fba9406-e3da-4777-a64e-3c949a9413e6", "indicator--6ca53ec3-0d23-49d7-b0fe-dd5f9b97e8fd", "indicator--367fa2f5-cde4-4736-b421-33c6bc24cd2c", "indicator--26581a6c-2ab2-4dfc-9974-89242cdba5b1", "indicator--e61a955d-d2b3-4445-a3c8-375fe46c74c8", "indicator--7804fba1-2fb8-459c-94fe-43aacdac31e8", "indicator--b8077424-c65c-473d-88e4-5b89033dc6c4", "indicator--e8150b49-cad0-4cb3-88c4-db54ec6a311e", "indicator--d3e3b60e-c42f-49a8-a2f4-00e7de49b2d2", "indicator--59472540-ff96-43d1-a710-3daf3f7b8b09", "indicator--8ad0bd9d-0ed6-4d3f-91b0-a6327c0403c0", "indicator--8017c788-fce8-4b0b-bbbd-e1bc3d044a06", "indicator--4d1d96c4-217d-4a32-af49-8f323aa4fc21", "indicator--9b9df71f-f23b-4056-858b-1f386b879a72", "indicator--23f32da1-37b8-4cfd-85d0-6069d5fa17da", "indicator--7acc9136-4305-468a-bb4e-4f9a5f10bbcc", "indicator--8f834e1f-e6e8-4e4f-b6cd-6e164655a752", "indicator--db09b66d-8044-4968-bd7e-9f6b54de08cb", "indicator--c54c290b-9979-4f5d-bb11-0227d6810111", "indicator--01aafe6c-ce64-4467-b291-4aa3ebaabc87", "indicator--7c2a25ec-d66e-4f57-bc70-b6819bace672", "indicator--5fb9bbd9-ffd1-41c6-8882-937c05751fe8", "indicator--f05ef99d-ffff-43a1-9d68-27cffe50744e", "indicator--413d2cfb-be3d-402e-a8ce-10a92aa4f49c", "indicator--8bd3283e-0127-4e1c-9617-292098f832e0", "indicator--ae39fccc-78e3-460f-85be-bc009a6d5537", "indicator--c503ec81-6303-49c8-bae9-d5f46ba2889b", "indicator--f7ffa4ba-47be-4bf8-bdc7-76ba16fcdba2", "indicator--2fac692e-58c9-4ebf-ad49-b6e7f56d604d", "indicator--ab5753c4-cfee-4651-a76b-25428473970e", "indicator--2f6e2a2e-5ec3-4bad-ac6a-76878298d201", "indicator--e75998ad-bd7c-48ca-97a0-4ec88853a72d", "indicator--9b464193-ee30-41e7-b6de-551a93ad3f8d", "indicator--5d78e7f3-1219-4a58-ae84-db14d2503231", "indicator--2e2ea0b8-7173-4969-9f1f-990b01a007f8", "indicator--e4af84a2-4263-40ba-9a56-938c5fd55418", "indicator--21306c71-fa3a-4ef5-8321-89bd8c2f49b0", "indicator--55c372eb-cddd-4eab-8a39-04f40c3c639f", "indicator--3ba983e4-ec65-41f7-81b5-cb84ce32cf9c", "indicator--78022608-aa4c-408a-a43f-0d4f89d78a3a", "indicator--7d57a986-c539-462c-9f8a-3edcaaf437a7", "indicator--26793cb5-e1cc-4a0f-a868-cf292990bb7a", "indicator--27b21513-b4de-46b0-b5dc-91a88785bc55", "indicator--8d6016ed-a237-4072-a647-a2f7afb8fc04", "indicator--6dd08115-4e13-481f-a9ca-0627f0026c76", "indicator--cf2dc258-aed2-4790-af82-24ee66d4ab3d", "indicator--569de5fa-3010-4215-9615-e290589a42d7", "indicator--248a96b2-59ee-4a62-9b44-d764ac987d76", "indicator--9bc7b07a-d15d-4a12-977d-fb1b6c8f58f6", "indicator--b15be666-5717-4f8b-8e49-50a39baa8534", "indicator--0305471a-631f-4c81-89ee-5e39ceec95cd", "indicator--cb1b7df0-c9b8-4211-9c00-b7791cf19666", "indicator--b0456d68-86b5-469d-8a8b-aadf1057ab73", "indicator--56c1c733-998e-41f3-8d29-41befece8cfd", "indicator--2c811ef6-a374-4c7e-b0c0-aa094b13f7dc", "indicator--59ec07ca-591f-4028-858e-70aa52c26544", "indicator--27a39f5f-d03d-4494-8d99-2dd36e720f0c", "indicator--e22707e5-8200-4e9e-8f00-9fda1c7542f1", "indicator--5dd5be98-9e25-4a88-82e7-89f09d0074c1", "indicator--d9e3aba0-2827-4105-908d-0f55667f99c5", "indicator--d4bd5b0f-41f5-4a4a-ab09-ee5a358190d2", "indicator--1bad43e5-0346-4938-900e-34b483d10f6e", "indicator--d1eba1e6-e284-4b45-acdd-38e00040b82f", "indicator--42935147-100e-4494-ba6b-83ddd8ecaa0f", "indicator--9d3d51ba-f18b-4850-8bec-4a02ec1edda9", "indicator--a06bc516-a0b0-47b6-b717-58bd49c82594", "indicator--601471c4-f12c-4b45-af59-03921768c70c", "indicator--4035b803-1a0e-412e-a595-9394587f55af", "indicator--5655faf5-4492-4431-b89a-34d6162f214f", "indicator--c3e34876-070f-484f-a11c-8f357c6de213", "indicator--1c25e15d-d645-42a6-bef6-9c53014236b5", "indicator--4e07951a-66e5-41ed-9249-e1a18dd3984d", "indicator--52e680e3-a114-4350-bada-7b47b4019bb1", "indicator--8bba8633-3f36-4f37-8dcd-c8657686293c", "indicator--ef56e33c-2d9a-4cc4-9129-1641f109f8d2", "indicator--0a0efed5-db9a-481f-ac16-1d67e2c4a7a4", "indicator--26ede0c7-e143-406f-aeca-2f5a5a25fdf6", "indicator--7776b8dd-835c-49e2-a984-31d410cefe52", "indicator--560fc8a1-8ec8-489b-b7d0-8e4569b4f162", "indicator--eae5a380-00dc-42aa-a965-bbae5089cf83", "indicator--062799bf-075f-4335-8300-dc6b060ca0c7", "indicator--6a874756-5053-47b9-9b4b-2599d09386ed", "indicator--c3a4079e-c416-4e27-a918-333610591358", "indicator--df483e19-94a2-4447-a065-4e5e96298196", "indicator--56a309ff-2203-4571-9a9f-bdea5fb22d18", "indicator--5c447825-44cf-42a0-9f3e-82bf6d8f9df6", "indicator--7cb7552c-1ada-4d0a-8bae-af81e91bde70", "indicator--f5342c53-880d-4c45-87d7-522747301eba", "indicator--33bf4e15-1c4a-433e-aea9-b0dd102017cb", "indicator--2922cda9-008e-458d-a1a6-8d7c9b2ae657", "indicator--edfb8efe-0ea0-41f7-a416-05b263acb775", "indicator--bcc267a2-3bc3-473d-89e9-31118dcd5192", "indicator--4f4b8ae2-c0a5-4899-a6ca-82f84a907ce0", "indicator--f2c3e96e-8ade-4b01-a878-2422b206b24b", "indicator--62164c48-6fa0-4911-b03c-e63b6042a2a5", "indicator--2fe1dd5d-ca41-44c9-b173-e849faf962f3", "indicator--a8cccf53-4be2-4d1f-b758-ee402314d8a4", "indicator--1b462b4a-7479-4f90-a0f3-72e0a4c6dff7", "indicator--91e0854a-f7c3-4d40-beef-5cea8c1055ea", "indicator--2ea8d8de-6866-4af2-b797-995321010dc6", "indicator--ce9f17fa-697d-4e4d-8998-68ba35cbdaf3", "indicator--fe064c29-243c-4789-bad8-af8902f4ed43", "indicator--f30d1408-edb5-44bd-95fe-d296ab162669", "indicator--b808bcff-4abd-402f-92e2-6e70afec92d1", "indicator--4ee87e1c-3828-4140-bdaf-8801a99e6f71", "indicator--32e3e685-a984-46f6-9d2b-9f2f85d9361d", "indicator--3bb6ff10-7fe1-4607-a5aa-f43cb30a5048", "indicator--eb8ef6d2-f595-48e6-89c6-83e312406f32", "indicator--a0c09c95-9478-4458-b35e-c3bf3b38bbfb", "indicator--c6938deb-d61e-4e19-bb1c-d42592366285", "indicator--3b75106d-806d-42c4-b95e-241016b77893", "indicator--53861b79-8c4b-4748-ac04-ad0d222c20aa", "indicator--3f54d544-c613-4931-bee2-92afc88888d2", "indicator--4fd236b6-9b93-4b06-a399-68d99b284f80", "indicator--77900c5e-fa73-4f1a-9f96-4ec6b4b6c5e8", "indicator--cbac78b1-1a1f-492d-96a9-f848071958e0", "indicator--75b055ed-c92e-4979-a4cb-2e36309ccedb", "indicator--3f3b4d7a-3a87-4efb-b979-1711ea302770", "indicator--49596efd-13ac-4bd2-80be-d4ec289d359a", "indicator--4ffeca9c-b58b-4100-81d9-4cee9ab0e382", "indicator--82337eb6-2649-48c6-9494-db8504398e2a", "indicator--3a42765b-6700-444e-81ed-609211175e7d", "indicator--f5457450-9671-45e8-bcff-eb5a78343d73", "indicator--3486b25a-b452-409b-b28e-b6097dd0b233", "indicator--583c5798-a7f4-4a2d-b811-cb633df32730", "indicator--3f3111bc-2188-4668-9f4f-fefd60c98652", "indicator--c6085722-489f-4ffd-8b52-ce903960bf2a", "indicator--292eac95-d0fb-45f8-ab0d-31556c1e94a8", "indicator--a416bda0-5d9e-49e3-afc5-b783413dd695", "indicator--620fbb29-bd20-47f2-984b-439a832f7ed5", "indicator--16425652-6b5b-41af-b2d0-a1545ba2acf5", "indicator--9ea4c425-2dfd-4e61-924c-1fff943975fa", "indicator--36f339ee-c49c-4331-a613-1ceee1bd8d18", "indicator--a3268dd0-face-487e-849a-9c7f8e439cad", "indicator--34061ac7-9fd5-42df-b731-aaa6b1fb5723", "indicator--24623afa-3634-4b1a-8637-20c15dca8754", "indicator--fb22ce9b-a5e0-45e9-9ffc-c5fa8bc4674c", "indicator--2c16c020-f7ee-4043-8401-d85b4b2f258e", "indicator--ff026910-9363-484d-a539-a4920e85dda5", "indicator--9f4a453a-c5ba-48d7-9353-26929a3b9652", "indicator--7df39805-3de7-4d66-8979-a01730d922ab", "indicator--b92228a4-c9cf-425a-9ddd-d988f9f95cae", "indicator--a1fb3729-c41f-47dd-a443-aea807e158da", "indicator--bac08e5a-8f8f-4d82-a1d1-8c9e460bfaf1", "indicator--6f0baaa4-0589-4cb3-90aa-0c1d739fdaf0", "indicator--ae3e6bf2-3621-4cb6-ae35-01b67041c820", "indicator--f8df73c3-ce85-4ca9-82c3-903ee434d7bc", "indicator--13b9382a-2d7a-4b5b-8937-b812795f5011", "indicator--d3c0b605-6a29-43c6-880b-8fbf79ea2ba9", "indicator--3c03843c-3db1-4525-9ec5-c261ab0b4886", "indicator--d7971a5b-bb7a-495e-848e-045b918f74c3", "indicator--454f275f-1db2-407f-aa2a-518c83dac479", "indicator--298ed623-7e50-440e-bd78-995f1ad7174c", "indicator--837f6a9f-140d-45ce-a5e2-7b48ee11c3c1", "indicator--6c323af7-7fc0-43bf-a51d-441ec0e6054b", "indicator--dd49c88f-decc-4422-a587-f294783d2bfa", "indicator--42b20c39-5c0a-441e-86e2-803c35517992", "indicator--a950975d-6e81-4b97-b96a-00b1ce7a6ce3", "indicator--e537dee0-0d99-4940-a5be-f5e7a9e6144f", "indicator--37518ac9-011f-4517-a57d-161677cfcd48", "indicator--fdfc54bc-7a9d-4631-8cb2-dc2e73a6958f", "indicator--9bfbc65a-54a8-4ffe-8ae1-dd9c5b389576", "indicator--fd1c255f-aa87-4c82-9525-a3b5ce2cb830", "indicator--b6721893-b1d6-43cb-99d7-ceb2f9af8379", "indicator--218087de-ac98-433f-89e8-6764de750d63", "indicator--53aa3912-72dd-432f-9f61-8f5f78c1d661", "indicator--7ecd8457-3323-4185-98ad-c03b389b1910", "indicator--9770179b-7d09-4b55-a12d-88b3b1bef30d", "indicator--fba4afd1-764b-4422-b80b-4e9ffa00d313", "indicator--90b2d9dc-acc2-4253-bcc9-147c3698eafa", "indicator--4b860b09-9818-455b-bfca-9cf0787ef397", "indicator--35b7f336-c53d-46eb-b84c-8d581aa3be40", "indicator--9c6f870c-7fe6-4247-a818-3f3aaabc59ed", "indicator--f05b4299-1173-44a7-86a5-4f5505f1d387", "indicator--4386b2e2-5289-4d23-9feb-356126a99fc4", "indicator--e0fd4525-d4f5-4bd2-811d-1b518c485e34", "indicator--0a0092dd-05bc-44a5-b6fa-74f85b1d8ca9", "indicator--bc3f5cc7-ea7a-4374-abdb-336a9f456e08", "indicator--887bbedb-a716-45be-9d20-b78d4c4375a8", "indicator--f18916f7-9030-4a10-8e51-1396cdfd8729", "indicator--56d4803c-50c4-4b1f-bccb-3fb80acb70e1", "indicator--d8924241-2963-4fd9-9fa4-f4061537cf48", "indicator--9d809fe9-75a8-4c68-92fb-338335376109", "indicator--07fad533-5d49-4ac4-b349-bd78681cc1ab", "indicator--d535d45f-545e-47bf-a7b4-a4fa2f89ef27", "indicator--2cef577f-43ac-480e-9227-d0a689865286", "indicator--430aebe6-6b28-4147-881c-f41fdb09db8b", "indicator--6d87feb1-275d-4c45-a8f7-ea8a3b2485f9", "indicator--a69fa8c9-d810-4d22-8663-e25c1e64a309", "indicator--8471fc67-6208-458c-87ad-d17933b71f23", "indicator--6ea4bdc9-f270-4524-998e-e40819bab217", "indicator--808361f8-9891-4cb3-b7fc-2762ba03c24e", "indicator--228466f3-cf8b-4cab-b155-bd00d56d47cb", "indicator--7d3f5324-932d-48f5-95a8-4eb42cc778be", "indicator--8a7a2548-979c-4d28-90ee-be75bb0c45f3", "indicator--62d18d0f-fc48-4f67-8ade-2e415e12ea44", "indicator--dc1da9c6-4c96-43a7-8b2c-6daf2ce86e8f", "indicator--a6618430-7f5c-442d-b9b9-75d45bb844ed", "indicator--4c225a35-7de3-4c94-865a-2532ceb6d7b7", "indicator--fba753b2-acf8-43cd-afc4-11aa53324a77", "indicator--ab4bad65-fb9f-4ffd-8134-d4b40be8b989", "indicator--a5644d2b-79df-48d0-acf0-c2213b30aa93", "indicator--628e8c87-eaa8-498e-b5c5-b83c94f23617", "indicator--a43d1e3d-7cb1-43d6-9faa-8d6093aab8b8", "indicator--cab4ff71-26aa-4655-a763-1cc03caf8c65", "indicator--2abbda1f-70d5-4633-a571-265ee5523373", "indicator--89ccc21b-6204-46d2-9c05-c63e1c7cb9e2", "indicator--cef31de4-5155-43a2-a522-bf21c6c53411", "indicator--3339f879-6769-47d7-8549-eefb8760b6bd", "indicator--59a4aa27-53ac-4618-901c-b0cc7aabfaa6", "indicator--134ea17e-ab69-4f36-a0a2-fdf9f9221efd", "indicator--eca4692b-9fa0-457e-bf9e-86f6d3c56591", "indicator--315256b1-79e4-4d74-a473-6b159dffb1de", "indicator--f0a3f927-e704-401c-bbc6-5fd06f2b0ff2", "indicator--2995b64b-a216-488a-8c19-d28e2e44021e", "indicator--e8c945d0-9a73-4c76-8eb6-095b59ce785a", "indicator--27f75d0e-4caf-46da-8f87-5b6d87344d65", "indicator--f962eb10-2895-421a-980b-c065872b0278", "indicator--842492fa-36ce-48aa-bbf0-c32236f79aa3", "indicator--b61f3806-4d98-4cc8-941b-bbb4de9c1ff1", "indicator--4aa4bb1a-0bf3-416e-a253-3d2a68fa3494", "indicator--b5551fcb-90b9-45d6-876c-0df0aa6fe563", "indicator--1ef99dce-cb3d-4665-9daf-8db2b6a1ccc6", "indicator--7744ab2b-55d7-475c-82fe-be75273796e5", "indicator--8fda3237-f429-4921-8882-042de226abd0", "indicator--55b4926f-76fa-44a1-a9bc-5cc8a7ab8a0a", "indicator--c9c9e5d1-816b-40d1-b993-1416e8077624", "indicator--52622650-5189-435f-8e05-dfa971ae9fff", "indicator--b2f8f0b6-4031-4f1e-bb86-f0d5feedad2c", "indicator--1b76b07c-e4fd-4612-a52e-27aa60bc3610", "indicator--55f40de2-ea5d-4108-b824-da0b39994b0c", "indicator--92d285ae-525d-4cbc-b77d-96ea825a4616", "indicator--7ac73385-c641-46f4-9199-58c8ccb86295", "indicator--63ec8336-dc77-4dd4-be2d-9fd3e65c5166", "indicator--b69dc465-e44f-4aa9-8925-7e543d1c85ce", "indicator--653c346e-8158-42e4-9473-fd5197fe6878", "indicator--52d8e659-252d-4168-8221-faad15fd4576", "indicator--f3e97046-1644-4eb6-b4b7-5af2083ac638", "indicator--872f5936-debf-4dc8-a57e-ca0c61022741", "indicator--6dea02dd-0b87-4d98-a143-f103fb4e9a3a", "indicator--178a604c-6a82-430b-8cfd-d8ec7c367e8c", "indicator--75a955ae-36f3-43b1-9de6-1643c1659518", "indicator--21b785d6-fdcf-4737-97d1-912b55975d2e", "indicator--ba10e3a1-3176-4c6e-b4ca-243e3a41a2cb", "indicator--bcae5949-9e8c-4bfb-b281-1e300ad77b90", "indicator--93e0edfb-9d4f-47f6-a9bd-b55497348792", "indicator--27e4ee2a-f635-4913-8868-a4b7c9dc535c", "indicator--8e6fea0d-3fd9-468e-8a5b-a2a6e91c0ce1", "indicator--695fa136-c8a7-45fd-915b-604b3fde7926", "indicator--4c07310d-d88e-489d-ab6a-f8d8edb8d6dc", "indicator--6374f6f2-547e-478d-8c35-e3cc67f252db", "indicator--fdfd0fec-b7a5-4836-b4d4-fc7304c3761e", "indicator--e7d786a5-f5bb-46f1-96db-cd3abf02db44", "indicator--7ab2aa75-c0c4-46c5-8cc4-5f70b95782c9", "indicator--84f7d9f9-f62b-44a6-921f-639b1b610328", "indicator--3e5bbc55-ac68-441a-9df4-f4169015f9ef", "indicator--b6dfec3f-5141-45c8-b744-d15be627b063", "indicator--482025d4-6ee4-41f7-8d34-077f11393a8c", "indicator--4818ea30-5df6-4992-8b38-516af800e2d4", "indicator--a28cc6b8-9b2b-4d56-9d34-200ae16f46bb", "indicator--909a86e1-eed2-4900-9f38-7cdffcfd3e4e", "indicator--a4641d80-b58c-4d0c-89d3-8fd1623afb43", "indicator--2d1ecbc6-82f1-410e-97cf-b6dd9f8ad0a5", "indicator--31b96af1-8663-48f1-bb0b-0f66650dfc92", "indicator--d19ec9c2-b17c-4b9e-8738-3c8477d7f4b8", "indicator--80dacbe3-c562-4af0-9023-03c569f41566", "indicator--3d7700c5-dfe1-4290-a333-04365eb8aeef", "indicator--8a07dbe7-e02e-45c8-ad6a-331f86dc1359", "indicator--ff55bc17-81f1-47c2-ab39-423d5143be41", "indicator--f6465d63-57f2-480b-bb66-9804d500e8b8", "indicator--098ce017-0f13-4c62-a9cf-8432784cc058", "indicator--f7ccdba0-a08a-47a3-9c87-46a322f1927c", "indicator--b0b16a02-238c-4f96-99ee-b373207cf9ee", "indicator--16b062e4-d66c-4a18-a08d-b077f84cce4c", "indicator--7087f7fd-01e4-4acb-a076-de9831184b38", "indicator--63a7f323-78cd-4981-bbfb-385fd56ba39c", "indicator--389415d4-99bf-41c2-a7d8-9827051486d4", "indicator--dc079f8d-e840-4787-a44c-0da19740dba7", "indicator--a7d50183-fdc0-4b64-ac4f-d5a29015aec2", "indicator--a92c4086-0ced-405a-8f28-2d26d31bc4e4", "indicator--c94ecce2-1778-4229-b144-6838d03a4f32", "indicator--b32b0bb2-4f27-4d4b-ab67-99e5895bd35c", "indicator--9857cbe1-b8d7-4bdb-8164-9caf70d098bb", "indicator--4a303c76-f069-490e-9d32-baa7d9d239d5", "indicator--fe470953-0524-422c-8f6a-10fbfec9c8be", "indicator--ea638f40-e24c-416a-93fd-df055fef61e0", "indicator--f9512e51-f8db-407b-af95-1766998db8a1", "indicator--8a684678-02f2-4102-8712-481a6b40133f", "indicator--7fd7fb3e-ecad-4179-9c84-1a2323e25d0e", "indicator--391e27b3-b75b-4dfa-b121-2a56bc2f15d0", "indicator--6232824b-4fd5-4476-83ca-6dc006a3c2e9", "indicator--5ae77240-af89-4a50-a27e-f646581e2b89", "indicator--4e212c34-4987-4c0d-b6b2-3ec250950696", "indicator--205901e3-d1ea-4348-9ef9-409276c03766", "indicator--03aa809c-7491-4548-873e-b6fcfb9f61ab", "indicator--ddff7684-00f8-4e79-89cd-63e83ba8bab4", "indicator--6ed87325-05b5-45a8-89a1-4a245dbbde77", "indicator--158d2002-06d0-4a4a-a717-82ea4f58ffea", "indicator--2cc632a6-9e72-4dcf-9ba1-862cd8f4a372", "indicator--8f12e5c7-2bf0-4a45-a2c0-98f96bfe87a9", "indicator--1e3a8eb1-a2fa-4532-85cf-dc0bd59141d8", "indicator--b72517c5-0260-4aca-b4cb-d5c19696a420", "indicator--731ec7d7-8710-4f25-80b1-f183c46f3ac4", "indicator--a95ee237-545f-4fce-ac45-c45dc37d75c8", "indicator--e0d7df47-135b-40da-8bde-cd13fc88fc45", "indicator--bdc2fb45-757d-408a-bae8-439bbead766f", "indicator--4ff086c1-b600-4c0d-986a-6ee29b288c54", "indicator--0bb0f9df-7621-49b8-8063-4d90c715bd3f", "indicator--0931afd4-368b-4bac-8a3c-722e1e8f5307", "indicator--e7d454a4-2dd9-489a-9b72-8c0f427c1a73", "indicator--7cb3c349-8aac-4391-9f0b-703a6461eeaf", "indicator--c2d2bb1a-bcf6-4988-83fe-924e96634d34", "indicator--affb9708-5f2e-447a-afbd-87a69f4b4fdf", "indicator--3c12a005-5916-4cbb-978e-8bb4f3158231", "indicator--01974231-49f3-4644-ae00-76cc34ec7ef2", "indicator--4206f22a-7f8e-4908-af53-4d07e1b7afd1", "indicator--6ab03f32-6cb8-401f-8161-d0fe5bccb8a8", "indicator--163b3927-b6de-4e36-8775-641fe154f489", "indicator--8627617f-e2d7-4067-8870-35b88de30da8", "indicator--8bf0d1cc-ce7f-4ba1-8b2a-45d2e1817360", "indicator--09239924-adb8-4a30-b4ad-25528cbdaeb2", "indicator--c70a0513-2a4e-4b90-a19f-920c2507fe1b", "indicator--34069a54-21f1-45c9-b4a5-fd44e66dccba", "indicator--fc073473-97e9-4ffb-82f9-3651e0673ec0", "indicator--1172e399-e10d-4a1c-a3ee-ca0cffdc7def", "indicator--83ebcdd9-b266-48cb-995e-7c6c7503cec8", "indicator--8f42742e-dfa5-4e65-a04f-562801fa0eae", "indicator--ef3e4234-6a69-4278-b475-528d1cdae2d9", "indicator--5e0188db-f8b6-4c3a-9c4a-c0b062ab4ceb", "indicator--eb15cadf-4fb7-4c3e-9333-79f42b7f8623", "indicator--df8e548c-11c4-45bb-9d8f-f4a47850eea9", "indicator--fe95aa89-3ff1-4adc-a350-adef7c1da559", "indicator--4519ff7f-e5e6-463b-8a82-5615e62d87d0", "indicator--ca008686-0fd8-4da3-8a2f-ea1fa6cb33fc", "indicator--f1f041c4-923f-45e7-826d-fe8203d7bf07", "indicator--743d7546-241a-4983-8ae1-8bfa6bc3a329", "indicator--afbcc7d3-17f0-4e90-9897-f25b7d1f20ed", "indicator--c3792f72-8a23-4805-8877-93e8ccaa9078", "indicator--5eb4feb2-eb19-40b1-94fb-5b872ff24059", "indicator--65938267-84a8-44f9-93ab-f4abeaeee10a", "indicator--bb9bd821-3d0e-40d2-8d49-40117fb65b18", "indicator--7de02224-8b19-494d-8098-c33500306871", "indicator--6c85c751-5716-4d64-8c83-bc6d03d23ae3", "indicator--810bf7a0-e0cf-435f-92a4-769cf75966be", "indicator--dfe72d76-13ae-4c96-9bf5-98a20affa797", "indicator--9b5ec268-3d67-43d8-8f92-1fc9262ec4c5", "indicator--9c035dc7-6d05-4816-9a3d-8d626c30cf76", "indicator--3714627e-9ac2-482d-89ff-58a8423ff4ce", "indicator--b3e3410f-f74f-4d26-a8e5-21c24d82f820", "indicator--c31d8fc9-be52-4dd7-8e49-1c39f0c22e93", "indicator--e900ffe9-8eb1-4fc6-9ba5-6afa32ff64dc", "indicator--c89e469b-f753-4651-8669-6e9e5666b8a2", "indicator--f668dcad-bdc0-4360-9d3e-0d058e2036aa", "indicator--d23ab278-c780-41b4-9703-00b25ebb3c18", "indicator--a0097372-055c-45ec-a0f4-542bf7aebd32", "indicator--211de21f-b942-4c6b-9091-10c276de5ccb", "indicator--63ff4801-a840-4a6a-9336-ffc1795215aa", "indicator--c8f94a7e-769a-4ef1-a435-11f3274503dd", "indicator--fc0472db-7797-4e08-9e3c-7705f778df5d", "indicator--ff98a5f8-3fb9-4da7-bfdf-4e3968d47c1d", "indicator--4889ee3e-bc19-446d-88dd-3e6fc43329a5", "indicator--665524e3-2bcf-49fe-b768-fb888921efbc", "indicator--16139237-f301-4f6d-8f21-574de3c2a334", "indicator--f3d7fc77-9bd8-49a4-b957-8644f8a9ec10", "indicator--b7a6768d-5250-4603-9ebf-2f8bc1aeab97", "indicator--73f72cd8-29e6-44b0-96c3-1a705f2e3c20", "indicator--5ad269ed-1f18-4fbd-abe3-ff68255c2dc7", "indicator--53d03f83-7bf9-4f78-9e47-7e8137885086", "indicator--33cf2491-c95c-4219-909d-83b9068686a5", "indicator--dad9964e-a046-4ddb-8dcc-8453d4b53af6", "indicator--701a3c7a-51c6-42b5-bcec-2e83102b7c31", "indicator--be480bb6-e922-4ae9-9b45-64d8995c75e5", "indicator--dacfa561-5fa0-47cd-8db9-ba633474fd42", "indicator--b6adaee7-72f1-4a21-8be5-cf41d284c629", "indicator--f05a4a67-9833-45a3-8aac-eed4bb10c716", "indicator--199ef7f8-0156-4abe-932a-17f4dc849629", "indicator--db1def95-1868-477b-abe7-527c0034ac6e", "indicator--95851baf-7f75-4221-b3e8-accf9226eed4", "indicator--c3594aa8-1462-4ac8-9345-09bf2e2577d1", "indicator--cd359ed2-2879-4b63-8375-39468f40dda8", "indicator--bf2363c1-3c35-49b0-833c-84a40bb9ef9a", "indicator--c901a1ee-f8f5-4249-9523-176631fb29f9", "indicator--b7c330d0-ebae-49a6-b127-37cede6cf67f", "indicator--1d3312bf-36ed-40d6-9d33-68213c3d0b3c", "indicator--fc252638-b57f-4f9a-9c65-d6712b6ff25c", "indicator--3fcd615b-b434-4548-af28-a22acf07ec1f", "indicator--2fd6241b-9019-4c54-8a01-13230157af7f", "indicator--d1ab210a-829d-437e-aa10-590f880bb6d8", "indicator--e3493d5a-9847-4cee-96da-fb9cb27577d3", "indicator--6335da40-5adb-4245-8438-887a45d7ab22", "indicator--0e9da41c-2ef5-4ecc-baa0-e0f1edb952a3", "indicator--78815221-2ede-4cf9-9a8a-ff9294f7e380", "indicator--5759e7bb-33f4-4105-b33b-8b27c9c6d793", "indicator--6e2c4512-c735-4c09-a140-1fef5db994a1", "indicator--2a4ff638-b917-4e70-bfa9-c6fefe8fd098", "indicator--4ca6b37e-0d3f-4d60-90fc-3a5900d9ee65", "indicator--2817c591-eaa9-4cc0-bc08-a6fa6a001a08", "indicator--83b65b8a-6268-422b-b4ec-dbe884d50ce3", "indicator--4ddf6984-1245-4af8-a3f3-5ac3dff8ed30", "indicator--701f7ae9-5a98-4eba-988c-d5d851846576", "indicator--3a7ae64b-d473-436b-be84-b795b8bab1b1", "indicator--d799dedd-a515-43b6-883f-4cb6b8fa09d9", "indicator--2159146f-e616-4106-868b-104be4fa1eb0", "indicator--babd2b89-12f6-4bf0-82a9-2fa7116ab48c", "indicator--ff38e6bc-8aca-4b5d-a906-cdce118f76bd", "indicator--2f44f925-8079-4923-a07b-c2af4d4ac578", "indicator--ebb8ee1a-2525-45ee-876d-ef23251dea9f", "indicator--c5eee5fa-1684-4b3e-a5d7-712b255acd2c", "indicator--8b2ffe4e-5c66-4a2d-82bd-0f479153234e", "indicator--28ebe3f7-03bf-45b5-99a2-2fe7db04e96e", "indicator--e69cc73c-bec5-47c4-9453-72d338e98328", "indicator--533a2bed-f328-4b45-878e-1216e9aa63ff", "indicator--8e62ea32-d8d9-4a4d-ab98-dbccd933d336", "indicator--6a91e7e7-ee66-4b56-83dc-09e87a10b99e", "indicator--17d0e53c-8107-470d-82a9-6e07a178b238", "indicator--29a223f0-e2f5-4219-b7be-e5e5da452c01", "indicator--1a666ac6-1eaa-4c3e-ac36-82a53e19876e", "indicator--5507a0bd-13ca-4e9b-9ce5-08cc69b008d5", "indicator--bf132e50-2003-453f-ba85-c0a21049b008", "indicator--beda11ea-f81a-4c10-8b05-08a0140fdf7f", "indicator--82f184ec-200b-4080-a98c-06b5866af138", "indicator--9adfebd9-ea79-4053-8607-99592bd69664", "indicator--c3ef2ece-3719-4dc0-81a5-0070eb7700d7", "indicator--a27ea054-5673-425c-8456-f0490948fabc", "indicator--107eeae5-c6fb-44e1-8ee6-f25e95d0b0c9", "indicator--9a998845-cb34-4b07-833d-8cd95f71698f", "indicator--2df0a5b3-0583-4e87-b047-8b3b2e66fcc6", "indicator--88ebfe2a-c36f-4d57-bf28-363b1df3e650", "indicator--a39ea914-436c-4c3a-bdc8-3e8c5300f545", "indicator--fbae7ec3-e075-44fb-89dd-07fc1432dd3a", "indicator--eb1c1678-df77-4282-bae6-6a6b7d64ae11", "indicator--553e199c-be57-4230-81df-111c6c55be3a", "indicator--1d118bd4-0e71-4948-98be-14bad04b77fc", "indicator--30dc8dc3-6aa2-40f5-926f-cabf8f989ccf", "indicator--3bc206c2-903f-42c3-bef0-04197d0209bf", "indicator--de976f57-13b6-4abe-9f18-779de85ece2c", "indicator--b7b2386e-9a71-4b8b-974b-0079d65fd86a", "indicator--854f796c-f759-43cf-8c9a-c207ab406c8d", "indicator--fbcac2a4-2edf-456e-8277-82d6409f4a14", "indicator--1f59af24-27b2-4d7b-a207-8389b76afbbf", "indicator--008e18e5-719b-4d69-927e-548f477ef700", "indicator--cd6877a2-0ab7-44c5-a532-53d8cfc7065c", "indicator--fcc7e9b8-ffdc-4da3-a808-b18922ca38bc", "indicator--bb7d8785-fe0a-41ba-8447-1f24cff35b51", "indicator--02ec82a4-6ac8-401d-a202-32280d640080", "indicator--779c18ca-5a86-47be-9dae-85b4f98593c2", "indicator--30db9a42-d4b2-41ec-ad61-adfd8dcecd41", "indicator--fde9e3e7-4f33-47a5-921f-da1e8e0c4ffa", "indicator--7a9519d0-6e54-40a9-8e0e-ba73c959613a", "indicator--175655cc-3ac5-4da2-acd9-8d7479d8dd79", "indicator--b9a345df-594f-4489-a96c-492715d1cbc2", "indicator--c367f53a-52fa-458c-b920-c4878cf786c3", "indicator--d5464473-fd84-4c9e-ad0c-d0b8ad95d7e2", "indicator--516f8edf-b033-4d04-9e09-62a5eccbdd24", "indicator--d1a03188-b0da-414e-85e3-a6f748c1affe", "indicator--1284929a-3755-4a9b-846a-1f4bd8502fe3", "indicator--496a9e05-0635-49c2-b700-43b531c82451", "indicator--e8dd9904-de99-43a2-8313-1fca16d6031e", "indicator--61b00de4-7f43-4d51-9199-bce4acb8851b", "indicator--9a480027-561c-4340-88e4-f93c5a9368cb", "indicator--d6d6e747-c128-4c72-8227-04df35954f81", "indicator--a0bc5fcb-efcd-4518-8fa0-5468fe41f9d1", "indicator--eb8c999f-3fd3-46a1-b30a-8db7296ca86e", "indicator--c82d425e-59b5-4c32-a12d-c41771614023", "indicator--4e8aa165-c64d-4382-9cd6-6a9e5bed271e", "indicator--157e01d3-86ed-4396-ba0c-05ed926b1050", "indicator--9d517d83-6908-40a1-984e-6e140b765896", "indicator--536a6a88-d3cb-4694-ac5d-da9a3da37279", "indicator--09cb3d0c-e9cf-4dd0-b157-9c428a847160", "indicator--ad792103-c274-4a6b-957d-b170bf66afe5", "indicator--cfd8c55f-78d8-4bcd-9dd3-ef65f48eed37", "indicator--583daa14-39cc-4e7e-b1f4-3cd113b43581", "indicator--87250fe9-3c10-45a4-b6cf-cae4ec8b0815", "indicator--94415dc3-b52f-4b72-83e2-47b9e2daa237", "indicator--38603469-01ab-48fa-aeeb-1c57eb3e5f56", "indicator--bb52369a-90a7-471d-a6c2-58e3bc822769", "indicator--5d408d81-64ad-4cc2-a885-06a90b1f13e0", "indicator--fd42fb59-525e-4e42-b23b-61f7a915be76", "indicator--ac87e9d7-c681-47af-ae60-7c817040e2cc", "indicator--4322255c-5f16-4037-8b56-37e12564a45c", "indicator--d12616a0-e1ae-4f79-823f-d2b27e5df8f7", "indicator--3f2924fe-ea25-4b37-94df-8b8bac8e51a8", "indicator--3d07a7e4-edc1-4973-90a6-a1557d94f212", "indicator--0626d1b4-8032-417e-9a0b-5097bb33b76d", "indicator--9765b796-0eac-4a4c-a86c-9ef6e0ff56eb", "indicator--399f9664-7e13-4fba-bfd6-ee155ccd89bc", "indicator--c86abd05-7bd1-4588-ab8d-84edb9036e12", "indicator--c65057c6-f6a3-4eac-9940-2248eb0b7852", "indicator--bc40af27-d3a5-4180-a59b-8e05971f5b40", "indicator--dda509de-07bd-498b-a251-3e1b3d4d0857", "indicator--9133e77d-6440-474b-9a84-767b6bc323b1", "indicator--3f8a7db8-954f-4263-ad87-0d25c8986818", "indicator--7169f9a8-c1c8-46eb-be01-bee810cb8b0a", "indicator--ecd283e5-1260-4f79-a2e8-08a787f09291", "indicator--92191710-83ad-4a4e-92f2-8be387966ff0", "indicator--b09d045b-197f-4d80-88b2-6768aeb7ff4b", "indicator--18eed7b8-b3b2-4278-a332-0ce2e5955fb7", "indicator--bfd39951-6fdb-4379-84b1-d31017c4694c", "indicator--d2a19054-c06f-47a1-a985-2d85c5edff45", "indicator--1f76fad8-7c2c-4a1e-9c0a-5fec3250850c", "indicator--24c1c9ba-0969-4815-8b02-198b72df619f", "indicator--9f09626f-2e76-420e-8b01-3e72f9ce48bc", "indicator--00e17bc4-c251-4da3-8078-b0a7374b2d0a", "indicator--04c03dc7-882d-40bc-b4c3-853e04427813", "indicator--ad6838b8-705a-4e66-87db-5d5f2cb44f44", "indicator--49a7ed04-758c-4359-820e-3ed4554a2e48", "indicator--61d319e0-83a2-4435-8436-4549d4051ab6", "indicator--b49ff14d-db38-47c3-ab68-f744047f979e", "indicator--2c68ce20-bd43-412a-a859-89fd1543f9aa", "indicator--6f05e95e-2007-4630-9625-746fd8f9f5ba", "indicator--28b2f300-a64f-451c-8874-d5652bea31b6", "indicator--a89118b5-94f8-4031-b933-67a66a0fed4d", "indicator--76e92cc3-2356-4552-a1c7-44450fa87c6f", "indicator--a5315b71-3cb6-4a09-bfe8-2572df182c5b", "indicator--1ce3f30f-d211-437e-b4ee-f010a21679e7", "indicator--e5628c33-8e7c-418c-a061-b4191ea3a9b7", "indicator--a4693195-5420-4fcb-b7ff-d4da780367a6", "indicator--e4a7ebf9-23a0-4e2d-9d36-ed671f3c848c", "indicator--c90c9ea8-4dcf-4248-896f-eb80aadc5b82", "indicator--786352d2-1f6e-4722-98e4-5ce16ff87c58", "indicator--461cdf90-21e8-4401-99cb-5d66df5efd91", "indicator--9d017fda-c4d1-4cb7-8386-9562900a64fa", "indicator--0cd7752f-5815-410e-8412-cb31c38f7d24", "indicator--99e63635-0c06-4cb3-8d1d-fbc754fd7aa2", "indicator--c47fb4ab-563c-43b4-808c-2df702e3974f", "indicator--4514ddbc-49c2-4361-8f13-95d6fba15cc2", "indicator--32ba2eb7-7dc2-4499-a36e-ae73587d8d7f", "indicator--dda3781c-09d7-4265-9af5-bbf9beeccddb", "indicator--5a2aefdb-4c2a-4947-b8ac-37f2476c76ab", "indicator--77ddeaeb-84b3-40a4-852f-9d27597c1610", "indicator--01bda275-186f-4782-b837-30a8b8f0313d", "indicator--43ead00e-b9d8-4c4f-9f13-8d6ef605246c", "indicator--5534080b-1093-4348-93da-3fbdbb58a4d1", "indicator--1eab4362-7fef-4d8a-81f7-c012d11a3b36", "indicator--7cff9c7a-ea72-4805-b480-68f19a819abc", "indicator--1719f4e9-d55a-4cb4-b5e6-a75496239338", "indicator--289449e4-a9ed-4e72-8805-af10e40499c6", "indicator--0e802556-3c28-4e54-a33c-261f0dc0c998", "indicator--ea63afe5-737a-4b26-9e08-1bbb0bc51234", "indicator--b587ef59-70a1-4855-9d10-0ba68b20f282", "indicator--2d2bb335-eb5d-4d7c-b2c9-8c861b75aff3", "indicator--962cde5e-9151-452c-b9bd-4d7bf5a8ffe7", "indicator--db70d23a-93e1-48c1-aab1-98161980ee4f", "indicator--e57e3d21-eb1b-44be-88c0-0cc0fffadd64", "indicator--0688682a-3c2e-48c4-84af-e322eef07431", "indicator--8fb1d736-9347-45c1-9daf-13ae6b37aabe", "indicator--89e0152a-8208-4c50-8ab7-61d91be9a2ca", "indicator--cd6d587c-904e-4d3c-b326-5c93914565bc", "indicator--63bc417a-745f-4b28-9ddb-0b67a2637c7b", "indicator--23fac85f-c84b-49c5-b9b2-a41b0f540f3c", "indicator--764a63f0-010d-469c-bd6a-1bec8501cba9", "indicator--dcbae508-2730-483a-a5bb-96bb7e7434ec", "indicator--6c1e3ec5-589c-4f78-9591-b9ca0d24bdee", "indicator--fb8e3dda-e2a9-4962-913a-a17b1fe4597a", "indicator--a65a80ff-6df5-4b43-b8d2-891e40463af6", "indicator--b4737e70-f9ce-42d9-8c54-259c353c7866", "indicator--3b12b562-8266-4c9b-ba50-2aa54c3d2960", "indicator--b17404a7-3e8e-4864-b226-6fe791737df7", "indicator--b77a23a0-9f53-4cec-9e61-3ce8f19498c1", "indicator--f0361fde-3229-42f0-95a0-e882460fe72e", "indicator--2c250c33-568d-43e7-9e82-f8f0b6580a70", "indicator--005e51c4-da5c-4248-b34b-472645936905", "indicator--4635069a-f9a5-43e0-94f6-840f2671eea1", "indicator--05cd70ff-95a6-404d-aaf7-7992562929a8", "indicator--a6c82263-007f-41ec-87e0-850a780fb01e", "indicator--73a904a5-8e34-4b6f-8738-6d32335e1234", "indicator--2f3a88e8-1932-4bc2-8a6f-7a660e2ccd90", "indicator--4fd80e92-d0a3-47f6-991d-54e94040599e", "indicator--925af894-8c28-4858-b71f-de6c1415f420", "indicator--eb07e63b-fcaa-4352-93ca-0929a7e55cab", "indicator--25a03676-6c37-4459-b790-e8cbac86da30", "indicator--650c0259-8cdf-4a4b-92aa-de328502bf46", "indicator--cf2cc286-ff09-4d48-a111-1ef06151c172", "indicator--e2fdba7f-f587-4fa7-b70c-8c850257d383", "indicator--b5350ec4-9e8d-4856-84c7-7f2ad5bd5669", "indicator--839de70b-e6f0-4386-ba6a-b649985ea77e", "indicator--bc3f86b4-4abe-479c-b1c7-5e2bc9dba589", "indicator--78dc5165-b8b0-41bc-b9d1-0006316f753c", "indicator--c4cafeea-519e-4b72-8daa-e68188a00269", "indicator--4b898f64-97f6-44c5-84bb-42fa6c7ab628", "indicator--d4b0a17a-565b-4392-8b42-9ae1d864a537", "indicator--11bbf285-59f4-4012-91f1-60eb9ecec1e3", "indicator--7ad5f602-6d80-4faf-9d45-8062a1dd9a32", "indicator--68f01948-5b7e-409a-8db7-89f66a16b0ce", "indicator--f0a68d0d-e2c1-4005-a589-393359a57cfa", "indicator--8d66b017-3148-4e04-92fa-a0b68ffd35b8", "indicator--4b66925e-fb4c-4e70-a2ba-559e6b39e6da", "indicator--a59c4169-cfa9-48b7-b4e8-ee25a1caae21", "indicator--2f2dee3f-d588-44e6-9abf-d0804e9e305a", "indicator--515ed15f-d929-43a9-971b-2410c746344e", "indicator--3981c5e2-39ef-4d1f-9374-9023af41c690", "indicator--d7c194ae-b84f-430e-9eae-833f94cdd59a", "indicator--17feeeac-869a-452b-9a8f-9f940a855499", "indicator--f58ec844-114a-467b-925a-88d8a5d23654", "indicator--20e33dc0-7a36-48cf-90fd-f3756f961133", "indicator--88f85e14-aa62-4c37-9997-51e2903cc8a7", "indicator--6d59274b-fa89-4a48-ab5c-b230ba5dd594", "indicator--ba1cbcff-d8de-4f71-b30c-23448ebdbd90", "indicator--55624ccd-e02b-4db5-9b49-2980415fa6a4", "indicator--2d97878e-3a4c-44b1-aa9d-bfccaa668bab", "indicator--cf78d277-d346-4800-9578-eb59cb8184cd", "indicator--caff4d72-9de2-4a5d-a259-23e8b8d103cf", "indicator--10c74bde-0fb1-49f0-aa35-97d1bc1ab544", "indicator--26183c7c-3936-4cc2-84ad-f32fdedcdcdb", "indicator--7f4f542c-ec44-4136-9d07-6477db37f16b", "indicator--36bed091-15de-425b-b61b-69813f9c858b", "indicator--2c51efd1-04f5-4513-b4c8-7d5b66ddaa51", "indicator--d956969a-df6a-4d00-89da-4bb3bddb128a", "indicator--8e28bc98-7070-4819-92ab-dcca3a279a02", "indicator--c45609d0-356e-4538-8e24-53a1e7ee2b9d", "indicator--c660192e-3b9f-4bc5-a071-ec7f003e8550", "indicator--80c8a39d-63cf-40fc-b47b-492c784fc8ab", "indicator--1004ab63-a4e5-4b1b-83cb-f261e93547d7", "indicator--e1ee5232-f944-4e50-95d8-efbe0e706196", "indicator--31059d6b-073c-40f3-b7aa-2cb9bcb1f47b", "indicator--9c1ceae4-b448-4463-a7e0-e83870589615", "indicator--fe190bcd-7405-4361-bea9-2d8dd95426e2", "indicator--f713622a-e4d3-46f0-a63d-6da6473dd232", "indicator--35a07450-bf80-4fbb-8391-7884de4c6669", "indicator--6e0a054e-d5ad-4510-8bdf-04cf8b111c93", "indicator--4428dda5-9917-4513-8852-edab88baf94c", "indicator--755f0026-d0cf-459f-a894-64d3048d20e7", "indicator--0389ae37-4c15-4c16-9869-b5ae98959bc1", "indicator--6495f75d-da58-4942-a1e2-1a6b0b45127d", "indicator--6ca9a52b-f924-4063-a80a-bbd196af76a3", "indicator--af68cc75-db34-4c48-a7e9-3a1df96a3f5c", "indicator--f6b0b90e-c9b7-4df8-841c-aa6e47d20842", "indicator--74523ea1-c02c-4db1-b00d-8fd544bf2006", "indicator--89cc2ba9-feba-42a9-a0f4-913ef50bbf76", "indicator--5ed32eff-74da-4472-afb9-99a7d5f9cba2", "indicator--3c57d5bc-2cc1-4148-9c55-68544b751520", "indicator--cfeb22ca-849f-4c3e-ba48-e981aa7008aa", "indicator--faf462cf-bb73-4494-b939-af2b7991d8d4", "indicator--d1ab2b6e-295d-4219-a5e2-4bf928fd4720", "indicator--3241e9be-b469-41db-b8e7-2729fe03215e", "indicator--9e0fbb19-f158-4b43-8399-30ec09f5c2ca", "indicator--33d96883-0f3e-4f2d-9bbd-677d386c5627", "indicator--70297a32-b2ee-4873-b3b8-f7b5fb7105c2", "indicator--9f3cd088-fdba-4948-8b87-1159c44dbd3f", "indicator--072d5d53-8826-4286-bc3d-0c3ed395e47b", "indicator--ca708cff-d873-4bb8-bc18-d8446570139e", "indicator--7bed009a-670c-4e4e-8c3e-8e6352af855d", "indicator--32d8852b-f69e-4243-870c-da447a06e6fe", "indicator--484a368b-a5c7-49dd-a48c-6921ce17fe26", "indicator--4f24b21f-3972-430f-8dce-9bf139aec2b4", "indicator--42ad0f6f-caf7-4c95-8b2f-3b092939101e", "indicator--cd677d0f-1d07-48ce-9dc5-0a7b41186bf0", "indicator--dd05a7b6-d4ce-4661-a4ca-0293e083a6bd", "indicator--faf7da83-e59b-4de6-b5e3-83a66ad7e9e1", "indicator--6e98f226-0252-4f5a-96ed-c8b7baed5d7d", "indicator--a0568fb7-d69a-4922-8ce8-7ba8ef780889", "indicator--9bfbe955-7d2b-4467-8a26-5d095c8e8284", "indicator--0ee72387-522d-495c-8b43-ac5414d4d7d7", "indicator--06f23d2f-79bf-4c28-9dd1-26c52c3e8bba", "indicator--75371b32-10a6-4c52-998e-34cc4fd26376", "indicator--54346fa5-d1bd-4b4d-b6ec-8e2f6fe6a1b7", "indicator--8b78c6a2-0a49-4b67-8432-ac2281a77fd5", "indicator--9952d884-1563-4f29-812e-9f98b3df248a", "indicator--99cf997b-f9a3-4e6f-8a1c-977ecae21223", "indicator--3e5976c5-56fb-49f9-ad8c-86f23544e4e4", "indicator--61add95e-2f5c-4900-95de-9f906e268579", "indicator--f624d673-fc80-48aa-a28a-88830573018f", "indicator--39520abf-d466-4518-9211-eebe495ab369", "indicator--21119cd3-d85a-4758-8b3f-674a3fd5902d", "indicator--c840cef0-76d7-42ce-8a84-b2712ca51eb2", "indicator--9e3aefcf-32fc-45ce-bb48-245dfc85fa2a", "indicator--4a3591f7-61d4-4275-8c57-77bffe3ad54a", "indicator--28564217-870c-42bd-a707-71ea710e2278", "indicator--418d0641-cc42-4eb9-aa57-2f506299a4f6", "indicator--34c5eb32-19fb-40be-9de2-e36b40799fcd", "indicator--0c3177cb-742c-44be-97cd-37619d6d909a", "indicator--e37237f2-56d0-4a63-a72f-9a5de149ae2c", "indicator--1ba0b7e5-0636-4592-bbac-5349e9b7399a", "indicator--848c7c1d-186d-43b2-8b87-7d23649bd634", "indicator--fa241d39-0a09-4dd7-9554-9f11b8165d4b", "indicator--6fdb0deb-7396-4390-a75b-9ed2f21baf9f", "indicator--6f0a6d7a-5c51-4050-a5d5-6611f6d79a8d", "indicator--4fd941e3-fd0d-4d56-9eea-930985a9df07", "indicator--1b879e92-30da-4c97-bff9-5c5d06b1e358", "indicator--739e735b-82ca-4fa1-a68e-ac72be8469a6", "indicator--6bb6627e-249f-479c-b422-944ba3d03df1", "indicator--7a4a8880-2e5a-464f-ae04-c50d6189992b", "indicator--c14d315b-1889-4a03-9305-6a912b9c0e42", "indicator--adc81e4d-54f6-4ca3-b853-c79e747dc34d", "indicator--06ecdfce-02cd-491a-ba84-faf38e03b88c", "indicator--86d9e74e-2de4-4015-a24a-daa30c8173c7", "indicator--c0f1d1b0-9ab3-4921-8f79-642c1127f948", "indicator--e44966b6-95e7-4fe8-8c27-0a8aff3f19b4", "indicator--cd4517fa-eb05-4a0b-be6e-e576a6c0ea6d", "indicator--abfb968d-b5fa-4c27-8e74-374d289f6738", "indicator--a2b450cf-314c-4714-b5aa-95a3eb07cf0d", "indicator--ee4b7462-1053-4fa1-bcb7-b101035bb338", "indicator--7fa5a8ca-493a-4afe-9fd3-04cfc8156a37", "indicator--3e41f824-a502-4cba-bfaa-c1bd95e96e39", "indicator--597daca8-d41e-4774-8984-d600ebe544fa", "indicator--8a1b96b2-60da-4e57-ae4d-0608b06a4662", "indicator--4ba7d17a-da7e-4213-a6a8-aa333998df51", "indicator--b0d7a39e-cb4f-4a02-9715-05b60729acc0", "indicator--890ac250-ee0a-42d3-b7db-098651d6dabf", "indicator--46993bd8-e63a-4f57-b2d5-1a481f634f58", "indicator--70dd8580-4c12-4748-b15e-5b0abd4d512a", "indicator--8b373220-fb56-4b79-a68e-d8bce072dea7", "indicator--67b3ef77-0852-4a13-aec2-4913b9ed71fe", "indicator--a8b0690a-45bc-446e-a8c6-76e998fa129b", "indicator--a859045f-f483-4154-afff-9640b9b9be2e", "indicator--1d3290af-92c5-4ca2-b406-452276d60024", "indicator--c20ea101-92b9-413a-a5d1-bc07cfddb925", "indicator--e3d729d7-729d-412d-8489-57b4533e6458", "indicator--555b51a8-3a1c-4149-beeb-07f1c625fb12", "indicator--ff1d47dc-3ae8-41a2-a1a4-700d01d957ea", "indicator--f7c25701-2df1-4f87-81ea-49136ea3f782", "indicator--d21e0533-3d9c-44d4-9868-6851758eb504", "indicator--5b206ef7-7fe4-4661-84a2-6cd5265da589", "indicator--f3521c2e-49e5-446b-ab50-adfd06d23a62", "indicator--405c71a4-718c-4147-a7b4-17d8bcbd3f74", "indicator--f86b5d9f-5246-4664-9b67-e7b0ecfadb13", "indicator--6d79d04e-56ee-4eb2-b3a8-9f03a5460a86", "indicator--3c9dc195-17f8-4a14-87b8-02a25b81a160", "indicator--7a57e788-efcb-4cac-a391-5242dd465c3e", "indicator--37141a51-6d1f-4f42-afe9-df4f0f4b4eb6", "indicator--8c021f84-0a49-4919-b89f-bf89eb4d54b1", "indicator--e7636666-5d3c-4fc4-a49a-fcafc3425cf8", "indicator--2e6d7a7f-c9a2-4c23-8b3f-619c9bad317d", "indicator--4df6b458-1d28-434a-8237-8cda6141aace", "indicator--65d650e5-6766-4a4f-a4ac-e6018df2ef5e", "indicator--58bf1ccd-2111-4caf-a445-17c061602b63", "indicator--5f2b0131-8658-494f-a1c7-a977296bae0f", "indicator--e0f22a75-6df3-4111-9eab-828c75746846", "indicator--59aa2c2e-d9d3-4c30-a5a5-f31165217fc2", "indicator--4aef4a29-1070-446f-91e2-8d568df1e84c", "indicator--248f1ed1-ecf5-48c9-9e3f-dd6b551a9050", "indicator--81ce84f3-4cc9-42b1-9e6f-a406ad9d16a6", "indicator--9b20df73-20fe-4959-acff-5108be754b17", "indicator--bec7a852-62e0-4cb6-a8a8-fbe3c5efd58f", "indicator--c86f3275-1a49-4a6c-a1d6-2898b83393d0", "indicator--2d1e6f14-c49c-4c06-920a-ff7f0fc39a4d", "indicator--3062364a-2046-4ac1-b164-afc6788298fa", "indicator--6ef34091-1612-4b9d-82a2-b5a57dd0c9af", "indicator--b7ac9b94-01d7-4d98-9189-04062d065f0e", "indicator--28bca044-adc2-4725-8c1c-11813ee18220", "indicator--4ec57892-0e9e-48d1-bcb0-2bee3ebfe381", "indicator--7b07ff6b-c679-47ae-a14d-ba16dd5d028e", "indicator--2791de4a-f0d3-4bea-98e9-bb16866e23d5", "indicator--9f5f765f-26d8-4b9b-a52c-f80663afc657", "indicator--1f9b3bf0-65a6-4383-a6cb-d497ef1b4bc0", "indicator--e77d255b-a98e-480a-9dac-55f43238e03d", "indicator--744739f0-641e-4a9b-b75b-70ad84b2de0d", "indicator--77e171f8-6ee3-44b8-bead-cb6d62881bc0", "indicator--654cb5dd-5927-408c-9c58-bb939d0235da", "indicator--ed6967cb-ca29-4f34-8d14-f25da34ceb08", "indicator--492bc040-06d6-4661-9f85-09936d83cc89", "indicator--4bca0ec9-e043-4ff1-8005-e88f16014dbd", "indicator--593d5ad6-cbfe-4cf3-92cf-7e82f93493c4", "indicator--718d419b-82a6-40d2-9528-7579eaeb12f7", "indicator--4075524b-5df4-43ca-ac5c-6cd89d342043", "indicator--df32e507-86e3-4def-9bc5-93c8ad7b362f", "indicator--bca18750-4c0b-4db4-b0b2-88820e0712da", "indicator--cda6ea2a-fe45-44d0-909c-2e228fed7230", "indicator--3d402c59-b9c1-4c39-b452-5773b73b7a9a", "indicator--4833e729-12dd-48a3-8ddf-c2d5db6d18da", "indicator--7c58deec-1aea-4260-a1ae-4b731996289c", "indicator--f3a4a0f6-216a-4c44-aa90-fed480dceb89", "indicator--6658180b-1bb0-4550-ba4b-38de33c84e85", "indicator--a5f527a6-72dd-480b-ad8e-76e99df6111c", "indicator--9f52dac4-71ec-4466-a278-ebe2bf8f429b", "indicator--4b300484-957a-4446-8538-de87f30ee09c", "indicator--d841022d-2506-42ce-ba96-b4c0018d9326", "indicator--9c169fe1-9970-4efe-bbe3-beba72229bdb", "indicator--de5ff56c-982e-4930-9945-7782eb226dbe", "indicator--8fdb423d-3fd7-481c-a484-5155dfd14315", "indicator--d6da3dfc-eb7c-46f2-a1e9-10f69576a531", "indicator--500e5c4d-ec0e-4f52-bf8e-92f04190a8bb", "indicator--095b8893-4246-46a4-87b8-cbaceb45dbbf", "indicator--84f333a9-5adf-4d3d-9766-99f347578679", "indicator--00deef9d-0378-4e38-a001-4c2dd82a8a92", "indicator--25cb4e7e-9418-430d-b069-505e9fa31514", "indicator--9576d8c8-bdf0-4e15-8494-2c8d9afe44e2", "indicator--91522511-9ae8-46be-8565-bdf959c4968d", "indicator--494d2d70-05d0-429d-a7ca-e6c065908dcf", "indicator--0895feaa-163b-4303-8bb1-e144a6401260", "indicator--51a75848-bf7b-4776-84c5-446bb1472f87", "indicator--3c4faa9f-f326-44ef-a940-92770aec94b1", "indicator--cc79550a-09cc-498b-be3e-b65e030a0b9c", "indicator--c11a0f8c-2e40-4db3-917e-36013a5eb44d", "indicator--662d8b81-c56c-4c94-a25c-cf05b166f28d", "indicator--ff5e71bb-0378-4787-bd31-80549c1b3a3a", "indicator--896c8033-4a58-4c3e-a844-bcb7754cbb53", "indicator--42bb5e5e-efee-4cd5-a3ad-b7d27e3b2cfe", "indicator--6367af96-499d-4cdf-8745-71b751ede587", "indicator--c5faacd3-3ad8-4c75-9bdd-09556ed59988", "indicator--1e5db0b7-49c9-48f3-a035-7d2ff864c9c7", "indicator--483dbc80-ba76-4636-b5b9-ac5d8a2c3790", "indicator--169a98c5-b2c2-4725-9fa8-3f4a74c581eb", "indicator--fd5ca8c6-0dd6-4ed6-ba6f-d3a66de62c5d", "indicator--1b53d1cb-f2c4-415a-9ad0-568586ebbd7b", "indicator--5be2d1fe-eeeb-4b46-ae3c-a7934011c3d3", "indicator--2729238d-c19d-4437-b883-73f8b6949c6f", "indicator--0a13c62b-ad0a-49aa-93c4-6820580e387f", "indicator--a93415de-0cf4-44d8-8a94-0d9fc0585687", "indicator--2c88dfe0-10f2-4965-9b44-5606ea42c335", "indicator--1d870b41-5190-4827-812c-88d046303783", "indicator--647242a9-eab5-4580-94c4-e8ce0e0f6b19", "indicator--37cdbdac-a2e0-46e7-a547-4439bba39742", "indicator--03659cc4-fce7-4be4-981f-dfbd099b424c", "indicator--6fa1c46d-9819-4e1d-870c-b49e3004cf24", "indicator--6a1b7a48-9d54-4898-ac33-da8051274cfa", "indicator--955a3099-4982-485c-89e9-b1f3dd0da528", "indicator--17c6549f-987b-48a8-908c-a21a1caf07eb", "indicator--1c459236-bc2f-4a85-af09-7c8ed759c3ea", "indicator--7292365c-0841-4b49-a608-c3e4d09a8c6c", "indicator--46dbb26d-2bcb-4a9f-8afa-f03a8cf18178", "indicator--05fa49fe-6df4-44b2-a807-cfcfac0f3f8e", "indicator--1d118686-ea6a-463d-9608-268b99a42192", "indicator--41109461-89c6-4006-b267-e89afe139289", "indicator--d25efcd6-577a-4217-8e88-a9d963dcc721", "indicator--fae1ab1a-8266-4a6f-aa41-80f288762437", "indicator--8a6d7e26-02e6-4056-b2de-2a852df2b554", "indicator--5627ccae-177d-4dc6-9443-c94be0ced403", "indicator--80dec3cd-57d4-4140-8838-bc6daa88bac9", "indicator--5c07e57d-cbc1-4919-9cc3-43b1417a7bc7", "indicator--bb839977-5081-44d3-b089-d7bb8dfdf9f9", "indicator--af44c25c-fad6-431a-a91c-7944b9435e06", "indicator--d0fba574-176a-4421-91ce-580c60bd93da", "indicator--12425d93-74b5-457c-a87a-fa57fb5b30c4", "indicator--733a1f52-7604-4b74-b765-1cdb2cf88471", "indicator--da44bb4a-8460-4508-aa2d-a118526465ea", "indicator--5e685926-7ad3-4359-b0f0-061461736e47", "indicator--a76d47b9-b0ee-494b-b8fe-e635cd88a046", "indicator--43f66760-e3de-455a-b4f0-cba117182dc6", "indicator--9fe14be5-a1b7-4b08-8279-922a88c754ed", "indicator--5f32ab07-751c-4c83-b675-8f017811bcba", "indicator--1d00a291-3f19-4675-a762-2ef49c47d2a6", "indicator--b5ca9220-e0d7-46f6-9b86-b25ac459a611", "indicator--2c9c8d1d-7578-4aa3-a3af-fe578ef1f954", "indicator--e8b2942f-1469-4aed-a209-562e610ddf6d", "indicator--a42931b1-9b01-479b-b2ea-d2b100756dc1", "indicator--ea06258b-7f52-4e88-8673-37dc4af15afc", "indicator--973f120e-aafd-49f4-8182-9296b507be76", "indicator--e633d326-50d5-46ce-804c-2f2654c39043", "indicator--6099bfee-9d2f-43c7-aa1f-aaaf698b4978", "indicator--05a77d89-1be8-4841-bd16-2893649587aa", "indicator--b2e6dab7-6990-4fa0-9c10-b7c57a693075", "indicator--32ba6e4b-f61e-4ae3-ad15-fde7b029a96c", "indicator--16c874f2-d69f-401b-8321-5d3bafc00b16", "indicator--4b5c5da0-227a-4124-be89-2a72b7698ee8", "indicator--5e53ad92-e99b-4ded-9426-a6107950485f", "indicator--1802c1dc-c52b-4779-89fc-6aab18fed6de", "indicator--1d75191e-6445-4d86-8f07-0b2a1e901abe", "indicator--52c6d7a3-255f-4076-9498-09cf319fb995", "indicator--2ff812c3-1128-4677-b6f6-bace62779c64", "indicator--17576e9b-76d7-4fb4-a166-77fd3bbbf690", "indicator--98d69c51-fad7-4e61-981c-7902726664ae", "indicator--1c393a75-3a73-4bcf-bab1-925112b80a9b", "indicator--f3b7abb3-151b-4ab3-9c49-1ef5152610b0", "indicator--6214fdd4-05a3-4a1d-aab8-cc082df64a6a", "indicator--83d1db1a-498e-49dc-8483-78b30c3a3a6c", "indicator--0a988a4a-4f38-41cf-8a59-8f1739fd2544", "indicator--dc927065-da44-4b1b-b5d4-2d087cbfd5e5", "indicator--50f5df05-95f2-4676-b446-4980039eaeb3", "indicator--b06ca033-288a-4a4c-889f-e17f7f911fc2", "indicator--eae970b0-726f-4140-8755-04e98d2d7eec", "indicator--1310bfcc-ff60-4417-829f-52f69ce25784", "indicator--aa07b7d1-e8f6-448d-8eb7-db2f36bfb6fa", "indicator--81bbd6fc-3d6b-464a-a05f-2470cb3c48ec", "indicator--55aa8552-2d2e-4972-84a8-959308550059", "indicator--f291a65d-c682-4ba4-ad0d-34b78943420f", "indicator--1753be66-4c68-4ea5-8739-0c6577070917", "indicator--198ec4c8-afed-433a-a8b9-97987c570ed1", "indicator--ec32b542-3475-4ed9-9d44-bc5ba1cc879f", "indicator--b0c7b2c1-dc6e-4a31-bbb5-0ff1d4f4109a", "indicator--1927d0f0-995e-4133-8073-b8a13f6ce7fe", "indicator--ee67d5bf-8f17-4168-9ed7-aaeb112c1678", "indicator--29642a8b-8203-433f-89f2-ce2b47c9f075", "indicator--cd25a37c-1c9b-4423-b9b3-c7a4883d0418", "indicator--9ebc59df-673a-4be0-a230-e8eeee520226", "indicator--a55d80c5-cc99-4506-8f41-60cee2d87eb5", "indicator--50d590bd-d848-4520-a959-1ca3fa72e20e", "indicator--e6cc024a-6c34-4486-a17d-356fb2694096", "indicator--47b6e5c1-19bb-4414-81bc-f1d1d2f101d4", "indicator--8fa8e4b1-30cf-45b2-8ec2-96cd35ec1e5b", "indicator--e76713e6-5d7b-448f-a505-185b6bc2cbcd", "indicator--bbfe6e19-7a9b-4a07-8259-156af5eb1ab0", "indicator--52ce4454-df4b-43a8-8012-a3fabb42b350", "indicator--f78114b5-4113-4c54-a9bc-039eccd307f6", "indicator--35342884-20f3-4f13-9eb9-c10b0128181c", "indicator--547f6b5a-26f8-437b-a163-b95c41892fe8", "indicator--d25d4f5f-7de9-4312-82c9-f87a0b5ac750", "indicator--71b609a3-7e21-4cf8-85cd-62bee778a761", "indicator--d3f23ab8-e9c5-4e17-ad7f-6a4f6c1bbd20", "indicator--29b4515a-dc2a-4556-b71e-47d70224a169", "indicator--31f88526-38fb-4110-849c-45f0cb56a0ad", "indicator--44d6f711-aa0c-4957-ad89-5ebde8c00747", "indicator--d8157c9f-c1c3-411d-bd5b-d33d28060487", "indicator--b6d2a52c-0a36-403a-9f7a-02fa189f5167", "indicator--6d933e24-319a-453d-ba76-41683d733122", "indicator--971ca60e-0987-40a6-983a-f238c94b0a58", "indicator--d9a94661-3891-4e9f-8d16-e296188bfd5c", "indicator--1d6b70f2-d98c-4d0e-846a-2c46c180a52c", "indicator--18a90dcd-e43f-40d1-b2f7-1fe73e08e2dd", "indicator--1a2a184e-7fc7-421d-b8b7-882bb42660c8", "indicator--a5147a43-55cc-44a4-9a83-f016b9c6df59", "indicator--567f8962-5217-42b9-9361-42a97959b2a8", "indicator--ddd50aeb-863f-4d85-8761-30a8cb98d6b0", "indicator--bdb10969-5da2-468b-a4a4-815a07ff2e2b", "indicator--56cd3d63-0873-49f6-adf8-cda3e3bd3349", "indicator--8635ddec-423d-4360-9006-2868799b67fb", "indicator--e04e553b-6afa-48c9-b9b4-345f536df765", "indicator--e500946a-551d-4656-89d7-c5cc5b9cd0e0", "indicator--fb0298eb-0827-42df-b3cc-af29babb7726", "indicator--d1daa1b4-e004-4702-8117-6d9c4e93397b", "indicator--e296c442-9a34-4b62-809d-7e4ca22572e9", "indicator--2e5606c3-5c77-487f-84f2-803fd6c9e062", "indicator--6f8392df-71e4-4ffa-b0f4-592790929f5b", "indicator--d962364c-33e8-4e59-b8cc-edb9cb3794e6", "indicator--d1f495f1-5391-4bf6-8527-36b2c9d701eb", "indicator--27010230-aa6d-480e-8ab1-126a1cca7841", "indicator--bf85be75-2c9a-4600-8352-0852f807ba59", "indicator--9720a4c2-3bb4-411e-a8eb-dc667128c016", "indicator--be3a5eca-9a53-434d-9482-0fabedc03ee2", "indicator--f450b476-06dc-47e5-ba41-ca331e78c830", "indicator--19503666-64b6-4921-8ab2-617fabf6828d", "indicator--b4ed79ab-645f-42e8-b5d1-54af76c5597f", "indicator--343e36d4-1f87-432f-8e23-0b32fe9b933d", "indicator--3bd3d3a8-ce69-497b-b456-9784665b5a9e", "indicator--302d2cbc-06bd-4b5f-b822-5a635f70ebd7", "indicator--0f4603cc-8208-46ef-ae3b-a86b8ac6bc58", "indicator--0b8e4667-6515-451f-bbe7-4124be401191", "indicator--a00df825-c9dd-4e7a-8332-70a00eb76e99", "indicator--94e53107-9247-4605-a0bf-b738c8507bc5", "indicator--af9d9b2d-b253-4f60-a1bd-19c12805c4e9", "indicator--04b52a63-38ce-4ae8-9af0-90c52a952d14", "indicator--cafe3821-fab6-4296-aa88-e03b67d7f9e6", "indicator--5c2d6d02-93aa-4bc5-829e-6c9d45096abb", "indicator--8b2993c7-12c6-4e51-a85e-eb117dbf63a5", "indicator--b4863f09-90af-4d3d-a4ea-d5771291806c", "indicator--14b0310d-aa04-4f27-9038-6821e3a8d83f", "indicator--9f15e68a-98a8-49ee-9f5e-6b0621027140", "indicator--4a2ea325-1031-4a24-a017-4a110db15b0a", "indicator--7ac0c84b-0560-4254-9f8c-7bbcf8f3cb69", "indicator--b1c2c840-609d-4c12-819c-1baf0e2a5aba", "indicator--0bf8a130-b61d-498a-9454-6a2b17219026", "indicator--8e4014cf-2f0b-4f91-b129-fea366464e5e", "indicator--547574d8-4664-43e8-8b10-d7b811b8e102", "indicator--c28089b4-daac-44c3-8f75-3760fdab8c25", "indicator--c7e4c4c0-a21c-4343-86a2-0422335ed823", "indicator--bcead422-052d-4404-8e5b-82dc95528844", "indicator--61d0b300-728c-4831-bef5-dad768664c80", "indicator--e15232f3-e4df-451f-a973-395a475ac238", "indicator--8c5b985a-3d55-4ae9-978e-207a24307ef5", "indicator--96993773-9527-46d7-9d1e-3118081bf1b1", "indicator--cb31b583-b180-457d-8308-91ecc4e8b18e", "indicator--c77b3a58-e45f-47da-9466-a4b0253dce54", "indicator--1f7a2b1f-7994-4490-83c5-b1dc5e3d2b15", "indicator--dcdbeec0-9cfb-40db-8694-5bdf3d80bcf2", "indicator--8b718b73-742f-458d-93d6-fce9217d121d", "indicator--4d081171-4fe7-4a02-96ea-438ea8d0d84e", "indicator--216ea31d-05dd-4856-a266-9ccb0db146d9", "indicator--3de3b05a-7ac3-4398-ae21-ad83fccb4390", "indicator--76ed7323-4376-4278-aa5e-18adb7769290", "indicator--26595e62-0298-404d-a94e-3ba95df47d4b", "indicator--4c73f199-d9f5-4493-84b5-9e46c61e10d6", "indicator--84ed9888-2921-4e40-ac79-7b49be2fce8b", "indicator--c532946b-3585-4818-8874-ea148cbcbaab", "indicator--75d87f95-c367-45b3-90ea-4fe469f6c36c", "indicator--9fa0c710-6649-40b5-b348-d8d32413ae67", "indicator--b740aedd-32d0-4350-9551-c4675fc3a0bb", "indicator--2f16ff2a-3c28-4e17-8ca5-2fa74cc9673d", "indicator--c7c046df-1231-4262-a7d4-399107696d0c", "indicator--2cd68f37-b605-47f3-8c85-5bd6928662db", "indicator--12ef8236-3398-4d7d-b251-8b5649e12513", "indicator--2f359d2b-84b7-49bf-b34f-eef1a52e1e2b", "indicator--4deeb601-3941-4c76-a78d-8152fd5a0423", "indicator--84ece812-f396-4015-af21-0be13ab4381c", "indicator--241c5e4d-76eb-4eee-b6d4-02bce99fe177", "indicator--562b948d-3368-4564-965e-07cda1f8124c", "indicator--34d513cb-15f6-4b5d-9660-4eb8bdab979a", "indicator--a9bec519-446f-4df7-af48-18febdb45133", "indicator--81379f2e-d4c9-4ea5-a02f-84aa00f64ccf", "indicator--c769f928-759c-46e5-ad08-083d4c4052af", "indicator--c21ac530-6e84-4929-90fb-2597667aea71", "indicator--73d7017d-bded-40de-beff-333bb39a2046", "indicator--ed28842c-2f9e-429f-9121-9bcd2e276b0c", "indicator--f779dbf4-f98a-4d0d-99bf-21dc7ea933f0", "indicator--29250e2f-c066-4490-ba95-a62aa807458c", "indicator--2ddd0db7-e3eb-4f90-80e7-c5da19d5384a", "indicator--6ee56566-31fc-4b71-b0d4-a52ba86b19c2", "indicator--13fcb002-34b0-4968-ae98-25259cb8e961", "indicator--65b11b37-f446-49b4-9450-a70c7b1dca0e", "indicator--ee156418-26c9-4540-8e73-61653f7b1cf9", "indicator--5057e2fd-541b-43cd-833d-f4da1fbb2596", "indicator--ae7078e7-d35d-41e7-8e26-a799b5858de3", "indicator--5d1929ec-5312-45a2-84b5-497bae0408d2", "indicator--03a4e4e5-620b-4cbd-a48e-c4140f3ab4be", "indicator--fcab2a27-2b80-4b12-83c0-0ede4654de30", "indicator--f490d910-ee28-4fd4-a936-fd9850935451", "indicator--840e7e10-37c8-439f-a4d6-8d8d04b39c06", "indicator--14745024-2a10-4cb5-8963-ab9bdb8d1e5e", "indicator--00d260f5-a17c-437c-887c-b67a5fa56ee5", "indicator--d990d8b9-f7e3-4cf8-8b44-e1fa633c3b57", "indicator--4a9583be-dfff-4bd1-8f99-94503ce2bfe5", "indicator--4603aced-8fb5-4ae4-9e12-d40c9d7f9057", "indicator--9d18cc92-14fb-4aa7-84c5-ca728a2d37df", "indicator--87c4e576-f771-4c46-b5f2-6e6491b94451", "indicator--678a98e5-28f5-4840-979e-d1f6a5d30bae", "indicator--a4ccf822-3fe3-4108-8639-ebb46a740780", "indicator--3512598b-1123-4937-9d8f-d781f40659cb", "indicator--75d3456b-4000-4156-b5d9-b45b75533e96", "indicator--f8aab802-b53a-4d85-abd5-fe36f6704baf", "indicator--27c8af57-5efe-4f88-bd61-91e567ba30e0", "indicator--4d1113e7-728a-42c2-88ea-47edfd26bd26", "indicator--260cf6f9-8b55-4932-8ae9-649d86fe5849", "indicator--72e83ce5-3917-4d0b-96d5-9163bedda236", "indicator--1d6d85ef-749f-42b5-b28d-ef0951efffca", "indicator--d95c92fe-17be-41b5-9315-a59f02583bce", "indicator--d8181522-f55b-4f28-8df5-c6de57d8d1fb", "indicator--9d975fda-4379-4d12-9140-8f816de253bc", "indicator--f2531357-efe2-46e4-81fe-ae8d1d901841", "indicator--67af4b0d-bdec-4fed-8673-39fd82031dd7", "indicator--0ce62c2d-39c5-4598-bddf-e601b323c064", "indicator--22daec4f-cfe6-44d4-a2e1-85a33a2004ae", "indicator--6b4a29ab-0f45-4f3c-aad4-379db2401c35", "indicator--5d1cdad4-b021-43a8-be1a-a6358c1e8108", "indicator--60c2283c-3084-453d-a25a-b34122affc84", "indicator--13a4f6cb-725a-45ab-a095-c63311bf0ac5", "indicator--b82b93ef-7693-4a19-9eb1-512f8af85538", "indicator--3337d5a8-ebfd-4e05-bcc5-f26f3e3e9cba", "indicator--b4b9412d-0616-4abe-b8ae-5b3157924af0", "indicator--9ae1640a-3f56-4b6e-a163-c90cf28809d9", "indicator--5677d918-6c55-45a1-b327-efcaf9505b7e", "indicator--34512742-4fd0-46a9-adca-3caed6813b17", "indicator--6efa97a0-7bf3-4072-839a-834b142381a6", "indicator--797096fc-6c6a-48d9-bb30-2a9fb616e7d1", "indicator--0bd0fd64-f265-4a42-b563-7ca4db40e613", "indicator--280b5e8d-5568-42dc-bbb3-839ba3f771df", "indicator--10d7052c-837a-435e-9e74-9e5e1ab96592", "indicator--e1562873-8287-44f5-9fdb-52519852c655", "indicator--9692adcf-106b-44a5-8710-b4de5cf19874", "indicator--8ea16b7c-019a-4c15-b0f3-07491cbbdb56", "indicator--534dbf84-674c-4ff3-803a-8c15794a6e62", "indicator--8aa28a85-d09a-4352-8d30-571e8b0f96dc", "indicator--eb903742-b0e9-4436-bf86-d2d42e102df8", "indicator--fbbff6ee-3a0a-4b79-80a3-cfceaf48d378", "indicator--b5cf569c-2db2-4787-bd2f-1a9663f25676", "indicator--a3e87767-e138-4601-8d6d-fb75f3948ee8", "indicator--62ff2a29-fd43-436c-a362-9c85c559427f", "indicator--02769ab6-5282-45c7-800f-a527ea552c03", "indicator--c2caec35-0c91-4549-8f83-eaf3196033aa", "indicator--7824c601-0ff8-4a04-b15f-4486a766d9cd", "indicator--cbb62551-4b7b-4bc0-92fc-2d4cf9110c47", "indicator--4aeb8dd0-e0f2-4891-929c-485ea4fdfb80", "indicator--00e83dfe-dbd0-48b8-b4fc-813ec229c68f", "indicator--ac5c47f4-9232-41ed-91bb-3de682bd5c6f", "indicator--1ce955dd-aac2-46c1-9fc2-3f1ccff7cc52", "indicator--f5f421f2-9638-4fea-a9df-dc5e7cee29bd", "indicator--5a9fb640-2071-4a88-b1cb-a1d592479f85", "indicator--ce49f06b-1736-42a8-aa4a-46393630ccad", "indicator--bb02feac-aa8e-4165-be5b-f621ed6f4623", "indicator--5aae59c2-cfbd-4f5a-affa-ea638e5bb5b7", "indicator--340373df-46ef-4c11-82c3-5f7c97585eb5", "indicator--9a50ec1b-009e-4650-939a-33040e74516f", "indicator--daf25900-ce26-458d-8b99-0dc5ba7ef798", "indicator--26c92972-7ce0-4890-bcbe-fbf99ad89a0c", "indicator--4765a99b-0c7d-4a58-86ee-ecf336257953", "indicator--fd833a5f-6331-427d-8fcb-8e06ea66da40", "indicator--0a6d5bce-eaf5-475b-8faa-386cbcc18ef4", "indicator--1047b8c9-cb2c-45e9-aaf0-24772f23f0b7", "indicator--ffca8679-de59-43a3-86b2-7b8d83d35303", "indicator--7effbcbe-c833-4c57-9ef2-679b6a3d3076", "indicator--ebdf6128-66db-4bdb-80aa-11154a7a85ee", "indicator--1ae3d362-31d4-4425-adbe-9a03c6d291bc", "indicator--0c08f302-3591-4ec4-a903-664bcda9a911", "indicator--76531e63-3219-46e1-9076-751d406aa55d", "indicator--88af5c21-edb8-481b-a0b7-1e03e9b816a8", "indicator--a9005288-fa76-4617-8215-b7d91a1612c4", "indicator--c258b1f7-21c2-4017-9d6e-1382704c4069", "indicator--22c698dc-d4af-4a75-99b9-551c937449ef", "indicator--46ce97cb-db8e-4e0e-bcd4-a6e0b09e2528", "indicator--6242ee31-fefa-4239-83d1-c272b1ac4c94", "indicator--ea8a0e9a-666c-4d67-a1a4-0c1acfade69d", "indicator--95d7d3fe-8ad8-4b57-9bc5-2e615d146456", "indicator--962db4a2-5dca-437b-a16b-84292d8c5db2", "indicator--9406589e-c590-4374-b3e1-daf70c439021", "indicator--50e5d322-f9e8-41c4-8cab-e676d782d571", "indicator--d418b680-ffd2-4c4e-b742-b5f17a1ea405", "indicator--b254dd65-673c-44b8-95cc-75de6b306722", "indicator--0b0f8ea9-7f16-4adf-a8bc-f4c67e2eab42", "indicator--af46f980-c9f4-465b-8bc3-1df8d1a4f3c4", "indicator--a83f3e42-3f3f-4c99-9ac1-41952de3e919", "indicator--b8bc21be-ffa1-4f76-bd3b-f39d45147967", "indicator--f7d438e5-d8f6-4125-a0b5-17882c303190", "indicator--7c2d026a-8191-4b8b-a1f1-f57099233b7d", "indicator--488555d9-cef5-44e4-a349-ce2dba3b226d", "indicator--39b867ae-8f76-4043-8aa0-bb5a9537017c", "indicator--190fe6a2-4c45-4366-a008-8d9cadc5638b", "indicator--3d4af46c-11c7-441b-848d-fb50b5d03cad", "indicator--b6c3ad98-fcc4-4ecd-9992-0ce77fd42f8f", "indicator--8149e7a0-8669-4119-be9d-0de22bb66a7d", "indicator--b7a222b7-bd5a-4489-a7b3-8bef56352580", "indicator--21a3cc50-f474-4334-b592-1dad53408c6f", "indicator--1ecb7cf0-cac2-416f-a34e-a91783336450", "indicator--7d0e3d1c-b30e-497a-a497-3314f9a847b8", "indicator--27dc2ab2-59ea-4ebe-b7be-26f9a2b91c90", "indicator--61d48985-5df7-4837-8365-0874ceb77e82", "indicator--bb68f38a-e7a5-44a6-9ddc-c83f53b590e4", "indicator--a87904f7-5840-4105-9b25-95f2b524601b", "indicator--004b6f7d-e330-432e-884a-4d983340ce18", "indicator--7af871be-9c8e-428a-a998-6923af228b9a", "indicator--149063ed-c5e7-40f8-95a0-732b49fcc1c5", "indicator--ce4c590e-b1e3-4fb8-a91f-b6402ed42dd3", "indicator--fa1da0e4-6696-4c20-b31c-79fc2965b949", "indicator--e86ec77d-b75e-4843-b226-dfae62f18ca5", "indicator--66f767d3-bb1b-4a7e-acc8-3c3215df606c", "indicator--75d2a5cc-1438-4d6a-8608-cfa93ca10588", "indicator--ee324a70-0a9f-411c-95b3-9c492131f068", "indicator--210f4fc3-0a02-494d-9f77-164478c09275", "indicator--99def90e-f1b0-4905-b585-ca055ec21e03", "indicator--862ec29c-1129-4401-9200-c1fadffc9700", "indicator--545fc1ad-c9b3-4dc3-8f62-d1a3b1cdef39", "indicator--3158a861-c240-473f-b98f-75330f9583fc", "indicator--0a75ff9d-ec42-479b-aca3-1fb870dcc4e6", "indicator--6b339aca-2ed7-4481-8fad-c84a7b965140", "indicator--2dbb4660-9998-4369-9084-9cba880addd5", "indicator--78fd366c-aa3e-40e8-a3f1-4dc94799720e", "indicator--770d8bf2-149a-4c19-b272-3b192009a203", "indicator--e0ba3088-d490-46c2-8b95-7ad637fad851", "indicator--5a074320-b308-4680-9148-31eae5975f1d", "indicator--d61650b9-bb2c-4fac-a6ed-7b27b4616d41", "indicator--72e2e86b-47d6-4c63-8711-f10107006a43", "indicator--c3d16b8f-fb23-4d2a-8926-fd56eb9d07dd", "indicator--dc79b74d-00d7-42f7-95a5-0ffb1730b7c7", "indicator--1aac0d13-b003-4315-8b45-6461baf3f90f", "indicator--06ef800b-f2df-4323-9063-37d01beb6492", "indicator--7c06cd6c-b11b-4008-a570-fdae4c9fa7d8", "indicator--4466e45d-d5bd-4b8f-990c-e0701e8a184b", "indicator--b5346d81-b7d8-4722-93c0-3a4f8d83acd2", "indicator--b0b6ad51-3175-4285-97c9-46078c66e242", "indicator--7526fc23-5c22-451d-b3d6-f0d628d26337", "indicator--542209d9-3a18-4dba-92a0-bc2808f6a931", "indicator--48f9f7f0-3328-41d0-b4ca-f19310917474", "indicator--8a786bcb-4b02-434c-b8e3-365a5dc946f3", "indicator--5bc0a31a-2ee4-427a-a3ac-6fedd2b2c3ac", "indicator--a73d8c58-1c6d-44d1-a173-01c8ea8ec525", "indicator--6d1be441-34d6-4af0-8b13-e8b0f1e3dfa4", "indicator--4e50d17e-ddf2-4212-a089-64757a199bd8", "indicator--8d0aa855-be14-4df2-8f41-6e495aadb670", "indicator--67f50446-08aa-4369-aec6-d35621fdd88d", "indicator--18a7d426-702f-481c-8cea-81b6debb503a", "indicator--e5046a35-a276-494e-a286-4ff08a5bbdc2", "indicator--be0c74d0-f0b3-4255-a56e-4d68ef5958c6", "indicator--5c3f5948-3379-4f4b-9a8a-274ff0d1245f", "indicator--fc582cc0-8723-403f-8e81-f080639b4271", "indicator--800e92f2-a815-40ce-9f05-35e29ad86814", "indicator--3d7fbd96-7340-4c7b-9a4c-9319b3d373b1", "indicator--a81e5f36-45d4-48c7-84e9-dd9b0defae29", "indicator--d90853ea-836b-4142-937c-7cdcbeb0cd3e", "indicator--18f7838e-e46a-4d05-a901-bdc1ff5aeb64", "indicator--05be8b5a-8c0e-43cb-97c4-45dc080bb59b", "indicator--9554a217-f36f-4bd4-acbd-b7db78e189d5", "indicator--3437b9d6-0eda-4dbd-9439-0051388439cc", "indicator--90f15569-ea6a-4f88-baa0-ee6345f048d7", "indicator--6f918f61-bfa0-4b72-966d-72f8829f6197", "indicator--25b411f6-6e33-4560-b7f5-639ad569e9cc", "indicator--15a5203a-8f37-4708-9042-13582a062736", "indicator--4e224181-5607-4ca2-a174-9b463daf1c1a", "indicator--14dc9a94-b7a1-4bec-86f8-ed890057fe07", "indicator--1d827f84-fdd0-4202-b565-8b7f89326237", "indicator--205c3aa6-3938-413f-9e92-8ae944ac4f29", "indicator--033c4d2e-d359-49f6-b38c-6324d3541e8b", "indicator--ce658194-a594-453a-bb9b-8d698aba89dd", "indicator--4b33121b-7770-4bd6-919d-fe5346d600ef", "indicator--13169b36-028b-40be-b4d1-77ef0aff2c15", "indicator--731b81ff-4af0-4c30-b07f-0e9236af2f97", "indicator--a0c76114-154a-4717-8fee-7d0fe5b7e900", "indicator--3dbf6d1e-953d-4c6c-a9e5-309901882c92", "indicator--b5833dee-5504-4658-b241-3f49db22dadc", "indicator--6a057e77-155d-4719-9bcd-d309b2a2ef1a", "indicator--ae9404f1-666b-4c33-8203-7a8ef61f6564", "indicator--f7a4127f-3bc2-4640-a408-4656160b6ca3", "indicator--54f29ed8-0166-4067-b6fd-3fadf53dd781", "indicator--ea8c5570-7b60-43b4-8916-1e454e72f6a5", "indicator--d63fa3e7-0e6c-4318-82d9-449d0b7bb523", "indicator--8d9470cc-8ff2-457d-8dbe-1b7148478c4c", "indicator--ad89edf5-8ac2-4c26-b090-70640890943e", "indicator--9cef932e-16b3-47b4-8635-fbb0be9f2767", "indicator--aa8ef566-2cf6-4ea1-8846-4d3c9b4c05ea", "indicator--00cbb940-7915-4ba3-97ed-873c98c964ba", "indicator--ba3f761f-9e16-453e-a12a-044314983f9d", "indicator--82cb4011-78ce-448f-afa5-70071f9bc3b3", "indicator--d549d2cb-f6e3-44ff-9cd2-abe4071c88ed", "indicator--69090c8f-3984-4d59-b230-c08b2ef424ca", "indicator--97117c85-cc4f-450d-9e64-bc9248cdeba8", "indicator--01c5f855-2a3d-4360-9405-7ccdc71a5d83", "indicator--d66bf004-ce10-4f9f-8e28-216a14de1f42", "indicator--e6405523-bb30-4bc2-8b8a-2af295850174", "indicator--0b690ced-61a1-4d54-8c7f-1f1ab8ab27be", "indicator--758b263b-4b9a-4e25-b9ad-c30fcb6cd26e", "indicator--c2dd6aaf-3ac3-487b-88e5-f916c32486ad", "indicator--b1268399-3e17-46af-a5c0-d3882eb704b0", "indicator--c8819a92-5ee5-46d1-a83e-b774660c8900", "indicator--7ee7e68e-eb84-4494-92fc-a07a6eb2760d", "indicator--38fa1234-1cd5-4c77-982c-af66a6a44d4a", "indicator--f36a7114-6a54-4077-b923-fd86fa9ad0cf", "indicator--024d8628-35be-4ce8-a03b-1c0300566085", "indicator--fe6587d0-1519-4918-b423-58b88b12712c", "indicator--3f251731-c52e-455f-9c2c-b0b33f33a025", "indicator--6bfc1e1f-615c-48f6-a168-2e6111fda1c7", "indicator--b1500560-3765-423b-9e9f-e7e5ead11bb5", "indicator--9394e7e7-56ca-4c15-a560-fc5c37cb408a", "indicator--f660c3c2-895d-439b-bc80-1f7709e3a222", "indicator--e9208648-6a34-4549-b01f-6d9b370ab180", "indicator--56ac84eb-e419-4a4c-8c35-3475edc5d8eb", "indicator--4df5fc44-aa32-4b48-a632-7b8c743ba64e", "indicator--8b099f1e-6f98-4bf5-a4d7-4433568ff08f", "indicator--d4d142ac-3151-472d-b3d4-c292e8310eb9", "indicator--a65132a3-a953-4b11-b5c2-124fc17aa67c", "indicator--75d7b345-fc07-4f04-8046-163caaef0bda", "indicator--1ad46ca1-adff-41c2-8a25-bc1c09d53e6f", "indicator--96be15c8-7fcd-46dc-9c78-fec81202275d", "indicator--48c5ee64-c299-4282-8550-bc93ab395e91", "indicator--76405183-1dea-43d2-a7a4-68f64bebe3f6", "indicator--6f1ede9d-5e9d-452e-9e40-bb2636ffa65f", "indicator--b969cbe0-b721-4d5e-b2cd-04ac156f67ab", "indicator--754dc543-670e-469e-ac50-c806c0792b4b", "indicator--e7e7be31-1800-42c5-a120-520c73d08748", "indicator--9105759d-dfdf-4705-84c6-543a1cf10990", "indicator--2d636c42-dd09-40f1-8863-f28bf556fe1b", "indicator--8a5782aa-5ef1-4e53-95f7-6ff1e8de1d26", "indicator--1c69e496-d237-4d08-a0c3-a66c8e44fc9c", "indicator--eaef993b-e430-40ff-ac18-260a7162289a", "indicator--4b7de2bc-1fc2-4580-ad85-9f55ad8a9cd8", "indicator--397108b1-1651-46cc-a317-8e4da243e0d4", "indicator--660027a3-9b4b-485a-acde-9049b5cbac83", "indicator--4a9c02bc-1601-4a8d-8a3f-7f0bbde3569c", "indicator--63e927f8-3217-4c3b-9185-838b05d81563", "indicator--8ba865f0-1d15-4135-a118-545d71848b95", "indicator--fc3acd8a-5dc6-47ff-9fcc-9acff3052e07", "indicator--349c4de6-c7ea-4310-817a-9edfa1f1f1a3", "indicator--0e4c4da9-7421-48dd-b55b-37eca5f3b5e8", "indicator--b66cbd7f-a186-479a-9dd7-cec47cf69e75", "indicator--f18aa4b1-11ca-4d95-9d19-d269e6c14e5a", "indicator--f3c8d242-7b82-4a4e-91c6-5208444b20b7", "indicator--537366bc-5e3d-41ae-b18e-4c8ae7b63160", "indicator--8a2ddb67-e5cd-4b3f-b25d-8d844ec3305f", "indicator--eaf6875e-7c33-483c-9eb1-06f791311800", "indicator--16bb6f76-c65b-4ff2-b47a-1421bb1d4b87", "indicator--46033ca3-3c63-40f8-89b6-405e596763b0", "indicator--ee7d6448-b4bc-4d30-9e62-fb567743122a", "indicator--f4539fb4-c01b-47fc-a0e1-2b1d459cfc88", "indicator--a62e5fa7-5268-4d14-882f-b6465c2b1e2e", "indicator--817ed557-483c-4b57-99d5-1208005d3927", "indicator--73361544-ad29-49d8-bb4a-4fff173a96ec", "indicator--39e4f6ea-59f0-4757-a599-0b4f002beb06", "indicator--4d68820c-43af-400a-b066-c6ae6dc00635", "indicator--41889182-a266-43eb-b8ea-ad11e57602bb", "indicator--c8fe6e2b-d55e-4dc3-b980-22f77c40ce87", "indicator--7b379ec5-4eb0-4b2d-bb21-0b56f0dca608", "indicator--c43fd606-dfd5-4928-96da-57fb06b18732", "indicator--42023dc1-ef47-40c0-84c3-12cca02dda9e", "indicator--5a95ff53-04d6-49cd-ba9e-d6ca728e0990", "indicator--d1874740-a8e9-4e91-949b-17ba3f635d3c", "indicator--42bee68e-3624-4107-a43c-3cd6319e9c41", "indicator--8faf11ce-ed68-474a-bcd9-3d18f91f5b9d", "indicator--b3c99451-193f-4bfa-ae52-e0b39cb095fb", "indicator--13a2d564-d53a-4bbf-9122-cc81138958e5", "indicator--40a93f28-751b-45e2-b047-11b97af0a365", "indicator--3c8ac943-b025-4e12-bdd2-30870a0e89a7", "indicator--ff4f607d-13ad-4849-a650-8178c1792c32", "indicator--2e825e02-b3af-497c-9211-eed7de35ae88", "indicator--28b991e4-9085-4669-b84a-7020298b309d", "indicator--6d4a3467-144d-4a24-b09f-45dbe7a30939", "indicator--8bfefdd8-e2ca-4b3c-b974-496de339acd7", "indicator--5eb1bcc6-cbe3-45cf-b61f-b5cd7effce47", "indicator--29f9385d-820a-40cb-b0fa-fc28f261d44f", "indicator--f11ef2ee-9a1a-4738-8176-33e0b337f160", "indicator--518429f5-7e4d-49f3-b7c9-15b6c399865d", "indicator--9998e8e1-275f-4de1-ba91-59f4c82ddb67", "indicator--cfc125c5-ca7b-4497-9958-f7dde0e18fbe", "indicator--1d16c3c6-7650-4754-bfa8-22de7a1ff005", "indicator--98f36e20-12aa-420e-b472-9835341fc7fb", "indicator--14a03de6-76e8-4b53-8116-aaf888804fd2", "indicator--5f87900f-8f74-4d80-b97d-d144296b6c27", "indicator--fdc0ff2d-80b6-4fe6-adbb-0f2705cfb606", "indicator--e74f79eb-52c6-484e-b189-96c7c8c8e47b", "indicator--6669010f-82f8-4dfc-a990-bcdb1db86491", "indicator--88f998b4-c543-4eec-bdba-33757d4f5907", "indicator--2dd9f2fb-c34d-4699-8b3a-7541afad4931", "indicator--35e23669-afb9-4a37-bf50-f309358d0fc5", "indicator--7836bf3d-6b57-420c-90b0-5826cce1f83c", "indicator--21238085-427c-4ac8-93ef-9add0b191a2b", "indicator--9a7c5cdb-07bc-4473-abc7-01545c91a855", "indicator--fbe14019-55e4-4b88-b3dd-e891ea969682", "indicator--1aa88167-3019-4585-9881-e41f606c9e5f", "indicator--bf890179-5c12-443c-91bf-9895c2062ae6", "indicator--7025f7c4-a209-4989-a09b-c9dfaca60a3f", "indicator--91f16643-f3ed-47b1-95b5-22fbb9608191", "indicator--c9be3986-e359-4239-9127-38a696b754ec", "indicator--27610d5f-d52e-4613-8252-b1e5a18defdf", "indicator--43ebd0cd-fcbc-427c-bbc0-e14fb38c0eb0", "indicator--ff61fa75-c2f1-40ed-b9e9-ef5d2aa5e28e", "indicator--226c40f6-b736-437d-abf3-8da31b96c04f", "indicator--db867d02-8eeb-4fcb-b994-52299ec8c40f", "indicator--faf488e7-7da9-498e-bcdb-76d64b93dc6c", "indicator--8ea706d5-0657-4dff-8782-266fcf895461", "indicator--d68311ca-eb66-4958-92c1-5ff26f621b50", "indicator--c406e0a0-f089-4bee-be15-8ecd40837d34", "indicator--2dabca89-af5f-4039-b009-1c7d88772b8e", "indicator--1b930c7e-b882-4f47-817c-858f8653adcf", "indicator--26372f5c-a1f3-4b05-ae18-d6e9af2b0532", "indicator--084494ed-d385-4d6c-979d-e4167ec20a00", "indicator--1324a24e-08a5-4201-9334-6198b78e909e", "indicator--31a887f2-a1a8-4320-83e7-3626be14158b", "indicator--0eecfe51-b892-45ea-ac90-ea251b9f0a17", "indicator--ed5f44b5-3fba-4b91-a0ba-501d82b7de31", "indicator--d42e3df6-5a4e-4eec-8c0a-5049be85b018", "indicator--b509849c-9076-46d6-9189-e70ff105bf1e", "indicator--2c1f8fa0-d5b0-42b6-95ba-0627b727c581", "indicator--7fe495cf-d1af-4d27-a173-29837ec2270f", "indicator--b353cfd3-96e6-4cd9-acd3-d2da8ea7a7c3", "indicator--13bed36f-2109-4224-ae71-c8e2a5910715", "indicator--79294b79-6350-4549-900a-8bc03b3da3eb", "indicator--b8c9c64f-1fd3-4b94-9a0a-a5847c1753e1", "indicator--30ddbe11-08c1-4206-a4c4-c6d28b3195fd", "indicator--62208122-4869-4aff-905f-f91e24c9ac31", "indicator--91c329f9-6dfc-4b5f-82e9-6a0152fa7acf", "indicator--398c6a89-8e2a-4e32-abe0-c9f2eedb18fa", "indicator--816d4f6b-331b-499a-b4d2-bfd2f3ab277d", "indicator--625b3641-b5a4-452a-9268-bc3646448818", "indicator--13ae72fd-e7fd-416f-ad30-61c8b306966a", "indicator--4986fc11-44cb-41b8-ae55-206d69062643", "indicator--bdf0caae-6ce1-46cd-9eaf-c889485a88e5", "indicator--c20a968c-d8c4-4dfd-80c4-d0db0ea61297", "indicator--6aea0531-7ef6-4e55-9d2f-16522c75601a", "indicator--749f8385-126f-489a-85eb-a58d5222959b", "indicator--df4d11af-a3c1-4913-a287-b705433dea5b", "indicator--8577c74e-35b4-4ef0-9883-cea7136ee244", "indicator--4b4dbbbf-bef4-4a58-9486-d64fff2660da", "indicator--56d55da0-4513-4bda-8370-a4b7ed7ada03", "indicator--38b28414-bfae-491e-899e-e28d2147a876", "indicator--e48710a5-52ae-431d-98fd-d6395929e69a", "indicator--f55d7976-7ff0-4a1a-a14e-0dc4682177ac", "indicator--9945d5ab-1477-45b9-9f40-af22050dc021", "indicator--aad1ca11-6e44-48c5-8103-a7db960d50f4", "indicator--8b5bb9fd-ce86-44be-a141-47cb7c121b4e", "indicator--098b2a5f-8658-4efc-a6f8-b406c4c83442", "indicator--2ea40a1a-0bd5-410d-bc18-6d71617bda9b", "indicator--bc817207-17c3-419a-adac-064bf389571a", "indicator--2f0e8686-b3e0-47d2-a3e2-c7fc4bf0b137", "indicator--0a9a7171-577c-487b-8da5-1afb133aecfa", "indicator--b81a8296-5a51-405a-ac17-11f16dd6ff00", "indicator--03fef043-79ea-46cd-a1c5-d2d10df88904", "indicator--b2a162f9-7deb-4f60-b2da-733a7f7e5a75", "indicator--aff73f0d-bff5-47cd-bc5b-30b917ceee9f", "indicator--70e3f5ed-9ccd-49d9-9da5-9f945d24e222", "indicator--8c7f9ce2-5b43-42ea-a132-4475d600a81f", "indicator--a95bfe26-daa9-41ca-a381-40ed731ca7ab", "indicator--6851121d-ffd3-4eea-9509-1d499221edef", "indicator--d0794b82-7c31-4f5c-9f2d-2d5ca1188fb2", "indicator--f905aae0-3a6c-4569-84a1-4c7f781ab116", "indicator--a92ffeb1-992a-434d-93ec-fa0c72a83313", "indicator--6cf71f53-b87d-4d59-8ffb-2129bc6014d3", "indicator--3c125460-d969-42a0-9b9c-9893e4168fc6", "indicator--9b595d1b-73a7-4119-a1ad-eff8584c47f6", "indicator--146f253a-912f-4d87-b1df-74152aec1d85", "indicator--8a6ffc5c-1237-4851-bc6a-5c2b6df245f3", "indicator--ebc1b868-9397-4a2d-8e00-a1512d84f212", "indicator--5eed6220-136a-4ccc-941f-a04f083b6179", "indicator--28bda4ad-8f5d-4d4b-a047-d819ad305b28", "indicator--da4f5bfd-9b16-4d31-9da6-55a6443dae14", "indicator--2a60fd81-25ab-4b60-a201-d4190702cbc5", "indicator--576a9bcf-3d75-4347-b617-47c5ed818bdf", "indicator--187cd8f4-216a-4ee7-8403-86e03fc23c40", "indicator--213a1a8f-510a-472c-9187-9ecd0873fd48", "indicator--eb7d1a46-29d3-4a3d-bf5f-f478775d0fb9", "indicator--a24adf90-3e16-4228-8528-307526bdb735", "indicator--4ba7d388-cc7f-4199-bcb7-f0bd2fcee226", "indicator--f28aec57-275e-45e0-b70c-89ecfc566db4", "indicator--35640a0c-19fe-4b82-aa34-35b87a0b71f0", "indicator--2a1ac940-7dce-4246-9abd-fbfe599bed75", "indicator--72f92b2a-ec55-4342-bd2e-ea700edba642", "indicator--b3a7b273-b924-4b5c-8abf-73ce373b8710", "indicator--4308193a-7967-4d36-bd25-7714fa6d92ac", "indicator--eda64224-21f4-4177-8245-24e39a767df6", "indicator--23e1a127-3f39-4166-a9b1-84a7f92ab169", "indicator--07031135-5dd8-40a2-ac95-4d85b4a53056", "indicator--81c0b117-ee1a-417c-a82b-f5bc05980926", "indicator--94ab29ab-0857-4469-b3bd-e61f1bd8f295", "indicator--ab36002c-8475-41ec-9740-92195f2ef030", "indicator--32580c12-5e5d-47b9-8e71-456e6b4d24f5", "indicator--7f94f6d6-b550-4518-8c8e-ca7fa645c6e2", "indicator--5d32ff61-df75-4d5e-a1b3-421e2755501b", "indicator--a96d59e1-77b6-4c29-b0c2-1ef1eeacf2fa", "indicator--d539b159-7fed-4ae2-8aa9-ce7c8265995f", "indicator--bfcec0c0-fc55-458c-956e-93f23b7c7659", "indicator--3c060d2a-5717-411a-a09d-fb729d524bb5", "indicator--51e891cf-5977-43c6-a301-3ec78dea5e5b", "indicator--ef31cc29-8c04-47db-84f1-12f87052f2ee", "indicator--452edbc4-d6cf-4898-90cc-4b6bbd4bd59a", "indicator--27612fc9-3f0e-4dec-a1d1-3e1872dbbb8f", "indicator--ad87d6e2-3d75-459f-a2bb-240734c91b43", "indicator--b91176ef-2497-47c6-af79-8e80595f8e2b", "indicator--085bf436-9ed7-4ffe-b260-e66968242b08", "indicator--5ddbb454-2b45-46d5-9143-63f9fd347248", "indicator--9459946e-5b3c-4835-9b85-1199f39b24df", "indicator--0fec8a5b-70a0-4855-8400-aff1bcc68a16", "indicator--ad9426d4-e900-409c-8191-257ddcd086b0", "indicator--56ea0107-eb2f-4bdc-81a9-6888180db9f3", "indicator--020cfc94-6bb8-4b68-944a-91fbd5fc1972", "indicator--aeda8e8c-1a7d-4f40-846c-2fa85be10c77", "indicator--4bb11bb5-2c3b-4412-bd63-2391febd5a14", "indicator--7e750afd-17d6-4c2b-a8f4-e049b89c70b6", "indicator--e90684ab-b57c-438b-8794-e06d2ad33fba", "indicator--a50af935-d9c7-4c1b-94af-948a6257c015", "indicator--18c92526-e7bd-4579-9d0d-7a051a9a7ffb", "indicator--b2713232-eaff-4dea-8096-605860224a7f", "indicator--388b149a-e302-49c4-9d94-437c11c6b427", "indicator--63add85d-6aa1-4852-8611-531a8809c8eb", "indicator--f78cceee-e6fc-43cc-8d28-afe1c88d4d02", "indicator--58dcbf86-17d8-4469-9ad8-6e989802e3a5", "indicator--80530cda-648d-4dd0-98d1-5a002145db99", "indicator--c35a173f-05ec-4f2a-80b6-7cde778b965f", "indicator--e25f855f-a153-420c-a4ee-dbfedcbecb87", "indicator--bcb86a56-559d-46d7-b484-313bab162e08", "indicator--2a997891-a3d9-4505-a6d4-9f239a97533a", "indicator--9b12debc-9df2-4a74-b697-5ed031f34f8c", "relationship--27e98b83-6912-4498-8f6f-2dc30708f95f", "relationship--749c4d1d-6910-443e-89eb-7f9ecd49f7ff", "relationship--18054d0b-e69e-418b-a838-f0788e8986f9", "relationship--37cf8cad-079c-4dcc-8a6f-1ff702ea7369", "indicator--185fea89-1fb1-4b32-95a4-f71df9e3339d", "indicator--44e1af4a-0f77-4948-b9a5-2436a7d7d525", "indicator--9355bff1-f69e-4268-b699-5b8cb959ff42", "indicator--7f6ffebc-e334-425a-b6cc-1c7e69db05e5", "indicator--79619e04-52aa-4cc1-8844-0fb13d7e2d81", "indicator--ffaa838f-a3bc-4cbc-97c6-5f7ae032607e", "indicator--42230f62-3ac2-4c27-bbcb-d96fea0e07e4", "indicator--bac7b402-5ee1-404d-9a41-0ba69e61da0e", "indicator--0177faa9-66fd-4153-9fc6-2eec4d46bb07", "indicator--5c931bab-400b-42c2-9121-ebe1a09de2ea", "indicator--97442212-da29-40ac-a18b-a640bd11e52e", "indicator--08310a10-b718-481a-9986-32b9de63b0ca", "indicator--22f77a2d-8c27-4d45-b37e-8991500242d9", "indicator--c77c99e0-d330-49c0-88f9-41a811031682", "indicator--c10b21b3-a103-444a-87aa-241d31b2acf9", "indicator--45211329-d0ab-40e5-b55c-2f1cf1544330", "indicator--115c8b23-b1e9-4229-879f-12932fbc20c2", "indicator--f45f4749-ed3e-4116-8d30-51a21faed646", "indicator--a9e51ec6-3e19-4ded-83de-6d844f16f53d", "indicator--e10538ea-bc82-4c74-81ee-3afc479e13af", "indicator--78b291d1-fb3e-43c6-bdd8-d200400d7979", "indicator--3361e9e4-345d-4873-8b03-e426751e2ff8", "indicator--b4b08d2f-8e3d-4316-80e0-bfcadb6b69d6", "indicator--e96e8611-96cc-4d1e-b4a8-e5084541ad30", "indicator--d591c847-5507-4d2c-83dd-adcc220b436a", "indicator--9e27fd7b-9b57-4b96-b146-837ff2b5697f", "relationship--47c84f50-ff2a-42ea-a9b6-e6549739c1bc", "relationship--3825849a-f162-42ae-921d-c1fa5ecb258c", "relationship--675999a1-0cc9-486c-9382-f59d2fed5ebb", "indicator--5511e77c-118f-4c9b-b142-4d5aabf7606b", "indicator--135b1093-212d-4af4-8945-1c315271fed5", "indicator--74d9d258-7737-466c-8817-7771ccb379c6", "indicator--d143e3ad-f61f-436c-8ea4-ade484269dcc", "indicator--60c2b4c2-ab3c-4dde-8160-704419833b02", "indicator--df4e8939-07ad-4aa5-896d-4ca0228e9d73", "indicator--ab995363-927f-467d-b56c-7fed3176d0f1", "indicator--1dd31d9a-3202-4111-9256-d9995517e328", "indicator--ea17478f-4bbc-4410-b57e-4182879225c0", "indicator--16feb7c4-d245-4dac-94f2-0f8613c3d92c", "indicator--9e9748f1-0df9-4948-8a2f-b28b3a8ea033", "indicator--ec297772-e1d7-4ee0-90ac-c72f43d6f8d9", "indicator--98d61795-4b23-4593-ae33-2cd93eedaa0f", "indicator--32387496-7b6c-4b55-a57e-dfa91b15ded6", "indicator--be40ab1e-7933-43f9-a8cd-b1721ef6bce6", "indicator--97c6171d-dd00-4296-b6f1-d4585ae2b0d9", "indicator--181f5a6e-702f-4897-8669-01931edbf6bc", "indicator--c27518af-f469-4976-8b1c-f9d2699918c2", "indicator--41043b15-6061-4b82-b66b-99f685c8a79c", "indicator--f5f74d5b-cee0-42bf-ade7-542aa6a03790", "indicator--1d09fccb-7e9b-4e78-bbf9-d567dc0c7d0c", "indicator--3b6107b7-8f4e-4ac6-9d4a-193fb7756476", "indicator--dd93b7c1-d5e0-4148-ba49-4ef34f946afe", "indicator--cb46ae2b-288f-4a22-86d6-05514f6ee185", "indicator--b7e8c2b6-5a4b-4af2-8be4-d6f19396470f", "indicator--1ad2b489-f940-48e8-801b-a992a30c3d30", "indicator--8eef2468-9b91-4e1a-b329-e55749361576", "indicator--0a530eee-a955-4a33-ba2a-b9f89053b38b", "indicator--4c1b7085-809d-43cf-8d5e-21c498ca3396", "indicator--ddaaf6b1-cf67-48c3-86cb-8fc91400b702", "indicator--0ae987ad-d1e2-40ee-9472-4048315900f4", "indicator--2c6e28fa-5ed1-4b65-83c6-b17c279ee84f", "indicator--24c3a4a5-c882-4074-834b-24cf120d7977", "indicator--a0b9d275-a3da-4825-9e55-32dc2fd6d4db", "indicator--fdd8a638-10c4-44de-a532-4356f92288ff", "indicator--2ed3f7b7-504b-4e9f-8de1-6884fb8a02a3", "indicator--ef4117ec-8bc9-4fbf-84d8-728afe3d7411", "indicator--fd6289eb-c85e-4ecd-9fa6-6e5314a32bfd", "indicator--73dfd035-315a-48fb-8185-ce865939bd3f", "indicator--b4bda4cd-19a4-49a1-b27b-c5542140b7be", "indicator--d7c39c3a-fde8-4723-8eec-b262cdbc127d", "indicator--cb712f55-94b7-4c37-8e62-a6a8c12a8fa4", "indicator--3f11b43a-0065-42f7-ba8f-e6399c8c367e", "indicator--b8121556-58eb-40a5-9459-8bb8f6c2a79f", "indicator--d2d4f886-295c-4bb1-aec6-c954ed61c042", "indicator--bc0c1367-5514-4fbc-9732-356d0a3e0e93", "indicator--3b1cc022-ae5a-4f1a-8c03-6bbdec0c2c68", "indicator--41cb5de0-26d6-4f76-947c-d4bc345df01f", "indicator--2c50865f-ce0b-4d76-bc33-65da367fd00b", "indicator--0f97d007-58ee-47ff-89c6-4293a6efa23c", "indicator--70beef87-031c-4392-b8cf-c60425bb046c", "indicator--fc3fdedf-b5b5-423b-b842-f525a69245d6", "indicator--be99eb98-f489-43fc-895b-5a648deade8e", "indicator--02275c78-2064-45e3-849c-db4c21df25f3", "indicator--272a828a-5304-4a04-bcb4-f10846fece47", "indicator--e767f7d1-02f6-4250-a804-0e183e9c8e2f", "indicator--64560741-a072-481e-911f-1a491a4554ed", "indicator--25252271-71ea-4f72-9964-7a29348ff45c", "indicator--72d9c0cc-1218-4dc3-bf16-9a810fcbbb23", "indicator--19b9e925-aa25-4458-9b40-1c182fbe6f07", "indicator--1178b2e6-51e8-407c-9d79-34d65284d0a4", "indicator--d1678257-0754-4e7f-8246-c03b6042185c", "indicator--002c43c5-4bb8-48c3-9c5e-e64edb23303f", "indicator--72a85d71-479e-4f87-a1c8-b0914f2e3b7f", "indicator--2f8b23de-653b-4133-9d06-eca61c2b40e6", "indicator--a8fbd2ea-8740-48c1-8c11-f4ab61784e12", "indicator--67b795d1-7c5f-4c05-86e5-ab11eb2dff35", "indicator--26195e16-9bd5-4350-ab08-aefbc5946dbd", "indicator--d445621a-b52a-4e43-8836-aef5680e6996", "indicator--387e8271-786f-4002-9e75-4a17e95e0c72", "indicator--2d88ce91-b523-4321-a79a-1f97fa823038", "indicator--b3a3eb5f-7b92-46c1-9399-3024f4f021e3", "indicator--540a0b2a-221b-479f-a6de-eb599242b82e", "indicator--440285ab-be12-4f79-b7cf-1016b77d6d8a", "indicator--04298a9a-e387-473e-9d80-4eee9fa01a9a", "indicator--13029742-874a-451a-897a-f51139ee2c8b", "indicator--c6ddad0f-38d1-4b6c-a8d1-2cd095ae6f87", "indicator--63b6a26e-732a-45b5-a45e-77baba88bc7e", "indicator--1bb16366-65e4-4a14-b09d-fad39073f4ce", "indicator--ee603bdb-96b6-4ebf-82b1-89a4a7036436", "indicator--53b6f949-03c0-41b4-bcbd-21141228e231", "indicator--1ac4f6be-a48c-4c59-bfb2-3cddb8a512a4", "indicator--ff39e535-f80a-45cb-b92e-f5920e6ce323", "indicator--3cf203c1-9df8-4528-8310-636f6c5160b2", "indicator--532d88d2-b97c-4ff0-a9cd-8afc238a001b", "indicator--c9ff326e-0ffa-42a8-afae-434f5b61ca1b", "indicator--61f5da00-6abd-4955-a6d7-5d161ef9d59c", "indicator--e59bda1d-6fe7-47c9-8546-81591da6960a", "indicator--00f41c81-ef85-4250-9202-edb2398bd4bd", "indicator--acb6a3c3-3fa0-40f8-8210-5a16ca402a72", "indicator--4fc65c03-f012-4ab6-9939-24b22b4aad91", "indicator--b94d3b81-6770-4730-b223-97d70bb50012", "indicator--0890911f-a086-41bf-a632-088598f54f99", "indicator--bbb88959-e020-4867-958d-28d447fa25e7", "indicator--f15fbaba-617a-4f81-b2b1-05dd93863ec5", "indicator--c3e9a4f1-d0f7-461f-9d74-1258168d5bcb", "indicator--23a8e6aa-035e-43f4-96ee-e0efb2ca7e9f", "indicator--744aa8d6-2549-492f-afbc-396a635b965b", "indicator--06af5663-0e5a-47ac-9543-24c5a4bf9e29", "indicator--1de46edf-5349-4f3c-a114-ca487bcd6147", "indicator--5863dc56-a565-4071-ac9c-d2642b7badbe", "indicator--87066363-b0b3-4030-9bfb-23b8c7190635", "indicator--04ffd5d9-bb27-4490-98bf-b8b1be0926a4", "indicator--1b50da51-7a86-47c7-9aa0-c851602ab632", "indicator--b5c87119-bb70-47ea-99f3-fcf8260abe52", "indicator--bb0e6834-c882-4ce0-91d8-546b6919d07c", "indicator--63153ac1-e37c-4f62-a04c-414d3ab94b15", "indicator--4e61874a-faa7-433b-989f-febc060b71bd", "indicator--ed1cc665-1aa3-483d-b599-28cd58cc9e1b", "indicator--531f6aeb-ad6a-4f25-8407-c9949a2f3bbc", "indicator--4dda3b43-a44b-48cd-925e-beed16ce9c7a", "indicator--7721f7c7-d0a0-4f9a-9648-c3a08fbdf73e", "indicator--c037d578-ce9d-4824-bf37-c881d0827cf5", "indicator--7006048a-b4ed-4905-aa7d-ce6e31b998f2", "indicator--6331dabb-9661-4393-ba67-7132884d0cec", "indicator--768c92cb-4c6e-46f2-ae96-c43ca793c8f8", "indicator--7f0d8f4c-d207-482c-ace0-44a415cc678e", "indicator--67fdc11d-e8c8-4942-b2cb-3aa20b0594ba", "indicator--e03221e3-2434-4584-a3fe-774a97e270e9", "indicator--d3c09f6f-cd33-4d34-a9e1-90a25a386d9e", "indicator--cb0b1b2e-9bae-453b-9108-7551863449a8", "indicator--37b16d77-dac0-4b9b-a52a-17b545acfc08", "indicator--1027bf29-acdf-44b0-a25a-06857d909e46", "indicator--f5f36330-d4bf-404a-ab7f-2eee15ec65f7", "indicator--7144b0c4-6322-4485-a645-bef785854a78", "indicator--e34c7cfd-fcf0-4fba-8944-dc9d1f933c32", "indicator--8b0917cd-0deb-48d0-9520-8c5ea11e4d90", "indicator--c24acc47-2458-4407-aabd-305fcce67f16", "indicator--c28575bb-dadc-4518-bba6-a7541a9258c4", "indicator--02003fa0-e31b-4da3-9299-587091c74724", "indicator--97830733-e137-46dc-bd83-480a4eb3135d", "indicator--5e259c58-a84f-4dd5-bac2-2be3b0d30ea5", "indicator--9ffdf0ef-3395-4eec-a586-b37a5431095c", "indicator--0cefcb21-3e54-4d29-a6be-8dbb23a10ab8", "indicator--6087eaed-a986-47cf-b186-fc62b55d8d40", "indicator--0f54767e-97bc-4a65-93ed-5e185811ba9e", "indicator--3d88f43b-3337-4f99-8370-18d92aa05c93", "indicator--fe2726bd-79f0-41f4-9a56-492b250935dd", "relationship--b6ac18f6-5e65-4d42-91be-5da28a6887ed", "relationship--a6b628dd-9593-4a68-846f-e1e376dc0d7c", "indicator--5e778911-b93e-43ef-bbfb-c3fe20b23b93", "indicator--04138a33-7629-4fcf-989a-e3d4a215c90e", "indicator--4a8eccbb-78e8-43f5-b89f-e52c3e6cb882", "indicator--06c6b6f8-4b7b-434a-9f89-b75a198cd9ca", "indicator--858b24cf-e215-46dd-a12d-b84f0cd9b0df", "indicator--aae7c8d5-f37f-448b-b8a7-b0869d2fbd23", "indicator--ab55cd84-007c-4644-8bcd-0ddb8be8d62d", "indicator--eeaa453a-03a9-49d2-b207-930546f79fc3", "indicator--2c9d5b62-3ad6-44eb-8557-1897dd1086c7", "indicator--49260478-5096-422d-aef2-22a2e9d2a6d9", "indicator--e96daa2b-43e5-4d56-9116-5b79e2bec6a8", "indicator--6cb91e8d-ca97-4265-8485-719bf2428580", "indicator--f8266eb8-67a9-4482-9ef8-825bab18ab8b", "indicator--2fbda629-3c6a-4379-918e-1cfeed894985", "indicator--5ffef505-4085-4456-8d6a-720f89709270", "indicator--d53b31fd-004b-4d6e-b5d1-c5425517dd31", "indicator--bdd8b38b-851c-4ac0-9bd0-62d3d27b582d", "indicator--010e6dd2-f7c5-4630-971d-d9e5fd53b6b8", "indicator--b5a08352-3cc1-4727-80ba-9cde5ac44d2a", "indicator--011a908b-56e2-48ce-ad26-c08a8bb60f44", "indicator--c3bf548b-ba37-40de-b766-c42cc4940b8d", "indicator--4e0fc4d3-fd08-40e3-a0b5-07155e5a7f12", "indicator--0b549844-98d6-4138-aaa2-62e5f32007a1", "indicator--f5bbfb56-58f5-40f8-8c64-84274b6b2145", "indicator--6c200c00-1b8d-46a1-a438-daacb3c939f1", "indicator--67ae72e4-1eb7-40c3-ad77-b4ebcac90332", "indicator--4ff09c3a-8eaf-49fa-852d-64949fef9506", "indicator--844d751d-301c-4c6f-8db4-5fb7635eacb5", "indicator--5f258af4-90ed-4df5-a754-99b9f403a3e3", "indicator--3b5db694-84f4-4a1d-8ee4-afc99dfb1147", "indicator--86b602bc-1630-44d6-b452-3aefd746a241", "indicator--96f47050-fef7-4cdc-bc37-b2c095ee43f6", "indicator--8bbaca7c-fdc2-4690-9843-1bd1d63a0fe0", "indicator--a9420ab8-5919-46f9-a897-ce946d986911", "indicator--dc399f47-fae2-46bd-b846-c760ab7d3bea", "indicator--2ec0191c-8aa7-44ef-9f11-3dc2134610f8", "indicator--18548ead-2782-4688-9601-1bd0e3255e5a", "indicator--1eb77c4c-e981-4ecd-a6ec-5b594a79d977", "indicator--69d51ebc-2168-422b-9236-421622861a61", "indicator--5160af72-1c55-4506-bcb1-619247051364", "indicator--ffc5fda1-8193-4bde-9261-f92ca0e176b6", "indicator--0214bd42-14b1-4de6-ae1f-de1e35da71cc", "indicator--da082836-4b06-4357-8980-09db2802b6cb", "indicator--5bc25c90-0c68-45c7-9e28-02aefc102173", "indicator--ebaefccc-dd38-4a9c-b5d1-2a46aeb987a3", "indicator--6fde1116-549d-4b8b-9752-2b55829757cc", "indicator--7f46fae1-2d3a-48cb-a8f0-befc3b3658eb", "indicator--b24a3f39-71f4-4ba0-8281-e69207086c1d", "indicator--98ef2b64-1e6f-4554-bab2-1b37a5209f71", "indicator--ddb4c5b0-6f68-4f9a-b262-84c96795261d", "indicator--e2f45b96-d81e-4f80-8d89-bff9aa96d22d", "indicator--93f2b917-7f41-4d91-b1c4-10c24ed146e4", "indicator--0dac975c-6aaa-4a01-9bdc-68343a316640", "indicator--8f5b0671-254c-4646-bfe7-5aff2f3a8253", "indicator--e86b2f61-97db-4381-8ad6-ae95edefd87b", "indicator--6a5e57c7-5442-4a8f-abd5-35af684e013d", "indicator--2ceb05e5-e6bf-40fa-be34-382d12bac6c7", "indicator--4c215b06-5db7-4fbf-904c-d17ac0f1a282", "indicator--73404316-582c-4a0b-8029-0afa369cc9db", "indicator--db8613cc-c657-4ac1-8ee4-f6a6519f1835", "indicator--4793b6de-f084-49e4-94dc-5f6e82dad356", "indicator--33baf3ee-88a7-4eb6-9081-b1469dc1c97a", "indicator--87bd514d-a2ce-4e45-9f33-5e8b111492bc", "indicator--ad1bff05-53f0-4f78-9cab-843c6634b6d3", "indicator--b47fb843-a50c-485d-b648-b65cfab947f0", "indicator--b517f4cb-4d1c-435b-a070-79a1014ed621", "indicator--3e6db08c-549c-4657-9cd5-c2a35979d0ea", "indicator--16f1672b-186c-479f-9235-857938a8aa33", "indicator--d840027e-4858-4fee-850f-da54ab7a6d33", "indicator--0dab0b36-6d99-4fa3-894c-6a92280f7502", "indicator--9450ffa9-5421-4c61-b6c2-364c8a0afa3f", "indicator--262285fd-98a6-44e7-80f3-2fe5070ba69d", "indicator--40607264-ad10-455c-828f-556d9421a8ce", "indicator--ac7d6857-d8b0-4960-aa89-aa3ee0f16da4", "indicator--033339a1-00ce-4007-9072-184e04654a46", "indicator--7c675997-8778-4041-a5ad-6e79184e16e7", "indicator--4a10f31d-65c6-46df-99c6-f76c0c030f9d", "indicator--a9cd2113-cc0a-43cd-b134-3bcfe8782188", "indicator--93aea0f8-d579-4779-85c9-6b8f3c1793e5", "indicator--19c61059-26f0-4c70-9aea-7118873c6f36", "indicator--ea050612-9503-4a23-9c5c-07c72899b813", "indicator--72a8e1c4-105c-488a-8355-577f8eb17eb8", "indicator--68bed126-2dbb-4bdf-bc83-90a7db64b9bb", "indicator--624c13d6-7c65-44e3-ad8e-2b887eef7ba4", "indicator--36aa0f1b-0e60-42d2-86df-c36d4b797f6d", "indicator--9ee7ed58-3ba7-491d-a185-df1afbf053c5", "indicator--39835579-66dd-4311-824a-6db52d72d3ed", "indicator--709e2652-f124-48dd-a979-709953ee649d", "indicator--37b59ac4-fe5c-4c8e-a620-ad81eec66130", "indicator--8b523750-bc9e-488c-8615-1f361825fa5f", "indicator--30490850-d3d8-475a-9a29-4c90f0e50f63", "indicator--b36862cc-60eb-4976-98c0-ffbb65abac82", "indicator--06c1f41a-5445-4569-9b4a-cf9f0980398e", "indicator--044074cd-3732-4c15-a314-40d09c2d701a", "indicator--5bad332b-add1-49b6-9a56-ad227067f2e3", "indicator--49e91797-a134-4f00-91ef-d895d515787a", "indicator--737bd8a2-8d2a-422f-b6ea-bc14917094f9", "indicator--abbb2c7d-03c1-4dca-bffc-fbbf1c73cd78", "indicator--586d9c4a-9d21-449a-845d-b82aefad8e10", "indicator--a7bf912c-64f5-45f2-8e63-ebdb7ed3f08e", "indicator--c8ccbea8-58df-4061-a3f7-61018ff1781a", "indicator--735f3140-e5bb-48ba-b3c6-2e98b444a405", "indicator--0cc080ed-fd16-4876-bc04-8ca2e5e654a8", "indicator--9d471412-a45e-46ac-87ba-e8431a3ef474", "indicator--99a9c8ff-be7c-40cb-85c3-49798cd0ae3a", "indicator--77e34e36-b24e-4b4c-abcb-04ce7700d982", "indicator--d5d6951c-b21d-48de-bcc2-57c83d32920e", "indicator--b2a961c2-41df-432d-8aef-4b2060fd9ac6", "indicator--24b007dd-6ff5-4893-9202-784c42da7bfe", "indicator--052fd914-f051-48f8-b911-f77e8365fd0a", "indicator--7b8f71e3-2899-4caa-acc9-888291245253", "indicator--d68fd14c-4107-46eb-abae-854cc64ec133", "indicator--a3fb1617-0927-4dff-b1cd-d662043c88bb", "indicator--024341f0-884b-4d20-bf3f-3cc05061b5e0", "indicator--c7a33926-cb16-4bec-bd3f-3edd0b79098b", "indicator--2831fccf-192d-426d-ad73-acc0a8d96cb4", "indicator--6ef9e471-d1b3-4920-bc11-98844eb44545", "indicator--6b24fa5a-2f20-419a-97a0-aa9935704d96", "indicator--32a9352e-3865-4fc7-aad6-52e517debdcd", "indicator--57c94e10-daa7-4cda-a292-1cc2b20dcdd8", "indicator--c3450fde-1874-4737-a3e4-0437effa927a", "indicator--15005282-94a8-40f0-8ddb-0752c72f28cf", "indicator--2d0ff446-d52a-4e88-ad76-39d21b7b0901", "indicator--7b14aa82-c883-4d5b-8b7b-2f8d1436cd62", "indicator--5042f642-7a4d-4731-9d6e-76fbf7a59218", "indicator--ddf23656-662e-41bb-898a-a28fc0fdfbdf", "indicator--40eaced9-d076-40c9-bd15-a9fe8f526760", "indicator--cc8d3626-74b1-457d-81e3-e388c299c2da", "indicator--56b6c0a4-fbf6-404e-89a7-b408be3ab6c7", "indicator--d52e7e30-b1e8-4682-a8fc-fd3caf03617e", "indicator--22b86936-b872-4d21-8ff8-2dbae9c4bd57", "indicator--d5a39860-245e-4b35-a231-e72095489a26", "indicator--b29770da-6b2a-412e-a95d-fb9522ac3bc5", "indicator--51f37b65-2086-4505-9a5c-279aea5fd960", "indicator--d5fc904a-b237-4859-9c63-cf5246a1b7b3", "indicator--7292cc96-7da5-4e78-a329-768b280c5b4d", "indicator--ed7c4419-de63-47b1-9a06-d16fadcadbae", "indicator--302d9e5c-345a-4538-b016-a1a9d516701e", "indicator--60058903-a874-4603-815b-3a61101abf28", "indicator--08207eea-d36d-4750-85e7-e364845066d8", "indicator--d00d8f4b-bc09-4a58-bce7-94eec6384bd8", "indicator--ddaf20c0-89d3-419d-96df-c4f304c625f1", "indicator--9526c3a3-4afa-414e-949d-51449462f730", "indicator--a3a833f3-73d4-4e09-8a01-1b12d828d2ef", "indicator--53d66ebe-d27c-45cf-a241-e39c98b2ded9", "indicator--4415a384-8b06-4265-a611-77c26a3cf736", "indicator--4279f8b5-68b7-46b9-af6a-8f5f6f551187", "indicator--bec9bb61-d876-4a4d-8faa-cc4fe449ae90", "indicator--33544155-763a-4b61-9c6a-b1d7df9de4ab", "indicator--5f8bd06f-c38a-4090-9042-fe8efd2a3092", "indicator--e8303def-996e-4f2d-beed-111e549fdfc4", "indicator--00f4356c-ec41-4008-8978-c2825c4c9da1", "indicator--bc4ab4b8-0f9c-46fd-84ac-314f90f1fa38", "indicator--835d83c4-ac37-422b-936b-17099cbcb9d8", "indicator--9f77ae35-79aa-458b-8394-2688968ea875", "indicator--e296ca0d-09b1-4493-b499-e11460cb2226", "indicator--9703c779-6836-465a-b243-8fef76912141", "indicator--67b834cd-8006-408a-af9e-337e032c23cd", "indicator--2d153a6b-82ac-47e1-b307-245fd60fe370", "indicator--0ee303e6-2961-477c-8c15-00404a1fd207", "indicator--29889901-9c8f-4428-8aaa-149343814818", "indicator--0f06a467-7296-4a95-885c-e13a0f042fe7", "indicator--bb98495b-7b96-4c77-9fa8-1c67c75db36f", "indicator--6c317a16-4cd0-4692-aca9-608964ac9d6d", "indicator--c9c72679-243c-47ca-b290-c7c4f3a63b43", "indicator--9da85ab8-da98-4600-923e-f54f288b6c60", "indicator--35bb510b-2cca-42d5-9438-fa3f44969dd4", "indicator--ec71bad7-5173-4c53-b403-264666f6e09b", "indicator--d1655cf0-978f-40c4-9413-2a5d24aecd39", "indicator--b62498a2-e58d-46b6-8a89-fee177b727a9", "indicator--80c3d672-c673-41d7-b7df-0b7d413492cb", "indicator--982b696c-ee30-44ff-94c0-9df8d7f47f32", "indicator--06af6305-cbfa-49bf-8b5c-66282d1f067e", "indicator--433c2f00-a5f0-496f-9b33-112e64167fa3", "indicator--8b6ec643-14f4-448b-a7c0-f1ae627afcb9", "indicator--306d9327-5b45-4680-acf0-9458806de359", "indicator--66a86814-e4d2-46cf-9a76-fbe2cdcbff50", "indicator--c3e59a5b-a363-4901-badb-17c14b9724e0", "indicator--0037c8e3-8d4f-4130-ba9b-aa58d9ccba50", "indicator--357bc532-ea58-4c20-81c4-6d22dad977b0", "indicator--e3424daa-94ac-459f-acf1-429656ebcd4c", "indicator--165b0377-b225-42a0-93e3-5530cca0dc07", "indicator--070a4e76-1ce5-45d7-9516-cdda3754b397", "indicator--f51af7a0-0c42-407a-9273-e57340ad25a4", "indicator--7e5d5fda-f297-4c45-af86-a027ac0d8c58", "indicator--54c94d4f-90cc-4d92-bc31-402fe8ae03b8", "indicator--ff4671f6-f2c2-46f0-80f7-1d5d51a4a387", "indicator--c323ce7c-3a20-42e2-bd45-c70ca8111c14", "indicator--f4ebef8d-eb9d-450c-9ef2-c6e1ab541bde", "indicator--0c3dca1c-078b-4dd5-8d7a-331a601b9017", "indicator--54c4e230-bb4a-4789-9f0f-ff1dea587ebb", "indicator--97ac2c8e-a5ca-435d-9207-0948a1b960d7", "indicator--e4bdd24d-0f75-4c74-ac08-739796f49aa4", "indicator--35b4549e-277e-405e-9da4-b69077903f21", "indicator--da83bba8-2ae8-498d-91e6-f3250e2d2fd2", "indicator--11cc006e-3e5c-40c1-9652-b33d2991ef06", "indicator--618a7f65-2a10-48c1-86f2-81382c32055d", "indicator--ef93edb5-70ba-429b-98db-33b69417105d", "indicator--e283b19f-0e72-49fe-a67c-e4d11d6fe024", "indicator--d97fd57a-530c-418c-b8ae-b4edae409f34", "indicator--3eed2086-9d71-4342-ba0f-e076852731a6", "indicator--7fbb13e6-139a-4262-ba18-27a669227151", "indicator--12ad3f88-2c0c-49c4-8857-b3afab2375f9", "indicator--1af0e345-69dd-46a8-8607-6c3ee71d07a0", "indicator--87d08c03-6d72-4644-9e7d-60d705372bde", "indicator--6bdcc072-59cc-4205-ab08-987249ea263a", "indicator--30b38ad8-a255-4942-83d6-8bf02317a3c6", "indicator--4505228e-d1aa-4075-8dbd-2a47704fcb99", "indicator--b15deef3-60ca-43bb-8aed-081eb85f7f57", "indicator--4deda907-fe8b-470b-972f-770dd667ac24", "indicator--c31dc8c9-d2fc-48f9-aa25-208acbac36d3", "indicator--035ac037-6c21-4be3-a3e1-3cf6015d7bcb", "indicator--805d5b90-aa47-4efa-8445-b1152c2346fc", "indicator--400bfc5d-170b-4505-8626-fa33396469bb", "indicator--a2028741-ff72-492e-af74-e3f607566cec", "indicator--de1141f7-552b-4194-8916-29c834400b10", "indicator--6f5283c8-cba1-49da-8506-828a1b6b395d", "indicator--4d5ac7f0-3cd7-43b0-8163-498ce0b977e2", "indicator--fe8358a4-a04e-41cb-ab78-017f0a9b2dbd", "indicator--36875a0a-608f-4449-8f4d-8614e75cfd0b", "indicator--c40ee619-3418-4076-a857-d38b87e656da", "indicator--40308e24-4b6d-4a17-8801-8e8799ab3c11", "indicator--39a964f6-cad7-4b4c-8c3f-2dcc5e4ffa7e", "indicator--11f1b8e0-c2fa-4886-9610-106909bf4ebe", "indicator--c0feb2b9-e878-4463-8834-1bfa812683ce", "indicator--03a59eea-26bc-49f1-8b89-78b57de534e8", "indicator--06ac22e2-34fa-4422-b875-3510decef9e4", "indicator--87f7d5ec-decf-48eb-9727-0625c8f7a7cb", "indicator--584e145a-f26f-4628-bbc2-36357ab82015", "indicator--c08b0608-16cd-416b-b180-cbb051c28bf1", "indicator--bdf4fb56-a8ae-457e-be2d-ba2053abf2a9", "indicator--0d4c296a-3263-4dae-bf56-ea902d10cf64", "indicator--51faaa2e-b145-4949-be77-7e7e31f443c0", "indicator--436eea2f-dc2e-4a11-9a05-49d5b50d0c49", "indicator--886a668b-3c84-4372-825e-cb1a273540fb", "indicator--bcfa3cfd-ed40-4f10-a1fa-8dfdafcd34ac", "indicator--dbafe3ea-ae7b-49db-8593-5fe132c6dc9b", "indicator--b300b51b-8988-4c99-90df-a75ad4cee0ba", "indicator--95999f08-dba0-40a4-9347-3a548193171d", "indicator--391913ef-4a6d-4cb8-bd03-f80b43048311", "indicator--ee835cb3-cf10-4cd9-bbbd-6fb4ef11766c", "indicator--3b5c40e1-af9b-4fcd-a6b3-f1d94dcf7cdb", "indicator--fb3ea852-0085-4b52-829d-4d78cc0edc4c", "indicator--f08f18a5-4df0-4475-b790-8e28ad9882f8", "indicator--3a7dc041-aa8e-4887-be76-c759835516c1", "indicator--3a404c47-bbc2-4ffb-94c6-067c3d7c8197", "indicator--71c21b20-ccc1-4f63-9509-23b6fd9b6f01", "indicator--76f25caa-4e7b-4ac9-91cc-838aed0acb42", "indicator--5eae141f-1a01-4a1f-9a6c-e1cacc0518d7", "indicator--a5084f77-3aa5-4bb4-a86d-9704e86c99a4", "indicator--2cabb147-f24c-4bc9-ab09-cc1bf80ded1c", "indicator--f26bf892-fc19-4bd2-a44f-8fb4113c6bc7", "indicator--ebbbabcb-8067-4c60-8824-3690bb4cf5dc", "indicator--452297d8-62ac-4447-a70e-3f9ed32a1177", "indicator--f373b9c7-4080-41d2-b75d-e20f44753e35", "indicator--2e73fec2-ca10-42d7-ba6c-21634034cde6", "indicator--b0a26e4f-344c-422a-8a0f-7ce89f4e37d9", "indicator--3093bf31-249e-4e45-b7ef-b256df2ebfb1", "indicator--af661dfd-83a8-4a79-b4e9-4f35ee86cf63", "indicator--c12b9728-b552-480f-957e-1ae9fb7bc4f4", "indicator--5f2780b4-9ad6-449a-9fde-54b72b9821de", "indicator--68c39e2b-5548-46e1-9d92-ec5d74226d18", "indicator--a8d56223-2bec-481f-9b31-bf6ccc7c4b54", "indicator--cf7eb801-b9a2-430e-b9f3-0bd552ed631b", "indicator--d6db1448-93be-44ac-8b4a-013e5324dccd", "indicator--50e6e3ad-7e80-4f1a-873f-ec351e8d9b43", "indicator--c4e21e09-6e75-4761-a2fb-e307c3db4b20", "indicator--b28b8849-7e12-4034-b855-7082655a3e84", "indicator--a3d7c2f9-b36a-42e0-9eac-f1de7014ced5", "indicator--c9ff3850-eb27-4547-a62b-1a7fbe4bb5a8", "indicator--98853153-fb59-4d5b-8b40-cac42b709cb6", "indicator--e9500cf2-d4ac-4f31-bbd8-ca87bc4d7446", "indicator--68626521-e6a7-44d8-ae32-9b8371f39d71", "indicator--17c2bf6b-77cf-4c12-869c-c7240fab6223", "indicator--bc74c0bc-27a6-4014-b0f9-2694e083ee9d", "indicator--b948ffa8-dadd-419c-9429-da018a635ab7", "indicator--48eeb957-98e6-4858-8db9-e11febd42873", "indicator--92cb3669-280e-4650-a4b5-97a0babff01e", "indicator--fdfeaff3-7eab-46f4-9906-65807e50b76b", "indicator--9638c9f6-e8c2-4c28-a852-7c2a2257827b", "indicator--e03fdb59-268d-49c3-b7f4-071f826c37d5", "indicator--f7a7174e-4026-4ecb-9af4-bfecac2005ea", "indicator--950aa9fe-9a3c-4e6b-a36e-b950e9184533", "indicator--0f6d1722-eef9-4641-b3ab-345354d10df7", "indicator--208145d8-6b3e-461c-b736-323e6d869224", "indicator--deb0f790-9e76-41eb-aaaf-38ef97b127d4", "indicator--db6a837b-aa62-423a-8ecc-11108cbca306", "indicator--19a378e2-125a-49bf-9968-c6472a33dae4", "indicator--ecd8272c-3f99-4a11-a73c-060e7023a8b6", "indicator--235cfab9-e34c-42f7-832b-3006d953454c", "indicator--5b314c64-a749-45dc-8d47-e46a983b76f2", "indicator--aa756984-5bdd-4baf-bac9-804afb0b4fee", "indicator--6dec5b65-5e07-478f-824e-f2631850b0e7", "indicator--eb3cc186-2f4e-4de9-8e62-cef78c888ddc", "indicator--0215796b-c8be-4b9c-abc7-4987170fda8d", "indicator--82cff1cd-7962-486d-90ba-04b453fd38a2", "indicator--c9ab76ec-fd9d-4ad0-a6de-36644acfd642", "indicator--5de59d2c-8c68-4e77-9b77-2502784a4c3f", "indicator--408afffa-e0ec-468e-b649-1710fca3018c", "indicator--c8caaf93-db9b-4e87-9fcc-d001c8b19efd", "indicator--caf77915-1944-475f-852c-197d038a7e9c", "indicator--3f68d885-fbfe-4904-ba40-653ae9446ee4", "indicator--2410e893-9b51-46e1-a34d-53afe81aeba5", "indicator--b465e900-53e3-47ff-86c2-b0b167bffc3e", "indicator--8687e21d-533c-4e6d-b778-c7a23c2c742f", "indicator--cb13e3c6-b0c8-4565-84c6-e6c7a7211e5d", "indicator--bd176a8e-c341-40b9-a391-9e73de09a0a5", "indicator--a2a9cba1-de9e-4be8-9ba2-b416ea976de7", "indicator--a4259ea3-79f9-44fd-8082-cead9c5dcbaf", "indicator--d21ee5bb-acad-402e-8cdb-d6573c7aec0d", "indicator--3bc23c47-1360-4284-9b1f-46ce5be565d2", "indicator--6ca9a9f8-96e3-4318-ab3f-398ac311d0d5", "indicator--28485764-c768-48ed-acd2-09df6ad3d7d6", "indicator--2387c6d6-3113-494c-9f65-30b93fbe34d2", "indicator--b62ac6f3-2009-4c01-81a7-fe2125a5f8f0", "indicator--0cfa6b4e-963c-432e-9dda-21fb5f0b4897", "indicator--11576e5a-d158-4746-99c7-45a95ddb905e", "indicator--666dd8d9-f339-48ad-bad6-2052b59e2a57", "indicator--2da329b6-a46e-44e8-8cc5-7f180cf3d7d5", "indicator--2d838ab9-b58b-4405-a7ef-304e134ba46d", "indicator--c208c120-23c9-4985-89fd-2fbab4bc70ea", "indicator--0e077968-1775-4643-bdf6-739e32d1bfe5", "indicator--e3b3c2ca-9598-4c20-ae8c-8884e38b130c", "indicator--92b144a8-5c3c-47ad-927a-e26e4c803137", "indicator--bf32aea1-33c3-4ebc-862c-2b5cecb8553f", "indicator--60cc689a-c4f1-4ff9-aa6f-03eade3ee33b", "indicator--89d9f145-b5cb-4963-b582-855857f88236", "indicator--46deaf34-189a-4aae-b73f-9130f550137d", "indicator--1c8788e0-d5d5-40f6-a52c-a0ffaf5e6bea", "indicator--5e56190d-e7f3-477c-9d23-bfcb275ef06b", "indicator--e723d7bd-5829-4e97-8859-139321c381a6", "indicator--4bc6071f-e9a3-4879-a6a2-0bcfbe5161d7", "indicator--7c9b9e5e-cd14-4ee7-bec9-38ad61edc2f3", "indicator--5eb5b67f-c989-4219-bc04-225283c9654d", "indicator--7385c375-7736-4508-974a-bf2ef9c360ee", "indicator--b3985b6e-f25c-473b-a6d1-4eca2871f14a", "indicator--1a9ea21a-e1d3-4e92-aae0-f1a004098f20", "indicator--5916d040-b92b-490c-adef-1ad1681d0d85", "indicator--4cb581e3-7524-4ae4-b27a-59b9d989c16f", "indicator--923e078f-095a-4cd3-9e7e-5ab406a2537f", "indicator--b21bff73-0a02-4b23-b29c-9fc6dc920501", "indicator--8648cd52-7347-43fe-b142-427546a76dad", "indicator--b7736651-c0b4-4b93-96d0-3ecc861eaed7", "indicator--1cfa7586-eeff-436b-9296-8670cd1b86ca", "indicator--2eaff579-8d89-4db3-9e22-b1ea36ee203a", "indicator--5581c1dc-350e-4a5a-91d1-9b51543a3514", "indicator--b5a8385a-a85f-4610-be56-ef960bfdda20", "indicator--5f402078-cc9d-40fa-ab9f-76b668b3ed58", "indicator--5a591125-0461-4cc8-98f2-8b80b4ef6dc0", "indicator--0d7fb51a-2422-4957-83a3-c231c3110a11", "indicator--bc073094-01f9-427b-9499-c06e431300f6", "indicator--6b94139d-a1c1-4a4a-bbd7-b7f848e05ceb", "indicator--d9aa3df0-6952-4a47-9a8a-87049b387612", "indicator--014dc1f5-5ea0-477f-984e-abe217cc914e", "indicator--4ea2982b-10ef-48cc-8c3f-4d221a704004", "indicator--70c6fbf8-c47b-4ceb-a621-8a394482123c", "indicator--42ee13b9-1107-404c-8936-a3ce541e4d80", "indicator--1e824327-c64b-49a3-bf50-10e7bd069592", "indicator--87ce73b6-45d9-43d7-9823-2413d2cf934f", "indicator--8b6665fb-3a9e-4148-8a03-be3432f74c3c", "indicator--99bdfa5b-94e1-4d67-bc43-de70422b1f84", "indicator--f93f5a84-7070-4dbc-b32d-2ae3c4fa1eca", "indicator--32706951-ab15-4459-9d30-5680d34b5b9d", "indicator--43d6092d-744e-4aa0-9a23-94d2b535a101", "indicator--7906b742-ecb3-4782-9315-947ff322a042", "indicator--a99c1c6a-2b2f-4358-9394-a1c026ccac2a", "indicator--2e0e4cdb-f819-4c82-a085-7b87f1a5d9e1", "indicator--84ca4b55-8060-49a8-bff7-9bdcdc2b5083", "indicator--e9deee8c-f52d-40cd-bc9f-87bd786cedb0", "indicator--47dd2209-3a6f-43e1-812b-713c312662d6", "indicator--cdc281a0-110f-405f-8abf-44b714f1a186", "indicator--1e005f82-a2e1-49c6-a777-b1386df944b2", "indicator--faa874b3-d34a-4a6a-900e-2e0bb1862065", "indicator--7b644c06-50d3-4c81-b08e-bf3c0eb91db5", "indicator--cba4b1a9-4830-4a90-82d1-0d65f8724a3a", "indicator--0f8b1f95-18c1-4e9e-b899-be321b77d4d4", "indicator--bf6b449f-929d-49fc-852c-d6eef8bd310a", "indicator--a0d0cd98-411b-496e-ac17-40c720579592", "indicator--ffc0f518-62e8-40cc-957d-6038a08bbb7a", "indicator--b67b5d7d-a823-4b05-818f-07c182694fd0", "indicator--96c4a4aa-5481-4616-ad90-dda5ddb45c1e", "indicator--970a272e-52a2-46be-99ae-56cc87d23f59", "indicator--d1bcb345-02db-4f68-aef5-517663189ec5", "indicator--674304f0-fe7f-4b1c-ab73-47052f86d039", "indicator--4d063a0f-a183-42d6-9a64-eaaabe63d07e", "indicator--0e1a610d-ba10-4783-bb5a-db23ad4ead2c", "indicator--96935c6c-42ab-4a72-9de5-c8d3ebd044ec", "indicator--f0d0b938-86c3-4483-84af-f0ce37136da7", "indicator--55a21b46-dc47-43f3-a8d1-ca29d1ee223b", "indicator--39110716-7f7e-4498-b964-23240a1e8153", "indicator--1e5be31b-41e1-4327-b461-7a746467935f", "indicator--c9c9158e-8448-49b1-9d57-30eda527f9f6", "indicator--241d166e-ca47-439e-8a4f-409427ba7a4f", "indicator--5f2d5720-822a-4f4e-916b-20c5b05968fd", "indicator--58a77da9-2228-4cb6-ba43-f42c28e0fb06", "indicator--349e4b9b-3ce9-4f2e-9477-9d32cc12b277", "indicator--90156863-5430-41fa-8f44-22d08321d895", "indicator--4a51f9a4-8619-43fe-bdbb-a86786b30f4b", "indicator--e41fab60-5eeb-44a2-bcb9-fb97f2ef184c", "indicator--5adc9f9d-60ef-4e3e-abcf-17c8df81b451", "indicator--b4463689-2e4a-4724-a9d9-e227777d25d7", "indicator--7cb5c3fc-357e-48cf-a134-4edf666748cf", "indicator--3d8a21fc-df69-4ea8-9c7e-8dac2b9c9370", "indicator--5408dbea-d685-4624-8ee6-d5ece3593b1d", "indicator--5a139500-c006-4c6c-a121-b11c00aaf29b", "indicator--8a408290-fd38-4092-98a9-0c3bf5dc5720", "indicator--1cb774e5-7527-4d05-9b73-916da754920d", "indicator--c879b146-ba33-4499-8734-f307a829d2a1", "indicator--d7fa81d1-7d1a-450e-a115-cbe8bcc2d22f", "indicator--8e9959bf-12d4-45b4-8a24-a0682d65fdbd", "indicator--67b805e4-539b-44c2-88b3-32a18e374d1b", "indicator--b82bc29b-580e-4ff6-82d3-9bce7959f596", "indicator--43b612f2-810f-4513-a726-5063df4c2835", "indicator--7bea53ed-7342-4d02-83fa-eac4ae3e79d1", "indicator--4cdfa85d-6d45-4816-8c4e-56ee4dd97cec", "indicator--afbce668-7c6d-4106-ad26-93427f200cbb", "indicator--2aab8c54-c6e9-42c6-a08f-aee015877378", "indicator--797c4fd9-5151-4835-9b13-894d901129eb", "indicator--b9114226-004c-43a0-892e-dd4a11f45cbf", "indicator--1ecfbc0e-a1e6-4c50-a447-ac7787c47feb", "indicator--9204e5c3-59b1-4058-9bdc-c40b08c75740", "indicator--6c87101f-3d57-4c70-a3e7-e3cfb74ab41f", "indicator--7d76cee2-2632-4687-a0cb-5254b6851c80", "indicator--092d01e8-294a-4e06-9384-249257a42fb2", "indicator--fa018302-2e53-45ed-9258-e6c25948c9dd", "indicator--2237d27c-a98a-4fea-acfd-00d0f89b7852", "indicator--842caeb5-7458-4f44-926f-776595adb8c6", "indicator--0ce2668d-fe66-4037-a594-411d13e34d88", "indicator--984bed33-69ca-459c-8eb7-2a9e3151effd", "indicator--1b045d6a-f07e-4628-a529-087d7e95bba8", "indicator--9965a3a8-5279-4a7d-8ab9-e04db43362de", "indicator--93bc9476-c660-4d27-bf1f-b2b2850f1d78", "indicator--46b64040-e920-4076-b210-47114d273253", "indicator--ff972154-5770-488e-b8dc-66ea5ce67338", "indicator--165e8bb1-184d-44bf-a114-761f10033e7d", "indicator--5cca9827-549b-480b-a6c8-8739e69b2876", "indicator--43e9731d-72e5-4ed9-a2cc-ba21696a42ad", "indicator--32842133-6ca4-4971-9a8e-6d37e0f6588f", "indicator--fe471647-922d-4d01-9dac-58cd9d759215", "indicator--720cf87f-1271-4c5c-a917-148690561bf3", "indicator--08c48224-0613-4c93-80b9-f5184b106d3e", "indicator--9a3307cd-ad22-4667-bb24-bc38133ba313", "indicator--ea93e0ef-4c8e-4de4-91fe-8014d8f0de8f", "indicator--cb9c1784-5557-4693-a160-4541072501bb", "indicator--014c9118-63be-4c2a-ab5f-ba305ba0a014", "indicator--c74ad132-f4e8-4e99-9a96-f75f483d963b", "indicator--192ef44f-103a-4405-80bc-1a7711ee8bd1", "indicator--2832c207-ca39-4c65-9d50-084281024e38", "indicator--928a4ca2-0af7-4786-96e0-57b1a801088d", "indicator--8314e73d-608a-4e0e-a660-b32d49c9e4a8", "indicator--5d4c8a48-26b8-400f-b24c-f0d33df09ed7", "indicator--9b70860a-7c43-49ab-a3cf-c94531dad49a", "indicator--49bde9e2-91e7-46da-8692-82180e04983a", "indicator--a26edb5a-0747-4e14-889b-88b25eb83c02", "indicator--b2b7c2d1-d78a-430c-91aa-63588531c2c3", "indicator--ba3b0cc0-85e6-4a4d-844d-d6c2d26cf22b", "indicator--4988e6df-2ee9-431c-96d4-060343d9fd1a", "indicator--d7bb306c-a8fd-4af0-a396-d9d79401c37a", "indicator--634e88ea-cee7-45db-802a-d9a107b37809", "indicator--2a48fd9a-bba5-4af5-b675-c6f5536adb81", "indicator--f35b5b28-5540-4e66-aa84-2029209f7f66", "indicator--697f02d8-dae1-47a8-8627-923a3144d62a", "indicator--9ae4c0c9-fb33-4dab-bbf6-aca4bdd89b9f", "indicator--1f16fbc9-bee5-4366-a5a5-f9936857a734", "indicator--1298af58-8621-4829-bc54-19cac3b0d57c", "indicator--d2982f1a-aa20-4592-9326-f1fdcd926830", "indicator--1860fcfa-bc64-48ea-b4ee-a8e960766307", "indicator--d969e77e-908f-41ef-9332-13810e54d993", "indicator--a7816623-3652-4429-bbf8-97cdc3eef0d7", "indicator--c270bab9-1bb8-40e6-9a2e-9ffb603f4175", "indicator--8838f827-4a1e-4ce7-a103-5a060dfc7cbf", "indicator--85dcdb9d-db8e-4707-8d0e-86a5a878bdb0", "indicator--eb651010-e20d-441e-9b3e-e432d3176a38", "indicator--5ef7a54b-516d-4da5-864b-56e977f91d92", "indicator--7b012530-513b-450c-a271-bd855835908f", "indicator--22876bf9-1080-4478-af5d-ac627e7244e3", "indicator--8d78fdd0-6512-496d-ae65-e7a54e692570", "indicator--f53e0f17-de99-4d19-ba63-4b48b7801eba", "indicator--a8f829fb-2116-4749-9326-b8d13e92335a", "indicator--b5c7005e-59e4-4ba6-8da4-0fffd32a5732", "indicator--d86f276b-a70c-41b3-8fae-bb4695dccbba", "indicator--298beac9-2ee2-4899-8043-1a3469426a66", "indicator--803ea4c5-d3ce-4709-a071-da26aa8934e1", "indicator--2dd7ed8a-645f-4fa5-abdc-54522e63140d", "indicator--500ed352-a08f-4484-9033-0c4d1b339dd2", "indicator--47db7ecb-a8b1-48d7-b044-b7efe80ed182", "indicator--2e30d5a4-ea8c-4732-823e-c3ae69290998", "indicator--46d9cbb6-4ac5-446e-b60c-9dd223a96b15", "indicator--98e92d3c-8234-40d3-b6a6-bd83db832a64", "indicator--2830d41f-fd8a-4583-bff1-8864674d0e26", "indicator--c176e090-420f-4eea-be1e-c2dc0f633792", "indicator--583c5cb9-e195-48e3-ad5b-b4418010ce47", "indicator--c0d641c1-f56b-4183-a2ef-b7898fa50bd1", "indicator--dd467bf1-bec4-458e-87e8-e5b22e74b48b", "indicator--2dc94b7d-e63e-4ff2-942f-f4249c621f8d", "indicator--9d48faee-e6de-4a20-afd0-610887a6b186", "indicator--a291740e-2719-4313-b408-45a6e85ac5a1", "indicator--78da9b99-1a4f-4657-be19-b369bfcb7df6", "indicator--867a5484-a754-401c-8e7a-feda13ad23f8", "indicator--540272fc-b865-4420-9004-ceea9361f802", "indicator--2fb3ea2f-1e47-4b64-ae16-fe1fff16780f", "indicator--636213cd-4e6b-4f68-a0f4-5c004185d0d0", "indicator--10729522-b445-467d-9f12-47b34d963c86", "indicator--193b12be-9fac-4b96-8905-8304ecaf7a8b", "indicator--5ea7f924-bc3d-4228-8630-8d8438cbc516", "indicator--60d1c8d0-f763-4ae8-b49a-e88ba6fc07f2", "indicator--2fdf6457-b86b-4bc5-9cf4-8b54bb17f18a", "indicator--6b84cead-71d4-434c-969d-fd5b4267fb17", "indicator--2e2ea166-3a84-402d-9421-40edecdec45d", "indicator--5ba11413-13cf-440b-9524-094fbd46f8d0", "indicator--a3aac7a7-005f-4deb-abc5-87a77a07b4fb", "indicator--173f8e72-bc01-412c-8682-d13a687e4905", "indicator--2b489ff5-0588-409f-8616-b47fdc7d1dfe", "indicator--b8d3dbbf-e78e-49fc-a8cf-2f00c2386cd9", "indicator--f14944d2-c852-4b99-8491-29a28e379706", "indicator--5d427afe-1479-4b20-9f92-2e9c400863a9", "indicator--3726641d-fac8-4ed9-9488-b3bb483e5c82", "indicator--2661f5a6-c54b-4733-a6b3-828609009e01", "indicator--3f0e6387-89b6-45db-958e-105661e08f37", "indicator--ad33cb0a-1b67-4f19-a5c8-6289f2f65a22", "indicator--258e1199-8034-471f-97f3-9560a8020572", "indicator--7277baf5-65b5-484b-b0d3-40055ccffcba", "indicator--664c45c1-671a-417c-963c-ef639e67714a", "indicator--d4c9d21f-7f25-4e63-9580-52b11df0bb04", "indicator--cfc31db5-f0ca-49f0-a89b-e9645cd6d413", "indicator--3a67d6ca-8e83-464e-8d43-2ee81c08dea9", "indicator--f6265888-a385-49ef-bb4e-f3761a6490b7", "indicator--746f1594-64fb-43b9-b891-945d277312ec", "indicator--2ce1ba0c-e21d-45d7-9fa2-4e2da4866756", "indicator--0a4a5b09-6571-4d7d-9276-a71ace121186", "indicator--cb31be10-b2a3-4c5e-b7a5-c9b52b175c87", "indicator--4433496b-4378-4b54-bb39-465a724e1ed4", "indicator--05dbe49c-45f5-4f8b-a88e-d680dcaaf4b6", "indicator--c2e7c6a6-9a45-4863-a9a6-d982fee467c8", "indicator--007cbe46-1aca-4f66-8c1e-0b69d811d91f", "indicator--2f330939-aa62-49ee-908e-6a3c776936f7", "indicator--f2f7dee7-c210-40a7-8c61-6e7c64f7fba2", "indicator--6e01ef99-276d-49a9-82f0-cdbfaf6b0153", "indicator--2081877a-0285-4198-83fc-ae78db5d4803", "indicator--173c5a26-6bb2-4af4-b1c7-10e2858421be", "indicator--8846b406-8ae0-4f73-8f3a-c5d580546608", "indicator--9f363860-f855-4f55-ac6a-d73dc9f7b093", "indicator--ff2d3407-61d9-47a5-ad1f-5cb3dc642e73", "indicator--341facd1-1f1a-4bf5-93ff-1fa7591d007f", "indicator--68a923f7-36c6-48da-98eb-6e1a988044ee", "indicator--d1d21365-3e01-4f98-9852-5affad8d6d40", "indicator--cb4c4673-ab11-486c-b2b9-88398de138f0", "indicator--cb451dd1-e370-45b9-bb9c-10439a9fa939", "indicator--e76a765c-98e4-4edf-b491-a6fed3a96952", "indicator--9996e579-d06a-4ef1-9459-3a46bf5462ff", "indicator--e201d7f4-7295-4441-9064-3ab3de9585ca", "indicator--fc71d426-1110-4882-87b8-851665333b95", "indicator--a3eeb8e4-0930-4d8f-83f8-a5efdbc44ed4", "indicator--6e7967c7-63f0-48af-b1b0-40ac3f740ee4", "indicator--876f3018-7723-41c0-bf5a-cbc9a8342bb1", "indicator--f1798ae9-3678-4281-80ef-65e21ec56749", "indicator--81dca7be-ed54-40f3-9845-98ac65f74fcf", "indicator--f3c5cc7a-9b52-4619-8ce6-6bfa91e3dfb5", "indicator--462c2668-49a4-49bc-8242-cb07caea770b", "indicator--dc33fcd1-b61c-459d-be9b-73bbf467a380", "indicator--454a6bfa-724b-448b-a414-3adf534f98c5", "indicator--d65545a5-4718-4d08-87c2-4a73655a055d", "indicator--21b63aed-8e49-4b10-ad33-e77060801eca", "indicator--8cd3a11d-e37e-418a-93fa-5e2bb801eda0", "indicator--71b23fe4-ae8f-4c58-8dd4-f16b6884c206", "indicator--c5abd64a-7d97-473e-8540-4c377ced16c7", "indicator--61342971-6a0e-44c6-9195-194dc3a45acf", "indicator--453d5141-55f1-4a6f-b87c-6dd061ca1388", "indicator--676390ce-d591-42c6-aa73-a8ac45bedbfa", "indicator--39c60b65-1bef-40ac-8439-96c372f47f84", "indicator--ce804815-fd66-46d8-9b97-244f1e122230", "indicator--cd82f441-c5bd-438f-bb1f-3f403b22fe01", "indicator--60bb7c1d-6739-4d07-825a-c5eb8cc81a1e", "indicator--0f06a9e1-e2a9-4889-8e1a-a139b3f634a3", "indicator--02156d27-9343-422d-ad2f-33f04dbb15b9", "indicator--ed2c1dc6-c115-42cc-be05-77a2638fcfbe", "indicator--e17444ce-f33c-4f3b-923a-25f1f5874514", "indicator--01354cba-0fb1-4417-9870-8a7849ec7313", "relationship--5c7dd814-fda6-44e6-8013-fde8184f046e", "relationship--0d8e4c39-fb61-49c8-8966-32d4da12c664", "relationship--d609631f-1a65-4fa4-9e7c-28d4385d32d9", "relationship--b0362b99-6bce-451f-8a8c-932661eec368", "relationship--e1c92943-8536-47b9-98d9-883983976cf6", "indicator--b0c1fd19-88bb-4979-b3eb-fb06dc46cc2e", "indicator--858aa624-8905-4fe0-a94a-4e9350751dd7", "indicator--dfdad440-8550-42df-8c46-4e5fb2c8a3fd", "indicator--ea341f04-54fe-4fa2-933a-3ddbd91884b4", "indicator--a7eff1f9-b788-40fa-9b49-83d063b702ba", "indicator--92722f23-2226-408c-b45b-14b524e86171", "indicator--46e2410e-5de4-451d-b103-17ac65380440", "indicator--b70e7a4e-c8a8-4b65-9bfa-2b0d584e59af", "indicator--ba04d9e7-5960-4ff0-8974-2dcb99e3fd5c", "indicator--144b0bc5-7472-44df-96dd-494eb4ce26b7", "indicator--3692733b-1c4c-4bd2-b1ca-a0310061ebcc", "indicator--8f3fd198-824c-40b6-8f39-3bd53b2a8fa9", "indicator--aa4831af-e359-41c4-b6dd-5df0ea3f0dcf", "indicator--5acaf268-a40b-4fe2-82ea-d8dfa362000d", "indicator--521260f0-f685-4b78-b1d7-c228a9f8df70", "indicator--bcf926b6-bbde-48d0-9652-ed2ea682d72c", "indicator--1c2dd415-ca55-45c3-a87b-afb780d48f03", "indicator--680c0cd0-6726-4076-8bf3-c8497fcbabc0", "indicator--046d91d8-6cb3-45a9-a7ab-f342aba7f6ea", "indicator--efbf4ef5-da30-44d8-a1fa-64b8c2fd2497", "indicator--b66f14c9-a170-4050-9708-f84c733f9657", "indicator--4b1b1335-4a14-4d0c-a773-b1777bd2ebdf", "indicator--1ae4ef2d-e212-419f-bf4a-bf51cfbe18e1", "indicator--44a83a0a-890c-4c93-b05d-1e9bc066aba4", "indicator--e9262578-4851-48c1-be4f-7f872bcd2947", "indicator--03c3a1b3-5f9e-4595-ac53-0668870af4bb", "indicator--63c110c0-8e2d-4d45-81af-7286167e946d", "indicator--4d327fbb-dfe8-403e-9600-316fb094c968", "indicator--f79c6af8-d66e-46aa-8268-c4090b3c6d4b", "indicator--55ced7e2-c150-44c6-a6f7-8a448eaf5401", "indicator--5ec8f535-3ac0-4dd0-ac71-d3f0fcba23fc", "indicator--16d029e1-c71e-4b45-867d-8a526e5478f4", "indicator--0ea1a56a-bea5-4794-a0cf-c79a4ca999ef", "indicator--ca217827-0181-49d9-bcb6-96003f6b09b5", "indicator--5049ccc3-eed4-4f93-a911-5e07e4316129", "indicator--1942bdde-d1e9-478c-af94-4bd9e836afcb", "indicator--ed79a72f-9be4-4d5c-b86b-77dba9b18455", "indicator--428487f4-d160-4f36-80e9-159371a5465d", "indicator--70c528aa-cbeb-4909-9de4-e706eab8aece", "indicator--57b6ff41-6944-42da-b21d-d996644e0292", "indicator--ba87ee0a-ba77-4aef-aaa1-5b42f019d466", "indicator--933b9978-8c4c-4ef8-b997-85d5b59cb511", "indicator--14984807-34e4-4e1f-9652-7378506692f1", "indicator--427c306b-b8ed-4271-ad28-99d3b97f0e66", "indicator--4fe7fbb1-6d8c-49ae-883e-2b8a70f59124", "indicator--2966c341-b8aa-45e9-b8ed-37c1b28f70b5", "indicator--3a50053b-926e-46f0-b8f1-2527f5729c4a", "indicator--0e02df12-4966-47d6-9509-11fa57e975d7", "indicator--282d9ba9-3273-4846-b835-1cd6b79c32f4", "indicator--48471b2f-7a3c-471d-9c06-f5beb7f36598", "indicator--3b600ba5-8831-466b-ac52-6c5a9436801f", "indicator--986241ba-b981-4d94-94c8-f390ee200175", "indicator--7ad8f2c3-4bbb-4110-817c-be1320244e6e", "indicator--1f799988-82cb-4e4c-9fe0-ec97a04f8475", "indicator--69cf18b9-7a4c-4d91-93cf-45c54f90d537", "indicator--42c6a2d6-5c85-4f28-b3a5-422872c3a20b", "indicator--28360489-874f-4de8-9270-8c030319ee1f", "indicator--f29503a0-ba11-417f-8066-84bf45f572ca", "indicator--d01f9e50-4d90-47bd-8128-c96cca7a4f36", "indicator--7760a5f7-2e43-4364-87c2-6578063f5a28", "indicator--bebae84a-b137-4565-a118-fa4da61785df", "indicator--bb7b4888-1057-4332-8cce-733ff9571c7a", "indicator--79ee2f2a-9626-4c18-836b-2371d1766c20", "indicator--d65cb67a-c1c8-4cb1-b62a-f899fe5be788", "indicator--c9ede593-6196-4ef9-b09c-8c563f7c341f", "indicator--f9c2462e-7f42-43d3-94b0-fd20c55ef42b", "indicator--35e5ce2f-a57c-4aa4-a590-d5a48dee3198", "indicator--36273801-4bde-4c09-8cc8-df0ff7859c70", "indicator--ea5bfafb-6f78-4c3a-a388-20505068f5fc", "indicator--2808d0bc-f4e5-4639-8cbb-ea769697ade5", "indicator--d581b21c-420a-4497-98c2-08cba8ef4338", "indicator--add0a5f8-c7a0-4313-91d4-ced8ed284423", "indicator--7ba13014-168f-4515-ba27-1c44b8b0433d", "indicator--b9e31658-5bb6-4ea2-8364-ef2c32ae7357", "indicator--1a6e026b-6cc1-4ada-930b-b57401fc8a52", "indicator--a87c6c97-02cb-44c7-af61-bef4c81f8505", "indicator--3f84d5a2-df53-4293-bec3-597ff16eeae3", "indicator--d291080e-354f-4e2a-86e6-adf0c3dbe178", "indicator--f5b3c3a3-ffb5-4ed7-93a6-552e1a74e2f8", "indicator--c79157d6-808a-42ca-9827-52f4ae33e695", "indicator--9b59bbc4-275f-42ef-839a-eef5af6c354c", "indicator--8d79f54c-c074-43af-a1c9-75b8e5ed7e3b", "indicator--46575fb3-80be-471f-be70-af707a920b43", "indicator--bcf57c3e-baa4-4f09-93e7-e5a5c32eeac5", "indicator--2f052d43-222a-4b17-8cf0-9a190c76dbff", "indicator--57b9c50b-5968-4189-b76b-4a8501f85a82", "indicator--9cd3be32-e4e4-4292-a992-afc2f3114f90", "indicator--1d42feb0-0ead-4d04-9ed4-696f9ff3b7b3", "indicator--7d54efce-c19f-498a-a5c4-594623aa2286", "indicator--8198966d-1ee2-4404-a614-6228c49e67a3", "indicator--e7c6bc39-a53f-4d3f-861a-7cd0f9ec08b6", "indicator--bc8e9cc7-a4b8-4bad-a956-a560e1346aa1", "indicator--cb55a503-71ac-493c-bf66-b6af1aba0f7a", "indicator--ca420998-f275-4674-a152-e825a8f44bf7", "indicator--22a52d16-c80d-4d67-a64a-3e8f84fce6eb", "indicator--4f347f50-465b-4ab7-80a8-d807691fedcb", "indicator--adef7bda-91e3-49fe-90cc-60d3cae1e6b8", "indicator--b599c27f-a72b-457b-b89e-9e68460c12ec", "indicator--9f723a41-e306-46a0-aef8-3684c22d7812", "indicator--3394d1d4-b6a9-4e61-8f82-bc2510450544", "indicator--5d083146-c8d2-4a7e-ac15-59d490b422f4", "indicator--725475f9-beb8-4c9d-b076-70e01e91d20c", "indicator--5e94718d-4a57-4fef-8488-4c6e7ce9fe74", "indicator--6c8008e6-3dc1-4db3-8bb1-73b64d2bc1ba", "indicator--64de8e43-4fb9-4203-a020-78cb1f1169b1", "indicator--e81caf38-1de7-4ee3-acf9-cceaa5fa7b5c", "indicator--065295e2-9166-4738-bed2-bea94776e90c", "indicator--3f372b27-e472-4205-8393-463ccc18adf4", "indicator--78594ad7-aff7-4327-83b0-1f6100ea5b6a", "indicator--4de427bf-86db-42c0-b36a-952db9604153", "indicator--1d39f698-fea3-41a7-b627-7c2ed3ea5abf", "indicator--28178ae7-e112-4c86-907e-1fc39f3cacd1", "indicator--7956bccb-3654-4412-a929-927326916ad7", "indicator--5b96c858-8387-431f-a125-8a0dcf7abb73", "indicator--3f7cf9e3-b41e-40ca-a06a-21ec542c7a37", "indicator--71c14607-3d32-4801-931a-f07033c22ac0", "indicator--e501861a-5ddd-430d-aaab-8bfec6058e54", "indicator--f317b49c-f83b-4bf5-a10a-4aefdc9d3a84", "indicator--cc659a8d-dbc9-40e5-8dd9-760a5fbf5d4f", "indicator--ef09994e-1ade-4a00-a5ce-7bcc904fa444", "indicator--d29b8ceb-be29-4f48-ad05-f3d0bab6d2c9", "indicator--abad78fe-ae05-4ee9-8dee-b13628bb733d", "indicator--ede015e6-2fef-4d60-b233-e6ce28d35229", "indicator--339c63ce-4be4-4a6f-b8a2-138c8f29c73e", "indicator--c184bec2-dc35-445f-b43c-9db628fe9af8", "indicator--5723075e-e92c-4145-87f3-169c86ff7e30", "indicator--8104645b-c163-4a7d-b9b8-e3c786011308", "indicator--753c0205-38b3-4697-89f5-ca10a3ec5fc0", "indicator--a4d0d429-06eb-4b0f-a7a9-bf99c683c2ff", "indicator--be5e3f38-a3d5-4267-b1e1-442ea9e2f4da", "indicator--fbd3eaf7-4c98-4a12-821b-a1bd9d218c84", "indicator--17a3caa7-cb6a-41be-a0f8-0bde078376f3", "indicator--95b1cef1-f785-408f-82e1-c9b57278ae8f", "indicator--18c88a3b-04c8-41af-8c46-8d7e04d8d5a4", "indicator--0f24ec6e-1778-4824-ac27-948a5326e02d", "indicator--0481d6b3-8521-485c-beea-2a2cb1116dbc", "indicator--7a178686-0458-41f7-aa86-ea66c0811dfc", "indicator--f434ebed-8dad-46f2-86f2-d6c369dc4958", "indicator--5527ba08-519d-4073-bc7e-d37b9387c38c", "indicator--806e30ad-cce0-4c5e-b678-942963692fd5", "indicator--e1549c87-51a3-48d3-a22b-16668a48cfe1", "indicator--83e78129-c128-4668-9b0d-5413a3f5b3d7", "indicator--b0a577cd-c635-4d3c-9040-742f826a4e12", "indicator--2b065fdb-9d04-4b97-8a25-bbaab71ed186", "indicator--9ff01328-e489-46af-a030-864eca62f656", "indicator--5c0a6b61-298f-49f3-914f-440dbb08f072", "indicator--0ec88eb2-1bad-411a-994d-12588eaa1007", "indicator--5a7d7ebb-55fc-43bd-bc27-68c3780eec23", "indicator--604014ba-6c89-4463-b86b-9dca6087090e", "indicator--e1f27aec-43f3-45fd-a710-08386cddd261", "indicator--a6b6db7e-ac73-4779-b386-6fa9320179e3", "indicator--5dd8d1fe-0a36-4738-b8a8-9a2b3f7dff88", "indicator--adaf5a19-5161-4936-b572-d3dfdd7c4c7f", "indicator--ba8f14da-ab89-47bb-afd6-c4160d6aebee", "indicator--6dfcbc88-c2f9-428d-9ce3-a94023b04825", "indicator--c97a3b8a-49b8-417e-9167-8607afd522b5", "indicator--c4dba3c4-1435-49e6-a163-4a7eabd961d4", "indicator--d872dd02-3122-4f16-8757-d7e10871264f", "indicator--7a53f059-1c20-4bf4-8199-66b33706cb3a", "indicator--6a4b079d-1955-46e5-b02a-84baecc32036", "indicator--ebc970d0-0af0-4abf-a6f7-07bd72fcf0c5", "indicator--ab633deb-cf74-4306-bdee-194be4697427", "indicator--4d1ff0ac-5498-47d3-99c0-22fe291b6e02", "indicator--05ffb7d9-f106-47db-8462-92af133c8103", "indicator--76a8922f-ef50-4c78-b50e-fd44d64aeaaa", "indicator--e8b8bca2-f7d3-43e3-a808-4bc07f6abc51", "indicator--2262302b-c19d-44c6-b471-327799b9c69d", "indicator--c45549c8-e398-4064-a38c-d48c381df1b1", "indicator--db1f8352-5d49-4781-abc5-0a5d6f107a8b", "indicator--a7b27318-7fa1-40ce-a991-e64ba9a08b1c", "indicator--aa77b825-d293-494f-97c8-f7ea1bd6121c", "indicator--03ba7d67-de22-4e44-8a39-1f62d05e0d84", "indicator--9cb031cf-cff4-4495-9020-cee1090656cf", "indicator--96a96f6d-18c0-4e00-8b7a-14896efbf670", "indicator--24835755-3c1a-4800-9113-41814d44652f", "indicator--725171ef-ca46-47bd-85fd-e73d2ff85444", "indicator--9dffaf62-1ab3-48f6-8cf3-5451a5575ee3", "indicator--8a76bc03-3495-4f44-b380-f59fcd725b02", "indicator--23c2aba1-a63e-4883-89ea-7f6ca9917cee", "indicator--3696da0f-6aa1-4eda-a30a-3616f9af5293", "indicator--92723fef-6357-4461-a3fa-5e939917234e", "indicator--e61b295c-da19-45ce-9529-78a1a66caef0", "indicator--9220099c-4240-4670-bbe7-2235b63bfd6e", "indicator--a3cdc96e-9b24-484f-80a1-d0617bc037bd", "indicator--33bddd58-413d-4ca2-9b79-709edcee927c", "indicator--32c4c9e6-2282-42a1-8d48-85876591b749", "indicator--5f583afb-25fa-4edd-9ad9-2fc215b3b5cd", "indicator--ddb1ea6d-937c-4269-99ef-fa938edc42eb", "indicator--440e2d53-eba9-47bd-95cd-4504a118d822", "indicator--838c4bba-982c-42a2-852f-29baff8c4798", "indicator--59f00d93-d652-4874-bc49-35f4dfabdb47", "indicator--3dbcb1ce-a31e-490c-9898-5317aec90438", "indicator--f1670ee1-15ae-4623-bbba-069f51dd3cea", "indicator--3b44ec71-1b0c-4adb-920f-d27e82fb4e42", "indicator--4e4b695e-a526-4993-8aaf-3610e24fe871", "indicator--7862b7ca-93d1-4519-a14e-1e87c3732433", "indicator--bfec0582-9815-4b8e-b831-ad0ccc3898a4", "indicator--825b18ee-b888-44d7-bf46-fbe80afe321e", "indicator--9a7d361c-e03c-4dd3-8e77-4b76bcd17381", "indicator--6d540b64-b11f-49b8-bec7-ae9e2ff42ac9", "indicator--b6ab9a48-5275-40ec-aab2-561a835e17f9", "indicator--40994c6e-96f4-49a2-a1e8-0f1f115d3c96", "indicator--2f355759-d22d-434f-8225-2a4c44d9f45c", "indicator--7f108846-638e-4743-b8d7-5b43876c9e95", "indicator--c2c0d631-f0cc-40f2-8568-1964c2797fa2", "indicator--7d2a2c9a-08f9-426a-ae40-03393e9b80ac", "indicator--5ac90095-a787-4be4-b734-d6db885acdcd", "indicator--902f7d6a-575d-4e51-8b0e-a0fe1066ccda", "indicator--9b9086b4-f6e5-4db7-b959-952e0793c021", "indicator--d2282b00-926a-4afd-9496-e03ee751997a", "indicator--67e2cd2d-a634-43d4-ac84-c7bee8defb62", "indicator--cb1764fa-594e-4de3-8fdb-3910cec2cfd2", "indicator--5302c48a-4bd6-47c7-a989-732c03f27649", "indicator--05612d48-9deb-4987-9f6f-2f39ff2620dd", "indicator--c55fe0cc-9884-4bfb-a6ce-159b102421a4", "indicator--070f26ef-406c-418c-bc7e-04739d5d357e", "indicator--75d95742-c226-4881-b072-72cea0f4b644", "indicator--22d999af-dba4-4e5e-a9db-becf82f1dc17", "indicator--d39d4e5d-7452-4740-84da-8bd40899c3d3", "indicator--77fff072-4548-4fec-b4e6-6fb02eeeac8e", "indicator--0ce1c3ab-c661-4c79-9cb0-f20e4e2604d7", "indicator--a8f43b82-e6f8-452d-b108-aaa085b844de", "indicator--be8be7ed-35fa-4d26-8a03-14302304b84e", "indicator--d709259b-e2e9-4d3a-953d-fa2a9bcfd763", "indicator--d1dcca36-e809-4021-8aed-1439b4d29915", "indicator--7618181c-8521-435a-b486-05e7ac230021", "indicator--ab254127-bdc9-450b-b7e5-8d4c3fb7a56a", "indicator--5e5b0dd4-139e-47d4-b4e0-64a94a27423b", "indicator--9278ae50-7ec6-4be9-af45-670158690c25", "indicator--5d621d10-80ba-41a1-a167-4c18b190913c", "indicator--32bc4134-06aa-4033-afdb-49629591871f", "indicator--05b3ae89-27b4-4985-85f5-530c2166eff2", "indicator--96fd8eeb-ee97-4b35-aac6-6c75763e090a", "indicator--e5ec5113-fce5-449d-8fde-cac3908afe96", "indicator--7251ad0e-ab6f-4927-b4c0-22865f6f3cb3", "indicator--934c148c-a88a-4ece-a952-5aecd6ea3803", "indicator--0a3aad0e-908a-4f5d-9241-99e7ed7116cf", "indicator--6ede996f-94f1-4ac2-8db0-60c27dae6c94", "indicator--3ec47f42-2131-4bf9-87a9-d477369ec614", "indicator--9646b513-f153-49ac-a2a1-ecee6d41e587", "indicator--ca7c5417-a2cc-41ac-ba3e-4a2a9b6df87d", "indicator--2ef8a18c-4534-4394-a16a-2c303697d520", "indicator--5f6fb892-705e-4e36-b875-0a1d1fcd2032", "indicator--5672d00b-6026-4998-948c-5f61b6467e09", "indicator--d6ece326-8941-4db0-814e-131fb07e3cd0", "indicator--eaa79aa9-13cc-4d23-bed2-fe4ce8b10fb5", "indicator--1e569ce7-9bdf-4bb7-85eb-703f87388157", "indicator--0b8482ad-31f6-4ecf-a764-6dedc0d12c82", "indicator--d9413eea-d272-41a2-a5f9-a5c33b93b7b9", "indicator--6a5cb2ed-530d-42d0-8d9d-734a01cbd992", "indicator--ab13fb59-e7f9-4e95-b622-59a486d12e66", "indicator--50f882ab-e47c-4301-acbe-0646ae152558", "indicator--879f2306-a933-48cf-8ea8-96c38ebd5ac9", "indicator--20023945-7915-4d34-a395-7584dc56421c", "indicator--e57befe1-5584-485c-be57-bf62f3d0bdc2", "indicator--3643e5f2-ff6c-4109-a45e-1256360b557c", "indicator--ec98be0e-3a8c-4666-9771-5643954178dc", "indicator--67c2b7ae-5e00-4a1d-8437-078e193d0f65", "indicator--10fa4fd9-1eb5-4400-a29e-aab9081095ec", "indicator--fc47d225-377b-43d0-817d-5a095ab7bf74", "indicator--b575ffa1-bb39-49de-be30-f601c4723a54", "indicator--6e1a7b09-d9d9-4256-9e90-0f0805ddb4d1", "indicator--a6638e54-7008-4ae4-b49b-7477420abd5a", "indicator--3c7f6bc7-d79a-491b-994f-994d4e9710e3", "indicator--e6c481d5-859f-4c7b-b922-8b70260e796c", "indicator--23163028-1788-415c-a001-d32488598569", "indicator--bae79ce3-a283-451e-a332-ecb82fc210eb", "indicator--b73b574e-edc2-43d5-9c1c-3a69090a8b28", "indicator--f83d314d-84ed-4fa9-84e2-161c8828995b", "indicator--b8fa57c3-b4d5-4fa6-88e9-ad2357a42c71", "indicator--2569c756-1934-4f3d-8dd1-405028d1c7a1", "indicator--9303eef7-2750-4825-b049-1440fbcf2956", "indicator--5d132d7e-b5fe-4bed-a782-ff5fb6543452", "indicator--6c439a90-6dd0-49bf-b88c-67f85a4ad37b", "indicator--be179200-df9f-4502-93ad-654298a7be25", "indicator--7d1f5adc-0551-4ae4-b646-bac2cf05278c", "indicator--56f7a111-da9b-4ce4-9973-cfa116616341", "indicator--91b83a58-e701-4c02-83f4-6c4286cd2d15", "indicator--91b76ca0-99fa-4589-9316-a9935b4f9f77", "indicator--e339ced6-b56c-4a1d-bf1c-33777d4f02ed", "indicator--a6e92602-681d-4c8b-bc7f-851681a3e941", "indicator--3cee66f1-5519-47ed-b7bc-d532932b8ce9", "indicator--85517047-d047-4af1-97a1-670957fd1255", "indicator--63865369-6d8e-4b70-a5df-abb97fee52bc", "indicator--c16e6cd4-4800-4572-b73a-2d28198d82f1", "indicator--3d5303f6-5bb1-4174-adea-50e01c65a9dd", "indicator--06bb9bba-ad19-4704-88e5-7b6a312bfc58", "indicator--2be283ff-b842-47c7-a91a-b0471ecbed3e", "indicator--b4d097fe-654f-4e96-afca-f595f7647671", "indicator--8e4957aa-796a-4891-89e4-0215c3801715", "indicator--17171d71-dbf0-4fc0-a89d-ab94135e95a8", "indicator--b19eb87b-4667-4a51-a312-217f8a9836c6", "indicator--dfea7af0-6e13-4859-bc18-759cdcaec869", "indicator--ebb8ab9a-0c0a-4277-8cba-04bc7c5441b2", "indicator--ab0f058d-06de-45c2-a805-67489864b2da", "indicator--91d2be06-16de-40ad-8f9b-b5ff400b7df9", "indicator--2dfa90dc-48e2-457d-ad71-ca414e816a41", "indicator--c11d84e5-5241-4bf6-a2cd-717d4788964b", "indicator--7425a9ed-fcb2-498b-8b79-f522655b3842", "indicator--ec1ad9ed-917c-4d2d-8fcc-599656b498c2", "indicator--804d16be-b60e-48a0-ade2-fc46e3bd8f1e", "indicator--03b8eaec-d3bf-4e80-ae00-7bb478b86a5d", "indicator--f7f692ad-2625-4e7b-9a09-e7dbaf3b5716", "indicator--092c080c-6577-48f2-bddb-a667aceaaf0b", "indicator--e78c11ad-c0d8-4d55-86d0-a7002f19f011", "indicator--fdc349a7-fe73-49e5-b73f-e39c147aba2f", "indicator--73752150-e001-4eca-b413-acd5c8740083", "indicator--25004236-c693-4f51-ab02-f37ff9faa097", "indicator--0b9d34d4-3099-4c74-9d95-4dd706727375", "indicator--ae72c0c3-4ae0-4d1d-affd-409c6b5bd693", "indicator--d34a6af9-9f69-4448-ae95-aabe37fe9d33", "indicator--62b1a78a-729e-4ecb-babe-31aa51db2427", "indicator--1b5a2d2a-b20b-4037-8fe1-1cf3b1770279", "indicator--d0ab42d7-e700-493a-803f-a28d2d6fb29b", "indicator--7297d491-147c-4cdc-88e7-ae7f3ee1769f", "indicator--95ca4299-4b04-4b4e-af61-cbed66ce645e", "indicator--56a9cb27-b0cb-42d8-8f33-b0b28e1cd3ac", "indicator--d3ae4c53-ff81-41d7-a34e-8687543795cf", "relationship--51a5eac7-7da1-45c3-830d-f77434789038", "relationship--7afe3df4-162a-4408-abfb-db90ddf8bdd0", "relationship--74b88ea2-6199-40da-9c5c-f8767a8b8fba", "relationship--013c35bb-b777-4057-b11d-95f2731906f3", "relationship--0eca1166-1e63-4bf1-887f-7e0ef9e1f078", "indicator--10b9fe53-b53a-4076-8d32-70aa6a1acf19", "indicator--affc0efb-878f-4eb6-9391-699f73a02cec", "indicator--2ebd4357-f419-42d7-87b1-f6d96ec2b131", "indicator--51fd0e66-13ee-46c6-be81-9ae50213b029", "indicator--ea71904f-9ca3-426e-b57a-8d29d9bf2ef7", "indicator--1effdb00-f263-4df3-9916-83e37e9cf603", "indicator--7cc42524-84bc-4b1b-be92-e8d3449ad868", "indicator--266ea21a-b8af-4973-b3e4-f865ddcd57b5", "indicator--af956f47-ed3c-47da-925a-75eb4018b533", "indicator--768c1cec-d589-4d17-914c-8bc3b449d9d7", "indicator--25cf8343-c201-49b9-ab0d-078cd370100e", "indicator--a6b59114-259c-4159-8ba9-39949dd2d190", "indicator--94565676-8e3f-4989-ae45-46f730facf66", "indicator--673f0f37-6918-4743-b44e-7e619cba169a", "indicator--0df6337f-352f-4c9d-83fc-a2882b515b4a", "indicator--41cd3703-857e-4621-9a85-40f19555d333", "indicator--7f92ae9f-c8d2-4f57-9765-dbf5ce5862c1", "indicator--6a4f4a76-398d-4d78-a8db-458dc83d43d9", "indicator--df0f4ec0-5faf-42ee-af40-5c489f43b6de", "indicator--cd2afac9-c843-45d5-8cf8-1b6a6df3f7e4", "indicator--4e0a5f07-efce-4941-97fc-2a7739536f7e", "indicator--97f1c5f4-02f5-4259-90ec-96d1e31faa96", "indicator--edc0709a-01ff-4648-9aa9-d6643a2b7b02", "indicator--e7b8f3ed-b90a-460c-94ee-7df682a4635f", "indicator--4bc57ed5-db8d-4872-ae65-28e0c62f6f0f", "indicator--9f044267-7e75-4c9d-90d7-3ab2da5ae8d9", "indicator--73987b74-6515-4bf9-8d4d-bfe9c287b4cf", "indicator--eaf07f71-bfb4-4dec-8196-d4cc25726722", "indicator--9c489726-a6b7-46e3-8027-a8897b164ece", "indicator--340bfa47-4a4f-48b5-8863-5bbb0e3a15a0", "indicator--c9c606c5-9f36-43a1-8ccc-29bd18ee0963", "indicator--37af10ce-837d-4a1b-9559-e3fe759543fb", "indicator--ddc3f7f2-ce78-4124-ab87-8a711a6de74d", "indicator--6405ab4c-4cd7-4ff5-8630-a6108478967a", "indicator--3d045f3b-5c15-4dc5-8e91-1e85e32bc539", "indicator--95c7031b-26cc-4735-a65f-62e9386080b3", "indicator--04af4b6e-ceab-48f8-bb0a-07deab746a4b", "indicator--7874feed-2391-416f-b9ed-0bd77eb6aaeb", "indicator--13e791c5-0e95-4e17-9533-83f2cc35e8a5", "indicator--97da200c-f83e-47e5-9b61-ac2ca4ef87df", "indicator--58033c88-76de-4e58-83d8-29f209824b32", "indicator--4b1603fd-cb8c-468e-9153-b1782e8a60d6", "indicator--6d31047c-b733-4326-a80a-d3694c611a72", "indicator--c649834a-ebce-49f1-aa29-795f402f63df", "indicator--fe911677-dffd-41de-9d37-f9ba69196a22", "indicator--59cc6335-5e66-422e-9962-a7816e17b716", "indicator--83bfe9cc-c615-4aeb-b3a4-ed5daa8944b1", "indicator--3944ef1f-a4e6-4afd-8a1f-2dd19e89283d", "indicator--459f2959-2062-4930-b912-10e2adfcb420", "indicator--d04be774-a1c5-402e-a1eb-13f5894c10f8", "indicator--11760a89-342f-4cdc-9d7f-808c113cd895", "indicator--4d6dfd6a-e33c-459c-bd6d-7ac43e600e8e", "indicator--c489b2df-297d-4b78-9857-97570ab13397", "indicator--f5be6d5e-7491-49fc-a488-6f55766ce969", "indicator--8d15fe90-b9a0-4e93-af08-6635ef99c38b", "indicator--2af109cf-4990-4305-8d8a-69d3558eb608", "indicator--c85da2e0-0ed7-4ee8-b6f2-9632e24d63a9", "indicator--0a2fd494-c8d2-40b1-be1d-37549d6e43a8", "indicator--19b184fa-26f5-4ff3-bf47-b1ee281e9678", "indicator--43d77f64-9e14-4455-aadb-1dfe8ff1f680", "indicator--04b7cfea-cb3b-4343-a8a0-13840b908621", "indicator--5f37ef43-2cf3-4ea4-83d4-3a43a6d5aab1", "indicator--6d3f789a-8b2a-46e4-a3d6-80d8a83d4fe2", "indicator--96c22606-36dc-4634-8c7d-49c93f8a6950", "indicator--778cf0dc-4451-4ebf-8ea8-f407ade260e3", "indicator--f8106c31-a673-4fbf-81ae-89187af31f2f", "indicator--58375f7a-a7d9-4971-9b48-e2ecda77aac9", "indicator--bd74f831-343c-4787-8723-845541186d9c", "indicator--ee02f298-c9c6-4b53-94be-c1d8de2bc96a", "indicator--3d75ad53-3e25-4b36-9879-6a787cf664c1", "indicator--7cd86c3d-984e-4a90-94e1-7b1105bffd63", "indicator--6c3762be-ad9a-48c1-b1d9-ccdaaaab7115", "indicator--5035fc80-6f39-4a9a-8b4f-fe620a83b415", "indicator--f315c564-4cb8-4c06-a308-d882527b000e", "indicator--7f55af59-a7d5-48fa-b77f-4b8b4f8decd3", "indicator--56d1e2b3-d31d-452e-9122-288bc3d5877c", "indicator--d46544de-c1fb-4424-b1b1-c48eb5f89c93", "indicator--fa141a29-44f8-4d6d-ba85-6deb4c41a350", "indicator--5da0b18f-b754-443a-82cc-3a4337db8024", "indicator--16e55e2b-8236-4fe1-b502-7fa1f9a38697", "indicator--b4ff751a-b609-4b1d-94b0-7c6977741c10", "indicator--25ac6351-a3ec-4f47-8ebb-18e3d942bbe8", "indicator--6fb6ca7f-4871-4f21-a86a-8b69a4d61473", "indicator--e1011f1f-1378-4140-b2ba-f4ede8ebb2a6", "indicator--d2cfa67d-6df7-4896-9632-6add8201e72a", "indicator--27cf1a73-42f8-4277-b699-04ebcf3f7bfb", "indicator--9cf5af21-c5bf-4815-822c-3e09ec246ae7", "indicator--d953a876-886e-4e0d-aa9e-2d7c3663c581", "indicator--277fd1a0-e3c2-446a-8456-045cac0bfc41", "indicator--c9fe194d-b6ff-4ee5-9d06-b2181f202980", "indicator--3bd60456-0b73-4e58-a337-79cfc6c7eae6", "indicator--a5924a80-178a-4fe2-a9aa-f05cb17a906c", "indicator--4a4cb947-4016-4e97-b518-75aab5d70723", "indicator--a96266a7-ecb6-42e3-97a5-3e07662e4ceb", "indicator--ca04bf61-3c3c-47f4-9dcd-2e49d49e25ad", "relationship--36ea53d2-6aba-4e54-a547-02eb64fb7487", "relationship--0a1f946e-3ae8-44d6-9a85-015a159a58be", "relationship--33665947-2929-453a-8e2b-ea62a00f5d6f", "relationship--fe005b7e-2571-4ca8-a929-45285572bc84", "relationship--2b08c675-7b65-46d0-9ec6-34a0f2d689b4", "indicator--82b42257-c5ef-40ee-9754-4df9c53d0c6a", "indicator--fa8b26cc-42e8-470b-9f53-299534edaf7b", "indicator--d256de04-be6b-4ae2-898e-c05ecaa4b3f3", "indicator--a0147a10-ce07-4c66-864f-c67a0583edf3", "indicator--887cda1c-c80e-4827-8073-d9a3438ae1a6", "indicator--1d89465f-0b23-4acb-8f3e-0f99c3817ecc", "indicator--85a2f4be-5fa3-4645-9c02-edbe8633cf06", "indicator--7f177c24-bfcb-41cc-8325-25454bee8c3e", "indicator--379a5137-40b8-42af-9c49-dbb74ee77544", "indicator--96298797-aa62-45e4-abf8-64886fa19e38", "indicator--83adf0eb-9b70-4eae-9742-238e490be928", "relationship--99c89f56-8f90-453e-a5d5-1cdc1c1fad6f", "relationship--99bf6288-8d3e-4fd5-89eb-139b7983c331", "relationship--133b8219-4034-4def-9f97-507a32bc3a96", "relationship--76759d6c-bd93-43b8-b929-7f178653b35c", "relationship--d82fe494-8ee8-4003-89ec-0b0502f99407", "indicator--a3be3249-215d-47b2-9c6f-e74d878e2828", "indicator--5ed35a60-7c9b-490f-9c78-17edd8c9ff39", "indicator--601d70b8-aaf5-440c-881c-26b322e35234", "indicator--f00c4966-845b-4c7b-95f3-ad088a974d79", "indicator--82bf62c6-4591-4c76-a554-2ba02b6cd226", "indicator--59d50f11-f5a9-4613-93d6-3860cce2de96", "indicator--5755a3cb-4e00-4e0e-badd-f87e32a296e2", "indicator--3f0404c8-c4e1-4596-8938-bd39f598b27f", "indicator--721f3424-6412-4b38-bc49-26b3863dbf70", "indicator--40ab2274-ca43-4c10-a8fe-26748b5838d2", "indicator--3c28e8df-3685-4f11-b3d8-fc273ec74c63", "indicator--7470fcf5-d2ce-404a-8b98-74f4d0c582b8", "indicator--39209b52-fc70-40eb-bcd3-a991bba31079", "indicator--d98cf6ec-ad7e-4c2c-bf72-9c3b81089b75", "indicator--1f58f6ae-22bb-4269-b913-bd47df5088d8", "indicator--39353e0e-5f07-4a04-8b98-a64867db819e", "indicator--9fd06513-2f90-4e9d-865b-f1c4e06ed225", "indicator--9ebbd231-36a2-4407-af56-3525673d2ac4", "indicator--c02cac21-181b-4659-a6e7-2283ff466612", "indicator--4a260a00-49aa-40e6-b1f4-9521087418b5", "indicator--6b50a5d6-f364-4912-af2a-d9c5d22dd3b6", "indicator--afaaa082-1359-458f-b13b-ac2d0a92ac62", "indicator--a7582b85-cac0-45e6-a79e-9718eace170e", "indicator--3f79f069-ea00-43ef-8b46-05cbd9777638", "indicator--bd63d6fb-f7aa-4012-b18e-26b9ecb8b8df", "indicator--cedc0a6a-6b27-468d-bde0-f2b29e3af32f", "indicator--b55be105-61b4-46ac-b709-185aaf08fd66", "indicator--6b0e3ff7-fa73-4b33-a5a8-99594920573b", "indicator--5057d11d-1a1d-440f-be5a-2bbe9c8c918a", "indicator--5c67beb8-d34d-43f4-a94f-14f54362505c", "indicator--495c3cb3-b742-4ddc-84fe-387f03f374bf", "indicator--7d7eaf56-94da-4d09-84e3-9692f58dfbe0", "indicator--0c78feb5-c162-4086-b3a6-ee658e1e98bb", "indicator--0683c6c4-a6df-4eed-b5c5-5a9d4540c3ed", "indicator--1ce71854-298f-4d03-b3a0-a97bd687c210", "indicator--ffdd6c69-a28b-469c-8af9-d5ecb1fe0452", "indicator--e0a510aa-1bc0-4cae-aa6e-939c891af804", "indicator--18a312fd-1803-419c-b71c-7413276eb722", "indicator--705ad80c-305d-4a04-a9e1-0c162ac068fd", "indicator--55fcb3e3-41cb-499b-8e28-9002305455fe", "indicator--f4b48eb3-5926-4590-a5a2-b755bd2d7155", "indicator--187d65b0-999b-426c-8498-18a70aaa0ac9", "indicator--a84dd91f-e177-44ab-9a5f-a60b642ecb70", "indicator--ca80f638-6e03-4a55-a84e-e1477826ba17", "indicator--c1c4e4c6-4e42-4a81-8d0e-480503bfe567", "indicator--d59f121e-ee15-4be2-95f6-64a1ffd8c7bd", "indicator--548ca02f-0d30-4dd7-ae91-5d9f5a45b4d5", "indicator--f195c327-5d7e-4ce3-9693-d548f94c4d9f", "indicator--d9bc2583-374d-426e-a19b-c340ff7a2b19", "indicator--3be2cde0-d1ce-4838-8b0e-cbb6dc9bb6a9", "indicator--8d978069-1b3d-4012-8c94-11d4cec90f1d", "indicator--67ff05d9-725b-4c89-8987-99152b3cf531", "indicator--e857075e-b8e7-41e8-a928-94aa06c6f27d", "indicator--3d4a0358-2a4a-4a24-a5d5-d8a8f64bce40", "indicator--229e2189-1ff0-46a0-bcd0-c602cbab8488", "indicator--29af063c-f064-40de-a669-3aab61d3895b", "indicator--955d1dda-17eb-4fdb-bb5d-33025a0a05ca", "indicator--66dead6a-2961-49a0-a7a5-737746a4e861", "indicator--00f9364a-0c00-4384-944a-80e6fd8a4019", "indicator--0defdec7-4610-4d46-b66c-f93a7eb82254", "indicator--e1707fc8-a350-4d59-9e9f-78039f4ca2e1", "indicator--402333d7-4315-4e7a-a966-9f0e6a8afefd", "indicator--cc5e07af-12ab-4f59-bf26-43aa9329323e", "indicator--ccd500e0-d04f-407d-9b51-090220941dcb", "indicator--2b0a3e03-9b07-4972-be11-26edbb7f1232", "indicator--2b11c472-792f-4ba4-a46b-b7c28ee001d0", "indicator--cc3a6f28-21be-4264-a45a-128f73a9873c", "indicator--d2c8f686-c2d8-42f9-910e-04a0a414fe0a", "indicator--0ce1bf06-a907-40be-ad97-2521ca9bf645", "indicator--34835685-2659-444d-af7f-7e6fd04f54d9", "indicator--de5e5acc-5b13-4f8b-8474-6ee7306796ac", "indicator--52f4a4b1-e174-4ca3-9112-2c581b15fbeb", "indicator--e5a83cb1-b406-4ceb-9d5a-e1a9067707c0", "indicator--6e818870-2114-4ab4-88f3-1e16060c6ee3", "indicator--ee19e656-6219-4b08-8a64-4c0c10f98599", "indicator--fac47dc6-ea36-403a-9500-2148c9e9690e", "indicator--a9caf2bd-8a87-4b55-9ddd-27e61519c8a4", "indicator--a174ca8a-bcf4-4098-bfe9-5501510de13b", "indicator--ca012f62-d411-4a0e-bc68-7b5e998d6d6f", "indicator--136e55c7-b227-4e31-8184-622f5c43cdae", "indicator--d6ec640d-eada-4e9e-aeb3-5e4d14a83980", "indicator--fdcc2307-9995-427a-beea-950c968c5b2c", "indicator--56189c8f-d33f-425b-9d09-5286cc7f771a", "indicator--01c46e10-57a1-4bfe-84e6-cf4ddbdb46a4", "indicator--4cf95f0d-5bd6-4587-8656-9651162de4cf", "indicator--ff44f69c-2cf4-4839-8737-2b58c1e7be35", "indicator--77ca82e3-61ab-4f50-b327-cc847d473ebf", "indicator--5029dd60-e0b3-43ec-ae0e-a54b286a75a7", "indicator--7815d86d-922a-4e2d-9cf5-4d92814cee4c", "indicator--55ce0d88-1a4d-4752-aa84-5c1acab195b2", "indicator--ab321c1f-58c6-4ccb-83b4-9a4b07704f08", "indicator--4001b132-b590-43d5-a72a-71b154c117e1", "indicator--e182ef33-b291-43ab-8457-7845d083da1a", "indicator--3caba01f-9a82-459a-af9c-61d27bf9c25e", "indicator--81b58956-3238-44d6-b71b-54411400cb29", "indicator--e5a46be2-c26e-47b2-81b1-31d247a08fb4", "indicator--618fdc53-cc3d-4455-997b-c8cf4304de21", "indicator--f1d2dc67-c68d-4572-8bee-f36dd164c307", "indicator--85c60f5d-2023-465e-b767-b55ce36613c2", "indicator--eaafe5b6-27ad-4200-9cd2-fd18c6b5335c", "indicator--0f8fa3a4-6129-4c88-87a3-badd07c022de", "indicator--41798e48-b87f-4ee9-92d7-e900763f5789", "indicator--2a137ceb-aae8-46dd-8981-ad9d5175b125", "indicator--2c7debbe-000d-4eb8-a285-900f9dfe0ba8", "indicator--f2f5a8aa-f54c-438e-8775-e1addef063b9", "indicator--10a952ae-1bfe-4ae5-990b-9eae76ad59dd", "indicator--d970419b-9711-45a5-b205-64ad1213b7e5", "indicator--56442a89-c36c-4b60-8386-015b2628ec49", "indicator--5cd47a51-982c-4f77-ba75-0f36c5e4bfab", "indicator--900b05d5-d44c-49a4-b787-4a0b4835464a", "indicator--a93de466-9f25-40de-80df-2e8ff96714c4", "indicator--108a3e38-d250-45fc-bdbe-4861d75ef969", "indicator--4b3e84d7-f6d4-48c7-afc8-871be1f27d87", "indicator--61d615f7-b3cb-453f-8b5d-4ed67ae56058", "indicator--f2bd3579-3cb0-4c01-9ff1-eb3330eb75d2", "indicator--0950ed78-0630-4f93-b0d4-be3c5464d40a", "indicator--89abfaa9-8452-4ca5-9e49-bc8f680a3d19", "indicator--ccf0f754-0019-480c-9485-162135cc762a", "indicator--6bf80f5d-c57b-4ed2-82de-e595e3d488fd", "indicator--0c709818-5a14-4459-8054-781adea7602e", "indicator--e9c707b6-6ae1-4d3c-86f7-1c927a31d25b", "indicator--a8b9e7df-dd39-42e2-9ae3-28d455762173", "indicator--cdf53d9d-0adf-4ad5-9bb8-ec1f7cda8bcf", "indicator--3f92d5ad-6cfb-421f-b4da-a72e39ca708b", "indicator--102e61e5-6be7-46cc-a9d0-46e52cd615f1", "indicator--95d75721-64eb-41e0-9e37-7706fcc7ac9a", "indicator--450bf4b1-d272-4d08-9bb6-14f5ac144114", "indicator--e46d466e-b62e-418f-90b7-1211532e9274", "indicator--a6da39f3-d2bc-4415-81f5-e7826af31449", "indicator--1c9a67e1-9c40-40ac-b86a-5aecf2088f4a", "indicator--ea411791-36bb-4d09-8221-ffec79421068", "indicator--486df806-9329-4600-b244-816033e935ee", "indicator--ea6aec09-e750-4f28-94ec-cc8e49011c75", "indicator--45b35b5b-f7bc-4347-8b62-4040cbf184fd", "indicator--c6618b60-7a08-4fea-8489-7c0712a1cab1", "indicator--64455ec8-d0b9-45d7-899a-185247208a64", "indicator--611d8d36-8141-4af9-809b-525902c22960", "indicator--d8f3971f-c52f-44b0-8b13-37cf9d3dddd6", "indicator--00a0ba2a-5098-48c7-bd70-789dbf4864f5", "indicator--209caf5f-1e25-4661-83f4-ee629ac3a8b1", "indicator--662d68f3-2fb1-4eaf-9958-5e36bf969963", "indicator--f0b7878a-6ac6-42e1-8e6b-77b6447b579d", "indicator--b5b77736-476a-4f48-8257-03d21909493f", "indicator--f8144e81-a240-4f0e-b9fd-44ea081784bb", "indicator--b2df9f8f-c1e7-4c0d-8b9a-4621f69158cf", "indicator--e6d6aa77-2976-4295-9245-348a2795d0c0", "indicator--419a9a6b-5190-4d44-849a-e8ba5eceab8e", "indicator--2d466958-c8d9-40ad-8973-d6745492a695", "indicator--86276350-71bc-4e20-8856-e69f8af5320a", "indicator--59f0ca27-c95f-4bb7-a902-78325cc4224c", "indicator--58dad14b-db9f-48bf-9a1d-165f1caecb6e", "indicator--bbad4b2e-bce0-482c-b94f-2c954f0e215b", "indicator--ffd3ee38-f2f1-40a9-a4e3-2fbdf443d458", "indicator--91d25fda-a07e-44d0-a8b8-94e48092eb39", "indicator--f52a08b1-62cb-4599-a80c-14193016c0df", "indicator--aed61f2b-57cb-4092-933f-b277aeb2b320", "indicator--a2e48573-8945-406f-aa2b-65ce664b5860", "indicator--da99dc68-1075-4caf-8416-7ea84d02193f", "indicator--8fee24a4-64f8-467a-b3f7-2a3d8893415a", "indicator--b99f2388-99e6-43b7-be74-5e778d2135ea", "indicator--f1f271e3-a18d-43f2-b686-d5f47ea2e59d", "indicator--1b8a6f30-a235-4c15-84f6-88ee929bffda", "indicator--bcdffbbf-f54c-47a9-8564-e774112ff5e3", "indicator--36a54c2d-750f-490b-9f4b-26a27b4379fa", "indicator--95b246a9-a1d6-4f66-aaab-e91e4a2dc82a", "indicator--d47a38fa-7017-406a-8001-ed8471776e3a", "indicator--95beb5be-552a-4845-b011-3dc5e12399bd", "indicator--fa8f8abb-1a8c-4978-803b-a3d360758afe", "indicator--c4803a44-686b-4a38-b85a-1dbfe3ca0d50", "indicator--a7c76609-5e5e-487a-b362-ec1ccfe05fbc", "indicator--9f6c7e38-74e0-4461-8dea-ee4faec99812", "indicator--19dc0c9c-636a-4f9b-8a1c-00cb1e522fd0", "indicator--57c01043-94b2-494e-afd7-c480243f8ee5", "indicator--b7e3a2f8-8eab-49a5-94b3-c022c0af5dd0", "indicator--73421a6b-c17e-47cd-a2ad-6ecae9d5b557", "indicator--4de31786-e443-4918-8130-db1cabbda5b7", "indicator--3475bddd-14f3-495c-b71d-bdb87eb101e4", "indicator--7519ab17-2e34-4346-8c1a-f17bfb39241b", "indicator--3b5f1652-c651-4d72-8ad9-ccd456795472", "indicator--1a41dcf9-8562-478b-bbd8-c76aff0d48f3", "indicator--a3ceaf1b-aa69-4a3b-8b79-48ca0bef662a", "indicator--c6748644-a519-4846-8c10-cb9608a7c3ed", "indicator--9feda630-e694-4f4a-a4f1-7af1cf69a8e8", "indicator--d81e11c6-df53-4b82-8245-780f69f45b88", "indicator--be4a6935-ebae-46a3-b579-6fa6db865a8b", "indicator--accbb401-c5c3-4ca3-8576-1a91037e5ccd", "indicator--db94989c-a90b-438e-8619-224bb9b852cc", "indicator--6dc51513-5009-48a3-a1cf-49c79bad14c4", "indicator--8fa4af7f-313a-4252-9ade-7ddaabf5e1a8", "indicator--d1acc41e-0fa5-42d2-a212-517a4bc05848", "indicator--1adf31de-4698-4926-9d83-e5cdde0426ac", "indicator--d193b608-e170-47e5-87df-0384eb930baa", "indicator--8120d17f-ea08-4bc4-bbd6-599123f763c5", "indicator--2ebfdd70-29e9-4023-b882-4c574454da06", "indicator--b5fd3a2d-c40e-47b9-af2c-dd2d4280ef73", "indicator--7a2153c1-1262-4f1b-93f3-306c46139a12", "indicator--61873d1e-e220-4bde-8b08-8e2ed424a1f0", "indicator--d7367b17-b086-4314-9b93-0405b91dd413", "indicator--cd9f2e29-297a-470d-808e-1360e799ee82", "indicator--8f1b0b94-20f0-41bc-8754-aa58598e7610", "indicator--8b4886f5-3bdd-4384-aed8-4726b8bda0fe", "indicator--d6b2de05-2d05-4855-af5d-93ed3788386c", "indicator--0ca4c1a2-14df-4b98-8812-2203a485a712", "indicator--62dc78d6-8f4a-42cf-9a95-765d96ffaed5", "indicator--1065f41d-5fab-4482-976e-39fba11454b5", "indicator--16b5d007-c8bc-4017-b350-e00c7a20a66e", "indicator--7084b74a-a3ad-41e1-9adb-04bfea6f42fa", "indicator--55aa52d3-2512-4b40-aaa5-4b6bbd25ea2b", "indicator--9b72b211-aa44-4e8d-9429-ccc44f0471af", "indicator--fb93987f-ffb8-47b8-8d98-8163e44d4ea0", "indicator--454e9bf4-46a7-4dfc-9b54-4005678c6447", "indicator--aa2acbae-63a2-44e2-96ca-d5073fdce8cd", "indicator--7cb79ff1-5d1f-43f7-b56e-010905a9ee95", "indicator--2105e537-724a-4bbe-ba19-ffb5cc7962d3", "indicator--4ce67f41-670f-4aea-930f-d23522ce0bbd", "indicator--a937d597-8740-4289-89dc-6341ddc3c881", "indicator--3cd0e599-e228-4385-b545-bf3484bcfe5e", "indicator--7ff745e6-9de5-49b7-8832-b06ec5c07de5", "indicator--c6ca894b-6e29-47a5-bbc1-6a37fdfe1f77", "indicator--b46483fd-0971-445b-b337-6903aaa2d8a0", "indicator--9790e7ba-4a20-4663-8a65-06afb9ee53da", "indicator--c43f861d-228e-4ea3-9e21-6f9f08a800ff", "indicator--1359d066-fdcd-4535-9c99-854453b72a3f", "indicator--3fb30646-f4c3-4414-bea7-ced8b0f5b283", "indicator--1b74f99d-1874-4889-bc0e-cc3ac8bc43f5", "indicator--52b1a381-9581-43ec-9951-9dc18cd5943f", "indicator--fe02e6a3-8746-48d7-8677-ff566bd10816", "indicator--9d044b44-8b67-40c4-a03a-47347a523ca7", "indicator--6502d744-59db-47df-842d-7e3b527d9eeb", "indicator--28de5234-543c-40e4-b797-358b31dc1c11", "indicator--95b6a00f-7cdd-44e2-bea2-f17d6716db2d", "indicator--6191e277-2b09-4dab-88e6-695efe585ef8", "indicator--0e39a9b5-bf75-476d-8001-d597cfde8e9a", "indicator--4d5aa7b1-3add-4e97-9922-c9b951dcd050", "indicator--5799b979-0d47-43f9-b4e5-f45b54d9853e", "indicator--a824f285-4c98-4476-9774-db96d1c24d53", "indicator--249fa953-88a6-41df-a292-9911facd18fb", "indicator--8fc54e8c-a036-4366-b385-593a04bef107", "indicator--f603acf8-1acf-46bc-b8ae-56cb255cffd5", "indicator--401b5887-a18e-4e00-9f81-f1ea6d75b38b", "indicator--01568bcf-fbb1-40ce-a921-2a746ebcd66b", "indicator--bb84f5bc-15f3-43a6-bc3b-c13c28c9c110", "indicator--8d949d38-f4c5-442b-8a33-bf313623c3d5", "indicator--92ac4f2d-ea47-4d43-bc8f-abd0bc4d97fc", "indicator--448b596e-94c8-48f4-b218-b8d0854eab6d", "indicator--3463acc3-14f4-44ba-920d-36171057f83e", "indicator--eb668ee7-1653-4191-8671-f04463bdc2b1", "indicator--36be2401-039e-4a1d-87c1-648ed12b8b90", "indicator--d611c620-5852-4aa2-b169-df352313ab23", "indicator--c8c852ee-580c-4b5c-92ac-fd37ac862364", "indicator--a56e36a1-6323-4ed7-b71e-1998a7ae0c01", "indicator--8bc37ec9-3436-44b6-81ce-3be6182e2f85", "indicator--6897856a-fd1c-4faa-be4f-cac989fcf838", "indicator--3cdfff4d-6fe7-44d5-8783-2090ede9ed40", "indicator--82a334e9-f20b-4270-8919-ae124d04b02e", "indicator--f7a2669f-0ed1-4c47-a611-c1dbf5407df3", "indicator--d606d4d1-a25e-4ed2-b474-005dbaa2c60b", "indicator--cc13fddc-81f9-4ce0-b2ac-966b46b49fdc", "indicator--579e0379-b0ca-41a5-80c8-086b6d09fd95", "indicator--80f40719-7f09-4cda-af26-784ab6ca1736", "indicator--2629bdc9-6dec-48f4-b5a7-f239b4c8c6d1", "indicator--113bdc93-6001-4a17-9f1a-6234eb73bfc1", "indicator--b8d38581-6c49-47a2-8bb7-b0f65d5304f5", "indicator--12ea9acf-a740-4b31-90bc-57c475730134", "indicator--dfe8d221-64da-420e-8ab8-da5e75b88c7c", "indicator--a45d9b48-10c9-4585-a54f-48aa4856c256", "indicator--836978ca-e835-4a1a-bc6c-391e6c2b7c89", "indicator--a4f4046f-6e15-403d-923b-34578fa4e708", "indicator--4913bc5f-7091-49c5-9eb6-e7e112dd4370", "indicator--11822147-9c84-4282-8d9a-bb2bde2af29e", "indicator--05803487-02e8-4c73-b40b-3e0bfbf581bf", "indicator--cffe0cad-fb22-4b06-86fe-e6072bcbe219", "indicator--df398243-f510-4094-bb88-8dacd91aa26a", "indicator--cc2d3768-f858-4474-b100-a116f21bf3ef", "indicator--f099b774-9299-44c9-b490-067294548854", "indicator--27781db4-e87e-4ce3-9bb7-1c137206c780", "indicator--30d6f065-6bb2-48f8-8703-e7d6edb523f8", "indicator--faa646db-e45b-4e36-9840-f45df55a136a", "indicator--2464ddc5-610d-4c1c-a494-d2bcea39bca4", "indicator--bd961372-1f02-4b90-8fce-3f9be9bbf858", "indicator--fa023f1e-988b-4923-82d6-de6ad539f837", "indicator--e36cb49b-c0aa-4db3-824c-80d2a5e3f4eb", "indicator--e0580adf-e21b-4019-be63-877d025c2b75", "indicator--cd89e768-08cc-42dc-8d59-ded32711c0da", "indicator--7f5402b4-e7c9-42f1-bb39-16c478aa4497", "indicator--967699bc-500a-4664-84a0-659a5d8be8fb", "indicator--42a96b7f-6420-4ce4-b10e-2f9aad9ca282", "indicator--0525ce33-8786-46cf-af5c-86099ffdf522", "indicator--3925e8e1-ce15-44a8-bc0f-86e60ec339d4", "indicator--9a7394ce-cf6e-4f4d-b182-a1b0b200a059", "indicator--4d975c93-23a5-43b0-9d6d-dee2d408b419", "indicator--f2aced3e-d940-4941-81ff-4cb772aba552", "indicator--393672db-c26a-4352-b8d4-5b12e55e7a8f", "indicator--f46c07a1-2674-4c43-906d-ae361abf1826", "indicator--db8ae661-42d7-4aeb-9440-7d3d002936e8", "indicator--55609235-4e1e-49a7-af57-2e894e1a0196", "indicator--b3c76d9b-932d-4a79-9615-a7e60ff6e623", "indicator--8ffc8ced-6746-4567-81a4-db7b589a67db", "indicator--bcd3e518-ba58-4eb2-8f82-898fafd95401", "indicator--f7ef8d18-fa9c-4805-976c-0d9e1e6f1a09", "indicator--e41b6d17-5271-416f-b512-1f71c98f1e10", "indicator--dc0317f3-0ab7-4d71-9b9c-f0c70104af86", "indicator--2ed91095-70a8-45e5-aa46-56aec3bd72de", "indicator--37fe7c70-828d-4682-a263-16580fa06705", "indicator--ff1dc6cf-c238-47f3-9453-f95cf3c4700e", "indicator--df672465-ee62-471e-9812-525bd951b16b", "indicator--5fcfdad7-5915-49be-8d73-25d83b2eb35b", "indicator--a9a4b8f2-dd3c-4b2c-9fca-b1ad3b9cd784", "indicator--64faa14e-6af6-42c9-8ce4-22ebb4e0804b", "indicator--885683e9-8b1f-45b8-8c1d-064f5942ebe7", "indicator--284bd52c-e210-42e1-b0f6-48f375edeb0e", "indicator--553b0509-1ee1-4811-be10-9ecd88139bd5", "indicator--7f0513e8-cc28-4725-b022-edd6bfddc4d9", "indicator--12246c2a-a9f7-4047-9bad-bd8226fa6d3f", "indicator--141f0405-d765-47fe-bd0b-ed4ee0b3079c", "indicator--2795b5d9-df79-4a95-b4dc-f73dd7522b49", "indicator--784edbaa-bc9a-4bdc-9c7c-649df98bc149", "indicator--f97d8190-893b-4f38-a638-375adee9067d", "indicator--6613b089-9253-405f-ab60-841e8638fcbd", "indicator--79e8e180-d08a-43c2-82e5-747747c3c404", "indicator--7b21cde5-b6c3-4f81-829c-f18d4d9eb931", "indicator--659b974d-4706-492e-b7eb-28c186c7ea8e", "indicator--2c6c349a-79ef-4ff7-bc65-d2aeccb90029", "indicator--0091b97a-d915-486a-bf88-e8c2cb0f9226", "indicator--5d228170-d3a5-48de-ac02-0fe70dfbaba0", "indicator--de0b0ec5-830f-47ba-a7de-63d68a2b9ab7", "indicator--0062e079-8d05-4674-8bca-f48734986d69", "indicator--f43df0bd-6ab1-4f4e-b1dd-f37466dfce9e", "indicator--8b19f195-ae52-4ea3-aab1-0b281f9c8511", "indicator--f1d4c916-0141-49ef-b3c7-e165cd078aa3", "indicator--9c5fe3f1-39bc-49d9-8b89-bb916f87c35f", "indicator--72e967ee-3682-4afd-8fbc-942a76f2449e", "indicator--406906d6-d9ab-4c96-a7e9-8308cd7d0ad5", "indicator--30e61f0d-dfd9-49e2-8d15-22da71796951", "indicator--398bd1b9-4f43-491e-b9de-bb3e6ce78737", "indicator--f27b91fe-9cf4-42ed-a0b8-be025e2732f4", "indicator--d895a234-03f8-4529-a3bf-97b549f677d1", "indicator--2fa7682e-d5dc-4e37-bdf4-57881174972b", "indicator--b8d44c93-c945-4fcf-8011-1255ccc48db5", "indicator--d3be700b-6e35-476c-bce4-2f946e161adb", "indicator--f8a7bb37-2ff6-4f96-a086-88c93a965263", "indicator--2a1a751b-1504-4395-8225-24bbc1055c50", "indicator--6dd322bd-796f-414a-8fcd-ce2ccb6618fb", "indicator--9b41028d-9550-4a19-b8aa-5d5856b969b5", "indicator--395eee7e-4d2b-4623-95cc-627f0a838049", "indicator--d749b9b2-3f39-4bf7-8c2f-f11f731cd4c9", "indicator--387463eb-ed75-4545-abd3-3bb109522a52", "indicator--acd6c1dd-6901-43ca-9fb3-4fd099dbd6c1", "indicator--08e1f26f-599c-41da-8b4f-c187440b9284", "indicator--2958ce25-2fa2-4670-800b-7d3d0bc2b506", "indicator--8d0cf6a6-5231-4d85-9373-f0a8f2c788b9", "indicator--c8bd4d18-d891-4c75-b326-3e59b5e9c504", "indicator--ddabc2d2-33d2-4be9-9d2e-b8dd8643d509", "indicator--191b8435-b032-4237-8a4c-ebed3458c585", "indicator--d7af100c-c5ec-4691-b672-638a2ceb6afc", "indicator--9a5a285d-7c4e-469d-afb3-cc69900542fa", "indicator--55b3198e-2c52-4292-bbb8-c933677e853a", "indicator--32da0c0c-153a-4ada-b3b3-2a2417e2ce68", "indicator--9e81f2fb-5cdf-4aa6-9389-cff59816b3a7", "indicator--5e1ecd0c-7151-4b8e-bdfd-bd3f91e06466", "indicator--9ee85784-10e5-4323-ade4-ca09ffd6b6cd", "indicator--da74731a-45a3-43d0-bac1-7686739fe545", "indicator--9a9c67cd-9443-42d7-8134-cadf03f206f0", "indicator--fb5e9139-a817-4637-ba73-0a6b81055270", "indicator--0b84a8e7-2248-41d4-9e57-f49790d1e1bd", "indicator--99f8c054-3fb7-4fa7-affe-6ef742de21a1", "indicator--f1a18261-0f6e-47a4-afe2-242f4deec070", "indicator--491c8336-f671-4be2-81da-345cc68b99e4", "indicator--05465061-5f11-4412-b575-01087f39df6d", "indicator--4a729c32-0513-4fb7-9f13-ba208bc5ff87", "indicator--88418b47-7959-4ed2-8994-f80737b55138", "indicator--ae81eb82-c5a2-4b64-994a-5a0b7f03987c", "indicator--bc51b348-c119-4fe0-b50d-955e5d6d057d", "indicator--65a503cc-5bd1-4ac0-bbb3-7be9b40b278c", "indicator--551e7a36-27ef-4c7f-b85f-bcc0a9152c66", "indicator--e236a615-327f-4c43-bf6c-ac41ce87b07b", "indicator--9ea831cf-d76e-402d-b569-4d4351ae7ebb", "indicator--a2c297b1-6368-44ca-a1e8-b4b4e11788f9", "indicator--d8a19ce0-e824-49f7-bce3-79ea515bc439", "indicator--96214268-b208-4e1c-a9f9-ee0ba811b455", "indicator--0ef370f3-b5c7-469b-8f82-dd470f0ebe2c", "indicator--4f3c2ccd-b2b4-43db-a022-ef56f0509109", "indicator--6b8299d7-378c-4ce3-83db-3f7f996c1c61", "indicator--48933f03-7a3c-4e14-b389-7c992c052c44", "indicator--53e4e05f-7e87-4b02-8d62-d147033a3230", "indicator--32f2e684-93bc-4aa0-b67e-e936e1613349", "indicator--7fee036a-2e68-46ee-bacb-77b286b47783", "indicator--5b905896-1ca6-4b93-b9e7-043ac485705a", "indicator--b36cea20-c770-43b8-9c56-24fb72cd5569", "indicator--18c360de-12d4-4a3e-a488-6f6bdc86eecb", "indicator--a9b59b3e-e3d5-421b-9612-b8dac4e03b3a", "indicator--bac12993-48c9-40cb-9fdd-1fddeb962ea8", "indicator--e9885ff2-b87b-4c76-96b8-53ad9e3a65ae", "indicator--a157f99e-3ba8-444e-9a5a-9ab6f968a36c", "indicator--f1c75fb5-c31d-49e2-878b-e750a03aefff", "indicator--25f022af-9801-4640-85f5-aadd01360be7", "indicator--ac698007-c6dd-4636-9a98-5324268137bf", "indicator--05541406-6ea3-4e27-bb83-0311346be149", "indicator--52de06f1-4bd3-41eb-a68f-e6b40a667309", "indicator--76c952e9-fe46-4dd3-bc9b-373618be9359", "indicator--74b7ccb5-e78b-4ad6-a4d8-896aead1c340", "indicator--5526dc35-1ead-40a4-981b-fb315cbe9695", "indicator--c73e73fa-8060-4983-955e-a2780a84bb2a", "indicator--12fa3f36-bdd1-4ee9-aeb1-61ad61a2ae40", "indicator--6c890da4-f298-4290-ad68-287c77b56016", "indicator--92f80dbf-b1de-4b1d-80f8-b027327288b1", "indicator--3d5bd4e7-487d-450c-b0e3-e33c3f0b8549", "indicator--208ae6b3-1f77-4824-9c9d-5e72c36cc539", "indicator--28081713-4b48-4e6d-bb05-2df47174f952", "indicator--20816532-66ce-4e7b-944d-6afdf07cc620", "indicator--50d3e04a-d8d9-4a9f-ab96-a35f6572861b", "indicator--3d217f24-6c4d-4e36-a4e0-89d7dec022a1", "indicator--564efe6a-1c04-43b3-a6a9-d056880d430c", "indicator--d2803476-6a88-4867-8998-523dee170978", "indicator--25f2a432-1c6d-4981-be34-44b8b312ae53", "indicator--ec74ba5a-0b89-4590-a4e5-03324bed6437", "indicator--7c158ec3-dea4-4960-82fe-5ca0d7921879", "indicator--2cc0e916-690e-4f2a-87f9-906a0fe31d9e", "indicator--5623bbc0-36cd-47cd-98b1-a03667749d26", "indicator--3870f9f0-985f-4242-ac8d-4a44f10d96ab", "indicator--2aa36341-3927-4982-a146-c632bf6be2dd", "indicator--e652d70c-3669-4681-95c2-38ce0baafa69", "indicator--065c4d14-bc5e-4ff6-ac15-85109a31e0f7", "indicator--e741bcc0-f2fc-47d4-a4e7-f636f1309bd6", "indicator--6a7476f6-1b4c-4200-84fa-9aa4ccd0bf3a", "indicator--9b5bd146-473b-4090-b881-2b08ab98cc7b", "indicator--34e80261-2556-4699-8fe4-1386f354d245", "indicator--3a2633c4-ca37-4cb0-b903-1fcfe87fbff9", "indicator--927bbcd7-607c-46f8-ab17-4dcdae1f95e6", "indicator--22a0f887-7ef4-418e-ad59-ed3d7d09cfcf", "indicator--e9505b89-7152-4f6a-a9da-307ab2bf999b", "indicator--47d0dffd-2001-4ac5-bb54-9e728aed2ec2", "indicator--8b98f3d8-9a06-41e3-8b8a-2d62eeb5cbcd", "indicator--b03f3c50-bdf4-4fb3-b16c-b1581c46cdbd", "indicator--838834d7-9a1f-47d5-bf0f-d28a093d4ab8", "indicator--83883af8-93e1-4b64-9e2b-d37963c38098", "indicator--4ae825a7-5e60-4731-b9ad-31cbc0fde586", "indicator--abe4b564-0673-4cae-9b3d-e1bf652d2125", "indicator--823fbbda-b649-47ea-ba1e-c3134eab9366", "indicator--c278d726-094d-47a4-85aa-3dde43015e89", "indicator--7247a99b-3a36-445a-8a45-a5ffce1df76f", "indicator--47cba9d7-4a94-4ca7-b7bc-e7f67dbb2abe", "indicator--990030aa-8b17-4d50-91f8-4927886c8808", "indicator--5aa9adc5-beaa-4fc9-a7d4-cb3d48a3c3d7", "indicator--a29fcce5-652e-4778-a9f2-50be9e38b09c", "indicator--d30047bd-4939-42a5-865e-462ed4e8064b", "indicator--eb204d11-1e28-48cd-8c03-5c0e6bbc4c9d", "indicator--cd6f696c-cd47-4d35-8c00-61cd66fb7538", "indicator--5ad9803f-31ea-4212-87f9-ec72a1f5dc38", "indicator--e20fd2c8-b3cf-469a-bdb2-7810aa6dc347", "indicator--a80efa0a-73ea-4457-b5f2-562a497d5068", "indicator--183f1aed-b442-446f-9c1e-606a9a6a2b57", "indicator--7501569a-d165-4654-8270-9e81b1054a08", "indicator--7067f4b5-c209-44a2-bc59-f29c84f164e4", "indicator--9966cac3-c20a-4183-8d67-85bee30c47c9", "indicator--20f26b46-3149-418e-8480-5d9b1710f686", "indicator--f1397495-fc28-4140-8315-8d94a30b5149", "indicator--acad942f-30d8-46a0-a5d4-ab02b4dfbb5d", "indicator--cc1d0afc-ec68-4c3b-b9a2-498f5eb41f1f", "indicator--634dc3ab-9760-4910-9d2a-5c854c0a02d0", "indicator--b413b38d-5d46-46cd-b7be-1d708387a34b", "indicator--7f0308c1-5891-48b6-be94-e8edc4853c8a", "indicator--8c37b89b-382b-44d7-9a5a-19a79866b5ee", "indicator--8744dcd9-a243-4011-8d3f-804f5b50634e", "indicator--75d41219-b643-4541-9216-95e5507a3e95", "indicator--cff18d93-0431-46e8-9761-6be885107056", "indicator--714ea43d-f3ac-4a17-93c1-9fa49bf6c3d1", "indicator--b55d9538-8a3b-4e80-9f39-60388f12e901", "indicator--0cc01ced-2138-4090-8ce8-0cb24ddfdb34", "indicator--8382910f-a5e6-4523-8a12-5065a2046793", "indicator--7f975bbb-a82e-46fd-ac56-488029206fa7", "indicator--23c3ef67-b980-4d7c-9e63-574bcc3d7473", "indicator--b2183830-87ff-48af-b76a-13a8179c4ca1", "indicator--541126af-15f0-4473-ad32-626bb9b35aa5", "indicator--e7e0b10c-a8cd-4d6e-92a9-d20fafd48a7e", "indicator--e62aad20-6ab3-4312-99a7-6db709870925", "indicator--9505c30c-0f31-4631-ac3c-9ae533c401ce", "indicator--f509f3b1-9505-4f55-84f6-3a373fe64aae", "indicator--20a73e75-b01b-4c3a-8522-ae9023b668e6", "indicator--44e821e6-5c13-4fea-b19b-572d16804ed8", "indicator--66fdf396-819c-4ed5-8120-14ea68badcbe", "indicator--2a32e61d-d3ae-41d3-8831-17a22a0ec306", "indicator--c09c4fa1-3536-4492-a209-4fa7ec5582dc", "indicator--59045e84-4177-4241-838b-46adf7041549", "indicator--c45ec1f0-d518-480b-a1d3-742d6bdc2663", "indicator--f2b19cb8-cea5-4231-befd-401149dd68f1", "indicator--dbde9838-4bce-4f45-8947-d58cba7431b9", "indicator--0fbc8c06-ccfe-45c8-a93c-54b73c19ac4e", "indicator--2b105f44-3e0f-48ac-874f-52ccc935c9cd", "indicator--4d784932-9f34-4722-b0e0-3b0ef13e56db", "indicator--8335e7d9-63a8-4a1d-9a35-e0e094cf9fff", "indicator--536f7388-a682-41a4-9f91-69fc785110a0", "indicator--2a55ed1e-7939-44b5-b2f8-dd2d593ba985", "indicator--c12cc18e-1c73-4785-89be-54d6ac93b1c7", "indicator--0e767126-e413-413f-839f-038cab161ad0", "indicator--f12961de-4ebb-46fc-8c31-e425a8709286", "indicator--1815ac9c-0f15-4c4b-96e2-5f2d5776af29", "indicator--544051ed-6b3f-4cd3-96dc-23b241704230", "indicator--76058a0f-70b7-4c7e-a424-93f652b1ed06", "indicator--c52040d8-b7de-4cb6-8959-6fd41f7e77bb", "indicator--f47e957c-0477-431d-ae32-4fca5b1f6be4", "indicator--89f606a4-57e0-4d4d-9348-59b53c95d904", "indicator--de1e54ec-da35-4e27-8dde-8082c025307d", "indicator--c0b8725d-9ad0-448b-86b0-0173aabf21d7", "indicator--05eafa9c-99d8-4412-a6bd-e00ca86e12a5", "indicator--56121460-9c14-4b45-8826-26caf0d2ce95", "indicator--9f7e446c-c251-4ee1-872d-448f5994a386", "indicator--254675bf-6aaf-450d-b351-7543f05e50b8", "indicator--229727fc-2ad1-4e65-b8bb-c04e5ba6e5bf", "indicator--c75290a5-a269-453b-b076-8d72c9487da9", "indicator--33262c75-616f-41b9-8f6c-81e9bc7f3f6e", "indicator--257ded19-7a5a-4fc1-996b-5d13df110be8", "indicator--ce3843f1-8cda-476e-8441-905680e79b5c", "indicator--39bbec9b-fdd0-41b4-8317-1d579fddef73", "indicator--a35eb8c2-c239-4215-967f-8ae767882e55", "indicator--fdfb9db0-5f35-40f6-8eff-41a618985ae8", "indicator--8227d43f-334b-4c35-ad0c-e391920654c9", "indicator--c7e13f7b-ed4d-406d-9152-662e5317d8de", "indicator--05aa664d-5f0b-4ce8-b36d-265f50351bd8", "indicator--4f988cb1-ff7b-4e62-8ec0-57299bfd907d", "indicator--9f820809-b7cd-4322-9963-320090da10f1", "indicator--4430ed4d-0fd5-4343-9134-a4416ed83f71", "indicator--ac8f1c45-1d14-4230-88bb-e64734d5a6b8", "indicator--cc511578-b20a-42b0-9b45-23deb4b5c0e3", "indicator--03f853e7-8c07-4442-b311-9d0cef494064", "indicator--d0c6467d-f7cb-48e1-b0a2-38f836136be9", "indicator--a1283377-28cb-4cde-9326-e3cfc45641ea", "indicator--28f3ac5d-c45a-434c-9cc3-722abf920f49", "indicator--309fe9cb-9c42-4684-957b-792e46352c57", "indicator--e27bfb58-6645-42c3-94d3-16f0ee4518a4", "indicator--c3dae822-d052-4ccf-937b-f71a96cd2424", "indicator--0d138a61-5b7c-4432-bcc5-8119981b4aa2", "relationship--d1922a94-40ce-4dff-a189-4fc47e12ba7c", "relationship--59f71c33-6a3f-4de2-be5e-3dcdd0b554a8", "relationship--cd478c61-df8e-4631-9ef7-9d5ee1ef7eca", "indicator--495fb601-b72c-4847-916c-4a3966ca74c6", "indicator--6c9e4f2d-bd7a-444a-a1b4-9a1a9c59704b", "indicator--17a9b604-e0a0-41b1-9250-5eeede6eb8a7", "indicator--595651c1-6bbb-4b66-b24c-226f7fc0ea46", "indicator--b83d8665-4faa-4660-9883-eb04061b987a", "indicator--90dd560d-cd2c-45d4-b7bb-934105bffe3c", "indicator--d8cc5f3c-4240-4420-91a6-d260fb5f6b8f", "indicator--5970a12f-d3b2-40c2-a314-a79ec56ea22f", "indicator--3c7acbeb-e452-4661-a79d-3e8a4955e6a6", "indicator--f13096ac-55fd-4fa8-afc9-622227bd7992", "indicator--2a0fa11f-0448-43d4-a04b-972bcb5f9085", "indicator--dcabedbd-e743-4ca5-b3e3-8eb124f88ccf", "indicator--3cc51271-97d4-4ebd-b570-4719388af71a", "indicator--1ea66711-ea43-4ee3-a00c-ae0a3fb0122a", "indicator--26c3564e-49ea-41c1-9b59-481ecf11018d", "indicator--984c3632-1074-4722-9150-15bde8a154f6", "indicator--0bbc0ef0-906f-433d-85c9-1a86797274e4", "indicator--5c71915c-0e2b-4d95-b5dd-6d87826691ea", "indicator--2c6b9c1a-f6cc-41a4-bbd0-51872622039e", "indicator--e2d6617f-2100-435b-8d5d-1fe27132664b", "indicator--aba72164-45b9-4a50-9917-0cd30e80b304", "indicator--eb753532-b5b1-4ef7-9c18-f96b54160adb", "indicator--7f07f59e-099d-4ec5-a495-86b6b67ed363", "indicator--23cf0c85-882b-499c-95bb-8df847fe242c", "indicator--81ef3a37-2fe7-459b-81c9-d1b9d2b47485", "indicator--1d68575f-5015-4d2c-97ab-9d701fb5fe1f", "indicator--d218ffc5-0978-49ac-b12b-fcaac50a9d89", "indicator--1245b71d-243a-4768-9255-b7bca1dced73", "indicator--98f359a0-bd68-465e-bb56-113262d0161a", "indicator--a4053646-047c-45e8-946b-87226beadce0", "indicator--d0d057fc-0d7a-4319-8309-37751028b442", "indicator--408e4897-c742-4d03-8231-fbf11fd3f819", "indicator--16c13427-467a-4cdb-8c64-bc05758383f1", "indicator--2653b5c4-a0a2-4b84-9b7d-2a38bdd0f6fd", "indicator--810d18e1-d2a2-48be-9345-f3c4363eeb2f", "indicator--de3b2731-c2e9-4221-bb3b-e2a6d95cc54f", "indicator--c810abed-1990-4eb0-882d-30e8749acde8", "indicator--342f84df-27d8-41a6-90ba-a4b44cae3002", "indicator--a4b66667-80a3-4e2c-bad9-21b49d4538ff", "indicator--e211b602-2a10-47fb-b8fc-143996c9829c", "indicator--a47e15c4-4485-4cc6-acb5-931515ec54d8", "indicator--59995bee-7fe3-411e-b400-0d3dde940be0", "indicator--6c48275f-d50a-4241-8ebe-f94a9fe6225c", "indicator--9aaaed4f-f745-45af-a7a4-5cec7e3d43b0", "indicator--486b9b94-2550-459c-a272-ff7dc16eafd0", "indicator--75d7f686-f635-4ffb-9d81-2b86c43cc9c6", "indicator--272e52f5-571d-4769-b561-5f784678b6dd", "indicator--e134bbd0-2887-4eb2-b875-836a9ed7907e", "indicator--22fb3434-79da-4bfc-b7ed-f931e67ce344", "indicator--34c81c60-a467-43cb-b56f-0d4f18d0adb7", "indicator--895571c5-e6f3-43eb-9a91-83d48bd114f4", "indicator--f054ae0b-7aef-4435-8e08-3fc342875cf4", "indicator--a923c90f-eb60-4960-84e4-efcd06a89633", "indicator--37405b83-a732-47b6-817d-f19ee373b097", "indicator--33e447c7-f312-4735-851a-6e545b8533fc", "indicator--d0c2a628-397c-4a4a-9ba3-fab77b9a8133", "indicator--28709c66-6e9b-4bbc-83a7-1db182d5830b", "indicator--f785b56f-be92-4d55-88df-be2c32a45d2b", "indicator--123c5872-6416-425c-bfac-77a0af634350", "indicator--f1631a41-3fa3-4f82-af5f-c4feca93fa11", "indicator--a7849de8-c2f2-45bd-8bf2-4f46d1a13089", "indicator--6971aa74-cfa1-467b-bd66-09a42cc0c5d7", "indicator--c09e67fe-ee3f-4def-a48e-5424ac715462", "indicator--261776d4-e35a-42df-aa9f-bc387760456d", "indicator--6bfa8445-31ad-4108-af44-e45c9b32a61a", "indicator--ce0277c0-e702-441b-8d80-c306313d7874", "indicator--8744b203-c737-4fe0-aa9b-acb30dc0d0e7", "indicator--a0bf8be2-963f-4dfd-ad3f-d98601866f91", "indicator--f1b5c09f-c188-427d-ac13-682410d77067", "indicator--cc0f5422-1f5b-4b55-86c1-74418f3f23e4", "indicator--5bc8cde8-5ad5-483b-aba1-6e72f0662121", "indicator--5617f8e1-00f5-430a-b2bc-74b4efe49283", "indicator--89ac0437-b1cd-45b8-a0e0-953197819ab9", "indicator--1e6c734b-8314-4ae4-ba06-a20fc9fc989c", "indicator--8bbec2c8-5c42-4906-bf35-e05c8df6c342", "indicator--f55b1386-5c6b-4567-9459-2306a67e82a8", "indicator--f3b7e2d2-bf92-4675-9ff6-84427177ea5e", "indicator--b9b06299-9ac4-4cef-8f41-bd7fa9141b5a", "indicator--38b28ac7-0f2b-48a5-8812-ffb8963c5d15", "indicator--d1c1123c-22c6-4f0c-968a-eecf35611854", "indicator--8173a101-7dfa-4d6c-b73c-baff7e6622ce", "indicator--977f5fef-37eb-42c2-adb4-12fce8a240ea", "indicator--5008a6c5-00b8-45fc-b226-f56079e878a6", "indicator--44742801-7754-4232-ae8e-ddf68e948c23", "indicator--eb2230cd-df08-4547-ac0c-9d93004b7a44", "indicator--a791de8f-5897-474c-9bca-901c755c3710", "indicator--90da93dd-1074-4c97-beee-7dba8c00818a", "indicator--8a801461-a277-4f9b-96e1-f595818c7ed5", "indicator--89a0d92c-ef69-4df1-b60c-b397b3097d74", "indicator--37c3f05c-235a-4821-a186-2d891229bb85", "indicator--a9678928-2999-4743-bdcd-ff70efbe5f9b", "indicator--e7d63cc1-a878-4d05-b4ed-ef29997cef50", "indicator--4e1f40de-080f-42f0-b667-bb0dd5a20f4f", "indicator--bec12817-87cc-449e-add1-b97be1a18872", "indicator--a492681b-fa94-49bb-b921-0659c18848ef", "indicator--ebec92db-93c0-407b-8bce-98364c21b400", "indicator--055204d8-ddc5-415a-91f7-c7dd65257698", "indicator--681cdca5-813f-4fc3-ab17-cbcd07e337a0", "indicator--408eb925-147c-4d14-b00e-b087c6b89e23", "indicator--6cab12a1-e713-4624-a493-15c679589ade", "indicator--60ed360d-66dc-4bbc-aba4-e93d941a3096", "indicator--ac17cbc2-aa53-4596-9806-ce88cf3aefe2", "indicator--6d729d9d-34e4-433c-b8ff-844d8f4600fe", "indicator--7aa889d4-d75d-428e-b0d2-11e46cee5640", "indicator--71ab08da-b747-47bd-9470-f019fddd74a7", "indicator--1bfc34da-fdb3-4bce-9844-a0d50c32206a", "indicator--996cad45-fae1-4543-93cc-487b4f016ff7", "indicator--3619e524-ceed-48fa-8698-074813a8008f", "indicator--ea26cbcd-894b-4d5a-92e1-7093890a04f0", "indicator--26486097-0db8-4c2d-b058-b39d241b1f95", "indicator--15975779-e6b5-49b8-801c-2fed44970237", "indicator--60e084a2-7c15-4c1c-8bca-ddd0350bbdfa", "indicator--c92592b1-a3c1-4d32-82f5-22ed73af9bcb", "indicator--8d602e4f-76fc-4048-a6ac-8363754643dc", "indicator--14e8da2b-bce8-429a-9f45-9447218e9e28", "indicator--2938c157-df80-419b-820f-025b6445d19a", "indicator--aaf0572d-21d2-4bbf-bc93-c0414a0c396f", "indicator--bf5ee12a-0241-4321-9392-91fcbc173bc5", "indicator--eaae871f-b61d-49f2-860e-00f9627fe518", "indicator--057dc7b3-20b0-46b7-8169-ed6a8e0f7f17", "indicator--6e6a0a46-ecce-4bd3-8d01-33153c02bfef", "indicator--e951a97a-e797-4054-a00b-f251ba0c8c60", "indicator--6157e2a6-e415-40e0-9a4f-f120f8b6be8d", "indicator--08f09974-89c3-442b-897c-4043a44980f5", "indicator--200fc2c8-9f76-4e77-b15b-a0f6fcbbe896", "indicator--ee50b701-fe26-4f89-8e92-bec609c4e97c", "indicator--4cc7b699-f15c-4f91-a7cb-52823d891711", "indicator--4da6ef5a-9980-4e94-afa8-4e4359140e20", "indicator--ceb47530-fa9e-49d8-b654-232abe4bc2fc", "indicator--febac9d6-c3c0-4ba5-974f-3e370fc69c55", "indicator--c297ea1b-425b-408c-a3a1-65a8971910d8", "indicator--9ef0a844-092b-478c-8ab8-755de5577d37", "indicator--d8432b6c-5448-47c9-9126-3678ddf95fd8", "indicator--3d7f5cb0-adc4-4429-872d-34595bcce50e", "indicator--1aba759c-bb8d-4331-9175-d443f9ced89f", "indicator--3f7c344e-d974-4ca4-8bc4-0c336ae04696", "indicator--394a73e0-8eba-4a09-bf73-7af7acf3fe99", "indicator--de0ce1ca-f19d-4751-a934-3c6c2bf82a30", "indicator--c072741a-272d-4554-9b44-b59120f0fdd4", "indicator--69eb1c8e-ecbb-45ac-9130-cdcad46d4105", "indicator--7be0341f-5d90-4f94-9e23-64c4b7fa472e", "indicator--e65098da-da9f-4f71-9c39-09eab8db6ba9", "indicator--30e91501-d903-446c-8896-40c3777aa2b2", "indicator--22be140a-400b-4235-9452-d499b00c6363", "indicator--db5a8081-7ef3-4285-a966-52c81102453e", "indicator--78df5fb3-7120-42e3-b806-b6e98f7f5205", "indicator--6723286f-b783-4a8f-8ba8-a52b25b1b64b", "indicator--17c49656-d36e-4f85-a557-b1f3cffd743a", "indicator--fc25a741-7e24-44e4-88e2-132b98936d21", "indicator--8d681a61-0d7e-4805-939f-fea3e03d7ff6", "indicator--fc7c82aa-1548-4860-8b46-543ce0298e52", "indicator--d537978d-1a65-430d-a34c-5ee57704b327", "indicator--e5af9f09-b156-4451-af95-f38c42b113c3", "indicator--cbafe52b-9def-4e27-8d17-0c4f349a4d02", "indicator--fde95f5a-ab65-48c4-a4bb-360f55a58404", "indicator--782e6a30-80ec-40d4-8f97-2007653b80df", "indicator--be19bc8b-4b37-4d36-857d-c8782806fbda", "indicator--a8c07a5d-1798-4f21-844b-fcae59b9efe4", "indicator--06055c0a-d1b1-44bd-9b2b-56a5c4c7492d", "indicator--ab4613b2-8e88-418a-bb2b-bd764e5cc808", "indicator--9690a18e-c4db-4c19-8f84-99dd876e8f9b", "indicator--8def93b2-a02a-4a3c-b5d1-2a3ce453be40", "indicator--897180bc-40ae-4ae6-adad-cb13e6d5255d", "indicator--9457dd9e-3cf3-4fbe-9bcd-1e345ccdd68b", "indicator--9a4b1464-bfde-460d-b136-1e2e55116e05", "indicator--5bb8185c-dac2-498f-b76d-cba8750a4f22", "indicator--9494edbd-9fed-406f-8974-51b5d99241c3", "indicator--499c639b-0cc9-4070-a17f-b47468103bbb", "indicator--9b55a2b2-f4f6-47c4-935f-2adb80639033", "indicator--e533bb18-1523-47e5-a913-b81ff78fe8c7", "indicator--ed2b5619-7bc7-4576-be6e-154f50abe5ce", "indicator--11be33bd-831f-466c-9f08-ba505adb7f43", "indicator--b6707834-3ed2-47c1-b865-96ca5dde592e", "indicator--de59578c-0db5-44ac-b86c-a64deb86a196", "indicator--693c823a-fbf1-4cb1-a5b2-1d54d89cd03d", "indicator--60724481-0c22-4d36-a701-c6c3e369b7d9", "indicator--b9ce8830-8f1d-44c8-9468-f3727fb91ed6", "indicator--16dcfcef-6285-42b5-b112-e7bb794f596f", "indicator--a5a088f1-9555-474d-8f50-ceac07f0bc3f", "indicator--430f7bd6-b15b-465a-8c95-9b63fcf6584c", "indicator--448f72c3-bd67-40b3-b85f-5863e15516c5", "indicator--73adbe35-e57d-4332-ac2b-814a3bbdbb6d", "indicator--19f21237-4eee-4125-be90-b2c9d6931f51", "indicator--5c96d0ab-c189-400f-ae36-f7903abc411a", "indicator--a44d7361-092c-4b64-9f08-112825661e2c", "indicator--0cab212a-0a05-47ab-9a8e-89d0cbec61fb", "indicator--7f5bedba-3f57-4a4f-bb17-245aa7b15a08", "indicator--87810a41-fa48-4a88-8d83-eb251138a125", "indicator--8ffd9dee-819b-44f5-840b-4a7e81f004d7", "indicator--e04a8107-953c-4055-b7ab-c6a2e900cbd6", "indicator--c44efc96-bebf-4b3e-bf9f-322d9c044580", "indicator--8646d3a1-6dea-42d3-a516-502036019570", "indicator--b48b86e3-401a-4ce2-8813-9663d4b8bf6b", "indicator--a012d228-3271-4fe3-8e33-c07f608c7a63", "indicator--ca363609-2b9a-439b-b273-7ed81ddf6456", "indicator--f3005831-fb02-401a-a6e5-aaaf7e915f2d", "indicator--6c966082-5dba-44ba-acbf-81c6690aafd3", "indicator--28854e74-ea8b-42e9-b95b-f9eb0d955b86", "indicator--f19b957e-3146-4c45-85e9-4aef35b512bc", "indicator--88921856-c8e8-4005-b2bf-8bf15a921fc2", "indicator--671cc436-f61b-48b3-ae43-e241ce74f94b", "indicator--cbab7260-5909-476a-9e76-95bd78c87d7c", "indicator--4fcc0228-5844-422a-bae6-bc1fa8ec7461", "indicator--d3c7792a-cf4b-4339-8c33-29160e9ef8c5", "indicator--591ffdc3-c1e4-41d3-a07e-0bf470acd1c1", "indicator--2c4f679a-4eb7-486f-a57c-473287f48cbb", "indicator--cb326708-92a2-4414-acec-ce734b712393", "indicator--7f57cbb4-6f2d-470e-8a04-4f2ebcd9568a", "indicator--e5b3be7c-9e89-4d66-91b1-334fcf83c5ff", "indicator--84300933-3698-43bf-912a-0bdb9a95fb63", "indicator--6fafb87f-9437-470f-beaf-97c810167770", "indicator--a2945e39-393a-4336-a5be-5bc4b4dca644", "indicator--d00e9c19-636e-40e4-a2bb-15e79daba602", "indicator--53ae7c24-59fc-492f-a1e2-ccbb74b5549a", "indicator--38ce76e9-c97f-4278-987e-b2e8c2617f57", "indicator--24b42ab3-cbc0-4fec-af82-b726aa693583", "indicator--2efde58d-f42f-45ce-a645-38cbd3fbc312", "indicator--5c08b407-a2f8-477e-a4c9-dd22274a5f68", "indicator--1eb1744b-002a-4e59-8129-0d13f14d407d", "indicator--be73d5b7-84f5-4deb-b239-70b0035d7b72", "indicator--388025b9-6de3-49b3-a221-409a05839a58", "indicator--9513ddac-ad70-4c86-8b87-dacc5fea2f1a", "indicator--3b76e4a2-4c2a-49d3-9951-9eabff4dae71", "indicator--41f2a386-3ca0-48bb-b27d-5dfa3bba5e28", "indicator--2aaf1537-5dc1-45b8-8ea0-a3a13782ed5a", "indicator--7ad7db10-ac27-442b-918b-1983b7aa8d08", "indicator--05997a6d-5250-4dfe-9ccc-36b6b2eb738c", "indicator--0116cb9d-6b01-4539-b635-70f956bf555d", "indicator--c868b2c2-3b94-4b38-9438-e248fd0b6b65", "indicator--dc147fef-b5e4-4ae4-be8a-39b4940bbf9b", "indicator--5eb904bc-27ac-4c8f-a3d4-e81243b892f8", "indicator--a336cccd-cc66-4e1d-a991-058011fbe685", "indicator--f3e2661f-ddcc-4072-893f-37c42e51c252", "indicator--e0d98297-cf29-4c8e-89c5-714ce7226cde", "indicator--a0ba8d73-8600-4a98-8a72-729244f1c5b8", "indicator--6bd81de0-9290-4f78-b13c-696d3178b546", "indicator--31457f3c-7b3b-456b-b6f8-99ebd0e2980f", "indicator--00b13cb0-4319-4ad1-85d2-99b33f7ab65c", "indicator--6dfc0c7c-b5f7-4ea4-bb73-9ffe04ea235b", "indicator--db1c994c-4d4e-4cfd-a357-67c6f2f28ac6", "indicator--eb65b4af-28be-4756-921a-0e63bdf72291", "indicator--d965615e-6195-4565-8a84-74745421695f", "indicator--05c726e8-bc90-485d-ae4c-c424fac8ef35", "indicator--c46dfe98-fcaf-470a-9cae-be14633a4cb9", "indicator--b5687502-aea1-4f3d-9586-3746af5e252f", "indicator--7478baa3-6b15-45d5-b02a-66444afeacf2", "indicator--ec41d59d-c5f9-47c4-8cd8-94ca83ce1f31", "indicator--5328296f-2d70-4b7b-bbfa-d486ffa4e1b6", "indicator--8a750a6b-e9b9-4cc0-b3f4-0ab35493447a", "indicator--6844cb96-41d6-4e12-825b-e0241c011e67", "indicator--717552f0-8e56-4fa1-94d0-947ab1b29cc9", "indicator--f0e7a496-b16b-42e9-b66a-0c7f0ce95af7", "indicator--6d2311a2-517a-4967-a466-ca14d80a192e", "indicator--0cb6b0c4-633b-4086-af75-1ff676a03b57", "indicator--9b022f2e-356a-4cbd-b408-33dfbb26bf09", "indicator--77cffca9-357d-435f-b1ff-0c5ab0778740", "indicator--03a3af53-0221-4897-b84f-cb34ee30cf13", "indicator--13548799-61a1-4cd8-945d-c51850292a27", "indicator--2ce7c5a2-237a-4ddb-a8b7-0008a334b97d", "indicator--332b1e58-dd52-46ac-914b-c84898e0b144", "indicator--2f5a97f7-6b97-4121-bcba-bf32cc975e3b", "indicator--77501db8-4e65-4656-bf73-a2c1b12e5386", "indicator--7f58863c-9a91-4e8f-864b-fea65bfa0bed", "indicator--26672aab-642d-4beb-b55a-3824dc3682fb", "indicator--c5afdae3-7d16-4805-9c51-8f22dccd23af", "indicator--79d75ffd-c891-4edc-aada-3d7fb71b9a6f", "indicator--92d60c55-2887-4871-a5f5-7f08fd575df4", "indicator--a7272054-1f09-4791-a984-2c5efee09013", "indicator--98ea9e1b-44e6-42a6-b43b-f39cc4d82988", "indicator--92a06d06-56db-4c3a-ae17-cdd4e7e41595", "indicator--b12c4754-1c2a-449c-a33b-b5ad86a2624f", "indicator--b878826d-e547-4533-ba18-ec2a38bed283", "indicator--9e12ff65-e0fb-485c-ae89-cea994d21e4a", "indicator--2d5f00dc-5cc2-4781-a0b8-62816acb5ca1", "indicator--aa11cf22-16e3-4ad2-b16f-f1ff942850ec", "indicator--435ebb01-e115-4e6f-abc3-a1444d60bacd", "indicator--ae558ee5-a4f5-4d3f-8321-54b2ff6437d7", "indicator--c0dfb7f4-1ae8-4bc2-b590-4d8f62dd5cc4", "indicator--902f9ade-f8de-49e2-973c-b7a8c23f2e7b", "indicator--2b100559-13ea-47fd-bdb5-fb92636ed093", "indicator--ce5af255-e517-4fff-b360-688662eb605f", "indicator--eb20e450-2d3c-48a0-a13b-ce5778bbae1c", "indicator--f6665ac4-db0f-46c6-addb-889fa4450da3", "indicator--3a6fed18-afeb-4420-8a24-7ea003e6bdb4", "indicator--286172d7-f887-448c-8631-3f1397cb7df0", "indicator--f2b379e8-ac43-47b8-ad90-d4a81994b43c", "indicator--d475872f-2d1e-46b4-9d05-d2f4a5b98354", "indicator--d9a301b2-28a7-4a8c-9faf-e6afbdfe5cff", "indicator--cb661d26-ab8f-41dd-9a04-4af883107a16", "indicator--fbb98a94-640b-4ffc-adaf-9fc9d8a7bdb4", "indicator--df1c6510-dc38-4a7d-8d53-8b37f60abbe5", "indicator--23de2821-8393-43bb-b411-350681d2e08b", "indicator--a643c1f7-30e4-4de6-9598-bad46850a721", "indicator--674e2019-17ef-45e8-ac5a-8397e1b8476e", "indicator--9fa719ab-0a98-4227-8ad0-45b48b896d88", "indicator--f08c1d5c-7c26-48f3-b3da-5772d32102df", "indicator--d8fde169-5569-4dc9-b0fd-c8942d6a7fdf", "indicator--5560ac16-69c6-44e9-9961-b4500078f65c", "indicator--81033bc2-631a-4644-a0cc-5b12dae4eedd", "indicator--43672b63-5381-498f-92b4-f45d03168f66", "indicator--18a11512-3c04-43d3-b2f9-2ab0a2484bdc", "indicator--56f26655-0df7-434b-9c5b-81d24009b176", "indicator--53b21720-5479-47db-9edf-665e6d7c9d41", "indicator--d32457b6-1908-421a-8de0-9464bb0b72cd", "indicator--6508fd38-8c1f-48a5-a022-0399da13f48d", "indicator--301a6357-0a39-4ef4-8bd7-0ceba6a76385", "indicator--37cb1ccf-1302-46bd-bb16-6b610449475a", "indicator--ba507ed7-6556-44a8-97e9-f0ec9ca934a8", "indicator--c7876a9e-2566-43b6-af59-ca7a3fe79819", "indicator--ebefbb91-2985-48b6-ab4d-46f96969bc65", "indicator--d01a5d13-6f65-4f9d-b783-52c962452909", "indicator--c8598708-4e23-4eaa-bf85-0c5b80ceb4de", "indicator--a862fb00-15f0-44be-87d6-e9021b21d0a2", "indicator--5ff23bf3-cb1e-4eb2-aad8-954d438a2e9b", "indicator--9c182992-f1db-43d6-a24a-2c3f0f1f9608", "indicator--19e87038-6300-4eb0-b932-83644e7a8713", "indicator--d1f811ab-7d36-4b26-a417-aec2234b7039", "indicator--27baaf0b-dd93-4b18-a767-01f1165d23d5", "indicator--ec8b64fb-3b4b-4c2f-8b13-6f1db5fb38ef", "indicator--2058fe55-64c2-4b27-85bb-4bffbd4a0a89", "indicator--8c88ac40-ba52-4ac2-b01f-34f4f778ecce", "indicator--7917575b-80cb-4f6c-822a-6db1ef4f7baa", "indicator--c7a50854-2bd3-4c13-ba59-610e5f2f83c3", "indicator--94c10974-481a-433f-9833-eca38e6cdd8d", "indicator--df422e11-6433-47fc-9476-6ba9c3b835e3", "indicator--eea877c8-a42c-4dce-bc1e-3cd8508c7da8", "indicator--b71519ba-a599-41e8-92e1-ce73178891a7", "indicator--fd82b8ac-bbe6-47ca-9319-e21af5f854fa", "indicator--d2f602c5-c24e-469f-82e7-3e5c2343b9f0", "indicator--265ea51b-a9e2-4ad1-a0b5-98a16c039593", "indicator--fcb34b4b-82b1-43f8-a81f-85a52f8d9006", "indicator--10e1d129-545e-43b5-9b98-6c529d77f3af", "indicator--e4d2db4e-8c05-4f9f-affb-197052d18341", "indicator--73ba8ee1-1587-4e29-8303-9eed5db2a588", "indicator--b0b03ec7-5d6c-4be8-ad7d-c315a9440db0", "indicator--1b3c434b-7478-4de5-8b3b-745f57ccf94b", "indicator--8f88bd12-5ec2-4388-aecf-900b883566b4", "indicator--4995a25b-8fa2-454a-bbeb-de1aaa7ad5a3", "indicator--3b60901c-bf46-4f41-9625-dcc7760ba2f3", "indicator--082b03ee-8d83-48bd-bcd2-46a181d40011", "indicator--9fa88b52-dff2-4557-b1b2-d5422a247c40", "indicator--493d8313-2ec5-4cd0-9d76-ca4a9e58fa0a", "indicator--372d1855-b774-4cb3-b4a3-a452ad9274af", "indicator--eba410bb-1ee2-474d-bf2d-6c6e09ac5dfd", "indicator--10c5277a-299f-41bb-b417-5e8d29d33dbb", "indicator--a81f4409-e0a3-45eb-876d-7442f0da3d05", "indicator--171d676f-e203-4c74-b0d2-42ee7c9fb68d", "indicator--7aa8dd73-1229-48bd-b069-1e2ee88191cf", "indicator--19527239-0da5-4f23-a4b7-e1df3c3f38c8", "indicator--d9be53e1-0386-41ed-a154-ea6cfadb3582", "indicator--cc649c4d-4b22-4b3b-ae5d-4317fb2377aa", "indicator--ddeff5ac-5828-4a41-a6ae-d532b2457a76", "indicator--849635c6-7ab0-4ccc-b99a-eea0a0bf3cbb", "indicator--bbacead2-962a-4c86-b68d-6a82472ce01f", "indicator--01f9af16-2079-4df2-a60d-bb4d5a171582", "indicator--d328f991-338a-418b-befc-44f045b742aa", "indicator--fc9ac723-ec58-4856-b618-d139035b9880", "indicator--0b848b22-6e24-4666-babb-e7695d69a787", "indicator--2ec56be4-5bd2-4a36-8019-9318ae45ce35", "indicator--37e50588-0489-4d81-8e24-9b029e8b29d7", "indicator--aea8b42c-be84-4310-9eb8-39750e5dbffa", "indicator--a2c7b007-cb5a-46c3-8edd-4389710eaea7", "indicator--2b428b6b-724e-430f-a0d4-879d82be03d6", "indicator--17f3407b-520e-4dcd-95a9-daee44d90863", "indicator--be6e525a-c9b8-425d-92fa-19d4ae242441", "indicator--32343de2-816b-4df1-bd36-66a47b207a15", "indicator--12e909f3-117c-4ce4-aafe-523794b6c117", "indicator--e7fadb14-cc08-4b4c-b55c-5c71c73ca9f1", "indicator--130a925f-dec7-4ab1-830f-9770679c02f6", "indicator--0173c137-a573-4fc8-99fc-27977e6272dc", "indicator--915c9c6f-f694-498c-96f6-a5e5d6d62bc4", "indicator--d0e71b32-84da-470d-908c-aa3eda4ca706", "indicator--ad012ceb-edf2-4650-94ab-1cc3f4ef77b0", "indicator--3ba1898d-ebcb-4d29-ab5e-1b350b18defd", "indicator--08de0e8e-6cb8-4de9-ab34-3ffbe6bbe208", "indicator--0266f7f7-38cc-4507-b792-e6cefd93357b", "indicator--45a8947e-8fb5-4078-ad53-60c5e564926b", "indicator--7c83c12b-950e-41ae-bd4d-eeba9193430d", "indicator--a8439b6e-547d-46f4-ac1e-b3dd7069a8f8", "indicator--3e4e0870-8cc5-417c-b76b-23b1fa3151c6", "indicator--0086a6ec-985b-4947-9d68-dc820982adce", "indicator--41329869-0d5a-41d2-afe1-6a314c55fce5", "indicator--195b603b-c3cd-411e-8e49-b6bfbb225303", "indicator--2f17d21d-558d-4a4d-92b2-98273ef8fe80", "indicator--6d1a67f3-301a-4af9-b14a-382405016a25", "indicator--a2b72757-63a7-449b-a23c-b3488c2da653", "indicator--60f088f9-cdcb-4e80-b76c-3790170445c7", "indicator--b9b25d18-c4f5-47b5-aa01-b465bb5cb0d1", "indicator--b7b95a4c-6851-43b7-b377-e12160b63db3", "indicator--52b29959-e12e-4eda-83ea-c174fe0a5f17", "indicator--a45b0472-a565-49db-b7e2-bfe92ac26f8c", "indicator--895ce234-f43e-408a-ac1f-d89b25285d75", "indicator--e54cd447-c6c5-45f3-b553-ceec2c9dbeb2", "indicator--2bfdc0cf-32d3-4500-aba8-6ef10ce29457", "indicator--00d404a2-4002-4619-bfe6-87d573251801", "indicator--fdd015a1-f3ee-416d-b056-b633e615f126", "indicator--5c8b337a-58d7-4083-b475-61fefb7cdeb0", "indicator--d043085c-5e9d-4eb7-8bd1-3b279415b295", "indicator--ca319a9e-c6f1-4886-b556-2a2a1edc1a59", "indicator--c6411788-f3c5-4dea-96b1-16c020ef0546", "indicator--09051894-9ae0-4022-a3ca-b1ea6957fd4b", "indicator--99a3a40d-ea54-4802-9e25-f856cf9a35fa", "indicator--ea301c6c-9dda-4e40-bd40-3b57f8c0ff40", "indicator--d7059b87-2f42-49b1-a70d-03eb5a0fe158", "indicator--adf4998f-a755-46f7-8938-13806dec3317", "indicator--e34ae60c-eaed-417f-b5e9-1de91a5d1252", "indicator--ce93cfeb-030e-4e4d-855e-dad00b6850cf", "indicator--f22ce05d-f1c6-4acf-b6eb-97c252963346", "indicator--9726bd84-76ba-4cae-909b-cf57887f7992", "indicator--1087f45a-f037-4b4d-bfe7-7537c1fe0b2e", "indicator--b97b30cc-a16b-4e46-8d9b-ef36d369c090", "indicator--afe88042-4810-4210-bd55-e8f1279ff789", "indicator--0778312f-58ed-4c06-befc-0e215d6dfe71", "indicator--4538fa28-0577-4dae-ae35-70995dd90c8b", "indicator--e7330923-1ceb-4859-804e-6e5574a99081", "indicator--afd23dd0-d736-418d-989e-18357964bf77", "indicator--a8869e4a-fc6e-4c4b-84fb-a2c79ae7dcfa", "indicator--ebf19dfd-45fe-4d74-8a40-3c4516e3f19c", "indicator--c7129dba-5dca-4cd3-89e5-586a63479a49", "indicator--aaa6c930-a023-460b-bcb2-6ca431f06edb", "indicator--ad3799a2-a810-485f-ba30-611d7c1d95af", "indicator--d2326a00-152b-41d5-972c-fdfb3705b710", "indicator--56f5c610-5638-44b9-a5c9-1970615b8901", "indicator--1df8feaf-835d-41f9-9dd1-319c6d5098db", "indicator--f0713f4f-469e-4993-a8a1-28d212b566f4", "indicator--d429f9cd-e139-4566-afa8-5de8f19e7519", "indicator--a32eac01-f287-4994-985f-495a2abfc399", "indicator--6dcf529c-d93e-440a-b356-a3998d122427", "indicator--fb7d2938-f830-4b74-9cdf-6169aae32f81", "indicator--15f13db3-d151-491b-8e55-d430f75ba4fc", "indicator--a0e08776-b6dd-4553-9f9d-c154e2d71460", "indicator--0774ef8b-bee7-44c5-9293-7b315f63e7c3", "indicator--e4a7bebe-e4fe-4560-8970-2c4ea7926d53", "indicator--d84bbf47-54ea-4bd2-8a95-7179a374bf54", "indicator--154801ff-1519-4cc8-8323-ca066de13041", "indicator--ed2da661-b035-4604-b9a8-44dc6e2e5dde", "indicator--b59f4bab-5bf6-4be6-8131-04c5316bcc54", "indicator--a4734c6e-1aa7-47c4-9644-e1026353b989", "indicator--65912081-edc2-4efe-8de0-8d82d21b9e16", "indicator--53d5c1bd-98aa-466f-afc1-bd8c8cec0bff", "indicator--2dd2e95b-c45a-4cdb-9d3c-d71c72042af6", "indicator--3878f018-321d-4a93-a1aa-71e8d764412c", "indicator--4ef6565f-b258-4aa1-a88a-7c6e39bbabb8", "indicator--ba4a51d6-094a-4995-8a09-6dec29f8419a", "indicator--a6149586-9d6b-4523-84b6-255f1c230377", "indicator--5ceb4e77-c454-447a-9fc7-52c1fb7a1782", "indicator--cde7315c-4808-4b1b-8385-9026419f9498", "indicator--487449b7-f0dd-4703-aaa7-1ed287f07e5a", "indicator--2c36882f-7bc0-43bc-ab43-5a10866342a7", "indicator--39332e77-b2ea-4ef8-b957-3f6e6bc54210", "indicator--261f8439-7ae8-4782-9447-67b9a34ffd67", "indicator--dec3dac2-152d-4ebb-9e4b-aa39035966cb", "indicator--e405a5be-15c5-44cf-930b-e4c0803748c5", "indicator--04e93fd1-5478-49bd-99a3-a9b8d6f484af", "indicator--9d46570f-5126-4d6f-9274-ee2ef40528c6", "indicator--ff6bb62b-76a9-4fef-a12f-329dabdf5d4b", "indicator--f20602a9-32e7-4206-a08b-f5000b969c0d", "indicator--b0d5b979-0c24-45e1-bced-084a9fc97c83", "indicator--7f765dcb-e285-4f44-bc5d-68bd94524625", "indicator--96695bb1-1736-42b8-aa0c-20133584f92b", "indicator--e5f51ef7-d873-4cf5-a252-17f90ae4e94a", "indicator--e83f69d3-d762-4207-9fcd-2a445cd68fc3", "indicator--c3ba7cef-7760-491c-9198-0d40c9acee38", "indicator--5e5cae09-8c81-40ca-8905-7e8891536013", "indicator--e1c7859a-d204-489f-bb8a-2a9fdda342ea", "indicator--ac32cbfa-1905-4f38-bf9d-f6c2decf9e0e", "indicator--f0f58baa-e9fc-453b-a02c-449cdda51293", "indicator--ddbb069d-8f77-446c-b18e-901239e058f4", "indicator--141c1ee7-209a-4f12-9340-d561d2685957", "indicator--2b97058a-3a7e-40d7-8a26-c9c69f5346a8", "indicator--4a1cc7ef-ddb5-4f51-86d1-415dc4757ced", "indicator--fccd5469-c170-48d8-804e-bcbd196f426c", "indicator--21dd44d2-0ce9-4254-9e3c-89f99a7afc0c", "indicator--81bda6f5-cfff-44d1-a161-c20050ce2b5b", "indicator--29db87b0-a696-4335-a713-f9093bd542e5", "indicator--ff282385-82e1-40bb-b804-d3212a268a4e", "indicator--1c06d1fa-4b66-4cc2-b03d-a0f2587298d3", "indicator--b6385d5d-82c4-4d92-aca2-a8612330c7ba", "indicator--8ab9bca1-f8c3-48ca-a37c-15307a774cf4", "indicator--bc9f256e-b9b8-4ceb-ad4b-0da8581618c2", "indicator--8dc02399-ce17-46a2-9a3d-1b7fe99d00b2", "indicator--0de111a4-3f60-49c8-9e72-8dd0a49f2f72", "indicator--b3ec4f84-8c2e-4c6b-9b18-8d7748b74938", "indicator--11e36f59-be45-4e77-acef-670c397cdfdb", "indicator--43bb8aaf-fe98-4560-aa1e-71df1731efee", "indicator--c3f43958-e2de-4e5b-8f34-4725103fb5b0", "indicator--aa0e4fa2-0e2a-4728-b922-f1ef48f4d86b", "indicator--4b52d03a-c5f2-4b7b-8f0b-387433781c62", "indicator--a808e2d3-1748-4fda-a036-de599a4a9c04", "indicator--8e2934f3-4478-4808-8574-4da897bf9f42", "indicator--61f9f460-5d1b-4f08-a672-d42546172e5c", "indicator--6c9b1f9c-e9f5-423a-a59b-679a1e77b163", "indicator--fe0dad0b-c4ac-4a63-acfd-90e96ebf4eea", "indicator--3cbdcc28-1680-45dd-9f83-5880ede056c8", "indicator--e0d8fd52-8232-43e3-9a0d-bd09ebc8ff89", "indicator--e16f0970-12df-49f4-a962-4ee7ef79bee5", "indicator--929e0360-5594-4cd3-ac1d-56c4c4226905", "indicator--643d6c80-af6e-4db0-a52d-956790deafff", "indicator--acf12e00-0d3a-4926-8fe8-f89b02e3c78c", "indicator--86fc046c-9bf5-4003-8ecd-2ce35974e937", "indicator--d288049b-30eb-40cf-9552-aa6bc51b4aca", "indicator--c019ce55-01ee-4135-8ba0-290af0e3fc2b", "indicator--77c93881-c59b-4149-a431-2c0a669336f6", "indicator--987e8c47-d24d-42d5-89e6-cc9eb8f709ac", "indicator--866cd0a9-b085-462a-9e8f-357d0d24b342", "indicator--4554c15b-d3b2-42ed-b749-94f4f8681968", "indicator--3cb426ed-58c0-42bc-8546-25de16898355", "indicator--0bb962ab-52c0-4050-93bc-2b455d05e31f", "indicator--d08d2d2d-9036-46ce-a499-8bc1050a680c", "indicator--c0aa8927-9e11-408e-9014-1092a9c62ed3", "indicator--df44a195-0f19-4b1c-9fab-75a7a7a20b4a", "indicator--ee45eb1a-d9dc-4d31-bb87-3d83ee8126bf", "indicator--34ef5137-0b1f-42ea-97b6-a9389f9181f8", "indicator--0a13cb24-ea73-4bf5-ad2d-2ebf52e48a01", "indicator--e51b6f10-43c7-480d-92d1-6b0cb4d201f4", "indicator--97687c0b-ffdb-400a-a04d-8d2229f88d85", "indicator--4daf7012-c1c6-43a0-b1ca-a6db8dca9b7e", "indicator--302887e4-ef73-43e9-ae2c-54cd80949cb7", "indicator--cef88424-43fd-404f-98ce-3e029d70b09e", "indicator--f6ff861b-2270-4b4d-ae3e-cfee4bf26337", "indicator--6d51c653-a1ab-4095-8268-fab9ff0b4845", "indicator--7b33c714-c0c6-4005-be1f-7def83919fc7", "indicator--8024a2a6-8a78-4ed4-a7c0-5c086cd87c3a", "indicator--90a60b8e-8595-41e8-97a9-c7201307ff60", "indicator--29197df2-9a68-4d34-b46e-0b29eb7bae38", "indicator--f45998cb-5a26-443e-92e1-276b1d3f6adc", "indicator--9fdf812e-542e-455c-a865-0cf112a9df52", "indicator--014e3818-a102-4dd5-9154-ee0be87dbd25", "indicator--1d8051fb-a367-4e6a-982b-e1e395b7c613", "indicator--0f8c41d2-2801-43e0-af6b-f3a4901b3432", "indicator--e7f3e860-50b5-4763-9d8d-326c6bf6d489", "indicator--d2900452-19c3-44be-9b29-a118d591e9d8", "indicator--321c7e53-6a46-4f66-8f68-717c8c833022", "indicator--0f285bce-e3c8-47b0-919a-92564f5d0900", "indicator--3bd02216-f24b-4f12-94b0-ee29481151dc", "indicator--29ec8fb5-0e02-4632-a8fa-901b5c957cc4", "indicator--59721674-04d0-483b-8834-b13a86c42005", "indicator--0022aba5-d63d-4a8a-9179-9fc676b69ee6", "indicator--df0f4d6d-7ca4-4b01-988e-87888811e7e9", "indicator--ee36a543-8180-481a-be9f-f91d4c6281e9", "indicator--b1b499fb-05de-4624-9f3e-0aa9426443c6", "indicator--106c04bc-0cd8-49fc-b371-0161b801e4b3", "indicator--b59825b8-9e96-4352-ad92-82abccfd0e28", "indicator--a0d128d2-58bb-4b4c-b8fe-06235e4c1f0d", "indicator--3b465506-a01c-47a1-b3a3-5598c15e449f", "indicator--d7801090-df09-4546-a324-0b686be417c8", "indicator--ebd9fba6-8a0c-4a09-a4c8-53ad784b9a95", "indicator--c4a85732-526f-452e-83cc-641de3a4bf41", "indicator--1a9207cc-10b8-4979-abdb-2ea0772a91c0", "indicator--8582b2fc-18fe-4262-abcd-f73bd90ea08b", "indicator--f1480395-079f-4ed8-9277-0b4e7c5dc859", "indicator--2152b073-29ad-47ee-a01a-bbc0c0f3963b", "indicator--87d541a5-a9cb-4a07-8c11-2f919cde3121", "indicator--256b50bf-315c-4065-8486-f9c182800c02", "indicator--329b5f47-92b4-4406-811e-110be77680e3", "indicator--566246c7-3322-4baa-b2f0-14fe3c7fc828", "indicator--5d812cdd-324d-4016-aaa8-0d2f711d6c56", "indicator--2e90c02d-362d-4422-a605-c5175dd6a844", "indicator--0ca0fdd0-5701-4ed6-82dd-49c0754728da", "indicator--470ce375-c234-48f3-a1d2-99cda7bb74c1", "indicator--7ab1dc4f-4b6a-424d-99be-3bcb1a50ff9b", "indicator--582f85df-3e2f-444a-9112-ffc25d8c595d", "indicator--cce4da15-5a93-4204-bdc0-fed5bfc42eb3", "indicator--3e153697-4206-47ec-bdf1-1067bf3a84fe", "indicator--9e72b30d-6ecd-4e56-a5f6-8b90c444d558", "indicator--a7f31611-c6b0-418a-935a-8dd569a16604", "indicator--7c642d13-655d-478d-b07c-5de5cd3b3c18", "indicator--913774a3-82a8-42c4-9938-135bcf6ccf71", "indicator--518c648b-b2b9-47c9-b895-35399dfe1031", "indicator--fd01e5c9-79a8-4749-a5a8-153651cd64d2", "indicator--8a66638f-29c9-4d73-b371-4a9f5db996ad", "indicator--06f5eff7-0099-46f1-a70c-ce15fdaa9ae3", "indicator--4c8d2b0b-0570-49fe-b47a-2602e75d2884", "indicator--7cdd486e-07f5-4852-8bd3-8f0b01f05e50", "indicator--c7b0865a-cc26-4aa5-849a-2172c3fa55b0", "indicator--06f47c97-c50b-49dd-bb46-ecd6f05fa38f", "indicator--be9d5385-5aa1-4150-8b64-d4318e72e8e4", "indicator--e42f3023-cffa-4132-bd0a-47d720494e0e", "indicator--d5a91b34-59fb-44a9-b383-d6c06f5f432e", "indicator--6e44bf40-04e5-477c-a534-d9fbf9a2ed60", "indicator--1fd8737e-234e-4bd5-8a58-05624b32cc42", "indicator--ac550cb4-c1ef-4290-b7c5-cb19aefa2fa4", "indicator--42136208-2ee0-4d46-a095-a65c8b685d68", "indicator--ae56ed88-2ef3-42a8-8232-5e5e7fb85010", "indicator--b9961867-2426-421b-b141-794a633745d5", "indicator--8d2ce8a0-96f5-4353-a2c0-2b995f3309ac", "indicator--b62918be-e6a2-402c-be2d-b8335ac67054", "indicator--b0155ae5-0369-4cae-9c52-f40df159818b", "indicator--d35bf04b-176c-41cb-bf4c-09fb4e8502d2", "indicator--a4af1de8-9ed9-44cd-9f9a-e2262cd6ce08", "indicator--63c95e34-40f6-44c7-80f4-68754a52371f", "indicator--c7c048f2-8e2a-46f6-80f9-5ae72b9d63d5", "indicator--6227438e-7019-40a9-a54b-0175a863b4cb", "indicator--f15e3e15-90c2-4bca-9924-7fd6e0e08ba5", "indicator--19a1212d-1a8e-487e-adb5-5d4d8538b3f1", "indicator--9064a3b2-603d-43e1-b9fa-3bc59169ca0a", "indicator--9340d84f-cdae-469c-8aef-ce4a4acdd5dd", "indicator--a6066403-bcc2-4332-907a-bf63fbedcb43", "indicator--82b8155f-9ddc-4200-ba1f-2815420e10ae", "indicator--46a45d62-49b9-428c-af46-71a7acce081d", "indicator--73b637e8-1086-43a8-abd3-5fdd5a551f44", "indicator--2c5bf90c-f165-4611-b77f-965787929ac9", "indicator--091a1183-2472-4512-97dd-cd989d3f77e1", "indicator--3ec03154-31bd-4ea0-8ad4-5f142435ccb1", "indicator--541fa9a2-3e41-407f-a5c6-d0d427b29ed7", "indicator--a5e5420e-36b4-425a-9e64-08d3bb875c11", "indicator--c2b53eb9-d1f4-4a24-82ad-8658b0c9f788", "indicator--24bae0b7-d402-45f4-ad16-e4bdc9cc550c", "indicator--67e631b8-2799-4f96-9bcc-279f6cab081a", "indicator--0516454b-d299-489b-bf13-57b3819f0f1c", "indicator--9a3ab4ec-afbf-4f28-9de9-38d0fbad10ef", "indicator--75b4f96d-1344-4ab0-8c51-a10598f0a10e", "indicator--7e9d7b0f-4cb5-4088-b402-f1e4c6dea09c", "indicator--d639c305-3158-41e6-be1d-77059ab76942", "indicator--50a3db06-0eb0-4655-af7b-da17b7283d17", "indicator--48e66b78-4e61-404b-a7af-9d49fda51ad5", "indicator--f62fabf4-995b-47ad-a161-36a1d3dfb10b", "indicator--6d2c4027-1ec6-4a07-bcca-37f0ac9fff67", "indicator--1532c169-ce2f-4ec0-a4df-c8c3a67a6ed2", "indicator--071c02af-016c-46ec-8208-5e413136b20f", "indicator--dbd41eea-fb08-47e8-9d07-8ba3a03c9d50", "indicator--ca3f51bb-d37a-40c2-8c96-97fbdd8b2806", "indicator--1174b27e-1bbb-40de-9656-7521a0e73149", "indicator--a4a6ff66-2777-4f6c-bd5d-9936d798ec81", "indicator--7c7c4382-054a-4811-a026-6c3a92b9b2d1", "indicator--1b7c8c95-6119-4d7c-a5c2-97435b2bebb0", "indicator--b9b3e283-2274-4abb-aaff-3ef3c6083bac", "indicator--e2447e6a-c5cd-431f-a100-957a5871227e", "indicator--0748ee5b-bcb1-4620-96ba-b69b7a64c413", "indicator--e42dfe1d-efa5-4cff-a326-555d93944c00", "indicator--a4539dcd-0d1a-4684-9339-394609bbfae8", "indicator--bf5f758c-4a35-45e5-9db2-41be3275b5f8", "indicator--5ef430f7-419c-4ce6-93be-f85c92c8243c", "indicator--c6586655-0a45-4f77-ad4a-1f3cef800f67", "indicator--cbb1f1d1-dec6-4858-aee1-5893893c3617", "indicator--ba1b9510-a72a-4ebe-91a9-dbaae90e1dd3", "indicator--249bd05d-4e3c-4e69-ae41-dcc61585b787", "indicator--fa209cb5-1524-45e6-ac81-16e628b2b964", "indicator--e6241db2-da8f-4248-aed5-05844031f203", "indicator--de49d97a-ae8e-4f30-8512-94188eb90d54", "indicator--95c2e6a2-8d20-4a45-9b90-785cf3dc52fa", "indicator--0b37b8ab-d852-4a60-b521-1fb579d87251", "indicator--81e553ef-3998-4751-bc03-a2cc9168b448", "indicator--c61d1984-5d44-4d9d-ba7e-3bd662030921", "indicator--37c0335d-45dc-4f87-9076-8da3e1bf7eff", "indicator--acfefaf1-d149-48bf-b621-b43eca88a10d", "indicator--580f5d35-4ff0-4ea3-b301-6260b23abb0d", "indicator--7eea7ec2-d6e9-48dd-8d0b-94f954fdb283", "indicator--36c063be-69b3-45e3-94e7-fa95126b944a", "indicator--9f9905e9-f2ee-4348-85fc-980c513ebf56", "indicator--a87d730f-6ebe-4e69-886b-95e9f81f6c35", "indicator--42f470eb-a7e8-4076-83d3-a5da56ad6029", "indicator--12d74841-d558-4033-8239-f048d849aa0c", "indicator--fbbcf38e-d9f0-415f-9486-6729e69719ec", "indicator--2a57ed7c-a330-42de-baad-b1f5d622d8ab", "indicator--edc8a625-75a5-4022-9257-ecb627715dbf", "indicator--9c79d6d6-469c-4b9f-aaa9-35421603c61a", "indicator--03af6d7e-51a2-46c0-b687-25aa5e647bda", "indicator--c83de539-97a7-4d87-b026-87183f05ba67", "indicator--b7738322-b8d8-4dac-987f-a14a3b5424c6", "indicator--8429763b-4cd2-40ee-92be-6037a9a4c50c", "indicator--7335f2aa-f671-4a7b-aeaf-206961d66034", "indicator--2506b9d3-e1b3-480b-be84-6e0862ca88b2", "indicator--24ff4a97-5c89-4ef6-a568-ee5720790d3a", "indicator--cda85248-38db-4dd2-a85a-938a357b0b02", "indicator--e103415e-7d08-4ebe-9a6e-e15daaf7e8b6", "indicator--ee79e79b-a04f-4918-969b-ee159dfa846b", "indicator--53f6a74f-1ead-4f68-9496-309ad3bf0795", "indicator--a76d8a19-c201-4fb8-a78d-f90092b724f1", "indicator--7038d7d3-a2c2-4789-a9f0-e5c597e69cdf", "indicator--5038a073-1f71-49f6-8bad-a43a2a7489b0", "indicator--acc7549f-dd4b-490d-9ff4-e333678cac34", "indicator--105695f7-342e-43ea-bbb1-fc2a0f3ae040", "indicator--bb69e863-3b9f-4be9-bc43-041223899c81", "indicator--c579fe4e-7194-488d-8d3e-b6d6a5ee89dd", "indicator--2d0be697-ebb0-475e-afe0-610201d7e814", "indicator--0ba4275d-0955-493a-8a6a-0f4321026890", "indicator--6631792d-a15b-497f-8ebb-18dbf5ca8f22", "indicator--444a04ce-438e-43a5-9336-289d2952f0cd", "indicator--658d9c7b-260a-4f2e-b29b-3a67cbf87731", "indicator--274c7a4d-de95-409d-9d01-08a6654b15c3", "indicator--16d539d2-ddf6-4cdc-bf98-ae0e6c2699c9", "indicator--fe963bf4-06f6-4d56-a597-7eca94a0cab4", "indicator--92796bfd-f1d5-4764-819e-0aa9c44cfe52", "indicator--02d2edd0-9e2c-48ff-848d-8d4cda9186fe", "indicator--54fd7ec8-69a7-44f7-913a-6065ea08a2a7", "indicator--fa048d4a-3b50-4b3c-9468-b40a22e0b4cf", "indicator--9228321e-d95a-4970-bd01-fff7ecef5642", "indicator--eb836f39-b907-4f9a-8912-43322d7ac29c", "indicator--3a20acef-5e56-41f7-9880-034afd3de70c", "indicator--c8af5c73-d25d-4ef4-a7e1-c0a7db498c1a", "indicator--f7ccedf4-8d83-4d9a-bff5-1e7922b14219", "indicator--120a5607-cec6-4ba4-921f-d5d10d488c4c", "indicator--fa83c3f4-e62c-4331-9f99-790700632a71", "indicator--bb3715be-0bd9-4690-bfd5-6e3ce0ceb070", "indicator--a38ce775-68e8-419c-96a7-6892f807041a", "indicator--f2f52b18-2500-4a3a-bcb0-fa3ad97738e5", "indicator--09400afd-708e-48da-a028-7cfaff622bf3", "indicator--e5dc9c4a-e95a-43b5-b257-5d22e64b0c9b", "indicator--286a68e1-862e-4762-970b-01bb662ce46d", "indicator--074e8f1d-ddac-4536-b1d0-324640d4059e", "indicator--905dadd7-a5dd-42df-8c44-4e072332f3fa", "indicator--47b96309-1b6c-40e6-b861-2aad3963ef81", "indicator--71eae569-d5e2-4928-b6dc-82166f0c1c3f", "indicator--90162bcc-55f5-4a5e-a814-a9c9a0f2a301", "indicator--9183878f-9dcd-4ddf-8aa5-be56d77c8fe7", "indicator--b09aa6fd-e90c-40b1-b780-924a3076f257", "indicator--90637d21-4f39-4e09-be66-ec08f0ddc286", "indicator--4df43440-ea84-4965-8f10-cdcb55e50643", "indicator--edcdfe73-88ea-43d5-b6cd-cafbb9557587", "indicator--a8c0aaab-042b-4f56-a22b-020d547534b1", "indicator--736b876a-9987-46ad-9225-6806be52a8a8", "indicator--3f541360-c78c-44b5-a457-1115fa782dbe", "indicator--d49f45cb-c723-40d5-b117-e3bf1c8cdfed", "indicator--7c7b8763-e4df-4658-9389-df95c0378236", "indicator--1c8132fa-90aa-47fb-b11b-3160d3457014", "indicator--33c42e25-7368-4a6e-acf5-95546a35522c", "indicator--129b0650-525f-4992-b6a8-c9a47e9d7b98", "indicator--88cde3e7-c34d-47b0-93d9-c5fd8eb70255", "indicator--e8623b73-f837-4f66-b9e1-194c7911433b", "indicator--4ae9e257-9adf-41a9-b0bf-8c8939a225f8", "indicator--35fbc098-8590-41cc-b97b-f38db3600954", "indicator--b498d2d2-5f74-42f5-8823-78adcb216c18", "indicator--6ba41ebb-1e5d-4666-98a0-04cef611a0b0", "indicator--d762840c-0bb0-4b4c-96d4-7ef9b173cc89", "indicator--7d1328ab-da8c-468c-846c-922b5b290267", "indicator--3785f6d3-a9df-4f3f-8c46-bfa4e4f56951", "indicator--e3ae391b-b4d0-4927-92f7-94edfce786cf", "indicator--47e7c93b-136a-47ff-967e-1b65924f3aed", "indicator--4d6e84dc-741e-4dc5-95e3-f346111eb848", "indicator--3935fd4e-ebe0-4cf3-abca-7822d5c25653", "indicator--a68c0b95-e960-486d-8d4a-a76104bc0942", "indicator--1edc292f-bedb-4a9c-99e6-8673936c8570", "indicator--85a3925d-0fa4-4903-b0b5-c063a0f1f31c", "indicator--3634f5fd-a1e3-4c5e-8a3a-2a8d762eeab1", "indicator--f2dc2261-d752-4062-adc1-79f4c0a3adcd", "indicator--a1256c5f-8b98-4c26-baaa-a536d8d140b0", "indicator--0acbf999-f717-4ba5-b9c0-24ae44974c6c", "indicator--cda7cc21-99df-4cfe-8d26-ef7d97b41f6a", "indicator--02f552b3-7d28-4122-92eb-dfae857e82df", "indicator--20066b3a-b7b7-4744-8460-4ab70dee885b", "indicator--357a6139-525f-4681-80e5-ecf997e54043", "indicator--292fe75b-0d46-4792-bb0b-6aa0003bd080", "indicator--1440e4cf-aada-4b75-bb90-4eedf4b78d49", "indicator--d373b9d2-83e6-4715-93f2-8218e18386db", "indicator--aabd1fb3-4ed0-4757-9478-42033972e9ca", "indicator--014b48dd-635f-4836-b243-85018e487f24", "indicator--771f46a2-cf3b-464e-8c98-30e7bd067ecc", "indicator--d2a2253e-ba2f-4a1b-9495-fc4285ffff21", "indicator--9d723c9f-bf3c-45a9-a7cb-ce7f459a9cf5", "indicator--ec60b9fb-cec4-447c-b0cd-9949eb5bc73b", "indicator--d8380fd3-09bb-494e-8b33-1267448660c7", "indicator--ba2534ba-8bd1-42b5-ad67-20703a4bcd6d", "indicator--e05af24e-3bba-4ac3-b12d-ca045cab3f84", "indicator--668665cb-fba0-4cea-974c-40068973e70e", "indicator--bf216672-354d-4f06-bce9-6e014b85d44b", "indicator--bdf9a1cb-9160-4774-84b3-b3e75c626ac0", "indicator--09524fd3-212e-481a-84a7-4f2071f62492", "indicator--a5a011ad-adfa-4a7e-bc33-d7c991821b2a", "indicator--f930f0b1-8769-4419-b080-9b854f750b4f", "indicator--6334f1ef-ffc2-4a23-a9ee-5db66ad1fcb3", "indicator--f7c717bd-a4dc-4080-be35-30ff7bfceaa2", "indicator--064b6c8f-c4fb-4694-a231-adac262f2eab", "indicator--300b1da0-acb7-4fbe-bd33-3cd9f15ac477", "indicator--6542393b-37c4-4131-8b2e-391575dd1b7e", "indicator--ce0e8e44-8db0-4fb7-95ed-c02b54f1261c", "indicator--e7f2874f-7b2d-40b2-9af9-fb447c481837", "indicator--688c2089-8be8-41f4-8173-ca7dba2972ad", "indicator--fdbf3b94-5e92-4402-bc96-52c2548f089a", "indicator--03a44b2f-8fc8-4478-b73e-40ca0bbaa453", "indicator--874f78b4-2361-43c5-a37e-3053334b1150", "indicator--4a2c635e-2ed7-47d5-8a9b-a4fcdc27379e", "indicator--7dd8023d-54c2-4855-bc51-566e4d872d93", "indicator--a8c25574-4c87-492c-906d-34afbc889e4e", "indicator--aff3fd53-9dbd-48e2-ba5f-70fc6e13ac6a", "indicator--494bb863-0b8b-4071-a4ee-7f140910180d", "indicator--cb0b567e-e22c-40cc-abda-0e6cfcc27747", "indicator--d86d98b1-e65d-499b-8167-915a946d0f37", "indicator--1753e097-21ce-454a-84a2-ecb5e671dd20", "indicator--a5748af8-1ec4-4b61-b138-38e5216c3780", "indicator--5d0502ae-cdb2-4ab6-a0bc-3729531d1c5c", "indicator--251ee434-a12a-4baa-beaf-eb54e11d7f50", "indicator--de225853-ee76-4f97-a17f-19411e3dc8e3", "indicator--9e0da526-c658-4d86-883a-c374dc1b1ae3", "indicator--b6ddfcb9-4ade-4020-8973-5e976b13457e", "indicator--fc8af92d-1278-4fcf-8356-837ea59fa329", "indicator--d287532e-b588-45d1-aa10-0ff9f53f52a6", "indicator--a7b824b3-ca93-48e9-9fb9-8633691dd833", "indicator--7c0cb9ef-680c-41b0-8b18-02611d1ab3c9", "indicator--9159110e-04d1-47ea-a9f1-ae4999a35499", "indicator--2b4bb510-16c1-49e8-8e0a-71ce275fe9d5", "indicator--7f2f8469-937c-4710-8273-e2a55a28db96", "indicator--311bcd8a-655b-49a7-adc2-3cf8bc65d601", "indicator--1b901ffd-2ed5-4ace-afdb-27bf2b3174bd", "indicator--ba940c65-f63c-43ce-9826-9a896eee229d", "indicator--a65e5b9e-5bce-462e-bd31-28f9d5ab4253", "indicator--31db3441-d9b9-4b3b-a3aa-04969debd3ce", "indicator--33a39a45-e471-4dd3-9f70-b67f320b392e", "indicator--e78b8502-b6db-4eb2-8f02-0e066399050b", "indicator--40c849f9-bec5-488f-9c55-16d8d0666a13", "indicator--5be4fb31-d91b-4b19-afa3-fe53e90ebc16", "indicator--01e998b1-c69a-469f-8a26-5c8545464711", "indicator--99afedb6-c689-4b63-bec9-f739546660c2", "indicator--b3919479-0210-4528-b264-1dbec3d2df2a", "indicator--e7af6e8b-f10d-44f1-b4ad-2f2d943202c4", "indicator--fe0318ee-67c7-45e4-b6f1-4b1b5c599686", "indicator--36b78cde-995e-4073-b0a9-ad9af024ee8b", "indicator--40ee30f3-5f31-472c-b622-55097f6b250c", "indicator--09ed7332-eff6-4a87-a2fa-9d750a52cbd9", "indicator--0461b545-44c0-4041-a11b-88027889835d", "indicator--faa79c73-a736-468b-b4dd-9e0ba3105d05", "indicator--72f4bf3f-ab5a-42a4-bf67-18177503a818", "indicator--3ddba85d-bcdd-491d-a51b-9a63412791e9", "indicator--9393d8dd-4dfe-4000-8f23-cf28e16194fe", "indicator--52d7ed60-79f8-4109-badb-844c35e2859f", "indicator--8b6cbe67-79c6-4d3e-993d-a58268dc15f5", "indicator--956f4ccb-22ba-4d2b-9b36-401df29893a7", "indicator--1c69832d-a03b-4eca-889f-015d1379a00d", "indicator--8abf21a1-a434-41f3-b701-168f5d243ee0", "indicator--1281b029-3d15-4c9d-bbd9-4b96f272b34b", "indicator--b4bd0051-d58f-480b-8a96-bc1116b4ba0e", "indicator--ecba38ee-3539-4f7c-9ace-bff7b03b3add", "indicator--677416c4-d328-410b-9994-d866e5fffeda", "indicator--d7c24785-1c2b-4e3a-a3ff-a67889b0f879", "indicator--a728ab6a-957c-42c2-89f5-9c1c5ab9161c", "indicator--7bd788c3-b245-49f8-b5cf-dd25433b546a", "indicator--1cffac8a-1ace-4340-931b-27d77bb904ad", "indicator--5d6775b4-389f-4838-ba9b-8cff0dfe4d57", "indicator--ff6f19e1-9281-46a2-afb1-7fb505c7fd32", "indicator--5673e12e-0122-486f-8a0b-e0d5ba3dca1e", "indicator--8e8fd9d6-fae2-4e42-8419-c1cc997063bf", "indicator--1540980e-7b68-4d5a-b20f-a7d34a7f0f99", "indicator--b2a2145b-a361-47b8-89c9-76f2c7c8dd9a", "indicator--841199ea-b292-4179-a81c-db156d0de297", "indicator--88a4483e-fce5-4ae6-b607-9ace1491671f", "indicator--7b9c89d2-8b8c-483f-bd5f-cbc350c96408", "indicator--bfd31490-82a7-481d-9c20-b15fc8942667", "indicator--743a312b-8d08-42bb-b439-acac2fd5c30b", "indicator--20f04466-a402-4d1c-92db-bed796136311", "indicator--135928da-0ff8-4fd6-a7da-371e56f9fa86", "indicator--f4644365-2950-434d-a09f-bf98db315d44", "indicator--266782c7-c477-4f2f-bb82-2c9065d201f7", "indicator--714aba11-6ce5-4d90-aa49-4b5449e97430", "indicator--d9e407f2-7b67-4f38-a95a-714a2043960d", "indicator--719d1d31-8444-43db-a737-f8838bb69a05", "indicator--255b720f-531a-4b87-b65f-5dfb62f059cd", "indicator--e2380e31-471e-4df0-a475-dfc5c7994496", "indicator--9e43549c-3186-4de8-b4de-10c3e7c7a8a2", "indicator--3d04ab2b-2779-467e-8397-0b5ead53dad6", "indicator--8109c187-9c77-4b86-981c-81d51627114d", "indicator--155397b0-f190-4d05-98e8-8416f2df4b99", "indicator--c5a3aa29-2583-4c1c-ad65-f505c7045785", "indicator--9e173fe8-3570-4281-a2f5-a1fe8162cb12", "indicator--72f0e305-f402-41c2-b547-f591fa7cd744", "indicator--eb5432cd-6fde-4632-8c6c-fff1ff90d360", "indicator--030e7463-6ae7-48e4-a67e-fd2930f2ab09", "indicator--7137011c-ffa6-4eb1-9aed-df4002b987c8", "indicator--2a2e2f5f-8229-4530-83ed-23bc6a8a1eae", "indicator--af061f82-b8d5-4943-8ae1-9a1871b2e68d", "indicator--7be12b76-6790-4087-be17-4379e8918cc3", "indicator--be9e5b38-5381-492d-acf5-4b2a6283ff79", "indicator--d6ae0fc3-1df9-4d5e-938a-978b3ae2fe50", "indicator--a048ad69-29db-43d3-a511-8cb9125bd308", "indicator--2f4195bb-2cff-4c58-9273-d8066d94ea2b", "indicator--7cca568c-bac3-43c8-8c72-eb2484f76bad", "indicator--91a1fb9f-4b62-4021-b372-4cb090508cc4", "indicator--9194b0c7-f9b1-4f2b-a625-f48b1e3d2e92", "indicator--dbe78983-e48c-4d4b-8212-d1cc11293a80", "indicator--414d8325-a373-4f35-8589-2358863d87c5", "indicator--3e263c18-64dd-4fe2-be86-f9515256e47e", "indicator--687cbb48-9ae4-439c-8736-b0faabdb18c6", "indicator--240fb64e-0f4d-4c76-a340-9069d3d3e2a7", "indicator--f04bc771-e992-421a-8612-5f8aeeaee0d1", "indicator--71192cea-1f5b-4114-858a-4265ec7f1a13", "indicator--403f3cb1-0f1b-4f65-868e-584b874fdc74", "indicator--228cf7b1-b1fd-407a-9f91-f893622b065c", "indicator--79c136a1-b47d-46c5-8e08-fb1cb7cc7858", "indicator--26465523-88a9-4ae6-9833-3d645b5d2143", "indicator--3eebfd0f-187f-4c6d-839e-a02bbfb845c0", "indicator--562f39d0-acdc-41e6-b023-17483cc5f9f2", "indicator--e6f311ac-d279-42e0-b7b2-9dd47a99560f", "indicator--1093d7e8-3407-4184-85a9-11dc1faa3559", "indicator--4f60118f-7243-4056-aac3-d55e0ee44e2e", "indicator--ba843812-9124-466f-8b72-221c4eb0ef12", "indicator--6bb99265-30aa-4e3c-8e36-beb542ebe3e4", "indicator--2f038836-4aad-4f46-91cb-ec5aee684fea", "indicator--af71cb3d-88f6-4b42-a039-243c482385db", "indicator--9508fba2-ab46-4394-a33b-65778260b0d2", "indicator--e42eed29-f290-42b6-8854-6c43c97757a4", "indicator--1944d238-781d-4330-b32b-0e4fac2a9e20", "indicator--c30ae95e-5029-4586-b7bd-23fcaed5bda3", "indicator--7f5ccbc0-608d-4400-82e8-b86bb6a8f241", "indicator--d6b472f5-a2ce-4e21-adf1-2833aeb429fc", "indicator--c2fe1f97-ff6c-450d-bec1-e5f7d78d5cb9", "indicator--ab76f81c-8332-4047-8e8a-bae68a412eba", "indicator--8b0603cf-6170-47ac-86e9-0f630b64f58e", "indicator--21e4ec14-9f60-4e8b-850f-242084c3dc7c", "indicator--dda48543-ce19-4f78-aa9b-cf02be33ebab", "indicator--689b575c-d9ef-48fc-b00b-3ff2d2f5549a", "indicator--6ba0b770-e65f-43d5-a6aa-173cc951fa3d", "indicator--5732209e-c245-4d64-bfe5-57f808ac7335", "indicator--741500c5-d258-4ddc-a771-d59bfe52e347", "indicator--cee1e7e6-4c53-446f-9a6a-e01db08f0e3d", "indicator--88c866a9-48f3-473c-a9fb-60377b58286e", "indicator--68e2bea5-48a1-4f1c-8578-6c50b4261eea", "indicator--3aba49e7-a6d4-4187-a653-c4b972e03812", "indicator--212ccbd4-7fb8-4727-ac38-6951f7dfb1ca", "indicator--60b3fa36-fe33-4629-9c50-38bf70b217a3", "indicator--64e3e86f-63eb-4f7e-90ec-b7ca8bada941", "indicator--eae09df2-3d58-4130-a059-f4b0716d425c", "indicator--5219f1d8-c953-4c0b-b9a1-d43a5d9e331f", "indicator--b0ad111e-87f9-447f-be3a-19e5c1721a1c", "indicator--9f3e5759-3be8-470f-9ea6-d01ffdb31295", "indicator--81e78025-9d9a-434c-a895-3c5b393796ea", "indicator--a174b049-625e-4e5f-b39a-1708cc135f47", "indicator--bd3feb1b-1764-4ee9-b7cb-1b0010166469", "indicator--94c65838-9952-4409-be7e-508ac4235449", "indicator--4a1d60c4-71be-48f3-9559-3e662792573f", "indicator--8aaeb588-c0f2-442f-847d-752c16ca12a9", "indicator--66000558-b635-4ae6-b524-346807c115a4", "indicator--9c2b3be5-b982-4c2c-8591-73c47695c8eb", "indicator--3727d9aa-54c3-489f-9896-dc5a1239513b", "indicator--b7b5774a-4ae2-4e94-8d07-c7ee89b4889f", "indicator--c17fe27d-fad6-4663-b183-960219d7698a", "indicator--3ba58ebb-1947-4dfb-8920-a5fd309f5151", "indicator--5b1a5de8-3af9-4967-b606-9485947a0d9c", "indicator--67f05223-a108-4ee9-8aee-64f424bd241c", "indicator--cfb7d31a-6cf8-4499-a33d-4d9a43c16bd7", "indicator--6eec7b7e-d8f6-4bdf-a6ca-2d607eeabf8a", "indicator--dad94ef4-680e-44ba-aa90-88e9dd41037d", "indicator--881e6d6a-2448-43c0-b73c-9dabaebcb072", "indicator--65426dce-e9a6-4133-91de-004a934e5e4e", "indicator--a37d74b2-0065-4351-8d38-3bea635fa7de", "indicator--9b9509f5-65e3-4747-9022-767f2bee7d1b", "indicator--9ad795d1-dd69-4f2d-8833-6cb6a407e083", "indicator--36e5044e-aad9-4192-8502-7d95b129fa96", "indicator--4fd090b2-8e5f-4dcd-8839-a6c16e30bd59", "indicator--e527b3b9-f5f1-4bad-b454-c8f082722299", "indicator--ab4fea0c-51d7-4fb7-975c-3717840a3f73", "indicator--f675faa2-88c0-484b-a1a6-c728f5d2fe50", "indicator--4e4de851-38c6-497c-ba9d-f0787ee2f6ba", "indicator--696af0fe-640b-4be2-841e-c262109894a0", "indicator--abb2437a-b9ce-41a7-8c4b-007ab4ed430f", "indicator--41a3299d-8e07-4673-b3d0-c74e5bc2eb2c", "indicator--90524dff-306a-4230-9e95-7a9667f4ae7e", "indicator--b4f6f3d7-bee5-467c-adc5-d9d682cae85b", "indicator--8c5db92e-f1a8-4b5f-bdbf-012b605a12f3", "indicator--5d9a2bdc-f116-4872-9a48-581720c31117", "indicator--41293cca-27cc-4654-8b43-d3bd4dc0a28f", "indicator--091e3bd5-2e74-4c3f-a0d9-48d5fd46bda2", "indicator--1291dab7-3f58-4fa1-abe4-8adb2844b2bc", "indicator--7a3474e1-4dfb-4edf-8b27-c65866f592d3", "indicator--9bf20d6e-b89e-4e35-923e-35f68825d574", "indicator--166eea1f-63d7-4f8c-ac43-742593989352", "indicator--0369e1d1-ba37-46df-85c2-7dd72d437f0e", "indicator--ab9fd6b0-1697-4dde-a9c7-bbbb12088474", "indicator--abb10a72-6b65-41a4-b48b-d7ef51c880f1", "indicator--14de34e5-5c62-4cce-932c-f2752fd1251f", "indicator--74de4a3b-1b01-4270-bab2-acfd4cc79a35", "indicator--7d47d60d-d0b5-4a20-81bf-7ab7d76c1d6a", "indicator--ea83cd4e-8ba5-4611-9bea-3e7592662ec1", "indicator--0df2a2da-01ea-48e3-be64-9e51edb82ce9", "indicator--0efba5d4-118f-4580-a8ea-fef484d1fa44", "indicator--37883de1-0a22-4054-ae5b-ff5cc7727f68", "indicator--d8d8da29-dbb7-4cb9-b99b-e78384757db1", "indicator--83a5b766-4b94-4953-b58c-6c2e2ecde473", "indicator--9b0f8887-b0c2-49dc-8721-a78f3ced6ab0", "indicator--c0bc5a02-cfec-4f73-bd99-b2ffaa0cb301", "indicator--bb442dbd-5ee3-4b61-9682-6a41cd63adb2", "indicator--e474bf13-4282-46ec-801a-88e18ee21a03", "indicator--e51a69d7-8697-4fca-9086-a63b2a773b99", "indicator--8c39c738-c050-4777-b8d1-c4e800486e69", "indicator--bf59b9c2-b7d7-4ac7-9db7-fe3d2b710d62", "indicator--6c26f333-6917-4df5-ae50-f033a2421e1b", "indicator--c1b35732-ba26-4d9f-849a-aef9ac0792dc", "indicator--e0c41f67-7fbb-47fb-918b-859a5fa8174f", "indicator--3d32dd94-2b52-434d-90e8-b8bd376ab6ec", "indicator--f8897d54-fd05-4732-8878-b7aafe523038", "indicator--52a23945-96d5-4f77-98a6-e4d180d209d4", "indicator--e1c6fd21-9d75-46d0-bd5b-98ad347a0ebb", "indicator--d334219d-df54-4030-87ce-68b64cd6ec5e", "indicator--3336d2ed-0d8a-4de8-8817-0b00d75411fd", "indicator--70e0df13-3eab-4de5-8f31-3725f5dda9d7", "indicator--3cb1975d-9fb3-45b1-8ccd-e2141d0d8bf4", "indicator--9ee5eb98-47ce-4758-9c2a-cc68ba9a1ab8", "indicator--81f66f68-811e-440b-a860-7806d042fb40", "indicator--2966252d-03cb-4982-927b-e11e30a89fcf", "indicator--e4d0cf1b-a2a7-40e9-91a2-bdf02500530f", "indicator--c0de6ed6-f459-41fc-adae-c85a4fa129b7", "indicator--2d4c8b7b-df84-4c2e-b147-61d277063db9", "indicator--9ee14623-0845-4a40-91c2-50a90b1c7656", "indicator--8b58e79f-906b-4790-a5d7-5e513188074e", "indicator--924a6d41-0a36-4b96-8c95-9b675f651ac4", "indicator--ced1d87b-c044-4125-8fcf-003b5b2633e9", "indicator--4c78eddb-8fac-499d-8fc3-457233af06fd", "indicator--749174d0-383a-472c-9460-f703c7fd666c", "indicator--52f12522-f74a-4502-b1a9-b8e6e05f18de", "indicator--250cb467-2323-4e64-a21b-91a6b0d336c6", "indicator--a4df98a6-3fba-43b7-891b-1a9509481fde", "indicator--5a523ed5-f91c-45c0-9db3-c0c8d2c5be3d", "indicator--85ee8e83-9fa0-4909-b8c9-e8fd44685774", "indicator--c5d112b8-853c-4931-b36d-4045af72826f", "indicator--c381b238-d3e1-4788-b37a-b0032735432e", "indicator--2f91200e-7230-42c0-996f-b3fae180cac0", "indicator--a1a7274e-6d7b-41a8-9928-e447fa7b334a", "indicator--5d893207-e553-4468-bc2e-9f158187a639", "indicator--cecbd4e0-637f-4012-bf8d-dad39d68260f", "indicator--71d50c79-8ce3-4765-be65-2ff25400282b", "indicator--4cadf7f7-4bf3-4fe7-9b62-2967dd665fd7", "indicator--55ee0db9-b43e-40cb-9811-5ef185b8f365", "indicator--d11c50ff-8c0c-4002-94e4-e65b143eaf03", "indicator--f16a5b5b-eb04-473a-9058-ed537e2e4e91", "indicator--f10bf47b-23a0-4fbd-b4e9-26a190270b90", "indicator--1489252f-6b9e-4bb2-b8e6-2dfaad86b886", "indicator--aea765ae-a50b-4fa2-9a7a-86921ada762d", "indicator--02a56e0d-caaa-4512-9bb9-77714cef46fe", "indicator--2605c5ac-704e-488f-a39b-1bb16add2fc0", "indicator--31797419-a507-4ae7-94ad-cc294f223d18", "indicator--b13dba48-f647-42f4-bff5-88a9e44e2306", "indicator--ad662976-5eaf-466a-81bf-c02dd90302d7", "indicator--3fe732ad-5ae6-4e6d-9697-d2aae0d9639f", "indicator--4c21468a-44c3-4f69-8af9-a1cac6fdf423", "indicator--988a89b8-d0a5-4a08-8e2a-04bb2fcf221c", "indicator--c971ecf8-6be4-460a-81f2-4ee0cb1e9f24", "indicator--8b2e33cd-34b6-4298-9955-adfdda16dd2d", "indicator--31f0ff58-cdaa-4c63-beb0-954c3bba7de1", "indicator--86b2a2bb-66dd-4421-b164-4854f4bacc7b", "indicator--77e17f94-4287-4068-852c-e481b8735d05", "indicator--637d7ea0-779a-40e7-976a-891c795a53db", "indicator--3f9378a8-74f2-4ee3-b34e-67c6cf647b88", "indicator--f7dcefe8-2855-43ec-8380-9090cde92348", "indicator--4271d855-c4b8-4e2b-a901-38955d460ab8", "indicator--da4f9baa-521c-4ff8-90ab-f01a1a4d5a4a", "indicator--769acb74-da0a-4124-9141-4b6848168898", "indicator--d0083438-bfaa-4604-9a17-480685efdbf6", "indicator--fa61feea-d042-4505-bfb0-48495b619c0b", "indicator--1fa8de7f-89f1-4160-8384-3c5d5a07ca0a", "indicator--4254e3d8-419c-4b46-ba6c-877fa46a0843", "indicator--15f69501-4f06-480b-b976-bd1747b2b272", "indicator--908c20b8-2f6d-4d75-9853-ed9b8c03e933", "indicator--e40b6844-8922-415c-9814-c2373ca55323", "indicator--3f8c880a-7d64-416a-937d-38eeba57668c", "indicator--fe026521-89d6-44d1-9a45-6aca872bb6a7", "indicator--49212667-81b5-4b9d-abd8-d9d0481e06a5", "indicator--4af0d6c3-9cd7-4867-a94c-31b4ee02ae47", "indicator--1d97753d-e362-41bb-a6be-b2754495bd4a", "indicator--a8007169-5129-4312-8988-6e0848344136", "indicator--7ab46708-ea65-4a7b-a6ea-31b89e588af3", "indicator--24172f62-e24c-4a48-9c52-22bcfdc92454", "indicator--7b2c5112-5bc8-4582-8dd4-7557ebd245db", "indicator--bdb04b3b-2c4c-4b85-9e67-ea2fcf550d0c", "indicator--f5aa6352-89d1-4556-b371-4391c16062bc", "indicator--a843f2fc-dbd4-417a-b7f0-ed38f7ca723c", "indicator--31c1c2e1-bfb6-48ff-9ae4-b6351ce9efe8", "indicator--35e28fdc-b1f6-4fec-b288-b1801515190c", "indicator--fbd398df-38bb-4ae1-a518-daf247ad19e6", "indicator--5215a070-252d-404c-9de3-391fe57d79af", "indicator--cbb98db1-6767-4046-997a-15b3d620a969", "indicator--78ae639f-be06-4944-bffc-ace7e649226b", "indicator--5be46f83-8d0b-4b24-af8c-5c44aa35e8f3", "indicator--a7d76b71-5234-478b-93a5-04cc2acebbce", "indicator--5b249143-0623-4445-a6cd-af92bbc3498a", "indicator--2a1af84d-27ab-45e2-a428-1e4c65b2eeec", "indicator--a4762dd1-19c5-4d05-a315-0fe588e60ad7", "indicator--89e9fbf0-b575-419e-9c85-c9e61c2d1865", "indicator--04385b05-6601-4a5c-9e73-25d81d259fb2", "indicator--12755e23-5ee8-4547-8269-5d85a533b2be", "indicator--f09c56a7-ba9d-4ec7-a7b4-8840044a01fb", "indicator--a5e1fdae-831f-4b46-b00f-8a51a0c54774", "indicator--6cf1c5e8-54eb-444b-a733-dbeca323c616", "indicator--4f07a9be-699a-460c-9086-067c290d0998", "indicator--32b605d3-1df2-464b-8470-61175935c8e7", "indicator--0e272cae-db99-46b1-93f2-1d4aea23f577", "indicator--56a65d3f-6553-40fd-9ed2-b1c70f887c28", "indicator--67126240-172c-4c4c-b16f-f3a7ecce3dd4", "indicator--1ea061b6-e377-4d26-bc80-c4f0f9b4cc2f", "indicator--7039ca99-450d-4d95-a2d1-14e75b68a738", "indicator--b53687d1-a2b5-4e33-b22c-0a8bcce1a875", "indicator--b8e4be38-6888-418c-a090-00af4fbb2b66", "indicator--d5d9b87e-8b3d-4f70-97ce-bf076c3aee90", "indicator--88fe032e-7f53-41cb-9109-af257227d6c0", "indicator--a698c117-e53e-473f-9004-c643065ade94", "indicator--4df99e2e-9e70-49b8-9e06-3dbdd8b3ee01", "indicator--0ac0e427-82f1-4e4d-8006-932d962ef2b6", "indicator--c8853459-1231-492a-aed4-2712561bfbfb", "indicator--5b8fcf54-b04e-48fd-b926-c88f29921ed4", "indicator--e33e167e-1c8d-41b3-b14c-8dbe93778d99", "indicator--786808c3-04f3-4af4-a63a-810ca5ea6f60", "indicator--8665d785-63c2-4724-993b-6e1988e603e5", "indicator--84a6a7e3-edd8-4f15-ac44-02274b872ff7", "indicator--c9d05537-35f1-4377-b4a1-6f67bfe8e666", "indicator--f2e11346-745f-4195-8fc8-b22d1a3abc92", "indicator--c1009798-a1e9-473f-8eef-70e43d7800d7", "indicator--685da8b4-1da6-4493-bf09-f3173fde0583", "indicator--e91a958e-9179-4e17-ae92-2fbf33d9045c", "indicator--083dd691-5522-4941-8c15-94cac52f5a29", "indicator--92d2737e-8164-4d2a-b0c1-3794d77b0cd4", "indicator--496f9757-1e18-411a-bb75-45f578027567", "indicator--a822cb51-f58f-420a-8641-5b55774ef042", "indicator--b263c23e-6982-477e-8c9a-079f42b09a12", "indicator--36863c11-a328-43b8-9caa-fe7d2e75ba8f", "indicator--60a99177-85a5-45e2-b485-f9faf2c5b79f", "indicator--b2cd0eef-9072-4461-9843-e423eea42039", "indicator--96da4c92-26eb-4f69-94f0-a56b82f8a504", "indicator--781f51d6-3798-4181-bcf9-2bceac504098", "indicator--02e4b58d-216b-4cc3-a5ab-b6e9c2fe0cf2", "indicator--0fadab0c-3b10-40b4-b8a2-b7cfee3015b8", "indicator--906accdc-7356-48c2-9cad-f157bfa809c4", "indicator--70399272-c91e-4b7e-a8b8-1e19c5525b4b", "indicator--cd22fd8d-504d-42ac-a658-6bdf18d4388e", "indicator--5be1057b-72be-476e-b606-bc5ddcc5caeb", "indicator--3023f9f2-2f2b-4b17-95dc-179221de7915", "indicator--57e20925-d5f7-4462-92a0-64182604dc24", "indicator--1f969b8d-55c8-400e-a071-dbebe9a56ae4", "indicator--831aa9c5-9057-466e-b335-8414903f4e8c", "indicator--8691dbfc-391e-4c4d-b2e6-b07c03bcc6ee", "indicator--8dad91fe-5c09-40d2-8c5c-bf8f1b405f43", "indicator--a3b93e66-5fa0-40d9-ae3f-01ba2367e4b0", "indicator--8d1ababf-2822-4f64-87f0-3c4503510f7b", "indicator--a2cdf496-2c44-42bd-80a3-97e4a2462011", "indicator--f6a5137d-8661-4d96-86fd-65dd64161195", "indicator--76bb11e4-6bfc-412e-8fb1-2dbd96c9dc9e", "indicator--5d22a963-09a2-4cf4-9566-d55ccba145ab", "indicator--b8e446d3-ce9b-4316-a519-ff280a0c2a1f", "indicator--fd9fbea7-2de4-4a73-9937-e5a351b239e4", "indicator--15adbdf8-0560-4f71-b166-6061dfc0d24e", "indicator--d5177227-3c7e-4336-adb1-d20875b79ea6", "indicator--294b27b8-ccc0-4dbb-8e61-025e67fd1012", "indicator--996ed72b-9e2f-4c0e-9f30-f89269b5170d", "indicator--634f555a-66fe-4f22-b2ae-9f1865a2df16", "indicator--e15bb5e2-d563-43ba-9329-be58db58d032", "indicator--f53ed74b-d923-44b5-af44-c8b4b3fd040c", "indicator--b6191e9f-baef-4b09-9ecf-d646e8d39773", "indicator--b06a3d97-1397-40ff-8f75-0ee6fbc7278f", "indicator--63fae94f-73a7-4879-8eed-d52c98a60f50", "indicator--f19fbb47-636b-4127-95e8-54148d4c9000", "indicator--8f6e207a-e526-4ca2-86e8-39e85f1d06bd", "indicator--65e0e07e-f31a-429b-a91b-76ce2b3d6865", "indicator--5a10e775-548f-46a4-bf2c-9750207713b3", "indicator--a114bc15-6b1f-426a-9014-f91ddf99a8ae", "indicator--3dd82ef1-d02a-4925-aa2a-efe50292fe24", "indicator--2cee78c2-1632-4118-be1f-0af8d333d88f", "indicator--c0d12162-8328-4b40-8bf1-435f3586d09d", "indicator--317160e2-0935-4ef1-b332-cfc36efb6659", "indicator--25626aca-8847-44b0-926b-5946d15b03ef", "indicator--178e4436-06bd-4125-b653-f089929a6eb6", "indicator--4ce13324-7740-4ca5-bd66-2b9b1398007b", "indicator--5d5fcec9-f982-432f-8219-87902ef124fc", "indicator--bc03cb0a-165f-4967-94f9-ca735b5a794c", "indicator--822b748d-26f6-46aa-8f89-5f029210c980", "indicator--86d33f8c-bb4c-4265-8a4a-fa0191d2c93d", "indicator--cc66dc98-0e40-4723-8449-c6f2a7e79773", "indicator--3aff2eb5-cde1-414a-880c-65df6b75c4b0", "indicator--e31a4867-e5c6-4394-a3d1-c319f16c1326", "indicator--4ac663f3-4bc9-422d-aefa-2ddc7522cad2", "indicator--4c8c0112-f23a-43e9-b60e-c6032a458b4d", "indicator--2737a4db-e5a7-4c83-aeb9-21abb745ceee", "indicator--eb96070a-e569-4d78-ab58-8939f31a2044", "indicator--65196f75-91fd-4040-8b56-ebffee151e99", "indicator--9ff5abcc-e648-400f-8a99-67ecaefe58a8", "indicator--c74b54d7-4c94-4d8f-895a-4e125fdb46cc", "indicator--c84042e1-c2ce-4695-8266-b79b35cb669e", "indicator--a4db4d60-3d92-41dd-b400-0691cf7242ba", "indicator--98a187c7-2882-421c-b3ef-d7a696916222", "indicator--a6018e76-cd10-4e51-b4e7-8e5df84e5714", "indicator--9160d2d7-4c92-41f1-acc5-0f35260d0fc3", "indicator--efaefdca-81e0-46a9-a9dd-291303f2fce0", "indicator--3997c8c7-721f-4983-94b8-a448c99604e9", "indicator--f4874f62-11cf-4efb-ad57-d096054b0c6b", "indicator--6622a0db-3b03-4e90-b279-875c8ac1ee92", "indicator--69596178-8bd2-4d43-bdab-bcd3d03433c9", "indicator--34ec8047-3737-423a-aa3e-491e9f1da6fe", "indicator--397ac733-34e8-44ea-8554-a0ce08ab1712", "indicator--d3ac1cec-3647-4108-8689-e9af0a7d4fad", "indicator--5976ab17-7bca-47a4-b9e7-d97e2c2f617d", "indicator--c875f8c4-dceb-4135-812a-b5aa1ded729c", "indicator--64e09e8c-4186-4341-be8e-f66d69b9b6cd", "indicator--c5501f12-da1b-4703-bac6-eb56da45dfba", "indicator--552b222a-817a-4605-a23e-075d32a88135", "indicator--4d96c5b1-97d6-4d4a-8d4f-7790ec63497f", "indicator--37641d9d-0b2a-4bfc-8fae-667512c4db90", "indicator--86902854-6d9d-46b3-96c0-05db97cf2b3d", "indicator--043c14eb-19de-4f19-b7f6-c7b756e7e1a0", "indicator--89e00a1d-06b4-4968-99a8-f61ef5de5a63", "indicator--ddfc605d-34e4-4cd6-8c3b-477a951dc707", "indicator--709e5222-a53b-48de-8213-0fe861339dce", "indicator--83680346-b129-484d-9d08-df446fdf0610", "indicator--80a01a6e-f00d-437a-ba17-d719dd92cedf", "indicator--347c72a9-e511-4ade-b251-65e517690f99", "indicator--28869e11-b515-4edd-ad04-19fd8fb9f822", "indicator--50e53881-e321-4d65-9734-2bb28654c174", "indicator--7007a00d-4e9e-4911-b23a-6b6e28d9f5e8", "indicator--625e7e17-0efa-41de-bf82-654fbc0bf524", "indicator--23b49f50-e89d-4289-9afe-5c7cd3c5077d", "indicator--28a945f7-efb3-4075-9086-e50aa70a3d9f", "indicator--d855da53-7250-42e0-b0b4-c0f904a44be9", "indicator--1395026f-59d9-42ad-9190-5e4a02997f2f", "indicator--94b0fb41-b595-4b86-b1d0-d5740a310e1e", "indicator--66e4db8e-1c92-49bc-a96a-65543377226c", "indicator--7d609a51-dd6e-402f-b49b-a275345ddff0", "indicator--d205133a-c3ae-4e5c-9059-f507578fc753", "indicator--f66420dc-a360-4e4e-8b17-a321526ea565", "indicator--0ed4da7c-675a-4028-9ebb-74f195ee5c01", "indicator--2843468c-509c-4d56-ac57-3e05b214d8d6", "indicator--3e91a6fb-a345-40c2-9ef9-7978916aca0f", "indicator--d25f7090-19ee-4ecd-8a3c-9714f9a9b19e", "indicator--16209542-2927-4c83-91c9-d70075fed42a", "indicator--208a2c6c-93ca-4e88-a68b-2497ad07cc01", "indicator--e831a8b0-1edd-403e-9f05-6ec2cc3b1bc5", "indicator--265b203a-0633-4c40-8a26-d8f3087823a5", "indicator--14ff7183-3a0b-401b-bd9c-2df2b7c01fcb", "indicator--82945118-e44a-45c3-a232-6a075c3b2fa3", "indicator--5c8a95d6-acdb-4d4b-8091-b4d61d9705af", "indicator--99c10acb-4851-4ffc-bad0-4638b7def1e3", "indicator--0a99d580-d388-45d0-9932-49d0db579a7c", "indicator--6108f772-b1ce-4e67-b2ab-8572e1deda95", "indicator--fcd3bff4-6397-4586-8f96-4843a24f8fb3", "indicator--e09dd95d-4069-4d16-9082-e9259a1f8228", "indicator--d9e1e9cf-fe6d-4d52-ac4d-de529278a2f6", "indicator--d15beec1-e009-4276-9577-1b00cb666805", "indicator--25496c55-7db0-480e-99d3-e46b3d0097f0", "indicator--6f9c7a5f-6e08-49e7-bda3-fbf11ee11c3e", "indicator--d00eff2c-aebf-4158-bcd0-e66350d508e8", "indicator--7b6fefdf-ba19-446a-875a-4410c9fa5a4d", "indicator--42aec68c-7ed0-442a-8158-b7068248cd59", "indicator--a753eb9b-bf2f-4e59-a31a-037d707f1266", "indicator--bfb29508-5c9c-42c9-baac-e5689e757768", "indicator--f4ddb299-a553-4b6b-a8e3-888cd18b6472", "indicator--07aa3c5f-c9a7-429d-afef-fed8f54a2760", "indicator--6b2d8ede-5b31-4ae7-ab5d-97f430d5a5ff", "indicator--add0eaaf-efa9-4e33-8e14-572bd2d5c03e", "indicator--06035ff6-c240-4451-80e8-d411e8421dd7", "indicator--042ae120-9410-4461-9916-dfbc5ecd7230", "indicator--aea68c63-5b0c-4752-bb7d-968e4471c64e", "indicator--b74228db-3293-4b54-b0c7-eaa126d16eb3", "indicator--6e06f76c-f182-4472-b92e-21db65964444", "indicator--52f4b76b-61aa-4820-9a04-1fc7cdc503a8", "indicator--437892c2-7962-454d-a73e-04bf8abf029d", "indicator--4aa3f2b2-393f-47eb-a3c2-c17a37cbfb2e", "indicator--2991416c-d85c-4b11-a544-36f78e7b98a2", "indicator--4a955cea-d0e0-4451-ad3a-612976dc26bc", "indicator--bc024494-0b8d-4f35-91bc-69cbc8de4ac7", "indicator--a0477f54-5340-4360-b5ba-bab6ca9615cf", "indicator--c499c754-8815-4a0b-86f2-8ec26bae88c0", "indicator--336009bd-9564-45b2-a97f-3127e672dbb7", "indicator--77056832-6246-48e1-934b-8225a0abc9ff", "indicator--ab29ef8f-46e6-47e7-80d1-462ad10707d6", "indicator--f46eda84-d4b7-43de-93eb-f3b46a481896", "indicator--8fa88ec7-bfa0-489b-849a-472ef6ea03ba", "indicator--2eafde6d-e705-4688-a992-86c5d6c4e3c5", "indicator--b187439c-af0f-4653-91ef-06b9461fb211", "indicator--29f7903c-ee00-4445-b2b4-f5758e5c9c1a", "indicator--82ebb8cc-4e16-4258-9bf3-173c4359d73d", "indicator--7e015229-f4e9-4e10-88a2-8b1fe64e5255", "indicator--2b6cba15-b739-4db8-bdcd-3838b9b27136", "indicator--35b1d234-6aec-45f2-9ccf-63ea38c5308e", "indicator--202af74f-f5b0-4de2-87b3-b6737443902e", "indicator--4dcfa208-3317-42a4-a1f4-432c3929301d", "indicator--3188db7f-3828-447d-9606-30aba9a45b9f", "indicator--bff6dcf4-0fea-45be-ab7a-44c1b402a055", "indicator--092937a9-3d59-4af3-8102-683e76462af2", "indicator--ac531232-fe42-4f72-b1f8-af4e3d065bef", "indicator--c3b582dc-376d-41c2-a208-31e1d246101b", "indicator--4146bd80-b1ce-47d2-95c6-64f0bef09d1a", "indicator--9ec7c6dc-6152-4bbc-a36b-78c82167d29d", "indicator--1c7f94b1-da39-4915-b38d-88f416e54f8b", "indicator--be53a39d-6fd4-4137-bfb3-51d683c79589", "indicator--b76cb7e3-bf4c-44e7-b8ed-6f1de91a3f5d", "indicator--cd6d7d75-6ad8-4e22-ac8b-4784a1fb72c1", "indicator--67bcb682-4542-4e8f-8af0-0e6460680f2a", "indicator--c6f93f1a-65a9-4985-9549-ccbb4e23e95a", "indicator--0485fa76-4ef9-4e9a-8ea9-968623f739d2", "indicator--970bbd1b-7f20-48a9-a936-9dddf86e3957", "indicator--cfb7b14a-8619-4c36-9e93-1c5c37f7bc84", "indicator--4ea5141b-91f3-4c00-914d-bf6657bfcefe", "indicator--0df165d6-a151-49bf-9476-080cccf63f21", "indicator--3c214a61-83b0-423b-819d-b5f4d4fb9b72", "indicator--bf0d2165-f8d1-4698-8bb2-92f5d419d86a", "indicator--9876d99c-ddb2-4830-965e-4db26bbc666c", "indicator--5f40d34b-cc20-4e54-9360-d8e62b582c03", "indicator--859bf0d6-2728-4a19-bd1a-23fadf60d9a7", "indicator--d74dd596-940d-4f4f-bc62-656230a83530", "indicator--0161ed5a-62ed-429f-a27c-c24548a11687", "indicator--40eea41d-9c7d-4110-9884-627419520612", "indicator--45ca02f1-5a76-4358-a454-dd0c757daec6", "indicator--0d0d37d3-5af5-43f8-a36a-ed6b2c1aeb5c", "indicator--f1331eba-2259-41b4-a946-3ca7c2c5188e", "indicator--9ffa3c82-cd2e-4591-8760-22f813d53f53", "indicator--584337d0-d3fd-4388-afcd-c1bda6f6642c", "indicator--b4316408-3d15-4b08-9436-efbb0f8e03ab", "indicator--7d9b9aca-97eb-4be9-b43e-dc83beafa938", "indicator--628131a2-cbb7-4069-8251-c62247f2e8e1", "indicator--4ce6996d-d909-41e7-8a1a-ca279ac1a8ad", "indicator--fb693101-cb00-4860-ac4d-62cab1177b0d", "indicator--fc5804b8-7218-4efa-9a0e-cfae4c6706a5", "indicator--7b6cbcf9-8204-4e62-b04f-a224327d5aba", "indicator--ad5c07ff-b5bb-487c-a484-83b53fc2d7be", "indicator--97da6497-1481-449b-868b-cd08fcaf18cb", "indicator--bffe2092-d215-4330-937c-fe7130bd59a7", "indicator--21083830-b98e-4763-936b-c09ac5f407f5", "indicator--9bb7f0c9-27bc-4564-aab5-06706b7f0644", "indicator--e6ab19ff-017d-438a-85f4-719de17dee06", "indicator--8a705067-f9bc-4f9b-bdae-c18b053fcb0f", "indicator--fd58bf1b-b23c-4097-855a-f4fdb23cc087", "indicator--23a379b6-ff10-4156-97fa-a2853026c2d9", "indicator--79398e0c-f688-4eda-bd46-c18367b326ad", "indicator--5ce58b89-8b35-445b-b684-b9372aa46539", "indicator--c5c9c1c3-24f1-436a-9248-32346ac635e9", "indicator--f591778a-7e07-49a9-abc6-d263e4878bba", "indicator--f48e21c3-94cb-4a16-84dd-0196f328ee18", "indicator--d2a74953-5238-4e33-86f0-9af7c1365f06", "indicator--51a24a2c-8d61-4128-8fd1-d61a4e5408ac", "indicator--283d402e-07a6-4992-b6a0-1a2e6ec10bf7", "indicator--b0a71f1f-c6a3-4ae1-a320-b823c13608dd", "indicator--3b68c977-4d6f-4b0a-9e0f-ce0d7b630323", "indicator--4095a076-0e02-4084-95a0-1997c196d801", "indicator--ec1b2569-c96d-4f1d-873f-16eae3239369", "indicator--40e02ed1-b52a-4d9d-b273-f8d3d2ff5522", "indicator--2263bd52-fd8f-4cbe-be02-549635fc41ea", "indicator--2dfc7062-f46d-4559-9bfd-5285e028cf88", "indicator--2991a6c5-45cb-49f4-afe5-d6a740fc3e51", "indicator--536e93b7-c4a8-469a-b43f-23350a36afbc", "indicator--0b588589-ed39-4f14-974c-8dffa6c46953", "indicator--c8e3abbd-e92b-49e3-b1a3-b6ca935fd295", "indicator--44107e47-3b21-499c-8673-423734b7de7e", "indicator--6583cf79-7db7-49d1-964a-e1ffcf15e86a", "indicator--d3c735a7-eeee-48f5-9de2-840003f13fdd", "indicator--f76a0753-745f-4285-8648-a04272a38e78", "indicator--0885fe62-75fe-4fed-80b5-baedc14bd910", "indicator--71b59afc-482b-4b4a-abb7-0bdcb587a7b5", "indicator--0579e466-2b8f-48f9-8f1e-471261c4bddc", "indicator--e4e7ea57-b00a-4eed-8742-11edf99ab6b3", "indicator--b26fa915-9bba-4073-9e3a-9fca43c28b2d", "indicator--2054261d-1ef1-4061-b86a-22034f69ac64", "indicator--bfdb7b1e-8d48-41fe-87a7-ecccd6625b40", "indicator--15ff7803-913c-40ee-819e-43f9784e9b40", "indicator--d43169b0-55ad-4a0d-935c-d1d923abde47", "indicator--22963feb-edc7-409a-9bd4-65d14fdabbc7", "indicator--6ff5a47d-74ad-43ea-9cd8-b8af97fb715d", "indicator--b17282b9-4cca-40b2-94eb-ea8ff97f36a0", "indicator--272d96e9-9ffe-4d04-abc2-f2e326696418", "indicator--1c7ca280-a858-41ac-8ad2-ec7902f21368", "indicator--0c62426e-7336-4ab8-a2e6-95f0239119d4", "indicator--0e23e424-c414-4f38-b7ed-db4c405ad60e", "indicator--3fbf1782-4c9d-4a26-8591-3bc9e8811d28", "indicator--1907acc0-2600-437d-9c4f-2c8c05d82a87", "indicator--1a5a8cb6-ae10-4805-8449-5e3977e48e1f", "indicator--acaca2a2-ab80-4a66-ab7d-20a411b54aaf", "indicator--7c0535e8-8081-4c7d-badb-3c098db5dbb6", "indicator--6a4e8504-9e71-46c8-a67c-a8d7bd6f593e", "indicator--41ffaab0-4f87-4247-9469-07426eabf44d", "indicator--688f6a42-6ae0-413d-a1fc-d9a415134fc9", "indicator--2a82b2f4-cc48-4aa3-903d-eb348f947eb9", "indicator--419d7316-2465-4eea-8520-42bd5f0b20ef", "indicator--26afa421-afa6-45a0-b8cf-fb1a4d1752b6", "indicator--0c4b3882-1cf8-4e46-b6db-e84763a680dd", "indicator--44e381bb-f7b1-4d0f-ada6-58112affe157", "indicator--b0f1e6fd-1cee-4022-a5be-f39fe3a7702f", "indicator--fa4a808a-b126-4411-92f8-59fd1e642939", "indicator--9950a2e6-bc36-48df-9ad9-07c07475359b", "indicator--172e6b6e-cdc4-4a28-959a-6e759a2cef25", "indicator--8b215c1f-20cb-45b2-a192-bafe506560b0", "indicator--92fece5c-6291-42da-a007-4a96c008acf8", "indicator--994957c2-5259-4cf6-832e-340aa28f4ae0", "indicator--9e2bdd44-a6d9-4488-b1ee-b32ae2782fa1", "indicator--8ae3885c-810f-4a89-8dab-dc8dcd8aa562", "indicator--6fd9f41c-0636-4f0e-a99f-0dd7b288cdb5", "indicator--7022d6fa-4f87-4079-9497-8828c133536b", "indicator--088a3c22-8697-43ac-9b7a-b04e0d3d19f8", "indicator--033a9c17-37c9-447d-bf38-124494bc16f8", "indicator--d617287c-3a8d-428e-96fa-bc8ec8d05205", "indicator--3f535a7c-9840-4ef0-b69c-36a26be06f9b", "indicator--83573fbe-2229-4c91-8d15-a374f532e1b6", "indicator--b8c5b3b7-1ada-487c-8c9b-d96faa538c22", "indicator--c45620c1-ca0b-4341-962c-d6f0e5232cd4", "indicator--0a43105d-cfe2-4058-a2ae-247f23441752", "indicator--4dc4527d-7e1b-41ed-b8f0-3daffa6d9267", "indicator--b58784f6-35ca-435a-b0a6-8d443f658579", "indicator--a803106b-7e31-46df-8890-04949318161c", "indicator--1d1dd656-5cb2-4c9c-8c98-2218ac81f414", "indicator--36a5c1e7-2427-4ce6-b98a-9fd486c49ab2", "indicator--9f6bc5fb-009c-4f6f-a9f6-1dd6f99f9178", "indicator--9dcb25a8-9fb5-4376-b844-08613ee4f717", "indicator--30f36bc0-09c4-47a5-8f5e-47a07fcc7428", "indicator--79a2fb43-a40f-4c24-83ab-ec246c842b02", "indicator--1b227259-4d9c-4dcf-a5bc-18a786af06a7", "indicator--beff18b6-c4fb-43c2-9a7a-de8ad4000c97", "indicator--8bfabc29-f9e8-4b44-822c-74e1f0854d80", "indicator--48bdcc3f-8968-46fc-8441-ca27251c520d", "indicator--1adee40e-37df-41dc-9772-7e4e141a5628", "indicator--f4cad929-92dc-4288-b2b5-8e4b27d2b611", "indicator--55893e76-c032-4fd8-b7b9-ccde81ef1766", "indicator--cd540a3d-4e58-400e-9c0c-fab652ad30bc", "indicator--014cd658-6751-4a32-8c13-016650e703b8", "indicator--bf4564f6-af69-41e1-b002-986503e864ab", "indicator--d851fdb2-6551-4cf8-880e-6fa2192fb956", "indicator--7d9b7363-3246-4097-814f-b74d49e8f1c1", "indicator--f8226717-b1e6-4d55-b188-020db0f86ae2", "indicator--3d67acb4-6243-48d4-8379-545ee44e151b", "indicator--c0bfe5e0-7ebe-4a1a-9944-e2cd61850edb", "indicator--b914edcf-bd0c-451d-add9-826f7a45159a", "indicator--aa121ca5-12d5-444d-b5ef-e135f48a45ad", "indicator--02b0a8eb-c01e-42ee-bf5e-ad2ef5b86945", "indicator--7fb8a48d-ca35-4a2a-af42-ee958a5d665f", "indicator--af651c4e-d1d3-48bd-84d3-52f3de36b339", "indicator--caade7b1-8579-4a01-9181-60c585698ade", "indicator--8ce00ebb-fc41-426b-9f61-21cff40bd084", "indicator--717f0152-0315-4507-9750-e2a484e30b90", "indicator--90442aea-39cf-437a-849d-97595f0e8b10", "indicator--21a82259-e750-45c6-baa4-726190414f54", "indicator--c78e60de-2f3e-49a1-a12a-5b1e79aec364", "indicator--d229e9d6-3e5b-4ab4-bbd9-daad8cc40f56", "indicator--0d956d0e-47ad-463e-b5e6-9c8646430830", "indicator--a9bf9b54-b818-4d43-acb1-9d21c96cc5c1", "indicator--2ecbe435-2aba-4099-9d4e-9f33951a21ea", "indicator--38d963e1-5074-472f-8a8e-6ad581b762aa", "indicator--f7bbdb1b-91f2-4a95-986d-8945094d9c91", "indicator--a6613077-a598-412d-8c64-714efea312f2", "indicator--7b84d974-f4d3-4a76-be98-6dd3d31b83a9", "indicator--bf74f59c-0b82-4cf4-9273-ca7613ae6fb5", "indicator--771eea17-2e26-408a-ab61-d5a1906b6c92", "indicator--6ddb0370-2d9d-4ebe-854f-18aa15229e84", "indicator--2fe94a95-dea0-4c8f-96ed-e46bb8ca0d8b", "indicator--a4ff293f-d09c-4222-bbb6-158dfda97b30", "indicator--4a792f0c-ca42-4068-8094-211a276515ca", "indicator--c35ffd58-28be-47cb-b6f4-9a6545c4da1e", "indicator--9cf9e163-c3e4-4016-a33f-db01b08e9557", "indicator--3ae294a1-d503-4833-b712-9f8d8085fe6f", "indicator--0fa6baa5-70c3-4591-ad51-2494cc57ef98", "indicator--53546f6d-0a7f-4b12-b244-c2cf979a44fb", "indicator--b38fd9bb-f02d-4e31-b781-f18b0918a6de", "indicator--fa263881-26f5-4979-b974-4a591c9d805e", "indicator--2bc02493-5623-4fc9-8781-b75b9e8b7c79", "indicator--5d9f8272-9a07-48cd-aaf3-7fedea59d189", "indicator--2d039746-9397-4bb1-826f-8cb367803b72", "indicator--a241b60b-999a-4001-8465-a7decae35cb8", "indicator--c0a87e01-581c-45bb-90e2-28cd724db8da", "indicator--a2370af9-5aec-485f-8f15-91adeaeb5bbb", "indicator--561af05d-ca77-4a37-91ed-e2f0a798b107", "indicator--cc7a37c0-e433-4266-a022-bb7ac7c63110", "indicator--b9af58e8-b07f-43c1-8c3a-2377fa3d3313", "indicator--b7151871-7360-429a-b8bc-5cb6d8111300", "indicator--c2033159-eac6-41fe-ac83-45b7e0b7a0d7", "indicator--95afbd6b-515f-4b61-9532-a9e9f77b0033", "indicator--6f04528a-f114-499a-8e6e-7eb0f93e3d58", "indicator--6248a7b4-5977-432b-8b94-f5648ed694a1", "indicator--aefadebc-a742-45d7-9637-0c922d56fb40", "indicator--9cb1df65-85b2-470c-94c0-b0591ae5d56f", "indicator--10ce35c2-c96b-466b-9203-247b42f4690d", "indicator--0430b2f5-2081-4768-965f-2421934f5f8b", "indicator--419f0584-9909-486c-8274-3eff5bd29cf0", "indicator--697b0222-9d9b-4162-a64c-85add7ec55e7", "indicator--dc908e7a-80d0-4a5d-add6-f1364bd90ae5", "indicator--862f5c49-537e-4484-bd5c-1cce8414e33d", "indicator--82f43874-5409-441a-97c8-4d00f52f8c17", "indicator--706a0361-0571-4696-befa-a9f3d9161b9e", "indicator--0f69ba56-7b1a-4135-93fd-eb63c1d010e8", "indicator--6ed67bed-d75f-4539-949f-1487a8b7b953", "indicator--29306747-a74a-46c4-a4cb-296a82504b60", "indicator--40638f8d-4220-4a42-bdeb-a1dfe75c840c", "indicator--c81c2c50-7f55-4aa2-97d1-6faa0d8e23db", "indicator--73e738a4-4754-4cee-8056-3cfedfb3c28d", "indicator--92763c95-6e1f-40e5-b9ba-28f9e0f6e5df", "indicator--4c92cb94-df0f-4c8b-a09a-0aba13feed3d", "indicator--e471a6b0-3228-4734-953b-3a1a212f6707", "indicator--9c6a492f-3efb-4915-8f9d-3783bd38f0d9", "indicator--ee9f108e-6ac5-4ff7-8ba5-75e81999a63f", "indicator--8bede3a6-be21-41f9-93b6-b9d34461f62d", "indicator--6672d74b-69a6-4ccb-b2b3-675b5b0a8188", "indicator--aa156805-e6f4-4a7e-847b-49a2487320fa", "indicator--4b95d0b2-215f-486a-947f-814556d19d52", "indicator--a0702636-87e9-4c51-8ca4-f0cc4cca08cd", "indicator--69f2068f-0847-4ecc-a523-cbc93a488830", "indicator--9da2340a-46b3-4b70-b477-149d7077eff1", "indicator--906c19f1-9b6c-401d-81cb-9d92e9dcf305", "indicator--c5bdd739-be15-4aac-8035-fad46debdc75", "indicator--b8d5e446-d703-4a5a-b82f-a151902dc03e", "indicator--da1952a8-b20d-4058-9eab-31a613d61338", "indicator--6b7a43dc-54e7-4c31-890a-d69ec64f59dd", "indicator--d0420ff2-445e-4bd6-8209-66fd5f08a3ad", "indicator--34c8248b-0376-461c-a900-191c28cffff0", "indicator--ab4792ac-bf79-4dea-85de-eddf9fb4bae8", "indicator--df6ff305-1d64-48af-bafe-5fd9c4814a3e", "indicator--bb26fcbf-2dc1-4052-a43e-312b8adf4bbb", "indicator--723285e5-1288-4c72-99bc-d357d278f200", "indicator--7fd83e85-980b-4721-be51-51eedf71b035", "indicator--1b8e2c10-f723-425b-a7d6-c26e9a45be5e", "indicator--05548610-f90b-4be1-96c5-acab46671fb4", "indicator--88b660c6-afbc-4b3a-b6a6-1b76e9cc99b3", "indicator--ec9bf9ad-41ef-48d1-ac6c-1781ca796755", "indicator--94331c76-f6f1-4e65-96ce-9736960a0bb0", "indicator--3756595a-2627-46be-a04c-7aeed05ec80a", "indicator--2e2411c2-5cd8-4594-86b5-2c175f7d8a7a", "indicator--91e59cfc-3386-48be-8824-d7e87ad5589f", "indicator--6515c32d-8c8b-411c-aba7-78aafefdf06b", "indicator--00b5a160-eaf9-4fcd-9005-c5ec2d58f074", "indicator--d5d271fd-d34e-45ad-854d-07abab2c2ca4", "indicator--e9c261ab-2924-4b9b-84a7-72f0d981210d", "indicator--6b9926fa-1cf5-474f-a0df-48aab854490b", "indicator--02f1916c-282b-4d5f-9bff-e67b1ae9453e", "indicator--a7c91224-07b0-4f8a-a096-a0d699abbb98", "indicator--5b75452d-941e-4711-9310-e10adfc7d1f5", "indicator--b3e565b1-96b7-4b49-9c10-a81fc84b1a27", "indicator--2e59ede6-d92e-4b12-840b-e57d39a1f736", "indicator--cfa7e1a2-99fe-4aed-b09c-5bf9d85d3f32", "indicator--2bfd3416-16fd-4cd7-a194-95c5b0583e9c", "indicator--9b2e4bbc-8224-4b13-a1bc-dd571bf52dc3", "indicator--acd60f13-7d2f-4881-95fc-d1bbc689d763", "indicator--c9a80a2b-8e98-4000-935b-fc363594cfda", "indicator--c956cf81-fd1c-4599-8af8-67b276fa7dd1", "indicator--8e4e2d5c-e7ce-4c7c-8779-f23c8c3d2974", "indicator--5d6b5a3b-f82e-41bf-838a-85d31bd5bbf3", "indicator--555783a3-8815-4871-be50-65c00ddb53ca", "indicator--7ce95209-de44-49d6-ada1-36050968eed5", "indicator--73556177-0e04-4970-909d-d5b059ff6e7d", "indicator--1101b95d-d352-453d-8712-ed4632d1afe1", "indicator--322a3ceb-64ed-4a27-84b7-338ce959be12", "indicator--265f48bb-efb4-4d80-9c85-c7ef8a58bde9", "indicator--40bf7a34-1288-41e5-9e93-b6a97e1c91ec", "indicator--05e51ab0-f3b8-47be-be48-288ab8ef70b1", "indicator--94bb7917-3df5-42bf-9278-7b4bc69c6187", "relationship--1bfbe537-d9bd-4d76-b612-ec45fc80303e", "relationship--d7bdeaf0-d1c2-4221-a4a8-6a39923b3343", "relationship--3cf97515-a4d5-43c8-8ecc-a423ae7cb361", "relationship--c3842ea8-579a-4010-a5d4-11204c28f2f0", "relationship--37139a65-7649-413a-9019-d4da972d88a0", "indicator--aab75366-73fb-4193-a10e-81bb1c32a91b", "indicator--4df8a540-4ee9-456c-af2f-df5d84d81178", "indicator--8f7e8330-c8f4-4d5d-8919-f6e0f16e3a80", "indicator--78392181-32a9-46a4-b675-568a75da6b6a", "indicator--c38efb3e-19b7-43e3-9b7f-78a04276dfe5", "indicator--9d881470-b5cb-49bd-b4fc-c7ca4556c725", "indicator--0569ee28-5020-4fa5-b873-a6711951c38c", "indicator--a7a177ee-7953-4f6b-8d94-c22c546e1956", "indicator--93599bf6-4f5b-4cc5-86ce-cdb1ca90a5e8", "indicator--3da51291-2e47-48ea-860d-de5f6ff9e64d", "indicator--3cfd25bb-5b99-4828-bb81-d5e36335402e", "indicator--4a5e2a18-50f9-463d-92e6-2b25920fb8d6", "indicator--4d349c5a-e6c3-45b9-87ea-d894cccf31e5", "indicator--2a82d3c3-ab0d-498f-a7fb-ecf4faa2990d", "indicator--9572f843-f98c-4a58-8396-633f6c7bea94", "indicator--33a603e9-7b96-45fe-a46e-0593b14c86f1", "indicator--eba96077-3a3b-45b8-ba63-e93481dfa28f", "indicator--ce1b08ab-35ff-4027-87aa-898961e2dc4b", "indicator--cadaf0e9-1370-497c-bc79-97618d8baab4", "indicator--e90c2240-2b4c-4f54-abbb-01a3b4a1f2f2", "indicator--d7f776aa-0123-4312-9383-533c61b2bc4f", "indicator--11cdc9e0-3fb0-4b55-8231-a061a071f809", "indicator--8ff1a5c7-3333-48f6-aca1-8685e8073506", "indicator--1abb0d64-fd25-4452-9ee1-b5baddb77719", "indicator--3a8f846f-d2ff-4f80-9087-ed3b418857f8", "indicator--3af70d5a-332d-4dee-a834-b8eb6c2c173f", "indicator--5ac35090-c460-498e-978c-e0ef2bd337d0", "indicator--f255369e-433d-4b1a-8dc6-13995d4bf7e6", "indicator--7d84bd50-b19d-4a7f-8be5-2244c3975e6e", "indicator--751506c6-0078-4092-8b78-1732877935b4", "indicator--cda5fb4a-fc17-4e57-b174-7d7069612374", "indicator--448325cd-6d50-4b95-90df-eaee360ed5b9", "indicator--bbebd8c4-31ba-4a36-9646-c5ea89c3f788", "indicator--84f64aac-c498-4447-9856-a154fd3ddfe5", "indicator--4785a0da-5fff-4572-a6bd-bb43f9463686", "indicator--7c7dca09-25ce-477c-a189-50668ab7c855", "indicator--efc08797-b57a-494f-83f6-3ae755ef7101", "indicator--78806eb5-064e-4383-ad30-461de0b8a439", "indicator--cf66c429-e01c-4379-a3dd-52ae561ec719", "indicator--9fcbdb1b-02f5-486c-bf84-fd0205856623", "indicator--8cc154c7-0243-48d1-8f6c-451fc8e96868", "indicator--eb379c59-edfb-4a1c-9ee1-4ecbe4f3a1fb", "indicator--784dbac1-5007-4c6a-8e8e-5cf5fe4ab334", "indicator--16e2b824-340a-4cae-a561-01507eb6f7bd", "indicator--d9523c8e-3a16-4df0-851f-515288c2dc9a", "indicator--c267034c-a734-4def-aa2a-785b611db39d", "indicator--cf003bfb-da6c-4457-9982-9488f36f6e63", "indicator--136fc526-b1a8-4320-ae5d-d8c6b66e09b8", "indicator--0962bc2f-ecaf-4bc5-a515-0531ca367b1c", "indicator--f8cfe620-f457-408c-83a9-acabb10dfaa8", "indicator--d17255ad-825d-4273-a037-457802426f0b", "indicator--a94e2782-6e65-497f-8e1a-159e4f1d5e9a", "indicator--51971d2d-0ab8-45c3-8d09-59f1dfca3b8c", "indicator--be7dd3c1-80fb-4cbc-a538-2233d301efe4", "indicator--55c26476-c919-4e0d-8b40-fa9185676ee6", "indicator--a511ece8-5cb8-4f04-8242-f64b7bc2e9c6", "indicator--a8368702-7400-4fbb-8f21-27d14154f405", "indicator--568172ef-44ff-4be1-b2e7-10a2052e463f", "indicator--4227010c-a763-4196-a279-232abec71181", "indicator--6cc96a38-d256-4f17-8566-fdc14516a023", "indicator--33327510-26dc-43ff-ae52-75d1ca274cb0", "indicator--b36e3d2c-1651-4664-a7a0-5eecfc326abb", "indicator--d65bfec3-fe8f-4fa2-9e8d-c77afad22bb1", "indicator--cbfbda25-8270-4122-8e2c-eb07a9aaa6bc", "indicator--a6f919bf-c0d9-4030-9094-0c051acc3d02", "indicator--f7454b78-102d-4e92-a227-ea833f251ca5", "indicator--1bfa993c-401c-405d-adf0-faf2036c7e51", "indicator--1faff667-463b-4eb5-be99-e6ae958c9715", "indicator--56db1eb6-c0d3-4da8-8bd6-802cd771006e", "indicator--76f70ca6-bff5-44bc-9604-0cda1089116d", "indicator--ae9262a2-a7b7-482a-84d9-a7ab8a7b3dbb", "indicator--d711fa88-fe06-4308-92a8-019b0cb46e57", "indicator--e175051c-b210-4b44-926e-fb13cd2425c5", "indicator--b3803ef1-78a7-49ab-b015-179be3eece0c", "indicator--de1704b4-846e-419b-af36-160553401e96", "indicator--d07534b4-5e5d-49a2-99a8-bba100edb991", "indicator--e8d2a78d-e408-4e09-9deb-587160cf6e5e", "indicator--be7b3c8c-62fc-41d9-bbdd-b133d4fdcd11", "indicator--436c9b0e-0c45-4e12-ac73-49c4be5f7154", "indicator--86553ed9-1acb-40f7-bcad-a86a18a07694", "indicator--694e6fe7-7496-4b0f-9f22-e705d674200c", "indicator--2c010ea6-73be-46de-9d62-04c9aa0c2737", "indicator--314eef23-42ea-452d-a2f5-93f4c446462a", "indicator--1de601e8-ef1c-4092-a406-c7790b3a71f4", "indicator--a0d8bc6c-a087-4377-b924-666b6e84c200", "indicator--2f1a0c66-ae61-4f89-8b3c-7c9a3005aec0", "indicator--836945cd-bc75-42eb-8e3e-cbae9dd5cf43", "indicator--93344c44-d5e0-4b2f-9223-597cdd919c6b", "indicator--d7d276e6-9c96-4a27-8cdf-2d3c8446c03d", "indicator--3db955eb-9ac5-40fd-a619-990b135497dc", "indicator--8617cb9e-5357-449c-9fd9-c8182dbde58e", "indicator--e1b50693-aed7-490d-9366-49918066624b", "indicator--a40df63a-3640-4b44-84a1-388a248b0f62", "indicator--4355ab4e-b73a-4d3b-8d23-b1ecc31ba3af", "indicator--ec2e2b73-5e8e-45a4-b53a-7a8bedf67bea", "indicator--7964f9db-cfd0-419c-bf5f-c86d92827692", "indicator--ac3a1ded-e33c-429f-bca0-4cc18413ecc0", "indicator--4e00a348-d660-441d-86e3-f7d80ff2593d", "indicator--4e3f20d8-9d1a-492a-87be-d06a31758844", "indicator--d29928de-afd7-40f5-af47-0fb9117748d0", "indicator--c32731de-b1b5-4ad8-94d4-f7ceb00a4b90", "indicator--42b37750-3e5a-475a-afd0-7dc758cc45bd", "indicator--e9dc826e-bad2-4104-8706-042494cabd78", "indicator--2c023edd-2340-42a5-ab25-d6986d6417d8", "indicator--f0eaa7f6-6fdf-4a7d-9628-43710e587dd2", "indicator--06824192-515d-4d26-8851-2728f0273fdf", "indicator--e8929aea-8674-4f35-bfa6-e83a3505ae48", "indicator--b1f1dcad-1365-4354-8d04-0fac63ac7563", "indicator--a8191e00-1323-4c00-9200-64ed739e908e", "indicator--6edfb4ca-b294-430b-9c68-0abdee8f94fc", "indicator--c804ca5f-0612-4e84-a487-023257ea72fa", "indicator--01ae9184-c381-48de-836a-2828430cc2bf", "indicator--8a37d2ec-bdc0-4b9a-9a86-1bc739b570ce", "indicator--e302ce87-d8a4-4bc6-bb9a-f811e3cdd338", "indicator--a2f74796-9789-453e-9010-22098eafd24c", "indicator--b996ee0b-9555-4c29-b1e2-b89a0c873aff", "indicator--0aafcffa-ed82-4af0-8796-fc1620132b02", "indicator--80f6d487-1b4d-4c5b-a36c-9b361870ca67", "indicator--843d6df5-7141-48cc-aea8-7af04cdc4a2b", "indicator--b625996b-cec2-4d13-a656-6b97ad64d00d", "indicator--c701b9ca-21a7-4a71-a51e-9be08d25c28d", "indicator--a03c8887-58eb-4edb-a214-c979b5190f34", "indicator--4cda401e-40e8-48c6-95cb-1861ce51b9de", "indicator--b7a1b943-a5f6-4fe2-8783-43eefa965bff", "indicator--73b156e0-b185-43c1-bd6e-25887c51b90f", "indicator--62693cb6-5794-48c1-9535-6d42738f0d11", "indicator--be9aa2fc-4ba4-4244-bba3-b83e8048312b", "indicator--17903580-597f-43cc-8728-f42777481647", "indicator--f2ac5499-c567-4d76-8c8b-4d86f40b4f69", "indicator--7ae2fe5d-2ad7-43a7-9bad-3a45f01789f4", "indicator--258fcb26-c8dc-4616-b5d9-6238e2e125c5", "indicator--3d6b683c-63f6-46e6-8127-0095b1eb7ad8", "indicator--920ebc7f-a86a-460c-bbdd-dbbecb0919f4", "indicator--c47202ff-4fa3-487e-9884-76fa3c18f7bb", "indicator--f5d25440-f447-402b-966f-c32119dc56f2", "indicator--13638066-c236-4758-9b4d-84e514efb2d0", "indicator--99ca97bd-3a7f-4424-bb1b-e57ef157922b", "indicator--00d2a052-ca26-4690-8ee6-f1cd5c0438b7", "indicator--d8a58e5a-3479-4be7-a797-342cf67b6380", "indicator--6d7a3ff1-5206-41dd-b8cb-ccd0c773a4bd", "indicator--414de09e-ad24-45e0-bdb4-04aabb7e243e", "indicator--ff1e3d13-7d8b-45f6-8366-f8e98b1a3a14", "indicator--aa7f1245-682e-4cd7-91a4-0e9ea828f20b", "indicator--1da776f4-378e-43f1-864d-38c94b67a7b2", "indicator--d7373a85-05c6-48a4-8611-1cd14e6a5947", "indicator--feeacae8-5504-4d1b-82cc-8e490c6accb5", "indicator--38a33d5e-f561-424b-8ec8-6313e1258463", "indicator--2d029cda-9674-494e-b67e-f7bd4d2f5cfd", "indicator--9ffa509f-1668-42f3-9953-3559ed3e0563", "indicator--4d583eda-28ac-41fe-ad20-51bbb294de62", "indicator--993cca54-7ce5-4a93-a6e7-003c2027cfaa", "indicator--0cede272-5cc7-447f-81e6-b3884c8fed19", "indicator--17f11b04-b5d3-468c-a249-d32223bfd26e", "indicator--59a15720-8786-444a-90ef-e8c91c955153", "indicator--0a8a729d-c854-43a2-b3f8-77db64471f62", "indicator--2c822cf6-e229-4466-ba90-ca762e5041be", "indicator--ead4b0ec-bbf7-425c-b030-e833f5087a5d", "indicator--0cf7869e-39fa-494a-9258-ad6e7ea2e70b", "indicator--538f7f20-3d30-4cbc-b46c-e091783a2809", "indicator--3e8cff81-6cc4-4799-8204-c825bfd0ae77", "indicator--1313b5b8-99cf-4f26-b5e9-d1125ff6f3e9", "indicator--9991101a-637a-4502-8fbf-86fd0e9e83bd", "indicator--06cafa64-d336-4f87-8396-ebc4ed971453", "indicator--da8356f0-2c57-4f21-a2bd-adbe0ced6d01", "indicator--8e588dbd-8e55-4e3d-a074-de590218eb0d", "indicator--dd1706c8-65f8-473f-9bdd-41d491abe7dc", "indicator--74266e51-6e2d-4b05-8526-310da6868a66", "indicator--6a2c4ee4-4dc1-4eed-b20a-a69de41063c6", "indicator--981afeef-48e6-4bdd-80de-4ef69bc1ed94", "indicator--c3350fe0-529a-45ef-a88f-e0fb42068812", "indicator--c0abc45f-aa7a-417a-865a-3fc6a6fc4e06", "indicator--a17609f3-b3aa-4593-ac78-18c6c41171d3", "indicator--3fb58790-fc4b-4526-907f-9e1ec57ebb29", "indicator--1664ddcf-0c0f-492a-b5e3-7f3fbc66f909", "indicator--0dd3d5e9-ae37-474b-a757-b111167071fb", "indicator--e5a4b8eb-df23-44ed-8757-ecf163bc4972", "indicator--b193ff60-6528-454b-af5b-bf00900c53c2", "indicator--554d902c-845a-4447-adc2-67d38434e889", "indicator--1863d2be-f980-4595-9f4c-137c8038bc08", "indicator--5465b24b-8d25-4787-af35-5e61376435e2", "indicator--7bcf2a2f-1c33-44bd-b69b-bf1363cfbff6", "indicator--6d3daf09-52f2-4664-ba23-7f3c4547b0c6", "indicator--1c743ae0-d08c-411f-a841-c259f83d73e6", "indicator--7eeeaa91-4522-4edb-913a-8a10361c3834", "indicator--86abb1bb-8e3a-4c8e-a7b4-255d02601dbb", "indicator--853a4861-9391-45ae-b2a6-752585178e70", "indicator--9a9514b6-1118-45be-abd0-600bd489fe54", "indicator--3217de4c-f385-4b92-b384-63fb7a0d586d", "indicator--452046f3-633b-4f1e-95e8-c9d28105b5f7", "indicator--ff3cb4f6-a774-448e-ba1e-dbc3f4eb0a52", "indicator--4a9171a7-2795-42e2-baa9-712bc2a07eaf", "indicator--b3d9fb4c-0613-4c5b-bd43-004bf4875dc4", "indicator--417769c4-269f-4888-8138-6c19724d8f2b", "indicator--8524ccf6-2ee1-4278-84e5-f9f2d44346be", "indicator--adcf9242-eb4e-40ba-a73c-19db32e11376", "indicator--f1b11bc4-dee1-4c2f-bda1-6794aa0d7a06", "indicator--3abfe3ee-c55e-4ab6-aedd-9d060ba7f582", "indicator--3593edbf-0b40-4c8f-928f-3537a10d4397", "indicator--d0891b74-ec65-4858-bc27-d29420bdd7af", "indicator--745a2a94-9f81-45f4-a93b-cdc3e6545181", "indicator--53b69a6e-bc89-4220-ab69-c7c242723044", "indicator--e2cab8e9-fd0d-4915-944e-81ae6ec6b4fd", "indicator--10305804-5420-4ba5-a543-a566145a44c5", "indicator--276b3c20-9b1d-4424-bfea-406c43d80b03", "indicator--2b8edd65-5031-4311-ba98-8e58acee2d31", "indicator--3d7952f7-63cb-4dfa-bf86-51360d1a309d", "indicator--eb75a097-96f8-42e0-a983-bcf433c6f4dd", "indicator--e82c0f3c-b344-4342-b7c8-16614dda110c", "indicator--c78dd2e5-2acb-427a-bed0-ac76247f0444", "indicator--8693b535-2840-459a-a908-bb533182e9d6", "indicator--48868a45-d693-49e0-9c70-5ec72255e0c3", "indicator--02ba3f95-c4af-4a17-95b9-50e31caabdbf", "indicator--d368c8aa-5a93-4479-a2df-9410c2517f38", "indicator--83798a53-8e03-48c9-a6e0-3172ef2f5fc2", "indicator--10fbf6dd-4b9c-4f7e-9e6a-a464f8eb482b", "indicator--a1f378aa-9359-4537-af11-1b63a1d6892b", "indicator--ac3256e8-c463-42e1-b483-0b060bc3a268", "indicator--c98f1be5-26bb-4fe2-85d4-4ef994073fa0", "indicator--0472ecae-58b5-4ef1-91ac-1758daa89158", "indicator--baace177-dd65-4b34-a251-3dc80c8d7d08", "indicator--5c359329-cf23-4317-8c03-a81fe7379bf7", "indicator--10a9645f-7485-45ca-896d-06538a2bb000", "indicator--d5690470-a7cd-465c-8c91-7e968917cb71", "indicator--b5585ff4-797b-4caa-8121-f0367d1b9461", "indicator--72c0984a-4e9a-4b3e-8b82-e9669595536e", "indicator--169b2e6e-a6d4-46f0-a772-198b5cc07234", "indicator--d1ef27a3-0ba5-4b1a-9703-51da2324a6ef", "indicator--d9ea74da-7c38-4112-ac8a-72fa9545954a", "indicator--daf8a4f4-d573-4670-aa38-88f5cad23674", "indicator--b5573b8f-f778-440d-84ac-54e7fe2b5d85", "indicator--dab01deb-e726-4540-ac04-ccc287355f94", "indicator--632b7dda-939a-4415-9fd0-6b951bff3cea", "indicator--765ab63c-3164-4f10-9993-5e19e86fe893", "indicator--47bb1864-08f2-471c-bf12-1edcd01fed06", "indicator--36fb07ae-5bb0-44c0-930f-c3b5957a5e32", "indicator--71a84ad1-d5b9-4672-9116-2d81b82ebd38", "indicator--6fecb6c0-f855-4680-9997-266c46977859", "indicator--716d2d7b-988f-438b-9747-177c36ca83dc", "indicator--3ac14a9b-9138-4d88-8bbd-ca14d30b14e3", "indicator--9338db5f-6314-4e80-b277-10aa778b016b", "indicator--269d3ead-e14c-4f36-971b-932da87b16ee", "indicator--33224815-e46c-4644-a457-9674344e676a", "indicator--69cbaceb-d24b-4cbb-a280-67ce4f7c6e21", "indicator--a30c2812-67c5-4dac-9fb2-2369f4fe060c", "indicator--c6424dd3-3dc1-4dee-b11b-4b3e1c461209", "indicator--768c726a-887e-4834-b076-64c64d17e533", "indicator--ce554a14-0f0d-4211-90d7-b3119eb2c909", "indicator--04478334-45e6-463f-b80e-38f2b0500b24", "indicator--ae911315-6bd4-4148-a617-b705d05791f1", "indicator--587bce78-2836-40f4-9996-b824d3a449e9", "indicator--77dd0ae4-0035-4584-8511-f1708a0bdd7b", "indicator--a3d2dbd1-383c-4663-a851-4e9df3346ad1", "indicator--3f2d51e9-2884-4fda-82f8-e350cf07c0b8", "indicator--c85158e7-6c61-47d2-becc-3d57c553a414", "indicator--42b8ceeb-3099-4b57-9072-a6666c581b18", "indicator--97bc799c-9de5-4173-825e-8c2fe1ee8aea", "indicator--3eaa888c-c18b-4b7a-a207-b7b5b909c090", "indicator--5451d17e-cecc-4af3-b047-0b4bbfdea18f", "indicator--f69365b2-2400-4a3e-9c4b-6676fda6e2aa", "indicator--2bdeb938-9cad-4c1d-b4c4-01bd565a0ead", "indicator--ce6faeb5-b832-4541-af2c-c88a477c7d30", "indicator--f5445b42-0ed7-47eb-acf7-d2bf0572d195", "indicator--91a3fdef-73ee-4f34-9370-4ab47b0798d4", "indicator--925b06f4-9702-408f-b0c3-8343ca2587cb", "indicator--af642313-c5ea-4ec7-98a3-032ba4165b9d", "indicator--192d37a2-6f64-4c54-881b-fb7bc46330f2", "indicator--cecfb2e0-c372-4622-9863-e913d5ccbe9c", "indicator--c1cbe96f-282e-4569-b4e0-c820f3d9ea70", "indicator--e733f0b4-4d9c-417f-89fe-146ed97b7e3c", "indicator--085ffeb6-df66-4ab4-b7db-702c5029c0d5", "indicator--ba1e1736-d185-481d-83db-a9d76fd15acb", "indicator--0dd66fe3-4ba3-4cb8-893c-f581a750fa04", "indicator--a76dd000-014a-4f30-b044-44755969fafa", "indicator--dcc7348f-3928-4652-8f23-d51296162041", "indicator--052a996a-299a-443c-a98d-8f4dd3cadf91", "indicator--fdd8b367-8a9f-486b-a018-fff8e0c51ab8", "indicator--3e2277c6-653a-423f-bcfb-3375fcc33d8f", "indicator--e3d5ddb6-4dec-4fac-87e3-bf76141af783", "indicator--8917df9e-5aa8-4ab8-9886-690b514b377a", "indicator--226ff93c-17eb-46cd-a6c8-8731e1827b73", "indicator--c692807d-aa5f-47ae-95b2-49500acb96fd", "indicator--890a4bf2-1362-42b9-b8b1-8a9890fbd282", "indicator--2089cfa1-4efb-4129-b783-7d9c395ca601", "indicator--361ee9e7-55f4-4853-8efb-0a617a4ef2a6", "indicator--cc9cc706-5161-4faa-90a9-641a98df8e0b", "indicator--c12f8606-f6ac-4e4b-a3b5-c3f033f9a83c", "indicator--38040ec6-e22b-4729-a01c-b5195038c315", "indicator--51911361-9017-4242-bd1f-2621c4c1de8f", "indicator--4ab8dc13-a03b-41be-a363-1065f49c6ff9", "indicator--ce8fa208-c676-4271-870a-a1cb99797c8d", "indicator--6117781f-ce34-4239-ba17-20e88bf7353d", "indicator--70b5452b-f41b-4719-9ffe-3edd5d351718", "indicator--14895529-1738-4b32-be4a-e7012e63c399", "indicator--093701f9-f682-4135-87ba-c0e6554c4c8d", "indicator--675bca25-aba4-42d6-bc74-744c4d5a213c", "indicator--258496ec-7e92-4338-9361-e64faea2d54b", "indicator--7ded95c6-1d9e-4518-8378-59fc21d9b8ff", "indicator--3ac0f857-8577-43e7-b2ab-38e74085efc2", "indicator--dfff7273-d7e4-463b-8a10-54c995c481da", "indicator--cd75e4ac-d7ab-4407-8f5b-107cc1c17adf", "indicator--3e1a9280-a8a1-495d-8c43-4b5c8d8baf6a", "indicator--ecc78d42-0b1f-4f3a-a2fb-f2433fdea51f", "indicator--fa79f2af-fc87-473b-bb05-68b09606b1d5", "indicator--8c20b127-679f-40d3-b89d-dccded40c6fa", "indicator--6ef693e8-8805-48b6-b6d5-b0ac7a32c7ef", "indicator--2ca10a7c-37ce-4810-91c8-c0c6129e40ae", "indicator--e9d71055-6227-46a7-a886-68b9f9c1ef68", "indicator--4fbe57de-fad9-483d-9c34-4ae1a4886c47", "indicator--5b9ba302-c39e-4fab-ad3f-0391984b2cec", "indicator--b249d7fd-8037-4420-98c5-cbb78cea21a8", "indicator--28d77863-c2da-45ea-8e5d-f0b488e3777b", "indicator--605ffd92-f500-499a-9b68-bd871706a780", "indicator--3e8b314a-691a-4e19-9c5f-1d1b3fc13f0d", "indicator--93bc3514-4141-4674-95c6-a6c141c2e8d9", "indicator--5d642d7e-bfb3-4842-91c3-8e27db137c7d", "indicator--1d8493dc-3661-48bf-9502-7b3e3d06547a", "indicator--bf5e7f96-ef35-4cc3-8d26-c153b263c1d9", "indicator--b8bd57c4-527a-4818-935a-f41303855eed", "indicator--e3da0df3-0ad5-498e-a8f9-dd03670c6b1c", "indicator--78326054-cb84-4003-b791-863e9aa95f55", "relationship--39623a79-ba84-43bb-9072-e2cf4ab16424", "relationship--cb86e5a6-a722-4849-a43c-3ceee19a38bd", "relationship--019713b6-9027-474c-9ed0-83298d05c604", "indicator--d245d853-190a-405d-ac19-9aa69e57dfc7", "indicator--535c25a9-ecf3-4eba-8599-68d13469b143", "indicator--c37f1ba6-17f5-48f8-9a8c-d16f3a9ff274", "indicator--7d2bb58b-bb5e-413c-b6bc-8327cb965dbe", "indicator--450a51de-3e25-4ab5-a1f0-f25bb7a2927d", "indicator--4c3b5fa4-9714-48c4-8230-8c716af7d9b5", "indicator--b4369eef-4117-41b7-9703-d985dd7b34b9", "indicator--a508280f-c9ea-47bb-a48e-591e6b7bbbc1", "indicator--5d26d70c-866e-4103-9e52-f514a5ff2296", "indicator--64c36870-984e-4160-b8d1-e983c02dc94b", "indicator--8f24589e-e773-4c57-b758-d34f38023bcd", "indicator--3e833832-cf1f-40ca-a0c2-db1c84161709", "indicator--3a3889dd-5ff8-4d09-b783-8826ac6ea691", "indicator--1aa00cd9-f6cb-4ad5-827d-fbfcdf858a4c", "indicator--752f899c-0fdd-4eb4-be2a-6c2163fb3c87", "indicator--565ecf4b-fe91-4401-abd6-0f3f6212ace9", "indicator--9b0c2897-e6f5-4fe6-bddb-782f6618c383", "indicator--b24147ee-9e7b-4b2d-b730-db39cdbf9efa", "indicator--9731b8f2-b4b1-439a-a005-3842e37acfd1", "indicator--48cf988d-f64f-4440-a279-86c851dd9e7c", "indicator--864a01c4-e56e-4777-a765-18e82374a081", "indicator--9d06b836-c3d9-47eb-a36e-d6500e869ce2", "indicator--0e960553-48b3-444a-9b2e-d79b943d6f06", "indicator--cce4bf4a-0b53-4a37-8414-fb6733375303", "indicator--b56f5683-fc52-47d2-8198-474bb6095798", "indicator--f3a458df-8526-4d52-aedd-0e30434b534c", "indicator--3e49a03d-aa08-47e3-b83b-2261ce204f55", "indicator--41b2e6d0-7d26-4408-9e1f-25cb97b8cdb6", "indicator--dc076ed5-a5cc-40af-a789-2e715b640e5c", "indicator--f497d31b-8fb9-4274-9108-60045bfde054", "indicator--ce97e917-c988-416d-8b93-45b96576e53d", "indicator--168c7703-625d-4c04-b96d-b923c1de4a13", "indicator--98983990-358d-4a89-90dd-c9c808575769", "indicator--8bff5620-be2b-4b3e-ad27-f2ea7b1d5a22", "indicator--ed4e449c-86e0-4588-b791-a5c498f752c7", "indicator--897f4254-0950-444d-b06c-096814d513bf", "indicator--62881780-2d32-4d7a-85c5-5689325e30e8", "indicator--420b246c-c955-4cee-8cc5-c9007de1f9b3", "indicator--2e180a0c-fc1c-474d-b068-f65a7ebbc1c2", "indicator--50cc7261-b765-4905-955f-ecf1627dce3e", "indicator--aca272aa-510b-4d39-8c66-f1811c71523b", "indicator--876b8954-bf49-4023-ab01-ba0e0b90ad0e", "indicator--624e051a-58b4-45b4-a94c-c2a35495c862", "indicator--51f2bf50-7098-4f97-8795-a5ae08b44f2a", "indicator--27a6c538-276f-41c8-aa8c-69720a33a136", "indicator--56a2a3f8-a428-419a-af94-a49ccde02b5c", "indicator--3a7de0b8-1a01-487d-9c2b-9379bf5d7aa2", "indicator--2bf9c8c1-0feb-46b1-bf94-7abfaea90193", "indicator--3a54ad44-79b7-46c7-b901-77a155624d5b", "indicator--785d2ac7-d6de-45a4-a75e-2e0363fc4fb1", "indicator--d2f7a60d-3b72-451f-b105-caddaee4c042", "indicator--b3bd6f04-897d-4adb-92e7-cbc64934e0e4", "indicator--ce68ae1b-5724-4542-b3de-6100ad5d9c37", "indicator--9218f67d-1893-4988-987c-4a68f45f0abc", "indicator--cfbc7eb1-4b56-454f-b5e8-a6f522454811", "indicator--ff5645f2-f40e-4506-9fd2-b7d3f5907bc9", "indicator--32181fb5-0c54-4589-b438-50cb5ff0f94f", "indicator--380212bf-cf16-4a79-9737-c7cea3f19e7b", "indicator--03b3392a-bfd0-4c58-9e6b-9943312c03b8", "indicator--cf5ea084-5580-454b-9d10-50bdff8116e4", "indicator--4ae219d8-0db7-470c-abe5-500066eceb85", "indicator--c30d8ebe-7842-4739-b6d0-d51b58991afd", "indicator--07c60869-4924-45ab-b934-cbe732c02a26", "indicator--1b08849f-cfe5-4cdd-9a8e-86a15d7a05f7", "indicator--2a740387-e53d-4efb-ba38-ea98ad132cf5", "indicator--7ef62896-d0ff-4d78-a087-3c11b6e2ccb5", "indicator--b3ac452a-89ad-46d2-938d-d7f691b630f8", "indicator--3e407399-701a-4cf4-b772-2929cbf9b511", "indicator--5b2602bd-3831-4c56-bd5d-78437b31edcb", "indicator--4e55e9f4-cf9b-4f30-805a-b6fda47a0ae3", "indicator--68a3f071-73ac-4ed2-8e31-141520ee68a6", "indicator--1dfb04b0-bba8-4b76-a7fa-a9fa595dc30b", "indicator--749eee45-1b84-4946-85eb-a12e6336e923", "indicator--a4cdb3ea-783b-4601-849d-73131ad31429", "indicator--e3a9eee1-4b76-4608-98bb-d736955142af", "indicator--e3fc32bb-7e1d-44aa-8223-765abac19e51", "indicator--bd01f776-147a-49e2-946b-3a4f7dffa849", "indicator--53f6e5ff-ce88-43b5-ac42-ffa2d65b71c6", "indicator--92a87715-e081-4967-8987-4fdd0bd26c15", "indicator--3890e810-8b24-4669-807c-48154cac7e4e", "indicator--e27588f7-fbc4-487e-aaa3-a7112bf5be4b", "indicator--b83e8f3e-0ace-40a5-ae68-dcfa62b41a96", "indicator--e79b6765-1d24-4097-a5fe-e23d5a5d045c", "indicator--f4ae51c6-9114-4083-8f4e-fc1b160ade4a", "indicator--dfb09ead-db78-4885-afd4-fdae5d66a87c", "indicator--e83ab4b1-71ac-490c-9459-9000492ecb09", "indicator--048c39ed-df51-410f-8d7a-62ff48f4e867", "indicator--cdd13827-874c-4edc-8f40-e5d4fe0b8e05", "indicator--df54cb2e-3a22-484a-9c14-c9ec6d6a11af", "indicator--eecb6dd8-f866-4dff-aae4-88feb8476660", "indicator--f8d06cb2-feb7-44e0-a09a-2c0d5217c904", "indicator--517c7ea3-0c5f-48a7-9426-9386ee911ce7", "indicator--d36f1778-80bb-4150-9498-40d232e34a69", "indicator--4fe459b0-6362-4beb-aa12-931709ca207d", "indicator--fd33e7ba-3300-4910-bc70-ad97f3c7272c", "indicator--eb036154-8687-47cd-8291-dcca011919bb", "indicator--8dd6449c-8e2e-4894-a514-72d3efb0c1dd", "indicator--4559476e-31f3-4c5d-8bf5-4692b0ef8626", "indicator--fd1a292c-175a-4e5e-aa30-a8afc4e5c54e", "indicator--67e48d29-905e-4789-a9ec-19a177a0096a", "indicator--4674c9e8-c75e-4edc-9f63-0dae1aa850f0", "indicator--6bb2aaa7-c03e-4e98-aa57-066b747d56ed", "indicator--4af91847-c8c8-4cdd-a9fd-35727e674214", "indicator--20038e64-5743-40ec-ae59-e18a817e69da", "indicator--3b382fe7-6111-4930-bf3e-70cabfcb44cc", "indicator--938c7cf0-750a-4b72-8605-d6cda47a4b65", "indicator--f333ea54-63d1-4269-873c-0de3c808ed16", "indicator--39b57a0b-a196-4759-b3b2-0aadef3de2e2", "indicator--4a52610c-8420-4840-a862-e5912bc64baf", "indicator--c70e5932-2d49-4258-8c33-ce3a27aba8db", "indicator--0bf74d18-8ebc-4fa7-a64d-e561432800b5", "indicator--452c0e6e-dd6a-4b80-803c-f7dd41f7a902", "indicator--62b5fe94-929e-48b7-a1c7-05da1d7c2e43", "indicator--c318c5aa-16fc-4bec-9c44-e63185606ff3", "indicator--707e23f3-439b-4587-8d69-6b501fdb63f7", "indicator--8b58dc34-f2e2-43a7-bcfc-ffdbb1b08c07", "indicator--52906f0b-ea35-487a-bf5c-636034e15ea2", "indicator--045c8dea-00b9-4086-b6f5-9acefb00b46a", "indicator--ed01c0e9-a042-4670-9b48-6f2198ece45a", "indicator--b21892fc-7e51-4eb5-9e60-62b864ef8555", "indicator--8ba14c44-a573-4145-8ce7-71e11f61d06b", "indicator--7743e62b-0ca4-4679-96b2-f4c43bf1b89b", "indicator--26c50db3-b905-456e-99f2-aedb749c82f1", "indicator--5d2144b8-d4c1-43b0-8603-a8b99d69bf91", "indicator--0a083b83-3e12-46c5-92a1-d4b88d875b87", "indicator--d90a029b-cd7b-497b-b7fb-692dffb3f9c5", "indicator--7582e7de-b48e-4680-b6a5-3ba5854e6c40", "indicator--0250dc47-270c-46e3-bd5b-d10ce47f519e", "indicator--bf0654b1-0232-4c57-bab0-54c21da2de58", "indicator--1b490568-28e0-40eb-96ec-1b92689868d4", "indicator--2b6cb831-ce82-405c-b20b-274ef37e03b0", "indicator--f08e4437-e615-4004-9ffe-08e1902852c3", "indicator--17140d57-1b19-43a5-a313-c02707e707c0", "indicator--ba0edc34-2ea7-4d2d-a5ff-e157d7f6fdcf", "indicator--ea1c1808-a3d8-4d40-8a11-24f8223aa877", "indicator--13e09fa8-4a34-44b8-8324-6e4a671a941c", "indicator--b817f0b4-a7f7-48ed-9094-b94c9ccaccf7", "indicator--aabab088-c263-40f4-9679-15d960884acd", "indicator--d678e6a1-02d9-4649-8e2d-40266c288d18", "indicator--cfce1211-d393-44af-a93d-0c41e6cf055e", "indicator--e30d1b07-a041-4851-a74a-64e981af6021", "indicator--6f43043d-8a52-4237-a0c2-76cf28fcb96c", "indicator--66a4d8bf-f14e-453d-9a9c-bfc3e4ca35fc", "indicator--9c3ad981-b1fc-4ebb-ace6-68ab619a2fd6", "indicator--0950e2d0-5636-41c7-89e7-96287485526c", "indicator--4900412b-0043-4ddb-a0b5-b377669573ab", "indicator--aad82ca6-45fe-4a1c-84be-1d167876499f", "indicator--c3d17afe-9287-4888-a383-188a968c827c", "indicator--17dd4494-0948-4936-8ea3-172f9ae4482b", "indicator--ca59d637-9604-426e-84a0-acab6fe5024a", "indicator--7ad0f6d9-032c-4b40-9252-c46cce0b9947", "indicator--e5ae358d-1bd8-4a47-9184-4d1104cd5cf8", "indicator--70ad257a-0271-43f5-b298-bafa6900ab6a", "indicator--8550aa6f-a433-4637-a92a-0f63666b41ba", "indicator--e9b47815-4154-4081-ad78-a8fba1de7e3a", "indicator--b6ea73b6-1100-4ba8-8aee-bfd84bf2c255", "indicator--3fe995b2-a537-4ae2-9736-83e034150ca8", "indicator--b03634a4-23d1-4e8f-a8a0-3ff76b5029d6", "indicator--de41dc95-f193-4758-9ccf-e1e4f1c653f0", "indicator--65850d77-8de2-4030-9101-e267cdd90562", "indicator--9cf40c9a-ab29-412d-b67c-c9573b07e1cd", "indicator--d0c05a5e-1d2f-4781-a27b-510fbab8a357", "indicator--ae6d1623-e8b0-4534-aa0e-19a5cc94fa85", "indicator--65ac34ae-39ea-45ed-af3f-e7fb4b3e42ad", "indicator--733a5385-e0f8-455f-b6e5-4ea584f56d1c", "indicator--a790d827-9fd8-455d-b1a2-72e09b8b36a1", "indicator--c2c0f3bb-d60c-46f9-866a-97f33edd53c7", "indicator--fc578e6b-628a-4926-8861-481896d5ab2e", "indicator--ae522a82-f6f3-468e-bac6-c8fcbddaab97", "indicator--f66696e0-8e67-4a29-bd91-c00ff0d04549", "indicator--029024f0-248d-4115-89a9-f92e98a0692c", "indicator--f7170e53-3637-464a-9bc9-a469bff6c7b3", "indicator--73befd29-8884-4dcb-8b07-075b6721d230", "indicator--ad4c430c-bc53-4282-aae3-88e3e9a7dbd6", "indicator--9298831a-7352-42d5-96b2-7925abbbdb38", "indicator--921d37ae-95ee-490a-beaf-ecba7bdd1fe2", "indicator--7a7f4b0a-f63a-4383-9968-dfaeade786c5", "indicator--45a895bc-40bd-4f5e-9e9e-0c283a3e88fc", "indicator--19ca883f-0ff0-4f6f-97fa-cdaab39f30f9", "indicator--29cedbac-b995-4c4b-8c71-56b64cd5e519", "indicator--ed491242-c645-4e5b-9678-cb22d8ae35c2", "indicator--ec636b84-8753-4d28-8135-a490e87fc4a1", "indicator--70ef9f83-d645-46db-9114-b041b851df75", "indicator--a738de52-2ea3-4ae2-9db1-343121ce567b", "indicator--420e00ed-8b5c-4586-afa7-1ef7aedfdd24", "indicator--4d83000b-ae89-4e61-b787-2bb646ce7ac9", "indicator--1cd7ca24-5393-4dda-9252-a846a1d79cbe", "indicator--9917e867-4610-40f6-be7a-5083903d49fa", "indicator--94080fe7-2f22-4d95-b502-0ff8037fa761", "indicator--fd70ef35-a932-48ab-a6e7-464085461c84", "indicator--f63b08c0-5b9d-4729-9ac9-0a6cb6c9caf8", "indicator--fa0a8f78-54b0-46f2-86e9-f8346cb40fe6", "indicator--64af2ac4-2f28-41df-8104-bf5a189a19db", "indicator--5efd8ef2-f593-4cf0-a32a-2d3048680bfb", "indicator--28726571-8ced-4423-bdcc-3928b183ef0e", "indicator--dbdfa787-2f84-4852-a5a0-396bc4d423d7", "indicator--d4cb5846-1739-438e-b66d-dcb0338c51af", "indicator--0cef7746-7901-4f86-9e3d-5a0c45cc836c", "indicator--929d02aa-c317-4db2-92b0-77300eddd956", "indicator--4bdfe321-d8f9-49d3-89db-59ac1fcc4412", "indicator--7ff09f93-ab14-481c-88f3-b795daa12ed5", "indicator--336364de-4ccb-448a-b5e1-c2b2305f4f73", "indicator--53c477b0-8e8d-4b33-a408-9ff7823f0dee", "indicator--b04b9ec9-ccba-4867-a403-8a552fc961bd", "indicator--9db4d74c-fabb-4469-bd4d-a6a8943e1cc1", "indicator--7179e2ee-c2cd-449d-bd12-c8c030188faf", "indicator--70dba538-c6e6-46ce-846c-63d00bf50e3e", "indicator--552c9523-ee4d-4260-94bf-a15cc9b6c91c", "indicator--cdab0f6a-935d-4eed-9c64-497e25cd86f7", "indicator--a5b3e726-b355-4522-ba64-33c9567b68e9", "indicator--843a6983-81f8-45bb-b10a-c18f880ba684", "indicator--b2da5d90-4997-4aea-b535-b214a9bfcecd", "indicator--69292c53-016e-4517-8c06-da6a5937f768", "indicator--382af760-db3a-4b7f-b1b2-5f279fe01803", "indicator--5793a8d3-b222-46e7-aedf-3dde00d4ec5a", "indicator--af65bf7a-f180-4bd7-8e18-21c03fca88d5", "indicator--5a1662aa-391e-425e-8056-ab4ad67dc7c6", "indicator--cb589e4c-3157-4a88-8d8d-58dfb5e29524", "indicator--3657448a-29c1-4914-a143-cbf297784650", "indicator--5f0e82d9-772b-4fcc-b528-544c21398ef5", "indicator--f2ab27c1-e2fd-4a7f-a41c-ffc9e13c927a", "indicator--bbd7646f-4dc3-4db0-a556-2551ab347820", "indicator--0427bc0a-707b-46f2-bf8b-0a6923f9ebd3", "indicator--867d2a4c-3054-4d55-9583-f5e31f155d8b", "indicator--308062dc-1548-4d9c-8d81-554a8c13223e", "indicator--3ba3ef93-d446-417f-b1d5-02680265de09", "indicator--26753496-b366-4c3f-a652-c420a335252d", "indicator--64afd94e-5fb4-4f6c-9f22-c7dc24577e96", "indicator--7aa49e22-31ac-4e8b-b3f0-8e3f81aac2e0", "indicator--2f066402-bad8-444e-9c9a-baba16df6389", "indicator--7ee5d086-bf72-4597-a9b0-a26edc11daef", "indicator--ff551815-a68d-4aa6-830f-e31808b33799", "indicator--b87fd87e-afc7-4d38-a1a8-499810c7131e", "indicator--e6681548-fea1-4e92-a803-74ef816690c4", "indicator--5df7f848-d004-4c62-9833-78e3a6ce0216", "indicator--552b7e78-d8b3-4c5e-a4fe-2fdcc7f144e8", "indicator--6642da09-1c83-4292-bbd4-6c80ea96fa8d", "indicator--39fb51ef-e440-4dea-a8d6-46532d999bb8", "indicator--3b0caaf1-44ea-461c-bab7-ae9484b3d3dd", "indicator--7d812eab-1e61-4799-9787-dabc3949e384", "indicator--df1e1d07-f471-4f91-b5b0-35a402ab503e", "indicator--c29cc04f-f70e-4030-8519-f62c133ec187", "indicator--b3521465-f19a-4324-9059-58757e10841b", "indicator--4b528026-41c7-47a9-ade8-f08922d6f481", "indicator--6a4cdcf0-06d8-4713-b3f2-68d76249e741", "indicator--b3695fc1-ef60-451e-a38e-0e9ec37585a4", "indicator--5bef16e2-9e3b-410d-ad3a-a4ad81bf7b07", "indicator--2a8b2995-3753-4f99-919b-73138350f303", "indicator--f04f483c-49d7-4da0-bc19-a1d165b5c9f7", "indicator--859375c3-4502-4e31-9cc0-bc9ebc20be0b", "indicator--99814201-68f0-4c16-bb5c-dcf534a78a15", "indicator--5b9f5786-89da-4d3d-9c62-6adbb69ad161", "indicator--9fe68d05-9cf6-46bb-b9bb-daaac188008a", "indicator--aef78b0e-f9bb-4931-8bf0-97e5cda0037b", "indicator--c5d5cd94-b17e-4155-ad89-42aad43ffc5c", "indicator--2b022ecb-59fe-4a91-92c2-fd15d62fa9dd", "indicator--cc5cbf91-3fd3-4b47-befb-5348925d2654", "indicator--7234567e-a5c6-415d-9eb1-80facdac065b", "indicator--4bde1e4a-714d-48da-9711-6757104e3abb", "indicator--bbfdd594-a4fc-45fc-8f2c-a39c44400781", "indicator--3e55dc01-6f2e-48f6-9e4c-4b586c1b3c64", "indicator--b7c06fdd-56b6-4978-bd8e-4d3c9e99a3cf", "indicator--6881fa77-d653-4eee-aaa0-f483f359c514", "indicator--b12fa6ca-5635-465b-bd97-e5267dbfd261", "indicator--1e8f8fef-07a2-494b-bf91-8576747c4db2", "indicator--dced9ce0-ac02-41a2-a8cd-99ee612a2d7e", "indicator--c22a03f1-e9e4-4420-8391-2e1e097b71dd", "indicator--4bd62c66-47d3-49ba-83be-ea6caa67ae00", "indicator--f11cd3bd-1fed-4124-b676-164fc46c3f81", "indicator--f558481b-d97b-4fdb-b234-0eeaa85d6ba7", "indicator--3897eaaf-bd57-4166-a075-f7aa80574409", "indicator--daab9976-ae06-4329-a4e9-a4d24a9680ac", "indicator--684de3ac-50d1-4a7f-b4fa-8d8c409282c0", "indicator--29e49b82-a0a7-4cc3-be68-2e2af57b5569", "indicator--8b480b64-821c-4e59-90f2-d7e6ab4b0446", "indicator--c1b57f4f-2286-4cd5-9851-4c41d85f0d51", "indicator--98c4acc3-ce64-4b5e-99b6-509b62ad76c0", "indicator--4c85b945-e333-47de-ba26-6ba62fcadc7e", "indicator--e40e2ab6-f989-4609-900b-af15619e2f86", "indicator--cddebf71-1a0e-4e5e-8fb1-e0b04fef3995", "indicator--8d79061d-100e-4cdb-ab03-4eaac8844df4", "indicator--8478218a-1688-4fa2-a5cd-beb699785c84", "indicator--96b2c706-87c8-428d-88b9-a3de4f9e8dba", "indicator--b83b3c5f-f776-42fa-80fe-254cfea5206b", "indicator--0b0845d3-a1f0-43e4-85ea-f3637805efec", "indicator--a6c593dc-9dbf-460c-800b-4c1ff8c8b2a1", "indicator--85a94f77-386e-484c-8e13-e1a30a6fab7b", "indicator--051a9d81-ae83-40f5-8af4-a583b6908060", "indicator--13937329-058e-403a-aab9-66775c9283b0", "indicator--4847a7f0-c65b-43cb-9cad-d3833fc12ca8", "indicator--d99d6fc0-4dde-4bce-8bba-806dc7c2711b", "indicator--dd4806db-cc48-428e-9665-9e611da286ce", "indicator--fd090a75-cbb6-46ef-9426-b5be40e96195", "indicator--c915aca5-0408-446d-81e3-4b7940452f09", "indicator--2617d839-9aae-4a58-8498-99d8cccddce1", "indicator--d88e9436-f6ca-4ba7-9639-0feb1271a7b5", "indicator--2747be40-667e-452b-9ca7-cfb02141a67f", "indicator--d3b080d7-18e2-456c-bc15-da1ccece0c80", "indicator--61a62c32-0f57-4cfc-873d-ec20ea40822b", "indicator--b58d23b8-cc47-49a4-bdc3-f70dfc3d7136", "indicator--580ad817-71e6-4776-a9b3-7988b015ef3e", "indicator--3673d846-5306-4f1a-a6b6-47913c0620e1", "indicator--4f373aeb-38e8-4f7a-bba6-c62cffc1b616", "indicator--f3084773-4dc3-4fd3-bf40-d93ce62fa577", "indicator--365e06d6-27c6-4da0-9a66-84ac66ffe35d", "indicator--14f96b39-370c-4c6b-8af9-1f9cb910a770", "indicator--5659fb7e-35a2-4187-ac79-ebbc2627fbe9", "indicator--b1d6334b-b454-4fd1-bf2c-fd7e3d304da8", "indicator--ab1b8b09-fa1c-4963-a4a9-a2e9c5672f00", "indicator--5d43da8e-df71-484e-9fe6-4afe3ac23f60", "indicator--9d63fd0a-3bdd-4dab-b6f5-995bddac0f9a", "indicator--ccd821cc-19d2-4f93-9feb-33a01415d0b3", "indicator--5e93921d-645c-4905-8991-d1d7cb4589dc", "indicator--6efebf89-1f43-4ba2-8d27-016703589bd9", "indicator--c8c07070-f5a6-4116-8a98-ec0fbee4ea1f", "indicator--f3c48142-fedf-400a-85f5-9f0d58c6d598", "indicator--09ac3559-76e0-4b26-9763-500967f71fe7", "indicator--7b1d5661-694c-45e1-bbe5-799149777749", "indicator--998b393e-b923-4b00-ab33-6ec77c9bf38c", "indicator--54215f31-cd83-4d0c-9516-ef9020c62dd2", "indicator--b771f59a-df9d-48f7-ac93-f9c177204ce0", "indicator--f1b02d3b-60c0-49a1-87ce-d2700802da68", "indicator--530efd91-cb89-432b-9fbb-dcf19fac3dff", "indicator--6f8fa71e-cdbf-4dcd-ae28-a3b17fb6803c", "indicator--0496800a-ac2b-4bb9-a0cc-dbee6b23d6ba", "indicator--704e1b7c-1560-46d8-83a0-cee800acb8ad", "indicator--2627d606-e6ab-42e1-80b4-bca5f3f91327", "indicator--8293d6d5-4fd0-4701-849f-1d66cf945547", "indicator--a3e12e20-3dc1-4544-8042-cdf9613677ae", "indicator--619743cb-5fc9-4e9f-8e1b-92f5b92e1cb2", "indicator--3d7794ef-6b83-4641-8004-63d19dc1e23e", "indicator--a818bd9c-dac0-4f22-aa38-54c8848c4d70", "indicator--6c6fa396-7824-4d1e-86a8-b1211b655e9f", "indicator--b0b64497-1611-4ebc-9a74-5703c6ecc270", "indicator--710b5688-ed6d-4a64-8233-86692e816f4f", "indicator--d098f592-c0b8-4334-946f-1762644d8ea8", "indicator--0f1037fd-7d11-4574-bef9-6f9bb97d4811", "indicator--2c8c92de-6d2a-4510-afd6-8721452eeb3a", "indicator--93887aae-27a2-4f83-a533-ef05384536f8", "indicator--a964905f-9fc3-4eb9-a60b-0c6952194736", "indicator--90d7da35-9907-494d-b9a7-cce6b30fb5c2", "indicator--60b6e8cd-5ed8-47cc-96ed-6bf250e91cce", "indicator--e4841ad2-89db-4f66-b497-fdb08b8254f4", "indicator--ebe1d893-0cba-4730-95be-c9305c886713", "indicator--5953edd6-e2f8-4bea-8356-d2015de60e71", "indicator--a9245c01-9bbd-4d95-9122-3885208d1b08", "indicator--8064431c-db07-48a8-918e-da26f0205efc", "indicator--ada318d6-34a8-4942-949b-2dd4eef9b6f0", "indicator--fea01896-0245-4c6b-ba1f-5c614d1bd8b5", "indicator--0d60848a-eecd-4b91-b19f-8ac4a2faa24d", "indicator--3d02ebf6-358f-4ff1-b19f-786459b19c30", "indicator--0cb58dc5-4299-48fc-8445-7a63c0e8e3cc", "indicator--e8012b2b-f7eb-45f4-833b-872e20daaf35", "indicator--998d407a-5448-495d-a843-389f1a6d111e", "indicator--466ae8ba-bd6c-411c-ad1c-724a18c03855", "indicator--11a8dc42-7017-4813-b75c-ada6675bff67", "indicator--87c2f62a-1731-4592-ba5f-9cb522b34623", "indicator--be440413-1e66-456a-95d9-a403d4c7a314", "indicator--4e1322b0-bd8a-45cd-89a3-5ed71bd4fed8", "indicator--f3708c80-8572-4b36-86b5-2a193d5efd1d", "indicator--0f536a03-37c5-42b0-8db6-a9b3cafc07d1", "indicator--b7413d0a-948a-4e90-b670-26182e13f7f2", "indicator--583e6cc9-c114-488d-83a7-03e44d259a90", "indicator--54f02d1c-1d95-4dfd-9bee-e5e1bf547b6f", "indicator--08f8b912-0a13-4842-9947-075b7d96550a", "indicator--8ea14e0d-d3b6-443c-ab23-795fe08cdb19", "indicator--df04b6e4-5a7c-45a4-b659-9cef4ca27017", "indicator--fe773d78-8826-454f-a1d8-b202cd5c2978", "indicator--3c39999a-dd77-4a8a-b862-69538584d5e0", "indicator--7c02a69a-af5d-4be3-bbf4-828cc9369c6e", "indicator--5f155fdd-2688-42ba-88ef-4573d623ecbb", "indicator--7effedb0-18c7-46e1-94ef-ea80a75fee2d", "indicator--7b364b6e-7929-4c79-89ba-300876bd29e4", "indicator--61a24003-b655-49be-9cb8-f3ddeca89362", "indicator--a0f76b37-0171-4c19-9bb6-3d46eddc1700", "indicator--11aa0754-18e4-4847-97dc-5703b6252a0f", "indicator--c0e37a2e-920e-4bc7-b407-b303cc4b8c1d", "indicator--99f2aa97-5ec7-4ac4-b4e6-c1d71118d3ca", "indicator--59963e15-b8bc-49bb-93b3-ca2848aaa820", "indicator--f7c47323-2e70-4b46-997a-55365ef53afa", "indicator--898db4fc-be9f-4fd5-9a7f-67622e851608", "indicator--8df7394a-7968-47a2-99e1-1f0c8d9e5786", "indicator--fee7cca6-dfaa-4b4c-b312-a362d0ef263e", "indicator--76dd284c-d40b-46d9-9694-35feece9afd9", "indicator--0e34fdf5-e329-4944-ac81-9501629df5ea", "indicator--b6ce540d-c9e4-4b74-96fc-0534559a8c5d", "indicator--4645360f-765b-49c4-81fd-e6c9dc592299", "indicator--cefe9092-8c0f-48fe-b323-0a8fdf172e20", "indicator--51e5fcc6-adbc-4a34-9029-0ced104d9482", "indicator--98e791bf-b944-4fd7-b3b9-95537fed140d", "indicator--9b5069fa-291b-4b53-8436-1e4fcc7b37c6", "indicator--2275a895-582b-4415-942c-24ce00089835", "indicator--ae6aa21e-9551-4a31-af03-4c89af95dbac", "indicator--f15f7a64-108b-4c11-a74c-bb16e7a7791a", "indicator--5b8d332a-abd3-46f5-97e2-6eef70b04b37", "indicator--1077a95c-744f-425f-bbd8-b05d337ff2d0", "indicator--d4980cbe-feaf-4a4d-ae1c-771bf20688bf", "indicator--5a754bff-81bc-4716-82cf-5bc0fd1b7386", "indicator--33f9d346-0f51-4b59-be0a-3ddcd78e905a", "indicator--4988ec61-dc20-4a5a-a061-55164a47fc3f", "indicator--4d5f59c8-8205-40b3-a706-ccadfe8617d4", "indicator--3c1d5b72-84df-40f8-adc2-fe6a70dee305", "indicator--2993b3a6-5466-476b-9ea4-04d02286c3f6", "indicator--82bb8097-6178-4eb2-bc53-795024772457", "indicator--fbcf4421-9643-46d1-839f-00e203a13de3", "indicator--01295051-3fde-4430-85e4-e724ccd934b1", "indicator--42a97505-539a-4f36-95f2-5e819c655070", "indicator--5ded5675-76f9-4bcc-bc17-9c02909cbc03", "indicator--7fedb243-e471-4692-94f2-95d760a46534", "indicator--14a02cfb-d6e3-4849-99f1-cc7962bfb762", "indicator--6f737ca9-9dea-4e0d-ac5f-462a5cbcb56e", "indicator--f91f5fbf-93a4-4b9f-be31-597e28913406", "indicator--ce7d0869-8942-4692-b34d-28f8e5f71d8e", "indicator--6b2d7592-2aaa-4861-9c9b-1d269f5464c7", "indicator--f5f4d043-2600-43f5-8415-258406a0b9c2", "indicator--c4e46703-0808-4939-a43b-bdc41fae1785", "indicator--2fae296b-e8a2-4f74-9da9-d81a9f789da7", "indicator--af26a28e-9569-45a0-b5a2-110ebe426174", "indicator--1409b6c6-7128-45bb-8c3e-42ab13efddde", "indicator--276d7bf5-983a-4a66-9180-72c963bba337", "indicator--aaff2c86-875f-4fd2-bcd3-d68a59120e63", "indicator--4c6b240f-f279-4587-83c2-88f868ce4b8e", "indicator--60383101-951a-4f0e-a296-867f17274ad4", "indicator--2bfa45f4-c94b-4a98-b59d-cc9ebfbbd024", "indicator--c751c5bc-8df1-4be5-b5a3-e4227f87b138", "indicator--cc9f6ddc-619b-49fe-8445-763c907a3bfc", "indicator--46f8b45f-ee40-4476-92d2-ad6a6369e3f8", "indicator--738b8e91-7ee6-44d1-99af-04da437a529e", "indicator--5ce7ed91-f1a3-4216-a06f-861b78b65ebd", "indicator--9df5cc10-3d85-4c94-ab8d-b1b76ba0f521", "indicator--202146c3-94c7-4714-ab12-bdb2b57852ab", "indicator--14de91a6-5ce1-4934-b613-9d1c9a3bf0af", "indicator--93ecdd3f-e49f-4aef-a44c-72211ca27319", "indicator--ed7ed6a7-ec20-48a3-868a-f26efb851a91", "indicator--3d1a451e-6933-4d82-8152-8e9962b8acce", "indicator--7864476b-03af-4314-a0c4-8a4b2b044495", "indicator--c8acf9fe-c329-4876-af8a-eebecba880b0", "indicator--00bfe9ed-4b9b-4c41-984e-5e7b970951ea", "indicator--88fbdf8a-989a-4fdf-82b3-dd1b2b460aeb", "indicator--69e3935a-bade-4bec-b254-85da01c1bf10", "indicator--65f25c49-0b34-42d0-b39f-f246ba41184d", "indicator--58973672-ded6-42b3-9c9a-082b884898f6", "indicator--2905c518-f03b-44f9-9465-30447eb4cbc0", "indicator--be6410b8-d87f-4b80-8933-bfb243266e97", "indicator--d7320c29-c5ff-4045-8468-13b491934ae6", "indicator--b5728092-b0f3-4572-916b-47a72b4c3a93", "indicator--a9058b79-5e3d-4399-966f-53bbe4cb74b8", "indicator--4716e1cd-ff7c-450c-90f8-4cfff21b5e54", "indicator--b26e48fc-9cef-4693-90bd-fbacbf13bba7", "indicator--05252b5b-c3ab-4304-a114-136b1028196e", "indicator--29bf5106-5a17-477c-af45-db7bda1874af", "indicator--c1bfd971-86e1-41a9-9a03-d11d7014411b", "indicator--59cebbb6-06bd-436d-a2eb-6627d01e8a84", "indicator--7df49708-3afa-4c78-8103-f5fef907fc39", "indicator--89becdd7-d9b8-4daa-8820-42682591720d", "indicator--fa306a6e-82ad-4215-8ccd-3842d4227e70", "indicator--33c87b5f-7e60-4ed2-a389-a3b83f63831b", "indicator--ba87268f-0623-4f6c-8177-df207ff68d00", "indicator--46f16dcf-bd1d-4c71-8822-e6d31e74132e", "indicator--ae778c4e-8156-4e01-a412-7ab1c04aac54", "indicator--40bc00ad-fb7b-4a31-ba89-cc37e972c257", "indicator--d388dd95-39f1-417f-8a30-159af2d3c544", "indicator--6e01ae72-899c-41ed-8ca9-70b78f6ba215", "indicator--b3a5abab-41a3-467c-870d-5dded9633184", "indicator--fd94fa74-49ad-4b3f-88fb-622dd0796fac", "indicator--c4097fe4-9b5d-428c-9422-c7779b813e45", "indicator--21a2db8c-af82-4b84-9110-f98c0669c5c3", "indicator--b7c7f464-41a7-4a0e-aed5-e7230598a1ad", "indicator--33687bfe-bc1c-4d7b-a451-73f06c1e1ccd", "indicator--d018bc7f-b2ba-4f33-b343-d7c8142e5a8f", "indicator--48b6b106-4d47-466a-8ace-e6e5d1139d31", "indicator--b515250b-cca0-4595-b643-db8a79ea5003", "indicator--9fd7a84a-c280-4ba6-ba7f-b87a20e74f86", "indicator--99e02634-56f5-4819-bf15-796815939dbb", "indicator--cba016b7-3a0b-4e13-aa29-ec24aa068566", "indicator--309aaccc-e96d-45e6-a2c3-ef3f0d0b4c8f", "indicator--6f11a905-ca77-403e-8767-39068126b082", "indicator--55c27a9f-cdcc-442f-a58e-926756b74f8b", "indicator--a81dcc52-83fc-40ea-9cea-84bc94eb4207", "indicator--55e10ba1-da7f-4b9d-9fa8-c668f4c31316", "indicator--80d113fa-d6d5-4af3-bd8c-3799bd0a9b21", "indicator--09969930-7b5f-444e-9372-d4900e1b3b97", "indicator--cc6ad5f0-b92d-45a4-9c0f-144733507256", "indicator--509c3658-dca3-463d-8773-22fc35d7091f", "indicator--87cd0610-8c6b-4096-bb1b-a9d5c3fc5029", "indicator--ce99db0b-42a3-4c6a-9ce8-d0a6e8e93c87", "indicator--682fe079-b2b8-4fca-9a8d-6071ab5508e1", "indicator--8bef1e3a-beb4-4aad-b3c3-0da0d24c67fc", "indicator--2916e294-de5f-4364-b2ec-e0d3e3da8476", "indicator--d6617b69-7b69-4e70-bb50-9941b4215b00", "indicator--3c5e7037-a3d9-4bb1-9212-9f7dd399a9e7", "indicator--3573e926-d9a8-4128-a2eb-1d3f096dd57e", "indicator--e95336a8-47d7-4323-89ce-989fcbba0f73", "indicator--3a5fc51a-5f2b-4530-8983-fda3afa85332", "indicator--f2f82411-6c6f-4380-a081-c33551af3e8b", "indicator--bdea7fc7-cde7-424f-b14a-55a149b8fe61", "indicator--d2f3af0b-bac4-4b51-b756-7658910ecfe7", "indicator--700aaa78-c9b4-42a9-8141-f871e94b5b2a", "indicator--1f9b19e5-a536-4088-9907-bc1ae8691ca8", "indicator--20e38fbe-a702-4964-a97b-ae1a702ad695", "indicator--53cdb0d3-1eea-4187-adf4-fa2b46206bbe", "indicator--45b268b7-ad26-4d08-a304-04dd2eaf4208", "indicator--c9329e4c-aa75-4bdc-a006-320590cb6080", "indicator--501e316b-0220-454d-a1fa-4d20c3c64db1", "indicator--5b8af402-e410-482e-aff0-40f0996b1a8a", "indicator--abafac4b-bc07-4c25-8791-bf51173316d0", "indicator--600eb182-113c-4b62-98b3-4ae43d96ccee", "indicator--b062fa5a-90cc-4582-8b26-8be13a77e0c7", "indicator--39c149f0-65fd-4174-88a2-8b9444521a5b", "indicator--d66b63de-8962-4ee7-b2e7-2247e52d2154", "indicator--725868f7-44ed-4598-accf-8b8b3e743d12", "indicator--f5a4a366-a0bb-48c1-862a-61fb3e1736aa", "indicator--b153065f-fc4e-49bc-9f35-25e2f3f4b57c", "indicator--825caed8-09e6-4494-8362-833cd71e8ccf", "indicator--fa86cda0-9c7a-4ab3-a2b7-68828024642f", "indicator--fda520f6-8bab-4827-b234-33a2c35700be", "indicator--ab46be44-369e-4e01-baeb-0fb05e934241", "indicator--cfac205e-82d2-477c-a687-25adaa857071", "indicator--305d49ec-fb1e-48e2-8d41-eb78894e6334", "indicator--b70910db-e007-4af1-9b37-4b1b46ebfc73", "indicator--4a985024-f0a4-47b7-ac0a-3efa4bbe66b2", "indicator--504b6cfb-81b7-4cdc-9c81-10308891da6f", "indicator--c9b665ec-8d92-40df-9569-2de911cadc05", "indicator--62662c4c-9302-419e-887d-5d67b41cdf5d", "indicator--d64fd97c-07fc-466e-a99b-8a9e57767c36", "indicator--759a218d-0fe7-4d82-93fc-8645b6ec5a92", "indicator--56275ac3-2089-4af1-a5a7-572fa8375c92", "relationship--74b4912c-6859-4c75-a596-4e700e5585c8", "relationship--c0aba7ab-d22a-4291-8855-dc17bd8f22ae", "indicator--c87e8c27-7f56-4e0c-8ded-8b7e135daa78", "indicator--0c1ac47d-1479-43ff-8997-ec4ab63cbc25", "indicator--5facf15e-b507-4d46-834b-a6dbde363452", "indicator--83ac1d55-4269-4082-b111-a2875c1bfc36", "indicator--3734be68-3aa0-40ae-85bb-6d7254798bf9", "indicator--c62a2efd-26eb-481c-9bf2-eb070d3189bf", "indicator--3dcf0226-3b63-435b-8154-5cf61dad9897", "indicator--3c67ebaa-801f-4806-96cf-652921cb1881", "relationship--b53a2a98-2b2b-495b-b607-263013b72e05", "relationship--f236e9d1-18ea-4b17-b9c5-6b8f3de8aeed", "relationship--7a90996e-4a00-49ec-9c2e-1101039de855", "indicator--17eda5dc-c8af-489e-9f65-a9be79a06bef", "indicator--873e2221-37f7-4a48-bd70-c9f36128a7e8", "indicator--a7ce1e7b-bac8-432f-bf86-5c97c75239fd", "indicator--2f2e9726-0c37-494d-b07c-951403394068", "indicator--89cfac84-c3a0-449b-8aa6-7e903a350831", "relationship--941cf9bc-ba07-41e4-b9b7-776e7e81f4e2", "relationship--ad425e38-fee5-4012-947a-6dcea2099087", "relationship--eb498b8e-2895-4425-897c-d344634044f4", "relationship--78fac1c4-d83c-42f0-a576-b008138a464a", "indicator--d5c0bdc4-6244-4b47-95c0-aae28c650ab1", "indicator--3ec4e265-dfed-420d-beb1-2dd484e0c9c8", "relationship--c72b337f-d05c-47e6-bb90-7599d5248a1b", "relationship--7ff1d1c7-0237-4fdc-b2de-aab40808bd7d", "relationship--8e31176d-fb75-41cb-b3b9-7c265c022cc3", "indicator--e9278007-be8d-44a3-a6d8-ff8eeaa9f100", "indicator--a89c3d5a-88c7-4ef1-86ff-e46665e76e57", "relationship--01fe186e-c8c9-4a44-9f25-7ba459d7b278", "relationship--74ce540a-55ed-4c0f-8664-76779c048d59", "relationship--410004c8-e486-4d5d-b661-73b2885f0401", "relationship--5d6cf459-b7cc-4945-9b05-22753f7caf2d", "relationship--740174e0-127e-4953-82f0-28681b8803ac", "relationship--0830cbdd-c030-4f34-b681-394072e4cd1d", "indicator--6f429e18-5f3c-4143-8cc5-fcf504c24e46", "indicator--cd939305-6712-4030-90e1-f29d3e31d888", "relationship--2825d0c2-fdd3-4950-9afc-053ac7f091a5", "relationship--10630292-e4c4-4a54-88d3-bc385a7514f8", "relationship--ca29e4ef-42b7-41ed-bbbf-707c12c9c87b", "indicator--12191b74-af02-4667-83b5-5d5888d4f837", "indicator--7673422b-b368-48b8-a0e1-0612d400f1e7", "indicator--107b70d4-0302-4209-a297-d3c2e1e479c0", "indicator--4aa30261-666e-4b30-a3d8-6e80ccc91892", "indicator--3d99e9bc-e9d6-4011-a4a0-af63a406e2af", "indicator--feffef8b-2d83-429f-bad7-e73f6950a585", "indicator--ae024b05-6879-4372-8788-a75a9d852d3c", "indicator--304c7112-82b0-48eb-8335-e699ea1bef65", "indicator--d4b29110-4954-43d8-a057-ee5f70c09878", "indicator--1862bd5e-e185-40a8-9c80-c4cbe3b0eff6", "indicator--dbef84cf-5a57-432f-b307-f333c5ed7070", "indicator--9e2f5cac-5b0f-424a-a55f-3cde3207e141", "indicator--e1bbb6e1-a26c-4711-9881-6cd3024272db", "indicator--f3bf8f2d-32b9-4ce2-ab19-b91fe014db29", "relationship--030ff1f5-1297-4673-b816-38e0cd44f047", "relationship--3a336498-8c58-4add-b909-5e504b5d951c", "relationship--e6437c6a-c3c0-4b45-a4bc-dad04f0cdb20", "relationship--b01b7ec7-9241-4ea9-9c9c-beb2f8a37f19", "indicator--2554bd8c-e585-428b-bfa8-8763e263cc42", "indicator--b7a3d169-780a-4b6d-9de8-89dd416d822a", "indicator--044f4cb9-8a38-4c7d-9f2a-f5b0ecb00c32", "indicator--4c05a936-da1a-47e9-83ea-c00f9c3f9f1b", "indicator--92603567-555f-40af-ab8f-803689bccf11", "indicator--059db04f-28ec-418e-a6bd-55ee7707f80f", "indicator--cee36170-8e0d-4253-9e32-ad84a99eda21", "indicator--7a77a1c9-4f70-4ac4-a03c-8b4dedb4ef6c", "indicator--c0acf3f6-d37a-47d7-a1a4-33d5b5ce8970", "relationship--84938a46-6c63-441f-9ee8-bdebd6a0e412", "relationship--18e677a4-ebfb-45c2-869d-3b7abcc38045", "relationship--a4132ae0-d61e-477c-bc6d-a56058cd49d1", "relationship--5109f773-3fa1-4d3a-bac0-53e84bbb7499", "indicator--f5c32881-3cd4-46ff-be21-4bcc6d052de9", "indicator--067a05fc-b394-4235-8290-38457376dfee", "indicator--ce579c3e-278d-4bc3-a5cb-d587c68c547e", "indicator--69d2f11d-d128-41ac-8d54-fad298539aef", "indicator--465962e6-23a2-4de7-bcb4-a445ec98ad04", "indicator--8c9338b8-0cc1-47a1-a1d4-2df42fc558b2", "indicator--545e650b-4e5f-47b4-83f2-96b04ccc0c2a", "indicator--d5d1e1c0-2501-495a-bed5-97e72f365743", "indicator--1d4e4cac-1e7d-426a-9aad-dd35d2e1172c", "indicator--3e903dc3-8c7d-4a49-b37a-978c92957087", "relationship--06b7d4a5-bf80-4ba1-8ce3-f0c3913cf327", "relationship--93b39838-df42-4aae-8bd1-3bed6696144f", "indicator--9b105d3b-bbf5-47c9-92ef-37f928f9c11c", "relationship--3a1db168-3c36-45c9-9c6d-d6a40f724793", "relationship--4f486d92-2714-488c-8f28-c19a4c573d95", "relationship--6d9e2c21-f531-4d06-abd2-a179b4dad8bd", "relationship--fede830c-1fcc-4516-9c89-fc30d9ca0f22", "indicator--02f5fae8-2b3b-4cf7-96e8-1e0e92a2351c", "indicator--ee9079ae-a81e-4f9e-88b7-63d068224d68", "indicator--6bf67a08-ff1e-4e00-8ef3-de8d804f81c8", "indicator--2efb2d82-898c-4a11-aeec-a8c4906236bb", "indicator--32c558eb-7466-49ad-ba4a-43043af6b751", "indicator--657d7fd6-81fb-40a7-b9f9-6e006f19a20a", "indicator--21201d57-04d3-47d1-b8da-ef9466f277a0", "indicator--64fc12b2-d36d-4eef-acee-d3ab49115195", "indicator--f7f18191-1a86-46f0-b0e8-52b064e61543", "indicator--cc92eeaa-25ee-4468-8583-cc752faa0e70", "indicator--cf0992ba-dab9-4def-ad74-6c0039240dbf", "indicator--c9dc08c2-7bbe-4e50-8574-9e53afa0c0f8", "indicator--a6a262ec-7e26-428f-9d43-c3845ffca53f", "indicator--a5816722-b2c4-435d-865b-35cce1f84eee", "indicator--dd021718-82f1-4f8a-84ea-38af307008fa", "relationship--7bdd66fa-b933-40a4-bf36-e5eb396c2cdc", "relationship--93c85de7-e088-4169-92a4-85dc32cf39a8", "relationship--1db4f014-d79e-4c27-93d0-80d3cd79f138", "relationship--5e89956e-abe8-451d-9553-9ca1f23126c0", "indicator--a1020963-972f-4d15-aa90-a31ade41d75a", "indicator--40a35a42-5191-43f7-91bb-b76618fdda57", "indicator--917066cf-a9f5-4b4c-9058-14b92497d45a", "indicator--49fbacd3-2170-4786-b0a1-9b8dd4b357ef", "indicator--17144a67-12dd-4229-a4d2-02580dd88a8a", "relationship--72963d42-2dd9-417a-9d94-b739ad290e0c", "relationship--424f7f1a-6ce5-4181-96c0-71b1b4dd337c", "relationship--242838e5-33fd-4364-8e94-2711e669ca53", "relationship--3b80940c-0022-4f07-b1df-d2a708ca6228", "indicator--a6dee509-6aea-44bf-8d91-90ecc0d06a8d", "indicator--f06758e5-259c-41f0-adab-65325451bd00", "indicator--ff628fb1-1825-4a59-8fc1-066d84bf1d93", "indicator--1f5c3d67-9722-485a-b208-9b91c049305f", "indicator--9af09aeb-db36-4cda-b082-6568e8bf6659", "indicator--bd8d57f3-6ba0-4ada-84d0-6fe2dfaa362a", "indicator--0f6e7fb1-5dc6-4960-8f25-25ac0483e4c6", "indicator--0f5d990b-4a76-4e78-80ba-021ad34b5ab5", "indicator--9a5e7cb3-6989-433c-bff9-45214bede3ed", "indicator--9b046285-31e2-4b56-bf98-35f91cdea4ef", "indicator--cbd3eb82-6ff8-4914-9bd9-3e4366c35fa2", "indicator--09b0c876-6e2c-486a-8b72-962c45b72233", "indicator--5eababfd-e9c2-4d39-b94d-9ea7fad60952", "indicator--739b04c7-8fc6-4b79-bf19-6384a2622383", "indicator--72192ae5-5fdf-49e1-9a97-6811260862f1", "indicator--4f95ead6-6717-4e5c-8335-190ef60ac21f", "indicator--1738c35d-ec88-4171-aae9-f111608bfd5a", "indicator--37371738-d488-4f67-9d8f-788f60e6421c", "indicator--59e64164-815c-4182-b047-d8667f1cd8fa", "indicator--3f9693b1-0bd6-4e25-975f-5b0c8da04a5a", "indicator--88f3ca5c-f318-44ca-8c4c-6728781f41af", "indicator--a5f663d5-da91-4016-a5b1-312e141d1dac", "indicator--b60f25a5-d45d-40ff-b501-38f5b5bc1d29", "indicator--d46fdd23-1127-4a35-8910-469ca26e936f", "indicator--57260d06-4e1c-4333-b76c-93a70c0ac9d5", "indicator--5801b06b-e452-4579-b22d-98dd1c9484f7", "indicator--3f5a8f60-1fcc-4c10-9822-d22e78a69287", "indicator--042a43ac-e356-4c81-8b21-873ea64fa148", "indicator--0afff342-7c27-4f69-b910-bfe6ab3f1017", "indicator--02edd83a-3ffb-42da-abe5-4ee6f37c5641", "indicator--1b889676-738b-42c0-b301-c10aaf9423c6", "indicator--8f8b25cc-49bd-4b51-81d9-5c78d291ee78", "indicator--fea8903d-5597-41c1-9f9e-8ba2db1b56f0", "indicator--3f03513c-9b68-42c6-87c5-80e39c58532d", "indicator--afd9ae39-9523-4073-8b0e-4b699e4792cb", "indicator--21562d71-1c22-4194-8b77-71f6fb098f0b", "indicator--b69aaa23-930e-47c1-be09-3f676ed6c4e3", "indicator--f12b93c5-6531-4649-94fb-02f7101e55ad", "indicator--3e2f79a0-2e97-4eb5-9e90-7ec1e94ed726", "indicator--09d48221-fdd5-40b4-90c4-c4a86a0c55fc", "indicator--d2f22971-0e5a-4413-aa1b-a4381d6b6ea2", "indicator--830637ee-b7cf-4cbe-9fd1-12e005626217", "indicator--e3303bdd-b2a5-41e0-aa44-0ff0e9721538", "indicator--cf872359-ec3e-4c40-b0b9-fc258b882eaf", "indicator--a40c9c4d-94e6-4af8-8b67-e6e490c68698", "indicator--b65b1d7a-601d-4f3f-8528-39015a896ccc", "indicator--9d2439c7-069c-484a-a3c5-c0eadd5e2c7c", "indicator--de31416b-f83e-4bd5-91d6-9c9c9d679c6c", "indicator--26c78524-bab2-48ed-8c80-dddeceb4171b", "indicator--bf2fb620-9679-4ac4-89d0-c7cbc4655754", "indicator--063b11e2-11a6-4883-8af7-a83a16285302", "indicator--fc2180d3-fda9-47e8-a16e-3ae071fab17c", "indicator--4ff44736-3d64-41c9-a0c0-86fbe012c44b", "indicator--dc81c87b-9234-4d56-bf81-ec4829c1830a", "indicator--cf9e0cc5-515e-4e83-ab9b-9f0520f12f0b", "indicator--cb738afb-919e-4791-8383-9a2b56cf7335", "indicator--223e7a5e-f37e-49ac-9472-4c91dc8b46be", "indicator--c123b330-1dda-4fab-bb9b-a58a1dedfdcb", "indicator--eb9b9631-e055-40ec-b53b-22d03be8f9e1", "indicator--46f04178-072f-4117-80a6-ab6d2d4b6113", "indicator--e9a9d165-ae70-41fb-944a-8849f5b5560e", "indicator--fe5729e2-5bee-4df6-b8dd-9264531bede8", "indicator--cc8d0d54-f34b-4351-8303-372dce4be526", "indicator--17532d7e-437b-41a4-9bd7-d6b2fb286f86", "indicator--d37de9ed-1834-4546-a57c-f27be7774f65", "indicator--4ee31cdc-08db-45b8-b4e3-5109cea2d713", "indicator--0d8e4618-0d99-47ba-a597-b1835544cadf", "indicator--4d986168-6b92-411f-a522-063beceaf10a", "indicator--c35b9974-d089-401e-b59c-9affaef0813a", "indicator--feae0040-e264-49a1-94d8-e90a05aeb696", "indicator--95ed3279-c11b-4ad1-92ba-4a6138182d5b", "indicator--8a1fa80e-7c6e-4af0-9ac8-7ff2eafe1b15", "indicator--eb44103e-ea5b-4b52-82a2-2627195ba123", "indicator--4a221748-a8c6-480f-bafe-24e9718b6983", "indicator--4fe47a8f-4f18-498a-b8a4-b2d00306306c", "indicator--6d8ad980-eced-4afa-a6a6-c407fcc9eee6", "indicator--bb515d02-18e4-4f85-be64-909f64cdf983", "indicator--26f64e12-d744-4ddf-8cb9-a702a6a29aa1", "indicator--10a483e9-f6a4-46e1-83b2-40282047a768", "indicator--247b1fbb-9363-42e2-8085-dd34084c8bca", "indicator--85676a88-edd1-4ef1-bfb1-383b245f5d16", "indicator--ad5e408f-1c31-4344-88e1-41cb7bb4df79", "indicator--d05ebf7e-9fba-4e33-b854-623f41ceb590", "indicator--644a54d7-7613-4fe9-80e4-f63f45dac4d5", "indicator--e5113aef-b619-406e-b8fd-9a50feaa3865", "indicator--91efbefe-6263-464f-ae27-5b104a456319", "indicator--8ef8ad46-76a4-49c4-a657-bc02842e9cf6", "indicator--4c4b9ab1-67bb-48e1-8689-ee175d53a5a7", "indicator--f3fc8c43-d4fb-4e64-bbf8-4aabefef7e8f", "indicator--3713e6e4-f090-439b-a7b7-926ada8d6f24", "indicator--d022b43c-c7a8-4b65-a798-7a003ac017c3", "indicator--a2997f4b-58a8-48bb-961e-4703fa5fb145", "indicator--3f384cf1-5547-45f0-8aa6-f7c9c7b3b6cc", "indicator--4c5f9293-ba45-4ce9-a74e-e11bc421ec28", "indicator--99f57d1e-52e6-4210-854d-54d6173d5f50", "indicator--d584430d-0c80-44e1-8a07-5c36135cdcfd", "indicator--cec0f45c-92c5-4635-837a-a6eb8d444bad", "indicator--0af6a582-8964-459b-823c-24f84c222a80", "indicator--8a66b01b-dd57-4802-a6f1-72556eed1267", "indicator--26781431-fc52-4501-8424-aa985b832783", "indicator--bd6771bb-a960-452c-b33e-a461811b3bd9", "indicator--20dcfbdb-e34f-4ca8-a077-8cebfc2e7e54", "indicator--d48154c0-4cd9-49f3-b9fc-ecd91e32626c", "indicator--3e2cbfd1-b385-4fd2-92f7-7f28cfee41a9", "indicator--a3e0ccc1-0796-46d1-a764-c14ab98ec9db", "indicator--3f8f4a32-c96e-4917-9cfc-5e599b411218", "indicator--abf8ed71-a195-4844-a035-a44bb8320ca1", "indicator--b27cf1b6-250d-4f02-bc62-50179c43ba9c", "indicator--f8648ac5-786c-4aba-a53b-3c7527ca1761", "indicator--f20779f1-7e97-411c-8840-70812fad8e9a", "indicator--6386e6d2-d09a-4190-8a9a-28d1c4c05cc3", "indicator--ec0bd3cd-fcbf-4fe8-ad87-331187fc0690", "indicator--b7519c61-dc29-4c87-b729-2a7b4970b558", "indicator--fdeba037-ccc5-4a72-aa1d-374132f2b923", "indicator--eff2a4e4-ffbc-48d6-b463-08a68edef0eb", "indicator--e507d8b3-e930-4e3b-b2ae-10a122a9a1af", "indicator--4620cfee-8ebf-4bde-90e1-3db262944cf2", "indicator--a53eb340-76dd-4958-9af4-e0d8e23b7308", "indicator--4cb110b2-b003-464b-96d1-008882ebc75e", "indicator--1db3dc81-e360-454d-9548-2b1c62a05040", "indicator--02958cd1-665b-4603-8448-987c993604bf", "indicator--971463ed-c73b-41a8-beaf-d39c68f245e8", "indicator--1e184fe0-76de-4eeb-8f1d-e02ff9c56389", "indicator--82877985-a128-4106-a8a5-4a68efb60435", "indicator--2f419fa6-2e06-4bd4-afb9-70a75f17bb18", "indicator--bccbe81a-732a-4645-a2f4-a24cc1971119", "indicator--dbdc17c7-2c45-4546-9322-e61c8b4ddae6", "indicator--dd98e24d-5e4a-4181-a0cf-51697d870152", "indicator--6c56482d-9ebb-4380-9f0d-ee0976fd3e5d", "indicator--a14d12df-3cfe-4146-9ddc-fc107f71fa1b", "indicator--4d647e23-2a73-4014-98f0-feca7a9999b4", "indicator--23d3dd4b-ac78-415e-9f18-9d81a0391a19", "indicator--25b62e72-cb75-4150-ba06-0a833063409e", "indicator--0b02a38b-c567-4f5f-985c-03f5d33fbc55", "indicator--7d30d391-1251-4953-b826-434c84dc91d8", "indicator--f53e56b9-d577-45d3-8b93-49221fdd3a3a", "indicator--8149f122-a102-4b37-890c-a37f1a907e7a", "indicator--d652f11f-5cd8-4bae-aa98-728a72780e9a", "indicator--027c8a08-1978-4b16-8bca-ddea434aa197", "indicator--4214f71c-86b4-4bb1-be7d-658afdd86f0d", "indicator--1d15259e-4bd9-4f84-b7ca-4980f69464f4", "indicator--da4966da-5851-4ff3-ad46-337414a0efb3", "indicator--ba00a92e-adf4-4f04-bb1d-5a7a5950646e", "indicator--95f43ae1-78b9-4c33-8725-847a80dd1985", "indicator--12654097-f583-4378-9bbe-69f5f3ae79ec", "indicator--3d008d38-dcf9-47c0-bf88-e4cd8a78aa44", "indicator--438bdf5d-a215-47dc-82d3-0c69e3ddfb2d", "indicator--1c998219-7937-4ebc-af52-a4b0645349c9", "indicator--0985ec00-7bb7-4772-bc6f-f1fb9bd0df26", "indicator--ffc5d8a1-b927-432c-925d-ff0488ae0be0", "indicator--d50dee46-538d-4692-8f7b-4569580b8024", "indicator--2de96d2a-eb16-47db-948d-80dcc5929b33", "indicator--05b1cc0e-f53d-46e5-804f-ab93249ddd38", "indicator--e798bed9-37f0-4138-a0fd-afed3812b265", "indicator--630c2ef7-f1c0-48df-9bc8-62228c28e259", "indicator--e0b1a4ee-fb45-4053-bbf2-98037e9d46b6", "indicator--9c40e291-c12b-4d8f-9609-482795aa3b5b", "indicator--8c1cbc08-72f6-49a4-84f9-7ed71eb2476b", "indicator--83f1b34e-65e4-4ac0-ae95-9b97b3f35e4e", "indicator--fead9784-e305-4fff-8e5f-c079839bf2c7", "indicator--319b59c6-c44d-40bb-8a6d-eabe6ad5cac5", "indicator--f82825cd-66dd-4d52-a843-ecd9aff790c5", "indicator--ab7741e4-60cf-4b73-963f-f790be00a6b7", "indicator--e21ff316-2dce-41d6-b86e-27f9a5cfa2b2", "indicator--126f61fd-1641-46a7-afc4-65e86d72d67b", "indicator--08b7f4cd-7760-42ce-9d29-56b18ee11fe4", "indicator--07bfcb6b-4dd9-44ea-9334-e5b9be176335", "indicator--4109e200-3a22-4942-bbc2-31804e0cd81b", "indicator--5e90b171-f83c-4457-bb9f-238c70bf0664", "indicator--05ca96e1-4511-45dd-a198-676bdddabb74", "indicator--01b3a4c1-74ef-4922-88d8-4a5074211080", "indicator--0a567890-57d6-42ff-bc3b-47d39aecec82", "indicator--39f6fd7c-9543-477d-81a0-5b9b077b2f90", "indicator--ee2642d8-e80a-4622-915e-6979913e2865", "indicator--bee80026-8a2c-460e-8943-7b155d82bffb", "indicator--4a8ce5ba-8aca-4e38-9b5b-9420a953ec4e", "indicator--15077b14-7a4c-4d79-9719-e3fb14b83230", "indicator--e8141bcb-e188-4389-be36-ef128c74338a", "indicator--f943cce9-64a9-4970-8e12-ca136386ce4b", "indicator--8e1b4def-0734-4e16-98aa-8ae5f35fdd80", "indicator--44296593-96d4-4a30-a35a-20927428d822", "indicator--9622a598-c66a-4135-bdb4-4baf1edf6730", "indicator--447988db-ab17-4d43-88ea-4f71d090f898", "indicator--ed5c1de1-426a-4f99-8b69-a829fdd0a68c", "indicator--62ef80c9-3dc5-47ea-92ca-c7fcc8e93b4c", "indicator--54a81293-5a8c-484d-be8e-481bf8e10d62", "indicator--56303ff3-c3e0-448d-952a-61be893cf58d", "indicator--be5cd8ac-d488-4d12-8f53-c626238983da", "indicator--0099f01a-017d-4fc6-b2b2-1c8acec8f9d6", "indicator--a10c92b8-b41d-4fdb-8844-8ea847be49ce", "indicator--00335ce8-f206-428b-876c-c33c50c97988", "indicator--1e922899-75ec-4a9b-bb54-1246b9d94934", "indicator--4bd851bc-d1a4-46fd-be19-98cd6fdcad28", "indicator--5634c44b-9a11-4783-9e39-8bb8abd7595a", "indicator--52224f17-f046-4eb2-8f16-49cd8f0657ff", "indicator--7af018da-d1fe-4f02-9cb6-f4de19bee218", "indicator--9515f198-ca5e-4ba2-a0cc-ffd91f3530ac", "indicator--b5d1e743-67a4-42eb-9e9a-4cbe3d275a04", "indicator--2faf25d0-142c-4e7e-83a6-9434a83dbf9c", "indicator--40c3614d-d72e-4f83-81f4-dd47ecb8536f", "indicator--ebf40e79-f5ad-407c-a1f8-e906b1ecd437", "indicator--a403a6dc-592b-4bd4-9672-583ff15fab8e", "indicator--088a9ad5-fc73-4812-a3db-157cc2ffd094", "indicator--095ad4a0-6d2d-42a8-a3cc-5f04a0638fc2", "indicator--f6bc40a8-b553-4548-9a8a-436123d71caf", "indicator--2d63df68-2864-4af1-b065-a0d76bddb09c", "indicator--7448fff1-546c-4dc2-ad02-2914f1815b54", "indicator--273b78fd-a4d3-45fa-bf14-6a4c77fa5906", "indicator--ab9582dc-754d-4e7b-89a3-dd7ee27414c8", "indicator--0db443cb-77bc-4b4a-8230-0fd94391847a", "indicator--96485a1a-f824-4ad9-a06c-d2839a4addae", "indicator--f61b2c86-7efd-4690-b228-fcb8d56c0a7a", "indicator--624b4d76-9e39-4732-aa92-10f08375a0d3", "indicator--78d70c45-c4f6-4e61-9264-6ced019adbe4", "indicator--2e2a3261-840a-4955-83ba-7734308ad3ff", "indicator--52a394b7-e763-478b-9183-8dfc01d3e8a1", "indicator--a626f5a5-7cfe-4cd0-a8fd-671e18f3e55a", "indicator--18bdffd3-97f1-4cdc-a590-50df8d664c40", "indicator--d2ff6b58-31d2-48ea-be57-64881675cca8", "indicator--75e64273-5649-4711-8d95-3fe6dfca6d4a", "indicator--0c197922-cd27-4e9b-a0ee-1c59eca01be1", "indicator--593d941d-3e82-4e47-8005-ea5987a34172", "indicator--605f1d46-ca0e-4a46-96b1-b970f2f03625", "indicator--71322a72-2df8-4b73-9686-09ec3b13106f", "indicator--99e10c49-cf7e-44ad-82ac-80a227a21866", "indicator--b42ff69f-b9c0-485b-b1ab-5dbd0557d48f", "indicator--61cc5a26-568f-4bfc-8413-d52c7eaeb341", "indicator--0ec652ba-c256-4019-934f-bb9e897ef3b5", "indicator--423fdf18-72b4-45cb-b229-3ec7c4b7045d", "indicator--279e6c6e-9726-4484-9caa-3826abb059cf", "indicator--08770a56-a4e7-43e5-a9d9-4525c8704fad", "indicator--2269a21c-5add-447f-b60d-255cbd0d722e", "indicator--d3232c39-5a47-4ac3-9057-11b1e52150f5", "indicator--82e535e2-e391-42cc-8b40-f3256a33cfde", "indicator--ff8a8a5b-364a-4055-bbfb-96d60add093b", "indicator--026c6ba3-1517-4f42-bcac-bb1d481fa866", "indicator--1aee6936-2d86-4b47-b38d-2f6b0784de73", "indicator--092e388e-22d9-4ca5-a9ec-da18eb44ff28", "indicator--954f2ece-399e-4d5c-abb7-9b03644dbe90", "indicator--a74ff11a-828b-4e6f-ba75-43479263dfa1", "indicator--6f5ebf2d-6cf0-4bad-b188-2811c80679fc", "indicator--741590db-2f07-4064-b740-8c58c7c763e1", "indicator--31dbedac-a1e4-4636-a34e-af6be8de84c6", "indicator--db47f3e8-76d4-4355-9349-887f3749ea92", "indicator--abe7d3ed-4e82-4554-8e66-4f43b3b1227d", "indicator--032bf1e2-7dd8-4527-8949-12cea68a22bf", "indicator--6f454c30-f7b8-4fdd-bac1-69803cf77f24", "indicator--ceef2fd3-40bf-4c15-9216-ddf84b08e0db", "indicator--395bd04a-a42d-40ca-bc90-fb59b46756e9", "indicator--1f7189b8-b1ce-405e-be7a-6b94c7ed5206", "indicator--73a89b3e-8cfa-439d-85cf-3ad603efe335", "indicator--06a66bd3-0292-47d7-9ca5-a86f7c2cfe53", "indicator--5488d817-f364-4d7e-a89c-33922f192ab9", "indicator--da904bd9-68ed-4827-bdb2-16906ad8ddf2", "indicator--ba4d524a-5509-4857-b685-0672befef0d3", "indicator--690c6ecc-3e81-496c-af6b-1441786c9159", "indicator--d76596fb-521d-4000-bffb-0bd1697c4a08", "indicator--428b458c-6282-48c4-8155-7cc1bf9ae564", "indicator--57481041-0956-4e2d-bab7-8a01f6e3d50a", "indicator--e43cb974-2f7b-4197-8347-22d1e66fe1dc", "indicator--fc43717b-6787-49ed-97f1-59f1cac6e34a", "indicator--a7dd7546-203c-4afe-833c-ca009789eab4", "indicator--9eae0ff8-7261-4934-a0fd-653fd5868194", "indicator--8bfdd467-7e51-4f31-883b-5691920e6b06", "indicator--a6b9e2ce-0cd0-4231-bacd-84b814ea8cf5", "indicator--149fc572-b629-47ca-95c8-e45da07b2415", "indicator--884f2752-72dc-4809-84b1-77dca6265720", "indicator--dc5b6163-5ce1-4a16-bd14-bd6d6224f4e9", "indicator--e55a1ade-244e-4cf6-be11-81adbc771f14", "indicator--7b1e6ee4-cb66-4ea3-9403-006a0a751029", "indicator--9fe48ceb-93fb-4f52-8782-e9556fbd9b77", "indicator--73b6b6df-9f36-4e40-9387-964024bf4136", "indicator--f97eb668-97a0-427f-9509-538ff0c43ae6", "indicator--9d3c265b-3758-43a8-a347-490d7ec9f52d", "indicator--18a4a364-1a87-4238-8c99-5ad8336788f4", "indicator--23f4e98f-3a06-46a3-8915-42cd905da79f", "indicator--a31c00ed-a9af-484d-b324-11810d7dc7ed", "indicator--c38059ef-dc65-4de9-a954-061660b4e988", "indicator--5f204090-282b-4ab8-ac8b-53fc0b9a7303", "indicator--1c99cf5b-1320-459a-a4de-dbceae88ab07", "indicator--d78c5975-8abc-4f2f-9d81-4791aa990735", "indicator--fe0732d8-bb5d-4cc4-a763-68557faaeff5", "indicator--e1f63bce-488f-4931-ac10-116841f190db", "indicator--ccd767fc-a50f-40ce-b6e3-bf6743dcff8f", "indicator--a0ed2da4-1316-46d9-9cff-79c2c9715254", "indicator--6d493f90-5130-49a0-b540-3fa2d60f8cd6", "indicator--9455e759-e3f2-4bb4-8400-53793faf9950", "indicator--f8c490c1-603f-404e-84e5-6e68580ac984", "indicator--cc745553-3400-41c8-b277-265cac16d74a", "indicator--2f4da269-c2c0-4d93-aceb-99a63b277afe", "indicator--04d31180-3272-4aaf-8657-4ab0e57815ae", "indicator--ecd702c2-9fbb-40f5-8fa2-fa66b91cc77a", "indicator--3b638236-9eba-45c8-a1b4-619e85f43059", "indicator--8f99eb34-3ce9-401a-9437-f13424630fa9", "indicator--da0b293d-e043-49dc-b0a5-b08c5f9fcb44", "indicator--766125da-ec3e-464d-9dcd-fce3d6b7b71a", "indicator--d7e4f7a5-b922-4c9d-b072-f3a3aaec134e", "indicator--f1f2350f-89f8-40bc-a586-1cf65af70884", "indicator--3d7682b4-4f21-4ff1-892f-d8f60a2bed55", "indicator--a6450106-9816-4653-aa54-851d4492a945", "indicator--71973251-c899-4ed7-a827-8681b81f5b9a", "indicator--9bdca907-8249-4de0-ba38-654fb441325b", "indicator--d69d146a-2227-4420-932f-d375c58fba09", "indicator--4dbf5353-2593-4100-877a-eef8df1876c6", "indicator--6c22f648-6f68-49c5-bb40-80a0dafc23e2", "indicator--9d5211cb-e478-48c4-909e-94834c638aac", "indicator--330fccb1-ace8-4214-9329-0f9d1b736f61", "indicator--ef2643de-7afe-42aa-a605-5286bafc0bc5", "indicator--fe175c57-5e66-4001-8b50-e7f80c72ab1d", "indicator--d5d1132a-7290-4016-a4d8-2a5c87077e8b", "indicator--07fbce38-f50b-4250-bb12-d52e9f7f0ff3", "indicator--172fbc64-8bbb-4d43-a0d9-6bcd3a65ccb6", "indicator--cf19a4a3-aaae-4f69-a9b1-e44a77fedd4f", "indicator--f617a2c8-0772-4554-b02d-a7d51ea478d0", "indicator--7ef8d104-e49c-4764-beba-50e1cfeffbfb", "indicator--458635f0-a25c-4ded-a460-40df59e85073", "indicator--80c51ad2-46f3-4f92-9366-1126407467eb", "indicator--acdf3e4f-d959-4c7e-95e2-6f494b5306f2", "indicator--be640e37-9ea5-403f-8dbb-bcf7f917eb53", "indicator--53e2dfd3-a98c-4353-b229-87844186d431", "indicator--e7bc162e-ba9b-402f-9dbc-4a44e1677584", "indicator--f19f67ca-32fb-412f-b68e-f258743faab2", "indicator--38a785b9-59b0-443f-8bc1-40d2310135fd", "indicator--635b0ca7-9706-4694-9f2a-8c2c7e449b03", "indicator--d56401ac-ea90-4270-85e1-e621f8f9deb2", "indicator--d6e19910-9391-46fc-aea8-36754da6a249", "indicator--1c5d3985-5358-4be7-abe0-7348b0fbd945", "indicator--4e39a795-5081-44c9-b797-c5c696e65bb6", "indicator--606bcee5-6c52-42a1-af4a-79b09ed978c9", "indicator--862e4c39-76e3-4ea8-b78c-336ad843c2e1", "indicator--cadd3531-37cd-4b97-8975-cc2541b03b7c", "indicator--0a89ee64-8dc1-43ba-9f75-6046c26f15f5", "indicator--af073b9c-51bb-49e8-aeaf-36b564a8b016", "indicator--d96546ab-742e-43ad-b21e-7c5233596a38", "indicator--54a4f1e6-4997-449e-bb13-de1e3a09d874", "indicator--c97058ab-0fdf-4ee6-87de-f06f61c781f2", "indicator--ba910d13-7efb-446c-98d7-5f21ab09707a", "indicator--f8a2ff4e-ccf1-496d-ad08-5d22d2cf4a0b", "indicator--496a3254-f0ee-412d-a034-5fc2f0a61db4", "indicator--d82ac237-fae2-4bb9-9801-d688f0bfe662", "indicator--51491867-d82d-485b-a227-1ced53c289da", "indicator--ad09cf60-4b74-4f61-a26d-193e711fe17e", "indicator--fecee004-0f1f-4439-b52b-8656416b8084", "indicator--0c7c778e-e9f1-4101-9bde-72c03a1e8c81", "indicator--4a65317a-4094-4277-a162-e1cb6d3db3d7", "indicator--68b7070f-df89-4cb9-80bc-e53ed0007a9b", "indicator--2d77e6f9-4085-465d-9132-2513c94cc7bb", "relationship--d3feae5a-8769-4799-bd70-becd31f259e7", "relationship--43b64229-b1a9-4b09-b5e0-55290bde1478", "relationship--3a606bc2-dc95-4115-9b1b-db7c35a532d5", "indicator--082c0a4b-c3e5-46fc-abc4-eaff03fc9998", "indicator--02b6ee80-22e2-4e78-9b98-3ae2d2156225", "indicator--0f42be17-3425-4f31-a395-7bb2cb81d6a6", "indicator--b8919e36-fbd9-4b88-a0d9-8fb38c074b09", "indicator--ec516a9e-a1bc-49be-98e9-39c1af026926", "indicator--0d066e85-67d0-4498-b706-f1050e9849d7", "indicator--908e908a-7aee-4f95-b1aa-4c9715f90940", "indicator--f299f61a-fc50-4251-9ad3-f0b96ce612be", "indicator--5d98474d-fac0-4296-b1b3-b8d2bef11d90", "indicator--e4609106-b965-45ac-b6cb-468358401f91", "indicator--bafe292c-4b85-4345-85aa-333f6c6c3647", "indicator--b4b4db85-55bd-4320-817c-c283bf55965d", "indicator--e3093491-4899-4dd6-af30-52e9353023cf", "indicator--b922c238-6f4a-44fe-88d3-a58baad18117", "indicator--83f92cdd-c150-4333-a22e-496bf3877d40", "indicator--118cb4fa-c8e2-4c77-8d35-14b48d28bbdd", "indicator--1293ddba-13ea-4a97-9289-4f0dfe44bd6a", "indicator--05b92f3d-c80f-4151-b941-e748e2a395cb", "indicator--6b45c9cd-2d92-4c5f-9b18-6522d54efa46", "indicator--eee5324b-938b-4d5c-8250-f39ab1753660", "indicator--2a2fb528-573f-474a-b414-ace8f0e8eae2", "indicator--08fcf0fa-563a-4b39-8efa-85b4069c9980", "indicator--d9f72e19-4fcb-4adb-b11c-636bdab021c2", "indicator--318cea8b-a972-44f4-b940-fd49ee8b2a04", "indicator--7e9a029e-52a5-4571-a8cd-31cc51034472", "indicator--8bf62736-59ec-46fa-840c-f34c4f02d8fc", "indicator--0adbb848-2076-49fe-a9ad-6f3b16f0f128", "indicator--c7dd4548-696e-4054-b1aa-4330efee2d2b", "indicator--0c8e7c14-83f8-4c75-b639-fecfa73583c0", "indicator--69430558-9fe1-4d70-9326-ae4ce845da24", "indicator--ee9df8c3-f66a-4a0b-8a1c-96127e7de0c0", "indicator--ac8e0459-badb-416d-bb39-6d40b32d34a2", "indicator--9ff82c57-bdad-4ea5-8f12-4577d4c635d7", "indicator--d9e90ef9-74ef-4016-be96-4baa56a9ee09", "indicator--0309aa4a-f7fe-4376-8e17-ca41fde6cc9d", "indicator--f17414b4-b97b-49fb-a2ea-8b20f46af9bb", "indicator--683f39c8-5304-47d4-b171-15cbea228a29", "indicator--c8599e71-c9c4-45c3-b3ca-f6c0f893c39b", "indicator--24ca6fa7-9f0c-4e6d-9d9e-1721fc8aca6f", "indicator--fb6c410f-db7b-4310-9dc3-3b6f1b005b33", "indicator--fd785386-af0e-4135-a0f0-1b56773b1a39", "indicator--966024c9-8d56-4f66-a188-b9c8293670e1", "indicator--e228fc89-8ed2-4aed-baa1-1b714d68c891", "indicator--293023ec-cbe9-4c53-aa2a-fe2b8eddc2d0", "indicator--77155389-deee-488a-9159-505e0e290aae", "indicator--a32d0c3f-6e0e-44ec-aa9e-2f85dd4c22f4", "indicator--32f35341-5316-4d83-b412-827a3fb9ff90", "indicator--bbba5e4c-c4f2-4e9d-ad2b-a4e66c0980a5", "indicator--1e6a3650-9a38-4c24-8a4f-f8a1712a7819", "indicator--d9643412-c7f1-4b7d-9e0e-119dc2e537e1", "indicator--ea9268e4-df49-4025-a6e9-c9d451a4820b", "indicator--eba5a7db-3d93-4ae2-ad87-2c6e036eb5ed", "indicator--6f035e67-9ed2-4f20-8b62-fb8e1ed7e9a3", "indicator--336b8855-ddee-45ed-8683-6a247cfc4b13", "indicator--51757176-4347-4055-b126-68c9c2d25c44", "indicator--a1142eed-8deb-4cbd-8070-56bf0c6adf9c", "indicator--3e88a05b-5f0e-4076-9ae6-efd677ffb826", "indicator--8b85f583-c92c-46a9-a1c0-3ae6928068f1", "indicator--eb9bde53-ecdb-4eef-b4ee-a73cff07750e", "indicator--2515b15c-03d9-4f96-9ef8-a7c88dd21c0f", "indicator--ab5f9cbd-6341-4f5a-bbfa-d47e84c888e8", "indicator--d45f4d90-9ea7-436d-ab47-69dd10828021", "indicator--a24d7e1d-ea34-4335-bf11-00a820ef3675", "indicator--3cde15cb-c61b-433f-8e85-b8a4039c5cc9", "indicator--650a10de-d8fa-49b9-87f4-3d9bf2ec88f8", "indicator--dc3d5d67-4fbd-48b7-b1d2-fb9f75487149", "indicator--47a63e65-9e32-4ade-9b6d-bb157247782b", "indicator--ba438782-96e4-4644-b3d7-7c292c2212ef", "indicator--ad15ea5c-eba8-4781-80d1-8cf748d66f44", "indicator--04f26688-8372-4119-a11c-1775f12321e1", "indicator--5008ef26-5f73-4a31-b070-fba006b81514", "indicator--a221e89b-1d01-485d-8379-e9d880ce9289", "indicator--cbac5fef-4a3d-4cc2-9221-0b68ec077092", "indicator--e812d1e6-739f-4682-902c-3d537b9e58a8", "indicator--dd271120-a6fc-439f-8682-117bdd9e71e3", "indicator--2e9919d0-82be-4801-907b-4a91a0ebe2b9", "indicator--620420bf-9907-4934-bb41-df14620e5fae", "indicator--0e6a43bb-ef4f-4b26-ba86-277f726187e3", "indicator--6ea8ae93-c27a-40b7-b7b5-4692a4816f66", "indicator--18a978a0-2758-4861-9d1b-d01d1c89ad9c", "indicator--6e8831b5-488a-4a19-987d-c36bdf2bf8d3", "indicator--354c129c-a31b-43c8-986b-0ecbe7844004", "indicator--f3003855-c48a-4f20-bf4e-8414d88acce4", "indicator--811fdff9-2035-4c23-8853-acb3760ca681", "indicator--d532cf64-24eb-466d-bf96-26823d5deaba", "indicator--753943fb-1f6e-4c28-8545-721f905158d9", "indicator--72359f6a-7bd9-4f8d-986f-2cd9c0e91d72", "indicator--942eedc1-93a6-4f11-a3e0-f6d4abaf6297", "indicator--c2a2d46c-c1bd-4512-b739-328a306d7540", "indicator--fc9fdd7d-3839-40a8-8c30-f447e962d39f", "indicator--f2d20151-3477-414c-8256-0b9d78cbe4df", "indicator--bd41885e-216a-4459-b640-19dab3e85ebe", "indicator--944fd77f-e640-413a-b15e-d4bf03c458f3", "indicator--2c9292be-f3c4-4dcf-826a-76a6948ae465", "indicator--33e99fa4-c588-48d3-94c3-7837159f63e0", "indicator--05af31a1-7961-4d69-bdd5-5d13e9ac009f", "indicator--3f94991e-db49-4dba-8cac-4362f54a580f", "indicator--75b83409-68c1-478f-b7a0-1581fb3915f5", "indicator--af46c264-6c7c-418a-9e01-437a337bcb1c", "indicator--e0661ba3-d9f4-4bbb-a798-388be131779d", "indicator--4533bdf8-c101-4ce7-b54f-12dc04615f30", "indicator--7e867034-2f39-49e6-9433-b358535b2640", "indicator--62a57515-f8b9-4f52-8a62-03ea0cb6474c", "indicator--8023faa6-6f15-4039-9674-1bb27e043fae", "indicator--854b5811-c2ff-4d2a-b606-706880e62858", "indicator--45b55c02-d765-4fc5-82df-cb5dce05b00d", "indicator--d68d89ee-cc47-4a62-8090-8a23f2bb634b", "indicator--074e25b5-8244-454a-95c4-5e51bbfa5cfb", "indicator--132911f4-b470-45ec-aa3d-04b485cf5f8e", "indicator--c9c23d98-57f8-42e0-993f-f5809ddfe28d", "indicator--dc4dd16f-f226-43e4-bfee-9b8cef193f0d", "indicator--d98fbc81-e62b-473a-be78-a5f1dd9afb67", "indicator--2ace8c60-0ea3-41a9-bf8c-2862b1959a08", "indicator--bf35c213-d310-41b8-848a-a690275451a5", "indicator--ef1d41bb-ed35-4f35-ab37-7468bdf197d3", "indicator--a724ce5c-f989-479b-9f73-6d3672dca49d", "indicator--2cbd9a5f-8cab-420d-86d9-c60ad0f8acf9", "indicator--e5c2662f-1176-4e95-ac20-fdaf47dc75a8", "indicator--315a7e65-7bbd-4cad-9e6b-a1439a105309", "indicator--9cc1e1ea-6afb-45cd-93ce-23f7a1f261a9", "indicator--a4ea5a97-c794-4376-9015-23a1e7c15c51", "indicator--fdc4a12d-0620-44e9-9420-fc9c07c9c632", "indicator--7bd885c8-1869-423e-b48a-ef258b7d6556", "indicator--5481c7da-b52c-4e71-a401-0dcc095339dd", "indicator--ac54a47e-37b4-4373-a5c3-84ab1170ca42", "indicator--c36a5d3a-7f7c-45e3-a2c6-5acc72f03ca9", "indicator--218855d4-fee0-41d8-bc3d-cb1ef19a4660", "indicator--8ccb3592-8361-4430-adab-dbcb27713d04", "indicator--d652d1bd-c6d4-401f-b13f-b16cd9307c5d", "indicator--dae7fd4d-4583-44d3-b159-9285c13acaf9", "indicator--aeaa8089-e2e3-41c1-a390-7a873d71b1c1", "indicator--f644c628-d0e6-46da-8e28-c0ad251ae262", "indicator--298cb8be-d625-4aad-a7d8-dbe2bff0105a", "indicator--8ab70ea1-0d3e-4bc2-aae0-0dd0499e5afb", "indicator--eab8274e-3a45-45d9-b1e6-9fd6cd618526", "indicator--9c678d17-a639-4917-bd6c-bd24bd342405", "indicator--55241ff3-81c5-4e8d-b955-98aa082cb7c7", "indicator--d4d55c0b-5c6b-4862-b0f5-03dd8bc7a455", "indicator--9daf2c6f-e3df-4326-818c-24ac956a4c6a", "indicator--177dabc9-f75b-4dd2-94d0-3ecaf6a8e901", "indicator--d9fc1133-c232-4a86-9bb1-ee608470faff", "indicator--1570f084-6def-4e89-ab87-59ea11cc4402", "indicator--443a6e94-6a79-41e1-90b9-8f84a652e82e", "indicator--91440c5e-3dad-4276-9894-07071ae5d692", "indicator--622e090b-d240-47e8-90bd-617be20f9cdd", "indicator--fb1c572c-8e89-4bff-bb2c-2c7f7ea50a32", "indicator--c28d5c95-a0d5-483e-9f18-636a7ac2022c", "indicator--f7459717-e06c-4152-8351-17793abc692f", "indicator--56720858-c4d8-4190-bab0-052814dd9cb5", "indicator--ffac42a5-64f6-427c-9705-2e7f2b4ce73a", "indicator--6a9845c3-6b8a-4f5f-b49d-d3e0684d7916", "indicator--00947d04-0676-4a02-99f2-1ef298d38c7b", "indicator--c75e6b68-a351-442e-8954-cb4ac24bc57e", "indicator--448e2173-c94f-4ea5-922c-3501c7475ca3", "indicator--1de8214a-5efe-4283-8b98-e5a1a0c351e2", "indicator--d8cb6ccf-9f7b-48d9-be92-c4367ad5a6af", "indicator--43e60b7e-3673-4bdb-a1d3-fd781ea6c115", "indicator--397ebec2-3194-4d46-880b-daed1b548094", "indicator--947199d4-20db-4b67-b5f9-0e271e33d3d2", "indicator--d5a11f88-feae-42ae-8d2b-d52d58094f57", "indicator--35d128c2-62cb-41a1-9d01-3bdb64b1eda8", "indicator--b8806aef-dd53-436d-bc0a-69037e941213", "indicator--519ca598-13d5-44ab-96c6-d65757aa6f14", "indicator--57bb3444-0454-4254-a92f-0b8ff696dcd3", "indicator--bfc9b737-f9a8-47b9-be68-beee37404a60", "indicator--eb4ddeca-6343-4626-828d-88749ef26d03", "indicator--05478947-5087-4a36-8613-f8fbc27275be", "indicator--b4b4efa6-d077-4854-9cc1-aa8cb6c05fd5", "indicator--7d2491bd-39a4-433e-a8e0-4f2f3661a159", "indicator--9be8d6e9-8cf0-4db8-8c67-c02d3f1a3c0f", "indicator--1475f5cf-e34d-432e-b70a-88987b22bf9c", "indicator--6d3a8ca1-3b4b-4f68-8cc0-7dddb5f4c919", "indicator--91f40c45-5b8d-4f17-97e4-7de7d9ae7cef", "indicator--4395a00b-fa31-4aac-83bd-a991a82759ca", "indicator--9d887d78-347b-49a6-bc11-a14c178e401d", "indicator--4206c9c0-4397-4990-978f-e065825aff3e", "indicator--799e38e0-d71a-44c4-9b14-c0ee8d2cd99b", "indicator--1b76e686-ce0d-4624-9384-f60dcd8d4879", "indicator--efe05485-796d-4dc7-b8f4-b797cd570e9d", "indicator--6e1c0cf0-b531-4934-995e-17fa968e00bc", "indicator--51baedbe-66ba-4915-b1d2-81c7bd2711d2", "indicator--f4dd4419-7a79-4e38-a2d8-e9ae9d3bdbe7", "indicator--64ad2066-cb61-4cc6-a9fa-574a7b70958e", "indicator--5b27028f-6766-47fc-a181-fe37546f5107", "indicator--f4984c33-22e1-421f-a39c-dc90353d4971", "indicator--2572ea04-95bb-447f-af55-874ff6da487e", "indicator--77ba54f3-de12-4c1b-8e47-59d7499b6e16", "indicator--7cc1d649-90b0-4170-bb6c-09e32b8087ce", "indicator--6a7ed978-baea-4104-b8d9-f42e6febb159", "indicator--bbdb2927-64cd-473e-ac68-d58923168171", "indicator--a06abb99-a4ff-4134-90f9-e9abe4bc89a0", "indicator--5220e29d-0252-4e8c-94a2-3f6f7bc799c1", "indicator--ee877301-f161-4b42-b7f2-bda4b193b400", "indicator--cb50d622-0d05-4968-813a-b57255bfa891", "indicator--52ad0f51-a99d-41b0-a454-aeb562b7114c", "indicator--f6942187-5a71-4571-b4b5-83223d59e4b0", "indicator--a6d07665-ffd5-4c6e-95c8-1e2b054593a1", "indicator--30dcacd9-f8d4-4466-8493-7686abf6d143", "indicator--f629533f-e054-4716-8e1d-1b65109c0054", "indicator--4b571e8e-e1db-41c6-9772-95479ce0745a", "indicator--6046e29a-cee2-482c-8ad1-157a605759af", "indicator--7d32b8ee-bdb1-4e37-95db-59b21e4d5e31", "indicator--52d7b4ee-b8e0-48b8-a169-e17b98e4d1b0", "indicator--ce002843-d64f-44b3-9dda-181dbb4d8fa2", "indicator--dcec44c7-726b-4170-ac42-4cd7c01b3350", "indicator--2aa1f9b9-2341-45f5-bbf0-ae05fb27e7e7", "indicator--9845f04b-6dc8-49f4-9a49-94794a2f2351", "indicator--ceca979f-ff77-47e3-ad77-506d601d6162", "indicator--d559880e-066e-413e-8ce2-f5695df5c282", "indicator--aadf17e4-83cb-4f3e-809e-506101a12387", "indicator--ef773eec-2838-4edf-a4b2-6f09cd409009", "indicator--e1242d7c-7116-4e7c-b6f6-97cddc3d078a", "indicator--7d90c971-00df-4781-8fb2-443cad447e35", "indicator--f3ae7119-66e0-4610-a9fd-0bf594adde7f", "indicator--bc541dfe-e699-4689-822e-8203f87f0534", "indicator--11b08dae-8fe1-4d83-9afb-20de30489898", "indicator--eb048f76-e8b4-488c-820e-8c29b649c44d", "indicator--c3ae2f5c-ee31-41f8-81f5-ce2d7f520465", "indicator--2bb7319d-1a4b-4a57-becb-3921b9ee830c", "indicator--287d9885-eee2-43a9-9ce7-65cc377221f4", "indicator--8e5fe313-ea78-4edb-be9d-3c71d7f5c102", "indicator--1011d826-aa75-4e5f-805d-2309c0d2f892", "indicator--0c4f2ded-2359-4ce7-b5b0-1cbcd4711c13", "indicator--54bff860-2936-4652-9d0c-c17c3b7eeeff", "indicator--8a2500c8-6130-46e0-aeda-fa2945f6442e", "indicator--2779db79-c098-402f-99e1-7a09e8690eb7", "indicator--8d151162-f78d-4fea-ab11-fc1744548116", "indicator--3b575ea6-33a7-4c19-aa97-2db15871f7f9", "indicator--1b1acd72-ff10-48ac-bc4a-b48463732bc5", "indicator--ed4f15c6-366c-494a-bd85-d9fe129c5274", "indicator--1d36de42-9c09-44af-92be-aac49ff6fc2a", "indicator--01618db3-d5cf-47f6-962f-af1970b95fc0", "indicator--911255c4-c1c2-4d8e-ad8d-74f4e98d7ac2", "indicator--a3aab208-7fe9-4a08-bf48-b48d14a53ccb", "indicator--19b148c5-24fe-4e25-a5d1-e1514620be37", "indicator--190de710-4220-4089-b84f-f97cad8d1acf", "indicator--18724d6f-ccca-4585-9111-ea2c73273f4e", "indicator--b9a6f363-7da8-47e2-8d0a-61c56860e1d7", "indicator--4ab702ae-ee80-47cc-98c4-f07f2dc5f58b", "indicator--1a887a78-090e-4aac-af56-dee429d24fbf", "indicator--b7d396e8-2eac-45fe-9a77-3d98ab6bddac", "indicator--33ffc8b7-90e8-4446-a896-a1edcbfc3d04", "indicator--9d327820-953c-4b52-a9a4-68d7884f4fcf", "indicator--b2baf7ac-ee42-4c78-ba13-407ccfde815e", "indicator--4e250753-e527-44e3-907e-3eb7f4794ea8", "indicator--82e749aa-d374-4d82-9c1c-e087a2503902", "indicator--d93b7d52-68bb-4f94-9078-f5ea096f28fb", "indicator--ff254e51-1bc9-4176-b555-4ef08364c35d", "indicator--80084980-d813-49b3-88dd-33a319514404", "indicator--e0193fa4-3f93-43ee-9e7b-267d51cb5c93", "indicator--d21a1e99-3dec-41a1-8964-4af91bc4bc9e", "indicator--03bc8b98-f465-47fa-9203-76b7b6c02bd3", "indicator--9a40bce5-31b8-4ea7-80a6-1d54cfa21a80", "indicator--01cec7ca-f62d-48c8-897b-7e70a3d45e7d", "indicator--ae4ae5fd-da63-41ce-a02d-4a157f6c1543", "indicator--dcd80c6c-c920-4c6f-ba1a-4c9e49cb1d2e", "indicator--868f949a-5384-4648-b662-50eb3723a7e2", "indicator--b9ad90d5-f897-4b38-be46-9850743c4220", "indicator--37bc4fed-6ed3-4474-be31-14c01b740c43", "indicator--31535ff9-917b-4e4f-9510-ac0edcf69731", "indicator--e9b958a0-5bf8-42a9-a1e8-eb9187e2ab35", "indicator--9eee64f1-8971-435a-bab4-bb88e1117455", "indicator--3e395453-556e-4d0f-9158-b83bb41798de", "indicator--cd29e2d8-21b8-4ac2-acef-d3a206233864", "indicator--90021f40-1af5-486d-9d27-490b32ff21be", "indicator--a7f85e05-25ee-4461-bf56-9976ff2f82aa", "indicator--f88336cb-5ad8-4d60-b26d-f3bd4ef46206", "indicator--54b3a982-4708-4d57-adc4-9e641726b5b0", "indicator--5cd1b9c8-1351-43a8-b5cd-4da98169cdb0", "indicator--da2dd7e7-2a72-4c9b-897a-dd647022f312", "indicator--5091e21e-e55a-4781-a879-dab2cee92552", "indicator--a6ae7bc9-9895-498f-96a5-7f825790dfa0", "indicator--7d9eb35e-5182-4195-9942-a80368335cb4", "indicator--e6031bfd-aa0e-44aa-9050-78ad376c38e0", "indicator--5e45cd7f-a63b-4a20-a10b-d5e5ce6ed533", "indicator--deca6254-6da4-49ab-8b8e-a77da01e8084", "indicator--531687ab-7c68-427a-8a0f-0297e0a5d294", "indicator--ea2069ce-7b68-49e3-8b94-86b05c6de358", "indicator--8563f651-a381-4b66-9b4e-1e7de263648d", "indicator--0ac1ca1c-a953-40ab-96d4-ffeb796e8e3e", "indicator--f3d624b1-b150-437d-a0c2-19ac776ab919", "indicator--e39152ff-a85c-45fc-9101-120efe530252", "indicator--f33294b5-5068-49a0-a978-b7ebaf400238", "indicator--90f42bd8-1302-4ef5-9beb-a620b96b2859", "indicator--cf8fcfaf-8699-4f6d-9f0c-5b4ccffa0a0b", "indicator--9812e1dd-a8d0-4db6-8fa1-3e811f774e7f", "indicator--2ae7dd88-d4c8-4da4-944d-3393f8f15164", "indicator--d9c8e6bd-d603-4d9c-a890-99efcf4c7639", "indicator--de299519-644f-41f6-93b8-98e2e1f1b1b5", "indicator--253910f6-1e57-46b1-8427-f8ab063ccdf1", "indicator--b23367ef-c8d2-4d11-ac26-c094a98d0865", "indicator--417ea660-7628-4f8d-a0b0-a0c648b772d9", "indicator--51a70dc2-cf35-409a-86c8-45dadcda01d1", "indicator--e085bc57-7cb5-49e1-8f42-70e3ccb17b66", "relationship--d9e6542a-4239-444d-8cff-749b133ccf85", "relationship--378ae07c-4554-43f9-9eaf-ec5c5911c1a8", "relationship--c140035e-2a18-4939-ace3-bb905fac1c77", "indicator--dd24480c-68db-4657-9e34-9200ad489e1f", "indicator--ffd599ae-1276-4d54-a32d-97c503c0d403", "indicator--7be30045-39cd-4b36-a97e-2b6862b168d5", "indicator--25453c83-5886-4c6d-8f9a-3f7d9828222c", "indicator--208718dd-ccd7-4c09-9e27-d56f0181f99b", "indicator--d00c544b-cb92-4c2a-bd78-20d778badc94", "indicator--81c7dc67-7774-4dfe-84d8-7d3cfb43e8eb", "indicator--8b51aa9a-eabc-4bb9-b13e-1951af427efb", "indicator--1c938c7a-924c-42a7-91e8-8e85f45f3ed7", "indicator--df3a8033-c1c8-4660-b165-dbec1238b83f", "indicator--f792ceb2-3161-40ea-a91d-9bddbc4d4160", "indicator--18b3c984-9faf-485e-889b-313c320778b2", "indicator--d46050b1-1508-499d-827f-187027d6dcc6", "indicator--ebbf5119-a8a8-4847-afe1-4f0cc0ed6772", "indicator--f51b0155-d3e7-45bf-ba41-e430575c1573", "indicator--3c77bb8d-3fc7-403b-9108-29b4c97b412b", "indicator--6f08c665-2410-481d-a21b-ef32f73670ab", "indicator--31581589-4f79-4a93-abb5-332151976c4d", "indicator--d403b800-fbde-4d57-b9c3-d578e2ac9563", "indicator--3320a9ed-27b2-4f16-9c29-51b0233bf420", "indicator--f82a82d9-36ee-4545-84ad-145c5fb5e229", "indicator--18501f9b-2df8-4ac5-8628-e4bc4b0e11e5", "indicator--9cc1ae4e-f7af-48ef-936a-690b2d67937a", "indicator--29698bec-e5cf-43b4-9b58-5495ff28e3cf", "indicator--4559d446-52bd-4e0c-b38d-d63f5f6b7c54", "indicator--f85f0d77-24dc-45d0-9c8c-c4e764828089", "indicator--1e20d5df-6a12-47e0-9aae-48dbe934dccf", "indicator--4e971a99-7c27-4dee-83b6-73f0854aaed2", "indicator--d6046886-2ea8-4206-bec1-8a8a00b782d1", "indicator--c082108b-8de0-464a-8b25-8ec8b15b7e3d", "indicator--7993c894-a10e-4383-b93b-f1fecbf138f5", "indicator--4439d42f-0a21-4ba8-978f-c36139db960e", "indicator--e8f03f3a-284b-424a-8fd7-2ba7492c37f8", "indicator--01fdefea-a70e-4974-b6f8-e7ea9bc2b4e5", "indicator--f5ee7430-166e-42b5-aa43-a317acc34e2d", "indicator--c22a0234-c6ba-43c6-b838-e4dd1cf84e30", "indicator--dfb2ccfc-ee86-4c11-b5e1-48751c4736a8", "indicator--ea98856e-df22-4ca5-bb1c-40fc030479cd", "indicator--12ee9be5-ca6c-4d8f-8e92-25913f2f59fe", "indicator--db3274b1-8b49-460a-8a8c-5adedc2f8230", "indicator--d4f03655-5a73-481e-96a0-48d8344d7067", "indicator--35326f42-541f-402b-868c-704ed98e245a", "indicator--35db1585-1e1d-47ba-881e-88e8404e32e0", "indicator--e6e4b282-062b-4f0a-a770-de74728d766b", "indicator--8bc88737-04cf-4a16-b743-9d3ab1d637d5", "indicator--d0cb00a8-e093-482c-8a59-ecf611c7161a", "indicator--d1f5c65a-0e61-44c6-bcbe-75c53629d275", "indicator--5f9de285-2acb-44dd-954b-2c1ca4ab130b", "indicator--6aa94a15-f2bd-47f9-9a9f-ee72db62bf57", "indicator--1ed6912d-3ee2-4891-8ea5-b8f1141cc6c9", "indicator--94165d36-60ee-4189-a331-400986f70c2f", "indicator--51d50bac-b94d-4eb7-851e-f6bd578abc8e", "indicator--1758f3a1-b4dc-47e9-84e9-70dcc524b6da", "indicator--6605d7d2-9ee1-48cd-9d5c-72be527fab8b", "indicator--70fd2a26-2ec5-4856-9018-9dcb41a92871", "indicator--8ec30d0c-e70a-46b2-98fe-ecfd03f2f623", "indicator--78b7fd6a-32f8-4d5e-9e62-6751b514917d", "indicator--3f09a58e-6d5b-419b-b162-02c99ac8b461", "indicator--2cb7a4a2-7198-4372-a835-4be487d3e311", "indicator--fba19718-7929-453b-acb1-91a7f0599b95", "indicator--3d26dc80-3b53-4424-8235-e851f1bd7537", "indicator--8e968822-d7d3-477e-9562-e7090550abf8", "indicator--21ff77c4-158c-4f21-9b52-69dc43ca86c4", "indicator--15967459-1dfd-40a4-8c63-354eabc994df", "indicator--d561afc1-fc49-46ff-acd9-bfb357299610", "indicator--6ab66dc8-a428-4a74-8021-f9ec054f35d3", "indicator--e866d459-65c3-4304-8e09-41c3877d8d10", "indicator--0bca3a09-d38f-4e19-9fb2-15bdc6593610", "indicator--f3d94ec2-e266-4512-ab92-19a9619e862d", "indicator--571a53e5-e612-4430-8188-b506aa3c7d51", "indicator--d81ccbc6-d018-429d-889a-4e84e75c9b76", "indicator--1c5a74e5-a954-472f-90ea-87d6bb9f723c", "indicator--7d5a663d-7f05-44ce-9a6b-8d5ddc08756e", "indicator--3b699771-2d75-426a-a84e-cdba071924be", "indicator--cee3c9c3-de62-4a51-94cc-6bf57faf1a97", "indicator--c1ad4696-e02b-421e-86a0-81dd38dc0bf3", "indicator--f34449fe-7e00-481c-b172-4d1f12350b55", "indicator--b5772354-cdf5-4a05-b768-cad82b1498ef", "indicator--f0720d25-8a55-4768-9533-e9f6f7ce6fcb", "indicator--93130446-3d49-484b-9e64-9e12f49deb43", "indicator--7432b778-5980-443c-9a7e-10ec2b2e8746", "indicator--5f7ba43e-1c5f-488f-b1b2-ae8b3b88c5e2", "indicator--e48c0238-a0fb-4134-a74c-2272c7147852", "indicator--d5bf0346-d505-4634-9902-46851204f97c", "indicator--21775022-9158-4622-b67a-c7970bbb3510", "indicator--3830d1ec-b13a-4960-a94b-8ec083088834", "indicator--13ea59e9-4b94-4dce-8d54-5dfa4b416c47", "indicator--f9081a9c-4b98-4e01-9cf1-d16f8b967e48", "indicator--b67a88f1-a9ac-4872-99bb-06f401aa86be", "indicator--11e54f85-2ac9-4404-a1b1-50fc7f51599c", "indicator--ce2f7d1e-6115-4a30-8db2-88f059d83d05", "indicator--a2f1720f-c474-458e-934c-e44d48afe83d", "indicator--a747292a-4ba8-4483-b0a1-bf806c4a8c1c", "indicator--7b399256-d56a-4140-8abe-a9329cd00159", "indicator--ae45a732-479a-4135-9049-72d04d70bee6", "indicator--3505a866-a714-4912-9006-4e551c997e8e", "indicator--64440766-1fad-4517-85db-9601f1c61c79", "indicator--fe8be432-405e-4396-902d-e4f4791ff83f", "indicator--83b7cfb1-36df-4f10-b327-2560e4a47550", "indicator--09ef68ec-d56e-484b-ae80-ccbe32216768", "indicator--7510156f-2624-4826-8426-c9a1f230bc3b", "indicator--aec90362-123c-4ed7-b8b2-f0f645b99181", "indicator--60c7f112-4631-42c7-8c90-c63a58a74fd8", "indicator--f5ad87de-9bc5-4f91-aeef-e97d1ab827f0", "indicator--fbc8e157-36da-44b9-b1bb-113766498f3a", "indicator--40ca7657-6fdd-4ccd-a7de-443161ee0613", "indicator--0ad95e30-531d-4ca1-94a4-c4f48c2b8559", "indicator--17545903-58aa-43f0-b2a0-c6624191874d", "indicator--f45a3c64-a623-4019-9a06-597668151227", "indicator--4f9e19a5-c6bf-4ece-8e1f-6aa10cc6cd96", "indicator--af71958e-7416-49c7-8e3f-a5c4ef221a05", "indicator--e806d888-b019-47d3-b1d4-d0b56ed684ad", "indicator--03a60037-e5cc-4281-874b-8fba720fd535", "indicator--3d4eda69-b5b2-464d-ad5e-f9928c8edf82", "indicator--ce855c04-4505-4aa4-9792-386d68bd25d8", "indicator--59505472-d3c2-4b31-abcd-23f022a54b8c", "indicator--44ad9d8a-d8be-4044-a202-3a9fe0d83c8c", "indicator--51ead6f2-4c30-4251-803f-5e37f4f8e2cb", "indicator--67cbd033-48fb-426a-8c13-9adaa2a12479", "indicator--16b99293-b9df-4a83-b33b-dd254c38f54b", "indicator--c1ac8b93-9c85-4afd-91b1-2edf68a19bc1", "indicator--8ebf3b48-5953-45ec-9922-6602f4b30ed7", "indicator--4ff7763d-1095-4354-aadc-1357da79702d", "indicator--f7a67193-cd7f-45d8-bce0-e0fe25fc1e67", "indicator--53324e21-d4fb-4432-9f23-8bb5eecf25a5", "indicator--a47df8ff-b1b7-4584-b849-f1e46c356c6a", "indicator--a215bc70-7c20-43de-97e3-fb631739fd43", "indicator--098297f2-dd68-4eda-8ecd-1d50c37803a5", "indicator--39aabc45-9e8d-4018-8923-d45a1fe64c3b", "indicator--8c8d0b7b-e22b-461d-8926-d175bc64125a", "indicator--4deeb5f6-c476-496b-ab67-ce5909018cfa", "indicator--107e3d15-45f3-4d8e-bfcd-140ad62487f9", "indicator--d7a7da40-8e72-4661-a552-ea41d06624f4", "indicator--e756e8df-0662-42a6-b334-20700769a9b6", "indicator--273f0f82-a648-4640-baef-ed53cdafbc24", "indicator--db9af2dd-2edf-497e-ba47-cdf1cab803de", "indicator--fd252aca-ff2b-48ef-9d3f-b50cdd0bb1ac", "indicator--fd7e4f5c-38f8-4b46-9db1-3379be5cff86", "indicator--98c5d2df-2b1e-4307-8455-da92a357f0ea", "indicator--7dd09bd7-53f3-41fd-a470-c386921f7de7", "indicator--1471cb5f-86dc-4687-950f-a96018b69668", "indicator--4ed8aa58-a4e7-4716-9080-8845b5cf0b50", "indicator--ffb9fb81-e826-41a2-bd58-b871c06633d7", "indicator--30a77139-645f-446f-a519-81b77ec226a6", "indicator--40f0f4ea-daba-4116-ae47-e54e7d29d871", "indicator--f3fc91e7-90e7-4298-b4ef-9ba91e1b83ae", "indicator--a208cd1c-5279-4700-9e50-be897d65ec52", "indicator--5dafd516-9499-452a-99ba-7c266913c103", "indicator--62db88fe-468b-4649-81e1-daa4aec49ee6", "indicator--a76fb927-eebb-4319-9e2b-64c0b4dca7fd", "indicator--285dcc64-9319-48d9-bae5-0926e97c138a", "indicator--f950a1c0-9c4c-44da-92dd-d59a1f2e6586", "indicator--871364db-d054-4d95-8362-8ab52fdd25bb", "indicator--6375367e-4ede-47b2-ab90-b0eb158c4221", "indicator--a39fe6a2-d5dc-4c16-9615-07a34fa1febe", "indicator--a65a4601-b47c-4920-9d73-4abc1807c9c7", "indicator--7b84c44a-e4c6-4c80-8245-362e4e5146de", "indicator--82f77542-75e8-457d-933e-758795a5de6b", "indicator--fc52aa55-fa68-40de-b29a-0f140aae19bc", "indicator--3c3b533e-133a-497e-977b-7c16e33970c5", "indicator--18f67099-6dfe-48ec-89f6-e85361870c60", "indicator--72e935f7-3949-4e91-9ff2-9d37413100d8", "indicator--f4664bdb-5cfe-4e40-9796-58f175b40780", "indicator--c2a98620-e55e-48e9-8138-b89af67b2fe9", "indicator--416d5864-49a2-4e98-9433-4818bc82099b", "indicator--eec7c0a5-4683-4f65-830d-969ca974b825", "indicator--62d09cd8-f14e-44fc-9526-0a1c207fbcf6", "indicator--ff5a911d-8095-4d28-ab6e-b4ae147b0fb1", "indicator--9f621645-8f17-4bf3-aca7-4bfa41cea21c", "indicator--4c43348c-5673-4a6e-a5ae-43ccc77aa7ca", "indicator--2b770b0a-03d2-440a-9429-4744a0afdef3", "indicator--ce623ed7-6276-434c-a3ed-f5f087483e73", "indicator--dc71773e-cc53-414a-ad4c-c052e56eea57", "indicator--1fb16aed-f4a1-4568-9ff3-b68b926871e0", "indicator--f7f321e2-6883-4fcc-a727-fc3136c1cc37", "indicator--e8ea4cc5-d174-45d6-80f9-7c794af4daa5", "indicator--1fc6be1c-aa7a-4b6c-96eb-cc50673556a6", "indicator--44c01ad2-9e82-4e76-8e56-1099b825b437", "indicator--50f00be5-5421-4364-a697-7a7d693fd015", "indicator--917e7e31-a30c-48b5-9ce4-acb767f0d320", "indicator--319d7451-b462-4314-8127-81ef42d30939", "indicator--43efd16d-72ba-4d81-bfc0-e2518b8ba615", "indicator--5f01e70f-ed09-4e29-b70f-d3bb9b0294f9", "indicator--08a73136-5cad-44d8-841e-fda7155502dd", "indicator--e6533cdb-1786-40ec-985d-fc487b876432", "indicator--6ad76056-2cbb-4459-97d2-6b6580f75f70", "indicator--2bff5d79-ad5b-46fe-8666-03606dde30e3", "indicator--fe7a6440-8b93-47fb-9135-01075e03d366", "indicator--faf60b17-a46f-4978-9498-33f44f113936", "indicator--86b8cf49-d95a-46d6-8176-570783ebaa5c", "indicator--67c41808-81d4-4a26-b1aa-2e321ac44b4d", "indicator--6f66c677-3f53-4aac-89ed-4c3407e0eb79", "indicator--3fc58680-5707-40ef-b3ca-93ac20886e63", "indicator--cd8378e1-f0b6-4897-aded-e46e649623ec", "indicator--a520a2d5-6513-42d3-b7c5-bbc9daebeb50", "indicator--04b16aa5-6945-4242-afd5-1c6482df2578", "indicator--7847f63a-7e95-4201-a74a-9d51b3708591", "indicator--104b5095-ab69-4038-aa34-463935d30742", "indicator--831dfa37-3677-4e36-80f2-c3f438c1518c", "indicator--f3ce6233-2ccb-4989-9aec-811c8d82bcb3", "indicator--d1f25061-594d-4a0c-9954-2c6c62bc9546", "indicator--51e1451d-d82c-40ae-a02d-d132881f123f", "indicator--52cc8b86-0d95-4cd4-814c-5905c7729059", "indicator--497c668e-79a9-4f8e-b037-fbe80b4eb2d2", "indicator--ea2b9df6-66a7-4f65-9636-6ec88d628950", "indicator--4f205b28-2a58-4007-9051-507f0e2f22e8", "indicator--3b32d2a1-591a-4563-904a-4592ad58eb35", "indicator--68524d6f-4a1a-4602-b57f-12ad2a863ce6", "indicator--359c05f7-728b-45a7-aa93-f8dc464206d8", "indicator--a54ec536-8a42-46f9-a64a-cc8767b2c0ed", "indicator--772a271c-2075-4130-8f8d-59d0fc6b1f21", "indicator--4196d362-ba82-4c46-99f3-3e90ebd08ef5", "indicator--1ba653a8-f87d-4e3f-899c-4c41f459b923", "indicator--129cdd81-9658-44cf-ad56-7c770009b15e", "indicator--c6fdd219-a863-472a-be34-1f7ae6cb551d", "indicator--f045751d-85f2-4dab-aff2-54382dfab116", "indicator--36242286-d722-40db-9ccb-75bd288f1dfc", "indicator--30414293-29ad-44c6-bc1d-0a25aef5a552", "indicator--f20c06c4-beaa-48dc-90d0-b43967ca62ee", "indicator--60d84fd0-9c54-4287-ad44-81bf70c909e5", "indicator--063e70a7-55e9-4dab-aa20-be97f3385887", "indicator--0e269ff3-560f-42cc-8e86-91be60c892af", "indicator--1d07130e-6df4-4a73-b378-7cabe1bf8fbc", "indicator--a929508b-5212-49b2-99f1-553f33501334", "indicator--94a96195-ab25-4642-aca5-0cf34739e7ad", "indicator--ff125b19-2ce5-4486-8540-f72b3a11ab19", "indicator--8dad3be6-a479-45fe-90fe-56dcb5caa622", "indicator--fd73fa9b-a3d6-4918-9232-1adba62fe504", "indicator--f7391d04-c067-444f-84b8-223efe02efef", "indicator--d27417ff-4f33-4f9b-9d95-5b362d1164de", "indicator--643d4264-fd59-4f69-8228-cb988cdb18a7", "indicator--6e32ed23-f492-40d9-947c-c4b5426e7889", "indicator--0ef7280b-a82e-4039-9a4c-c4ac247b7b8e", "indicator--8fe50fe4-a51e-46d7-9b33-6c669385cf51", "indicator--fc8d0bcb-2e4f-40e1-9f21-45dfdb04f8ba", "indicator--88b99703-fc2c-4386-abaf-f2f3c4d9e3f2", "indicator--06ffc632-6d2d-44c2-9358-278b89ec93dc", "indicator--54074380-05dc-4642-922d-375e3373a8a9", "indicator--0a252413-ec57-4d4b-89db-7051d49ffde9", "indicator--0abf2e5e-7edf-4794-8924-5abc2f2b2477", "indicator--c2b14b41-e17e-4302-9b7b-8d36ffde062c", "indicator--5072b290-2192-4011-8b97-58f2e07914cf", "indicator--65511ef8-eff2-49f0-a346-3efac1e0f454", "indicator--7b694e49-a447-46c7-bcca-abfe4b474785", "indicator--3f2fd24b-dde6-476a-9773-3d50236bfde5", "indicator--c221f12f-f2fe-40e5-a712-197f4fa73e46", "indicator--d5c9c0d9-1e04-489b-8644-08306f5e78f4", "indicator--4d4b8fb3-a277-4868-9563-a74cb276df71", "indicator--28bf9fa4-76dc-4989-a87f-6e276f116505", "indicator--0fedcdfe-95f2-41af-97f2-5be8c5936010", "indicator--a157a5b5-6efa-47f1-941a-9c0c9b50a47d", "indicator--46144d19-8fdd-42bc-a884-191a1a15a8e3", "indicator--031d3650-3137-46eb-b57c-a0e78033ff84", "indicator--7a16d360-7521-49b7-b4ef-bb6bfb2fa37f", "indicator--93d5f7f9-8b57-4f31-86ce-91565f3575fb", "indicator--ed84474c-8a94-480e-884b-4a3df5a92ec7", "indicator--a2cc923c-2f70-4f5d-b30f-15251ecaed6e", "indicator--292f8759-934b-424a-872b-845dc41b0d4b", "indicator--ddf28e2d-20a6-4000-83c9-791724a2345d", "indicator--f48725c5-bbe8-467f-9a38-76053f3d9203", "indicator--d0d60802-ce55-47c6-b239-68b01e9fd2e6", "indicator--3c2d5c75-bd74-4f59-9aee-f650beffb922", "indicator--fb7ab5fb-41af-4162-b1c8-a961c5a0937e", "indicator--61c70ae7-998b-460b-93cc-2b833b74f5b1", "indicator--3b972759-bb6f-4df4-96b0-7ce8cc63205b", "indicator--222d8673-ac7c-4f96-b448-df3cf7e97484", "indicator--880deaf6-ad98-4339-8d44-53b542b9f2d4", "indicator--86f105db-fa6a-48fa-9662-33e917749c60", "indicator--4da97ba1-9162-4bc0-8149-983f447a477e", "indicator--e4237f60-9a52-4a86-a87c-5afffcfa6119", "indicator--a8eed633-e44f-4f7c-9eea-2d4d5892a11e", "indicator--b4d96e02-3e95-448d-8bc7-1ecf68181752", "indicator--d1335401-7351-48dd-9dca-9a50f1c90b23", "indicator--08141c54-2e0a-4e19-9215-f9c7edb162b0", "indicator--2166963e-01c0-4f11-ad1a-c3cc6870b7fc", "indicator--5ef2d2f2-f059-4375-b08d-9a7f223ba2bc", "indicator--5301093c-02d0-45bb-9cd4-45feda46d574", "indicator--e8d76f09-321f-412a-b228-75c37d619888", "indicator--21b74853-42de-4ee1-a887-ff28b7195234", "indicator--8916d1da-3698-4c83-bf0c-291c70d5c864", "indicator--c6e785ad-cb73-441d-97f8-56dc129a261a", "indicator--7896ae20-c115-46be-b070-4ebb864176b9", "indicator--94ad7bdc-ed75-416c-88be-dfb6f57590f9", "indicator--007cb8f4-4655-44c1-9255-e313ea48c228", "indicator--5b160d72-83f6-4f77-bea8-715a63c7e3cd", "indicator--cd2e288d-af05-4ae0-9e19-1afb43584fbc", "indicator--09a31f3e-cda5-4fbb-ab39-54094840780e", "indicator--416d7e2f-f884-4d37-ba0b-30ca1f218a2b", "indicator--aca0f130-8287-4a24-9d52-f19df79f9a41", "indicator--0e805950-c3f3-4287-805e-b47d40e9e2c3", "indicator--2872fa11-c89c-4660-a3e3-9822ef4a2b7c", "indicator--b0fb853f-ae86-4a56-940d-e18e4002375c", "indicator--47c6f79d-5528-4197-9ed7-9f9aa9670772", "indicator--10661293-ee90-42b7-8401-3ea15663acfd", "indicator--46592e6f-a5bc-4a05-aa30-882bacb4353f", "indicator--ce618b68-74a5-4347-9f2d-d89eef6381b6", "indicator--74ac95c5-bc2e-4e59-b7ba-7f5114382f0c", "indicator--d5be1638-dc6c-40e5-9b4b-eba9a5dcddbe", "indicator--e116be24-8e71-43a5-8973-15a1588845f0", "indicator--7d6e59e7-844a-4cbb-89da-4085293b42d4", "indicator--62110594-fd7e-4808-b39a-cbcb57da06ca", "indicator--889c71a2-cfb5-41e5-96d8-ba4d3f26b5c9", "indicator--15313bf6-ce8d-4367-a99d-95e84073e8d5", "indicator--06910e74-60b1-4041-84ca-4996e93830f5", "indicator--5a18a759-5672-4ff9-b397-d4fe0ff96573", "indicator--762acaff-18af-4353-abfe-1315414c1322", "indicator--94f35b50-a532-4108-a64f-841e528718ec", "indicator--c8c30f9d-93da-4f16-9e18-1c9e3b416317", "indicator--b85493fc-d906-408d-99a1-0171c82ffdb8", "indicator--c25fe55f-42f4-4d32-8f72-530a0537abca", "indicator--6bd21742-8736-4306-b974-ce9cf48bfb9a", "indicator--3092cd82-6901-47e0-bb5c-691c7a2e6b0c", "indicator--bd88bf3a-f67e-4d39-90d8-fd5da6567ab6", "indicator--76aae480-1c03-41f9-b866-b6fc19a70883", "indicator--c0d2b3aa-0c17-4485-96ae-f1cd793efc88", "indicator--89f4f348-130a-4c03-a883-3633db7a8cb8", "indicator--9336ee36-ff95-46bc-996c-03920d1c03f9", "indicator--dcf8e3a4-03c3-4b3b-a98f-4ce7b3678f33", "indicator--c5e6cdba-c062-4c7b-a10b-1e19d88654e0", "indicator--162f8a5e-e5b1-42fe-a16b-f824ac496973", "indicator--1815a100-0825-404d-9063-2c1bf0d704d4", "indicator--0684d852-52ac-4927-8485-43c5c10787e5", "indicator--ddbe121c-a611-4cf3-b0c0-9f3b61ce02f6", "indicator--81f172b6-0635-42d8-a9fb-ee3133f840ef", "indicator--5868f911-6dba-45e7-afac-da4905242c8d", "indicator--21ca29f4-89a6-40ee-8d20-3779e494b8fa", "indicator--41e6bad7-edde-4b4c-ae8d-15d9dbe382ac", "indicator--165ada39-7d3e-4db9-9b05-6b5fcc19c42a", "indicator--d6826674-776e-43db-a80c-d7a0d08f827b", "indicator--520e9f85-6296-4f2b-a570-ddaa55e5b2f3", "indicator--3cc1cc03-8e64-444a-bac2-7c35493c0e7b", "indicator--238f2c5c-438c-4102-a1ff-3da07ef7711b", "indicator--ea08003f-a00b-421c-8d2a-56fb8f7e2342", "indicator--0ee24686-20dd-4b70-a444-951bd64f297e", "indicator--5ed9ea68-7067-46b6-8377-2ec9389eceb9", "indicator--6a456071-63d4-4de9-b5b6-a599685d709a", "indicator--d82c7026-ffc1-4a09-a036-009a01affd8b", "indicator--39105029-94f4-4e01-92c0-8d25f22a0249", "indicator--3f1ae724-7b8f-4ed6-b1ae-3caaae4e892d", "indicator--fd3c16e4-e873-4449-8465-1ae6636baa83", "indicator--6aacc7f5-b2a4-4b7e-a156-e862bd123043", "indicator--faec48c8-0920-45c0-8d9d-8afc375e159e", "indicator--5f0922fc-0708-4df7-842b-733f4eb1fd71", "indicator--f26aefc4-2238-4b07-ac90-b4488bfba389", "indicator--616d67ec-5075-4141-86a3-b49703dd57e3", "indicator--7e7349f4-df5e-40b5-a824-7808e1a24b7e", "indicator--c17f4048-9126-4ab2-9551-5f096e91d441", "indicator--4f0f6fd0-5dc5-4001-b5fe-469fef82d3a2", "indicator--00df5805-f576-4ee6-b6d7-f250dd16d40e", "indicator--0c07a31f-0c48-4f25-ab46-225d020b1d2f", "indicator--7a8bd004-137f-4765-adde-6da70eebbc14", "indicator--57605418-d08a-4a5b-913c-581f45e24c1c", "indicator--2b277526-6040-4cfd-abf1-70e6e7a7c9c9", "indicator--56a49c33-d49a-4e68-83a4-3ded719bce46", "indicator--8256ec09-c735-4307-aa4b-151371c8a282", "indicator--acee23b7-2e27-437c-8c4f-708ba6b6da52", "indicator--6dc8acf2-6138-4d40-bc7a-a2fb7f4c3e0e", "indicator--409a4a08-5509-4807-9a16-3375a0fae01e", "indicator--e1bb3f72-9a88-4156-b99b-df1069063e26", "indicator--32e21de6-04c4-4157-9bdf-d704ed2e88b6", "indicator--470df288-72ee-4485-9add-82fbfaad40f1", "indicator--fc1f5983-2db4-4da1-b6be-ad0dd92f3339", "indicator--9be12291-f05f-460f-965f-adfc7b94a7b1", "indicator--cfe1696f-7c60-4b73-baad-18aca72a6618", "indicator--6d70921d-0624-4b70-9100-ddf2d946a091", "indicator--05c33218-cb59-4fac-a9ab-b38ce713d09c", "indicator--3bb1459d-0cdb-45fa-88ba-942713a14dba", "indicator--e58233ed-6276-4f63-b830-be1b52de060a", "indicator--757c04f2-a57e-4977-8561-f3ef820a5b3f", "indicator--3c4f7fba-08ba-457c-a492-0db3069f1515", "indicator--a56b7189-e861-4e59-8411-e4315aa8db3e", "indicator--3568aaf6-b192-42ed-b4dd-27fef1c22faf", "indicator--ed445e81-5b18-4890-b515-9aa1ceebd190", "indicator--44161ad5-442e-4ba1-a234-f03bc90c4fad", "indicator--7790b64d-d8ed-479b-b6d8-adaf145354fc", "indicator--d572982b-fd37-410d-a37a-e99d81bb7ad8", "indicator--5d5178ec-ab54-46e6-a0a8-4dbc4f482d33", "indicator--89194c98-9cde-41df-a799-f62959fd735a", "indicator--4b79f105-d53d-495e-a30e-275a90277e24", "indicator--574e9c53-3f32-457b-b8a9-28c6778faea1", "indicator--6e1ea593-348e-42f1-9db9-3e23c7dfb282", "indicator--a156eb27-a34a-48b4-af2b-931907dc67b1", "indicator--eff700a0-2fb3-4cba-a943-03e677e157b7", "indicator--ca84d8f1-a427-4478-8edf-f73e9e57dd5a", "indicator--f4c85a85-bb0c-481c-ad3d-dd47d031b01e", "indicator--7556e972-c00a-4fa6-916b-391a8d379164", "indicator--d14e5c6b-ac20-4794-a4eb-4277e79c2b3b", "indicator--9d2c7607-d147-4ede-89d7-25da86c4c86f", "indicator--daae4ad2-62b0-40ca-ac7a-d43ecb8193de", "indicator--771a26ea-306a-42d0-8e2d-e121af6fcc3a", "indicator--0df3db92-8c87-41f3-9b88-c7ebe0f9fffc", "indicator--b85da551-1bc7-4ad6-b609-bbf8362be3ce", "indicator--146c11ca-3259-48c8-bf82-b9c66704cb4d", "indicator--288ad076-9050-4f91-9841-9c340ac66575", "indicator--9d3507db-b4c4-4ccf-8aa2-8e215e551f40", "indicator--4fc9a849-9c37-472d-9b81-6127b3596412", "indicator--81e5d4f8-e704-4e58-b92f-69ddd35a58a5", "indicator--bceb8ebb-06a7-4643-923b-9d1a7d6772ca", "indicator--4a1113cc-3aec-4dd3-9bd7-5270163ae8e3", "indicator--ec2572f8-a60a-45cf-97b9-8490a9056d05", "indicator--deda0708-a81e-4d02-94ec-f9985a03f5c3", "indicator--6911afc7-5995-47f1-a905-4b709fd0de45", "indicator--5fbbc791-2b63-419f-8936-0997c08bd0a9", "indicator--21a895d1-012a-4208-aaf7-f973ba51dc07", "indicator--a38ae550-98c6-409d-a69e-48685a952abb", "indicator--25222559-b5e6-4809-b61c-372baae3c690", "indicator--9758597a-41be-466e-8c4a-b37520ed0d05", "indicator--bd49af23-648f-4b23-8afe-eef10318c027", "indicator--03cb34a0-7045-4851-af1f-ec7d0ff8aed3", "indicator--9265d6f0-6901-44a1-87a1-ab595d65c220", "indicator--693638a7-055b-4bbb-a6e8-d0bdd55947ac", "indicator--a79307b5-d8cb-4dd6-b460-041bdd5b38f3", "indicator--8071befb-b875-46ee-b5fb-afa1f4660ad9", "indicator--dd4570c9-9363-4db2-a750-bd8be7bdcca8", "indicator--4aa1e25f-0ca9-41e4-80e5-e3d5b02123e4", "indicator--582431dd-dcc5-45cb-b77b-6d34ed19677b", "indicator--60e32c09-7389-417d-8fe6-b91e34dcbcc8", "indicator--d4187081-9eaa-463f-9182-2e2df608abd8", "indicator--42ac10bc-af1a-40b7-8b17-1c077f972407", "indicator--f5df49b8-9bad-4ff0-bf8a-d919c66035ec", "indicator--a0b8735a-fe2c-4308-9927-022661e67201", "indicator--3ab8e590-b800-4164-8b93-0f7b2222a23c", "indicator--7f1390b1-e374-4c1a-a425-b1c1125cf902", "indicator--074fe66c-dd4a-48d4-8552-f85bd545accd", "indicator--1c330c0e-1f9f-40cc-88e4-417ddb8e97c2", "indicator--1c6fd149-35ef-4ca7-a067-838ca1af561d", "indicator--73928726-7eb5-433c-a2fd-6c8748938402", "indicator--d65f5476-1c69-429e-b592-6c5fba6988b8", "indicator--a02cb1ab-d240-4c8e-8c4a-eaadad9f01bd", "indicator--695638da-9ad2-42a9-82bb-95284d6ed563", "indicator--427d7246-3542-42b4-a74b-551e8c5cc7c8", "indicator--58e04d8d-2c12-4e17-837b-1ffefaf65099", "indicator--8a55d28b-f923-4399-9a08-0136a6256888", "indicator--7ba67ad4-82bb-459d-b0df-a8af9a54fd62", "indicator--b4c789f8-444b-499c-b6e0-9de237d60416", "indicator--e113284b-d309-4bbb-8aaf-d407357de8a6", "indicator--685d8910-12cd-4fde-af80-22f5fe520cc9", "indicator--172ae5ca-a239-4952-8834-c548f049d8fb", "indicator--b48d94cf-5313-4bcd-878e-a04ab9680e4a", "indicator--e03fde99-0f7d-41ef-94e0-111f5a5e6feb", "indicator--c7813dd6-c9ca-4cb8-aadb-688d70d34a2e", "indicator--db2d8627-aeaa-43d6-ac9c-eb3070262317", "indicator--9f462dbf-b3af-4d82-b37b-a66e51acd180", "indicator--be8a7fa0-6c5d-4b91-a2f2-f6bd8ead9bc0", "indicator--8cfbca97-9033-4eec-9156-77978311671a", "indicator--28faae8e-7c89-4405-8ee6-d610d680fe17", "indicator--6e7c23da-fb37-4be4-8610-601a7665a4cc", "indicator--ad4b497a-46d1-4207-b167-1e4c4848e239", "indicator--21e7fe56-34e1-4975-b2ee-89f04c77195e", "indicator--3b25bc1c-fb34-4cc1-a306-f401ee4bc5eb", "indicator--31fe5c3f-519d-49d4-aabb-2470ee459ab1", "indicator--9241a816-1225-406a-b0b1-3edb47cf6500", "indicator--0a13b191-d57d-4f86-9d87-09c606f3808c", "indicator--5f944698-4a10-4a29-819e-03f15dd90560", "indicator--0ba6f913-5407-469b-9013-4369961d013d", "indicator--a3054282-0d0a-4ec2-98b8-f0177df0690c", "indicator--6206a3fd-b5f1-4449-8208-422a79996005", "indicator--1ec9112f-fb61-4b21-9801-1fc2ac9cb4cb", "indicator--db44c089-9d48-45dd-8a9d-fa157a8fff55", "indicator--f3e3ad19-c150-444b-a92d-4e2f3e4e27c0", "indicator--ad410c84-3e90-4013-87dc-7464771ac260", "indicator--a6d4d224-49b7-474a-b6fe-430adeeb10d5", "indicator--70988cb3-df20-4d82-87a9-3abf57fccce2", "indicator--1bf56ceb-e8ad-47bd-a585-6c2025a57cc1", "indicator--82eb7a35-bfb9-4dbb-a376-08e90606df18", "indicator--ceda5572-468c-48fe-bddb-3068c9bd755a", "indicator--321ddbeb-9af6-4bee-8f7a-1a930a4e8dde", "indicator--200e252d-b17d-4805-9606-cef9b182b529", "indicator--a32d68cc-2e99-4b93-a6cd-82bd4c79906a", "indicator--2eb5acb7-4d56-492b-9edc-0f5c5f1e2fe7", "indicator--322167e7-de55-49d9-bc04-4b0d5fc86ee8", "indicator--6329294c-e98f-4f4e-bf62-0e3df1c397c5", "indicator--8af7a7d1-7f15-4ec4-8b88-e588a13153cc", "indicator--756cbbea-6ce7-4296-9559-8d66103b6795", "indicator--2d66a45a-bf28-4c29-8156-f3bb23d2d203", "indicator--ea63da12-40e6-475b-ab14-6162f7810f78", "indicator--20f61976-bba2-4060-bfdf-ee28576468c8", "indicator--7b7ada7d-b74f-4039-88e2-d5485478adb1", "indicator--650da00c-0086-45d1-b34d-70cd0876e661", "indicator--6ff191df-f1b9-409d-90d1-c0d3de8b5c11", "indicator--7e968715-a0fc-406f-a082-01dfa90daa7f", "indicator--b8cc67c4-1f59-4991-addc-3179c161cbb4", "indicator--93fb9027-cb8c-40c4-99f2-e2a8d1da18da", "indicator--66ba9a9d-3604-4ada-a8e5-9ab97d032a25", "indicator--38d55ec6-293e-42c7-b5f5-f3c1b05af7df", "indicator--3840996c-ffc7-463e-b5a0-c751567a791e", "indicator--605ff15e-ab21-4711-8710-1d1f69e999ad", "indicator--e4e066db-8592-4a05-97f1-c7c443632465", "indicator--95013af7-37e3-4803-8ed1-83893428ffbc", "indicator--f941554d-cc6c-42ee-b916-aa93cf18226f", "indicator--ed9d456e-f2eb-4696-b692-33ca4f4f3020", "indicator--15f6dcf4-1300-41f6-a53a-41e534ec5013", "indicator--df7ce38e-5630-4cf8-a6f2-763cbae3b28a", "indicator--eac1f4cf-9153-4a13-9bfb-803e67de9f01", "indicator--58005244-b26b-42be-b1c8-4a3737dafaec", "indicator--2de3dec2-7508-45d1-9a82-bfbee97f1bce", "indicator--d117d5bd-f68c-433e-9d0a-de961bf7d76e", "indicator--15387c3d-4bcf-4798-9ac7-232806632e6e", "indicator--b2d59e45-e9c8-412d-a17a-17f9857c6c24", "indicator--01fa29f4-15ec-4cd2-b84c-0b6a6f5d70fa", "indicator--6ee1f318-73f9-45c7-8307-733e7cc42216", "indicator--f38fdc91-e569-4639-8db0-2e9e4aeff37e", "indicator--5f914f42-c39f-4897-b4d4-43cefd4630ad", "indicator--8a27c77c-ae44-4410-aaea-b3447cd337bd", "indicator--2f41cff3-7275-4e4b-b217-5825c4a4bfb0", "indicator--3b7bb3b1-7180-4552-abec-ac824cf60b17", "indicator--b4b5af16-c1af-400e-9cd0-eece3b8536e8", "indicator--ca6d1ace-0e65-41dc-8b98-9bebd5e55776", "indicator--db4b0e34-d2ef-4eec-b837-5a29bf4ee5b6", "indicator--62e370a2-4e08-4634-bd78-9b6335669135", "indicator--803f5e34-eef6-40e8-b67e-ff883a9aeb5b", "indicator--48624dae-ea9a-4ff0-acd6-04e7813e07ec", "indicator--1b2479a8-57b3-460e-bb62-e0ca33568740", "indicator--e275c2fe-2ba5-486a-a673-b11ddcf3d6f1", "indicator--acd507c6-0b91-4d4f-bc57-2c3dc0909647", "indicator--95916193-9d68-470b-a071-0fd347a52b72", "indicator--ae1180a1-1950-4f46-9c48-961787c584f4", "indicator--b7fec597-4842-4d84-a5c3-4766180a6abb", "indicator--cf758631-1a10-4e1d-8f15-6b673ff1fea8", "indicator--3b26c7a8-9dfd-4013-86a9-28c5bc49c1a8", "indicator--e9ac86cf-c4e8-42b9-a177-0bdcafad47a9", "indicator--354e0f1e-a089-48b6-916c-2bff504ab5ea", "indicator--e45df39e-0fd8-464a-93f6-6d4da6f6c8f1", "indicator--09067d2e-9936-4e1c-9c7f-533a1bebfef1", "indicator--01c10a1d-b959-45b3-a147-aebe4ae2a70d", "indicator--d5455388-b5c9-468a-9cd6-281844c921bb", "indicator--f7faabf7-371e-42b6-a90f-6bdd71a56a76", "indicator--2c225460-8675-4159-ad10-c305f3eb1641", "indicator--cd3dd0f4-4a4c-4505-95f8-162baf0e9065", "indicator--5fcea352-5801-44cd-bfa3-33f4b35264cc", "indicator--d298d33b-8bda-4d20-9ab5-1386fa87f44b", "indicator--a6e90f0b-afae-4716-bbb4-dff17b99a2ae", "indicator--7b78afca-7edb-4a0b-9968-daca9f93398e", "indicator--21d00e71-0ede-4b7a-a559-b0228f9c9203", "indicator--1b006140-e744-46af-8f9d-dca22fc586c2", "indicator--bda63d8f-c5fc-4217-a971-0a69333a1ca8", "indicator--170d3df5-2058-49ed-b486-50274e3c679c", "indicator--88ae4914-2a55-4e0b-bc22-b1b3166a9a27", "indicator--a574932e-fed2-4797-b8e5-440f03e05342", "indicator--d645e69b-c6ed-49ea-8fd6-e86401a34bdf", "indicator--07e9742a-2cd3-40b6-ada4-936b7dff2113", "indicator--bc83e8f8-f548-4cea-bd66-79e1746bd52d", "indicator--58c661a2-269b-4493-a91c-f3506e7434cf", "indicator--ceb419c5-81b1-4ad2-8d0e-16b91a4b47cf", "indicator--de21c8f1-a90f-4cc1-96ac-c69851e776a4", "indicator--e8c5265c-b429-4698-bf3d-c4a5f523dd29", "indicator--a8882477-3137-4e0e-a1c2-44c7f41c2fec", "indicator--f3adc1df-5c46-4b6a-9083-85c7a872f76e", "indicator--db972b46-15b8-47c4-9823-4b4ab4706a3a", "indicator--21ccb2dd-8858-40c1-9d94-8a43f610e114", "indicator--0ac12bba-ac6c-433d-95c5-bdd779891f9e", "indicator--d7cfb855-5854-4669-b3b8-30e3d5cf7456", "indicator--b63dd20a-10ea-4413-a7c8-f9e28a4cedbe", "indicator--60abfec6-5baf-4794-a1f6-5484d47c5fc0", "indicator--8b7160f3-813a-49b4-8e48-c8e2f817c980", "indicator--ab93f750-3887-4a9d-b208-32ab287958ed", "indicator--418fbbcc-d2cd-49fb-8c47-e51f20ca3b75", "indicator--813436a8-d468-4b15-907c-9ce726a89247", "indicator--6cdf8464-3bfb-4f5b-b6c3-9ba7f59a30b0", "indicator--c49f47fe-90be-45f0-b9d7-8d00442d0780", "indicator--e783f33e-daf8-4476-a499-8c60e4d7d0ee", "indicator--e155dfe2-0d54-49bc-a93c-86ee7faeac51", "indicator--fde9607d-ff8b-45ba-9231-f4169441ff9a", "indicator--30976c22-9e9a-4aab-acf5-8f4a4a48232f", "indicator--5cf91875-da38-4978-b7b5-0256728724de", "indicator--d14a1a01-0911-47a6-bdae-9e83068984c3", "indicator--9345b6d8-a5ca-4c6a-9ab4-79b57fdc3b17", "indicator--99f5199b-ede6-44e7-8d1b-ae706b510587", "indicator--64deade9-6f06-4d82-8ed3-fec29c044984", "indicator--65388c23-ab0c-4df7-a260-015919bc457e", "indicator--212c0f68-d7ca-460a-8f00-66c729249202", "indicator--b4039ff6-788a-4c09-b262-c18fb869b6b1", "indicator--81016f1b-d3b0-4574-961d-8f8088449701", "indicator--2f851195-8a47-4b00-ad6d-00b8f20f86e5", "indicator--d106d126-1002-419e-af16-253afed65206", "indicator--4842c1c1-60cb-4341-b7b6-02e433eb6975", "indicator--f20c31bf-d34c-4ee2-bcfb-9b813d942ca3", "indicator--3e685d41-61d6-4059-8119-cdeef495cbac", "indicator--fe27d78f-7a66-4641-84de-2088111a4e08", "indicator--b63bb0a7-10b1-4f3b-b405-15ef19d19e48", "indicator--485d9460-26aa-4bf4-a114-5729dbe8d9d6", "indicator--230fb4c7-b1c9-4a5e-9a5f-91e5927973ad", "indicator--79928063-3cc7-43d1-a895-be5b24ebea7a", "indicator--97c91870-af73-4023-8718-91d63acc0284", "indicator--2bcd1fed-b3f8-421d-b814-2580b1b1c476", "indicator--b789247f-ac9d-4bb0-b5e8-74ce92d9982e", "indicator--078acbc5-a603-4a0d-97ef-59b24fea87cf", "indicator--b31ddd68-fd05-43be-8852-e4ee5aefd360", "indicator--d23e0f3f-646c-4f9d-9afb-62a5b7ccfbb5", "indicator--8d413d0c-370c-4c6b-b183-70a0323ed38e", "indicator--bf12cc3d-9004-407e-b42d-6d2c8507469e", "indicator--5b2b9e5d-e8ae-4cd4-b4af-116918813517", "indicator--43fd9bc7-4df9-4da3-a4d5-1d411e94b860", "indicator--45ea4a16-aebe-40b7-a8e5-4679ea001b51", "indicator--0417c369-9ecc-4498-9b6d-bf85a55734fa", "indicator--ef535d18-18fb-49dc-a14d-5eaaa8e3659e", "indicator--fb0a0143-7e86-4de1-b65b-e9b69c306669", "indicator--187a0995-e3be-48de-8436-9f9240f660dd", "indicator--0562e10c-a094-469e-af53-62c59c2f7760", "indicator--c2b52817-173c-4c19-a758-81a0179410d4", "indicator--422758ae-7465-4201-ae95-0b94c952b029", "indicator--7a9325e5-5469-479c-8aa8-232d3dcebc9e", "indicator--46a149b0-da3c-4621-858d-bcc95a73be7a", "indicator--237fbeb1-dda1-4305-aee1-9ac85a36d21f", "indicator--718672a6-85cf-4736-9614-5175e0bf691f", "indicator--a1326ba6-42c4-43ba-bf6c-063523fcbda3", "indicator--ce895c64-d68c-4b64-a5ed-8bfb24a0eef0", "indicator--9263b45d-c7c5-44da-a93a-abab29a85fc2", "indicator--c8fea101-114e-4e01-b12f-c60833bb29af", "indicator--722a5e68-fb51-467d-aab1-f4097fc7a2ff", "indicator--67cb6206-b5b4-4227-bfdd-3a4f57ee99f0", "indicator--831577b1-c281-4e80-9b71-2a7e80336a72", "indicator--22381769-1f09-448a-9de6-c0fda0dcec45", "indicator--6e5aac5e-e689-43d4-a1a3-92be5bd71a1a", "indicator--6e1a169e-fdb6-40b1-a5cf-b6e533af94ed", "indicator--deb08bb0-aea0-4aad-8cb2-853ad3956cec", "indicator--34ca67e4-c306-45a7-9e2c-e3da58b1531c", "indicator--e8e7d029-1865-4530-a7cb-1ed8d55d8a41", "indicator--afe3485c-a247-4cc2-9dfc-0ead4f9e573a", "indicator--6c41033a-0353-4829-8b67-7dc875dc9d63", "indicator--1b194398-3331-43a2-b69c-7c318b68985a", "indicator--9c7a4613-86db-47dc-a4e1-3d4311e21b8a", "indicator--44d01663-eba7-4cef-aed3-ddc7880d3cc3", "indicator--ce8139d2-afca-4153-a05f-b52aff8abbe4", "indicator--6e6daa7c-09ec-4401-9b96-57d668286442", "indicator--93fd23cb-9a7d-41e0-b03d-b6c32641314d", "indicator--f1640f55-e9de-48c0-983a-5baebea67311", "indicator--6f76f139-203d-4209-8f97-6d6400bef71c", "indicator--574dc05f-4ac3-4300-a3c3-fc2d12a789e6", "indicator--d21ef685-b0ca-4743-9517-054c02ed27cd", "indicator--4ae5d739-d8d5-4413-8d0f-affb36c409d4", "indicator--f35beed5-c9af-4675-8de3-f7f45d424b1e", "indicator--9baf51af-8369-47d6-bb36-8cb5713e3cfc", "indicator--cba00d5c-aa7d-4865-a0ac-2190b702c911", "indicator--15032e01-35bd-4843-98d2-f7a0b341364b", "indicator--f07585ff-a4d3-4ed6-9f7c-ee24c9c7d138", "indicator--1d896b67-e423-4c2d-98a8-e8a5083b5a72", "indicator--8359bab1-1006-432f-9359-92ac8b73aae1", "indicator--95360e1d-9d7c-44de-a86a-341cf44a3c48", "indicator--6fac3b86-7eaf-4dad-a2c2-4f660b89ae13", "indicator--3f05ed81-7b1c-4b41-80ec-9e2707f0a4c7", "indicator--35c2b287-577b-4069-8ee0-132939406951", "indicator--c2da67f2-5a60-4a8c-954e-059047771e7e", "indicator--7a255b6d-1557-406a-8d54-ccec0361d33f", "indicator--4010d6f5-c581-4ffd-bd4b-f5adb4557207", "indicator--d13c7240-9104-4ef2-b902-a8033df539de", "indicator--0128778a-911d-43bb-90eb-6eada472f4ed", "indicator--f1a52389-b237-4bf0-83fc-ab91dae3823b", "indicator--a4c37ee4-d8c1-47a6-9bd0-027758fc9188", "indicator--f9aedbd7-8e5e-477f-81b3-3460d7a360c0", "indicator--86cc5588-3dcf-4be2-8b08-967a7b3d0fb6", "indicator--7ff8b842-bb58-4a83-803e-7cd52ec597f4", "indicator--b7ab2328-447d-4d8c-85c6-4805bd92a3a8", "indicator--aace9be0-e243-44d9-af75-c05a5a632077", "indicator--4ee49a7a-3616-4305-860d-d37bb54a2ec8", "indicator--30c3f983-f7cb-484f-98fd-cca532e3d0ea", "indicator--e4ddbd8f-171e-4ecf-8f6f-8f219ff45e7d", "indicator--689a85a7-7cec-4700-82b2-1886de562e3e", "indicator--9fde2523-8b74-4a92-b855-5fbb0ce71713", "indicator--7806170f-f1cd-4f69-a696-753e4360355e", "indicator--2427b7f5-d2e5-4514-bf57-5f5d0552f220", "indicator--d7c17f22-7b7c-42c5-a976-5c248aae0c61", "indicator--2083a54c-d171-4def-b124-ea4d41eb8971", "indicator--303899df-7dd0-4620-beee-558d8f4743bc", "indicator--d07f42c1-a905-4b9f-ba32-54e3070a37ce", "indicator--913aaca4-87b1-43fc-ba5a-7c203efe168e", "indicator--a73167fd-1329-4a82-bb5f-79c2cd7816b1", "indicator--4fd6826e-099b-47a2-a69e-40d5e70548d1", "indicator--1074acf7-df1a-43b6-a514-cef88533cde6", "indicator--948df6ff-4c5c-4a6d-907f-171ece78a11c", "indicator--6c986fd6-a020-4fe7-b557-60d28402d2b2", "indicator--e83dadec-7f23-4534-b9b1-e1a8dfa985dc", "indicator--af2174ad-1697-4a8c-ad57-c0a7424e813d", "indicator--93e23074-43c3-4bd8-90be-e27bca01e68e", "indicator--6c09cf69-95e3-44c7-a421-6d7b3a5fabd6", "indicator--8a8c2989-92bf-4d3a-83f8-07d58eca1706", "indicator--f80c35ff-f864-45c9-8a3c-9495234a01f7", "indicator--8f31bebd-d880-407f-aac1-9f274cdf079d", "indicator--73997442-921a-4c24-b734-d90908f40b47", "indicator--199fc341-0075-487e-a8b1-772d8d54c72e", "indicator--ea8cfebc-080c-46ce-aaab-5a9a907f9788", "indicator--300161e9-a9be-4b00-9d0b-24ee5e6b3b69", "indicator--f47c9799-0e61-42f8-82c1-9ac33dd57f6a", "indicator--f89e4880-ad51-4db9-b91c-8bf47932d757", "indicator--e93264c0-b91d-4aac-93be-038916427f36", "indicator--d3a368d7-962d-4a0b-8a1d-0f200b53dd50", "indicator--09893ea8-d20c-4bdb-b427-dfa5071164a9", "indicator--46a40595-ec56-43b7-a968-8106b22b00a8", "indicator--5f79533d-5070-4ee3-a8ea-18d23157e740", "indicator--61d9de67-003f-4c7d-9ec1-b8a407e7a68b", "indicator--451297c5-9640-4b6a-a313-8f50e2a25fa9", "indicator--4f97c9fb-22cd-480f-8a1f-0fd9e81721c4", "indicator--e54a4a7f-cc1c-48dd-a002-47fafc0bcd2c", "indicator--dfbb0374-0a57-4209-bdf2-6506d0c0811c", "indicator--de306521-a0ed-4da9-bf4d-80aa3ee7b4b9", "indicator--d9491e70-3ddd-46f1-8c56-741da4f8ff79", "indicator--71ad9768-2154-457d-b145-2f5c666225f6", "indicator--57a1f122-020d-456b-8847-fa6ff67371dd", "indicator--0b16aabe-90be-41c6-8c43-bbe9bee00309", "indicator--e7755872-628a-4c74-97b6-9d4e0f52e839", "indicator--2d97ee82-c576-4fe1-b796-bdc35eafd221", "indicator--5372b678-b8a9-453c-981e-b1e3217630c8", "indicator--9e7c1249-14c2-49a0-92b8-edc3196dab7f", "indicator--04f35cca-45dc-4c49-8dcd-4c6722cb53df", "indicator--78845ec7-0314-4f4d-9ef3-3511d6d52198", "indicator--6f9aba24-60a2-4325-ac8d-cc5dcc382769", "indicator--3f8d45e3-f0b7-4bb0-aca2-829a5365c467", "indicator--7f2f686f-6301-4c25-80aa-65378a5246a8", "indicator--70bd4b5b-00ee-467d-8b68-e12e166efd71", "indicator--5ce4fbc4-7d0c-4cdd-8f20-fcb6fbccc266", "indicator--9c06f77b-94ca-4d32-b7bb-bf82230a67c6", "indicator--76348a8f-bbcf-40cb-91f6-f76d96189607", "indicator--ab36f162-a5d0-4743-ab0c-1dc7faa38fdb", "indicator--77a83cc7-8323-4180-8e14-aec151447329", "indicator--a4a176f7-7d24-4d46-95de-216a844b225a", "indicator--36b79c38-2796-4089-8ce6-5d5df380a09c", "indicator--c0ae23f0-98ab-4dab-94cf-a529421935f7", "indicator--af1ebcb3-e5c7-4ef4-a2ca-64faa0d2f4aa", "indicator--e06eb4c8-2d2c-45b7-94b2-551eb99f5029", "indicator--3f6aa678-95c4-42f7-8f0c-47975f349c78", "indicator--27f7d699-ee5d-42b1-82bb-9854f41113d1", "indicator--009ad5aa-8dd6-4f98-ad1a-1e5f239111ee", "indicator--56f167fe-f292-4696-99f8-0b06d0b882cf", "indicator--bd595d0b-7c54-4f95-b41b-ab53570c8358", "indicator--7611291b-0f01-41df-b531-2458daf79313", "indicator--7f18fb05-d4d2-42fa-8099-b4fc1af15853", "indicator--6c1d6eab-caa3-46a9-8803-668f2f1eec6e", "indicator--5df2bf94-37e4-4ede-84ab-82541194050c", "indicator--74d0b3a7-a894-42d4-82c9-9478e8900961", "indicator--5c4e433b-bec1-43aa-9aa4-5e6b53bc9ad5", "indicator--57cefa67-c000-4e64-8492-d99d747ddb80", "indicator--912dc511-e1b8-4629-8478-398d311bd978", "indicator--7f461c33-1351-4153-b57a-dad1f2af76f8", "indicator--68026963-99a5-428b-bbe9-82e343445952", "indicator--e32744f0-8655-4d98-bef9-d9400a0f8276", "indicator--6ba7cf02-19c2-49fd-b2ff-4dd76d3c53f8", "indicator--458a1a7f-b7c6-49de-82cc-f4ecbf16aac6", "indicator--046634d2-e2e0-4e60-a88f-33f348da50a0", "indicator--34234a7e-f1ca-419d-99d9-38fd7b035b35", "indicator--b25f0337-402f-48be-8355-7b5158270c1f", "indicator--e6508d88-ba0b-430b-98ba-206c4d4185e3", "indicator--bda91d92-de42-4345-b98a-0f4108c066a2", "indicator--56f44791-1b7a-4cfc-8874-d7dafae0a7b9", "indicator--ffba3fa4-58f2-491d-80af-15cb732ff315", "indicator--69bd8ffd-42bd-430f-bf81-219e71c636ad", "indicator--4d17a6e9-2f83-426b-af82-331bcdfd7b5a", "indicator--3f1cb50a-c751-4108-be06-382eef68ec0b", "indicator--c645eb93-be21-4451-91a5-e45a0374d975", "indicator--9c036225-ed0d-40a9-bacb-277ccf038a1d", "indicator--cd329412-9409-45eb-b673-ba021614a81b", "indicator--5be58d34-b79f-4346-a262-10cda2799611", "indicator--8b68b42a-e888-41cd-b73a-62f025b69a9a", "indicator--4a1118a3-33ae-4ca6-8ac0-40e2e9ff8990", "indicator--b5765ab7-65ce-4ac5-af54-758a636bd232", "indicator--b3a4534f-aefd-452a-9c97-e92ddfa5d5c8", "indicator--4dc7cd33-4f9b-4c31-ae8c-4ece2b8ff3cc", "indicator--c8d2723d-98ac-49df-a4b1-4ca291c6c483", "indicator--827d8435-6bbd-472d-b956-04fae2c2890a", "indicator--d0cbf365-e6e1-469b-abae-5e88d1803a0e", "indicator--50e8f0b8-645c-4e92-b79a-ea1a308a651c", "indicator--d73672d6-07fd-4505-b5c2-444b361c5477", "indicator--a9ecdca2-5ac1-4291-8c7c-dd8833532b97", "indicator--8fc52e8e-8f1e-4bc6-9eaa-de5b8653bd49", "indicator--6f2c6b1c-23ef-4900-b19b-72ebc72f088f", "indicator--b6afb61a-5370-4d37-ba77-1d9509efa410", "indicator--0837b9c9-0fcd-4227-aa5b-06a7117821ac", "indicator--bdb3b601-792d-4e61-9969-2adc26840fd3", "indicator--28f2c91b-b23d-43c3-8e82-829338a44be9", "indicator--dbea7c17-359e-4ed2-b5b7-195162b52ba1", "indicator--ee5265b7-a7d4-47e1-9887-9b2997653bec", "indicator--0075b08b-1e61-4c82-852e-92ab699bede0", "indicator--8566c8dc-0351-4f97-881f-40b006043b9b", "indicator--d365334c-8ef6-427b-a6ed-9ca37cfc6593", "indicator--98791fac-f938-4ec4-a55c-101690599d99", "indicator--c30a0041-4d1e-45ea-889b-5d8184c93cfd", "indicator--5785f6d5-2f6c-4e98-8005-5afbd4be75c8", "indicator--98927c9e-5293-45d2-8eff-8c67238600ed", "indicator--62986de7-016a-4ac8-b9f1-548c86cdb5a1", "indicator--b8204b20-cb7c-4d79-b3b9-eff2e499d5d9", "indicator--46121bd6-2f5b-4d0d-899b-7a8584b22ccc", "indicator--f23fbded-a901-4e07-965d-97737b10a43b", "indicator--4d2305d9-13ec-4b0d-a1cc-2358bab78560", "indicator--ff1e5fa7-7a1d-4aa1-804d-ccc96dbe21be", "indicator--e9c79efe-2c64-4676-92db-e46daefbd9eb", "indicator--29cf85d3-ecc1-42b9-8786-3860f665d544", "indicator--06864217-1282-492d-8959-2600f09a1e1d", "indicator--ad2c1361-973c-4d92-8b40-f666f89e7496", "indicator--e2e4c837-dd6f-4d85-a39a-9a9381755c2f", "indicator--015d28f1-2ea4-477b-b849-d52a1c74c040", "indicator--a5c08bc0-4c8a-45ca-8e2f-b109c1cbb1a0", "indicator--84bcd1a4-7a3a-4cf1-9957-6ed577c7e56d", "indicator--ae1cf369-b0da-41b4-82ff-74a8260794a4", "indicator--b95b3d62-a62e-48d6-810d-0046d5370928", "indicator--1d11240c-f95f-40af-ac20-441514b08e2a", "indicator--25fb1393-2ef4-4869-829e-c2f12a550aa5", "indicator--b04ff56a-506a-4dbf-a1eb-7607cb154456", "indicator--8b068ae9-470c-41f9-9e30-459d7d026135", "indicator--0fadf28b-036e-4ea8-9478-ee15f2830026", "indicator--2903f1aa-de2d-476b-8482-8deb4fa2e5bd", "indicator--bcf98079-d3a3-463f-b8b8-f8e86e7156f1", "indicator--65be4438-79fc-4d32-a023-a056f1bcbb87", "indicator--3f97ebfc-f2b0-4fbd-8e87-32991f8376a3", "indicator--57e2496e-9333-4ff0-849b-8c5c740d9141", "indicator--c78db3d6-6472-4552-973a-22e85f4e6419", "indicator--fea4ecec-88e9-442f-a11a-cc69e21ede3b", "indicator--066880d3-c941-4537-86f9-016d7af6ec4e", "indicator--feca5030-d17e-4d6f-8351-6b3ea44bf6c2", "indicator--f0f9b382-bef5-4fe9-96ab-a9cad7ace659", "indicator--3f88a3ab-eb4b-4b48-8677-50bdf5600066", "indicator--dadcfe37-98b7-469d-95c1-37c7a728814a", "indicator--47c7bc21-6b72-42e3-8095-a4776a20ffa1", "indicator--c5b83325-3a99-4b43-9f1e-d5786cda8410", "indicator--b876e752-f2f7-4f96-ae0e-fced3f17ca76", "indicator--af388eb0-df06-4e26-91f3-e3cb055a0e9d", "indicator--e819565a-3144-4dfe-a853-728647c4e00b", "indicator--2b7076bd-a6fa-4732-a575-926a53e20209", "indicator--db03fc07-0baa-480a-9f38-b1961a3a004d", "indicator--aa628346-d934-4d3b-9d8c-ea0e7c83019c", "indicator--5ac8fe61-dd14-4a97-b9d8-0e46ba3523ec", "indicator--6da6d130-9c86-45b0-8f57-716e92bdef16", "indicator--1bbaa594-e6a3-4765-b393-01cecaf2229e", "indicator--f0a1572a-5b3e-422f-aca9-9946637a6f17", "indicator--3bde2c9d-f5f0-4eb5-adf8-57b1b08f5323", "indicator--f3ee54d6-a483-4b22-88b3-be251d5ec92b", "indicator--063c6f94-06d3-4db1-a5e6-db38016a4cd4", "indicator--58d8410f-4f2a-46e7-88d0-5a82794316f8", "indicator--b92b417f-a55c-42bc-84f1-90659942703f", "indicator--f70c6dd9-5554-4c21-b702-09d55fcbeb9c", "indicator--89584831-d446-4ea2-8cb5-036c92b52131", "indicator--d20b1960-1db1-4f1c-ad4e-484ad5b91ab1", "indicator--0624a032-13fd-4395-b651-bd968ee5597d", "indicator--aafec471-a6de-47f0-bf59-35dfe537f6c2", "indicator--c859b4fa-b5c6-4660-94dd-fd3a35ac817b", "indicator--177e1575-bc4c-45a6-92da-844c7c06d5d9", "indicator--177e7860-de34-4637-ab36-62ca0d2018fb", "indicator--9ff497e0-424a-4d71-8b6d-10b3daf80a4d", "indicator--20e5269f-9e24-4892-8d9d-8e7c5cc733d8", "indicator--afb71965-d04a-4dee-9700-65145f57992f", "indicator--91e5174a-59f5-4aef-b487-d7e70e0d5a87", "indicator--45c79161-9d28-46bd-b847-489342a8f894", "indicator--8f48ee71-6f82-4a56-98cf-a9f241aa85d8", "indicator--e609c877-9c77-45ce-ab7c-5eb37c9394e3", "indicator--6d39209a-9cb0-40df-a7e8-812689b6cde5", "indicator--f835e52c-976c-4b67-a735-4e553f558ccf", "indicator--6e74d90a-8722-4bb7-b7b1-c986a1965afe", "indicator--831ea855-c7c1-4839-8a0f-0b9cf619ed04", "indicator--4361e341-53c4-43e8-b579-205cf9f29380", "indicator--8a7cb0bb-d8dc-46ca-9617-da9e8c7e2542", "indicator--05f759e1-b56f-4e7c-a92f-8fcf941c62fc", "indicator--52a18ebc-3f92-4eee-a2d5-4a96743f78a5", "indicator--cd11e2b2-acee-408a-8032-d4bc6186db09", "indicator--9f4d5012-60ff-49b1-870a-43628006c834", "indicator--0f63ddc6-7550-4b8e-a57f-07d947fefa0b", "indicator--6c839fa1-5362-471e-812c-a8ca1563eed1", "indicator--4aa73e10-8fb9-4ab0-802f-5d3d4ce91e74", "indicator--42e20a99-44de-444a-a990-7ca25b8114ea", "indicator--f14b0fdf-e7e8-429b-b9f8-0ca213b3e02d", "indicator--b583e953-6ca7-4231-9f41-93520a153112", "indicator--8e30101e-c240-4988-ab00-d664cbda8209", "indicator--bb5dd657-0d69-4ba4-abeb-dd76072f04ef", "indicator--3fa41bd2-260e-4652-af03-90c05867beee", "indicator--de6425c1-802c-4605-8ecb-32c5e93eab11", "indicator--ffb8e180-db68-44d4-bc4f-bd24cbb42091", "indicator--8b0928f6-2c10-49c0-ac45-9cb77be338e6", "indicator--5a08fc28-f529-41a6-af86-fa0185ee1cb6", "indicator--44d623c1-c620-47d1-a23b-2df0c7e65792", "indicator--eaa4c7dd-49c7-43e7-827f-ab4419691ad2", "indicator--d6a344a9-eb14-4c21-9c18-c442c468c9bd", "indicator--465edd58-86b2-4604-8ab2-3fcf6a652ea6", "indicator--79196a50-940b-4238-a7e8-9eac08a27e68", "indicator--701a1e66-8e21-49b3-913d-b0ab41450f8e", "indicator--e2a4d05b-376d-4d29-bf7d-23dc4c7ebdb7", "indicator--c2b3f232-f0d8-45ac-bd8e-71ed2e1386df", "indicator--2f3110b2-ca21-4d80-a9d2-b9c523a217f6", "indicator--9a883850-06c3-403d-9ae4-6f9b695d4ad5", "indicator--aa63381d-5fba-44b4-bd48-285ddc0012f5", "indicator--5ac7c050-7c8a-4222-85a1-c8444c491480", "indicator--e746b5e5-383c-4fc2-a761-bcc7b0ea58f3", "indicator--f08369e2-5f85-4a3e-8f4f-ca45756ae1bc", "indicator--6b0ca499-196c-4a40-a683-baedd449d8ae", "indicator--b58c640f-f45a-4aef-ae65-239458b204a7", "indicator--62bf4e41-34fa-4936-969a-da5669b4ff7d", "indicator--680325e4-aa08-4982-bb25-5f808246ee23", "indicator--e587e439-c18f-442b-9afc-d6da8e59bb05", "indicator--0c15aec0-14ef-4d4f-bd08-3590d3d84c87", "indicator--5c39a831-f2dc-4af9-8bfd-bc00d85e30be", "indicator--2f297332-9940-4274-97e8-539288c655ec", "indicator--a12bd382-6d96-4332-9a7d-79dce840d3bb", "indicator--b5971bd7-28f2-4ea9-ba36-1b3afe23b421", "indicator--ac9a5ae4-e6db-432b-be2f-4e8567e91f12", "indicator--356cf64c-cce1-4342-8c38-887379e023e2", "indicator--6b64fcc2-32f8-4738-bb45-9d8083b62ac9", "indicator--f0b1c10a-2e6b-45eb-ba0a-d56e7d8fad75", "indicator--79f5f6c5-dd03-4a6f-bbd8-8345d91a1d03", "indicator--79d61e93-9572-4680-b50e-56a965e6cdd4", "indicator--4f88b0b0-d040-4a21-85ef-bbc9436821fc", "indicator--789a4c79-7dfd-4ee2-8dee-2fdb2ea93a87", "indicator--85adb523-7110-4f10-bf47-0c544ef8ae68", "indicator--d66c3528-2051-4ff8-af1c-b0882edb66f0", "indicator--5ccd68e3-d310-4ce8-aef7-31d61d4c5b23", "indicator--8c307a51-f0c8-406b-b871-79178eb0829f", "indicator--0016387a-906c-4448-abdc-b082a074c367", "indicator--2572cdcb-5905-45b5-aff2-1b03a51d2fc7", "indicator--93c0aace-c712-4af6-b552-869e06c4ea76", "indicator--6f0bdaed-c4cc-41b2-9d00-a662f63c8f1b", "indicator--afbafe76-5b48-43c4-a58d-03d441fde6aa", "indicator--f7ba4d04-7ca0-467d-9888-032ec3cb671a", "indicator--4eaeac4e-738c-4e6d-a533-ffc9e270f996", "indicator--9c631bdc-6ee7-4420-941e-2c7c48a4c1f4", "indicator--0fcb5c98-f203-4c9e-a7f0-9c39b43722db", "indicator--6db9c447-bb62-42fa-830c-5df5684991fb", "indicator--29588dfa-addf-45be-ae76-85f095f2f3cf", "indicator--e3a6e121-ef62-4056-8a6d-da4712cd9bc6", "indicator--4f82f433-4dbd-4afe-8d5c-2d043daabda7", "indicator--ae221c96-7552-4573-9000-7f74c4be6d48", "indicator--104fa222-2954-4e06-85c6-de29f3121dd1", "indicator--579d42e5-31e2-41a2-b1af-2bb344f60b5b", "indicator--647dfad2-8ab0-42f8-8c51-c66cf35d6c9b", "indicator--238f14f3-7257-406b-98d9-f3535ab0927c", "indicator--dc519bd5-10c9-4f7a-8288-33dd28c411d8", "indicator--740e29a4-5a64-4cd2-8d73-9cd2c83b78c9", "indicator--f6fcc27a-0f8f-4f83-8238-5c064282c659", "indicator--eaf1abbc-ee15-4983-9691-fd665d352265", "indicator--abd3799c-a8ae-4f4c-9135-50e2c7d416b1", "indicator--d54486a5-28d0-4d18-9a35-2269fe0f4318", "indicator--e4ba7eee-0a01-4e9c-9a45-9c0413ba8559", "indicator--5ef61dce-f5cd-437c-95a4-ad8bdc308bc1", "indicator--0b719a7e-d2a6-4303-98e2-14b5794d9a9b", "indicator--f9f3e480-46ea-4a8c-ab51-3bcbab825345", "indicator--0f9c098b-0315-42b2-b266-b85e70661bb1", "indicator--d0905741-a87a-4414-a28a-0bc63f259ba6", "indicator--2c43b633-cde5-4ea8-a495-9a3069f1646c", "indicator--39313a22-1043-4dd3-acee-85640339b4ab", "indicator--8afc26b8-b93a-4b9e-9314-9484f52d5fe0", "indicator--6ac7556e-7715-47f5-a054-df26c530c368", "indicator--22ef9651-1c47-4410-ba91-2847828805ce", "indicator--9f935a83-3b42-4081-92bb-8a1351c57bd6", "indicator--a90a3826-c9a9-4370-a87e-cfe79086bb32", "indicator--eeb51e51-9d67-46d8-8870-8c46decb5bd2", "indicator--f92a2ec4-2a69-4389-ba27-acaeab6d1b56", "indicator--02b669fb-0c7e-4e36-bec0-6b6bbddc1712", "indicator--37913948-5e03-4229-9c4a-c0ef72eef78a", "indicator--b374a23f-1fc6-427b-a092-bb3d10293907", "indicator--4036e870-8283-40f7-acbe-c007b6f1a4b4", "indicator--0fd03881-7356-4d64-a43f-c0878e589866", "indicator--677235c4-da26-42ab-8b89-76ff77a38fc6", "indicator--c2c34e72-0d92-4645-9c03-0fcc00f8dc77", "indicator--4743bb62-f23b-43fa-8b50-b8d6c98bda32", "indicator--c494f265-7b3f-4297-9eab-c0f34b1e5e9d", "indicator--8f8d20d3-2f3a-40f3-a5dc-8d40f35d3ba5", "indicator--e8ab2dc2-e4de-4976-b928-ca496817ee39", "indicator--6e453c7c-1ca6-4226-bc5e-7d03cbbcce6b", "indicator--60c53d96-05b0-4e40-888c-0739129b35ac", "indicator--d621337f-fcef-4094-b5ec-ec659712b8f7", "indicator--647b7edc-42ab-4f3a-a662-de21b8f9ed44", "indicator--e5e73357-5639-4dc9-8067-e1caef661b56", "indicator--2ba45ad3-78e8-47ea-b40e-1b56d7732036", "indicator--d39879b7-a017-41e9-9c2b-e8a9f5b1d782", "indicator--a1452443-767a-44d5-b1ad-ae07bd2c86a1", "indicator--b132fadc-e804-4577-a398-eaa8c2da94ba", "indicator--4f84149d-0088-403f-9a54-ec4fcf8b5e1b", "indicator--b4341d9f-e485-48c8-aa06-e274c07751d1", "indicator--630abe19-5be0-4d16-93da-5f2e01d5377b", "indicator--c3ccb234-27de-43dd-b9b6-1b90314024a2", "indicator--d462f9cf-7b64-4e02-911d-7974afe9f7f2", "indicator--46fef7f6-9669-4373-93e3-3010cf147a90", "indicator--84ced8b3-5797-420a-8866-038d03e904c8", "indicator--c9f5596c-31bb-4a28-a4e3-a361b2724a2c", "indicator--9f0be0cf-fbf9-439a-ba57-3f4039bf1c78", "indicator--697846f0-f79a-447c-b8ec-a7a9bbe2e7d0", "indicator--1feef0b1-633a-4ccf-8778-8c18de716399", "indicator--96aa2890-2aa2-4451-a5d6-5c0c6b1a24cc", "indicator--9cb16e2f-7730-4a64-bac3-0754b1421b9f", "indicator--5465e6bb-e770-443a-835b-24615a384ee9", "indicator--f08d3999-54ad-47f4-b274-7171011ca21c", "indicator--bd9a0ff7-23e1-442a-b272-d51843af36d2", "indicator--9d381c8b-241e-43ba-a906-7cdc8a268c67", "indicator--e8185503-24b5-4476-9a91-c7e7bdce9fde", "indicator--b6fed314-ff84-43f2-8240-986cb1b382f9", "indicator--e20d0a0d-60ea-42f1-bad6-8c57fceb4329", "indicator--ab29773c-960a-4138-96e3-6fcb50dda89f", "indicator--e7c985b8-6fcd-410e-a0b8-ad4ba2c47c50", "indicator--01d1445b-e5cb-44dd-8099-857b02400b29", "indicator--48b10ada-865d-45c3-ae1d-3c0f06a40bc3", "indicator--bf5d47ba-0ec3-4442-875d-70a939067b7b", "indicator--eec7c79a-45d7-40a1-968b-1852a5e395ef", "indicator--097c617e-e454-4b34-a0d9-aa812dd98b04", "indicator--03a93a72-84dc-46ad-80b3-2336718e4862", "indicator--cf3739d8-066f-44b0-b1e6-dd499ce2d5ee", "indicator--58eafa73-b2d9-4fea-ba17-07c4fa665463", "indicator--f1518ec5-6698-4a42-9c81-2d8cb8256f0a", "indicator--8d5c14ab-f923-493e-ad99-986c8fb5c73a", "indicator--51752e62-115b-4eda-839c-4f1949e6a6e5", "indicator--00728c02-1ce8-478e-bbb8-98d56987db31", "indicator--011a202c-21b0-4807-b36c-76be8020bddb", "indicator--bbc555e4-d30c-4810-a99d-bfc56e83ba62", "indicator--fef077ff-d666-4dbd-a15a-177a3a9b67dc", "indicator--44c8ec96-c58e-4f44-b700-3c7fa7e8b4a0", "indicator--ddb58c4d-527a-4fa3-a178-8b2dd64c3e1b", "indicator--0f1ac17b-628b-400e-a7fe-8581d12f63ba", "indicator--2e2df6da-c7ef-4fa3-9710-08f7d98ce2dc", "indicator--9b75b8a5-2b1a-404d-918a-d3d5bb949beb", "indicator--d2ce782b-70fd-400c-8c7c-25b8839bc0db", "indicator--24c748a6-4169-4d87-9144-cff9d10a403b", "indicator--29f3db20-c047-4a2a-9139-b7f72518db5e", "indicator--c3276324-5efd-4063-b8e9-65b1a598d851", "indicator--2a35e875-ffb3-47fe-95dd-fcfb87b6ff00", "indicator--6b2e4150-ac5e-4c97-a886-28ae3dd3e11e", "indicator--c3abab54-96be-49da-9ee0-a3046ec42f80", "indicator--9e57b500-e0e2-4a41-99f7-37d3fe9f3a75", "indicator--e7904343-7b9d-400a-a572-8fde8752efec", "indicator--80652de1-755c-4e69-bffb-9d56f20dcd99", "indicator--5b0ef0e0-5dd3-4397-b21a-8e45a40f10b6", "indicator--c52c5894-286b-4b1b-a097-31ce2fa582db", "indicator--fd723503-a1d1-427d-adb7-b232959e6469", "indicator--315c9457-eb2c-4c1e-868b-7da56b344254", "indicator--1223cc8f-0490-410c-a5da-81db65a09163", "indicator--857f05f0-589e-4a28-890d-677dd3ef43d4", "indicator--2afb59a9-af96-4815-9b9b-5761ab4cdb41", "indicator--94b7071a-2686-4da9-89b0-ecd53406a2e6", "indicator--80157126-0aea-424c-ab0b-2d315fdf046b", "indicator--45ccb3ca-1060-4e1d-8813-768dee010a79", "indicator--e999baa8-5a20-4bf2-aab3-35e44c857eb4", "indicator--4bb92e6b-f949-4fdd-9076-befc3e7dc231", "indicator--12a3ef68-6091-42a9-82ee-d904c3ae1b3e", "indicator--e8405821-6dc7-4aa3-a283-a0db6fb51f08", "indicator--14d3ce75-fff7-47e3-9c52-5181b5e72756", "indicator--0d2cec5e-25fd-46e8-b85a-57e62d65c902", "indicator--39eac016-88b7-4aa8-ad01-cfce0cdc6cb1", "indicator--3711a27b-e76f-40c1-ae28-30378e54edc7", "indicator--6d4f1980-c501-49c6-a2ee-316d4da2aaa0", "indicator--d7a149fe-0f87-48c3-adb8-e732a77a0373", "indicator--20d70aa5-9d53-4a54-953e-333138714367", "indicator--971cf7d1-c9f4-47df-ae32-c1847c8e3e36", "indicator--12c040e3-9228-446c-82d1-cf57f3f04fc2", "indicator--91e27bb8-2390-456e-98d9-e5e59fd24891", "indicator--9f997459-b1ed-4159-880a-62d0b0e65bea", "indicator--51551bb9-727d-41d1-9236-7662818b3881", "indicator--b4fda302-66a2-449e-88d7-4adbc84d0c04", "indicator--cbf4468f-20cf-4e01-bf56-e52c32a08c47", "indicator--d9ed12cc-9e82-4556-88dc-1cbc567fe5e2", "indicator--b26b8ebf-35f7-4a93-a2ee-d1f6a22af685", "indicator--baf93f7d-86d5-472f-9c4f-4c9e33c93d87", "indicator--d8f472ba-57c2-4d94-b375-770009fce553", "indicator--73414bef-ed09-40d3-970a-1a814795ca00", "indicator--44e0ac16-033a-47ce-9cb9-db4ee633f0e8", "indicator--2173a3f2-4944-40c7-83ec-519ce6c88e53", "indicator--923455a2-6833-4333-9e2a-186c8bdc40a0", "indicator--5a8831ff-e4ac-4d41-bc17-3d4ad6af5398", "indicator--c3ac84a6-f33f-49d2-b772-ee539ac2e8f7", "indicator--fe48ebb9-bf4e-4a55-95b8-1a8ad908ac3d", "indicator--3a3a0080-faa5-4259-a7c2-8c813b7602f1", "indicator--86b1db94-24aa-4176-acda-77ef73aec37a", "indicator--6a73bacf-1389-4830-8a3f-9b858dc93b96", "indicator--9d956663-5b4a-40bd-8192-0ec66081d405", "indicator--f053f107-a63f-4677-bddb-483356237b29", "indicator--8784c586-52d3-4d63-8ac7-4a830e37a2ed", "indicator--189e753f-8f3c-4869-a71c-2b032738bd11", "indicator--85a23c61-51c9-4bb6-b083-a55d2dcfc6dd", "indicator--225303e3-73c4-4f2d-b589-f1b0340100b7", "indicator--c1b7a1eb-3c7c-4d19-a392-d89c72e07064", "indicator--eeddc478-f70e-4bf0-8f7c-e27a4838024f", "indicator--8f7a8bdc-e9db-4ec7-a83d-961036c0df54", "indicator--f670893b-ff5b-4c7c-8f91-9c6956ebd66b", "indicator--626e761b-0766-4eca-be29-7dd58c3ae1cd", "indicator--3ab3161a-98fb-46eb-88ec-abafe22964ca", "indicator--47e9fd37-b9f5-48f1-97bc-5968e4b4bcfa", "indicator--6bf46ff5-bff5-416a-bca8-d56b7887a759", "indicator--65913ea2-1f77-4e1a-8416-4e1179f6db10", "indicator--57324fd1-3022-4fa0-bc31-d0502df8ac17", "indicator--9b841e4a-b073-44a0-98b4-bd6484b956a3", "indicator--8653c083-cc12-47ad-b2f8-3e9f66089033", "indicator--7a96435e-82f7-4a65-ad1c-a84e7baa30ea", "indicator--3cf441d9-f23c-4e95-8cc2-1fd72ceb8e16", "indicator--13857845-1a09-4170-b5ba-e9c04344899f", "indicator--4095f84c-1ccf-4e26-a8b4-91095009c542", "indicator--0d20dfd5-69c3-4be9-95a5-176d419e1668", "indicator--47451158-841b-4f1e-936d-62708a85a505", "indicator--68bca6d9-352c-4cb3-939a-3242a6a5e5dc", "indicator--135fd400-95f8-40e3-8cd8-bc21198a4c27", "indicator--6664360b-c0bd-4534-adcb-2506b820a1cf", "indicator--df2ef421-ec98-4169-a532-6b0859851350", "indicator--bcef9f89-2ccf-4b64-9271-00e5965f3c9f", "indicator--2f51c6bf-69a5-49d8-95a2-906b59910b94", "indicator--4b4e62bf-c755-41dc-95fa-7d2f095f8d79", "indicator--7cb759db-cd8c-4898-8eda-b8ee4e9b1e27", "indicator--3aa1a600-8a40-4086-b163-d2b88bf1b4bf", "indicator--5094f6ca-fddb-4d3c-8663-90f942e274ea", "indicator--2ad2a76f-84da-4133-8163-1a0a937a40ac", "indicator--43146a01-0560-4108-af00-26058addbe0e", "indicator--556ac50d-0f91-49ec-a233-6f5ce0fefc61", "indicator--aab00660-57f7-4d95-9642-2848b70e70fc", "indicator--ddc37077-fb95-46bb-8eec-30941e1fe34c", "indicator--f129187c-e3ab-4a5e-9f94-f82728853502", "indicator--f7fe726a-48f5-4c45-af0f-7ba731dc668b", "indicator--7c043ac0-b1b7-4ce7-8e39-d55a88b7b0e0", "indicator--95e57071-367d-47c6-98c4-8a8f2936dbd5", "indicator--73090652-627d-4b2b-9cda-5a625fd9792a", "indicator--74057aa3-021b-4854-96c9-2377c4d0ad5f", "indicator--859d9648-3ed5-4be8-8c68-7e24c5225346", "indicator--f194cb81-b653-4b4b-a15b-df0ee07b2dcb", "indicator--e33770cd-f34b-47c3-aec2-7d93825c45e6", "indicator--09a2ff95-28b4-4d87-bb7d-4d3d3480a781", "indicator--c25bfb7a-06ce-4e28-b749-b3ad28a2eceb", "indicator--cbc68b72-bd0d-40d4-8f01-cb65b8ff8458", "indicator--a6a46fe2-71ac-43b4-8901-ff657eef732d", "indicator--55c98f59-cd23-4dd0-bf9c-efb2a72888c1", "indicator--a27c8fcf-4b0f-4a71-ad11-f27a39cbc002", "indicator--a61547f3-ac40-445e-9c98-73d327f30f2e", "indicator--ddfd60a5-87e8-4377-9af1-19165c93454b", "indicator--104b0196-54bc-47b3-851b-293b9f2fcf0e", "indicator--7861c9dc-2ea4-4ea2-9839-dad561c91572", "indicator--0f132a78-0139-4b5a-a1f3-4044d7e96892", "indicator--fdf0a05c-d98b-4b61-a19b-b79bbf3d1d7f", "indicator--b9a53b71-eee8-487a-b6b0-7bdfbb379e25", "indicator--6f5e01d7-3ea3-438b-87b5-9319b35e15e2", "indicator--d3b2ea9c-9b3f-4f56-b42d-c5074f3822dd", "indicator--e647f9e1-07e0-42c5-8432-a1685aa6d745", "indicator--e6feab62-bec9-4007-86c1-3c893a9230b6", "indicator--930a27c1-2352-4b8c-a937-dddc9d1efc3c", "indicator--b9a9c1c6-69e5-4cd1-a58e-d5fc6b8846d9", "indicator--5cca7406-b4a6-445f-8523-b7ecf90d0b6e", "indicator--6d832564-30cc-4d49-85f7-79d1e70628ba", "indicator--73905d67-0054-4522-8390-a6234a79f4a9", "indicator--b27e66eb-bfae-466b-85cc-b83c82660b8e", "indicator--f2a586ca-a870-4d9b-a35d-b5d3f002534c", "indicator--bcf49a9a-3f1c-4225-a284-a8210efc7b88", "indicator--42a0bb66-f22b-432c-bf6e-78ee599f2d6f", "indicator--177f5bd7-d83b-443b-b606-8eb8e4afede6", "indicator--1dd8be02-f998-41cb-824b-d62c2ac82256", "indicator--ffe4b274-4530-484b-a972-8a28da477143", "indicator--c28f9ce9-c4bf-4bc5-8956-bbe99cc5a615", "indicator--0c4dfca1-0ea8-4a54-873a-76d4b60ff79e", "indicator--412ce021-851a-486f-bd1f-ec9ab92d4169", "indicator--528b6beb-1490-4281-9f4f-ce16bb3fe49e", "indicator--f01610e8-bacc-4ed8-b410-525ee3c6194b", "indicator--cfb0c127-1859-4118-b2bb-99d93193ef64", "indicator--18fd77d3-006e-49df-accf-f5ff1f3b34aa", "indicator--6be41740-7e9f-4675-a1ce-0c9abe8df824", "indicator--17c79f42-d03b-4943-b94d-f8661f8d87f4", "indicator--1517f576-da7a-4345-be03-6943ecc4e36c", "indicator--2f295893-1916-445c-85f4-98fe69633727", "indicator--8d5a4d7c-809b-49da-a31d-7c2acc49ce2b", "indicator--3315dd7b-64ce-49c8-89a1-3bad93d76acd", "indicator--cefde76d-61a4-47b1-8256-a31490eea396", "indicator--81fe0258-7913-48f7-876c-53009a971369", "indicator--9da4c4d6-98f2-464d-8338-3283fd32a489", "indicator--bb4e7872-0590-4e2d-a040-c189286b849d", "indicator--eb720dba-b999-4258-a39a-2128695cc523", "indicator--039c90d2-c88d-4c7d-8799-16a845d328b8", "indicator--a6d42854-cef4-4667-a870-3d5221b77e06", "indicator--eafdcd7e-cbe4-4537-91c5-8e564499f553", "indicator--82108e8b-e93c-4c65-8862-2c49e014c6d3", "indicator--aee127ec-5595-4a57-9700-b3c1a613cef4", "indicator--3b3f2f96-2597-4bb5-b3ee-431cf9d5b04b", "indicator--8b5d99db-8663-4033-8512-52cc846aa68c", "indicator--7b8abb36-7d43-46d6-acbe-ea2bd2b07b7e", "indicator--319096fd-b92b-4b5a-8049-516885d7a3ea", "indicator--927a6851-8f47-45ef-a5e6-6295f7243c86", "indicator--59a832d3-ae65-4254-817a-d39c1521dffd", "indicator--a4babaa1-b03d-4642-9835-05327c7f2dd5", "indicator--7a77f2f2-5c2b-4be0-b24b-505a65a7f11d", "indicator--7c911039-549a-4321-a98a-5362b7b03e82", "indicator--eb3dc3d3-1732-47da-a412-2b0e8ab2c3e0", "indicator--abe11779-3966-40c1-9c1c-05445617d17e", "indicator--64550220-6372-4523-a693-9b7d24b0c2a2", "indicator--f7c50035-cc62-4d76-91bb-e3b398935f24", "indicator--feaef278-82c0-4c84-8a98-26fa2ae0234d", "indicator--f4a2f072-259f-4fc5-8dd8-d0541fb6fe33", "indicator--61c4db1f-ddd8-47db-9bb4-b40003267628", "indicator--5e1dc656-dc69-436f-83f3-410ec33a7c82", "indicator--2390fce1-163a-49e2-8f67-e048a817e0ee", "indicator--9c613abf-5d46-4154-8546-ffc570338cf0", "indicator--6818fb53-c9a7-4ca1-96f7-b8d2a20f3f38", "indicator--3b6df237-f304-47b1-a9a2-ce4c3fb0bf66", "indicator--a6339507-14f5-4e80-83ab-55a560cd0362", "indicator--a6895394-9592-46b4-aea7-fa8cf7e215f1", "indicator--9c5c05d4-1767-4158-96d7-9734286d0a5b", "indicator--a9e2c3ac-1fc8-45f4-b942-bba3df8334ab", "indicator--56ab280a-9524-4b20-8830-74d83f6cb0ad", "indicator--c6f2de51-5fcc-485c-957c-8c2202ede475", "indicator--2c12e6b8-7ba5-4073-9d9a-8d699e909b63", "indicator--7651c3fc-29c0-420c-86b5-41050eb667e6", "indicator--5ff46ea4-57b2-4e8e-a62f-fe38a95860a9", "indicator--4e0b7ec2-9731-4f07-9c6e-7a924e9eb0bd", "indicator--7804bf8f-aad7-4ae0-a5b9-0f77f922f533", "indicator--c70b96d3-0f07-449b-9525-3d035a81cf7a", "indicator--81411bf6-2571-4e18-922b-adbfd8612186", "indicator--8c275461-504e-4bc7-9d23-7abc2b433ec3", "indicator--adcadf21-de9b-46f8-b0f0-dc56c1196cfb", "indicator--f59e8075-64b6-4a78-9852-7fc8a6317af1", "indicator--30c57007-573f-44ce-b2f4-95368deac1db", "indicator--1c0759db-2340-47b1-b873-5b7b48a4a8b8", "indicator--32deabba-aae4-4f73-ab20-0633f2ba5f91", "indicator--06b02685-05ee-49db-ad97-38540b33a696", "indicator--71502b37-388d-48d5-9e1b-74213eac5f0d", "indicator--6b04649f-10a4-4b91-8b1f-e515876ae01b", "indicator--f7fad1a5-3dfb-4646-9938-34df854a03ce", "indicator--11287229-087c-468d-acea-a897adeb7b7f", "indicator--4a700c4e-6255-46d1-9463-1b1a81a7c767", "indicator--f850b0eb-7ad6-498d-a201-c05cf66b7d1d", "indicator--ef8c7acb-d2c5-43c8-85e4-b58e980a24ed", "indicator--51f94fff-19fc-4d66-824c-a07dfd7c2c7d", "indicator--e77d8318-ef8c-42bb-bb81-7a7608ab9ff1", "indicator--c36ab6c9-c4b4-4533-8129-09679dcef9a9", "indicator--f6ad026b-56fe-42d6-afe7-de246ee9448e", "indicator--76ddd68a-91d3-4e90-931d-d3c304780032", "indicator--6ffe1c74-1b46-4d80-9cbf-e6b785bbcc0e", "indicator--79b3b614-2fa6-48ea-ad71-5121f5ae3d72", "indicator--c9af2189-176b-4dee-8062-39f1171c9bd6", "indicator--dfe04dbe-6be5-4db5-a24b-b77a6eca9003", "indicator--c5cdc321-be52-4d97-9d99-fa95f95428a1", "indicator--6b48b8a6-2952-4245-9d4b-43b487c8229d", "indicator--b49eca74-8411-4ab5-88b0-ffad7d3b9391", "indicator--dcf3785d-0c57-401f-b266-803175a41535", "indicator--ae15cfe9-df24-43c4-9c49-acdf3b706e81", "indicator--d8be8c9a-7c99-4703-b393-e4ef529de582", "indicator--654adcb0-d7fb-46a6-b590-704a15e10919", "indicator--b91ad0f7-f247-4a62-9932-315d8a3f3a69", "indicator--36af02a6-ddc2-4fba-ae88-24ca0d5554b6", "indicator--926aea40-b086-4d58-968f-528147a907b8", "indicator--dbcad5c2-1fa2-486a-b803-ff1465a8c0e2", "indicator--a876b524-3beb-4a16-af2f-6c52bd998f48", "indicator--520827e3-dae7-4159-9b33-28c9eaa07703", "indicator--c7aaef21-f2d5-425b-bb10-8073eee1cc69", "indicator--4ed4f7e4-d4b6-4e5b-ad87-8aa989379cc2", "indicator--9a6a40d1-7f47-449e-933a-c1263e4f9ad8", "indicator--e2a58099-c12b-4d82-8aa2-589b21408444", "indicator--f3b32307-6169-4f70-9f79-559109086e42", "indicator--a19b2387-4cf6-4a65-83be-07bfeca47db4", "indicator--7feb30bb-a903-480d-8759-acf02148ea34", "indicator--efd9575f-2aaa-418f-95ba-0f690c16462b", "indicator--3a6dfb72-03d7-45f5-8ba9-fa7d78f728ef", "indicator--7afa6dc5-5b7b-46cd-b149-66fbe3470cd8", "indicator--0f3bf458-5087-49a6-8f81-712cf60e552e", "indicator--808e4ed6-0e39-4f1d-862e-f43f735a3d53", "indicator--89ba9832-0d74-4327-94ac-ce8aaa218c87", "indicator--170b8c82-dc35-44a9-a325-a1b714b49647", "indicator--a51f2a36-0334-4e8a-87ae-9a207e0d4cd8", "indicator--e1388b7d-8886-4b42-91be-98bc6308f2cc", "indicator--3d245ce0-9258-4b26-82b0-1a4c44e3da14", "indicator--f1c49682-8beb-469e-9a86-dc38b30a0ac8", "indicator--7a200603-d410-46f3-88c6-f2f6906d201b", "indicator--f662dc9f-ae41-4536-b660-cf303dd59fc3", "indicator--6cc29db5-19f9-4298-8988-5a1097e7845d", "indicator--3bfeb46d-d067-45d4-b62d-e1f065b6721b", "indicator--1fa6fe85-12dc-4b7a-a57b-c5a59cf470c8", "indicator--0eb342f1-945a-4ab7-a3a5-10f77389de9e", "indicator--b93893e6-6be3-4b88-93bf-cf7d1a6caab6", "indicator--242b463b-ee8e-4ad0-a498-d886c9985cfc", "indicator--d008dbbe-1087-4c59-acbd-5a32976eeedb", "indicator--8926da13-d5b7-4a08-825e-f68b62d7cb82", "indicator--b7669966-c199-42d0-8e40-7bbf190e3fff", "indicator--b2b723d1-af11-4d57-804d-107ef2f4d137", "indicator--ec336328-4f0c-4517-aebd-95685b04effd", "indicator--9b7dde4e-686f-4cac-89f9-77eede50e8ad", "indicator--885804a9-a899-47d4-bf0b-4db7a990fd17", "indicator--afb5751a-2c88-42f0-a5c6-31531fc297dd", "indicator--0fcb6ea5-6731-4135-9558-8d60af5bebd4", "indicator--15d3688e-c8a9-4a72-b529-baabd971de85", "indicator--f2e50e00-a51c-47af-98fa-aa90363478e9", "indicator--861d16e4-fa96-463b-970b-451b9b08203c", "indicator--4b990196-f600-4aff-aae1-ffa10762781c", "indicator--7c141915-951b-4461-8280-762f536d26de", "indicator--d9e25ee6-4a88-46c4-bee8-ad744da5155a", "indicator--ca8d26a4-e3ed-4c0f-b1f1-622876d2731e", "indicator--e2abbb58-56d6-46ef-bf9e-039505048f41", "indicator--aff105b7-e926-48da-a3f0-d1bc643df48d", "indicator--a84af285-13a7-4f5d-b555-df21051d3a74", "indicator--78d16937-627c-4784-96ea-4b40393c56a1", "indicator--f089a9e1-b8f6-40e1-af1c-4eec92cad6e4", "indicator--eaba5bcb-0179-48bd-804f-d53892a23542", "indicator--d44c35b4-1f33-4f6e-8c8d-2a15d8734560", "indicator--dab36d37-d6da-4051-b935-07929606c0a7", "indicator--a1c587e5-f3d4-461f-8549-82ee929e835d", "indicator--eb6877f0-caa3-4b86-8918-870b73f92f36", "indicator--2b29c4b2-9bfa-415e-a67d-5420d09f96fc", "indicator--be8865a6-8da0-432d-9faf-11a5520de0b6", "indicator--9f66e55d-da7b-410f-a08c-4a7c40bcb705", "indicator--17e85aae-3ac7-44c2-b38e-0878bba5f46e", "indicator--f416b81c-66aa-4e9c-9b11-88474b03e5e4", "indicator--0bd552f4-af61-4b12-9b6b-1c98eec1061a", "indicator--c1baf093-0ee2-4d02-9c14-2f06e2aa1f3e", "indicator--13a728c1-dae6-4460-9bff-f4eb28acb01b", "indicator--d94a49d4-44e6-469f-b2fd-a13f2bef3a4b", "indicator--b91dc139-4fec-48ff-b7b5-348fcfa56ed3", "indicator--1fe0b57b-ddcb-4f4b-9dff-99e861a698c4", "indicator--20fa5286-f940-4836-866b-8cf3fead7a72", "indicator--7a4475bd-3a8d-4109-9749-ec91024194e1", "indicator--46635836-d499-435e-a76b-50b57b260ddc", "indicator--6862006f-8980-4284-b5fa-7a6e003a5771", "indicator--e13c6617-98b8-4b51-942a-abfb62d11c0a", "indicator--362eca0a-aecb-4c7c-9ee0-58d970de10d7", "indicator--817a5c51-629c-46e4-b384-0d7e5518f179", "indicator--3c60a5e9-8879-4246-b193-64be518d301b", "indicator--fad507e4-66fa-47cd-b2a0-23226e1dd344", "indicator--7178d47d-07af-4248-9dd7-9823f45bc0cb", "indicator--67bfb718-1b2a-4c5b-bef0-18e952207416", "indicator--a4bead4d-3c25-42f3-89dc-3ab04afe3aa5", "indicator--dd1b2f35-17d8-40c2-93c1-ad82ad4faf75", "indicator--9268c611-865c-4715-829a-3d7588a9b6c8", "indicator--6812b598-d0e3-4f98-9ea2-6d4eabafef4e", "indicator--17724bb1-7e73-4e30-aa2d-1b8d15015d4a", "indicator--7600092d-12d5-485f-8099-1792233571ad", "indicator--3dce6f0e-8fc7-447b-a86b-b22dbeaac98b", "indicator--f1aea353-b1e7-4b09-9691-7c18eb00af07", "indicator--2715441c-fd46-4776-a9d5-973a2624ac0e", "indicator--640de8c4-c0a0-4c9e-a291-5b95177c1a68", "indicator--02d02b33-5146-40de-952b-5e7028915308", "indicator--1f10caef-ed40-4957-9e80-5dfa499b4488", "indicator--c7a1c086-99a8-4828-8a23-d451e3a1a9c9", "indicator--77e2f91e-32ab-4729-897f-09c941d1b353", "indicator--aef60b79-c0bf-4751-96c9-c7a8891fef6f", "indicator--e0755a5e-15c9-4fc1-b97e-9d9eae12d815", "indicator--6d0eeca9-a77b-4751-817e-ae6d0bd0b843", "indicator--c77477c7-22d0-4acd-9b9f-8b53839e76da", "indicator--0ec3c626-3d55-4c52-9051-055123dd6332", "indicator--bb3808af-6c94-4556-b75a-bd7111d3c0f0", "indicator--ebb7a1f0-335e-410f-a516-7f2a0110093c", "indicator--80d51ccf-0c3c-4417-9408-d4baeb6f0114", "indicator--294f6b41-d741-4268-b364-51695946bf93", "indicator--a9457dd6-cee6-441c-8c69-91213b79ec36", "indicator--a0082655-a9f6-43b7-a320-2028542988bb", "indicator--6bd320b6-dce3-4f23-a132-ff7f257c651d", "indicator--0b23e8bc-0f4f-4e80-8280-6aa8b2610016", "indicator--ca106cee-927f-4986-9944-d3b4b2ef364d", "indicator--11811b37-1d30-415a-bc82-117f7dbe3740", "indicator--90300e39-41e5-4de6-9417-2b4ca200732d", "indicator--9da297bf-a7a8-4d45-b0fc-3cda8e20dd89", "indicator--7c63b079-fa1a-4c81-868b-0b89f491896a", "indicator--be53e74b-1422-4d16-b1c2-020153ef7308", "indicator--2db0df84-df02-4d89-86f6-51164c219c60", "indicator--a2283b40-e9c6-4f88-835b-64b41af942ca", "indicator--fdb99939-dd12-4218-b349-00f1e8e3fdde", "indicator--ab4e8202-9027-4d0f-aa2f-f6001e502149", "indicator--7fca86c1-446b-41df-a208-80f8a5ee20ab", "indicator--eec55ea0-c01c-4f71-9e86-cb9d47bb48c4", "indicator--e991bd4c-7b9a-439c-8596-d17cfd489753", "indicator--3525a3c3-c025-4510-80c6-954eb9ef1662", "indicator--31c4694c-33aa-41e2-940d-8a73f4db8f23", "indicator--72e381ba-e4e5-49a0-ad4f-873dd2e6c243", "indicator--cd1c1f79-a28f-4203-b0b9-3fdb7a876752", "indicator--e607d7b8-375e-4d25-b44d-9fe6b2be07f9", "indicator--78aa5978-766f-4741-9940-66b22c6b5799", "indicator--77c28a33-dab0-4e0f-aea4-8c2f864435d3", "indicator--bda554a2-924d-46b9-a549-2def088ee765", "indicator--554ce0d3-ea1c-49b3-8482-d510c3621332", "indicator--ca777130-a265-43f3-b889-7a58d2714a12", "indicator--b5ef4b28-be51-4f73-89c3-c7b57e1f0372", "indicator--a49d3864-1f43-49af-9028-53675463a246", "indicator--003a4aeb-534e-43bd-b1de-ba4041b405a9", "indicator--46750f70-d28c-4464-8da5-9df24f5eb2fa", "indicator--1731da33-a2be-4c98-98c2-7309d7a9a584", "indicator--20b3a30e-1df5-488d-bba4-1d3999a7a0c9", "indicator--f0203298-7313-40f7-9be0-81cebc01851c", "indicator--3e8c72dd-ca8b-48e9-911e-b8cf7bf3c730", "indicator--b098071a-4b2a-4efc-ac6d-cc588feba844", "indicator--42c15ee0-6726-4989-abdb-8f7b19bd1048", "indicator--373b91c8-b6c5-4597-8c0c-373213f715a9", "indicator--22bc9c87-d246-4786-a5ce-f2f7179d99da", "indicator--7f0e1106-c397-46f9-aa85-bddc70a2c615", "indicator--a2387cbe-8c28-45cb-982e-8d552dabfd07", "indicator--e8e10848-4f0a-463c-87db-023b2e29648c", "indicator--1970a054-1eb3-4de3-ade7-3f4f8334734d", "indicator--85649418-d012-4a43-963f-ea3e51860f5b", "indicator--433b890b-5a5c-4e68-8689-9dafe2e22c9d", "indicator--1be25896-fd61-4c85-9092-fd2451ad448b", "indicator--afefb457-be33-470b-a2c8-103789b895e2", "indicator--b4ff2498-23ef-4dfd-8f4a-7df3d2978024", "indicator--31e0e59f-bd89-458d-bdae-2f4b4e9ced8d", "indicator--aade96aa-f120-4ff5-a5a0-0d3df46bc0bd", "indicator--57e1d999-97bb-443d-a132-bcc3909e3838", "indicator--6c7d2da0-b9bb-4294-ae78-5a344a867926", "indicator--7aa539b4-78a1-451e-95bd-82f746ef3dfe", "indicator--37b45b7c-ba6e-40ee-981d-58afd5c6b3e5", "indicator--83cb5f37-4b8d-4fe7-8614-1f392049d316", "indicator--697f4d97-9326-46fb-a536-7e465e84615a", "indicator--a7e7ca2f-686a-4ac0-b172-dfd4faf062e7", "indicator--9b3c6c6f-edd3-48bd-bcad-c87961727019", "indicator--835fdbd3-514c-411e-9e0d-4f15cfc73368", "indicator--2f74ce20-d545-4bb6-b2b9-6bad2acffecd", "indicator--2eef55fa-a4dd-42e7-a678-3f4ab7254885", "indicator--1d236c7f-6d17-4606-9c2a-6d41a13400ee", "indicator--4769d7f7-02ec-42e6-93ab-ce6008a2d8b7", "indicator--297c24e3-2428-468d-a8b9-4b1be2c7fda8", "indicator--239283f5-c4de-4979-9edb-426ac34c593c", "indicator--c0937963-b507-4ca0-a4a8-fef8650d161f", "indicator--eebef5f9-cdab-45fb-8b89-5a0868169395", "indicator--a7208221-17c9-44da-ab85-b3eedd67b8ea", "indicator--1b697edb-f39b-40aa-853d-9ed281ef41c6", "indicator--b7e156c6-3e63-47cb-b093-9a6db0b36826", "indicator--2d52fb0f-9fc3-4950-a437-032760b1da41", "indicator--3c09cb0e-3eda-4e5f-ae31-019394af7daf", "indicator--4ea3ef92-4c61-479b-b977-975f47563e58", "indicator--dbfbab4e-a846-431d-b3aa-485f2f306c6c", "indicator--93f7b940-06fe-4e70-be83-7d36fc945052", "indicator--4794993d-353d-443f-8479-042912298a97", "indicator--32e92b43-3ce7-47c1-94e9-9b7741b8991e", "indicator--ee5333c3-73ef-4717-b8d1-88874478b7ef", "indicator--a0a6c00e-7056-4658-9dbb-fb67658874c0", "indicator--e292ca45-d794-40ca-a7ae-63370e693329", "indicator--4e4b912b-a130-4a5f-a795-beeea0c1c0c0", "indicator--db3d14c3-b471-4003-8f8b-430bec697c1d", "indicator--baea86b4-c42d-465b-a607-7f90cab34e48", "indicator--4636a507-4e38-4037-af50-d16a308a7ae9", "indicator--9c700244-5c1b-414c-a2bd-3f9ea6f206ce", "indicator--9669554d-a1be-4984-9033-b44761ceaabb", "indicator--b02f2031-5831-4c89-b4d0-a5cf6d926aa6", "indicator--2526cfc2-d9cf-4610-96c5-3a047c19d11e", "indicator--c4a4220f-babc-416e-bcd0-383363c41ddf", "indicator--e371b40c-b8ce-434b-8388-8d3d479ce563", "indicator--77ecf4d5-97c5-4b11-83ef-5f751b972f6b", "indicator--4c46740d-3768-4684-a3d1-50b9c4c99e09", "indicator--263327d6-ee5b-444f-862d-d36cd7333ddb", "indicator--59120f2f-db0f-4f0c-84f1-684315505734", "indicator--9e738051-64e5-4747-9291-2505b1261212", "indicator--d0517317-ac98-4d18-8aa3-8920760b7d3e", "indicator--8595f563-3966-4156-b12f-88af662d70ea", "indicator--a78ad2c3-2ae5-44a5-95a4-8d57f6f48ff3", "indicator--bb479423-bd14-4429-a489-64cab653a154", "indicator--47e94cd8-cc12-4015-b8a1-c54ba41e3c5d", "indicator--e0ecc34a-dd70-4d87-bc93-eb68cd78bf42", "indicator--6162c62f-55e3-4611-bb55-6cfd145944f4", "indicator--8f924275-cad1-45d7-97de-12c399214a95", "indicator--4da5abb1-64e9-440e-bee0-d45d45d0e9a9", "indicator--6727315a-b828-4338-992b-aa1bf12b29ec", "indicator--632a6de6-028e-4167-976e-e4b9276d8414", "indicator--0bb88f39-2ce6-4e75-ab46-c115fb16fa2b", "indicator--6d025a14-f18f-4221-ac6b-767c19b68595", "indicator--f83f973a-d0cf-41fb-8974-2db3bff4f49d", "indicator--e80100c7-1019-405e-998a-ce171ba55baf", "indicator--89d587b7-a7d6-4f6b-b403-98c71a8b924b", "indicator--0b94c93b-516a-4c64-8d5a-d1b963b593f4", "indicator--4d33779b-ca1e-40f5-a9f8-9e3c3ce60ceb", "indicator--7ce74382-e38c-4836-a2e2-3aa2d13efbe3", "indicator--376df3ce-70c3-49e7-8f6c-2887eda04a1a", "indicator--f4adfb02-fd24-49aa-8d53-1c961a0925cc", "indicator--be710430-99a8-4420-95cf-ad7f71178e55", "indicator--c4e1927f-3918-466a-b445-5af302d3159b", "indicator--de6205e9-ef9c-40ba-aec1-b580a36201a0", "indicator--afe02a73-e028-4174-8b65-6b3e65c824f4", "indicator--4ea288ae-2033-40bd-a2bf-ce6f4cb1c49f", "indicator--2134d68a-bcd9-4ac8-b3c7-7abea07628b6", "indicator--a70de9df-f02a-411d-b984-4de06dc47fa7", "indicator--06f281e2-396a-45a8-8661-7adae89dd0e4", "indicator--38ec4cc4-eea0-4712-8320-b5e695571ba7", "indicator--d8289815-6084-480c-bcbd-89a805c0b341", "indicator--1c132aaf-255f-4cc4-b136-c07d2b29b547", "indicator--6be956e8-7b2e-444b-96fd-85646328389f", "indicator--d861707e-bc9d-4652-b227-7dd2353bcb3b", "indicator--352355cb-e830-4216-afd1-234cb9f3ff64", "indicator--bf4def8b-7a52-4038-9c37-b9e74c16afb4", "indicator--a3636539-ed44-4ac5-9e88-e6093c00894a", "indicator--85d8d226-6957-4b86-80ff-cddbcff0ddf3", "indicator--9fee2866-8b84-49c8-99ed-5251e610d3cf", "indicator--1ee2bd6b-05dc-4e7e-b330-2859b6c91c6c", "indicator--150dd061-b8a0-460d-bf93-4d10aa16b815", "indicator--148d0c54-df5b-4ee0-95cd-c656b5485587", "indicator--a7a830d3-041f-4e0e-9894-63e38f065534", "indicator--a827e175-2857-4f74-adde-d16c69622264", "indicator--7156c2cc-34f9-4f98-88c1-d6ed77ea381c", "indicator--08c87457-0ac1-4256-a0d3-8f0574a0352c", "indicator--95266089-1b0c-4106-8e2b-1152f8f9e591", "indicator--1f339727-46ce-4ddd-b161-d33900a6087d", "indicator--f9df628d-8766-4d89-9b80-6d8c68cb6186", "indicator--c238a9f5-d6c8-4a9d-a727-3de1ff3663a7", "indicator--a6b0b699-c434-46ce-a5fe-b418b4e5a1f2", "indicator--ffdfc942-31f2-4ced-856e-e305ed117f40", "indicator--5b7d3fa5-ab21-43ee-a405-1e9761415b6a", "indicator--6c66ea1b-9909-434f-97fd-95146ef202e3", "indicator--5c503077-eba4-4455-b657-a9b7b4db72c9", "indicator--efd309d6-80bf-4f80-aabe-75dab5fc2dc0", "indicator--5ac5ab7a-ac24-45d2-b086-03349bdeeca4", "indicator--c4f37c5e-afab-44a3-811e-544ef3a885ed", "indicator--19c5b6e7-dbb4-41c1-a25a-35e0055ac9ac", "indicator--5fa80b49-2278-4bdf-bf04-d2ccfe8858bf", "indicator--a1d36f79-4ccc-4b6a-aec5-aae57ebf3d75", "indicator--e795b470-ecb6-446c-a2e8-62b89d2896d9", "indicator--fa22525b-cee6-4e1e-a64a-7bdc02a923ba", "indicator--9b29ec97-bf37-4f1e-858b-5a205864502f", "indicator--2db19d26-a5c7-46e0-823c-202740f74189", "indicator--cfaf481e-9301-4f1e-9f64-113fc642236a", "indicator--efe854e5-9bd2-4168-bbcc-e485a6f6adeb", "indicator--5a6140f5-9d2e-4470-92f9-afe3ddf5aeb2", "indicator--7afac961-54d5-4430-8fd4-0df74eb90979", "indicator--1da2143c-426d-4585-9cb1-846853882b56", "indicator--b10fe9f3-050d-42fe-90d9-b2eb9f51208a", "indicator--268060e3-c49c-4589-b83c-59eb222adc77", "indicator--774dd3a8-2e74-410e-b84c-3e1bebe2728d", "indicator--b63c5bf0-10d1-40ce-8ac0-f02c9f604d34", "indicator--843a3ca3-5579-443c-9ed6-9318cbc0d834", "indicator--5c76cd60-79c3-40c6-a4bf-38ff0b1cec52", "indicator--1ad2bc44-528b-4c8e-b097-dd7a0a1e382b", "indicator--267a6c2b-3c23-4d04-9b1d-55ea57388af1", "indicator--01e4b00c-79af-4f62-b54f-05ae7a7de1c8", "indicator--c1c563e0-9e9b-4ac4-9037-da1131bd35a6", "indicator--89f4a0b0-2a24-4d02-a9fd-f55d5e2f781f", "indicator--2631d557-9e39-4b6f-867f-5aa9e7de4958", "indicator--fc0196b7-702d-4681-bea1-f472019b9ec9", "indicator--bc410685-4544-4e7b-a712-66b1d089dbe5", "indicator--8640c62c-c63b-4a31-b724-6d111f63072a", "indicator--b7d6bb70-aac6-4db2-ad19-254c66e752e6", "indicator--45e3c1d6-d380-4fe0-b867-3f25da74c88e", "indicator--f1a23108-8303-4e43-87aa-3b4725b52e4a", "indicator--32841429-2388-4f56-a6ef-bebf14739a2d", "indicator--a1982300-d52d-49da-a099-832e170bc8b9", "indicator--c2b0b3d9-f7bf-420f-a626-8c4ef7344ce1", "indicator--c5142dea-f31f-482a-ad88-e412c564584b", "indicator--fa2fc92f-e12b-4fa1-b422-b3316beaab85", "indicator--1ca15342-621f-420e-8f84-c0d6e51b31ea", "indicator--07adf769-a71c-4f0e-b52d-5a3295d7f7b5", "indicator--26d1c6f2-1ce3-41ea-a0ce-474fc4143fad", "indicator--ca111951-7efd-4efd-a919-4947dce62368", "indicator--2afc840e-4083-4fc8-8ffd-8508019b52f6", "indicator--b25da1ea-b15c-4f6f-baa0-b213f7796aad", "indicator--30e0160f-b84a-4526-b007-14d30508fc2c", "indicator--58b29595-d4a4-4660-a683-81f71d6dc741", "indicator--66a4ee65-d7d3-4073-bb55-31d42fc4faec", "indicator--45fd3b5b-df72-4088-af9a-6558a6873130", "indicator--10874fe0-2a76-4ea9-87f5-51579f833f9c", "indicator--cfc36271-5133-4677-9f46-7eb8bb7cf3d2", "indicator--3b00fb3f-a7a9-4c85-8268-147a1b0e0ef3", "indicator--7399adf4-0129-4454-93f5-351fdcc1bbdd", "indicator--a0a21f40-a636-4b55-b3a3-15f87baaf68a", "indicator--010296f0-5363-44ec-816d-2fb67eb2f76c", "indicator--7948eb2b-d368-4df0-890c-13628358e011", "indicator--901e6d31-69a7-4b53-8812-731a5a70a518", "indicator--91dc8757-05bc-4092-9dc4-90f71af68073", "indicator--f9a039c6-7a46-4c68-ab4e-c1281235a50a", "indicator--17c4f4f6-c94f-413b-bbce-d438245ac6db", "indicator--dc44470e-4cae-48da-820e-3ff8abf4c712", "indicator--272f4edd-66be-43eb-987f-fafeb2943a37", "indicator--76380d41-d8f9-4903-b838-a02bc009fe19", "indicator--8abd82e4-9621-49c4-85fc-63c1c3d7fa68", "indicator--7ab7455a-f765-4e18-8f70-d2351f648c7b", "indicator--36e1000c-9096-4a55-a6e1-8502fdd2ddf2", "indicator--6b082b23-d6eb-4da1-bdd5-863431fb5350", "indicator--fbc90caf-af35-4aae-8dcf-db662d78d14d", "indicator--9812e573-7135-437c-912d-bd56beeb4955", "indicator--aa7d1f08-6ae2-4b70-af67-b67d23cc3950", "indicator--6551acf9-87e7-4542-b6b8-5618212de576", "indicator--7a4d4edf-96df-4991-9990-daa3a9d807ac", "indicator--f0b5df54-54fc-4cff-95b6-71fd56fbd663", "indicator--58f4124d-1368-4d46-a6be-d942164c77ff", "indicator--d61ccd00-ba06-4715-99c2-26bfac690543", "indicator--b626a9ef-b3bc-4d77-b3e6-19adaa883800", "indicator--19168ff3-c407-48ef-8c1d-65241ad8adb7", "indicator--09394937-17d5-49f3-827b-97be0e2539ac", "indicator--6cf4c80e-9302-409e-8a78-70cb402279b8", "indicator--8b689c11-3e74-488c-90e2-f1668ff412e8", "indicator--abeb38da-1073-4f30-ac4a-c7203f850d15", "indicator--82937a53-4d0c-4a5c-be37-a752a078c906", "indicator--431a08ca-5e79-4cf4-80e0-d3e64020551c", "indicator--54f61e60-b484-4cd7-a371-f3d38e5c3764", "indicator--0d37f029-4cdd-4399-9370-576dd39a117a", "indicator--8eba1d24-f0f5-42f6-a40e-ecfabf5c702f", "indicator--e34689fc-f11f-45e7-b049-e0b0d4f84597", "indicator--d1b39cbe-9904-45e4-a3f7-d428c11f8622", "indicator--30bc42f6-6fd2-4b6c-8de1-2fbb935cbb4b", "indicator--67bd2bf7-3928-4161-a45e-14bb10e83b7b", "indicator--6a183755-c4f4-4f89-b646-0f96a30fb14c", "indicator--19961b49-4e2e-448d-8ca7-d6b85e73ddaa", "indicator--66af70a2-bea9-4537-9391-0e657fdb7d18", "indicator--260e1623-29b7-4aff-9541-1e97d6412abe", "indicator--f5994684-f503-4400-a268-865621cfdcad", "indicator--f05921d2-baff-4eb9-abb4-4fb818f71ba8", "indicator--71e5f937-575c-4a33-a650-3f37c2c90ab2", "indicator--c966d231-8e87-461f-ac09-43a4936488d5", "indicator--fa3232b4-6733-4ed4-afc3-31a7279d178d", "indicator--6a0874d7-5687-4836-9886-de7c3b4f1cdb", "indicator--66f65551-f74a-4c7d-ae21-f90c5512e28c", "indicator--6e7642d5-269a-434c-9681-edd201dbe536", "indicator--f2c9d79e-9161-4066-89d9-e80ec1d3696a", "indicator--6be404aa-271f-4782-ba11-68a0b3f3dc16", "indicator--7c5b8620-d477-42c3-b29c-39da82dd3944", "indicator--0ee22512-01a8-408a-a835-ff96e24b7025", "indicator--daa61891-2767-4ca3-b9f5-7448d63f6d35", "indicator--66faee44-6888-454e-9657-3d55e0c4edde", "indicator--2363ff42-8bff-47dc-87e2-1092a1680ebe", "indicator--4ba7413c-c483-414c-945d-322d2e4f574c", "indicator--25cbca42-2a09-4dd1-a2dc-e835296504f7", "indicator--74cf6b6c-ad8d-4e6c-a8eb-f81695275d04", "indicator--395bc26a-59d6-4dd6-8e94-fac6c4efaabc", "indicator--af2e5952-512e-4bcd-bd45-39ca12488ba0", "indicator--307e7064-b637-4986-9822-746a677efd63", "indicator--9814d4c2-2752-4550-8641-f34f07e97199", "indicator--90dbc7c1-8000-4eef-a309-0c432dcbd520", "indicator--e7dd060b-dcd3-46e2-812d-9ce9a5427eeb", "indicator--8e4e21b9-ff67-4644-844a-6a8c7ae2e8fa", "indicator--dfa43952-44d5-493b-8420-3d808bc402a4", "indicator--84c2d0f4-490b-44b1-a2a7-fff585939f3d", "indicator--d76c3ea9-4f51-475f-b23c-e1d14cb3a027", "indicator--ecb88bac-d962-4834-8afc-5bda8f5b9218", "indicator--9b857408-a278-4a3a-b0fb-aed2bef29e11", "indicator--22e5fc4b-9cfe-4a7d-8ea2-aca2da766b3b", "indicator--cf059ea9-b254-4e0e-9d6c-9f489d294091", "indicator--3a51f522-5cee-41a1-8ba6-6ed84f3fb7e7", "indicator--16cbab60-4163-45e6-bcda-b6a1d3b13c20", "indicator--2a529e18-80e7-412d-bcf7-2c5202125bf5", "indicator--b1830a36-3dff-49d5-9fff-49d9a40b2029", "indicator--3d854b66-6c8b-41dc-b241-1f5d34a0ca47", "indicator--46800b39-9c18-4506-82ad-db1e7f0e9d64", "indicator--bcfa87ea-c424-403d-bc6a-b74d3097c578", "indicator--6d79d2ff-4d1a-4f25-8e22-106c10169cb8", "indicator--d7e4f882-b1e3-47a4-9773-1715c141d144", "indicator--beb4ce90-977d-4766-a06d-7dd038a0ad76", "indicator--c1748a80-f30d-4e50-a964-52d0072396c1", "indicator--a73292fd-0bd0-4fc7-9731-a7598af7ac3e", "indicator--3303e521-5155-43c1-9c86-a1824c5e4425", "indicator--e8327de2-6001-4bb5-a506-e6e66fab7b5a", "indicator--68702e1c-3195-4f54-8d55-bfea2306fa32", "indicator--a25b7e11-b658-4811-aa7b-cb40df24514e", "indicator--30effa4f-d89c-407a-a5a8-552a9ccf8d8a", "indicator--d6ea9a48-ff40-4fa4-9079-1ef1c3361663", "indicator--580d0a85-e65b-4911-ad03-5f18f23ab0b1", "indicator--65e7ebb4-0e32-4a50-8a36-5e2f9787db3c", "indicator--87a19728-cac2-4593-a822-7d514ecd52c8", "indicator--8fab17d8-7dd7-457c-bebb-4b63646ed105", "indicator--9f9e1cef-1cb3-4838-835d-e576f6419e72", "indicator--b9a3faf1-0454-4469-9d73-611183d7ff35", "indicator--b71abee8-313f-4eca-950f-caff49cd159f", "indicator--ebcf4f7f-f49f-487e-be35-7ea92df88482", "indicator--3c18fa07-7a8b-4088-8742-238cb534bb8c", "indicator--f4973c3b-ab1b-491e-9683-f40ec8e006eb", "indicator--0594a066-c204-480b-834e-e7b4005441c9", "indicator--b6c645da-05c9-4914-9556-916f0eaddf94", "indicator--d0a93bc2-94d3-46a7-9397-82bfe157b984", "indicator--f1dbde3f-0aef-40c1-b735-b7d1a18e8504", "indicator--1bdf36eb-f7a7-4626-ab25-9454f45e31ed", "indicator--ed260c51-3c71-4a5e-a46d-804896f90c30", "indicator--0fdf09b1-1576-446a-a514-348b6f9af894", "indicator--cb1a79c3-0559-4786-9d32-d6076464694f", "indicator--4f9a4fc0-760e-4f2c-a0c9-ff71f0dc72d2", "indicator--096a0650-258a-412e-86c9-74ed71eed671", "indicator--ab2b5ad7-2250-41b2-a575-27cc0e65f04d", "indicator--dac7d409-f84b-4f25-aa47-47e83f1462a5", "indicator--5cfe34f2-ebc0-429d-bd3f-dc0dae933135", "indicator--b2d9ffa5-6192-40f7-bb26-6a0c58913176", "indicator--751b0614-25f2-40ee-a788-8889f63b10fb", "indicator--7802fbdd-80a4-49b9-b707-f0ea5a460944", "indicator--726d0999-d1b9-44f0-bbbb-15fe24c614c1", "indicator--01dcaa44-3e52-482b-a98a-05d465ba5a0c", "indicator--d0a76fbd-1e07-477a-8c10-cc097a9a9d43", "indicator--106215a4-dc51-40cb-912a-e05411aef5dc", "indicator--6041e59f-8ae6-4020-9ae6-a1887d2d9b7b", "indicator--f3cceef4-30e8-49d4-8884-df7e8adb8800", "indicator--528e38fc-9e8c-4855-94d6-6d3f6e314705", "indicator--e0d6ea3f-af8e-490b-93c7-b93a49ae0475", "indicator--64d3af33-3316-4bc2-b6ca-5d2f166d7877", "indicator--0aa7e4d3-f364-4662-888d-ecaf2b9d92ed", "indicator--140d6758-0f2c-46c4-9f2f-7f8e38b42751", "indicator--f361caa9-dd28-4e3b-a04b-3f3ed0bb0f58", "indicator--1d3c7c90-68ad-49f4-9dcb-219cc3732849", "indicator--2d02e3ff-1d88-4267-aaeb-6f46fc8ea5d8", "indicator--447c29c7-9985-485d-baaa-07957c73600b", "indicator--748c01dd-a16d-46bb-8f68-bed0c1ced9f0", "indicator--fdd4d368-f143-41af-8a2b-789469b5f04c", "indicator--a4179d11-e274-4d7f-a9b8-edd4c47bb7b3", "indicator--aed194fb-359a-476a-9658-f18b993108f3", "indicator--3d65804a-ccdc-401a-b1d1-da434480a343", "indicator--9e67d510-430e-43df-86ad-11ac36c00038", "indicator--5d484a21-09a1-453a-9a05-5722362d9203", "indicator--e004d152-5822-48eb-af78-852cf7dee796", "indicator--03271a64-cb03-4967-b66c-7f288275e165", "indicator--31af92dc-e4cb-46d7-8ee3-e1cda3bdb2d7", "indicator--47e83d11-f2cf-48a6-a2fb-3ddda7364761", "indicator--055ea612-4947-47e7-a403-245c86cf3df8", "indicator--ab5f28bc-dae8-4aef-a05d-da80654256f6", "indicator--40922375-30fd-451c-9391-a44417f5911a", "indicator--1f797b52-e82f-4000-b540-15824f59d0d3", "indicator--c857c8a3-206a-4316-a8b8-68c59d7fea19", "indicator--8ab9fa00-c168-4c4a-8a02-ad72570662ce", "indicator--966eea3e-63f8-4d47-abd7-57447ec934d3", "indicator--346a14f5-bfbd-4f9c-a8c7-f14483bc7996", "indicator--9d85e094-0653-4e80-90e6-c41f04679492", "indicator--d01ad5ff-6e66-4de6-a2a1-93e560dc826b", "indicator--ef279e7e-c66f-44f5-b5b5-609510aa8b80", "indicator--283a34bc-0989-4ca1-9086-00a285646d24", "indicator--66664c35-93bb-4bf2-b3f4-0954a6909d98", "indicator--cd26d7d9-abd9-4095-95fb-205ccac34740", "indicator--fbee883b-f358-4ec6-844c-ec78d8847d3d", "indicator--f1f720ed-9b78-4601-a7cb-0b550d906f63", "indicator--8ab13a9e-dacb-4252-8577-e3530fcc684b", "indicator--d1f6db28-a3c2-4884-85d5-24136537a0f0", "indicator--6282c67c-5a10-452c-8883-2d89cbac14a2", "indicator--029a9425-40aa-4532-ad1e-50c4caf22f89", "indicator--7150d464-5b76-4b85-b547-3b40464db0bd", "indicator--a2ca5b83-334b-4d76-84cb-1eddb09170cf", "indicator--feb66033-ea32-4532-8673-11077aea974a", "indicator--9f9d3a0e-5cb3-4104-acd9-20ea8ae49539", "indicator--40c6034a-c2ff-4631-9018-7055190d3943", "indicator--a9c0387b-0494-46d4-88a7-5b10b0169086", "indicator--04314493-91d1-4f36-8f99-e58157b72d54", "indicator--d29a2a1e-9b07-448f-88bc-412b7ce7affc", "indicator--955a3036-dc8d-4b3d-a5ac-2ec33cddf755", "indicator--d30a8b59-360a-4a2a-abd8-6e40e5fb55f1", "indicator--1edec539-e939-41d1-acd5-24d1f0602cd8", "indicator--95417a7b-ec95-44b1-888b-d3320af6cc31", "indicator--99403a35-6a55-47ba-ad7f-23b8250309fb", "indicator--8b68d1ff-10e8-4d4c-b1db-13092473583c", "indicator--9d8d6e53-5704-4bf3-97e9-2f6b47dcf861", "indicator--e6843c7c-6ee8-4d42-bc60-15a40fa03fb1", "indicator--2ca1048d-5ce0-472a-b9cf-1e0e14cd11b1", "indicator--b2c911d0-2dd4-4b8d-86b3-6c8ec0227cc8", "indicator--79f2089a-ddc7-4ca0-9038-92d13326ab79", "indicator--461b8b6a-1a09-4de6-8dad-62f321d7ed83", "indicator--b95f7b01-4569-4fc7-a1cd-88f1ade0b46b", "indicator--0a97d5df-83eb-4aea-9d11-97fb3534a293", "indicator--eece9425-7286-4920-9031-91c8736cd79c", "indicator--47419444-c2eb-4a57-86c0-57de6a5fc291", "indicator--8451c7f0-1922-49b1-9462-e0710396177c", "indicator--c4cf0b27-cf94-4bbd-92c5-88fdb636439f", "indicator--0fcea738-db58-4851-9240-cf6bc11d2d94", "indicator--6f71b218-f78a-4df6-ac6f-fc9f585b348c", "indicator--fc0ed34c-0386-4aa8-b685-9c2f61a4c630", "indicator--c456436c-0fd9-4ddb-8e3f-31446f82b05e", "indicator--9a17a47a-937b-4302-84ac-af5a12bd7ea9", "indicator--56eff6b5-f169-48f9-a180-678884702558", "indicator--8eb7408b-558a-4f5f-9cce-8dc4d6726200", "indicator--eda69fcf-cb96-4457-bdac-81b696d81acd", "indicator--eaa5d35c-5a1e-4deb-b2d3-ed6f64b934dc", "indicator--d2f95295-23d9-4260-aca5-1bd9277b19ac", "indicator--065bd48e-d4ae-48b9-9a9b-a0ad5c45491a", "indicator--9d815abd-5b73-47cf-aa4f-2854cfe13e7b", "indicator--8752a22c-a996-483b-aa23-a99cb9f1bc38", "indicator--d600e40d-41d9-4490-a493-d21080a9e13f", "indicator--b7fea02f-635e-4940-b4d3-aa7178f9b810", "indicator--298f5b0e-fdec-4175-8461-9b3fef514bec", "indicator--f046d1e1-8ed9-4429-ba87-c1781d4dba30", "indicator--4a0f7bfb-86eb-4723-a453-a14abf4ecc00", "indicator--f5719375-7333-436c-88df-7bf87c7e3392", "indicator--54011e04-e955-4e9f-a1bc-945287b4f96b", "indicator--3add6476-561d-49e7-a28a-2fcab571433a", "indicator--279e60b8-89d2-4a64-9893-ef16d1949b7b", "indicator--188cdb4e-8355-4ff2-b2dd-23350a0ae15f", "indicator--ff000ebe-6d73-44b5-a336-20ce06009329", "indicator--2d734737-e4d2-4660-ac91-40bb21cf6dc4", "indicator--895d9ab6-7031-4251-aaa9-75f1e8ce7ae3", "indicator--be42d7f0-a19c-447e-b37a-ca92205bd561", "indicator--e1b0151a-4555-490e-9b4b-8fa3433a0e99", "indicator--20e59d26-2af2-455b-8955-35ac0d1f8ee1", "indicator--d7a4350b-6b29-4e0e-8578-5471eb4260fd", "indicator--4ba0c00e-0abe-436e-877f-dd351c18aa0b", "indicator--29e97356-a259-48e6-9e3a-af1a33fe7dd9", "indicator--53ef888e-cd95-497c-901e-c154c06bfbce", "indicator--cc7d81e2-a1ec-4d3f-8af8-fb6f51ef6cdf", "indicator--0509de72-c2bc-45eb-b7d0-9ac6602658f9", "indicator--83d997d6-6e86-4842-ac05-0f2be86cea28", "indicator--8ce0f613-4c32-4797-94cc-12c0838b7556", "indicator--08e3378b-9f1d-4e60-95d7-2ed073f64565", "indicator--ddee7bce-f374-4e0d-8345-7bb8aa057c63", "indicator--e7c60ee2-3767-4ce1-aec2-478b0218eafd", "indicator--64209182-aa41-4eef-98b6-e8623c4b8601", "indicator--c5dc388e-4f07-4346-8296-0d40c1d83f47", "indicator--72c9bb53-eddc-42d8-8af1-476070c4edba", "indicator--7998e0e4-c5ca-4fe3-b28a-eabb56347af4", "indicator--e7581870-5e50-41fa-abf0-c4ec4ab2eece", "indicator--9d17d391-5a2f-491b-a2f9-f7455b6545ea", "indicator--b50bf662-c2c2-4986-a323-123b0da62433", "indicator--96c10083-cea0-4f45-9f6b-22befb97d283", "indicator--be2df3bb-2d04-4fbc-a217-4a983696c069", "indicator--a46cb447-3a3f-4bf3-bdb4-cdd4f219b328", "indicator--d0a28063-8145-4be1-a5db-2ecc59c57e8f", "indicator--c1130635-025a-4c51-86f6-83cbe141134a", "indicator--9849e5ac-58e5-4ee3-b4c7-48f9c9148971", "indicator--7b0071b8-a503-4802-9923-fe87894e2ea6", "indicator--b3d6cbc0-2fe4-48b0-bdce-2141d3fdc53f", "indicator--65fd9347-bb23-46b5-9474-d7af7a7628b0", "indicator--b8c0e57e-bd3a-4179-b72c-4bea5b512c22", "indicator--39c7d5df-c98b-42b3-9b50-004915941468", "indicator--fd5a781c-a56a-4064-917a-ee52d73ca101", "indicator--79c9812f-383f-41fe-95c1-e210d14c8f8e", "indicator--9613e90d-b45e-46df-8838-0afb1154c2a4", "indicator--c4307d7c-7eaa-4323-beff-95863c3ac7d4", "indicator--38591985-9925-4eb9-993a-90d3fd62a848", "indicator--26766e26-d212-4725-b184-161287be4e61", "indicator--191526bc-1a3c-4d7e-bbaf-e8c66104654a", "indicator--5a24be56-32d2-4a82-b9a3-303603944e49", "indicator--4b47ec30-354d-48d3-a253-be41d281d51c", "indicator--00293bef-fa08-44ed-b5c6-c110f31ad520", "indicator--127a1d8a-75d8-487d-ac9f-67f5a9ea89a6", "indicator--1df3b16d-75bf-4f85-93a3-0a56ba481891", "indicator--d4f6cd81-910b-4dad-8ed4-0fc56c464b29", "indicator--a24942c9-e8a4-4a04-9522-4f3df8ae3570", "indicator--a58d1c0e-7dc2-4f56-9b5a-fee277ba18ce", "indicator--0991d800-6e29-4e90-b092-e6c94869916d", "indicator--5fd4eed5-4c48-4168-a95a-dbe5153e674b", "indicator--1ab4696d-a092-478f-9b5a-5ee0f661e413", "indicator--80a3e91a-0801-4960-94ef-078efd060ec0", "indicator--55c450ee-bd86-406b-879c-318e42e420f7", "indicator--c444f78f-1687-49dc-a39d-f16a02ebabb8", "indicator--d6cecf4c-8cbe-4482-970c-9688df497de1", "indicator--e055ab3f-9a8f-4a27-ab50-45b4c622c350", "indicator--816f2297-3c6e-4939-9bf3-2caecf3bf254", "indicator--e4c9ee89-d5ca-4ef1-8ab0-aeb38b9a6a4c", "indicator--c634b37d-dd21-420d-82c2-277edd4e1a27", "indicator--84a346be-8ec8-4127-baca-2071ee2a55e1", "indicator--558dad3b-4b91-4273-9a3c-029241d0a1f7", "indicator--b3f353c1-3e42-4cd5-8b86-3a2f12bc600e", "indicator--b107b6f5-1e11-4e7d-8505-e2a71405b676", "indicator--06edc1ef-48bc-456d-b724-7ee438f93dc5", "indicator--978dd11c-14ea-431e-be30-cc3ca2211826", "indicator--09fe348f-5a5c-4b3e-8975-e481adf6fa70", "indicator--7164aa59-1afc-4de1-bcd3-abb8a73d581c", "indicator--f2059b81-a004-4e35-acda-736259363651", "indicator--31da1278-cf42-42c5-97c1-b988f5355972", "indicator--cff6e7c9-bde6-4096-a60b-55e9b79969dd", "indicator--4a716ac5-cb36-4bbf-a184-f36d639a766b", "indicator--169828bb-b447-4e33-a5e3-e57ebc0b1dba", "indicator--9e74b9a4-9d4c-4c73-8e5a-2c36b363a3e8", "indicator--588f43de-b062-4061-b340-5c32b5cd6759", "indicator--69582a17-9447-4f60-b4a0-d6e008c9bc06", "indicator--fab49e42-4960-4c63-af42-dcd0b8cf947c", "indicator--67bf3aeb-20e9-4d1d-8f3a-8e1511582c42", "indicator--00b880fb-08f3-4572-9dda-5e2f5ebf6fef", "indicator--6a047358-c369-4e67-bf87-a9d0023889cc", "indicator--79568d9b-2f36-4192-8b5e-4b0efc8cd1da", "indicator--53bd4ded-0299-4101-bbcf-9562083f0e17", "indicator--582c2eab-db9d-4295-a7f5-6c7c8e57f437", "indicator--1ee4463a-98d7-4822-a00b-2419cc7f946d", "indicator--77bd2113-e7bf-48c4-ace0-aebebb4560f6", "indicator--999cd9d7-6881-4276-83d2-b4b13131dc55", "indicator--f6906daa-914d-4a1f-bd33-755013d53eed", "indicator--cf58ab23-b802-4e98-92cf-ba185c1d2561", "indicator--7fdd9594-2450-4b3c-8a92-4253e59c455d", "indicator--d71ff4b7-07fd-43db-94cf-ea56593de7b7", "indicator--c77c4d50-60b6-4740-92bf-3027bde6486f", "indicator--3831a1bf-2eb0-4227-b797-2690f3d6693f", "indicator--fb2abe79-f4ab-45ef-9752-0f064273043c", "indicator--30ee0918-622e-4940-87b5-5d5facd94cff", "indicator--7470d629-48c8-426c-a8c6-255ccfa2e53f", "indicator--824c1613-6017-44dd-96b9-35337790196d", "indicator--b21f3d78-bfc2-46f3-924f-9415129941a3", "indicator--29e006f4-137b-4fbf-a60f-253557ad3fb1", "indicator--49ce88c9-3b8a-446e-a5d2-4778dc4244d4", "indicator--dd713bc5-c638-472b-908a-9bb4d861cedf", "indicator--4b39863e-7da2-443d-bef2-a4e28b425d9f", "indicator--502e8c05-c8d3-4a9f-a702-0fbd8e7cbd17", "indicator--8c55b7b2-1d68-442a-9351-0af42b5cde25", "indicator--c4374b8d-d004-441a-b775-2643dbdf918b", "indicator--6929cc99-974c-4e70-9992-f7393b811a89", "indicator--0cc40b00-40b4-4ec6-914c-0d5495cef06e", "indicator--048b3db9-ba60-4905-85ce-e28104162321", "indicator--278519b9-f5c6-4b8f-8346-fcac4c469aff", "indicator--c2220f05-bdd1-48bf-8099-e49afa6045e2", "indicator--d8098a49-a0dc-4384-b147-1553ca84af30", "indicator--3d741710-7d9f-427f-a8ff-d348c329a744", "indicator--a7e4d133-d513-4355-83fc-b490bd87ecfe", "indicator--2e2eebc4-07d1-488b-8149-b7b9f1ad0c51", "indicator--c9b94c0f-cbad-4465-b5e9-655d5129d470", "indicator--939bdc1c-6b58-4915-baa0-b1069b76de68", "indicator--af49089d-03ad-4013-a6dc-4695b8e7dc63", "indicator--683ed0ee-eda3-4f0a-be8d-8ad0c8568a93", "indicator--89211e89-cfb4-48db-8707-ecb34fa36630", "indicator--66cffbd5-0449-4ee3-94c9-5edbab8fbe84", "indicator--8cf3c59a-76af-4000-bd16-a17dc68e0e43", "indicator--6f0d4bb1-81f4-4ff8-8c1b-f8fad65792d3", "indicator--ea190212-e81f-4c2a-9a62-594a896053c6", "indicator--cf80c6a7-f58c-478a-a606-47a7a7ea3c37", "indicator--3d78d280-a805-49ee-b47f-26a7c7f411e4", "indicator--ac3c16f7-ce30-4a30-a69b-cc624380bb15", "indicator--fa49fa8f-6960-4cb5-8fe2-eee93a3d07b3", "indicator--7951980f-4c5e-48d8-8ff7-9d0a0ae6531b", "indicator--32e65660-e240-41de-a2d0-3ec7c977c911", "indicator--76b29f85-acd9-4f93-b7d8-624c1fd1a640", "indicator--6a2e1ca7-b073-42a7-a094-c5e6e7b70020", "indicator--0790a321-a4f1-45af-9b82-0e08d7858c65", "indicator--7311206a-7880-4135-9264-bc065303fb46", "indicator--69817b63-86e2-478f-9a9f-cf440d1bbbb3", "indicator--9e1e9f30-f7a8-4f69-9bc3-22f07a88c83e", "indicator--0a8cec03-1354-4f26-8ab8-c5d36577bc7e", "indicator--c01f8fe9-f6b0-47cd-96bb-fae921be1874", "indicator--feba05ca-36ba-4a68-9ea8-1125a7dcf5b4", "indicator--74c3beff-42ad-41d5-94b2-b7efdcd3a464", "indicator--70d149e7-113d-4326-8ca1-a6038f7e9922", "indicator--d3b0bf9d-bb38-49be-ae66-db9e500abb15", "indicator--6be61506-5f97-4892-a37d-68377ce3e6b0", "indicator--1d41513c-0c68-43b5-8344-128caae02d48", "indicator--add0f052-c65f-47c1-8e05-cbe9b26ace40", "indicator--4b863884-b731-48a1-a15f-e7f8ae335c57", "indicator--52c25e6d-b762-46e1-98e6-f3cd8f3c4f3e", "indicator--5d00f19d-be7e-4e3f-a04e-32652274c07b", "indicator--76288fd1-4fc5-4fed-ad87-6351a6d1c06d", "indicator--ea2bc29c-5cd5-4099-a309-a3af6d7c3acf", "indicator--877a8967-8aae-4e82-9643-6bcbca840ad9", "indicator--14121e33-5b16-4402-a623-e5197ba369e4", "indicator--7025a199-2ca4-4814-b5cf-cab74d714e1d", "indicator--90070b2c-90c1-461d-8c64-ba17acc48c41", "indicator--aefd5ddf-1aba-448f-b550-c06661e37d2c", "indicator--c390e1d1-390d-492a-81c2-0b28e342ec7e", "indicator--6224e6cc-952b-438f-a72a-44a9102412cb", "indicator--2e3f09d6-0bc1-40bf-a640-f2837042a12a", "indicator--e397bb21-4c0b-4731-853f-3155fe06375a", "indicator--7c49997a-99b5-4ffd-9b33-b08448734730", "indicator--534e9c74-9578-4456-b5fe-6adb35404f25", "indicator--19ff17d2-cf72-4c1f-91e7-ae46d8f7f07a", "indicator--0bf5bb55-1885-4adc-b549-6c04b32ba5b7", "indicator--d87a9a0d-a22a-461e-ae0b-a6ace41aa073", "indicator--6b4f1103-ced5-4688-95b2-706007ff4373", "indicator--ad6fee1a-0eae-418a-bde7-38fb53f02bf5", "indicator--9b4dcec3-5dda-4af5-9c91-2ed7fe577f2f", "indicator--76f57419-6c79-496c-928d-1a3786f22750", "indicator--566a540a-16b3-4182-836d-9e727703e4b0", "indicator--ab3002d7-21ce-42dc-940a-f8b5124567eb", "indicator--502b3182-b193-4cfd-8bc0-d02cb35b0425", "indicator--3a1b58ba-d9d2-43db-a318-da1e93dbdac6", "indicator--7cc90650-92f9-4b80-91a0-cd2688fe3094", "indicator--769a9abe-5046-4e08-9d0b-233369e8f884", "indicator--e23f47da-14f6-4588-90e2-d1941e84279c", "relationship--8256ea92-491b-4412-b63d-aa4a490ada2f", "relationship--9229c9cb-9e9e-407d-8c4a-12d1c46e5c25", "indicator--fd5602eb-83d2-42a6-90c0-5fbd040745af", "indicator--dc3ce9c4-8442-4ae5-92f1-69b36f5a5cf3", "indicator--82a22b65-a77f-4354-a775-f2c41cfce56b", "indicator--720025a4-ea83-4612-af3c-953f4bd3cfae", "indicator--817d6965-f3b8-4db7-a6da-a8279747ee2d", "indicator--5e190236-0c9d-4478-ac6f-6609295f4a03", "indicator--cfd192ea-d812-4c05-b13b-db7b324b3d8f", "indicator--774a9a97-756c-43be-846c-eca95f8cc489", "indicator--16e67d34-c25f-4452-9cc8-7b8500779ba4", "indicator--783215e7-87b4-480f-b321-94059c1ec3a0", "indicator--d7450a8d-09f3-4d06-a5d6-e41a53d5bf83", "indicator--097c4d6c-c79b-4357-b9b1-f6d8cbf53174", "indicator--953bb002-8d01-4acd-85b8-0b1932841e6f", "indicator--4b483117-a127-4e41-b3c7-0813aac17301", "indicator--b9891372-33ae-4555-b241-a9e4802168ae", "indicator--08874c30-78a2-42ab-84b4-d9fde6b50bf9", "indicator--a57ef29d-9c84-49ea-a03d-0b241ef83b1a", "relationship--c1cca06b-4f95-4296-afd0-fb615b4b8495", "relationship--e82744a0-ee8e-4170-b1a2-7accf1020b49", "relationship--93455e0a-50aa-4a2a-8d47-f70f8dc160e1", "indicator--f5ce9816-09fb-4760-9fba-0f8148e90251", "indicator--60002f12-9198-4b29-b54b-b55a2d3de803", "indicator--580b1574-57b9-4a04-aaa3-f255f585a399", "relationship--f9a52ccd-154f-496e-a092-865d159f62d1", "relationship--00da6ee5-0f60-4c1e-808c-ac71a3ad2d08", "relationship--4abfa90d-c2a0-4f0c-a658-67c2203e5138", "indicator--f04a5a7a-8ab4-4ec7-a890-47447eaa1c49", "relationship--b41a86e4-8574-4cfc-b07b-9deb907dc4e8", "relationship--d1e1cc62-ec11-4eeb-be96-3a5e5da8fb68", "relationship--06fe155e-d973-490b-8741-8c34c0ebe753", "indicator--59809430-fa33-4322-bdc0-873bc2b2e616", "indicator--2384b8ea-c8d7-4888-bb64-0a3c2598c876", "indicator--0dbef09d-38be-47ce-a575-e5f2693d7ff7", "indicator--55d1cd67-c259-4f32-bc5f-3de9a686b7b9", "indicator--0c56e5e7-085b-4482-a1a6-1b0f1a3e2929", "indicator--d1060603-e0f1-4e59-a289-ed08b7f1c8ce", "indicator--5f11030f-16ef-481a-8c70-71d53e7ae56f", "indicator--f40c135b-ee96-4c95-b8de-40d83aac9424", "indicator--8119874b-f876-4c19-bbc2-660d948e07a8", "indicator--b185c69b-71d6-4b0b-b39a-bbe197b21f3f", "indicator--afa7b0ce-4870-41a2-8cde-7d1b8a94defd", "indicator--af778f5f-a354-4195-8e9e-1619b324d94e", "indicator--66aee6f9-c08f-4874-8ff8-c767c58ea59f", "indicator--dbaeb4a0-0dbf-432e-a19f-36628025dffc", "indicator--0e65a2d4-a88c-4901-bf2f-72450e9aae89", "indicator--317be414-c7bf-424e-8ff4-6b8210c4c6da", "indicator--3121dd1e-015b-418a-a6b2-178eda0a755b", "indicator--b7d6a907-6189-4bdb-b97f-6564301b8317", "indicator--176230eb-d434-432c-ad07-b00a2ca4da13", "indicator--c0347cc0-d8db-43e3-8bcd-187e28dc2ce0", "indicator--5e27adda-8ccc-4b39-b138-bf51e8ea4a90", "indicator--80f4c90f-8ef0-4c28-b03c-11bfcf44e60d", "indicator--30210c08-5f55-4b82-a113-137c151be333", "indicator--50e26858-ec74-46d5-aee3-5cd1124c2129", "indicator--6d66e8e8-a757-47ae-a812-72f9f828628c", "indicator--fddccb8e-b652-43fa-af9b-d858cca48f1c", "indicator--46b78c00-5bd5-4b17-9a6c-a9d41a0122f7", "indicator--b45eaa9e-59da-49e4-9321-3f60591a0998", "indicator--891018d7-6a84-4ea4-bb16-d8da2b488bd4", "indicator--263c4889-e5f9-483f-a095-c126bd9f4476", "indicator--ea8774b5-a629-42ef-9184-d6784fc303d8", "indicator--eb57cca3-f154-453a-9ed8-f111dc6257f7", "indicator--f5ccf51f-4a8f-46da-92b5-6579f95bfdf4", "indicator--32317e8c-c12b-4b13-bd19-bbc492ce62fa", "indicator--751fab53-837e-4309-823e-ca5bd31dc0f0", "indicator--7a865411-4df8-4e03-86bc-c941147a31bb", "indicator--b3c7cf25-28a9-4211-93f1-4672ee05fac7", "indicator--bf388aca-d48a-44be-80b3-ab8461c335a6", "indicator--73b44e24-4556-4b2c-82fc-c49c5ab7e8bf", "indicator--e05ef0ba-2633-485d-b450-2a2d19967172", "indicator--35547bdd-27a7-44e6-a862-74b2dbc3a39a", "indicator--b6220965-2b1e-4f5e-b101-cf7a2fca248f", "indicator--cc4e9127-6ccc-465c-83ef-48129b783c41", "indicator--d02082bb-c86e-4c98-90c9-0ae704825442", "indicator--553255c7-1391-42a4-b264-445c56326bac", "indicator--d392e594-2e7c-4d11-9c82-f75ec0c2a731", "indicator--71e7441b-3c6e-46ce-9b1a-4d5c01412f20", "indicator--f463b733-28cd-4a39-ad3b-6d30fd61f151", "indicator--a605e710-fc95-4d20-897c-59dd6a4f8038", "indicator--69368c9b-e3ea-4136-9ad3-fea5f6a45649", "indicator--31335638-012e-4628-bb0c-28662586f942", "indicator--e0ab69a5-3349-4c47-b242-e97e6bf1923f", "indicator--d62af449-cdec-42ca-9193-669d8ce14454", "indicator--4b89fa08-3f75-4a06-8704-929e29cdaa05", "indicator--e11d53ea-3b21-46b0-b908-02ad0b66e3da", "indicator--3521ae23-dddb-48d2-974f-0add8d556b5a", "indicator--f9d0d443-3bd2-465e-a3e3-340dcd3beba4", "indicator--bbe91c0d-2373-42be-aacb-5da20caef55d", "indicator--54fa8a09-b58c-45e2-a3c8-f6f3732c8745", "indicator--0bcc5e48-0f08-4d0a-a24a-cf60962e8695", "indicator--7c0c3660-e205-4a73-b9f7-6a11a5b1c4d3", "indicator--4c30216e-598b-440d-865a-413c28200244", "indicator--4bc184bd-eaba-49fe-b086-34c6e9f71f9e", "indicator--8f55c55e-f8ed-4f36-be36-c5d9552b81d2", "indicator--030e5df2-dda8-4cda-8991-0722dea392cf", "indicator--2753f11c-7c2c-4dc2-8e47-92b1a25c76d3", "indicator--d6dcaba1-3bdb-4b09-ac8c-09cb83fdf119", "indicator--5ef29aa5-405c-41c3-9478-2847db3f3ae1", "indicator--aea6982e-2e28-49c6-b3b6-cd9a0b611917", "indicator--4f4e7d5e-6f6e-4ae5-8d3d-b68514a6b6bd", "indicator--317da780-abc2-48ef-988e-5588ece7b97c", "indicator--091e25ae-9690-4582-b42c-43b4383ec4b1", "indicator--e7d7ac42-0ef1-409d-be57-2c1aba82ed0d", "indicator--688dbf8d-0368-4534-b013-d5c2394bad7f", "indicator--177085b0-6d16-4db8-961c-fdc8877f91db", "indicator--e8e4ac26-6ebf-4703-834e-9a0e8b608f26", "indicator--8eb035d6-a9aa-4b63-ace6-0d0ee93c3fd5", "indicator--f3596dbe-f3a7-4f8b-897d-5a07f5252fe6", "indicator--2c9e6dc9-7d74-45fc-9f90-bcd936867516", "indicator--e52b2689-6ce0-45a8-a52b-90754e6a2ffd", "indicator--45d27fd1-3cd3-4cea-984c-b2439c8e9473", "indicator--1f47c060-ebcf-44be-a909-71c8bf41c333", "indicator--89c5dba6-47ba-4153-9143-0c4f36187c8b", "indicator--7558fdb1-e7fe-4471-8f18-01f7869ead76", "indicator--f0bb58e4-d838-4f1e-9373-deb4a89ae1b8", "indicator--6827ad38-aa8b-4174-abfb-e8622304bcb2", "indicator--0fbd1ea0-715f-4a06-ab0a-5979e7d451a4", "indicator--0bfb8722-83f8-42f7-b18e-88ccd197c82f", "indicator--2f52ffa2-4925-4a27-ba64-44f58107971b", "indicator--868e204d-0d3a-45ce-ab58-528bf7fcbb2f", "indicator--19b4132e-7dcc-4963-b22b-09b07f5a4686", "indicator--4ba97bdd-a4b2-4c91-8b71-caeebda6fcef", "indicator--f254b60e-13ee-4e9c-ad0a-99c71a410991", "indicator--02497f25-1e06-4935-a20b-93065d5ad2e5", "indicator--1b41d137-5d13-44d7-8518-0f0980d1c15a", "indicator--c8506119-0e2e-4b32-84a8-92116a4759fb", "indicator--26d53905-e490-4725-8e8e-5dcdaac3b7be", "indicator--8556457a-4a80-4081-a720-baa4c6e8c283", "indicator--fad57bd7-f50a-474e-b00d-a6138e307822", "indicator--e1cd0e07-fe06-484a-b696-e3ee7b2cb5e3", "indicator--016af8a1-10ac-41af-a129-925121325e87", "indicator--0a75e301-13c8-49e2-9b78-b73e6d0aaa43", "indicator--0f3049ae-d68c-4afa-a4bc-801b2b887810", "indicator--83299ed8-78d9-4f34-a423-685619b03417", "indicator--13dfc9c3-ab48-4402-ba3b-6951e9a09adb", "indicator--fce2826f-6500-461d-a580-7edbd8649d35", "indicator--7d91cde7-9df7-4da3-bd9a-d30b7022b021", "indicator--3f4fc0b0-c9d5-42fb-9fb9-a82de588dcdc", "indicator--4dcbae0f-1aef-40cc-b823-2cfad70710cb", "indicator--858edfa6-d5b7-4dd0-832b-31b7419d996e", "indicator--487ad951-315d-4319-8028-13ed1ea20064", "indicator--af146d15-47a7-4ef9-b817-a0c08918547b", "indicator--4867afc1-1d2d-4186-a198-46f05c486ada", "indicator--7206fe13-9778-4749-a40b-8f154dd2df95", "indicator--fd7e83d0-77c0-4b5e-8223-11d36a58e22b", "indicator--eae1bbdf-8c86-4661-bc26-a96fe700a0ec", "indicator--d697603c-dd2c-4f66-8e2f-7dbc66d30907", "indicator--695a6823-ae9c-4d0f-9214-22359871afa9", "indicator--423a6c02-6b8b-4d87-a1fa-424bb038a72a", "indicator--bb9e9301-1d64-40dd-bc14-0a220457331c", "indicator--1c09d204-7dcd-4467-96c9-dffd855a24e3", "indicator--23c6b357-6178-430d-80e6-43e01e6c1ffe", "indicator--06762b11-4483-4ab8-b2ff-f7f26c908d44", "indicator--08eae449-afac-460f-874b-f5e7b8ffb0f9", "indicator--faadd429-3877-4db6-9f88-910b9900a3c2", "indicator--5081d150-73e5-40c5-8b3e-c0eaf3a3fe0b", "indicator--ee39731c-5efe-442b-89a4-1131b82b99bf", "indicator--94c4968c-8785-492f-b645-b442dc3e3ab7", "indicator--8978f44c-7a44-4e59-8b77-da9dc532cd47", "indicator--81b1369f-8a5c-4cb0-b761-88fa7d4cc7b1", "indicator--e063d04b-947d-4a50-a700-e860d0f0ab0e", "indicator--cbd775a8-bd39-4158-9c36-c16c2ebd4be8", "indicator--4386e4f6-0f7e-4f9a-8251-4898c58b6df4", "indicator--0be7415d-e88d-442d-b2cf-385ef89b0ec2", "indicator--9593dfd9-bfef-4b47-b2b9-d154ed958d71", "indicator--7eeb2646-9db2-4086-950d-91cbe28fee3e", "indicator--2167f235-ace8-4f1f-81d6-7e26494e1674", "indicator--3df021a0-1ba9-4e90-a7e5-5733e4a9dd61", "indicator--d893edc0-504c-48e1-9de4-19916c797315", "indicator--9ed928e4-7037-4e54-ad21-db2da8c705f7", "indicator--57910475-0ff1-45d9-ade7-d7264a9a9b32", "indicator--b5b6901b-0885-40f2-9846-227afcbd3ef2", "indicator--22e768e9-3bc5-4ce1-80da-54dba46409d3", "indicator--a511cd6c-4245-4e20-bc36-7def7c0546e0", "indicator--a296f363-f2b1-41e7-a426-c2054b2c84a9", "indicator--fb70c507-4b76-4d43-a9ed-d6c56c5a5e8d", "indicator--162b130b-7c74-4545-b219-c1a843e5ad92", "indicator--d42ec3c9-d570-4163-9973-c2aae3d007aa", "indicator--1da3facd-0d66-4411-909d-d62fcdb8deb2", "indicator--55daf1ed-3c77-4fbe-8daa-82e0d0848abb", "indicator--d960a8d0-cd0e-49d1-9402-2a782f742707", "indicator--137c2962-552e-4534-bb08-5fa0bced28d9", "indicator--865c7d97-4f9a-4e7b-9580-5e1612c483f3", "indicator--69a99df9-f497-4256-a365-0ccfb053ce41", "indicator--e62596ea-9c51-48b1-8ce2-576232699199", "indicator--c555a8a8-1dde-4526-b9ff-a9cc7763b920", "indicator--680c8944-8339-4097-ba7e-a97972056cb6", "indicator--652f6c96-112a-48dc-9b8b-5e73d6fbb1f4", "indicator--13c580c7-fa9b-433c-90a3-2499cc88aca9", "indicator--14646431-055e-4ad1-a84a-1e6a5dc9f322", "indicator--13558f28-fa44-47e6-a2ab-7ed6fa7641d5", "indicator--ff4bc610-1a0a-4a3f-a83f-abfc03003cf0", "indicator--e9e0b94a-f7f8-493a-b668-5a8d34708b60", "relationship--57ad7592-ea0c-4c4c-a281-97a69f36837b", "relationship--9085ed09-19e6-4652-969a-4bb28ab92cac", "indicator--5ada6877-6e7c-4f46-82d1-75f070926ee4", "indicator--5d513680-efdf-4f85-94fd-fa9c87e8a4a2", "indicator--759a0156-1886-476f-8792-6e1b1918219a", "indicator--bb551de1-d742-402a-95b4-ec05473e39b0", "indicator--cb4a7afa-5abb-4724-9ac1-0dc7fa11eea4", "indicator--260b43cb-5093-467a-ac71-67c7b38e9cdd", "indicator--4752ff14-39be-4e9b-b83e-3d82f5f4b5f3", "indicator--405ff690-76f9-414f-a759-87af6ed7cbf6", "indicator--633a898b-48f3-4642-a815-ef61749b1bc7", "indicator--38fc8c8d-fcc3-4886-ac52-09b69ec528e2", "indicator--2b9b3ac7-0129-4612-80af-c2978ab022e6", "indicator--76b2a880-d594-4611-8d98-58f01767ef92", "indicator--f4ff09f5-686b-440a-92d9-f6194053ddab", "indicator--294de185-03e0-4b69-b293-603b5dc38f36", "indicator--0d4b115f-7373-4fb3-a64a-702122528533", "indicator--6a1094f1-6de0-41b4-89e7-cbe1fdadc2e0", "indicator--b4cec801-4397-4cea-bdca-25efe7e5bd79", "indicator--9e82eb5f-1523-4fe8-a775-1db265d3c135", "indicator--1bd00a81-4058-46fe-8aac-751b618a2e9f", "indicator--339b652c-4b75-4074-b90e-600238230ea4", "indicator--0ac6d8b6-5f61-4d17-b481-adab3bf6eef5", "indicator--0b62fc6b-689a-4c6f-b72f-e720f6e09b84", "indicator--31c4c3c4-1e09-4075-8ebd-e50093fd4115", "indicator--508c79c5-e996-434c-91f5-8ca72c73ef66", "indicator--b0fa1252-09a5-421c-8d9b-121b843ed88f", "indicator--d95f8649-46b3-4676-840a-6db765ce7c2a", "indicator--d22b786b-3516-4f80-a350-684768840c92", "indicator--cd960399-29b3-4a75-ae88-4f4de490628a", "indicator--79b7d702-638c-48e6-a444-1e4a78e9b1c5", "indicator--5412418d-778e-449a-9516-797fd3f61d0b", "indicator--c2b8235a-3bc0-4a98-a474-bded5f9da799", "indicator--6da8560c-5f84-49bb-bb4b-860c5185fbef", "indicator--0908ba06-54ee-4693-ab7e-1d0afea972b4", "indicator--e772cf87-c18c-43d3-9c8d-d540953c09ad", "indicator--9cd58733-7bed-4105-b44d-2d583869a63c", "indicator--f8229316-a426-4c9f-a85b-367ced246894", "indicator--a8392ba4-d8e0-489b-8f7d-7d18f9fe2e7b", "indicator--d083b336-babb-4be3-bba1-2244008250a2", "indicator--a00cec90-4de3-440b-9460-af3f59164e00", "indicator--48083b1d-8762-450f-a660-c70158d2364f", "indicator--a44eab37-9f57-46cd-bd82-4273878c8d49", "indicator--41ea80d5-041e-40fe-8c09-6f8ed104c191", "indicator--25aabe77-c532-4b48-accc-c6b7c9ac1c0f", "indicator--fedf7130-70e2-41e7-8fc6-30e5cccf3662", "indicator--b889e294-1c17-406c-b1a5-a3e8b5a43ed9", "indicator--32104e96-ad97-4898-8312-881ee0685b55", "indicator--7fa3bac8-6883-4459-a090-1a3b163234a3", "indicator--ce1dd2e5-da63-498f-9bdc-f54c9f71b25e", "indicator--1bfaeb79-c9b3-41a5-9ba4-de68494936ae", "indicator--caa05616-04a9-4f5b-9e30-d17ed3c110c9", "indicator--02a7406a-c1f6-405f-87ef-23c1b80b0ba5", "indicator--749b12d3-c68f-414e-b1cf-7c8cbbce115a", "indicator--d22255ac-259b-436c-b0f2-c119b41e3515", "indicator--d912cea4-d363-4b52-92c4-65a6c97408e9", "indicator--aa8ad05e-5b42-4f63-8ec0-fcaba9523d77", "indicator--6907ed9c-b0dc-4063-adb5-545c95951677", "indicator--ea87bc18-2ead-469d-b624-c0d0f1d3d289", "indicator--cec74f3f-1f8f-4e8b-bfc5-a891472033d8", "indicator--4213f6b6-5c2a-4837-83c3-2f8f5186b276", "indicator--37663019-2e11-4f95-b01c-bc3cbf3f1fcc", "indicator--c8eef53e-7994-459f-8034-30787366a4b5", "indicator--8e4a3186-e120-44ab-8c0b-af0ae8c76c07", "indicator--139d395d-c877-4ce7-bfee-525f3a10456e", "indicator--e6bd2d8e-b27e-41b4-bd8e-ad3a7ca8372c", "indicator--4433b07d-14a1-4174-aa61-9bae475c41e7", "indicator--71c9960e-fe69-4f57-9723-cb9f22f01fb3", "indicator--e3bd88ee-2444-4c61-913e-5be81b9ba7f0", "indicator--74907dc8-11d2-4bd6-a6c0-7c74178fdf00", "indicator--ad73f759-2b58-440f-a22c-2ee709548b61", "indicator--8a384e1c-876c-46d6-aa88-8062588b9e4b", "indicator--feb5c364-941d-497b-9739-6bdfe481ef4d", "indicator--97206a60-7221-4bad-bab9-375c10af6e97", "indicator--ead67eba-37a2-4a3e-a8cc-87b540751a5b", "indicator--464d8c16-8b1b-417c-a5c0-45369482f944", "indicator--b837911f-563d-4ece-b203-9a32fae21103", "indicator--cc08cdda-ac49-4858-92fe-5b6bbc7d0c37", "indicator--a794e35c-3e3c-4e25-9b6d-90a9b0b9c396", "indicator--46856a80-07fd-4a73-8509-b27262a884eb", "indicator--d025d1cf-529b-4a4f-ac0c-8bb49a16e5a8", "indicator--5608afcd-448c-4c9b-8dc2-b8580b5ff143", "indicator--cbf22bcb-e62b-42e9-bdda-9f8bc98b156b", "indicator--d0d53b0f-238a-4548-8045-6f2110aa8018", "indicator--2653877d-32bf-44ec-bf58-89bb9bafa86d", "indicator--f6f6a52b-bb0d-476e-a6ce-a704d4274b54", "indicator--daa9a2b9-9e7f-40fa-a517-ba6a28cfda7f", "indicator--f2e9feba-1837-4e0f-8f5d-f36d8442c282", "indicator--d36bebc9-4084-4e89-9735-9544d5b5a231", "indicator--864e8aa4-3c2c-49f1-9865-20c541f52d5f", "indicator--363794c2-966e-4ed2-a77e-517c99899bca", "indicator--375d2191-c78e-406a-a3d0-a19748d249b7", "indicator--ce65eed2-0652-4794-b384-ea0130a124ea", "indicator--9fba82ef-cd82-4ed1-858a-a6f9c42d3bba", "indicator--23f2c8eb-d9e5-4aeb-bf8e-74d0cabbcec6", "indicator--cd318844-1ce7-4578-8282-c8e479dd1a4e", "indicator--5a0d56a5-2b0f-436a-8c40-748c3de5dd0f", "indicator--3a44687d-8f67-4c07-bab3-124f24bade02", "indicator--f5e0ac89-9963-4997-b72a-889768e0cb5c", "indicator--ec7c35cd-62e3-4b61-b906-3415fea4df29", "indicator--00f84879-f2dd-436c-bfe6-0ce5bf464207", "indicator--caf85a34-db2d-4449-817c-9e0ea9e04eae", "indicator--8f6a004c-65ca-4664-96d9-37e8a8576349", "indicator--eaca20bd-9cf5-433f-b089-1095b8cd7ffc", "indicator--2fb85d47-c6af-4420-a357-e8ae9cfc5ed5", "indicator--ea5572fe-124d-4f94-9ed8-ac709fa53153", "indicator--18983e17-717a-4c71-bd3a-1eb17fa9ab9b", "indicator--eda59be8-f6fd-4214-aee8-95b197f06dce", "indicator--cadcaa5b-f0d7-4c8c-b398-ca8c1a4d6017", "indicator--b13035b2-ba37-4bfd-ac29-673b273ab14a", "indicator--676c8070-ffe8-4bc4-a8a3-c57657524d0d", "indicator--ad1fa47f-043e-4b23-bdbe-f9ead44c919e", "indicator--a7e9e1fa-0f11-418f-9cac-c780cc6742bc", "indicator--778df597-7bb4-42b4-8f8f-f73d1653ecc6", "indicator--41dce3a7-7f5c-458f-ac7b-8ac96e12486e", "indicator--ffc44fcb-4eb0-409c-9910-37b283a9720e", "indicator--0b6d9bea-a5f0-42d5-98da-fa193652af35", "indicator--77abb707-536f-46cc-8701-04fbbc32ca6e", "indicator--f7b6dcb7-4a2d-4157-bef2-d25c6af1a381", "indicator--4e6f7b83-2219-48d9-9f9c-d340581a0a92", "indicator--81616e6d-b324-4dfc-bd54-84551a80046b", "indicator--0ff1bee3-a8d1-4942-a293-61bc4e876b20", "indicator--1bce8d5d-9cfe-42d1-9d92-332435a83432", "indicator--9d64a71b-9b75-4df9-922e-fa1637d37391", "indicator--f47b698b-8a34-40a0-88db-98c85000313f", "indicator--233086ec-e5c7-4313-a361-0c3a0aecf36a", "indicator--e2ae3ac5-f4a9-4c97-9472-5a34ac33b735", "indicator--5118045d-6ecb-43d7-9335-1a3ab6671cf7", "indicator--da0fbc0b-7521-41ea-b51c-f492b187517f", "indicator--fe78ddbb-c88f-419e-ad3e-e9e26b096165", "indicator--717ee331-8cfe-412b-a6dc-a1a0cd61cdc2", "indicator--02a14927-d7fc-4ceb-9319-5d3b2cc0e4d0", "indicator--41109780-0db9-4f40-bbfa-47720f6ebaeb", "indicator--f072bb34-88d0-4016-af29-57f556a81a30", "indicator--e620e542-2655-4cef-8163-a229300205a5", "indicator--cd5f51bf-e3a1-4cbb-a470-d6a292ee513d", "indicator--ed80cc4a-e157-4a1a-a5b7-ea5b9738d02a", "indicator--270d3bdd-a226-47d8-b7a3-70fdf5ea07ce", "indicator--b9f716f8-2ff9-4e93-b1cd-34c995024204", "indicator--440228b3-e00e-43e1-8668-86b8c09a1149", "indicator--785c6f91-ae5f-4048-a9d5-5e7d563f3f2f", "indicator--32837a8b-99f9-4564-bf30-c6d5ee853c0f", "indicator--8b9559b9-9ce5-4e4c-ad5a-b67ff362fce0", "indicator--8d5d415f-250a-411e-b623-fcbe42701c04", "indicator--c511a113-3d8e-4bfa-90d3-c31b7cc468eb", "indicator--6a094a34-1a09-487d-9a9e-c8a290148bce", "indicator--c75d67f8-a502-4726-aba4-f137f479354f", "indicator--89232a90-ed98-4df5-b928-c31a96b2da97", "indicator--8a1d9c71-b413-4277-b09d-87272d7d0f19", "indicator--f6dde7a1-6dd6-4e48-83e3-c4ae7d2fb472", "indicator--198bc626-ad64-448a-8cc2-b085e7cf1f9e", "indicator--181e1e67-0e88-48fc-af56-3fcda8e55d3d", "indicator--1fad238b-422c-41b9-86e3-abe6a773c9c3", "indicator--3863cfef-38ae-4d68-a7e0-78adc3eb9904", "indicator--50fcac6d-e398-4c48-a7fc-7af5b6920736", "indicator--f9fa0b4a-449d-4468-bf4b-5ca9b35191ef", "indicator--53bc32c8-f903-4eba-bcb4-6df2cb400510", "indicator--70cd08bc-cbd3-451d-a118-88bf683e2f19", "indicator--af137ab3-b6e5-4300-bb05-c6bc5de1012c", "indicator--4b2afb58-4fd1-418f-8724-b661805963f6", "indicator--2007731b-f70c-40c1-826b-9ad46993b7cf", "indicator--b7e8831a-6aab-4ee1-a569-67010182b594", "indicator--fee5dc02-dacb-42a9-ac9c-b3baa44bcaf4", "indicator--aecf96c7-8a6a-4b92-b861-72b945ae20a7", "indicator--71179128-a802-4c7f-9dd1-86d0f06d57ec", "indicator--7f41b47f-7d6e-46d1-8d85-b72bb15e320f", "indicator--f17b091b-5b01-4ef4-98cc-588a58c6bd9c", "indicator--5e066721-401a-4886-ac40-72f8c148f54e", "indicator--0b245970-0700-46b3-a275-500a7ea10f74", "indicator--793b3d36-caa7-4f18-8155-192da67da6c5", "indicator--d8ffe863-c426-4fb5-8c2f-d23bad485720", "indicator--df2d90fe-d8b9-4e79-ab08-a78b001fbfd7", "indicator--72acab99-7afb-406f-8e85-c2b9f099b7d8", "indicator--d26a3568-ce38-4ddd-850b-2112e38948f1", "indicator--e77db01e-1dd0-4601-99a3-ebe172d37cf5", "indicator--23a4e832-a608-4e5f-9c79-93110977d095", "indicator--710621cd-6623-4949-b3e8-96526a6f549e", "indicator--d80ef93c-f4d8-47e1-9a45-b7c4cd17cb02", "indicator--9659a771-772f-4cf9-bdd1-46d15520e741", "indicator--a1684360-70e5-49ae-8bf5-c18b373672ae", "indicator--1e68c253-a518-4f57-9123-224c846685f6", "indicator--6f84ebe5-8bd8-4d20-ad9c-80f9256f9365", "indicator--9635f6b3-7d44-4b7d-b7dc-7f4a9c33f933", "indicator--6691881f-21e3-4af1-a93a-00232da6cb41", "indicator--82a2b43b-3878-42db-b4ca-a1a8c62374a6", "indicator--f73035e1-507c-4232-b062-38ec3bf37886", "indicator--2c1a8785-8b07-4765-8d26-4b1d80e46003", "indicator--354e6716-2751-4b67-a0c1-59bff793c567", "indicator--615391bc-c679-46fb-a60d-8e9774b8e205", "indicator--866123e1-0fd7-494d-b62c-95c7c0b967f3", "indicator--9eb0ccac-e211-4e60-b5a4-8eb1a6289f2d", "indicator--cf9a4022-df36-4aa7-9a4e-8c7bf7574113", "indicator--db81610e-295b-44ed-8078-e2616c995587", "indicator--f6e12d39-2e97-493d-be33-4d0a8deaec58", "indicator--b0bfe42f-afe8-43f7-b065-99ce8afba99a", "indicator--ad0d2edd-4a2a-41d1-93af-542c036f5046", "indicator--4df00fcf-6f5d-4e57-9f6b-4523fafbdaf6", "indicator--c187a437-5b7f-4232-8673-693a19d1c809", "indicator--28fa52b2-a2e0-494a-b45a-8c0603e95dd9", "indicator--296fb53c-a82d-4126-bb9c-140ef0f11ef2", "indicator--1cd48875-6ebd-4938-8482-7751e027fcbb", "indicator--5c7049e5-c3a5-4ad9-88f2-5b299420e2f3", "indicator--aef5afea-9921-45cf-abe1-90d6b1a8404e", "indicator--d68acde0-44ed-4f94-9fce-446ce5b55252", "indicator--a3a15a59-2598-4f5a-8559-4a67f0bc53d8", "indicator--7c0594ca-93b1-4839-89ef-3b6d24e78735", "indicator--b3238ddf-bd1e-4296-ad2f-1e796397cc0e", "indicator--b97e2b9a-6353-4f52-9c19-4f6f8c07e12c", "indicator--697e8f99-ee00-4868-8ab0-4dd9dda6ad0c", "indicator--f5a02329-3341-43b0-bd9d-e8c140cce863", "indicator--c35e742f-e65f-4726-b9b1-87b0bd62a606", "indicator--9280f867-56bb-415c-8877-7b57b661f387", "indicator--ced3d06b-33ae-4616-aae6-1ebf92b259df", "indicator--df3a0b91-e0e8-4def-8917-082e3134c592", "indicator--dfb579de-9211-4d6d-922c-3f051fd28a41", "indicator--da21642f-c7a1-488a-b687-c15c9975b7a9", "indicator--696656f9-9905-4f1e-992c-60040e022b66", "indicator--5f333216-1b68-4043-a593-40bf9f61105a", "indicator--f1591745-19dc-4966-937e-afd7b261eb25", "indicator--f13143cb-735e-4264-a621-514a310c436d", "indicator--7c129d9e-cd8a-420d-9dea-fb0ce606c949", "indicator--d758951e-eb8a-4044-a6dc-9cc0961a2b23", "indicator--65842b04-4a4f-4af3-a01b-ebf2ad6bcfb1", "indicator--76e7ab7f-d53f-42d2-b6d7-b72d6d63e6f8", "indicator--656e6a68-9f52-4f4e-ba18-4171f007f11f", "indicator--7ef6b62e-827b-461e-a45c-aaedae8cc41c", "indicator--64a8fb13-5a66-4161-8b51-6d892bbeedb5", "indicator--1695aea7-7cf1-41f4-85bd-c83bc950d80f", "indicator--389e06c5-e4bc-4b17-b3aa-3fc63f369d08", "indicator--4f6093a7-8e6b-4761-93ff-86fa9e7fb122", "indicator--4df95b5b-95e9-4a74-93c3-d9e507184b8a", "indicator--ce48e7b4-d709-4aa3-8a7d-bae20b80fdc3", "indicator--318ff754-2d71-4557-8bf1-2e50fd454674", "indicator--cb677965-004b-47d4-902c-332836a23286", "indicator--8eb3c56f-31c4-4d8b-a285-fbeb46572061", "indicator--252ca049-3471-4ddc-ac6c-cc872a9e93e6", "indicator--e2269b47-b73e-46f6-adb3-75b0e9c31883", "indicator--f4eed9b8-7fd3-4989-b284-7fc168d0bf1b", "indicator--9182e38c-71d9-48c4-b7c3-ed601e1b874f", "indicator--321b94c0-8fcd-4647-9091-7284765fcf70", "indicator--8c00e39c-dea9-4d8e-a608-032f81897548", "indicator--075b5bba-ccab-4f54-a5a3-9c6f4a1c161d", "indicator--4adae599-7d82-400b-8368-ecee53d229a3", "indicator--ebb199f9-eebc-4f4b-9365-fde31aaa727d", "indicator--10ac263d-6002-4a08-9a58-a1615604aad6", "indicator--6b2eae23-49fd-4996-9f84-919a3639ba56", "indicator--df5be199-1ef3-456a-bb3f-5cb1e5bb58b8", "indicator--6b3fa002-3fb6-4487-8b91-8f95d9f02db2", "indicator--d697565a-46f3-47c8-bac0-980a012c2571", "indicator--07756772-7ea5-4b2f-8a80-b9e7132d9e08", "indicator--4cfb67ac-81f8-427a-85e4-ac664de2d832", "indicator--b927c194-6797-45e3-835c-cb45d12eb537", "indicator--7ce01d97-aed5-46d9-811e-64d73b8a6e8c", "indicator--9205adf4-00d5-48ad-84b0-11dc26e90d1a", "indicator--5390d9ed-1d1a-4f91-9cb5-7d34a20e0fe9", "indicator--46fe11be-4580-456c-8d70-b8cdb3339fba", "indicator--8b33cc65-19e7-4d75-a6ba-8d400c83abe6", "indicator--50015b31-5cc9-4728-b629-b79e71c4570a", "indicator--3a9a1fe6-28dc-4aae-9e6e-eb5d8d588860", "indicator--357aae0b-cbc4-43f0-9b2d-5a47443069e4", "indicator--fc77bac4-4ee4-4d65-9dd6-981149a193fa", "indicator--f5df51dc-13bb-4675-8141-2322707380de", "indicator--7390f383-14b7-4a68-822c-4f433db4114f", "indicator--8c4754da-42a8-46fb-ae01-6db4d542be47", "indicator--14f2d7eb-a201-4952-a700-5a0c5ff2e35a", "indicator--b3ae6e14-aeca-4435-9a79-a8830e166193", "indicator--c1686867-f921-490b-9c92-76efa7431e24", "indicator--4bae4260-82ef-4106-93a3-3873019047fd", "indicator--3f5ef14d-7a9f-4a33-badc-b46f1dee11e9", "indicator--0d1d3475-ef03-4bcc-9919-83745e9a819c", "indicator--4adf0cfe-4a67-4b45-9549-fcff0c6cecdf", "indicator--138f2653-346f-42c6-bf79-e348cc973c91", "indicator--e6b414bd-c795-43cd-ac03-decaebab78c8", "indicator--dd30cf56-dcb3-4f99-8d20-db9bbcd7a182", "indicator--038afa2a-a0ee-499b-8b64-ad2887ef3488", "indicator--37b070ba-2536-4b66-a4e8-f2d1259b7e5e", "indicator--db3b4a0e-7490-4d39-bebf-73712085f8d4", "indicator--be0a3119-721a-48f0-a493-ffd55c033a87", "indicator--7ffeacd1-0ab9-4ddc-9b5a-16f7c3784f02", "indicator--4fa67e4f-4cc3-4a57-a7d2-df2639772dec", "indicator--80c0e954-47c1-4e04-a073-042d73ba8ac1", "indicator--77392882-ff39-45d9-99c7-b764b3af664a", "indicator--a23ea3a0-14ce-4366-884f-d4d7769d733f", "indicator--4ab8bdbb-ff72-4cd6-973b-ae03fdc74af5", "indicator--73e7f03c-82a1-4757-bc6b-c5c198abbdd1", "indicator--1dfca330-1112-4bfc-bc08-9db47d8b38e0", "indicator--59cfbf15-250b-4f04-97e3-42a631b1aa50", "indicator--be3e7c7d-3739-428f-aaca-8e56bc65a03d", "indicator--50750105-360f-45c1-80fb-b116e17b917b", "indicator--fb3f0aa1-3ec1-48d5-82e6-62c8ac8a947f", "indicator--579ec904-7f11-4a94-9e18-6f9b306877cd", "indicator--a2626bff-61b0-4cdf-8e1b-61e616b88b5b", "indicator--9ee8d6d1-3e93-4a12-867a-55c89b24cf7c", "indicator--6d88656b-3944-42de-8aa0-41f0e3185023", "indicator--04f39489-b81e-4163-8a1a-0e27c1724725", "indicator--ecb0d45c-025f-4836-a46d-efce015182a9", "indicator--cab6c65b-d76d-4c25-8f23-5afa894c66bb", "indicator--6a201c8d-6ba3-4ab1-b881-e4b82ffe3fbd", "indicator--18351270-b9d9-443e-96e7-90f72bb4edeb", "indicator--2e473c0a-d7ba-418a-96b2-2b975c1d3cfd", "indicator--fa8a38e5-3319-4690-ad6a-2a51c31097aa", "indicator--4e8cd43e-0634-4e18-8fa9-aa8b66c27d24", "indicator--fb73346e-30ee-47ba-9fe9-a89aa32ad12a", "indicator--a71b87bf-d799-4ed6-b046-4ae884f282c4", "indicator--f635c0c6-0e72-45ab-ab34-4b735fea7d0a", "indicator--96f36801-adcc-4c9b-86f3-396a9f509356", "indicator--950bbf1f-7677-4631-b313-b1cb19ea9279", "indicator--3f031264-1b7a-4433-8752-6b22aa06478b", "indicator--04a983f2-b490-4c6f-9896-4474201e5c85", "indicator--ce0e141e-a4ce-42fb-99a7-63ab437abaf7", "indicator--9d0318cc-6c7b-4090-b7dd-3f74d717b45a", "indicator--575f56d6-d6a4-4915-90b8-cdb9bdd22210", "indicator--7fe65140-2896-48b1-9dbc-3ef9e025237b", "indicator--b35e1ab7-4203-4233-8f7a-b6e98f7b0400", "indicator--4200069d-d23c-4304-994e-61a33ecaf96a", "indicator--a7fd22ab-1ce5-4a28-aa06-7dfc67677bfc", "indicator--32030899-f45d-4289-93a6-23cb3a65870a", "indicator--654f3694-0786-40bb-9e70-5a3a504ead43", "indicator--63eb7d48-fbd2-4fd1-855f-645a81505265", "indicator--af36795c-39d2-4906-86fa-32f7e63290dd", "indicator--71fd2c16-5da8-4e48-9246-2be7d41ff083", "indicator--e6a634e9-f661-4478-971f-4af52b1b1654", "indicator--7e22c934-9242-4b87-aab0-b592aa48d0d6", "indicator--4c787632-8f89-4e33-8e71-3f4be68b9fa4", "indicator--f6c9bf9f-7eb6-4b2b-bc1b-91475a748b2b", "indicator--ba003adf-188c-4289-a2d4-ab9e1935c642", "indicator--62b8ad8e-e892-4f5f-8817-c22bbb9cd4a8", "indicator--4110cc94-7d6b-4f2f-a256-8308a8079ab3", "indicator--bb469aa7-29b0-43c7-8a12-29098cd0feb7", "indicator--9a2052cd-3cd6-455c-9856-05f8d2146e89", "indicator--28b91772-1d4f-430d-8875-15d8c4502a5d", "indicator--5ba03228-4291-468a-a1e9-cc80098a4389", "indicator--54fc8d82-d7b9-402b-aa77-fb8ea450f1ab", "indicator--53c990e0-acd2-467a-86a1-c6751f56604e", "indicator--1c426433-55f4-4883-9839-38ddb8c454e8", "indicator--421748d4-152b-4721-8f82-0afc534e1095", "indicator--e6b20920-30f7-428b-87de-5e5ac8e166fa", "indicator--e53b76e3-c83a-4d84-8e9f-1014be6eae9c", "indicator--0401a441-1bf8-4b3f-9672-985a3a256535", "indicator--34e5084a-b269-4899-8cbc-8635058aa26b", "indicator--c2af64e0-519e-4b44-85b3-19b8aa7ce0e2", "indicator--740596d0-8b16-40b7-8aa5-fae332cb1e6e", "indicator--77507e02-931d-49b0-922f-1c927bc960bf", "indicator--65b72bdf-7d9a-4813-a4d7-52eda1dfc851", "indicator--d0a67ba4-17c9-4d82-8e55-b621a0adbc07", "indicator--4b153526-c3d6-4634-9137-87ac64f53ccd", "indicator--5de317c1-e116-4308-904e-cbe2c260e372", "indicator--f94aefc4-6214-4e11-8d99-003e2da59ad4", "indicator--ab630ea2-fffe-4ef0-b26e-302535f47a36", "indicator--21af0901-b271-47fb-84db-e276a19f5537", "indicator--4452adb9-3815-4dc7-acaa-122e8245b8be", "indicator--89c54003-e8f8-4e8e-a4b6-30c16597af13", "indicator--1be7c59d-1165-481a-82b3-bfd3d8a4ba4d", "indicator--8750a17c-ac96-463b-89db-840cea806535", "indicator--6d837e91-3254-4c8b-93c6-00798c465939", "indicator--6690b77d-402d-43e5-a12c-9d42545affc9", "indicator--9a691862-5f3b-432e-8d19-7d842a222a74", "indicator--321be75b-cfe4-4d3b-b350-bca3674b1eb1", "indicator--0e8b2c29-16b0-410d-b058-d5b3492e0c4f", "indicator--1e845b14-75d4-4fae-b816-7a124f68eba8", "indicator--e5804130-63a1-4dbf-8f49-33afafd7d54c", "indicator--beac06e8-4f10-4212-83b8-bb14dd68b6aa", "indicator--2bc69dff-79dc-4eb2-9290-b82ea26aeb21", "indicator--823ee5f5-7e00-4593-94ca-bd0a64770fa2", "indicator--bdf015d7-e4f1-4845-8153-d0c50bcf4aa9", "indicator--a38ea1c7-d58a-4246-9047-594f7ba1453f", "indicator--7365672d-3234-43ae-955c-f684e7885af8", "indicator--bfe79de2-72da-4e2b-8e70-9e04251db8f1", "indicator--2fe77ac7-bd1d-47d0-b149-c23bbcffe9f3", "indicator--96bfed48-3026-4bd6-9acc-1496d0038907", "indicator--7f60d016-6327-456c-b511-639135c92d7d", "indicator--f34fd284-6555-4e26-a0a2-db4811f80abb", "indicator--0bf29498-a219-4978-b29b-66214a1a16de", "indicator--48b117b7-aa7b-4895-bf17-57368a77601b", "indicator--87b4b799-5513-4459-8399-1b61278bda4e", "indicator--deed6b7c-5470-4a45-b9cb-90f32554a76a", "indicator--a8924c7c-586a-4dad-8396-112f7f9a9373", "indicator--75aacab3-bc77-49c3-be5d-400f6052469c", "indicator--03d58f45-d75f-4450-acd7-829de7918247", "indicator--2e7c9482-2173-4fc9-93d7-9d0f474875d9", "indicator--6081b782-4a1b-4b46-8d91-44f84ee66a02", "indicator--8c7d75c2-b4a7-426f-b813-2b6780963096", "indicator--0ed7010b-9c89-4c2e-85e6-503635a37c31", "indicator--e94aebbf-25b1-4218-b4ca-4ff39275ad5f", "indicator--937f2e06-64bb-4b9c-9fb2-5445803e5454", "indicator--ddeb14a7-34ef-4112-b478-2230830fbf22", "indicator--46008baf-d7f0-4701-9d79-9e258b693a61", "indicator--52aa4ec7-38dd-4f58-bd7a-4436df3d4222", "indicator--14af79f6-8b93-4d07-a02e-bf484bea9ec9", "indicator--fa860162-8139-409c-95a3-44a2f6f722e5", "indicator--11b82087-9088-42cf-81ab-04ded6a06855", "indicator--86975816-99e5-4f3b-bd5d-d55c569fe566", "indicator--65bbb2b8-11e9-4dc1-b360-d91201a79336", "indicator--02013687-f654-4059-924d-e0edb51e43f6", "indicator--5cf3750a-63bd-493e-8a17-ec42a7fd8a08", "indicator--05684b08-e1c6-44d2-9cef-adec9de78d35", "indicator--392f0064-ed91-4c5e-a817-6ce6a7dfa788", "indicator--dbcd0ba5-51e2-4419-a717-9933b2459af9", "indicator--ba9e5394-2d70-4d1e-aecd-3eebde54d8dd", "indicator--ff52550d-37b2-423c-9225-64b7e6f41d14", "indicator--da1faae0-7c33-44ca-9155-0e699a3df251", "indicator--e7edd051-ff78-48ad-8faf-6510d8ac7e1a", "indicator--71db28e2-a6d6-4b3d-abd2-5cf998aea504", "indicator--7c74b734-b44d-4701-946b-99c15cd3afef", "indicator--93f1544c-83ea-4954-b59e-43100b0ac5f3", "indicator--5098aaf5-24fb-4899-84db-98519089b687", "indicator--75ddf82c-a056-4d1b-aaf7-44191443e695", "indicator--6024c342-3f39-4a25-8ebf-8856ca3816cf", "indicator--bfb1dc09-2cef-4d69-9b06-d190353f0b10", "indicator--4199df8a-fc61-446b-a934-237e164a9437", "indicator--8fa95bf7-902b-4881-a8a6-f100bbabc327", "indicator--ec8de13a-6159-4347-95cd-b4fc8f04bea4", "indicator--446a5943-cd39-48a4-bb64-e17167863ee8", "indicator--d89b3aa0-4bf3-414d-9f60-0a73cbdf4ac0", "indicator--2791e49a-f176-4079-a466-ceb8d17af542", "indicator--c9d9ad33-a416-4c6c-b49b-0bf61546033d", "indicator--b1cb07d1-27aa-4b26-8894-7eac88257a98", "indicator--48b1e432-152e-4efe-83db-cf71ee06836c", "indicator--cd1e2bc4-60f6-4d61-9b0b-355d04474bcb", "indicator--252fa082-0ce6-433c-8b6d-dfb0e274f1fb", "indicator--3e4fcc52-7f5c-4458-a428-bf3f7442114d", "indicator--550000df-6ffa-40a5-9fee-64abd12638da", "indicator--c7276a21-43dd-4b7a-afed-f702b35195fb", "indicator--78dc753e-de40-4ea0-b10d-a6d27e9991e0", "indicator--ca65769c-d3df-4496-8ed5-1dfa3fd7f651", "indicator--0ade4482-e2b5-4d41-9c73-0a03cccbbcfb", "indicator--c4c151b3-417c-406e-b961-8bd77aec2eb0", "indicator--85db972a-9c5d-4e5f-a3dc-7298b48b5329", "indicator--345fce39-e63a-496c-99e5-d363f612816e", "indicator--5f52e988-daac-4ee0-82ef-be854a175ada", "indicator--b753aa9a-d0b2-4fd3-8e0f-cfb57795a149", "indicator--0bffdbaa-e606-465e-8287-b9f32459f7c3", "indicator--9954a448-a454-4bea-8737-3ffc8ce738d1", "indicator--e5d19a19-f4a9-4ccc-88ab-f461e4dbf2e6", "indicator--3b3d9a56-0e62-4c21-a4ed-2ce11275f049", "indicator--947b1164-c9f6-4dd7-8ac9-d8b98dfe0c02", "indicator--8b0e596d-3c10-4c80-adcb-bc78a927943a", "indicator--709fc513-d3fd-4ee9-a6f2-adc93e4b2fa5", "indicator--36381368-38b3-4858-bd62-4a954562634c", "indicator--bc7e5d91-54c0-4e39-bada-236bfeba7e83", "indicator--46823ac4-5144-47aa-87d5-f32b58026129", "indicator--18868a7a-d598-49e0-a3be-b7da839b6a4a", "indicator--fe359012-70d8-40b2-ad19-418bc17c517c", "indicator--77552a3f-2e10-483a-a4e2-8e35cc72b972", "indicator--123c5144-8ed7-4cf1-9696-81969f8f3d24", "indicator--181bf79f-e996-41b0-b838-b54b47fe5c23", "indicator--4f02fed2-6d9c-4fa9-ae4c-cb0525dcd91f", "indicator--c406e4f6-79b9-4246-a9a4-cd1a9a81dcd3", "indicator--8d94501d-9137-4c3a-b2f3-994c39d30f29", "indicator--db629dff-30b7-4db2-98d9-e7308fdccef1", "indicator--dd0f6c54-dd5a-4228-8461-c27a3a898ee2", "indicator--8f013df2-b055-4a2c-b035-b078b9070498", "indicator--801f8393-61bc-40f9-9bae-b18daab808f1", "indicator--32b020f9-f75a-43fa-9572-e50c1ee525b2", "indicator--bac4bd99-410c-4d8b-a724-724e9b52d1ff", "indicator--2b1eb405-8738-4914-8216-fd073ffc26a4", "indicator--76e5a842-a550-4da5-a10c-9eecdfde9649", "indicator--e54d0f81-4d38-42d5-8f00-b0acba252a7b", "indicator--1336d6d8-6967-45fd-8f9f-43ed306e7d37", "indicator--cdf99d9a-e9f8-4bb7-874c-77d2da3cf1d1", "indicator--040d8a63-a811-42f7-88e6-59d504493521", "indicator--2bc531eb-c3f4-42b3-b9dd-679bd4118589", "indicator--3ac29adc-6df8-4b68-a207-271875c6df3b", "indicator--70e26eb1-2810-4cd2-ab47-5fb71b378ac1", "indicator--f4ef5e20-c126-4268-ac98-72db02a83af0", "indicator--1c72d7f3-6551-435d-b17a-85f56bd0a2da", "indicator--a06c4276-870f-41bd-9af2-a9f8a76e4e4d", "indicator--58ebdfae-4290-45f7-9ebc-3a4effb3776a", "indicator--253c1b62-60e4-4fd5-880f-4c1f22579ac4", "indicator--77ed1792-0d4b-474b-86c5-a613afc38ea6", "indicator--fbb1fd64-6a4d-472e-8469-6c9ae948b2cc", "indicator--38a35f29-765e-4455-a6ee-3e558c2d17ed", "indicator--0a218d32-e386-409b-aae2-ba22e96ed052", "indicator--1ec03ccc-41f7-4de3-b176-8e156a46917c", "indicator--7d745ba6-3e7a-482e-9ce7-459a404d1831", "indicator--080f904f-c580-4f88-bc78-b91c72252e4a", "indicator--f2dfef47-58e6-42ea-8f4b-8fe06be327ff", "indicator--2a9493d3-79ca-4e8f-8220-cc0aa6a5c043", "indicator--98126b5a-5fe6-4043-b30d-a2de28b0964b", "indicator--4715ff90-fbb5-49a7-9f0a-360892204124", "indicator--d6923476-7b91-4a4f-9a95-62e36559d8c4", "indicator--29dfc214-242f-4ea0-ac5c-2db05e2780d0", "indicator--f3cbea65-1942-411d-a9a7-9480a3fb77d1", "indicator--7a00c25e-802e-46f0-92b6-1c76228b7db0", "indicator--807c9903-3c84-408d-8ce4-4a28400c42cf", "indicator--81d2e647-4932-4c25-8f05-b7710e101f92", "indicator--9c9afbd9-1369-4e2d-8a7c-c0c0f3049b8a", "indicator--6666fecd-2abe-409f-b186-1638b2c018e5", "indicator--4c7ac52f-1415-4ee2-b0d5-6b1c0b8b1d10", "indicator--e8242d85-1333-434e-bfff-9b40f343ef74", "indicator--ebbc8399-a5bc-4b30-aa6b-bb1538e328c3", "indicator--cc6db971-6223-444e-be98-fc2f396945db", "indicator--f285cbec-16b0-4391-affd-396306edb554", "indicator--8f9ea86a-119e-4966-bb17-93afed3cd3ec", "indicator--8af493cd-874a-4454-90b6-d4a451a6e396", "indicator--2f435176-0912-4f0f-9feb-d71f668aafbe", "indicator--a743609c-5d8f-49d6-a2da-d3aed5bbc223", "indicator--9d526fae-9b8b-41c6-a52a-153ea585b375", "indicator--dd6e2e4b-89cf-4bb7-85ef-96344fd0a094", "indicator--3046c907-eb33-4c1c-9a18-c27086827a0a", "indicator--94d9b880-47d6-4917-83a7-96c2ff670a6c", "indicator--7b000981-1e7e-4b09-98ab-66208a8f1972", "indicator--d12df492-4ad8-41e9-aaa3-ad281ce4b0f3", "indicator--fcc8332f-0b10-42f6-8014-6d905025f377", "indicator--30977d54-f48f-4658-8a69-81ac177a3170", "indicator--55f8d1c8-9e76-4593-9836-09d63b288861", "indicator--10401171-3a88-4129-9520-c50ea3295f4b", "indicator--14e9fa80-dacb-469d-b615-87d82c089733", "indicator--f0f552ae-5f6a-4fcd-9cbc-16af5f6a3e56", "indicator--cf67a048-8019-4b05-b8cd-66e07fdcfbb4", "indicator--7a464902-e3f9-4809-90ff-8ef53f3150ca", "indicator--803bb749-d3de-47f4-96da-0c1ccc0fed89", "indicator--31bafea4-d7d6-4293-87f1-61531734882b", "indicator--ceabc408-aea4-49e6-9ff9-9f3b1e68a0c3", "indicator--75fc1240-f06d-4bf8-86db-ee2b24458281", "indicator--6770dcd2-f593-411b-ab06-16e7ebe00ca5", "indicator--7e47403a-1c9e-4353-be90-95583fbdc82c", "indicator--61d9800e-f036-4046-9ba7-4919d566c237", "indicator--3d3b553d-3736-4ad3-b7b2-b0956d09a716", "indicator--a61ae2c4-0627-4216-a4ba-45563227fc37", "indicator--68ab85b5-695b-44ec-91a4-eddc5ef17ef3", "indicator--63c19272-109d-47ea-903b-bcf45641828a", "indicator--dee97c8c-1fe6-44b4-99e9-4f18fb96aa71", "indicator--9c35488f-1f1d-4245-8e10-6040940f295d", "indicator--66187f64-4de7-400c-ab25-05be42b8fa8b", "indicator--aa937cdb-d3c5-4bd3-92f8-3afaf6e71755", "indicator--076fd932-c006-4f1a-9fd4-de60d1075a23", "indicator--8715d1e6-4c85-44f7-93db-87ece36080ee", "indicator--4bf02097-2f2c-4c6a-8384-77667de44993", "indicator--25dff6dc-9418-43fe-b83f-e34d983e0a9d", "indicator--9f5157d0-136e-463a-9c68-7f1788dda636", "indicator--336cddd3-c784-4085-89cf-eed8c2acf63b", "indicator--96e25e94-170c-46f6-b5d1-774b0a578e5c", "indicator--b19d8d9c-4c2f-4bdf-9988-7ea2f1c1ffe1", "indicator--13b3151f-3707-4e83-a9d2-a0672432c324", "indicator--4d6be905-532d-4739-865b-554fe2f2511c", "indicator--739c4c26-0bc7-44dd-9b34-0da0f8f54488", "indicator--5a817a35-5e92-42b0-bc1f-8d3c206ba209", "indicator--623a5969-f129-42b5-9be6-9501fde91f0d", "indicator--519f1a48-551f-4f81-af1c-9074b1d5d32b", "indicator--05821ac7-b1cf-4caf-b05e-9bbc7fe117f3", "indicator--29a6288c-201c-41c7-8d03-7c4c75233f5e", "indicator--14ea3886-55d9-4603-a339-aed0b307de8f", "indicator--64593d91-d242-4459-86fc-e6d146e0623e", "indicator--b455299b-ef87-456f-8b95-4b9288d635df", "indicator--300fc8d2-20ad-4605-9066-1cc8c80a90fd", "indicator--6cbf28f6-6ab4-414e-ab2b-29a686c3890c", "indicator--9b82a36e-c3f1-498a-8ade-4b0687d89f8c", "indicator--89bd03b2-2640-402c-ba72-64f46e6f98f6", "indicator--ea354c0b-453e-48c3-af1b-2950406f6e7f", "indicator--54959796-66b6-4617-a047-29dea2dae2f9", "indicator--6ddc92e5-c711-47d0-b26b-2d3ed447a513", "indicator--9b8f3d17-5f48-483e-9749-5ab860657296", "indicator--270f59f9-6bcd-49cb-bb18-5e677f36bb32", "indicator--48dd444f-8fb3-4695-8a04-3deb248b71b2", "indicator--43cbb877-596e-463c-af53-539c1f5522ff", "indicator--876a7f20-9a53-468c-a14a-5c58217b4915", "indicator--137c1d3a-6b65-4970-bdd4-c606d825cdb3", "indicator--910473ba-0632-4d5d-a233-14fc52eebe5a", "indicator--a4177544-22a3-4fe6-922a-df14c5dba744", "indicator--97e70a71-62bf-4d7b-96af-a74237f10031", "indicator--33e15240-86ab-4996-a77a-9e72b488d413", "indicator--795d55ca-5ad7-4a4d-9995-0e4401333fd1", "indicator--1ed3ac74-aab2-45c9-9211-ad0707f69970", "indicator--ac8e04a7-40c7-43d6-8ac0-f81057278f27", "indicator--6ce46083-3baa-4970-a960-dfa249714e4a", "indicator--2fc9ceaf-cfa3-49cd-ac2e-96e6466e3a37", "indicator--d295868c-9845-45ee-944d-2f4e8eb69efd", "indicator--29604bb7-0e25-496c-b2ef-f9ab4d253c10", "indicator--a0af8f46-913a-46ac-bac8-ada749abdf66", "indicator--aa344e0b-74c0-438e-bd0d-2c044afbe39d", "indicator--c3eb6723-4abd-4379-96a4-7e5d2b9b9ab4", "indicator--977b1e7f-e337-4b0a-b371-0e087f35c862", "indicator--bf5b2657-a9d3-40c9-80ae-bc9b9e76abbb", "indicator--17993700-e36b-402c-87f2-f8797858a082", "indicator--f302a076-5831-431b-9c14-e8044bc261aa", "indicator--da3d9ef5-ca4f-4208-aae6-d22aca9240e6", "indicator--990ef6ca-db1d-4845-99c6-4d38f3b16f6b", "indicator--e31c1c8b-825d-4f23-8a48-3892e47df090", "indicator--a1b82cac-1fdd-4d19-bd54-65eaef56bc6a", "indicator--883792ae-cc9b-44a7-a635-802dbb7681f5", "indicator--7a0ca584-a887-4539-9be0-348aedfd58e1", "indicator--b968c1db-95d8-48b0-866e-dace314356d8", "indicator--d616bea2-a8d4-4801-99c9-fb4c0f43dc37", "indicator--f6b2d2c2-aee6-4c85-b06a-ba23b48ab793", "indicator--e07a0b18-fbf7-4367-b9cf-47b2f13dcfcb", "indicator--f2940891-b734-4c4a-8d73-20bd883d1f9b", "indicator--c667fa8b-a104-4311-8dc2-dd82b60986b1", "indicator--3b50fb76-b5d8-4c47-9aed-0dbf1bea1350", "indicator--2a3cc8de-cbff-40ec-a493-17a75966840f", "indicator--c80cb179-5e3f-40de-b980-515f492cd80f", "indicator--ccbd6920-cc36-4eac-a49b-fe2656c21eb1", "indicator--e811cdb0-66f0-4c99-a0eb-61059e5a41c4", "indicator--101de2cd-0aa3-4e4a-b36d-d4cb621aa767", "indicator--c397de4f-e5b6-424c-8bcd-943fc73f9e06", "indicator--6c2227e1-1e01-4e6f-b426-18160c205e6c", "indicator--cf2badff-db38-4659-8722-25d5dfab361e", "indicator--18c3857d-f65c-4ddd-b664-39584ec1ddc8", "indicator--34b00da5-9fa0-48e3-b880-cf27a359c31f", "indicator--4ab8e81d-64fc-424c-8366-e7c0856661c7", "indicator--f5748dbc-faee-4101-9005-2f622ff6d7a6", "indicator--66d26db2-06ce-4954-ad4c-af48927c5706", "indicator--3e74b735-9b4d-4c7c-a8a1-c5e749452b4e", "indicator--d76e0321-6465-4e24-b0de-385c4b85c616", "indicator--57c9d657-ba95-4997-9c41-9b6204ab48d3", "indicator--60d8c3d7-446d-48b8-a10e-a4568dfd49f8", "indicator--56120603-aa53-4b09-8526-54443ce8c08b", "indicator--645d6665-b591-4884-b86f-43be3cb46599", "indicator--b1cc2b7a-e7de-42bd-a7e9-de9b8fb6322a", "indicator--a2578c26-2575-4bda-8a63-83b80cd3a2a7", "indicator--7d8950e7-b37f-43a2-a46c-66b21ce51495", "indicator--d64a9f9a-53b5-458d-833a-f3f1d2b0b47c", "indicator--7de3a218-9485-44bd-afe3-9e5c25f9a92c", "indicator--dae09111-e50e-4343-8475-a97b90edcb0d", "indicator--dba70066-6636-4fa2-9a13-fcabe7e47dbc", "indicator--653b3bd6-a399-42aa-a416-2054cad09000", "indicator--7844c55e-85a2-46ec-bd91-2d513b849b52", "indicator--881b0daf-7a77-456f-a12b-51181eb19b31", "indicator--174ca728-7457-452a-87b2-ae0c945efae5", "indicator--faf9430c-4387-4d7b-9065-6aace3648510", "indicator--2038bc37-3573-4e61-82f5-6d4e03e4d817", "indicator--9024968f-0ba1-4321-af29-f41f3e4a01d8", "indicator--cb4da2b1-314e-4962-843c-bd0adcc60ec5", "indicator--44925c77-137a-488d-ac38-42da3bd68cfd", "indicator--f04da65e-a097-4240-ab79-f1f3aab158dd", "indicator--91b73aa7-82bd-44b7-9755-59862146c108", "indicator--2e6d4695-604b-4550-8747-0b64e3b1969e", "indicator--6e7d363b-e24f-4384-93ba-f2e1d31a086b", "indicator--6292c93c-9819-49c6-9a9a-2eb7adb53ef0", "indicator--70b994bb-d10c-4331-9e94-bd6f25248ad9", "indicator--aef05644-cf30-4786-97f3-3b540d7271d5", "indicator--288d0f2a-fa72-42c6-9280-fa1052970dfa", "indicator--cafaa570-1995-4fa7-9716-4c9692fdaa7d", "indicator--4737a14b-d066-4c32-89e5-75c76c9d18da", "indicator--71da1711-b301-49d4-8bed-69019fc92e72", "indicator--bab337a2-8ef3-408b-966d-b48fcfc99cac", "indicator--4d9f9c0a-e8a7-46b7-82e6-85e9f1930035", "indicator--df53a939-c71e-4858-8657-593c7a3db632", "indicator--ef2786ee-c5eb-420f-a521-a005b9d69653", "indicator--013b040a-1eca-48e4-9737-1ca46595d8a6", "indicator--f3055d9c-4caf-47d4-aaff-d850b4119225", "indicator--9d5aac5a-3be6-452b-bf90-591c8029e7e9", "indicator--42f67d6e-925a-4f3f-9d32-dc9647520f78", "indicator--5c3f5d4a-76ef-449d-8e4f-235e18765bb9", "indicator--45475302-b81c-4743-8528-f0165400b386", "indicator--2c854c13-9428-46dc-ad0f-29a1cab8fd1b", "indicator--cfed7220-58da-47a7-8291-c9a9947c59a1", "indicator--78c35fbd-24f7-45a9-8e0d-78c8c512a613", "indicator--9bc04ad6-ed45-4cb8-a59f-0ee8020e8301", "indicator--04d84ec9-99ad-40ba-abd4-e6a5a807850a", "indicator--82ac60f7-90ef-400c-984e-0f63ae61bc73", "indicator--a4640477-d610-42b9-8042-db88fed62bf2", "indicator--42bcbb1f-0839-4781-a072-497c9bb54638", "indicator--379184c8-30ef-4316-af18-09b484ce1a9b", "indicator--2b223f22-a150-4a41-8c6d-c5997fddf0dd", "indicator--d8de0e0e-9038-4d8d-acad-c7b9a5b03e9d", "indicator--0242fc24-c3c9-4262-928b-f2b5c214c4a5", "indicator--b7d5c59e-56f5-48a3-8baf-4412cdb2a90f", "indicator--c169c2ab-6f02-41d9-adad-31bc63c8c634", "indicator--99cc288d-208d-4f5c-8e18-725589d33ffc", "indicator--1defc742-d648-4abd-8f63-47fcd3cfb80c", "indicator--4182d517-e6c7-4bdd-97de-f2df80c01b9b", "indicator--3ae8594a-670e-4e40-a53c-0a4d4ab01740", "indicator--564a2949-11bb-47a2-ad54-8eac6f9a1d58", "indicator--1740da66-75cf-420f-8ea5-436d46ef36ea", "indicator--86ad359c-7c69-4d3f-b4b6-5f80740d3939", "indicator--baf17c9a-4f0b-4b21-90e9-1d2d5f743626", "indicator--536ceea9-7f18-4c0c-8a09-ef78d2757a0f", "indicator--fa60f603-400a-44cd-a2e7-25fa8b1a0a0b", "indicator--8b4a39b5-df55-42c1-b750-680c1c427ff1", "indicator--5290a892-25a4-4159-a9d8-e0a22ee76b44", "indicator--3d9111bb-d6b8-4aac-8a80-6e39d8622a70", "indicator--b88426a0-4899-446b-921f-a677c80ee32e", "indicator--5e1d3c27-9214-41ce-97ff-5a16d7193df6", "indicator--eaf7c726-ae97-423c-9789-202e43211d01", "indicator--080e0539-31e6-4f42-9f9f-687b01423255", "indicator--1ccd28b7-0a7e-4223-a978-7376e5282817", "indicator--907dee0a-90ae-4d61-95d1-6a759b8c2f1c", "indicator--62f4840b-cb2e-4aa3-82fa-ce94988c42e9", "indicator--500ba4b4-5a0f-432f-81f5-09debcca30d5", "indicator--07dc35dd-0d83-4aa5-8056-50a69fd72f18", "indicator--c1c52acd-2b15-4564-872a-fbc667067f75", "indicator--cb92655c-7cac-434a-95a3-0d362109c2b3", "indicator--f13dcfa1-a1a3-4147-8892-c5560910fb95", "indicator--aed7f78a-7068-4344-ac87-cd70c33892b3", "indicator--8d430b63-b86c-44b1-a764-7ba14735e860", "indicator--49723379-ad91-4b76-84e0-403d27779e0e", "indicator--49bf7427-3bdf-4bb6-8fcb-96b8982e3398", "indicator--e84a542a-72bc-4d58-b906-ada825ef1006", "indicator--2dee346c-2869-430b-b60a-3b2c8017c89d", "indicator--16581e75-8f56-4427-aa7d-9c62dcd88a1b", "indicator--5086bf7f-1be0-43ae-8ccd-ae615de4dacd", "indicator--cbfc7102-b9bd-4b5a-b10d-612bee8a4fad", "indicator--836842a9-55a2-491e-a056-e7100e2cc03d", "indicator--66c5c0c4-e3f7-4285-a289-10e0d27cab3a", "indicator--d118b1b7-8961-479c-a703-d4b03c13d10e", "indicator--44846b37-ff97-40a2-abfa-5433e1979546", "indicator--38ec0246-c767-4690-9dc7-d9f11a443775", "indicator--92934f72-1a63-45e6-907b-84ae933f421e", "indicator--c0c7a473-3c59-46f6-b5f7-cffb0e849c31", "indicator--344e3849-5a90-4c76-be43-2ad230cd38bb", "indicator--6093c2c0-fc53-4c94-81cb-77b093273a0f", "indicator--dc60880e-ff00-4ea6-92a6-8bee65ae0a99", "indicator--f6205dc8-5ca4-4ee1-98f5-96297fd14c3d", "indicator--23ed254e-3e20-4fec-ae49-9335e30993ee", "indicator--245346d8-cbbf-425c-af9d-fbaa58ce90ed", "indicator--92f76a4b-a2f4-47cb-8893-4d2fc8b9ad5a", "indicator--471511a8-2bdf-4718-845b-2fa572b67919", "indicator--a5663cb0-8a52-42b6-9ceb-090eb87872f4", "indicator--cc2d16a6-fd14-40c7-928d-c0f697fe3247", "indicator--fe8ce18f-dcf1-40f2-a119-18c6d6d03d3b", "indicator--cb2d8e5e-1d06-4bda-8003-759f916a47e9", "indicator--16d805a9-105e-4224-b8e5-d3b67ced1cd2", "indicator--af9b87c3-4dba-4303-8c23-615e721e731a", "indicator--7bd3e741-1672-4ec9-90a0-57c80345e058", "indicator--6b58e506-184a-4bf1-9e86-5f0d0e11c455", "indicator--5b2eb8a2-09c3-45c2-af25-63061c742018", "indicator--fba03ee9-724a-42ae-871f-75d78c0e737e", "indicator--8092363a-f949-467d-b6b6-be71e38594a7", "indicator--0be9f10d-f453-442f-a25a-f793fec1f546", "indicator--4533e642-1ea2-4736-9513-c7ed4b68fa84", "indicator--031454e0-c6e4-42d9-b517-5a78078c1376", "indicator--188a1da8-d9b3-4a52-be56-b3def35afb2d", "indicator--4f6f8b77-84a2-4c94-abc5-dafd1f4a5140", "indicator--3caf1c4f-6d77-4c3d-8674-ab0ece77c768", "indicator--83b1a9aa-0b46-4b12-8faf-6cc717e63e1f", "indicator--3c1db245-c319-4f93-bfbd-3a87bd0755e5", "indicator--503b32e7-340b-4e3c-a90b-ca6a7c986dab", "indicator--821e2ca0-e015-4e1e-a415-d1ca0668be22", "indicator--a42da0eb-ddc2-4888-a5de-48b644413447", "indicator--9110eade-17f3-455b-8652-644c05a109b0", "indicator--ff63bca6-b3b8-41de-aff6-ba3588afba63", "indicator--af17509f-c173-47f4-a703-32c283bbd45a", "indicator--b619c943-a5e9-4fbd-8f50-7f613eab4af9", "indicator--62fc6218-cf5a-4661-a09a-38609eea68d2", "indicator--7f42a94d-fe21-46f2-9bab-213d832b034c", "indicator--72e0f327-9f54-4ef7-8908-0842d8444832", "indicator--3a00d796-9d22-43c3-97ce-5c68ff17d3d1", "indicator--514b4340-071f-4a38-a7f1-ae6b20fd135c", "indicator--842ea1f5-cbd1-4afe-8fb3-5bb7c2bac0cd", "indicator--736eca34-a487-4a93-9a72-078c6824d0f8", "indicator--7127a9a5-239b-40ef-99b1-c54d84a69ffe", "indicator--f1cfd062-bcb8-44fd-bfa2-1b24d9abaee4", "indicator--b6b37a34-b184-4e05-a87c-370b0de57fdc", "indicator--47b861f0-1492-4bc5-aadf-efd7b8758097", "indicator--56d41e43-8b68-4833-8e70-ebd9468ed6eb", "indicator--2f00bd97-362d-46e4-8217-cc1f5b9fc00a", "indicator--e8e38841-51f5-4603-8a04-f3718eaca1a0", "indicator--d965469e-bef4-4228-bfc3-f09a35f82f23", "indicator--3b49e99b-f4cb-4c72-8aa4-c197f8f11fd5", "indicator--958621eb-6039-47d9-a17c-cb9426679a23", "indicator--c9d07622-92ea-4238-9375-bb50a180a365", "indicator--0f39a64f-8caf-4fc4-89d5-a4d813c3a7c9", "indicator--9ab8b428-5014-4589-be1e-663042858b0f", "indicator--2d5d8716-464f-4d81-bc6b-ebccd878548b", "indicator--91701bd9-9a0e-44f5-bd89-42899cdcfc20", "indicator--20b9846f-38e7-4c84-b69c-de30bab328c8", "indicator--c0fd4b37-d0b0-4eed-abb0-c8f7091216ec", "indicator--3ae829db-23b3-4d74-861c-7bca5ffad705", "indicator--571e1b31-7135-4a75-abd6-b70532ca61aa", "indicator--b1e85fb8-a713-4d24-905e-276eee45cba2", "indicator--e1a5139a-5fa2-4a20-a5ec-279468626d2e", "indicator--c500bc0d-2156-4fb2-b99f-bf1b672689e7", "indicator--7a4d3771-c080-47ab-9c6c-106305ab0790", "indicator--619fd685-fd7e-4771-9b68-bb4ae6ee876e", "indicator--609426b8-6d6a-4095-adb6-c02d1b096bcb", "indicator--a466633c-4a88-4ead-9a5b-bf77992f2946", "indicator--1b349755-fa90-4025-a914-a769a33f6911", "indicator--bdb63329-ba80-4c24-96a6-5f3d8026b25a", "indicator--3786b9f0-800f-460f-8aec-535ceff30824", "indicator--22dd6f72-8e19-4410-9bc2-0007afac0a1d", "indicator--cf987bff-5dd0-49a8-a0b3-269cd61fa940", "indicator--020a6dd2-a7ce-4b8d-8d57-77946572352e", "indicator--da7b5640-f943-4baf-9efe-d7e915c06f78", "indicator--00acd522-1733-4716-9345-4c2e2b5eb46f", "indicator--ea8032b9-9ed7-461f-89d1-31b70e1b82a5", "indicator--2d485cbf-123c-4e55-bc5e-228a5d3e3899", "indicator--ff966c6b-76bd-48a1-b891-c5702975c003", "indicator--5e5c4979-b220-42e7-a3c0-53d73725b016", "indicator--7e149c49-c349-4824-a708-83ec63248a68", "indicator--656de02a-7a23-4311-a0e6-e977502e6e41", "indicator--491e9590-e057-4d0b-b2f4-cbf9f9c89d5d", "indicator--4049cc32-9817-4ff8-a113-4a7d8e9eb5a8", "indicator--ce5bd97b-cc03-4760-875b-99e3ba5c3354", "indicator--4a2fc532-df98-4981-b779-ef28793499fe", "indicator--e4bf8cd6-df1f-476c-8df5-02688f97bf40", "indicator--2d39f9f4-82a4-41bb-b268-36a0a396c3c1", "indicator--5c3dec5d-2f88-4e2a-be0c-b9faa733e008", "indicator--3f90e188-8b5a-4dc1-8381-30e938b260af", "indicator--e813d160-b00e-4159-90dd-cd8936ddc2ab", "indicator--06f437a3-30d7-4cdf-8aeb-586f7be5c3dd", "indicator--1476718c-a8bf-4604-98f3-5a9382144ecb", "indicator--21a3a745-cd40-49b5-98de-1904ed90ba58", "indicator--091d767b-9410-4434-9fc3-70b9e9876829", "indicator--f9b87318-be43-47ab-a357-d1f4e25a5ab5", "indicator--e9cd7a38-95c9-4333-8caa-ca225ad83667", "indicator--38f75a62-4ab9-4f18-8b69-540eb428d6e3", "indicator--f3adbac4-53e2-49dc-97a4-9caa1cb9ca65", "indicator--24ef88fe-dd56-4fb3-833e-fe7fbbf68f4e", "indicator--9cbe030f-ada7-4b41-a6ae-6da871f87928", "indicator--3bf2e05b-db18-4c76-b87d-1767945d5c70", "indicator--4e67b6b6-3127-49f9-9add-a982a6a0f3c7", "indicator--37f33381-e971-4cc9-82fe-86f16f6dbbbf", "indicator--55f38180-f0af-459c-a2f9-a0f72fdfd5f3", "indicator--4c2f53e3-0e07-462b-ad06-44ff3745fb57", "indicator--adffd8f2-6ac3-4104-ad59-7bf57ca5138e", "indicator--47bc5fab-8e35-4474-9fe8-58ce0b4313db", "indicator--43c35cb0-2185-445e-8e3d-520f36228ebb", "indicator--ca2ef188-6b57-4647-9561-ea7f0e74092d", "indicator--dbb8eb80-09e7-4920-a05c-e9943121e2f1", "indicator--d42b90ed-ec34-4ff7-8cae-f8f8d168ff38", "indicator--6af4b249-e1dd-4159-9294-0dd4e9bc325b", "indicator--c898d3c0-97fb-40f5-8fe0-d82ba16352b7", "indicator--0f941d62-f25d-445e-8c9b-14bd95b50ad1", "indicator--8ad42039-8ee7-4f3d-bf90-11438abb695b", "indicator--0c8bb372-0368-4077-b0b9-72f8079dae9a", "indicator--82c58c99-8e02-49b5-9143-e9ff2ed18cce", "indicator--8e85606a-5709-4184-8392-870006be2e7e", "indicator--b6442a5e-ad17-4d15-bf28-feb713a443c1", "indicator--80019814-faad-4547-8aed-0e90c657a734", "indicator--7c0b9631-0194-4f1c-9232-995be2c5b570", "indicator--0b2d7fcf-949f-4bd0-a377-307a3644d9ec", "indicator--d375e7d9-2f78-4c3a-aeb0-2ac27a863e7e", "indicator--fe54099b-9dad-401f-b180-088c38af4aa5", "indicator--e3fcf3c5-08d3-4046-86e1-435676b3345a", "indicator--046e196f-da93-4d70-a35b-9089a4884ea5", "indicator--e1ca5fbc-6e43-461e-a1d4-564971466b6e", "indicator--742cbc04-7f90-4547-ac4c-2cd8765e2174", "indicator--38a66c2d-f4f8-4019-a78a-ab59705153e7", "indicator--21ed5e8e-fcd6-4174-acae-fbef1bf7bb55", "indicator--7bfa6ad4-a0e6-4cf7-908a-7c36d39553d2", "indicator--15bf7cb1-05d9-4e03-8fd3-81bfbb5e101e", "indicator--73f7580e-f727-4a8b-9967-5cdc811e2480", "indicator--c88f102f-f58b-4cd2-9d5c-0550fdd04792", "indicator--a39b85e1-a1c1-446c-ae79-393d728043fe", "indicator--aa7a89b1-a3bf-4558-9d01-59735f023fe4", "indicator--56efefcd-f73b-44ff-a35d-5118b1dcafa6", "indicator--b6a4fef6-2f99-4f7b-816c-70137e53e11d", "indicator--98e2561b-c190-4dd4-9e05-be00be1c1bbd", "indicator--0dd2e892-b8e2-4cc4-8d59-2d31799d0cfb", "indicator--fe1bff81-5d05-4754-888d-886cdb4f9d22", "indicator--5afa800d-8f3d-4cf8-b434-06bdf35705c1", "indicator--3ff219a0-7ed9-4705-8d2f-2cd8478cc7ec", "indicator--1305a6af-8f99-4570-b37f-e2d81a0d0446", "indicator--742f8720-3ed2-4344-bf50-58f1204c28f4", "indicator--762bd119-28a7-4037-94f5-342341fc3ca4", "indicator--fe428613-8f75-4428-b580-ca7de5e70ca3", "indicator--e7831117-8c39-407b-82b3-4a3e749128ed", "indicator--2fb4c0a4-0dab-486f-9774-5197d1c84d7a", "indicator--021caf4e-191a-44bb-bbdc-172aa47fab60", "indicator--02f83331-754d-416b-bb44-d62ce004751a", "indicator--c9bfc01b-7359-420f-b725-1caf877c1152", "indicator--94d0c5e8-a228-4a5c-b459-b1ef41ccfbe0", "indicator--9dbd8ed1-6b56-4e98-9a22-307ce131d243", "indicator--04152ff9-f350-4536-a679-973690027629", "indicator--1a2614fa-7b31-499f-a060-af67eb9b63ea", "indicator--eb6f7a03-da60-4298-85c0-f4802002bbe5", "indicator--d05cc0d3-1bba-4f8e-860a-091523facf9a", "indicator--7cc4e85b-a2c8-4bad-ba02-5dbc914c1c34", "indicator--0d47a943-fcb9-4b64-9a46-c3c3e050093e", "indicator--c94f3f13-0fc6-43fa-bb92-86ea3d0c0c7e", "indicator--fdd32380-1d58-4636-9e94-46c1c2513fc6", "indicator--c87f4d72-2b05-4c71-a512-43693a88b92e", "indicator--a565692c-d7b8-4c47-a703-d99dcdfc126c", "indicator--cdf3c0df-1f6a-4aa5-926c-97ae2f11cc54", "indicator--71633ff4-b3e9-4f10-9175-a676d90a57bb", "indicator--4b9dc9c0-cb8f-45a9-aeeb-14a32efc5f30", "indicator--edb9066b-cd21-4317-b961-daa09e144dd0", "indicator--ae761138-d5d1-44c3-843d-940758196a65", "indicator--75c56a62-a70c-4ba4-a970-c82f4883d3e1", "indicator--fb59725a-f6f5-48ea-b050-3fef3d4a5eef", "indicator--fe731f0e-607f-47e4-bf5c-2c35f7802de2", "indicator--fa0f5869-88ec-4453-8cfc-f2bce720de1d", "indicator--67d3f03c-688b-4c9b-9964-bb9ff6e70c3c", "indicator--41c065f0-7707-4faa-a8e7-b5de63917469", "indicator--efe5ff66-28ea-4f73-aef4-cbb29bbe7e7a", "indicator--fc98fd3a-05c9-438f-80ed-d15386420b78", "indicator--1250cf38-38d9-43c5-9652-7d8931f68043", "indicator--34371622-851b-4cd9-84ad-ebf8a70091eb", "indicator--ce3807ad-de9a-4f7c-819c-8bfe43b9683a", "indicator--f23400b3-79be-4e27-b577-55c14eb66d64", "indicator--64879795-cf53-44a2-b042-514876e3ea22", "indicator--a29dac38-8b15-4f01-9985-8bc117002b04", "indicator--3f05058a-002d-4c1c-9dd5-6b25a53486c6", "indicator--bc81cc20-f667-4d86-992d-0a2f715fb299", "indicator--1c316b1b-4138-4a42-8ffd-1403d2e6696e", "indicator--f0c94ab6-8721-43b7-91a5-e4b733a5a2b2", "indicator--5f090bcd-d79b-4480-bee2-f3a3eaee1d94", "indicator--cac3739e-0f38-48a1-b0a7-b287a8156e7e", "indicator--3fbb4300-a758-475f-939a-2cd0c7ee9509", "indicator--6e13055a-d26b-4c02-b3ba-4b5f13dc5802", "indicator--49a62b4c-932c-4f79-af0b-fd38b2d1e77c", "indicator--22ba6764-348b-4dc3-9a31-bafd91fdc3ee", "indicator--e36d046f-d3ee-4cac-beca-f3c2ce7e2c9f", "indicator--5722b3ca-45ba-4312-bc3c-db8a6b1a3dc4", "indicator--296c6c76-9ffd-40e4-b2f8-0bd81e4de383", "indicator--78eb580b-e954-47c9-b98c-4679391fc792", "indicator--57f2068d-ae30-4bc8-8f6a-12c379d4cb66", "indicator--caf3fb4f-6a56-4c2d-a8bf-63e9926e8b96", "indicator--9d4b619d-8f81-4c9f-9b62-7db84a2d5d1f", "indicator--27999a09-23d1-49a1-93d8-0082ba7bce6c", "indicator--7d83f50c-943a-43fb-9256-f9b1d73d2a7a", "indicator--f69f223f-21f7-44c7-81af-f05d20541b61", "indicator--49aa1cce-6d7d-4514-9110-d402bdaca1d2", "indicator--14436eeb-d354-45c9-9e70-a13f6a5ea8e2", "indicator--73870c89-4da5-43f0-a6ab-9db0454a1fc5", "indicator--a6172e2a-fcbb-444b-9e54-943a371ee20f", "indicator--ec27830d-1bc0-4400-b1a3-d1bdcd5ae65d", "indicator--3b08e8e2-4c53-424c-b327-0d12a7088881", "indicator--27124bb2-d68e-4301-9bae-9a27f05e5493", "indicator--4c680332-7b94-4982-8127-292d74ae7a70", "indicator--e934c462-8d21-4559-999a-129c4153704f", "indicator--06a1b4cb-d558-4be8-9979-542fb3ff86d6", "indicator--b97170ec-169f-4e8e-aed3-cfad8c496bb5", "indicator--615bf66c-d32c-4514-837a-f9e49993b7bf", "indicator--96462d32-fc4d-4dde-ad4a-59fb8682f3a2", "indicator--2365c403-9490-4d23-a07e-d09f88401a16", "indicator--76632d28-9fe2-49a1-b87c-3e1eff675711", "indicator--9bbf3413-76db-48a3-8cbf-ff82348f2f96", "indicator--54441d7d-a326-4385-bfcd-7a11c27cd621", "indicator--d433f5de-471f-45f8-ac2c-1383d74c1773", "indicator--f375cf3e-d62c-4c8b-beda-6056c3586891", "indicator--ae8665dd-c100-4e33-b11e-cc015a776eae", "indicator--aaed30b7-c132-4db3-8ab2-a948164882ad", "indicator--a2f6374b-3425-49e9-b118-e3b8aceb6f44", "indicator--81b496b4-1082-448a-8a53-5da2661bbcab", "indicator--72353740-e6e5-4f1d-b78e-b5dea22afd98", "indicator--60a31383-3553-4a4f-b00f-de2bd6e75dfc", "indicator--50f251d2-d872-4dfa-9b63-6d72d529b8f6", "indicator--58bc3a91-b07e-43cc-84ad-49349ba16687", "indicator--ab07b285-761f-4df0-ae8a-535cd1067e96", "indicator--15a1838f-1e9a-4aac-ba74-850de0150d2e", "indicator--d4294c4a-259f-4cc9-b68e-e1a2c3e2c910", "indicator--750548b8-4fb8-4bc5-9cc4-0bd9266cb7e7", "indicator--541529c1-342b-4620-aa47-a9143463b3c2", "indicator--d2b39836-3867-4f35-a371-14a5bcd248bd", "indicator--71ebd5f1-20de-4899-8eef-97de5baad52a", "indicator--795d5c2b-819d-440a-8b49-d3a26c9c495c", "indicator--fc46f2f8-9569-4629-960a-382db940b1fa", "indicator--054ae3a0-bfc4-4772-8b2a-974aa3b7f0f4", "indicator--64caf558-4dfb-4fc1-bb29-e199b518d01b", "indicator--199e00b3-3302-4e82-87d8-51e6f0e5e5e7", "indicator--ebe41e26-1e84-405d-97f4-1d1e65b542a6", "indicator--9f966506-2e96-46ce-8c9b-caa1b0a1cbb8", "indicator--e7270140-4ff6-41f3-9853-63198ed3ca7e", "indicator--e1dbcd15-b28f-4a97-acf8-14c361aaf5ef", "indicator--9b180160-b5fb-4280-a1a8-d12addfcde5f", "indicator--332d0994-4765-4682-95a3-6dee619d41c3", "indicator--3414d8de-f60f-4b16-8a95-9e7afcde73f0", "indicator--f1d81f0c-ddda-4d7c-8224-68992d9f1c1e", "indicator--b6a8588d-68f6-49e9-ab10-f03bd3023602", "indicator--6debee95-a621-4f96-9eab-ec1592f00114", "indicator--9c434533-c462-4175-b748-79df75f1a4ab", "indicator--862ad3b0-9fb8-4976-a722-e1f8f2cc27bd", "indicator--23861467-dd6d-424f-a8c4-432f68d3d05a", "indicator--5f4fdfe1-a2c8-4f79-85c4-1b0ca74778dd", "indicator--69cc90db-0b51-4faf-9fb5-b462487ec53a", "indicator--041ae89f-1eca-4ba3-9283-8068a74084af", "indicator--26ebebfc-37ad-47b2-9398-5fbc8324e167", "indicator--f560f1ce-2563-4ecf-85fa-410957e65f67", "indicator--4e600204-ca69-4b84-9b88-e3b46bfcb746", "indicator--f37b4e19-d69e-4aec-b1d7-2d1b991aa01f", "indicator--29aa8d82-7ba6-40b8-ae0b-f5e8b11c4660", "indicator--555f7f9a-ea3d-44e5-89ec-b34e80002271", "indicator--2feabbec-386e-4077-887a-6bc930920306", "indicator--6a41bb41-4655-4522-bf64-9e435dff5022", "indicator--62fb864a-7b12-4cf9-a170-750b2eb178a5", "indicator--08565895-5f54-4c89-acb3-184edf7aa0be", "indicator--83fe2949-56ba-4803-afad-3e657fc70562", "indicator--69617857-4c58-4c75-905c-fac550301603", "indicator--82456fb5-d48a-4ba7-aabc-e7e292b02d19", "indicator--826fc847-fb83-4866-95be-7cfcdca53052", "indicator--60120d30-4bf7-4af4-8e02-3033a0ac6403", "indicator--287af586-c333-453b-a4e7-348a6f7f2c72", "indicator--25511e60-e0ce-4d35-9673-a685c39bbd0c", "indicator--c022f7b6-8fbe-4a0e-bb92-5a2a417f432d", "indicator--ab48ee60-3588-4aa8-a5e7-d9b0f97c030d", "indicator--da434134-6dcb-4857-9b4a-aa10f3a4c11b", "indicator--cce97720-c4a3-4eb5-a2d7-e646b3074cbc", "indicator--7112f232-efbe-4718-9621-843712643ee8", "indicator--e97deb56-43c8-4286-b59e-83a9d4b0c787", "indicator--1f3f9c76-4111-461f-b297-6e1224198270", "indicator--c4ea8b93-c9e1-428a-a910-41383b1029cf", "indicator--26415849-7549-4001-900c-b9ba5a1af374", "indicator--67b12a80-c724-4585-b978-39edc1f98f28", "indicator--32379b85-a2b4-420e-80ff-647f1d14989c", "indicator--a7d08a47-42ed-43da-b609-a81adb01fe5b", "indicator--396a37fd-13ba-4676-87d2-228ed30b7c5b", "indicator--45e87825-c6de-4fe2-a6ac-d1917e8bd593", "indicator--4737bb7f-691a-4fdc-a0c9-b000a1e16e58", "indicator--61ce1b35-1a79-4914-a075-b852452db5ab", "indicator--388dbe3c-d115-46cf-aa9c-f0a962d46d49", "indicator--d9cb5a1e-5d09-44fc-b01c-1cf0cc4cc4ff", "indicator--b83b1642-1f42-4807-a5c4-e70dda264090", "indicator--1a8554c8-a8e7-4ca0-b57f-5ef4c59512c6", "indicator--1b02133e-fd1c-4053-bdcf-dfddc8ba6d75", "indicator--39984e55-f177-448a-a918-98735541e04d", "indicator--1dc3329f-1716-4ce8-bda0-5280fea99adc", "indicator--aa248d56-5517-4a4e-a33c-a2ecdbfa11ae", "indicator--5d4d0207-9a50-4240-9a76-877b2d4e0e5b", "indicator--be8e94c9-ee6f-4050-a792-1681bbc83210", "indicator--f6558440-a69e-40bb-bbe7-370cedde3352", "indicator--81369ee6-9526-430a-87d8-61d24ff619f0", "indicator--e6ef502c-cf3d-4a76-ab08-9b3029adcd6a", "indicator--218a610d-cd8f-45ea-acf6-67a03a363da1", "indicator--72a53b26-3c80-4ebf-96b2-64d3ea229405", "indicator--a56b4dad-c38b-4ba1-8cd4-857d854dcc14", "indicator--ed76f63d-a1c4-4123-b0c3-ca4f05d28683", "indicator--c07e1a29-f1f5-49cf-9741-9ba367dea9bc", "indicator--2a4484e8-dbba-4a41-b608-291a218509d0", "indicator--7ceac16e-5a78-4384-aa03-8310b1a90b84", "indicator--3db95875-17ca-4c42-942f-fd8cb947dbc0", "indicator--1d6293c5-667b-438b-a93f-964a2eda7d83", "indicator--01353f81-6965-4536-b6a3-f3974acb8532", "indicator--c1142bda-af87-4ce5-bc9f-cf5590b2f69f", "indicator--ee77fab7-7130-4059-b780-44df90902f1f", "indicator--a4971d0d-7b41-425c-9734-27bdbb7937b9", "indicator--78099788-e2f4-426c-9cca-405eefabfc57", "indicator--bd3630f5-0686-47ba-be1c-eab1feb4b5fe", "indicator--7168af1f-298a-4d52-b550-fb69dbc3554d", "indicator--846b40f1-2c46-467d-976c-7af05565b75d", "indicator--c9fd70c8-0225-429f-b61f-6e9108f23d1c", "indicator--461b5d2d-b062-49e9-b4cc-3d998f27742c", "indicator--f84196a7-a5d2-4878-82fe-a2f6e22f8bbc", "indicator--a30ee1dd-849e-4c7c-af1c-e18d6d3c560d", "indicator--01190cae-07d5-4334-a471-4c56a226a3f0", "indicator--eeeae814-8329-49de-8407-836a55ff9d2f", "indicator--830085f0-f2c3-4c7f-9097-d334fec0b4ba", "indicator--3a2ecb35-afe6-4f52-8438-8b40d8a415b6", "indicator--71536dd2-ed69-4c0f-9abf-27b10f68124b", "indicator--f3632413-ca2e-4265-b17c-8ec15aafa40b", "indicator--7844d1fb-d035-4abb-825d-3d011871ea86", "indicator--5c72537d-4d0a-44ca-a4b9-fcba9ef55649", "indicator--56b0cf2e-39c8-4676-9252-cf6a477d9834", "indicator--c0071617-a830-4b2a-9b1c-64c736dc8ae1", "indicator--fb87c11b-d859-4613-83cb-bd436fbf3132", "indicator--4ad54e63-c1f9-46f9-b554-731217a7853e", "indicator--1f7df0b3-36c8-44c4-b296-6cbcc2a73959", "indicator--5b17a445-c2a4-406b-bccc-2f8cd9c84393", "indicator--fde4c1f2-47b2-4192-85ed-0da6f435eb56", "indicator--66ea320c-a361-4afb-bbf8-32645d81af42", "indicator--32015cfd-2def-4a43-9b83-6963d3cb9f6b", "indicator--ba2c4452-cb13-43c7-bac8-ae87f44a75d9", "indicator--51c12b6e-5639-4e0a-8784-18ce2c06fbd5", "indicator--2f76464e-4aa1-4ab3-bbdc-a1853fe2aa17", "indicator--85aace1d-8e73-44ec-a0e5-2bee6d65c0a0", "indicator--3aff3dcf-b32c-44ed-abd5-a170d10fef96", "indicator--10116ab5-5898-49c8-820b-0e623e185481", "indicator--faeb3b7b-9bea-4762-87c5-9804fecb0d30", "indicator--926682fd-1174-474f-9947-a594e2b0ec71", "indicator--2afb1a3a-5503-46e1-a23d-82f16c2a4f7f", "indicator--92cd7786-8a5a-4a16-9231-63468502062a", "indicator--47eba605-e290-4d1c-b94d-d8cdfd6a28c6", "indicator--38bd8772-131f-4633-b69e-53a786b3611f", "indicator--99395bbf-b983-474d-8df8-2e1123c9167e", "indicator--641d629f-86e4-4775-9f8a-28765e665222", "indicator--3308d558-123c-4d59-b912-af03f41cb951", "indicator--85725f8e-291e-47cd-8c46-8f07ea2cec8f", "indicator--905f364d-096f-415a-8021-7d3b5728cef4", "indicator--84377351-f8e4-49c2-b42d-51471fb43bd3", "indicator--a30d9e06-cb16-43b9-9655-e6e5602dc86d", "indicator--ca54c2c9-292f-4956-87a3-adcecc9b79f5", "indicator--a3958167-1459-42b4-a05d-27ee065ad7bd", "indicator--acd1d75c-4bae-478c-bced-b1157a6459a0", "indicator--534e7fea-ff32-4b0f-9397-476e27afd865", "indicator--2a6f8fcf-fe41-428a-8634-57883d592900", "indicator--bbe0eb33-83a7-403a-bd85-d0e74965d97c", "indicator--0e82fdb1-baff-4088-a0ed-d0012c5455fa", "indicator--fbcf6173-2363-4bc6-bdf6-a19030ad53bc", "indicator--8fac8691-1506-44a2-bca9-8af305ae20e7", "indicator--b3e0577c-c476-4e68-ba0a-6fd98fd602b8", "indicator--f28362f7-165b-4dde-8b13-34f4b66b0eb4", "indicator--575fa730-4a8d-4024-9404-ab4992d86a5b", "indicator--cb9f2b55-ab80-47a7-a09d-7019ca1f60fd", "indicator--3f79858e-d107-49b5-81c2-830e1ee8d7a0", "indicator--107a27fe-f402-4e34-9670-5cd504d01c56", "indicator--85d32e4e-3a4b-4a64-90c2-a914db52d850", "indicator--d9fa2d34-d9f3-4790-a8fc-83eafc0fd3f6", "indicator--dd291146-3dcd-4b70-a237-b5b7a20ad253", "indicator--3f2d2477-7331-462b-9ba1-d75717f7d979", "indicator--eaf3e2c3-3d9f-4511-9421-4b08e308d9bb", "indicator--a8d0ad36-fa3a-4749-a2c2-e3fdf2e0a51b", "indicator--4222a861-bd56-4e65-8717-57c788a7f246", "indicator--66fe78d7-85b3-4d1b-aa35-3a0060bf9ab9", "indicator--8f3685e3-9837-47bb-bf5d-6c892f41aa24", "indicator--044c5d39-df4d-4989-9a56-8aa4ac6afe22", "indicator--92c8faa4-e027-4299-89ea-365f6551a801", "indicator--5b3c344f-ad17-446e-a959-7c59095f6e77", "indicator--a482c718-3491-4085-a55f-ec678a7c570d", "indicator--868a0757-6dd0-40f6-8d3a-f9a82d371daf", "indicator--cf7e5844-603f-431b-a0df-8d2f303bae15", "indicator--57f8d5ce-46b1-4b22-95c6-0ab4b7f8690b", "indicator--eb89c454-598c-4327-98a7-c742d17ca57e", "indicator--f9f7ca88-3a07-445d-a7e1-1d00f25ca06f", "indicator--1592ee4b-daba-4531-9b82-a39d93555537", "indicator--a50ff85a-ea56-479a-829a-be9c08b54ec0", "indicator--6f3b544a-cae4-4fe6-9e0b-75cd835c4c88", "indicator--642cdcaa-ec82-41df-b0d8-c66e8c117010", "indicator--3f1786ef-d749-4c6a-8132-a61fb8ac048f", "indicator--d7047871-467c-482d-bd24-8c413e845aca", "indicator--a730f67b-6073-431a-a8e2-91bc6e98941b", "indicator--13ea9773-43d3-4d63-b2ba-7b43a32b736e", "indicator--72c49116-5fda-459d-be7b-6bb280ed80cf", "indicator--f05031b4-40d4-4bba-a208-e944d9f26dbb", "indicator--6fc52560-e441-4455-9bda-1a26048f1a17", "indicator--0cc1aa2a-2361-4ff3-b643-751963ede5ca", "indicator--d141087c-0508-406f-bc76-46c363ac66fa", "indicator--af089c4f-18ca-4870-8dab-28833cbbf2a7", "indicator--cd33ca4b-22e9-4e96-b28f-cb5fb7ce2745", "indicator--0ecef088-a467-45f9-a8b1-006911130624", "indicator--b0514cc2-8164-4813-840c-9a74824aae27", "indicator--9dc57979-cd7b-4bc0-80fa-04005ac15418", "indicator--abc32820-19e3-4b08-9fc7-c94c0f06af66", "indicator--8f00d022-ac8e-4c07-a2ea-b21f7ab08985", "indicator--4f762e1e-89ee-4bab-9ceb-b9a6438df74e", "indicator--d2dd5485-cb23-4b86-bf46-39e8e739544e", "indicator--68d13f44-dd6d-45bd-8d09-b81b602584dd", "indicator--8b5c9519-4ac2-47e1-9335-17b87e78a17e", "indicator--9d2287cd-0f47-47d3-9376-43bf09ec4235", "indicator--c25b2cf0-72d1-48cf-b94a-d1d919b1e172", "indicator--ca2a1d4e-de53-483a-b054-15f1a86f8c53", "indicator--b176cfd4-e6eb-4eec-83b3-2cba8e835b14", "indicator--bc059d65-a0ef-4d3f-9016-699b73aad147", "indicator--c5d4aab0-4806-4ef6-a001-ef718fedc75b", "indicator--f6ab0839-31a8-4813-a05a-55e22b2db998", "indicator--edae0f4d-37bc-4279-8afc-0899ef3d651c", "indicator--a3cb17a4-c98e-40c2-b7a0-f216cd37b07d", "indicator--683e46db-cbc6-43d9-9e82-01ef97a1a47c", "indicator--d609b567-b953-4200-a4df-e38455e81010", "indicator--33f5d991-a3e8-472b-a5e1-0bbe99e5c9c2", "indicator--4d66172c-c48a-4dfd-ad89-1a59b83decb9", "indicator--2234d69c-436e-439c-8e9d-d79b74c75cb5", "indicator--6eb89402-b166-4f01-9b01-c5b814da6330", "indicator--65d05076-69da-41d4-9f50-98d6068e7630", "indicator--fc60185f-ef4b-4eaa-90c0-b52a3bbed549", "indicator--bf1dc385-3bf3-4a27-b26b-2ea85b7a0820", "indicator--4a335703-8031-4f5a-8397-09d255c98089", "indicator--28af628b-48ff-4385-b225-874af134c855", "indicator--2850857d-351f-4936-9e0a-5eb4a5174223", "indicator--7c741972-10a5-4019-b354-95ed9a0a2efb", "indicator--57ec3b81-33d0-4928-8f91-6914feff69e9", "indicator--3d328b56-bf9c-492d-9621-5f68635448e4", "indicator--31e6951e-6ea2-47a8-862f-024b57384429", "indicator--c04a5b1e-b9d7-42e5-808c-929990c2bd4e", "indicator--29db4f24-4e27-463c-83df-8a0944a4e2b4", "indicator--238dbd75-2aca-41b9-b134-998bf3cdf588", "indicator--e16cc462-9bb0-49f1-a19d-ca2891b6660b", "indicator--5d773f39-d5ea-4bcb-b3a6-a2695728aabc", "indicator--4e148f5a-2228-4b47-ba3c-41d93de37957", "indicator--bb63bf7b-26da-4ded-b95b-3932650f8f9c", "indicator--037ba74e-f338-4ebe-b806-619c5a4211dd", "indicator--ccf7c482-ab75-4e14-a68a-3635c8f597df", "indicator--b714d70c-def8-4ace-ad96-4a43c4af2d33", "indicator--0c82f4b2-4b97-4400-a26f-3e86ec590571", "indicator--d2b8aba7-b89a-42b2-91b4-c0c15bbfddc8", "indicator--2fa18df9-bacd-468c-8fd6-b6c0ff268f74", "indicator--2894a4fb-d0bc-4b8d-8333-710d700bdbe4", "indicator--427dcba7-659b-4b33-9951-ede28541aba8", "indicator--0b363a00-531e-4a7e-8359-d38825ab3219", "indicator--84f9bb4f-021b-40f5-819d-12672386e747", "indicator--beb9a957-ea29-4f5d-a840-c93e0380b5ec", "indicator--dd82e15f-9bf3-44e5-9c19-9c608baecc7c", "indicator--52044b6d-627e-4db6-8f45-26280db04991", "indicator--54a807cc-8925-40d7-9d16-ace9680c8ebf", "indicator--a77e0d02-6295-4a1a-82b7-136f11b3331b", "indicator--5f027b77-e259-4026-80b5-5fd68b43bd5f", "indicator--77064fb6-d1ba-4a28-a869-ab6036335f75", "indicator--b7ce34b6-16fa-481d-a7cd-241d0bc55fd3", "indicator--1825b468-93a5-49a3-b10f-5cc52c98081f", "indicator--9fab2c4b-a6a4-47d8-a08c-f33f1c18a269", "indicator--e26b7a2e-395e-41ea-a559-eb837ec9b06d", "indicator--500fc890-b303-4462-a161-05130fb7eb72", "indicator--01bfab8b-5766-41d2-960f-7b3a03d28414", "indicator--64917df3-603d-466b-a2e4-1f2fbbc79b23", "indicator--6394dc63-6903-4682-bd77-b1c252439c1c", "indicator--42e2cca4-84e1-49e4-86cd-73061e5aaf3e", "indicator--086bd4a7-64ce-4988-99c2-db6481c92892", "indicator--10d10852-5d42-4653-a604-b9dd3aa938c9", "indicator--1276aba3-5820-49ac-87cb-72b8fd4e2a4e", "indicator--3c670d4e-6b45-46ca-8acf-0b663f513a74", "indicator--75444648-ce7b-4dad-9dbc-dce6957b6921", "indicator--ae50c6ed-ffb1-464c-8ba1-0fceff256ef7", "indicator--7c751301-9c3e-4cf3-b2dd-07cf6aa1c9da", "indicator--5014af7f-95d7-483f-a605-d4eb4381a3ae", "indicator--c0e3c746-c653-4354-bd4b-9f93cd62ffaa", "indicator--ce7d41fe-46d3-4fcb-a8e9-7664309772be", "indicator--da0214b2-f083-43af-9d47-a6cf94ad71bd", "indicator--f98a9169-56a6-4c35-87d4-df38937107af", "indicator--a96821c1-fd51-4bba-a46e-0361bfcdeb0a", "indicator--244c579a-810e-436b-936a-50039c3cc5a4", "indicator--dad6f7dc-e157-45b2-a226-48e22ceef24d", "indicator--e108c37c-47a5-42d2-bc02-a494a65f4f2c", "indicator--4bb933d7-ff56-4779-a6ee-0c90768b777b", "indicator--7cb040d5-c207-4806-a1c4-83f1d65d17b7", "indicator--3d2eef58-2a91-4494-b298-1a018466045d", "indicator--a19f4988-6975-49cb-8a8d-8cbd0bcfcda8", "indicator--20f0acae-4c13-4eb0-babc-78af379bf70d", "indicator--1fe2bf43-d9c2-44de-ba18-952f355c3f8d", "indicator--7a726a0e-f6da-4bfe-aea3-7d045a42b4cc", "indicator--e72c337e-de71-4009-b4f7-05d750fd6d02", "indicator--611f053a-f677-4e6e-ae5b-14eddfb14cf9", "indicator--36ea4bbb-88da-44b4-a581-0632da24e3d7", "indicator--8f3f1579-0988-46c0-ab54-0fa978744bcb", "indicator--b805d31c-0ae2-42a3-8539-a6ddf9489827", "indicator--b45e136a-235d-49b1-8125-3a4f00b0df54", "indicator--c9c2df2a-718f-4ef7-abec-cba4a19938aa", "indicator--e4650e92-ad5c-4fd1-9aed-1a1fc0c00290", "indicator--3e938b52-9823-4ce8-bd7e-2b5c6bc0277b", "indicator--55d3dc0a-ac4e-4b0e-8c5f-025f90f245bd", "indicator--a02588e2-5187-4830-85db-bfcc0a2c8993", "indicator--1f64df87-a4d0-4efe-8ca1-aea5b875bf22", "indicator--c69ced38-e46e-4619-baae-5c3c74e5d53b", "indicator--7b2f91ac-0784-49e6-b4b1-8c7988a1ce05", "indicator--a74fb518-89da-489e-a943-14adf3eeb93e", "indicator--353ed3c6-0dd1-417d-af73-7e0f19dfbdd1", "indicator--103e113f-57c7-4e19-bf23-5c3f4a791345", "indicator--df5a8b7a-7e68-49fb-a073-6840de3d1c7e", "indicator--c18adac9-8f23-491f-8d9b-deb0415bb4a3", "indicator--e7c8000f-f541-449a-adf5-310549d9fccd", "indicator--107651ff-10e1-4bd2-9452-3aaeb6daf137", "indicator--65febb98-c8bd-4c93-be39-1ba72559aaeb", "indicator--17091fca-c96b-4b8b-a075-b965ecb235de", "indicator--a85abec6-7c42-400f-b863-aee2a4dde14a", "indicator--7bec17fc-084f-40a5-8ed9-16a182d67626", "indicator--450a457b-5605-4f26-8fef-4c7d1d45e471", "indicator--55401cfe-f2a0-4e49-9fb2-7121c948ad33", "indicator--0c52933c-c58c-4e33-93ef-7f36cc9052ba", "indicator--f7136b61-726e-4b00-89b9-a181e8280a1c", "indicator--8ce0919b-7246-4f89-9388-f851f8d9b686", "indicator--0efcc573-4fea-4c21-8116-3d2c5b5e906f", "indicator--3f11f4a1-9788-4470-8f0f-08f69caa2bf7", "indicator--888c9576-5a38-4750-a1bd-dbb4b4e330a7", "indicator--795af80a-2d4b-452e-b2b7-fbefa9f64645", "indicator--74164ffe-72f9-4d78-afd2-aaacaabf1eae", "indicator--807d1e49-b7ed-4ced-b188-f888ef49e40b", "indicator--b4d56720-50eb-4b15-8efe-4e26c1f7272e", "indicator--146c5767-0c59-499a-8787-204c19521983", "indicator--505cebb6-ef85-4813-ac4c-03df0291b8b6", "indicator--dd97ac63-c19c-4c13-9c7c-0bbb96f89e9b", "indicator--8b0f612c-ba87-47b3-a494-03b84810e62e", "indicator--167f3692-625d-49a6-a862-137c0794a0ed", "indicator--f4d5b1c1-c841-4129-b624-c2d30758b701", "indicator--96f7ed05-fa28-47f3-9ece-ae2a40dd3611", "indicator--e6b7e6bf-d8e3-42d3-b142-8d4eb977d5ef", "indicator--86ce6584-3df6-4409-842f-e5e85a8846a5", "indicator--226e65ca-9737-491f-a8db-c69841da2fa1", "indicator--71485320-0b16-403e-b391-4eacc69fef75", "indicator--225f6693-b340-4624-bf00-2d7605371309", "indicator--0cd9f368-a098-4248-83b9-b9658c7d66ab", "indicator--1eb50a07-0a03-4f5d-9fd5-a86e45b62aff", "indicator--53205a7d-d864-4244-b12b-d1b0993dfba6", "indicator--db7f122e-e6da-4b03-9957-2e73aaabc85f", "indicator--c8a647ae-fa91-438f-9567-19d0dc9d24ba", "indicator--425568bc-d5d9-4945-9faa-20d31729d3cf", "indicator--9b3afd24-0969-443d-bda2-5cfdf84d6685", "indicator--89f682fa-3dd4-4eb2-8fa5-04bf80d8d51d", "indicator--d67b1c2c-1288-452f-817e-e5a0733e0fc9", "indicator--11c92198-e383-42cd-bb7b-b39917f89557", "indicator--360105d1-af82-4d24-93e4-6c7cf11d2648", "indicator--aaaf07bf-2488-4743-9d77-0d1e1a1a826d", "indicator--d4c21fe0-c9da-49c7-9d39-eb389ef2bd71", "indicator--4441c067-92de-4f92-9df0-9ba140bd9be8", "indicator--58fd6b42-1653-4b35-ac09-218e2bc0c582", "indicator--9bd2a49e-a0d7-44aa-9b30-5cfe481cadc1", "indicator--09cf7daf-ed76-48d1-ac0d-8c36ab213313", "indicator--40e19176-0ee8-4b39-87f7-344c466abeaa", "indicator--ccbbe061-e945-472f-987b-e61cf2d1cc19", "indicator--e88fdfd1-1f68-448d-8c74-6e13e1b58de1", "indicator--9b1e1f61-38c4-4ddc-999f-280bbf8c9bdc", "indicator--7c101de6-91b4-438f-a3e2-9c60d1944653", "indicator--51af7eed-3f41-481e-9a61-8328ccf938fd", "indicator--0678ca41-c39e-418d-b2c4-484b3896e905", "indicator--fb7152e2-9e18-4297-88c3-d7676900e7f5", "indicator--4bfae729-9661-4ad0-a0aa-700d502b198c", "indicator--49adece1-9ac0-44e6-8c91-2290088b4341", "indicator--c8018e23-5041-48cf-8b3f-6c875e9556bf", "indicator--602f2eb5-e934-4f75-a3ec-121a8ff57533", "indicator--228200cf-4f1c-42bc-a6ae-4036f0b65d59", "indicator--f75a1df5-4429-4fd9-a518-778406f173e4", "indicator--c2fe45b9-ea91-435b-be90-16ab4fa22ddf", "indicator--7ebd039b-34ae-4429-887e-951f06a28c16", "indicator--675bf946-4d3f-4678-9c60-ba34e66aaee6", "indicator--6f00cd2d-7436-47ba-ae46-95ef577c8d38", "indicator--a443ca38-3031-4925-ad58-05b2d8cf9d12", "indicator--5935f638-cb14-4814-902e-0be0d6692eba", "indicator--c4f938de-8319-4636-9cf1-267ec50e217d", "indicator--14228868-9649-44aa-86b0-34fbe200c1b7", "indicator--2ddbc466-9a7a-4f53-a894-48a1b3a277c7", "indicator--fc7cbcf7-b867-464d-8b4b-9a45c46a475f", "indicator--48ca1d61-e314-46ce-8783-ecf7a5465c49", "indicator--40c0817a-c380-4495-83d8-dc521a71d453", "indicator--ab2801df-d605-4a09-977e-b034a48c92be", "indicator--6c156f26-ab9c-47c0-8150-c39c097f99d6", "indicator--9bfc033d-5173-4c82-8ddf-30832ed03ed4", "indicator--45448a06-6552-4e07-956a-0578a278b0f2", "indicator--cfdc0daf-ae11-4fd8-92e3-36ab8323d4cf", "indicator--5e5eed0e-e8f7-4779-9bf6-8fa7f45cba7e", "indicator--b908b087-534e-4e60-9769-936be9f78d8b", "indicator--89c5f0bf-3300-4d67-8a24-1d52b1a62ffc", "indicator--04fc56c1-b685-4988-b4e8-ccaf5ae9a012", "indicator--8159d84b-9cf6-4c98-9829-133120ff5326", "indicator--12be2a3c-4da1-4359-985d-ed9bd01c175b", "indicator--24b85877-a8c3-4833-8d15-70663517ef9c", "indicator--b87d459a-11bd-41ff-b9f8-192f96c6f9bc", "indicator--32007cd0-6d8e-4b54-b5c9-e0fc5a6a263d", "indicator--9414eb51-3823-4be0-829a-3f5a59da10f4", "indicator--97004abd-0155-452b-8cc3-0711a3bd68ae", "indicator--b9cce9a1-9e5c-4b24-bae8-d8d3ca88c37a", "indicator--e20fc257-6c32-49b3-b636-61e27d88a923", "indicator--2668400f-4cdc-43a6-af10-855d243a2af4", "indicator--cab47e0d-d226-49d0-bee2-8e0fff324612", "indicator--0aa2b92c-2e99-4740-8798-b6dafbd6536e", "indicator--79dd770f-eed9-49d1-b8d4-3a4193134a41", "indicator--4ba90346-052c-450f-8388-e3ed328d29a3", "indicator--bc8816b0-e107-44e4-b850-7f40ec98e3c0", "indicator--ceb68036-fe1d-4e6a-bbfe-74a6727d6d24", "indicator--a995826a-7a91-4bea-86df-19f6de74b8a1", "indicator--e6d42ea9-59f3-49be-9cea-02d77a4d1879", "indicator--5e218c35-61b6-4695-bedb-9e46e80ee7b2", "indicator--cc337fed-e399-47e8-bac5-c515d2fbf067", "indicator--3e4aeb7b-dacf-47d8-9f77-2d6d8e4ca145", "indicator--c79f0a0a-2350-4724-a0d5-050a536b96ae", "indicator--8617bbec-224c-4dbd-b7db-e8f75af1e5d9", "indicator--95f69dc7-6033-4098-97db-272191bcc91b", "indicator--f62ec0fd-209f-4d5d-8c1e-937f8c0d5ae1", "indicator--87211ff2-1f30-4f45-a03c-1a1e1c3f33f3", "indicator--7abbb307-afc8-4b16-aec0-9897c5dfca34", "indicator--452df2d6-77e5-43aa-b9fb-a319a430c11b", "indicator--881044ff-06b9-4f7a-90c9-c135271e8640", "indicator--3ece3f6c-fde3-4cce-96bb-aebe732685af", "indicator--9392436d-cf7e-4752-ac78-472570d81d29", "indicator--96dbf88f-05c0-44c3-b366-eecca7b2cac5", "indicator--6c25d599-3d94-4768-b1f8-68ed8c57f780", "indicator--a1d579f8-f72b-4f2c-8abf-39001a792aaf", "indicator--7c3e51f7-82eb-4bb3-8458-4f2034766948", "indicator--4a8b3f7e-5a41-4970-80e5-903af410dd41", "indicator--b1640558-d79e-4e40-8383-ef3777dba89c", "indicator--8c9379fe-2fa1-457b-a18e-582e151b29cd", "indicator--e3050c37-df07-459f-8805-584ab15f6422", "indicator--0aa539a2-3d65-4e06-b3dc-11a10c9ee857", "indicator--9b3e6092-c0f7-4765-a884-b90cfcd7b4b7", "indicator--b54af5c7-86d3-4b80-953f-49eb3517aab9", "indicator--249bd07b-38f3-4284-aa71-7e125b366947", "indicator--00a0e21e-c928-446e-a914-29106ce2efa2", "indicator--7f662562-256b-46c7-9d1c-16140d7c4f6d", "indicator--c6665a07-87e2-4031-a423-5e5425637fcc", "indicator--08cac0dc-967a-4b55-97f1-5ffd9e59e445", "indicator--b27db15f-8db6-407e-8d6e-076e402c87ef", "indicator--6bbf1226-c01d-4d48-855b-11ce69e2d762", "indicator--0046bbac-3efc-400e-a8c0-0a41959d8c22", "indicator--aaca8e7f-f9fc-49cc-b979-fa8e7c017d29", "indicator--4ba38f93-01eb-485d-8ea6-84ac78afd096", "indicator--e7476390-8b58-4e15-b27e-7c52f900808d", "indicator--61f55113-798d-4d80-b18b-9e91f4a39fb3", "indicator--4f790839-5def-45cb-bfd7-aeba8970d5e5", "indicator--811c1d70-1504-40ec-b902-279828020295", "indicator--d7cf0378-e368-4df3-b802-842597433363", "indicator--a869e7b2-ac3d-491c-a6cf-d078c348ba0b", "indicator--5264abe0-5d71-44a9-b763-e3dbacacf5ae", "indicator--fc20fcce-4d6a-42fe-a68e-068436bc44f1", "indicator--2cbe369d-6068-4b91-96ab-db8767857a8c", "indicator--b3b76b0e-a9f9-4a99-b36e-5bc0d35370e8", "indicator--0b517d69-21e3-4c2f-b7c9-28a2fe75c810", "indicator--bac85de8-1e7e-417a-a744-ab3a0f3e9529", "indicator--91a61789-83d4-422f-90b8-4e21f8fde003", "indicator--37f0996f-8a5e-49dc-bbb5-d286ee30912b", "indicator--bfefd15a-6b17-439b-8f33-a9c9a409fda3", "indicator--55fa293b-112f-4d26-b260-6c5709534c6f", "indicator--bc69a25d-1b2d-4cff-8ffb-fce01934172c", "indicator--006741b7-dc7e-4b69-bebf-a0225763f368", "indicator--cb9432d2-637f-4fe4-bb64-a39c36a9838a", "indicator--15266fe0-3a2d-4ad8-868f-f2593ac8dd1a", "indicator--72951523-0fd7-4c60-bd85-ea76abc46776", "indicator--06911c60-f7fe-4158-98bd-57a557be03bb", "indicator--82e0e847-e164-446b-976c-f74ce53c505c", "indicator--55dcc574-47bb-4769-9d50-c6c1176c1137", "indicator--d7dc3e13-c061-4f39-beed-17c19c2e76f2", "indicator--aa7220ed-010b-4c1e-b138-f62dafe6ae0c", "indicator--1b67046f-c1f1-4182-b093-8faea4ffd73b", "indicator--16633d11-c9ca-4b85-9041-a6c5bd4c54c4", "indicator--9db82b1a-07c0-47a2-89ac-5d21811c6430", "indicator--4379ad50-acf9-41f1-b789-96ed711f60e1", "indicator--12d629c0-5a67-4a93-bed5-f4ce94d1db49", "indicator--c88721b6-e1ae-468c-8f83-d0c7cb8c4ed8", "indicator--7604ba6d-3a90-4d2c-a404-4facd017f1b7", "indicator--b0c10341-638f-4981-991a-34f08bdc94ef", "indicator--f0f48ef8-1290-4a57-a442-589fc6ec530e", "indicator--bef915be-6fe8-4434-a1df-f09f145cce02", "indicator--cc7ecb01-dfcf-4a11-b0ae-e8d53f8e300e", "indicator--41f40086-60bc-484d-a142-cfd06f911206", "indicator--62e1eea9-1916-443e-ad50-d34f95108e7b", "indicator--ae60f6c4-6554-46cc-935e-c81ccfb3f902", "indicator--12995fee-c0e7-4ce4-8164-669fc8a9e043", "indicator--78101456-06d8-43b1-99ee-6762558f3130", "indicator--cf308273-b285-4864-8e0e-ad3e820a5069", "indicator--3c8e633f-56b6-49e9-83ea-068424a2e6e7", "indicator--58f4eba1-7f42-4bf8-bac8-8fdd64aac9a6", "indicator--64a5ba0b-ede0-479a-b5ac-89c0a48b9f76", "indicator--ea847a59-c840-485b-98fa-445064428e5b", "indicator--3574c099-e4b3-430a-b260-3886e4b58ee7", "indicator--04c3b338-b71c-400d-9104-a49a6abb464b", "indicator--b7f521bd-b430-4350-bbb1-11641bca2026", "indicator--5cd2e7f6-283a-4e7d-8d62-79880384a273", "indicator--28931b7e-18a6-470d-a3d6-ac8dbe5550de", "indicator--bd669fe8-e9b6-4f13-8281-2b31fc0a7a7f", "indicator--5bb8612e-f554-46a3-8d73-b2f76665a851", "indicator--3cbfaa54-81c2-4ef8-bdd4-ff56ac2e0059", "indicator--01f9435e-424d-4a20-92ff-a54bb0486b2f", "indicator--0a29bb29-e5a2-4ec3-a6d0-5ce52d58ef2d", "indicator--19880408-2cfe-4688-9603-30b34410feca", "indicator--78382a0d-e8f8-42e7-a776-3da5fc4b2dad", "indicator--9f2558e1-f1a3-4a68-8d5c-351c9c4eb2be", "indicator--47a8a061-17a1-4aa0-9ead-c263ebfb7700", "indicator--95f8e083-2d32-4492-ac5e-37e985ed2767", "indicator--7cfb657c-85c9-425d-a988-cc528943e828", "indicator--2eaef677-7dec-492f-ac68-dd43bb7999a9", "indicator--dfa751b3-a9dd-4058-ab07-85274cb87892", "indicator--53ff27cf-df41-413b-991e-86516806062f", "indicator--fdeadee0-d6d2-4e01-94ef-84c42fea55c5", "indicator--9929f9e2-d3f5-477c-b154-430b02e97fd9", "indicator--d976f541-7fe8-4521-9dbb-68e6c9f83326", "indicator--850d7054-8e97-4794-aff2-a919116aee97", "indicator--624d14a2-58a2-4d5f-96ef-f6f626fdf4a1", "indicator--d8fa76ce-93c1-44e1-a5e2-504aaeb563ac", "indicator--ed8cdd47-ea34-4118-b71a-3e63d3366be2", "indicator--7e3840ad-2e66-4b6f-a1ea-cf6c5660e503", "indicator--1f7d6436-c5fb-4357-8b49-c7dcd5056abc", "indicator--49e592d6-b803-4c5a-953f-82cdec7a98f7", "indicator--ba05e0dd-14c4-41d8-a782-e70c2654d8ea", "indicator--aa2d2d46-397b-48b3-9837-8a12071b4b73", "indicator--60a3c6d8-215c-4cfb-bd6c-e8c72e8f4932", "indicator--2e2ac9de-9d72-476c-bc56-b572b4cb7b1d", "indicator--5cd10d56-0cfe-43b0-bb61-5bed3f594825", "indicator--f791c708-3916-4754-a57d-6a816d1b9668", "indicator--4832debe-2c5e-4a57-a95a-b33c3961c11a", "indicator--11ec137f-3957-41c6-88aa-3ee508607c6e", "indicator--b66520da-8db4-4f34-8139-882e26b6dff7", "indicator--d97eded8-b045-4937-a8b1-5c8ee8dbc7ea", "indicator--0e5806fc-f87f-4f34-b82c-b03fc94e69d4", "indicator--073146d2-6424-468c-a4b2-049e41be98a5", "indicator--4e30aa73-d278-40fb-b0dd-df61c65032b1", "indicator--1b6bf73c-7739-4703-8ea3-095ff7956fdd", "indicator--48a0cca1-018c-4652-a760-c1d875f96bd6", "indicator--c8360d30-4f3a-4855-9c84-0217da521391", "indicator--4237737f-9dbf-4fd8-8555-a164f18a7b12", "indicator--ab59ac9a-d901-470e-ab52-5875be283026", "indicator--2ea091c6-7e02-4736-ab4d-c8ae80066089", "indicator--60305359-60d5-4da9-a552-83aa95b69691", "indicator--a8dd8dea-266f-4ff7-abea-6174bef238f0", "indicator--7651bea0-b301-43fb-bc16-8e2b656a052f", "indicator--689c5c86-607a-4b47-accb-aa3b7f11dc06", "indicator--618cc470-26de-4db0-a9de-9e2187ad89a5", "indicator--1c093a35-a0e1-4983-b8cf-0a4885f802d5", "indicator--fc117809-174e-41a0-b951-9fb991495cca", "indicator--5e884628-bee0-45f5-9f86-4076b61b9231", "indicator--3e39c0d0-ddc8-4cc5-a44f-092a9bad780f", "indicator--b2695b01-6b86-4c6f-bbbc-d715360c7235", "indicator--ff6c4318-ba2d-44f2-ab36-97bb46bccc06", "indicator--f3b88358-b669-4e74-b736-4d90f5686c26", "indicator--f7314082-36e9-4fea-a179-8f3d6a6b3e89", "indicator--2be27727-7a22-4213-83a6-c538aae1397a", "indicator--5e6f9e1f-9717-480c-9bfc-52533f0b0505", "indicator--46be11c7-de36-4ee6-b42f-e77b11be1109", "indicator--3c344682-0d96-421e-8104-17b35785f53f", "indicator--8c6e54d5-3932-4555-8f9f-ff3bda82771a", "indicator--7919d590-26c9-46be-885a-91bf90cf9155", "indicator--83e7d03b-3a71-4b1f-8fff-115f65b41349", "indicator--a5bf655c-7847-46ef-a7ba-5892d5059074", "indicator--1a79a78c-f335-41d2-9511-0c307a4674d8", "indicator--d75428d7-d1f1-4147-9d93-bad9b6427420", "indicator--97a685a8-bba8-4b5e-8c1d-9e1bee316400", "indicator--ab92423f-e2f3-48ea-bc51-ecda490eb1a9", "indicator--42548c74-9ea7-4adb-bcb0-9334c2dbdcf1", "indicator--1197bcac-9e17-43d1-b182-74a007ee36b6", "indicator--f16c326c-13b9-41fa-9e0e-1707d72fb033", "indicator--42e1dce1-a055-44c8-9bf9-af909b54fc6e", "indicator--c2f0d095-0860-43ba-8b23-40b4b46f96df", "indicator--e67807a3-96ca-4160-8ea5-de47d71200d1", "indicator--23015461-1ff2-4af7-9b67-d84c6a2a77b1", "indicator--a442c23e-b238-444b-a42e-7ba11a1fe2fc", "indicator--4ecbd43b-87a0-450a-af6e-034872ca0082", "indicator--a657253e-1667-469f-a721-caa7e2d521cb", "indicator--7e0994d9-22a8-429f-a3e0-22e28e8dfbb0", "indicator--5d60187e-cab9-4397-9d55-3b01b3670867", "indicator--795d92cc-9971-4c5b-b975-f455ec75c57b", "indicator--cdc8e48f-a11b-44cb-9b93-09a0a5611671", "indicator--10aa4118-1807-4243-bcf7-43795f623e3a", "indicator--d23514cb-14ed-411e-b809-3e8026a8d70c", "indicator--caa15eea-7ca3-4cdf-9c4b-d15c41449142", "indicator--56cf6c09-028a-4591-9b16-8f46b5ba786f", "indicator--00f07eac-b25a-4ac4-b7ac-fb1d9a1a3db9", "indicator--db443fad-953d-4ed9-98b9-34a7ef32713b", "indicator--5af3b8f1-dce0-48d7-bb7c-e8005e3b788b", "indicator--e34cd4ac-a618-44da-97f1-ebe9553c51ef", "indicator--2921d5d2-a130-4b21-983f-15c30ffa8926", "indicator--0d7db600-b3f5-41c7-afac-0c7a6c6418e4", "indicator--49c57066-79aa-4183-86a0-fc0570a0ce1a", "indicator--95b4bba5-3f03-41f7-b4c7-b4cb98435d51", "indicator--ea623f21-d3bc-416f-a44f-97e78c2f7f31", "indicator--d72021c6-5639-4df4-a2ed-2aa62a06296a", "indicator--0a68260d-e933-465c-a75f-f5a650027ba1", "indicator--acf42881-6e3f-42a3-beb4-95aeada987b2", "indicator--338780ce-b024-49f6-b016-5e55a5541db2", "indicator--d7eea531-9602-4d08-93dc-b2711cfd3347", "indicator--f0f42a4f-794f-43eb-9666-4291d46fc961", "indicator--bb32bf97-cb9c-4ef7-9de3-e4960d0f6e0e", "indicator--a9bba4ff-2071-484f-9e3d-e75085e5dbdd", "indicator--05e634f1-bcad-4a6f-9f88-d5582893bdb5", "indicator--d6bb5d51-368e-4896-b5ac-d1ca667ceeae", "indicator--4daea610-faa0-4ca9-9fc3-a038cb705053", "indicator--d5c496da-9e78-4708-b214-45d07f64bf29", "indicator--8c15fef2-6328-41c1-ab73-567cbc3f59ea", "indicator--a239c22f-4b74-4b1e-8546-bc7cf24c4fa1", "indicator--acbf9fe0-8de5-42e9-997b-771ac95f012f", "indicator--25be2b9b-fa8a-49dc-9ae2-d8bfe8b08d54", "indicator--98002d7d-fd68-4511-b99e-4244f84ac788", "indicator--942f8965-b7b5-4524-a281-54c63b289298", "indicator--896c47d7-df38-470e-a527-88bff600c128", "indicator--99b06cbc-bd44-485a-b2d2-531b26fd33ed", "indicator--d8eaced3-e9b0-4e53-a3d7-308c5f55f8b7", "indicator--cd24b2a8-c1b8-4e3d-aa7b-dd2fffa9a847", "indicator--12c3b8ae-6e25-4deb-89ce-a478ee056be9", "indicator--a25f93ca-b560-4566-af54-15fd85d90e8d", "indicator--cb2c88b9-c32f-4458-8c7b-d77e5248d613", "indicator--5e992dd8-616a-4135-a478-8f1f7ea5f400", "indicator--80725cb7-ce8c-46ab-87b2-cb68831bc7fb", "indicator--e6670582-dffe-4590-ab79-b245272db1ff", "indicator--3b6c3d04-3846-4b74-a98c-a9592c0d4868", "indicator--9dd7e33b-16d8-4611-a8de-a97497d5fcee", "indicator--04af156b-4e1b-4674-aed8-7a52dff91328", "indicator--20ff51da-437e-4760-8a43-272f9c5f8b18", "indicator--b1094dcb-4aae-4d54-be80-c43bb6cb701a", "indicator--bfa54c81-0c1a-4b21-b967-fd5759f6ba05", "indicator--96875010-e486-445d-85bf-340195dae5b5", "indicator--2b51b4c5-9c3b-4ff0-8477-9821885145b5", "indicator--0f1c88d2-a751-40ca-a052-1fed40df9f1d", "indicator--816e4845-e7c3-4663-aa86-2bf1e4ae3f11", "indicator--857dc431-8a70-41ca-bef3-db456a1bfc5f", "indicator--d5969189-4758-4e03-ad54-492087403f83", "indicator--f34e58cb-e7b0-499d-a215-b8b9dcbd2be5", "indicator--50a04d5a-c220-47a6-a9bc-c52a65fd7b89", "indicator--e32cf348-c71a-4e6d-a8b3-7721937b2413", "indicator--d73ce0b6-ea72-48e6-bae0-23422d3b8b95", "indicator--ef7675ea-ab6e-4dac-afde-885ea797a572", "indicator--2a17f4ce-2372-431b-9b02-eba6256b3c09", "indicator--5e3218f4-9933-4433-9bf2-04b9a4fd0802", "indicator--85d2fedf-33f5-4dac-b5f9-b36cd2590711", "indicator--a51c0abc-cfc5-4efc-b563-068f045f88b6", "indicator--9a47e8b8-202d-4ddc-ac97-984d53feb50c", "indicator--c5acd686-cf51-4e6a-bd0b-66747826999f", "indicator--242599f2-64df-4f9f-bc6d-89d0344b3846", "indicator--8b1e6e1e-e1b7-4a8a-92ef-d809b54d11eb", "indicator--20042415-f88e-4990-9519-932a4e4a556c", "indicator--287deb33-4b77-4e1b-ad51-3cb963e58522", "indicator--c493145d-aab6-492d-919d-8143dbfa8052", "indicator--58606346-36a4-4a3b-ab3d-4238a748eac2", "indicator--ace66373-b445-40f4-a647-56e1465a9c77", "indicator--fc506f3f-569f-400d-8db5-47ed1e121b6e", "indicator--d11cd25e-333b-4305-bf1e-34e83934d96c", "indicator--e1b71dbe-562e-4313-b306-fbc518982b2d", "indicator--a26a3791-98c7-46e8-b5ea-18b4607ed551", "indicator--4c4e408c-eb6d-4f87-b342-b4a47d97ffd0", "indicator--3ea048ae-cb94-47e5-a109-175282641476", "indicator--afc3beb1-d357-4678-b839-d518e259f8b7", "indicator--288c5e7f-13ec-4431-984c-6421d329e179", "indicator--a458b258-a064-496d-8490-7cb344e267cf", "indicator--e4ee0b65-dbc0-44e3-8265-fa3498e1fa80", "indicator--ab824fa6-75de-4d08-a65f-70e3055645b1", "indicator--5d90db80-96e3-43ee-9ee9-c6b21ed365df", "indicator--907c19a1-1c97-4baa-a0f4-85cccea0daa7", "indicator--c7212c07-5ad4-472e-b51c-bfd1d9230367", "indicator--c9ef960f-3ad5-487c-9008-39d0b173246b", "indicator--da280c0d-d1c1-42dd-8e8a-e1690a74b314", "indicator--b8ace936-0221-402f-96bd-ae0e447cd9ec", "indicator--75f640a0-90fb-430e-acf2-4108e2656f41", "indicator--1805504c-90fa-4f9e-9ddb-1e7b3ed373e5", "indicator--f2bcca0f-943e-4f5f-af80-cc15e49af9ac", "indicator--d6801ae4-ff13-423e-9d8f-5048e9768c35", "indicator--425a7dec-6a6a-45fa-953f-2add56eccec6", "indicator--7e0ee1b7-ea5d-4c1a-9b94-f635d0964b83", "indicator--17753119-e4e8-42e7-82ad-b45b936d8546", "indicator--cc61f2c9-3606-41e3-a92e-42b86a67752f", "indicator--024f6ee2-225b-4cca-89ff-8af95d4f2884", "indicator--00df2b21-4c4d-47f9-9dc1-d61d9cbb2ae6", "indicator--69a5eda5-7cde-441b-be1f-1ba40c829a2b", "indicator--654c09f0-cf45-4f8c-93a9-418b1e173241", "indicator--32595826-b62c-47ee-9096-43ee7df1d8a5", "indicator--5edef546-0516-4143-8532-ea00572dcec0", "indicator--ffc77e9c-8cf2-48e7-b5f1-5fe64b55660c", "indicator--72049480-01d6-48fd-a1c9-ffd50e556946", "indicator--d9778dbe-8b20-43c4-8a14-eae408f6e920", "indicator--64e14402-29a2-412d-895c-c5da74c2510a", "indicator--80821a7f-7a12-4c1e-a2be-03d9fe2542cd", "indicator--576920ea-f4dd-4d71-b2b1-c94e8b952fdb", "indicator--fc61d05f-bfd8-4994-80aa-43c8bd3bcd7e", "indicator--832ce27a-e2e2-4f56-b334-88b5451a3925", "indicator--b5e98441-292a-461c-98de-8ecb59ef5adc", "indicator--66cc84e5-4979-40c1-ab7d-302cf3cd1f65", "indicator--a82aa62d-c679-438d-be7e-c7e938aa7bc0", "indicator--b7f95432-cd19-48c2-ba12-7d7c19fc56eb", "indicator--0f197d3a-81a9-4b8c-a6b3-8bf97cad215d", "indicator--90736309-8242-46ba-9d66-96c665fa40b4", "indicator--a6d2a63d-d55a-485b-8ed7-8c249f94d1ed", "indicator--ed5c4d3c-1561-4493-88d6-3b42483f891b", "indicator--80f64c1a-e4d6-4923-9e75-cf3b6b46babd", "indicator--e0570230-fbba-4993-ace6-d74dfc92c1d2", "indicator--3ab6e9a8-321f-4c82-88ab-7a3eb1e1590f", "indicator--2929dec6-da86-4914-bde0-247b984f9269", "indicator--c70a637a-3f88-4ba1-a41a-0c9a22788afd", "indicator--7a250608-b511-40f5-bac4-4619c5100191", "indicator--fdf1f659-bb88-46ac-9ba2-c68d30810a0f", "indicator--871392de-54d3-41cd-b8ee-487716d37408", "indicator--16d7e6a1-09fd-4dee-81b0-133ac11c7c03", "indicator--f46f77d6-d212-474b-812e-57dce6b92072", "indicator--c30d73d0-43a8-427f-9dda-4b03104e80a5", "indicator--05d664f2-24d7-49e1-ac48-3a02010c1c15", "indicator--d7182199-fa56-47ed-8162-ec7639c847f6", "indicator--10063ea9-a450-4e0d-9a55-1a7f22d6c943", "indicator--fc21ecd8-bee3-4fb4-b961-17b8b0cfaf50", "indicator--84a67fb7-fa35-4fbb-a2a8-a2442b946cbe", "indicator--34d78356-d9ca-4734-948f-9aaa18c8acc5", "indicator--7cca35e3-3805-4f81-88ef-87dd0b6a2517", "indicator--01e8b62f-de2e-4ba0-865e-dbb83b8ca048", "indicator--88a8b8a6-6dda-4903-9dc5-1536395251e5", "indicator--466c8ce5-9dea-4ae8-87d3-56bb71c8232f", "indicator--d3cad18c-d1c3-441d-a76b-bcbd1155f072", "indicator--13e3fa03-95d1-418a-8ef3-8183f2ee6917", "indicator--09843fcd-8317-4e1c-953c-2fdf776127dc", "indicator--59e3b9dd-0b44-4686-b818-75ffa683a41f", "indicator--60f8f8aa-229f-403e-8236-d9f515969ef1", "indicator--97ab190b-c615-47f1-9de1-586217ddbcbb", "indicator--7ebcf417-1b54-4250-b3b7-6318396364d5", "indicator--6e1ab042-5a01-4de0-a50d-fcf2004e6e9a", "indicator--7bfe8bcb-7653-4507-9065-1c112c45bac8", "indicator--a84d6da5-2f0d-40fb-9163-3d71cb7f71f3", "indicator--065b06a1-319f-4b74-b9dd-7d5973fc8059", "indicator--46066cbd-d6fa-4e58-ab51-56b1d54d7192", "indicator--9a3c91b3-1ee4-4a3b-a223-c134fd948c76", "indicator--4dd49475-0c6f-49e5-b475-aa912cfdc494", "indicator--a60fc6da-ea73-48e0-bcaf-a02dac3b4096", "indicator--df9ea022-b648-4e59-ab22-d18d0b3d13cb", "indicator--cd4328ef-2235-4270-8cca-780ceb33b5c5", "indicator--78a4763d-bcee-4ad0-92c9-6aca7ecfbe1f", "indicator--71d86326-2bc5-4139-8858-b75e93c0fa28", "indicator--eeeba49a-99d6-4218-9c31-c15cb3e23e0b", "indicator--9eb1ecd3-386b-415e-a5dd-6672cc987f30", "indicator--d44bbf94-1dc4-4d5a-af3d-22933957aa19", "indicator--6320ecab-d082-4549-8db5-73affa63caf2", "indicator--4dfa521e-fcd8-47a6-bb04-8cad049e78d5", "indicator--de907ab1-5231-45cf-9b26-34e51f2c47ec", "indicator--9bc3cb3f-96c9-4d9c-8760-8cab1e3ede54", "indicator--bc59c222-7f30-442f-8dcf-f34deed4d45a", "indicator--f67c2c76-e616-4067-9c33-9d4d3ff80104", "indicator--fbae9e76-cb57-474e-bb2b-5f3a220f8be5", "indicator--5baefd26-3ad4-49e8-a6ea-d1a645a76942", "indicator--3cf29701-6a9d-464f-b4ed-bf662d6ec1b8", "indicator--f5ec7788-8082-4ec2-aec3-1cf7cc9c5947", "indicator--2db3fc1f-a507-46a8-bc88-6d2876ae4361", "indicator--6fd36c22-9dad-40cd-bcd6-43d129a76c38", "indicator--3c2ea7c4-cd3b-4d83-9b32-20a8a49fb055", "indicator--f0be8ef3-a873-4ab4-9cce-7ed722bd3bb8", "indicator--811011fa-dc09-49c5-a492-c6bbb7b9754d", "indicator--e11847d8-9b63-4f35-bed9-913bf2f16f01", "indicator--2d22a978-b542-4e27-b60b-d2b85dc8000c", "indicator--4877e61f-44c7-44e1-aa82-37d8aea5bc9a", "indicator--42c8f2c2-a648-4833-b300-f0f2e24d4b6e", "indicator--c9836010-6559-49a8-8eb7-0fd8e9d691a4", "indicator--6c820a45-4480-4edc-952f-bfcb300a6448", "indicator--4c3d0fb4-5624-4d87-a10e-d134f2382080", "indicator--828cd3d1-d6ee-47f6-9c53-8583e5564c69", "indicator--a15cef26-c718-42aa-b753-9d9e73112083", "indicator--08a055d4-e240-42d0-9987-872e2ec0c9f9", "indicator--19ca3105-6f3f-44b7-ace2-eb3e8e3a85ec", "indicator--8f2dc502-3388-41c1-aaf9-8b39022917ce", "indicator--0603b321-9ffd-4eca-b4ef-865e6f7a9fb0", "indicator--9f37c64c-9c82-456a-8b48-6cea83014678", "indicator--cc9c1579-2520-4a84-8485-07e95b0f1d78", "indicator--eb7e1e53-9c94-4bfc-84a2-a389b40a936a", "indicator--73496b12-e271-4d4e-93fd-0c75efb4801b", "indicator--8fef021d-9b28-4823-9b3b-5e434dce48cd", "indicator--adfa457d-584c-4484-adff-44ff6bdac2e7", "indicator--8831316a-21dd-4423-92e1-9a55f88e3a68", "indicator--37e0e4ba-643e-4d2c-bc43-d766612cfb6e", "indicator--f8295121-815a-45d2-838c-5c0844bc8cf5", "indicator--685ae3b5-6fb9-49f4-a76a-4ddeb37bdac1", "indicator--d39d3388-f23d-410d-8112-0d3626e34e8c", "indicator--20793e3a-8b24-4619-a0b1-9f87e007b640", "indicator--0ae0745d-3a3d-40c2-926c-0771f34c8e05", "indicator--c3af4a6e-6fc1-497f-bf19-29ae575258df", "indicator--d2e7675b-f06a-49bc-afc2-543704f4c6fb", "indicator--64ed4aef-5613-43c6-87d6-eba49f314ec5", "indicator--2e307067-2fab-46c9-b122-da18cd677d4c", "indicator--569f4e3a-4f58-49d7-904f-d4be3dd30194", "indicator--559a4a96-8668-44bd-a62e-d2da82c1f74d", "indicator--6c6718a8-4a67-49d3-8c0a-073595accc41", "indicator--3fc9147a-24d2-4bed-806f-e909e7c2153b", "indicator--84c11db1-abc8-47b2-affe-412767a0f75f", "indicator--9f321b74-65a5-4f40-b7e0-5d88e815ca72", "indicator--c68e03cb-103b-4214-aae5-5eacd7dc93d6", "indicator--af88f022-a280-4908-b4c9-86dee4923f96", "indicator--af2e2a66-177f-4a69-a80f-f68264609b65", "indicator--5bae901c-54c0-4998-91ac-c531b7c39de1", "indicator--3fa0b4ac-d5e4-4a32-9efa-f2b89e9c3490", "indicator--0cb272a3-5230-4fec-bb5a-190c584cf97b", "indicator--49e19bc7-e44d-4ba0-9080-53b57b236284", "indicator--86f5350c-4466-4878-bad4-a5ff045eafb3", "indicator--f17e6878-948b-4bb8-935a-42cf1bfd1439", "indicator--23fb6199-dfc9-4522-a0bd-03844ad24e1d", "indicator--8d9471c7-8425-4072-b796-43ef89de36ed", "indicator--1d6a9c64-3fe9-4f2d-a574-dcd82e740f4b", "indicator--ca435a2b-51e0-480f-9cd1-a3e937097ac9", "indicator--f519ca59-cd23-45c0-82c9-e9018401a44e", "indicator--25603542-a74c-4f7b-9dbb-06039810494e", "indicator--4163fa7b-b9f2-4c7c-a154-f07267742b19", "indicator--0f8fdb60-97cd-49f9-9b5f-027c0ec98026", "indicator--e885e796-6daa-48e7-87d7-b2240d135016", "indicator--d6e38cdb-e183-4bb3-ab0f-a8cc93e938b3", "indicator--d281c810-10fc-40c2-b5b1-b880bff6d754", "indicator--bc7eb475-08c7-4fb1-b493-e26cafae8128", "indicator--43e71cfe-cf84-4165-adf1-d69d786b06fc", "indicator--dabe3279-dc4c-44b3-9fcd-5e60b27d6eab", "indicator--7490de98-0b54-42d9-95e5-4b3be219663c", "indicator--3192c408-3f35-4b7f-9c6e-f30e9bbae9a5", "indicator--eda87511-bc6f-4d01-9588-859158cca510", "indicator--ef382471-241a-4bda-92e3-6aa97db6dbbf", "indicator--28281ed0-82fb-4a4a-a25c-765829312904", "indicator--29a2be0e-25f6-4968-8aa1-76f8baca5397", "indicator--1e6ff747-f653-4d26-a0a6-b9bd0572a9bc", "indicator--4e1a339c-1f9c-489b-93fe-dfbefcf9c9c1", "indicator--a26d83ab-c859-4e3c-83f3-de2869360ce9", "indicator--04ecddae-41d6-4a61-adfb-6ccb0fc0cb30", "indicator--0142bf6b-bd7b-426b-bd7c-891abc2dd1f6", "indicator--542289d3-e854-4843-9dbb-0af7f833a2b9", "indicator--65412139-7b11-41fb-8879-b4877cc601be", "indicator--fd3dd4f6-0243-4b75-a346-31f9e9dde90c", "indicator--474aac72-6fc5-4f8d-b09c-8a09a9546029", "indicator--a2f0e16f-10af-4728-90f3-af2ec82c3208", "indicator--eba130af-8509-4932-8fc1-90ef4c3d8dbe", "indicator--8a17a858-0e22-4a84-a4b0-3047d6dcd020", "indicator--9ad114f2-472d-4ed4-96cd-7971695ee2b4", "indicator--2baa7340-1303-4ba1-868b-0ca88e173b11", "indicator--770f3117-03d5-4f44-b21d-3b232589990f", "indicator--e8d26147-4aaf-47d7-84f2-691aa1b5e37f", "indicator--da92db0b-424a-4140-95c8-5a1f8013d7a2", "indicator--7e328eb0-00d9-4ef3-b303-b4f60b3d23a1", "indicator--dfbeb742-10fb-4490-a7b9-4a37d6a14096", "indicator--3aacb6f7-bd77-4557-8660-5f8a0ff9cf74", "indicator--02b23d55-e538-4ad2-9f27-ba9293512510", "indicator--18d4c47f-5629-4fd7-a6bc-bafa22efa75a", "indicator--391d32b6-8d17-43b1-b6c3-e8c8d0e71a67", "indicator--fe9d54b2-4945-4fad-b167-fbed30faa6a1", "indicator--c6271dab-1891-40ae-b387-7a5be888cdb4", "indicator--2e23f13f-c240-4216-8407-319e15930ca6", "indicator--dc76a092-a416-4b6e-97b1-28d89a39adbc", "indicator--8b79884b-ca63-47c2-9dd2-26e305ec2288", "indicator--976e70ac-eeb8-471d-b781-647246118ae6", "indicator--a1897bd9-e975-4711-ad16-61ac5d7cd48b", "indicator--9910e1fb-607b-46ed-b1b4-191c65a08163", "indicator--a5220835-9a1d-41c6-bc3e-0234e704d36c", "indicator--114be554-bdad-44fa-ab12-1954b60f670f", "indicator--b0f720b6-ef97-46b7-8513-8bc15bc8e82c", "indicator--df349a4f-ea2e-4840-832a-e735b859a441", "indicator--ffba18de-8ea4-4d45-9807-ac133e0b4ab3", "indicator--6b7e74d2-6d56-4e5b-ab54-91c72099dc57", "indicator--123faf59-4f44-4744-be6e-6391c415062a", "indicator--8593d52b-dde8-43c8-b526-aba36e21f36f", "indicator--a8a6dbd1-8217-4ea3-abf6-7a35c970c33a", "indicator--be9b7d66-bc35-41c9-85bc-db46c840cc99", "indicator--d650c563-c348-4640-9024-7281c07ed5d6", "indicator--faef3f0b-2307-477a-a0f1-2f2e4e6cc464", "indicator--6fd9ac91-d271-4fde-b33a-d6ec2d64ce51", "indicator--18c71a6e-08af-4c26-8612-5b1e6d54c1dd", "indicator--06ba6b5e-2e7a-4fa2-81b8-c05d82b82dc6", "indicator--104900ba-384e-4e2b-9c16-057d6b9f00ea", "indicator--2dc146d5-d37d-47cb-b944-0fae77bfcdaf", "indicator--9e93e483-66cf-4904-b037-074712593d63", "indicator--e59f64b8-33e4-4ea9-bc7b-5b9706e937a2", "indicator--6cd941f9-93c2-41b0-960e-5032abd9fe1c", "indicator--de2a809d-760a-4ecb-83df-7fc6ba773c5e", "indicator--b84a1b31-ae9e-4a73-99a5-d65cc4dbc40a", "indicator--d19f0a63-7c59-4f9d-b7bf-65de32533119", "indicator--d150faf7-7cfc-496d-a979-3ac5290963a7", "indicator--bde5e25f-b220-4404-a080-b84866c3da6d", "indicator--51fd4da0-56fb-4c70-86dd-b6ad6561b287", "indicator--eb0312b3-f75e-494b-9848-63234f139642", "indicator--b32726ac-f9e6-405a-9839-cbe2b70ac4e5", "indicator--88d81ebe-3394-4982-88a0-92a3af970ff5", "indicator--47cfe1eb-002a-484c-af82-5a61459b421d", "indicator--11818fca-0b24-4f04-9f0b-ea71438f3a6b", "indicator--cf9fc878-1dec-4aea-9786-884c5782f35a", "indicator--cf69ee7c-9a22-4200-95b2-861b00ba2f60", "indicator--cb7f6c17-3be2-4015-82f0-62d8dc50d9ee", "indicator--d165dab9-9cb7-400a-b04c-b978f1891346", "indicator--79e3afc8-80dd-4075-90ff-f6e0842b7392", "indicator--88c8cc17-af91-4fc7-b9c0-b1c0c99f7be6", "indicator--6a1aeebd-2671-4f18-83ee-8d4d081c67fc", "indicator--65a0b343-d5b9-46a8-a492-95971f947acc", "indicator--50c0e7f4-d1f8-4a3b-910d-e9abcdcd4039", "indicator--2c9a1d0d-d4f4-4e39-a33b-a6d5d24c3010", "indicator--c3fc10b7-9492-48f5-8236-d7eca0466f62", "indicator--2f9a704a-f755-416c-ae12-ab18821c1a74", "indicator--585d1792-ccca-43ab-b9b7-7faa67cc12f2", "indicator--1133a02c-3236-4da9-b956-5beae5a62d6a", "indicator--ee62cc35-9704-41a0-aab3-7bb613876c71", "indicator--81f14f75-3acd-4913-880d-28477e628b95", "indicator--2100ca4c-1e69-4101-bb4f-6bcc14cee97c", "indicator--f3b6f132-e296-40e8-bc5d-8007fe68c2cd", "indicator--290e8e8c-178d-4084-b677-34d67da6cdf4", "indicator--517a37c9-5b51-41c2-9397-af3874138ea4", "indicator--81369f92-f94b-455b-9b4d-7431a818ece8", "indicator--0c7e8ded-63db-48e2-bbe9-333e820d52bf", "indicator--ce3d3db8-7526-4582-809d-288c59ae9d85", "indicator--6fe12c93-00f5-4385-914e-9f73efae6b65", "indicator--4a8acf72-ae73-436b-99ac-a65ccf8b3925", "indicator--788f63b1-bd9d-4989-abc4-8223cba21eda", "indicator--df02ea74-623b-4106-8aef-ebc99df5e7f3", "indicator--14baa8b6-1e0c-4598-ad83-2434082c775c", "indicator--46214ae2-eea0-4091-bee3-465230067146", "indicator--1af5a784-92a8-4168-80af-1deb5c811f73", "indicator--46b18a3d-e665-4c56-9e80-f16da4302cf4", "indicator--1d6d9457-2e68-4a63-aac2-9811a667bfcc", "indicator--7c990927-f401-4319-9d4a-e75d94a3430e", "indicator--d24731fa-d19f-41c2-adfb-9da48eb47018", "indicator--056fb4e9-8a06-41c4-a3bc-b399d4c9b37c", "indicator--39ba7795-8758-4f6c-9878-ed9fea225c96", "indicator--4849cfb0-c2b9-41fe-8319-f4dfc84fa940", "indicator--27c70ab9-fc98-4d26-a9a8-d8274ed4c5c7", "indicator--8c96db23-0c90-43b5-9f25-aef8fa900bf9", "indicator--7337add0-3635-464d-82ba-8b2c16758064", "indicator--97d9b99c-a8a1-4d02-b826-72644a1aed9c", "indicator--9d240526-7c6b-4a32-b140-490d682c76b8", "indicator--3d67e12c-6a85-4f19-aeeb-66b8f07ecb98", "indicator--d1acda6e-e316-471c-8dc5-956748dfc91d", "indicator--6cf61dc1-680e-4807-9ea9-f905655dbc14", "indicator--9c95861b-1dc0-4274-b69f-810735aed4ec", "indicator--dc6f7844-8f56-4c47-8c25-1c1fbcd4aeb9", "indicator--c8e52237-7b25-49f8-870b-2c936241b85e", "indicator--7ab44732-dfe1-493f-bfb5-7278162da40d", "indicator--aa1b50ee-86a0-4cb4-b452-933b3265b00d", "indicator--2630ae8e-21a8-47a4-bc10-fde18858813f", "indicator--3f6a401f-afc5-4a4d-988d-f946ec75fb0e", "indicator--c8a0e125-5b95-492c-bc5f-d466db872206", "indicator--2dcd705a-9f42-436a-87b4-4a4c57629d69", "indicator--5d5637e4-9125-4acb-9953-595a4a725f13", "indicator--17869b1a-4195-41f5-ba22-6ea41fd7dc10", "indicator--9ae00a45-47dd-4ba0-9bfd-bc28b60c17ca", "indicator--e11d6094-a8b9-4e19-af05-0da74ddc6049", "indicator--3165ac6d-f692-4077-917c-2db9233e68fd", "indicator--a02a2957-29b6-4bfe-8259-8e6b62df991d", "indicator--4e8b405b-2f8c-45b1-85bf-4a5daddc8861", "indicator--10475879-fa02-4bf0-8362-032ddf71f89e", "indicator--c1d311ce-4703-4ff9-9784-5c608570d59c", "indicator--53c3f738-86ce-4c34-aece-f15c23b67f3b", "indicator--4eddd9ed-39ba-4c8e-8e37-cb3a944a2533", "indicator--4d099674-207d-419f-bd02-aafb9466d3ac", "indicator--da08539f-4470-49bf-a2a9-83379e82cf29", "indicator--1a9ab7b4-f023-479b-baf6-3c5bec2db259", "indicator--cef4f37b-3566-4df0-803d-9ef87ceb7c49", "indicator--0a9270ea-f00e-4d28-b4b5-f14b24c27cf1", "indicator--98ff1b39-9047-44fd-99a1-c3de82aea991", "indicator--473e8d39-9c69-4dec-bb50-18ffe4b7c9c8", "indicator--8cf4651a-04fc-4a10-bdd8-3a9e7b3452e2", "indicator--2e80c6c4-047a-43d3-8898-493a592ad186", "indicator--37642d54-04a4-4a2a-ab60-8bbdde9a88ee", "indicator--a971ee96-90e0-45c5-a659-7ce98bf0b07a", "indicator--89ea0542-9ded-419c-9ad8-3cfea6887a55", "indicator--da29be7d-735e-4dc0-8dcc-a88fc98655a1", "indicator--19150544-0837-4c32-a77d-4398af85562d", "indicator--5e624ad1-46fd-4989-ad5f-03bd176fe639", "indicator--d864210a-605e-495a-a44e-f995c6a945f5", "indicator--47439e21-9bc3-4143-bef1-1cfa173a725f", "indicator--949ca298-34fd-4f03-971d-ae32f0ab674b", "indicator--3f11e615-0ae2-47de-9eb9-f0128094927f", "indicator--f9e20d7e-4dd9-4725-b4e8-2c23319ce12c", "indicator--930a81c4-b35e-4ba6-bee4-733b73552268", "indicator--44fb1e60-0953-471f-abe6-cfbf0cbc59cf", "indicator--59a80ad3-28c4-4e5a-ae97-6c44e336920d", "indicator--0dcd7429-14ae-4ca2-9d6e-a63ba106355b", "indicator--ce91b624-903e-47b2-af6a-8d3ca6f809d7", "indicator--25b5652a-21e9-4363-84f7-8559feb650dc", "indicator--c05b18ee-dfe6-4c40-80bc-973b69def837", "indicator--647b1b90-3172-4a2b-99ac-c08487b54096", "indicator--88adaeac-7832-4f7e-a8c9-89ec5c85f916", "indicator--117baf8c-0f70-4dae-83e7-b3596e071904", "indicator--cd861875-62ef-497f-b647-36f352cb14d1", "indicator--48795169-d4dc-483b-b936-af7b5504b816", "indicator--d11929e8-f70b-42b5-95b9-bd32c9908c04", "indicator--f2242e1b-b1fc-4c6b-b73f-ad70246b8c75", "indicator--f28179d1-db44-4d02-9e78-592b308847a0", "indicator--549067ab-75eb-49ef-9ca3-cfddba4c7ca1", "indicator--31505b56-6709-4a78-a98a-08f06221e1c0", "indicator--5786c513-1c64-4c9a-9baf-e8ba5feeb066", "indicator--936eb877-1f14-4ea9-8da4-fb8442aa9d91", "indicator--1e6bfe5e-f2b2-4bb8-b13b-63c0a2fc91a0", "indicator--b828dd2b-c080-4e3d-99fe-720a1e2b5ae4", "indicator--744c337e-aafa-467c-9f98-954f9851a412", "indicator--a5ba2105-4221-4430-a021-0503bed6a852", "indicator--190bcc7b-e286-4c86-8397-6491b60ad113", "indicator--61f23f32-ff7b-4a2c-a58f-8a0b9129438d", "indicator--730e3ccc-d34d-4def-bcb3-240a2a61c654", "indicator--8bd417b5-f7f4-485f-81d2-576e1b4503ae", "indicator--1c90e84f-1e6f-4952-8a99-ec6c36549e5b", "indicator--7ea50afc-a1a6-4cb5-8249-b476bf380450", "indicator--09902c6b-83f7-4f4c-a6f8-81401132dc42", "indicator--4deaa5bd-7da7-49e4-9c09-2029cceaa78d", "indicator--e1501f26-add1-4e07-bef5-6f8d80092282", "indicator--637c1900-dfa7-4aaf-bc9a-0eb96ece04aa", "indicator--cee631d1-164b-40f4-8921-3fa475393ce5", "indicator--3e6faa8d-462c-4638-9c40-b71877f3a5fe", "indicator--2b4e1c02-ecb0-4fa0-8d94-f417375944b1", "indicator--fabda013-6fd6-4049-9a48-39ac38ce6d8b", "indicator--1df82c96-c093-4ec7-b9e7-85556a6575cf", "indicator--086e2911-9d32-43c4-a0df-9f95c52a8d3f", "indicator--677ecbf9-417a-4437-9437-036bac804f5a", "indicator--ec4144a9-324d-4649-9422-c5019e31a8ca", "indicator--567d7dc0-9632-416e-addb-9cdf12f05c0a", "indicator--cb159073-429e-46af-a2f8-0ae8c74ee61c", "indicator--e218414b-91d1-414a-911b-e8ce0cdd731b", "indicator--bf071a09-a632-4d0b-8531-caa3c19105a1", "indicator--79131364-7992-4f6c-8465-bc44fa19c4d6", "indicator--6288a8ff-0c5c-42cc-bca0-5300b925660f", "indicator--fe721faf-8ff2-437f-8c02-6a336f9c9b4d", "indicator--2750fe63-4d17-48ed-a849-47457795f057", "indicator--df02bc62-34f1-4879-b97d-686d43496aee", "indicator--b54b96c3-1e72-400d-b49e-e763834cd848", "indicator--c1bda182-337c-4486-991f-f8ae18c68d50", "indicator--3815cad5-e317-4aeb-83db-161e1c87db3e", "indicator--e05a429c-b278-433d-93a1-b26d87313a0f", "indicator--46e94049-c346-49b4-a2a0-aa0543017f2c", "indicator--1a16396d-f4ee-4dd7-9fa8-6f514b9c22c0", "indicator--d48ec8d3-e2f3-4e98-881e-f677a329ba3f", "indicator--d2828422-3d84-4981-b04d-bff2b3c7abfd", "indicator--b0969910-378b-4f8d-ae74-33eeda51ccb7", "indicator--65dfc81f-e2ce-4264-ad3b-bcfedaa772b9", "indicator--83a9ab7c-3f7a-434c-8504-34709ad4e4af", "indicator--6f55883c-02ab-4e38-9c48-fcbef61d44b4", "indicator--cee9cb8d-b468-4fab-8d6c-6ada28229474", "indicator--7323b94e-e363-4a43-95fe-b3b0e19875e0", "indicator--bc77cffb-4078-4548-b94d-45ab3b6da266", "indicator--464b8839-708a-44a9-b5ad-d773fcc1d776", "indicator--4f017dbc-3d42-4d6d-9935-00d2b1c579ed", "indicator--09acba3f-6b5c-438d-b103-50a9c8783a83", "indicator--5a937721-303d-48d9-88da-b91af36be3fd", "indicator--c1a75aeb-610c-4848-ad4f-37d6e369deee", "indicator--2c91aa03-6a5f-4a8d-ad53-79825f6557df", "indicator--7fce8d47-47f5-41a1-be9e-70b6d291dda3", "indicator--d6371070-b737-417e-92ff-446846d0f254", "indicator--14241f62-5b19-429a-951d-b57168b36df9", "indicator--c9de8942-e1a4-4bf2-b11d-069fe343d9ad", "indicator--6edb9b56-3fe7-493e-bf91-772a6640df94", "indicator--1d4301a9-2976-44c8-87c2-1014855b8018", "indicator--3def663c-e73f-4c82-a4ba-504c5410c945", "indicator--2f6e96d1-c4e7-4079-9d80-3363b5f57e6f", "indicator--5289f251-afd5-40e8-ab87-0e6eb9b310a2", "indicator--8e4ff3e2-3935-4233-83cc-2e42076e29c0", "indicator--e9ca5111-3fa3-4a5d-9bd7-27a07b9135da", "indicator--7dff9287-d25e-49be-b517-b074cc567178", "indicator--5e5442e7-0a70-4e1e-a944-90b9858fd427", "indicator--99e57bd3-3b23-4ffc-b109-010eaf2b31cc", "indicator--387ab2b7-11f3-4bea-9469-bb5fba31829a", "indicator--80f883d4-49c1-4655-9d09-b00cb812e272", "indicator--25ce01c8-cac4-44ae-9187-7efa0501850e", "indicator--c19f5dc2-b7da-433e-a51a-cb197bb8241a", "indicator--346293bf-2f3d-4711-b801-34a465161185", "indicator--05ee29bc-3aa8-4f34-9a16-129de7f3c7c7", "indicator--293a18f7-da3e-4619-97e5-3af15466ce8e", "indicator--bb98a22d-59c7-4ab0-b401-729ae7316401", "indicator--c54ceccc-6b8c-417b-bfde-513763dfd858", "indicator--62b8f4ed-2f35-4296-878a-9f2258fc4aea", "indicator--ec9e3c9e-1735-4e01-a694-c5709a477c2b", "indicator--31d63e9b-4eb6-43d0-863e-5ad4982f4b96", "indicator--2cb3d649-d010-4fad-b218-f417f60c9d63", "indicator--3d025658-d03a-405b-a883-c1fc7e68487d", "indicator--4db210ef-f4ef-44db-bf93-fbe97ef1f2a4", "indicator--fbeea554-3e95-42e1-bf79-4dc0469ab553", "indicator--1ff3a816-dd18-42da-b5e7-3fdb1093fc04", "indicator--796effcb-beb2-4a51-b3a2-64fcf84b467c", "indicator--98dc7247-7388-47a5-bd0b-e7069610f714", "indicator--e2cd5934-39b6-48e8-a407-1fd2ff465fdc", "indicator--6ad9c729-ba60-43f2-be65-dcbd3d4adda1", "indicator--1a3804f7-88d3-473d-824e-740bed604f8b", "indicator--f965fdaa-0a0e-4b51-8986-bf71e3d820c2", "indicator--3900d991-f9a7-4a5c-be46-e4a17bac7f0b", "indicator--7be37d9a-621e-4ad7-9050-e53ff51d271a", "indicator--b76297be-60c0-4876-90b1-9411b6c13efd", "indicator--a1282209-d89c-4a8a-aed7-835ef04452e7", "indicator--9586eab7-0e2c-4b12-8c0d-7c34efc90ab4", "indicator--ae021b06-7dc4-415d-acb0-701669d42ae0", "indicator--b5edaad5-f4c3-4f40-a7c8-ca0b17e7ae48", "indicator--6b6af0b1-ccc3-4e89-8ac3-18859454039e", "indicator--2cc54614-3aab-48d1-bb59-15073a18e89a", "indicator--df083210-4b1b-4543-a216-08dcb88036c5", "indicator--858a0847-a337-43c3-8d88-02491dcc19a8", "indicator--0ce49cd8-81b0-41e5-be94-4474f590d88d", "indicator--c3405708-7820-4f91-aef7-50759c5d7a95", "indicator--b4187fe1-421b-4c47-98b7-6498197b9d4d", "indicator--2cb4f846-7add-4dfd-9171-55496bbd02a0", "indicator--a0ef68d8-adde-4c38-b791-9be4ed957cf6", "indicator--4dcb137b-26c6-45c8-a04d-0e3d039d9e76", "indicator--3ba429f3-d2d5-4d0c-9799-d6c1a23018ce", "indicator--b654b957-7cc7-4cce-8fb1-1f6d1431c723", "indicator--a3a4ecf8-61a2-4ac3-a765-c82a3d7abd83", "indicator--32ac315e-b740-4161-9213-2e9be286941e", "indicator--9a53bd78-d7a1-4edb-9f1d-4506df31f0b4", "indicator--1db5bc32-73fe-4014-b840-ec12c9705013", "indicator--8ef10d53-b609-4288-bd35-43431467ec4a", "indicator--34196e0c-5909-4b71-9204-fdfae79d36a9", "indicator--2cb5aa09-f2e4-45a3-92be-a6bd0c93d908", "indicator--c7718fc8-88ec-43b1-97ce-695f0d4b7969", "indicator--eceeb671-edae-411b-bf2b-6b2d499d32e8", "indicator--21317d41-0205-4b98-b43d-ab353bf04ca5", "indicator--1c270a46-c57a-4042-9e5f-17b64299ad75", "indicator--704545a5-aca0-45e4-824a-eb798b83c333", "indicator--75f900b7-fc9c-4ba3-9356-40cb7ed3800c", "indicator--8abba843-6158-46d4-9989-e1f63a3359fe", "indicator--8ea0ee00-40c3-430f-9070-ce0d1c4866fd", "indicator--1a13d3e3-2d98-4090-b478-76cb088e4d7d", "indicator--c1dfd026-3315-4218-999e-2985d9e0c576", "indicator--462c8a49-321a-4ceb-ae5b-bb79ee27a2b2", "indicator--f57fec80-4f1c-4772-b78f-c69a161b1c9c", "indicator--a392f37e-e557-4270-a97a-c4f4df756155", "indicator--0fc12aef-f894-48b4-9346-6bf36c78038b", "indicator--39f7793b-5085-43a5-8561-e1bc0569bf10", "indicator--47012d03-9210-4176-9d1c-97ee6e3274c0", "indicator--6b1fff21-5cb3-4013-9eeb-4bc8382ef859", "indicator--5126ed23-97af-4265-ab5e-684485707359", "indicator--f0aedb39-63b0-4a2d-99b2-9ba747c8bf29", "indicator--3e6fc992-ea77-405c-9af9-2bad609a4b94", "indicator--c16433b9-573d-4daf-9ba2-3c15d5bcf796", "indicator--ef9d2650-6666-47ec-a16d-0543e14dc546", "indicator--c005e79f-65fc-436a-9f8a-d93849bf2b6e", "indicator--153b1d5b-dfa3-4983-8973-cd1b8187be8a", "indicator--c70cb741-609b-49eb-b22c-313efb51eb11", "indicator--921b056d-b74a-4c13-b022-276698f667f7", "indicator--137f27a0-61ee-4d50-bdff-47af543b50df", "indicator--00e88d8e-94c0-4b08-be7c-e22edb6bacdb", "indicator--7bcaee96-944f-412d-8d11-154474283d90", "indicator--bca8f7b9-4a49-43e3-8505-2caacc0b9515", "indicator--77ce76e9-934e-4626-bebf-6d02ebc589d4", "indicator--816177a0-cb6a-4ecb-9f4a-b47d8af5e0fa", "indicator--00a0a913-f0ef-4518-b9c8-9e2d70c32d53", "indicator--835d4aee-902f-4c57-871c-33d422529c69", "indicator--87c2717b-ad9c-409b-8fea-f8eceec43b21", "indicator--416faf20-b14b-4ea5-ae5b-9efa5a95a069", "indicator--47df179a-0565-4cb2-873b-873507bd36c6", "indicator--63f47f62-5e29-42bb-9436-ddccc63fa7ca", "indicator--5c79898f-caa3-451b-9f69-799d2bab07f8", "indicator--01f8f3f3-bc3d-4371-8b77-696ab7501a80", "indicator--6849dd6c-2a65-400b-bce7-04a916562518", "indicator--652360ae-3655-4ce4-b440-f7da68d7152a", "indicator--fbc17d33-d41b-4b69-bc92-ab8e2c710bf0", "indicator--eac26499-174b-43d6-b3cf-d82cd12a2a04", "indicator--bd16bb4d-b882-457f-a070-f4f619683170", "indicator--c6a6b2b6-50ff-4fd4-beab-19d06859b77a", "indicator--cc03b9fd-9758-4646-b8dd-e2daaa5132ee", "indicator--30b65b4d-04b0-449b-835a-7fa4b5f6950c", "indicator--cb67f776-1951-4fde-b2fd-327a5607a36b", "indicator--106d69f5-149a-4047-9c17-442eafa78c7a", "indicator--00f16e1a-c728-49d8-9a22-7ecea8b1a5fb", "indicator--ac5e487f-5cef-494c-a9e4-3ecba26516d0", "indicator--253db928-e53a-4644-9643-d754eb4f550f", "indicator--99ced0c0-9c82-4507-9060-13eb26e52a4e", "indicator--37490e96-a7fa-4f8a-be57-d4e0c5f8beff", "indicator--b59700df-ba1c-4419-a8bb-2d706d7c3730", "indicator--bef51824-f655-44f1-99be-91db429364c8", "indicator--e4054724-2905-4a60-bda0-cb7f10743768", "indicator--c4567a24-2a74-491f-aca6-4bffb5436c93", "indicator--636ed0bd-1b95-4120-8de8-974b423a1270", "indicator--36e1453f-45b5-4796-9fc4-cc585e057fa1", "indicator--a5b34a6d-cadb-4470-92b0-5e9af1802fa4", "indicator--5dc8d87b-e531-40e4-8e98-f52ba4331a45", "indicator--cfc21c35-67e6-44b7-8dc6-91759896a05c", "indicator--a95a31ef-f0c9-4160-9a57-7b530b3a72ef", "indicator--c9cef5d9-0fb3-4e52-9a54-687829c2ddbe", "indicator--d7a07d64-46c5-42f1-b048-5ee998c262af", "indicator--21098485-09e9-47e1-a9a3-f981e9ec04fa", "indicator--6eb69f37-9d22-49c8-a3a6-79035e73ae17", "indicator--68ac21ca-a0a4-4edb-ad4c-480dd3a95543", "indicator--a46bbf20-fa70-4d6d-8e24-3f8d437112fa", "indicator--3d11357c-c5cc-4a0c-94ca-3b82c4143f03", "indicator--5a145007-0f14-49fe-971d-07464f4a09e5", "indicator--63c89e51-50a0-4541-8150-f71379753acd", "indicator--d08dd220-bb22-4254-b1f1-b8932de989b7", "indicator--d15a11df-cd55-47c3-b4d7-64411015ffcc", "indicator--9e565eaa-d504-4c75-a4f9-69e5e4ca82cc", "indicator--f864ddd1-992b-41f7-8fed-fe4425fc2a9c", "indicator--ec8600d5-2a05-4fff-8dbb-35658ab53c42", "indicator--93b2a10d-77a7-423c-af00-9a60c532d796", "indicator--35e1d31b-b0cf-47c4-9c72-af0d1a480df7", "indicator--7a38c0a1-ca5f-4ffc-a9b5-deac87c6076b", "indicator--54473cc2-7ede-46bf-a874-c9925969ec6f", "indicator--76d5eb73-0193-4b60-9d72-31390655f867", "indicator--d5b67b9b-f078-490f-8fe0-10cdb38ca267", "indicator--c5c07e22-6261-46b8-98b8-24e0cb733a75", "indicator--a09e05b5-91dd-48c3-a171-c6b35f69c82e", "indicator--fb89e13a-7467-435a-9f07-b6156e49ae62", "indicator--94d49955-9366-4264-a3ad-82c6237c1820", "indicator--48b52996-93d9-4362-b7df-f90567ea82b7", "indicator--83f79a0d-7564-44e9-bcce-1721977df767", "indicator--eddabddd-4e2c-45d9-9be9-a1a9b8109132", "indicator--12103334-c180-46f0-9d0c-72e8ffe33312", "indicator--39581cc3-a7b5-436d-978b-5acd4a6bb7f9", "indicator--f8269452-ffde-4515-a5c9-b5400434ce96", "indicator--e3483b5f-2501-4c86-9532-7bc42c1e4e02", "indicator--89908423-1880-4d2f-8207-3b2ffc423ce1", "indicator--ecc6b51d-407e-4596-86db-86aa4d5fa4b1", "indicator--f35f6d20-a314-4a31-8c43-96c0e9fba362", "indicator--d9a20e5a-b05f-4b79-8332-fd9e522ef786", "indicator--3fb898b4-3ab4-461b-9c2d-30b151ff984b", "indicator--9cabc665-72fb-4ce6-b52a-12d08f7685ac", "indicator--738390d9-2fe8-40fd-ba15-d968ee9ea0f8", "indicator--7ef279f8-0f26-4988-b4fb-0976b8f5b458", "indicator--8ca98c7e-363b-4d6f-9d76-27a126bef8d1", "indicator--a4b18e67-6312-4715-8489-f50cbb7601d2", "indicator--e31466b7-145f-44a2-81e1-6f4a3b8b26db", "indicator--cb864888-5f9d-4071-921f-9b05ca61c685", "indicator--cea16639-f121-48dc-b453-68c9f25abe86", "indicator--16276938-8767-4ea2-8c81-602f3869103f", "indicator--8d4d14aa-4d71-4ae5-971d-fb170769e434", "indicator--6376c51c-2e0d-426f-8534-75fb6fd354f0", "indicator--a154f269-8b3b-4529-9047-38d5e8db91bf", "indicator--9c470dac-6683-4c5a-8e76-4406307c9152", "indicator--fee14f5b-b15c-46fa-bded-71111d019712", "indicator--3868f108-0b31-4cf3-a822-59700baaa661", "indicator--705b3528-ec43-4b10-9c13-988567359426", "indicator--5cff8c1f-64f5-4134-9832-786fc0922eb3", "indicator--f99a4dbe-084d-46dc-940c-d31385a9157a", "indicator--b6465304-1fc5-4432-8649-51bf7efc6167", "indicator--58fd2bb1-66d4-48aa-8ba6-8f8d567e64bd", "indicator--b45b9491-4ce2-4d35-9c66-c5603a0fb6fb", "indicator--c184e9ca-72e2-44c1-a72c-02d8df702a7e", "indicator--08ad870c-45b9-4ab4-b271-599c30116ee6", "indicator--514a5c4a-fc72-4eed-aeb2-88d7f1f95d59", "indicator--b098a191-614f-40f5-ac58-9dd19de87aa5", "indicator--ab37f85a-6edc-4c2a-977f-064240b3a4fd", "indicator--660ace68-34f6-4b76-bbb2-725e9cd8fc3e", "indicator--3de62900-d3f4-4bd8-85db-3da6cf4ad11c", "indicator--33b5fa81-5be4-47c7-b4dc-9b9aafd2d753", "indicator--ef1fcc6e-b2d5-47e3-8b0d-4f7547c240a8", "indicator--5982532a-f673-43bd-8433-373b40bed2ff", "indicator--3fbaa452-6911-41e6-a6b8-68499383f696", "indicator--77340730-50b4-4b20-958b-5074e3aeef40", "indicator--180e4783-ae27-49da-a74e-b6e833641bf1", "indicator--245a8d9b-a62a-40b7-b732-0b32473e48bc", "indicator--66a3fca6-faa6-44bd-998d-a663ed5c4732", "indicator--643b67af-ab5f-4942-aa2c-81cac4600843", "indicator--c937166c-a5a3-4a7a-bdbc-24f75e43dd52", "indicator--ac44b1e0-946c-4b2a-ab48-191cb3265575", "indicator--d0eac4b1-cdd5-48ff-8ade-4dd86ec228cc", "indicator--bf1f4792-0eb1-440e-9ced-ee7831aad7de", "indicator--5a29030d-7a8e-4700-a321-534fc5883b3d", "indicator--058e7ca9-cab4-4334-b1d9-17172f1b0a75", "indicator--78a7ec34-825a-498c-942c-82f397be1c07", "indicator--80af1ede-b855-4495-a68c-025721b5bc65", "indicator--66573f44-4ec7-438b-a4bc-9318001742f2", "indicator--ee2a5f3f-5f85-4c43-bc54-14a184b76810", "indicator--fae45d50-752c-4425-a3e6-6335936f1d1a", "indicator--cfbcd3be-55dd-4ee5-be76-2a7efdb2dfcd", "indicator--0caf43b2-1f73-440f-a17a-d5d1b3c028ae", "indicator--a4a39120-64c1-4e96-b02f-905d4d515e4c", "indicator--26660148-bc72-4960-b1e0-01fb49f7c240", "indicator--d43fb3bd-58f1-4288-89b9-01a406fc5188", "indicator--3d3bb983-d3e9-4a2b-81c5-412121e0476f", "indicator--66b8c263-c19a-4ffc-ae35-110b54d176d3", "indicator--2cbc9877-c294-448c-8520-6653bc48e2ea", "indicator--308016d3-04a4-49fc-b2c4-a133df7e7b0a", "indicator--784acecd-6697-481c-9b10-1c85cf029db8", "indicator--603e74cb-589c-46f3-af0e-6746c1417157", "indicator--2f705420-b9ff-414d-ae49-930217d2f34c", "indicator--83ba9b4b-7d07-4eed-84d5-2f89ddecf2c5", "indicator--d4ac30e8-fad1-46a7-9b7c-a56fb1e65e9b", "indicator--d37dc860-a836-4366-9cb2-d4cfc6c949f2", "indicator--c66b4288-bac1-4ffe-acda-3775cc8d1cd0", "indicator--16d60d3c-ade6-4592-b577-262cabab9261", "indicator--98a00264-5615-4808-b049-91b69d0dd4b9", "indicator--527e7af6-d658-451c-91ba-b23800d6225e", "indicator--27e25de1-0ae2-4b91-9153-880f2fa11f83", "indicator--4ac61397-2e9c-4d68-80b2-11487972cdfe", "indicator--ef38f217-f776-4c9f-9e4b-7b56c6aebef6", "indicator--1670f986-2a44-4854-a340-9e799c31c1b7", "indicator--d2aec2ce-c9cf-4765-bda6-c8e9159cbf8b", "indicator--a79553fc-d721-4623-8795-438366b456eb", "indicator--da30ea58-3b48-41f3-a782-cf6e8f39163c", "indicator--01249862-69b6-41a5-a036-6f3622e62e10", "indicator--038e8456-f7c3-41e2-9ee1-a27ca14979b9", "indicator--09e816e1-f5b5-4c29-aaee-ee51f674e2cb", "indicator--a880a864-55e5-42c4-bb37-f988ab444c2b", "indicator--bd83aa55-7a9e-4d75-b00d-957b683b60b4", "indicator--29a9517b-0891-4890-8c4b-b98f9232a4c2", "indicator--f81e1ed3-90d2-4615-913f-80f265b26240", "indicator--d2b0f2c1-27ce-4e57-8439-26e06b3daf37", "indicator--6b207557-7db4-46ed-a06e-69b20ba9c2a4", "indicator--280467ed-5340-4ad4-a522-2b3fcded2a8a", "indicator--87970ed5-5c99-4898-9da5-e28d977011d1", "indicator--85c6f6c3-d692-46df-b1b4-4963c73b8589", "indicator--25b292f2-9623-43aa-a9f6-4ff286dee210", "indicator--c62ef0ce-eb4b-4da6-aa8f-4f5e128f8a6b", "indicator--13c629d1-ebe3-4941-942d-de1c0470a6a8", "indicator--a8b63406-a221-4da8-834d-e02fff84fb51", "indicator--b37443ad-c9c3-414e-be70-c19f0505f8ac", "indicator--b5393792-1323-4c99-b331-6d0969f0eb19", "indicator--6dec7bfb-fdf2-408a-81fd-9919323ac499", "indicator--187c08de-eebc-4b02-9869-183c018a0dfd", "indicator--169fbc3c-2051-4eea-b7c6-78a5d8b19c45", "indicator--909949ab-a2bc-4046-b1a1-5a6013d6a618", "indicator--c22a9961-9816-4290-a539-ac37e1234d15", "indicator--34e41e09-0363-43a8-86e5-dc7218dffe51", "indicator--cdfcd405-a64c-4802-97d8-31eae0e6ff35", "indicator--2fc9b5dd-954e-42e2-9032-b7d7b98ea5b5", "indicator--1b378a73-7194-4186-b2f8-c5b35857754f", "indicator--723c30f3-d853-4e6a-ab77-bc3866ec5c38", "indicator--c24aa0ae-26e5-47fb-8f75-8e08306097bc", "indicator--cc74e203-53bb-4727-ba2d-addb1ce64085", "indicator--47397f04-5ef1-41b5-82dc-867d0dd3a01e", "indicator--412993c2-8a56-4b84-a899-6afadd887b55", "indicator--c397a383-2e8c-4ad4-a5d1-4a23f8aa56f7", "indicator--e27eee95-f700-4087-979c-0b938f410c6b", "indicator--3d6cf82d-446c-4860-9e6d-d0ea5407d403", "indicator--8afcfb50-1964-46e9-9c61-13e7a0c25101", "indicator--6fad9f5d-6813-498a-9f72-c91a439cd36d", "indicator--85950d25-2d48-45af-8c08-2944c586e6b2", "indicator--1193b275-287a-4771-8ce1-0ac1f601e02c", "indicator--5fa601cc-d6c6-4769-83e5-93951c4df482", "indicator--72ddcbbb-92e6-4a37-9388-3d2d3bf755ba", "indicator--3ebb288c-8904-4826-8740-f89da8984a51", "indicator--fde8a0c9-11af-4a61-acd1-cbc9b93eed4c", "indicator--8df6ee82-5587-47d5-bee5-e4dec1bf31df", "indicator--43aa0792-e7bd-44da-81b2-c6cea6fc4ec8", "indicator--f211dc56-b3ab-4071-b765-e70c95ef2df7", "indicator--e89d7a68-e26b-4dad-abf9-d3b2b2cf8294", "indicator--1b9bbb09-94cc-4636-9556-c829238f7860", "indicator--4334a4c2-4930-44ae-bd9f-5adcfd951fa7", "indicator--37881467-bcc8-48f3-937b-04d3d161427d", "indicator--9685806a-7b3a-45d7-8407-6cb43708de8e", "indicator--7f76fedd-9526-4381-9974-7ad38bc272f1", "indicator--cb28539d-17e2-4cbd-9f15-744e5e1e91e2", "indicator--1483343d-8b51-4724-8635-573f61cac633", "indicator--9ea14f94-3339-44cc-b27a-97c850bc0947", "indicator--1c779180-1c49-47f7-8aca-ec88ff7333e0", "indicator--5f8578d9-9d0e-431a-a345-b473c201555d", "indicator--ff0f8d3e-7b13-407a-90f7-37d3c972c3c3", "indicator--a41e1df8-125b-41bd-befe-9e812f709fea", "indicator--63c31f10-0ebe-4d4e-a26c-a26415950d08", "indicator--8a0e5998-8c3b-4fe7-a783-d6999cc8a9d3", "indicator--12601691-9948-4e10-80ab-d5e9e6a9f6e1", "indicator--35437ebb-a70c-45d3-bdb2-396a8d1d9d40", "indicator--c3586e68-88ba-4ca2-b93e-334df8557b8b", "indicator--0e12c83d-1a46-428e-a51d-34d2652f07fc", "indicator--243ee6f1-3cf5-478c-afad-a2841f803490", "indicator--f96b3e22-4268-48a6-861c-13a45082b010", "indicator--8fda755e-6cc0-4003-b5b1-bbd4339e5b10", "indicator--6319380e-a4cd-4fd3-92dc-f27f5805673d", "indicator--a1866123-062e-4f71-8987-d292ed9c66a7", "indicator--c5f2e2c9-4184-4013-9e41-2882df06cf61", "indicator--1c03b9c7-99a2-4c23-90eb-81944618c0aa", "indicator--57c062e6-f366-48c3-81d6-b2453186bf3b", "indicator--0928449d-6d93-4a3f-aa2f-204ec58abb8e", "indicator--ffd7bdd8-3c5e-402f-8921-3fa257a3dfff", "indicator--78d16b1b-83f0-4c3c-9214-dbc9a6585887", "indicator--5fb7ba71-8837-45dc-89e9-70fad367f9e1", "indicator--200743e0-5977-40f4-960d-504d9c075a88", "indicator--d8a4eba6-be4d-4bc4-b92f-7025bc80f761", "indicator--13d2a9e1-34fb-4902-86fc-2389dfb4253f", "indicator--b842f0d7-ebe9-4d57-b620-27113b4820a2", "indicator--004e8a07-a32e-4f86-b078-8ea92c46b585", "indicator--01d06b00-22e8-4704-b869-f662a8df53d7", "indicator--d3880da7-dcf5-40de-801c-60a15e728e75", "indicator--a9d73c22-d2c5-47c7-a613-450e3b0f3837", "indicator--87a92271-1739-450c-8ce6-787e4a3f42f7", "indicator--7b66d80f-c1cd-44e4-bcb6-1cd041f1cf13", "indicator--9d625312-4009-4623-8f96-a48af7a0600f", "indicator--4c63ccaa-ab51-455c-b9cb-525b2932a767", "indicator--25fbc97c-96dc-4d40-bc76-436205a8eec8", "indicator--68f45113-66fe-4969-9ef9-3cbbcdfa45c6", "indicator--941f3a0d-d022-4f14-9f02-7f40a7f1a7ef", "indicator--99ced4d8-dd69-462f-a744-133da0078289", "indicator--4bacde11-626d-4206-b5fe-e1ff7997d74a", "indicator--b0012778-cc02-49d1-a316-8d6e8497e287", "indicator--2355732c-2bbb-4adf-b030-d05e93ed42b0", "indicator--8553d9ef-4d2b-4146-a7b1-8a3db1ddf340", "indicator--61a69a13-2bd1-402e-857a-e98640434eb8", "indicator--12ce5bad-8bf2-44b0-8028-ad2eff8dc52a", "indicator--44f9db41-5e5d-44c8-892c-b54f6588263f", "indicator--b43b73b2-a1ed-4ff4-a598-68272a8e1932", "indicator--ed408fd8-15b2-4ea3-b2fb-bb1374b40df5", "indicator--97ec8479-c865-4ce7-a8a1-72694243f5ff", "indicator--a0492e15-aee4-41e7-a10d-1416164db24a", "indicator--27dee7e7-d5af-4e15-8240-e2ce9405c4eb", "indicator--59ff8da0-0359-455f-8e1b-bcde2cb417b0", "indicator--e24420f2-c594-4687-8e54-5f61122d3b80", "indicator--73925333-b4c9-4fd3-816c-7de996a6015b", "indicator--fa74fc3e-0d08-4669-b20c-7d15c5e74a87", "indicator--12624075-bb56-476a-b9bc-c96b61364c2c", "indicator--858c5ee9-c0cb-4f68-842e-1910d6dd9c40", "indicator--6756b694-ce84-471a-9541-a387eeca163c", "indicator--f38f5ca9-8f10-49a8-97f7-e6a412842d02", "indicator--0b0a3ab9-dbb0-457c-9b1a-6bb3559b2c65", "indicator--612414e3-7817-4a9c-9665-835929274ecf", "indicator--036d0994-89ca-45f5-8ff4-1d2ce31218a5", "indicator--a7ded5a1-e522-48e6-9f98-f5d628c3d699", "indicator--e9c1c314-c815-4a1d-a032-ff6d53f93c4c", "indicator--bf2f2398-6663-4c95-9537-309bb32f201c", "indicator--9861fc35-8e4a-4aa4-8102-2428674852b3", "indicator--97daeacb-c09a-491a-a779-92f6bf1e532b", "indicator--283e6f33-ad49-4034-905e-3a7bb1198bdd", "indicator--eeb42a41-c8d1-48b8-a9b7-872d068b86bf", "indicator--cc226751-e6e6-4b2d-9e89-a9e8d8040a64", "indicator--509eaa82-9a46-4462-b068-45ff76d5e336", "indicator--4962ae1d-c035-4abc-bcdb-a9bda2eafb43", "indicator--6799301a-1be7-44d8-b264-57ebe14069cf", "indicator--f9660e41-60e1-4fbf-be89-95a5db90d355", "indicator--ef9cdcb7-be47-432d-9956-ffd10484a5ba", "indicator--67cf600a-f9a2-4b04-94f8-567f7b39b8fd", "indicator--af12e427-cd62-427b-8dd3-d79bd6023c23", "indicator--82b2b063-ad83-484f-8bfd-5dff1cece999", "indicator--40efa04d-4c0f-461d-94ca-23192d9d46ca", "indicator--dde38172-017f-4d9f-a680-7e196c5e0fa3", "indicator--ba1779e0-16a7-4108-a0c9-e4de4ac95c06", "indicator--72dded08-0950-4ab1-a833-c38cc797e15e", "indicator--e585a582-3c94-4f07-a486-b5118ad574da", "indicator--94edd291-f733-4e67-99fe-8617d570ae1e", "indicator--7f3e9145-1ade-4782-b06a-17387abb3a38", "indicator--27acaf7e-a483-4487-824e-e88de16873b7", "indicator--636a64e2-e991-4806-98da-474c96450036", "indicator--faf59b4e-4f1d-4fbf-8e7b-cc89b97005b7", "indicator--b6e85e75-0d04-43e3-a1c2-8f6de0fa0b5c", "indicator--ee527c10-161c-4f5c-b273-b89b5df5aaa8", "indicator--349cf693-fa4c-4093-8f4c-16ea48642de4", "indicator--466f0790-565d-4bff-8221-814d8f08f616", "indicator--3567aa94-0ec2-425b-80b7-0a8db4612849", "indicator--073a3070-04ac-4673-a31f-4b125d45185d", "indicator--15ee66f5-66ec-4d6c-b3d8-acc2e33a1a2c", "indicator--5fa8cd73-ffcd-4eef-afb6-cff8c1042697", "indicator--ec2ac2ae-009f-4981-947f-198d1ad9c1db", "indicator--a1992a45-fb70-45f7-82d0-6fbc5a5d0366", "indicator--5d42dfda-335d-43fe-974f-2ddeae7a980a", "indicator--68decb4b-0b42-47f8-a64c-c7cba851087c", "indicator--c9908301-c8e3-4211-bd5c-9743a6341edc", "indicator--fd731641-fc4e-475c-80d6-30485d9114c7", "indicator--86448a9a-8938-41b6-8692-673473a2e7b4", "indicator--bd31aefc-d541-419d-93d0-c78f002f0782", "indicator--96ad8458-10a2-4f43-85a5-16f797030a62", "indicator--879a11a5-41b1-48e4-aed0-0489e794e6ca", "indicator--9371ba1e-1266-4803-b4d5-54112acadfa6", "indicator--e56cd60b-dab2-428f-8051-25b79ed60ed6", "indicator--3d269833-ba7d-4308-97fe-db23d0857c6a", "indicator--ef5f9fce-9722-4430-9f4e-8a9f7889a275", "indicator--07b09d1b-47c9-49db-b9e5-2db8d8a0cf74", "indicator--fd099b38-70d3-49e3-9775-c1b4ff39d68a", "indicator--37beacca-1b0a-405d-82dd-f4f9d1a5ccfc", "indicator--93d17e55-dbb0-497e-828d-2ebcea23fcc8", "indicator--5c3f85f1-756c-4535-ada1-5eba19d2bf33", "indicator--6ffed6cd-0d6a-40e6-ba4d-3231e021b545", "indicator--be4bbfd8-28e2-4fc9-8d91-2941736cb394", "indicator--3fb3643a-dc65-4e35-ac62-17d117417729", "indicator--15a6f201-0d30-427b-a473-d72d3f03634e", "indicator--53de93c9-cb91-4e1c-aee2-999b8b16f755", "indicator--4ccdc6e2-a5a2-4d41-a083-8cb13e08196a", "indicator--a1c67fcf-d939-402c-9a39-401566718c62", "indicator--61acdaca-14f0-428e-a587-3b39593a524b", "indicator--b0c856fe-50d5-4b8f-92be-b17b805381f5", "indicator--d9cc546d-1a36-42a0-ad84-586166c26c47", "indicator--9ed41385-03e4-4344-8167-1e2277424b1c", "indicator--35e0f951-ec26-4b5d-9911-c3734ab34ab8", "indicator--f8eec09d-cdb6-4643-8371-7bbdd4a59205", "indicator--28d3e951-f09a-4045-af64-eabec16e2691", "indicator--bd222bc9-260e-4337-bac1-e4b800682911", "indicator--be77d570-f187-47af-82f7-1f839184c285", "indicator--e537dc4f-e184-4aea-81c2-c3084aa14a83", "indicator--4069045d-15bc-4144-99ce-f8b73a1381bd", "indicator--f387a5f9-0a9d-4300-8ea4-9fda87262854", "indicator--9ad5fb51-287c-4133-8323-719d6f7fcf25", "indicator--d00b4b3a-5581-492c-816e-2f8d3cc2ac9e", "indicator--0113ff91-3350-40e3-83d8-f5df862b968a", "indicator--f11275c3-7a63-4110-ad9b-9bec2b33ae2e", "indicator--ef5d7894-fbaa-4dd7-9acf-6d4189c98d01", "indicator--8b1eff7b-094d-4ea0-8a71-a3ff6530423c", "indicator--a3f5e501-7560-40a0-aa8c-9ee218a6ac86", "indicator--63a790e8-3e9b-49c7-8baf-c570014e9fbf", "indicator--124f9bdd-e2f5-4f04-8924-e1679a45c7aa", "indicator--26cb4de6-a3c3-4beb-b0e8-477c14474faa", "indicator--0b23d275-e94b-4ae1-9b4a-6ff6234a74d9", "indicator--bdb38da6-8aaa-4859-ab64-56821a973129", "indicator--9d4c8d7d-3ded-4dd6-a139-80295083e3c7", "indicator--61562df9-8de1-47d0-bc15-a58cfb636c25", "indicator--a3214573-dd9a-4348-8ea3-2aca2b7af043", "indicator--ac74d09d-43c5-4430-ac79-26917c67aa88", "indicator--8c8a8d15-819a-4021-86ef-02d197a6fe85", "indicator--d26900ee-2957-4829-9fba-a3ecd59b896b", "indicator--bb4252b8-9eaa-4858-8297-25566f6dad0a", "indicator--b8dbc06e-3eec-4a14-acb4-13d354c888e9", "indicator--b61a3012-c6b3-418a-80ad-535f33f85cab", "indicator--60f0a310-379c-495f-9326-0505c7135923", "indicator--4d615eb6-f3eb-4f50-944e-2db447c921af", "indicator--bea9ce9f-b486-4150-91fe-48b90e6b5ff9", "indicator--5c26965a-a02e-4ac1-8ec2-5aab1b5e5839", "indicator--84a3c1b8-2628-4d3d-9792-63286e579b30", "indicator--1474f253-0cf1-4941-9638-e8543c14a0b3", "indicator--0391bb6b-8015-4037-8a66-6ea501e52ebc", "indicator--173ee50f-9961-49b1-9fea-6f064fec315c", "indicator--460c574b-582a-41c1-bc7f-a48941007e7b", "indicator--db64dc32-098b-4b56-8d98-db7a0e51707b", "indicator--e35e9763-08a7-46dd-826a-4d2f7da077a2", "indicator--4f01ca42-4e4f-48ad-b879-d97e5f1cd2dc", "indicator--fbcc1c81-770d-415b-a6b9-a51fb098ec4a", "indicator--aaa3cb93-a268-4c7a-8423-d2dc0409ef30", "indicator--b365e6d9-aaa3-4396-9347-6e5d25c9dac8", "indicator--b5f27a5f-fe39-4ce9-bcf3-d0ea868c8189", "indicator--c79014d5-7418-4336-b113-efebac216d0a", "indicator--a228e1a1-fd1c-441a-953c-1962eafe835b", "indicator--7baa5718-ff8e-4a87-b667-df8ee17accfc", "indicator--301538ad-bb04-4eb1-8ef0-4e25bb7e7035", "indicator--7c77d845-39d6-4650-b5c1-80602c21ed69", "indicator--c1882554-7437-48a7-a70d-f7e078fe26be", "indicator--d00052f9-5c3f-4157-a08a-7c9d9f9f8d74", "indicator--34f3e16c-d69c-4482-ba94-aa2fbc2efe5d", "indicator--bc8feade-4d31-4a9d-9f12-bdcca208ad09", "indicator--dcd83eb9-f1ba-4704-9ddc-60f1250c95aa", "indicator--35ce11a0-aa08-4c57-a29d-58915edb73c6", "indicator--b384a629-dbea-47f0-ae95-360b13a622e0", "indicator--e9a14e53-6fb4-4709-87ab-5e18b9f67183", "indicator--4ae6d9af-8a58-403b-81cc-a8dbb7cc53d9", "indicator--ddf66e7e-fa0d-4d12-9303-5e6a301d7248", "indicator--8ffbfc75-e777-44a3-b681-40ad12f25ab1", "indicator--40e6a8a6-966d-4fd8-a3e4-2b058b5331db", "indicator--542338d8-96cb-43de-b7eb-481978a53c3e", "indicator--a62c78ce-c8f6-4104-9d8d-9d89c19ee8ed", "indicator--e568a6da-cbef-4e48-a0d0-1037e389c1ba", "indicator--16be8d7c-c024-4c6f-ab4e-4b462e9900f8", "indicator--ab314475-2f35-435b-8d43-8a66292e6191", "indicator--73ba7861-7c29-4392-8f51-3b7ab7377321", "indicator--af701113-b84a-4023-ad9b-ce26b5d10bc0", "indicator--bc30392a-d21e-434f-8e8e-9d45e525d6a9", "indicator--9eb18e2f-2b53-4ed5-bc51-cf24399872df", "indicator--cac84e5c-1007-4ddf-9347-d5b1ce00516a", "indicator--c459f98c-a8cb-4eac-ae8c-563f8db0e235", "indicator--7e3e14e2-abf7-4f45-937a-22fea4e1733a", "indicator--e07cf3fc-92fe-44ea-abe5-8481c67b3d95", "indicator--9552f54d-463b-49f0-b96c-1c494395add8", "indicator--3d7e93ef-2e4b-4ba2-82d5-86bece14e444", "indicator--8874e932-6e4c-4ce3-8e00-c82286cbced4", "indicator--4398d7d1-bee0-4336-a2e5-41bb3099d59d", "indicator--5a7a5fdf-750e-4e89-b5d0-940d57b826c8", "indicator--cd7fcf19-239c-4c23-b5df-4cc98030a385", "indicator--62b1cbf7-409f-4954-9785-7f2d1295453a", "indicator--753acb12-e6e7-44c6-9184-68273c192abd", "indicator--3e330787-9c58-4739-bbd8-5ee2f148b862", "indicator--c166bea2-fdfa-4068-a1f0-1f94aa86cf8b", "indicator--7f15c881-4a8c-42a4-819c-55989234a291", "indicator--9ac9b5a1-86a4-4eb4-b373-62f78255e6ce", "indicator--cd2a035f-1d44-4816-8ad9-7be8dd1bc5bb", "indicator--8990aff6-1d58-4aee-96de-c119ba8bc6f7", "indicator--47f25c66-e15c-4688-a56a-6078b972107a", "indicator--3b02c948-e2b4-48a5-aa85-19ec86331caa", "indicator--497c461e-5617-45cb-9284-a631996e8026", "indicator--86a6c051-c844-4457-9fa3-a7618eafd187", "indicator--401f801c-9955-4955-86db-2e17b9011ef9", "indicator--efc22c3a-6c10-4e5c-9d04-bba3c1892c09", "indicator--23d1b4b5-fe67-408d-bb46-c4def492e0a1", "indicator--c70347c3-3135-4240-983c-aa31ee086e68", "indicator--c1fd509f-9482-4da6-ac98-bcd54ad520ff", "indicator--31c7c073-77c2-43c9-93f6-285e4bc3de15", "indicator--ec0c19cb-86a0-43ff-8c10-1fcc4877efcb", "indicator--a1316774-93cb-49f2-98f0-fdd6fd3ba552", "indicator--f583109c-bbd9-49ce-b324-b6b5eef3b72c", "indicator--bf16f1db-cd4e-4919-aea5-5e41b837b0b7", "indicator--42234c01-eb43-4f10-965d-372e9ce08717", "indicator--ff04e0fd-2a65-487c-9c3b-a628fd6b6082", "indicator--618d3455-97ec-457e-ab41-acb6c7a66e29", "indicator--69bf263f-68b8-4848-be19-838a44024222", "indicator--c4e3cb46-b5d1-4665-8f67-f8d3fd69753b", "indicator--d4f40f96-e212-4361-a77d-93630c50bad4", "indicator--a8ce38a5-0d2d-4498-9476-9b09b35074fb", "indicator--a5fdc91a-5426-4dd5-acb8-8827e393efd5", "indicator--ca165e47-a3c2-4f1d-a549-e08351b066c1", "indicator--c733dccd-db32-4b5c-8346-3b01d93021c5", "indicator--8a455a85-f173-4bb5-9cac-62eee4e2f8ab", "indicator--981724fc-2039-4c30-9bdc-08504b5c5158", "indicator--fe806efc-949f-4c51-b0ce-3884384a00dd", "indicator--8aca22e1-2a3a-417f-a652-2cdfb29eefca", "indicator--242fcbee-aa74-4203-8caa-f7a9e6a845dc", "indicator--a19d3a5c-da13-4c06-b72c-cceb76b5204e", "indicator--430c840f-f4cf-41dd-95ac-ce67347552e1", "indicator--a8a107d5-a648-4f9f-87a6-c532a6c01983", "indicator--5d777759-c3b6-43e9-b07f-36a5353a0b51", "indicator--b020d0d6-6e01-41dc-9e67-dea2c93b8392", "indicator--e6d6d817-993b-40a4-8726-70b99808f938", "indicator--41291b5c-cb35-432b-8eb8-1db764e52c91", "indicator--dcde56a4-ddbf-4bc7-99e9-6abf20134f33", "indicator--a51625a6-4571-42b4-b18a-d9446225b65c", "indicator--a090d635-7dd5-4ec6-ab56-32b0f5f66c61", "indicator--9126ff0e-e1bd-41e0-8730-df048bd24ff1", "indicator--b50d88c3-c499-411e-ba04-c7445f6c712b", "indicator--5aa31dfc-d9c8-49c4-beaf-48ae159b8077", "indicator--5dea26a7-5d41-4f48-b204-460e9bfeb3d6", "indicator--3d0dd333-19af-4f4b-8b95-c632fd6414e4", "indicator--f8df5550-670b-4e58-91a6-239a3e2c1850", "indicator--594ee8dc-2909-4b9e-b4b2-73d4f5d39bc5", "indicator--f7dfcf2b-fadb-4d8f-b8a7-623a62459418", "indicator--86f17855-cc13-4749-83ba-a2e6fe633fb8", "indicator--c59e1eb9-3997-45df-82d1-bcd0ed57b101", "indicator--9ff1b1ce-0bf2-4e1f-bd04-8cfc8b61f8b0", "indicator--8fb2b97f-b2b2-4906-a16f-edea1280f6ec", "indicator--e2efc960-e09c-4357-b510-77b2231b441a", "indicator--a1c23ff5-780d-4440-900c-43f458d403d5", "indicator--8d3a173f-40f1-49e1-8e2e-a5b06ac9b766", "indicator--14e03098-bb58-44b4-89ff-10ed2bcc5095", "indicator--5601e58a-0bfb-48a8-84e6-b2d854146fc4", "indicator--a6c10ff8-59c2-44f7-ba91-fbe33bc50698", "indicator--a635183e-a3b5-47d4-ba47-1eb9c2d2fd3d", "indicator--76780521-374a-4604-94f2-a7d99dd05ed8", "indicator--b486ab6c-6cc7-4d63-abb1-be05d759d4f4", "indicator--54e67491-a8f3-464d-8312-1168dc385dd8", "indicator--282022aa-eac7-4559-8722-0ac937c894e6", "indicator--80c88307-ed4e-4abd-b7cb-06e182ba5c2f", "indicator--173e6364-4b02-4706-8f97-03c168e3ca49", "indicator--b4336e7f-d845-494c-8caf-d7abadf85696", "indicator--3f1b2e21-c4fb-4239-8b13-e4f089cfab86", "indicator--671e27fb-9616-4748-8591-b564cb37a161", "indicator--bd55e4ef-e715-415f-a52b-c41d4a184c72", "indicator--3412dc9a-065d-494b-b02c-83ca5c2a3443", "indicator--a4ab70f5-cc13-4f14-a163-1ff2231adf90", "indicator--18ff01ee-62ce-4581-8841-5ff9db2c818d", "indicator--2c255846-3f45-4df3-8eb6-3c3f4ab1c012", "indicator--e3c5c54d-8fd2-46c2-bc0b-1335ac2ad7e7", "indicator--7233b385-90ec-410f-b8be-7561fd5659b3", "indicator--ba52d6c6-20cc-4967-ae3a-ba0bc5d69506", "indicator--ee1e44ca-f819-4e0c-b23f-f1f339539752", "indicator--7a8be18c-8dce-40ef-8200-c1c4375cfb41", "indicator--871f9600-b6a9-4170-9e9b-9d3e56a0cb59", "indicator--122699bc-5f15-4857-abb6-7185130c0945", "indicator--242d987d-de14-4510-ab02-fdc0e144bd42", "indicator--7c24d96c-6fe9-409e-9619-9167362f3d15", "indicator--a0fe7114-ef4c-4269-b1e0-af0868f6113f", "indicator--07fb56b7-16d2-4601-9cba-de2e136d4181", "indicator--1125f7a1-c6d5-4007-aeab-75bfe8141656", "indicator--269afe63-d48b-4e97-9ce4-006d23d82688", "indicator--49b936b7-22e7-4277-a90d-049876e9e01c", "indicator--6206433b-7229-417a-8e18-5d1128384ffe", "indicator--037a6ada-2899-46b6-8dd2-200fb9312625", "indicator--3973861e-56a1-4445-b7b3-cd0adb28cdae", "indicator--11cfba3e-8c9b-470a-a08e-febd0c4136bd", "indicator--fe192bda-2b2c-4a27-8bb1-11c0f16eb0f0", "indicator--1ce1aae8-c6f3-4539-af93-fd1bfa87000e", "indicator--a5929759-8e5a-432a-9215-c82db29382f7", "indicator--976ef38d-687c-4ed1-b2d0-670fefb4a90b", "indicator--306a74f7-a6d0-46a9-adc7-ce442d411f50", "indicator--1995d429-6686-4928-add4-190ca4096c29", "indicator--6ab2a635-cd86-49c3-b914-346692a1996a", "indicator--65379dc7-5288-41ac-b5cf-196eed19eb67", "indicator--311e7758-d326-4746-8c7d-f801691914a8", "indicator--ace6f6ce-b7f3-471e-8870-8ebaf7344575", "indicator--28ef0e8f-6a81-41e1-ad0b-f775e3a3986c", "indicator--ad3052a4-18f7-4625-8cf6-73b21a8198d0", "indicator--834c1ca0-4857-4250-97f9-b8db0881d083", "indicator--574b8e98-8402-48fb-85b3-54122b3b3b45", "indicator--80c70fcc-874b-4c4c-b2ca-10a69ef9726b", "indicator--09db2899-2b6a-4469-accc-e37c9c2ad2bc", "indicator--302a72f9-ef98-4dd0-a29e-f54398bc9ad9", "indicator--50c013d4-4c97-4a5f-bb12-0e6b7067373d", "indicator--9ea328fd-aaa3-4e89-9aff-b94c017fe474", "indicator--ab5b8c73-92a0-4f45-a14c-903d1afb5462", "indicator--f254432b-084f-47b7-88f0-8030021ea103", "indicator--e488e32d-259f-40da-88b7-acf0f4531a9d", "indicator--cacae9c6-27e0-481a-ac32-85f4819d7ae2", "indicator--6c001801-f1ed-4076-85ef-10acbc8968bd", "indicator--74388af0-0365-4c0a-bf53-79f8cbd177d4", "indicator--830071d8-0d2d-4ce5-a583-2a1688889009", "indicator--07bbc30c-8958-4ae9-922e-fd59ecb2e91f", "indicator--65a6a49e-15b2-4f09-9d73-d8daf66ecc31", "indicator--f539333f-918b-45fc-9dea-ade1ebe512f6", "indicator--fe70e241-b5d3-4d38-85e2-e3da5d710299", "indicator--15949412-6bee-40e9-95d1-7a596773825b", "indicator--4bea938e-1909-45b5-a094-372515a5163d", "indicator--d4c2f5bf-e132-45af-8639-ecb4f00bd99c", "indicator--245db759-d233-4840-ae18-78a7b74f1bee", "indicator--b94ca7a8-27d5-434b-96f2-bb48cc22dcc4", "indicator--4623e75f-264b-44b5-b9d0-5ff07052b099", "indicator--c6a6b01f-eafa-4eed-98a3-5d68d4ab4bfd", "indicator--51573161-3fbd-481f-a6e0-d67d66c6aec4", "indicator--b8e0b50f-dd49-46b1-9983-08f5e6fac3fd", "indicator--059904ce-3deb-4e54-a898-b3667c4a992a", "indicator--dbb87c07-4a53-4413-a066-207ac674edf7", "indicator--042d6b49-90ea-4923-926a-a44e24751bf5", "indicator--db64688a-fc95-4543-9edb-175caea092c4", "indicator--a00d91ec-3d45-46a9-99b4-4e37f7859f7e", "indicator--8bffc614-c8e5-4852-9c2d-4e84fa4d4163", "indicator--c55e2a77-13a6-47de-b843-d28ffee99aa7", "indicator--a5b26d71-466d-41c5-a924-35738a931f78", "indicator--e8816a87-bc02-4360-85c0-ca3249543c46", "indicator--4aa6786c-6b5b-4c36-b475-d01a6e4f22db", "indicator--2b79b44c-507c-41bc-9a5d-b87f145797df", "indicator--8f7d5e39-e625-4260-94d1-47d6dbc7fd8b", "indicator--0274a8af-9bff-4d1f-9413-4bf22604ec4f", "indicator--22b5b377-4373-461c-b7a5-ca0ee776f770", "indicator--1cf6567d-5c21-40a9-8e2d-ca18fc97a530", "indicator--c270f9eb-c447-4bb8-a3d2-be5abfe8f2ba", "indicator--ccff4097-8c3a-49b0-9c91-317f9b451184", "indicator--47345224-ca9c-454f-b237-e5480e79b376", "indicator--c3490f5a-f8ba-4a05-bcaf-eeaf81a7fe6b", "indicator--651543e0-926b-4698-b1e7-6d823e282e39", "indicator--4d5bfa6d-cb98-4907-9c3f-e88b994a856e", "indicator--e2c5f9d6-43ac-428d-b618-83c881b05c40", "indicator--ee71baf6-b27d-4623-bec0-ca0493c35b3e", "indicator--0d2304bf-e38b-4e5b-9867-e4c9338871c4", "indicator--6dd3aebb-4cc1-45b5-a954-8d8c82de15dc", "indicator--b26cec41-e9c0-42d9-a95d-46736bcf468c", "indicator--22246aa3-45b3-48a8-ae32-e1efb334fcdd", "indicator--ba2f4c9f-a9f6-4e51-8ed9-c5898bbb848d", "indicator--ec160017-29fa-4a85-9a54-26ffd1e9f32e", "indicator--62c34042-31cf-464a-8491-b72c792e90b1", "indicator--bb8c1845-27f7-402f-8852-3fffe6add1cd", "indicator--feaf1bc9-bb21-4c9b-8add-e9cc73e2c4de", "indicator--d52eebd7-bf65-4b0a-8630-6c007a177e70", "indicator--7da2929d-cb55-4b7d-8f4c-4cd8dfb9b934", "indicator--066bb1ab-a1ee-434e-bbab-0e2d7ded89db", "indicator--9a334463-b974-41f8-869a-03b89aedbfc4", "indicator--6a0deeab-993a-4bac-b110-de8d5f4caa39", "indicator--d6b92e1a-8f43-4a12-8ac6-9dc30779b28d", "indicator--1294e7a7-e9f6-4a37-b382-fd3e6d0b6133", "indicator--ee5fe9fd-6a28-409c-8126-c1551e47df70", "indicator--0f60e22b-8cf3-48f1-beb4-5f32d9d4989a", "indicator--87dddb2a-f078-4fbf-a6be-30d4846c062b", "indicator--3813e35b-9eb1-4823-a6f7-5d758472a9de", "indicator--5fa7a5c7-cfa1-4100-899e-c55bb2609dc1", "indicator--cfb2867f-d2f5-4ff9-ac54-5a8485fcb8cb", "indicator--21ceac5f-b584-4ac8-911d-e39cfbc14f71", "relationship--8bd50382-49cd-475f-8ab5-81adeecd02cc", "relationship--7bf0a991-06d6-4dcd-b2d5-a5640bfd82c4", "indicator--4d869fc3-bce8-470c-a055-360305f2a0b6", "indicator--abeae687-ae54-4410-93cd-09f0545a5cd5", "indicator--79bd5837-5829-4a2f-bcea-94a1936446e7", "indicator--3d93e205-5e9f-4995-be7c-f01d984ff55e", "indicator--43968930-6622-4897-87ae-526e0ea3c0df", "indicator--03dddd7e-7797-4686-a530-56f6891855cc", "indicator--68fc4972-42d7-48f5-bfe4-7a040317252f", "indicator--eeea42d3-b9e8-45bf-bba3-44b32ae0b626", "indicator--4c87e267-2736-4ba8-9e1d-e7c8d4de4bca", "indicator--c7f9ce8e-bab6-48e0-85f9-d794a0270790", "indicator--feb284c9-be03-4dee-9ca7-7520f817da04", "indicator--9967407a-4a67-4f75-9c92-efbaa6909602", "indicator--347c8fbb-2102-4450-a6f1-0bec0f5c67d3", "indicator--eca21290-3765-4298-a6c0-bfb9c27260c4", "indicator--93c235e1-f2ce-4213-977d-3d2757d5f3db", "indicator--aa8b1848-8b5b-4220-b517-ab6900d86e68", "indicator--e3eb599d-2ef0-4d3c-b797-8c77aefbe3e7", "indicator--52d666f5-73a1-4f7f-9658-e88908c0ce1f", "indicator--e87d5909-0ddc-4675-a58a-b2497d8c7cac", "indicator--d4cd6407-2bfb-41ed-ba3a-336853d09770", "indicator--ba36b736-84d6-42ce-bebf-80e8f1934436", "indicator--949d7476-3513-479a-a66a-bc17764f9e14", "indicator--c4377e01-5de3-4cc3-b423-9339f6e3b9bb", "indicator--e96de1b1-1e3b-4f6e-999f-d1307b8a7c7c", "indicator--d5f578a4-517e-4fec-b715-8381a6454fb3", "indicator--15713cf4-7f4f-43e8-9586-b96037a5a091", "indicator--b92d1f82-69a3-4fe2-a6e6-25d83c9e64a7", "indicator--9371bc57-cba7-4d34-a531-88537e812b09", "indicator--68245f55-0584-42b4-8927-3a8a5b93159a", "indicator--cede53a5-570f-4a54-9c0f-e1adad97fd98", "indicator--bea4169b-aabd-407f-a72c-bd24bdbd4c00", "indicator--0760362a-a024-4bbd-9e31-14cb46f91a41", "indicator--e0c1398d-e5a5-46ed-8ab3-e17efa58de83", "indicator--14f2ebbb-72de-4c32-b028-0080ad469be7", "indicator--ffd54217-6329-4971-bf73-49e0a3e5cf3c", "sighting--adeb2769-bd4d-4d29-8a34-1dc136002683", "sighting--0da2face-386a-45fa-be19-9c596e221f91", "sighting--78741f6b-076a-47ea-ba72-fbedea13603f", "sighting--6eb7b7f1-286d-4858-a8bd-24a21c6f2e6e", "sighting--5ccc8609-cfc3-4f22-a171-e71c3920271e", "sighting--a91a5548-0f66-4f25-be7f-c8a04b3aa11e", "sighting--c346fc53-4cf5-42c9-92dd-18d661d372c8", "sighting--9c12d03b-d6d0-4afc-b469-e1dbfc49b04b", "sighting--b2443afa-6556-4e7c-9f12-0bd572a45dd6", "sighting--8adc68cf-aa5d-4e6d-9509-bf4c650c3666", "sighting--2145fcb3-29fa-47d8-969c-d61fd5bd540a", "sighting--e9535e39-77dd-4ad4-bb2a-902970bb521d", "sighting--ab2d143a-69f7-4e6f-af75-0842e22106be", "sighting--60650116-87c5-4cde-ba00-1db09cf001b5", "sighting--1a8aaae8-0822-44e8-8af9-0edf624e3697", "sighting--3cbf64d8-e6f2-461f-a1d2-d19ea280951c", "sighting--3130d851-c0fd-4c94-ad91-ba9cc958a86c", "sighting--7bfee93e-4859-4911-ae12-eff9e67a8515", "sighting--c0a1b6a1-7f41-43bb-a300-80a46158c40d", "sighting--1a241dae-3ac7-468e-b3c5-7412419cee87", "sighting--7e48edaa-9ccf-4423-9d04-02663688d07f", "sighting--1e54f47c-767b-4da3-a4db-29b0c35c93a5", "sighting--9012e9a2-c804-41e2-8458-0b563dc5b32c", "sighting--a684dfc1-50d8-4668-b6c5-9c42449666d1", "sighting--93c9222a-7d58-40b4-bc50-6a5d9d8eaded", "sighting--8da2418c-365c-4e7a-ac7f-6490fd8528a6", "sighting--fb8d0c5a-bdef-48d6-8fb0-0e896b65c858", "sighting--6cbc8b31-d5fd-4ba0-8661-87394ed06518", "sighting--154f5ec4-67a9-4423-afe8-9e98004c51d0", "sighting--cfc0ba13-6617-40aa-b1c2-7c5e3ebab826", "sighting--43b4b4ec-ebd4-47da-a5c4-14018baaf8d8", "sighting--721b3f53-4889-4d6a-8c19-98d83c85b4f4", "sighting--24f819c1-e91a-4e2a-b671-3bb743f00805", "sighting--065ca6a5-cc69-4268-9a7b-fd59f02afe50", "sighting--d6d7069c-425e-4ad4-bdc8-cec0cf92d9f9", "sighting--08b49ea5-710c-4e6b-81d3-6aebab4c4a02", "sighting--dbc76f91-34c4-4e46-b97f-df66d46d5ca9", "sighting--9f11ee7f-1ea2-4884-9e15-39cb70075bf8", "sighting--19c94cad-9613-4395-9325-270ab70a9e78", "sighting--49a2ddf7-6d8f-4c31-a1ab-47564f26e44a", "sighting--6f2ecc4c-d47d-4f3f-a49b-1f253b98024f", "sighting--361f0316-9616-489e-b64f-aec880a705af", "sighting--e33f71fa-c353-4a63-892b-aff417fd7df9", "sighting--10e0ade1-e839-406a-9631-4ae20f94b3fe", "sighting--39483cf4-de72-4efc-bb50-c6d46c4c0410", "sighting--4681d57a-f425-4352-90b9-4260f03a50c1", "sighting--c1816022-1c6f-4fc2-b478-5d050bfa0813", "sighting--18f4994f-2b10-401e-8954-4aeb4b0ff953", "sighting--bb77dda9-1766-4b12-b8d2-ab2160bb9627", "sighting--9fc01cf4-418c-4924-8718-3534aa04cb7a", "sighting--6544ebd9-4ee3-4f22-8d87-bceac4cbbb61", "sighting--47d5350d-51bf-47d9-b389-9e09f74eb95a", "sighting--039d89ac-ff14-403a-8264-e884943bbbda", "sighting--d49c0dfe-f8ed-4f5e-8300-180b46b6135d", "sighting--64660e5b-53d9-469e-9dc8-2dfc054f4698", "sighting--50b4a5bf-33ce-448f-aa60-00c13b5efd68", "sighting--dec50834-b48b-4031-bb28-67a21306a2d2", "sighting--21ec2f78-81e1-4227-87f3-3248a1e23372", "sighting--c90271e4-d4b1-43f4-a193-a5aa65277ace", "sighting--310ca64e-0478-446c-b183-76b3187a154d", "sighting--378e6cdf-94c6-4bb6-9e6f-5055b84f0f59", "sighting--f87f3209-06a2-4741-b570-63c9774fdf04", "sighting--5f5b6406-9df7-4d62-850c-578e5ca34011", "sighting--2b82f85a-81f0-4c33-9267-cdcedf977867", "sighting--eb7ee4fd-e985-4c5c-b8af-30186679becf", "sighting--a2e1dbd0-42b9-4a04-aadd-50bb65991e23", "sighting--3723dabd-0c57-4921-82ee-474fcb7237e3", "sighting--2bc3d6d8-2b3d-4421-ba28-059344d88343", "sighting--829f7039-a47c-4105-b7aa-728943fa1ee0", "sighting--0f3e2796-b3f1-4a00-b508-43570836da9f", "sighting--9224a9b7-a331-4a2c-af10-3a49f60e65a4", "sighting--0194273a-7e58-4861-a5e0-e9c8029fb5ff", "sighting--9a203d70-e77b-4cd0-b5bf-247e2262dee7", "sighting--34ea5fb4-266c-4ceb-b452-7c6b8310b921", "sighting--4a5e5cca-a700-4c23-bcc9-f7e3e6a5337a", "sighting--1f575493-7378-47e4-afd3-951161730c68", "sighting--56a55e16-6068-485c-88ad-70151af5578e", "sighting--37173745-440b-4ae9-8f76-f30cb3455a18", "sighting--63098384-844a-424f-bfc7-31cd84e2d280", "sighting--b5b93915-a467-4ca2-b3b9-678e011b36f0", "sighting--979d8166-1dfa-48d0-af44-9a7276d4288c", "sighting--bab8a5ec-e775-4bb7-bd40-1dc5ea6edeca", "sighting--565cb1d5-1b47-4fa2-bd67-750e0f18e2cd", "sighting--c0f0f107-5ca4-4d17-8c62-18133f878b21", "sighting--07f559ae-216c-4c5a-ad39-0d548a516fb4", "sighting--9c498db9-fac5-4569-ba6a-306a9f5dff7a", "sighting--7015f1bd-995e-4245-8c67-9a7631c96229", "sighting--1f4d8e97-6542-4a10-892c-595dc214f738", "sighting--7f91f7bc-a424-4d82-b81f-5ec7f3bb295a", "sighting--275ebe9c-401b-426d-8834-553a5826d54b", "sighting--7986a13d-d12a-4d6e-b9c8-f8acca94b8b6", "sighting--f3d3f157-5f83-4c46-a3c9-6b103782c3e4", "sighting--4c6d520e-e68b-41ab-86b7-063b43d26ffd", "sighting--8cbdf213-fe50-4db8-a100-6f6480cea950", "sighting--1f5f8a70-d6eb-4280-982f-7f28836727c8", "sighting--95fd54bf-26ec-4b3a-aa4f-0ee15b669ddd", "sighting--6fc4bc08-3aaf-4294-a438-a1d612b1d78c", "sighting--ebe8c512-a7ab-4a99-9d50-265a36138aad", "sighting--c07fa53a-c05b-43f5-9a63-ded4a0c4e7cd", "sighting--c2a42e35-8814-4ecf-8f85-a2a1f731fd19", "sighting--97ede314-1d67-4d38-ad32-1fe8b609d35e", "sighting--13cd12c1-f24c-4139-ac56-089ebb04efc6", "sighting--f2a94134-2dc8-4f43-ab54-2b4c06076bb4", "sighting--d7958432-d016-4687-908d-6dfc9a63ce14", "sighting--a5e69ff8-4765-4584-900d-cfb8df37bce5", "sighting--b01d65a2-53e5-40f4-b90b-310d4ca559eb", "sighting--92991c09-21ed-4fbc-a1c7-33f003755550", "sighting--786fae7b-ce37-433e-aba3-14b565f680b7", "sighting--f66245fd-b547-4f4a-a023-0a6c30cbba22", "sighting--778ccf2a-802e-4ff5-9d76-8c2452a75683", "sighting--a40f5f1c-047e-45e6-959f-e89957d4ea0b", "sighting--97769ae8-9ee4-4c1c-a019-70e4cea58ad6", "sighting--50627f31-f1d7-4138-b2e4-2524794310d4", "sighting--84c4eda2-784c-49c2-8f8c-f7785f0d137d", "sighting--b784a882-392a-44b9-981d-a85db38502c6", "sighting--8a654dba-f34e-4229-8c77-e075cf18b68e", "sighting--bea5d695-9f25-4b56-8a43-43ef9b5b549c", "sighting--40397af3-e23b-4169-b119-f8bd7beefee5", "sighting--a2a2c7ff-ba65-4f68-b643-3e1ce4e83345", "sighting--cc439483-ff95-46a2-b25b-43249d24cdcf", "sighting--c33fb04f-dbe5-4a4b-8000-e9099952e784", "sighting--c530a3de-c9a2-4085-bfb8-0a1043183f4a", "sighting--5c647a31-0729-4f29-9525-2963c6f6e56b", "sighting--50fe9fcd-a4e0-4885-b3ce-0c3844f89b61", "sighting--c3d00e69-b609-42f2-8221-8e69313e42ef", "sighting--9e978cf0-6f80-4da1-b674-bae9162c4c91", "sighting--a7d33d6f-3bb0-43aa-9174-e4a8f10e0ddd", "sighting--7dbd9806-d59e-40c2-b426-5335948512b7", "sighting--0f7b3a2b-19f3-4b72-a23a-250c56488268", "sighting--f4671bd3-0a56-43da-be5a-502f33dbed51", "sighting--17fde9dc-7583-4ffc-8989-11ff73e6be81", "sighting--333e1589-6700-4639-b5fa-741800b1baa2", "sighting--53be7909-751e-4489-9bbf-d1a9db6804f8", "sighting--b4db022f-b254-4877-8228-9a93cea6f092", "sighting--600317ea-673c-4f96-b72b-e3bf2312b03d", "sighting--d0692407-1d2f-41ef-98f1-2a823c67dcd4", "sighting--6b6042be-9b07-492a-bfb9-7651c21e373b", "sighting--0dc4fc74-7c30-4d8c-8127-794c17323308", "sighting--39abc03b-2e04-45dc-818d-659930a0de1f", "sighting--b0ccdf00-d0d3-4a6c-a432-f5e67b736f18", "sighting--3e0ec0ff-a242-4e43-8ba3-6b045b93aacc", "sighting--ea4ca98a-e516-4c47-b1ab-336d2b843f85", "sighting--ca80dc34-18ee-4dce-8c77-40bbb84d9ebe", "sighting--2c012c69-601a-4596-a50b-ceb971eb99cf", "sighting--d74c9045-4003-4849-8bb9-ce97c9cbaa3d", "sighting--aceee5bb-fa88-4b71-9e37-f03c5e43a872", "sighting--5d3bc75e-e5bb-4264-88a4-f73e5bbd0969", "sighting--eff89d4f-5f45-41bb-b84a-b84db92a7771", "sighting--9cb1b79e-f9d9-43da-8b9d-044fc46ccd75", "sighting--647d964b-7726-479a-abe7-b006d4a61e79", "sighting--484b5b08-3665-4270-94ec-c13f1a3815ce", "sighting--612674cc-9371-451b-8882-79184ff45b0f", "sighting--ba15e77a-2730-4b83-8099-1f4b9797a476", "sighting--6357084e-12e1-439f-9da1-898ac00fd39d", "sighting--180a1631-bb36-4e19-8ba4-1ae9bb0f50c7", "sighting--ef693ce5-935b-411d-a2cb-4a580482796f", "sighting--c6e36946-1f45-456e-93e1-41b36f13aea5", "sighting--43a4b340-7bf6-4af2-b489-28ed504ab9ce", "sighting--56878766-7252-4f60-9722-6eeb98bf6f52", "sighting--9427eab4-a55f-47cc-bf4b-20b02586a7d7", "sighting--5a73f937-fbdf-47a1-8aec-db9ac3dd41f4", "sighting--1b4699d4-1ed8-46c1-af54-62cd77deab8c", "sighting--3a7bc334-5c03-4aff-b4c2-dbc6f8a139f6", "sighting--753665a2-d068-4478-8442-535ae80e2728", "sighting--29a7ca79-35f6-4f87-9aeb-399ad23fd464", "sighting--273a19b5-6ebd-4135-b581-ced3680dc091", "sighting--f64fcdc8-4002-41fb-9252-024137507ff2", "sighting--ef2d1b1f-c63e-416b-ac82-b19e98f53618", "sighting--f9f54d51-1f4c-4f90-9b3d-9b1338d3b6b4", "sighting--bae4893c-4a6b-45fa-a36f-e99acaa912a4", "sighting--7a58f1f4-3dbe-45bd-8209-53c229f4b7f0", "sighting--ecbc0aa1-484f-465e-b439-b5f20a6a63c2", "sighting--34a06437-7bd4-427f-b9c9-2d48cc84fa41", "sighting--0ed14fc0-d9bc-43a5-b67c-d7e378fe3bea", "sighting--21548301-d83a-4cef-b623-75a24682e7dd", "sighting--990e9168-4681-466a-8652-19d048fdbb31", "sighting--99172576-2d91-4db7-af5f-e0895d7f76b0", "sighting--a7cd4254-a9b4-483b-89cd-380b0f12c9b6", "sighting--d826e598-65e1-414b-8e04-c350efe14d05", "sighting--a5b59952-00a0-4c65-a46f-ca7b835d621c", "sighting--8f22911b-07b1-434c-863d-04a224efd672", "sighting--2e297335-5c3c-4b17-9806-03b27edc3f98", "sighting--6ac7b493-d87f-422d-8f10-5649b3787054", "sighting--18028505-bee0-4f93-afb5-e194904eb537", "sighting--4cbbc332-d474-4a6f-894a-80f5252bbf83", "sighting--fbf78e76-0e2b-410b-a1f3-e6064b35be0e", "sighting--c997405d-305f-4a9f-a4ad-482acc32b6f4", "sighting--f350a874-874e-4a57-92e3-103826355f63", "sighting--9a49e1ba-8089-4233-b37a-7e043bf86c72", "sighting--01339139-e488-41ae-aceb-07ea5b181dc6", "sighting--1d2ecf99-174d-404c-8db5-3ce2c65e7768", "sighting--e27c76d5-5b92-4f04-96c2-9e654c26ba2e", "sighting--36578f95-cb64-423b-ad8e-226c1386df48", "sighting--bbba32fc-13ab-49c8-ba69-41b667d4b70d", "sighting--22dd2431-7590-43b0-994c-b328d84d5856", "sighting--f23eb7c4-c200-4e26-9599-c4f97b23ba5b", "sighting--dc17db6e-e81f-49ad-a282-87f32db3cda8", "sighting--92cc4417-87b0-4d02-a8ec-a797cd6058db", "sighting--9236062c-453f-4e67-be19-abd3dc8a6049", "sighting--cc3e92b9-905b-4bbd-988c-3cdc86d66482", "sighting--5fcda6df-a54f-4934-8764-ca3e6ed58b03", "sighting--25ea6bc4-2bad-4061-9c2c-65d26f89bf80", "sighting--a946fae0-d72b-493c-9fa6-deb4f092bb31", "sighting--82a712d0-0aee-40f9-8a9c-c64fa39afc14", "sighting--16a04e3a-1cde-49f1-8f51-a57a6c39b9d8", "sighting--19f368c6-d60c-4267-9919-3cac99319412", "sighting--9a09b914-dcb3-4bd3-b66e-3325eae860dc", "sighting--2f5833ee-2c7c-4ed0-8d05-a4c73bb0957a", "sighting--8ce7c280-f137-4496-a0b7-1e41cc57fcfb", "sighting--7bb4d981-4cad-439d-9881-981eccdc7e9e", "sighting--2b975684-d41a-48fe-89d4-aa6712fce6ee", "sighting--f78e9f4b-13bc-4c4a-80ce-e9227d93251d", "sighting--74d04733-6fc4-4a25-9080-30b45f2d20c4", "sighting--6cfff9e4-bdd8-4046-877a-d1fc071d5b93", "sighting--ff9bc641-9db2-423c-843e-b7cb433bb910", "sighting--2001650f-1e0d-40cd-b308-00b02f9730aa", "sighting--42bf3efb-4853-4ed0-b722-ca8e0bae6eb0", "sighting--d55ee9ab-46d3-4fc9-962c-0715b42eaff8", "sighting--f101940a-db00-4dcb-ab80-790272b95d24", "sighting--39af013a-e480-4fa1-b0c4-b68cc9a50449", "sighting--8d856c20-cfcd-421a-9224-13dea6a89102", "sighting--ed53074e-1e18-4b90-ad76-057f9b00a782", "sighting--899e07b1-eebc-4fef-ab96-605c6d740ea7", "sighting--609399d5-489f-49e7-879c-3332ced34db9", "sighting--afe4c95b-3100-461a-af29-d96265378bba", "sighting--2dc30a0b-33e5-46d4-a604-0383134cff58", "sighting--196b730e-4bdc-49c3-86e0-efc4d292598f", "sighting--075fdafb-6406-4a0b-88ec-74923fb9fefc", "sighting--a513e6e7-f5e5-4663-a745-1b58e56790c3", "sighting--929926f0-08bb-40e1-b23d-598bbc0404b3", "sighting--4abbdbb1-6025-4171-849e-1f028e891d04", "sighting--18900516-bb8d-4c0d-a848-f957ddaa395b", "sighting--0da408af-92e4-42b0-9e8c-e34613aa2736", "sighting--07d5f539-26aa-426d-9602-2fce15d40e09", "sighting--4766badf-54c8-4571-84c8-be76be71a54d", "sighting--9cc4c66d-1cae-4936-8e59-0b085f6d4d32", "sighting--996cbf77-3bc4-4562-b9f9-d128c8b361d7", "sighting--7ce89824-c0c9-4374-9116-5893c919ae90", "sighting--1ebdb25d-c8d4-4a91-9843-1b7c337506e5", "sighting--f4da0def-4c63-4f98-ae6c-4cb372afd916", "sighting--5dea7ee9-4bb8-4e3f-b472-54b12abe6c81", "sighting--4964e54a-8684-4b53-8f84-17cc5d4cce28", "sighting--ac72a02d-a516-42f9-bc55-c1c9c5296efb", "sighting--fecd649b-45c0-4de4-82cf-868aba1d250f", "sighting--ac879336-4236-4d6c-a90a-09c57691cefd", "sighting--57096908-2f8d-4a2e-978c-8cb2389c1bba", "sighting--ead212ec-2f73-4463-9dec-4a4e94dcd1e7", "sighting--f723f92f-6d18-4f43-87a5-99cd82f8022a", "sighting--4be6cfa7-691c-44d0-979b-f71b8acdbd34", "sighting--7f506a35-794a-437f-a7c6-c5599ebbaf85", "sighting--7948b73a-f504-4f68-ab9d-bedbd8c254d7", "sighting--6a96e8aa-7dd7-47bc-b937-cba51f8542f7", "sighting--4103e6ac-356f-4647-a4ab-4a23300aa8a7", "sighting--9a4b7ea9-5da9-4758-9da9-ccae3ddbe96c", "sighting--02b3a3f7-8717-49ce-9018-6f9bc3ff80e8", "sighting--6ff8141d-6531-4986-a7d8-e13e84c5c916", "sighting--bff4bd53-b75b-4003-b785-0010ad682588", "sighting--7d9416c5-bdb5-4c44-b56c-339aedf78fa4", "sighting--711ead45-47b5-419e-995b-c98dccc1af11", "sighting--37fc33e6-e842-4c7b-9040-96654441e37c", "sighting--30f36ce9-cae5-456b-afe3-afe6cb4f07e1", "sighting--319bf397-a802-4c41-86fe-4659644a1700", "sighting--bd7fd7a1-86fd-4f9b-a3f6-74d71fe7150b", "sighting--e72e7cca-600e-4833-aea7-83d057cbf3d5", "sighting--1d4d2aad-ff30-47e9-ab65-a7fd9b7fa7c7", "sighting--d9fd2271-19f3-440b-a711-1af14459f38f", "sighting--c072c6fb-c91f-4837-99c3-e1206596be4c", "sighting--aa9d180e-4754-473b-b3fd-bff18c0888ad", "sighting--bfb32d19-444d-45a7-b5fc-d5d88e007391", "sighting--ea55bd80-b18d-4aea-bf35-7fef450eb98b", "sighting--154518ac-4928-4fe2-8567-b39a823c1068", "sighting--f437a9ef-b8f3-4435-a112-9b751b970dce", "sighting--f72c2918-3d23-4867-a5c3-f1b3cc1f098d", "sighting--7a9050d6-ea4c-473f-a62c-ef844c3035a5", "sighting--c4d525dd-b9f2-4fcc-947b-6ceee121281d", "sighting--8900c274-7515-4766-bcf6-4d4173b396f3", "sighting--4946c25a-bc9f-42d3-91fc-f2a41a449192", "sighting--6573a985-2d2a-4397-aaf5-7721b8ef332c", "sighting--1512f08d-5358-4303-a4f7-4abf8ac85281", "sighting--548e2fa9-e28d-4622-9c54-156d6e3b09ef", "sighting--51a5e648-0e01-4d63-a007-433cef36e4f9", "sighting--02d3633e-53a1-45c4-87a1-53842a42c7dd", "sighting--ac2dafc5-c16f-4b17-9eeb-4e5c120423ce", "sighting--7aab2166-c29b-42c8-a98a-149436889967", "sighting--994334cd-dac8-4e23-b1ce-d3ce488e112b", "sighting--17dc1a81-95df-400f-8ca2-11d724449373", "sighting--bbcae56b-6c18-411e-a6d3-3d06aa429373", "sighting--ee8052d7-d13e-4640-a8b7-af7f40a498ae", "sighting--0a203e14-f9e9-40b8-8463-c2ff382d100b", "sighting--883a4b42-35c6-44ec-9da3-d9e7e2b16186", "sighting--fa355c56-8a77-440d-a1db-2f749ff9fade", "sighting--c39cc82d-5931-416c-b173-4f926c69bab7", "sighting--3ad9c843-2513-4a41-850e-b56f88159b64", "sighting--d4f28799-c243-492a-be5c-7044a726fd4b", "sighting--31d18be2-5bc5-4053-b861-617e5c6ab032", "sighting--dc290394-8191-44f5-a914-10935017c4bb", "sighting--8f0e16f2-76d7-4110-9808-1c5866dc5fbc", "sighting--4c63ac6d-a955-46f1-8431-401da61a9e01", "sighting--98be19a7-c278-4e08-be05-2aaf2efdf853", "sighting--f375bd12-d357-4feb-8b58-124a05c45fe5", "sighting--828ec6e6-2c04-455d-94e7-6d7ccfb77959", "sighting--0ea675a7-a408-45ea-8db0-0bc9a686759c", "sighting--4fe957bb-13c7-448d-941b-9a7090e72c13", "sighting--578753e8-0941-4aec-8cab-4be98ee24d56", "sighting--895d76ed-86e0-4497-a174-e807c0a2a83a", "sighting--e0b8dfb6-55c7-46c4-9af4-8628de864eca", "sighting--8bf1986f-9855-45e2-b869-c114d937250d", "sighting--cbbf5358-888f-4526-a76d-b7e5fa0e7c97", "sighting--b309784a-72cc-4c9e-b9ae-da95a53d45d3", "sighting--0d2d56ac-581a-4170-804b-b0d8ccfd56f7", "sighting--3fd54c72-db5d-4ff0-bfca-0de4a429a50e", "sighting--c708ec0e-3741-4d0e-b4bf-1b37fc5b8fe1", "sighting--32752db5-acdc-46be-a0ca-6cbce46b8986", "sighting--7b5dab44-4b7c-4882-a8b2-e2347c4dec1d", "sighting--6146546f-920b-4639-a567-e7fd4da1d0d2", "sighting--f4bc42cb-505f-4fc5-8673-18ff2a40b929", "sighting--f8313bd1-186c-447a-aa02-48400b6940c7", "sighting--cfe699e8-1f01-4cf0-80d4-f6bb8bdbe84d", "sighting--8bf90f71-bb38-4dda-90f5-42f545db4cd5", "sighting--9056a196-7325-4c7c-8797-20cd07839866", "sighting--9d0788c3-f6f2-48c7-9cf1-79b8d002e4b5", "sighting--381b9ca5-cbd2-4c5b-a0a4-9e6630cf0bc7", "sighting--6f677261-38ca-42d6-bebc-549e0eb140db", "sighting--ee870f29-be9d-4c71-9c9f-efd4299d3803", "sighting--b21ab102-e806-4d30-81ef-954c99afcbcb", "sighting--691b8136-9280-4a13-9fc8-8fd1d5cd8ac5", "sighting--4210922e-c216-4fe9-b575-6fe6f372c454", "sighting--13a71689-6265-4bde-871c-ee9c66fcd941", "sighting--7800e40f-a12b-478f-979a-d1c51456e1be", "sighting--40fe3410-6ea7-44f1-89ed-adf9223f2cc9", "sighting--9a5017cd-b54a-46ff-a517-710c6638ff79", "sighting--bee69351-75e8-44b6-99f3-b3395b15e017", "sighting--f92c19a3-d789-494d-b3d1-8361bf6fd8db", "sighting--a4ebc775-b4de-4b3d-8b92-015e2fe24f6b", "sighting--058778cc-d81d-4838-9799-c8ccfdb811b3", "sighting--cbf5ba86-dcdb-4285-8526-2383ec50c572", "sighting--28f62df5-58cf-4cbd-9314-9d605fb0f030", "sighting--b091a5d4-4d59-4bf6-825b-076a98972412", "sighting--00626f7d-d968-4089-8928-343abd5e40e4", "sighting--3391fab2-6d85-4c8e-8bb4-3d8a3ea26ea1", "sighting--50a568a3-b50f-42fe-bac2-0e92d0a5ed7c", "sighting--4f8c5da5-93b4-47c9-b0fd-c00987b8a4ac", "sighting--d7dba26f-4738-4f44-a5d4-40735cd22e2d", "sighting--578960cc-b035-475e-9ec9-546e453c85b0", "sighting--eebb62f5-969b-4392-8f7d-593da23cfcc3", "sighting--6b49b863-22fc-444a-a4df-15c4be239be4", "sighting--806d9d22-c4e3-49e0-9e79-3afd542866bd", "sighting--b3ef4ecf-2020-4b4a-8054-d7faa4a24216", "sighting--4d99653d-3f62-417a-9006-d3d6c849d32d", "sighting--02d21eaf-08d6-4c0d-aed9-82dcab2b2aef", "sighting--16c168f8-05ae-433a-a471-11b990c61aa5", "sighting--ffbb9620-7fb4-48e3-a6ca-178722b889c8", "sighting--9513bd10-e7d6-4b24-be06-ad3e514512e9", "sighting--d048edd8-48e2-41eb-8988-21a10a8e7495", "sighting--1ffbab51-4788-48a0-9d8e-d1367b289a08", "sighting--54235eeb-1c39-4ba1-ad3c-369c72934b5a", "sighting--5edaf58d-a090-47de-b27e-87bd0b89e745", "sighting--aea0623b-92ef-46f0-b6c7-b7626dc2c464", "sighting--7e90c3b4-0b5c-4baa-a30b-497cc217819c", "sighting--43a1482f-8a3a-4d34-849d-d922abe3f427", "sighting--109c167d-9416-413e-9402-4d2e9205480b", "sighting--1b6b1de5-e347-4917-a260-f3263a3152be", "sighting--0d72b97a-c5e0-4a3d-8656-f76c0f044111", "sighting--7267e440-f08b-40d7-acab-54dba85b105c", "sighting--8cc07c5b-448c-4aa3-9112-d15e42361edb", "sighting--4aebeca3-dbd8-405c-878b-e0d7740f61d0", "sighting--108c1151-4208-484b-bfc9-2c34ecb9b9a8", "sighting--ec515b97-a5d3-4d9f-b51e-0d42bcd81cb6", "sighting--e1561ea1-b194-4679-a3a1-7f89d81792fa", "sighting--102f4b10-a64d-41b4-b6ec-5c7f3a91ba5d", "sighting--979475ba-2920-47d6-826d-7b79da8d73d7", "sighting--33d1732b-3476-43fc-83fe-0b18dc13600f", "sighting--8d445a80-8cc7-435a-a9a6-ed0ce9e71e44", "sighting--621a333c-d84e-438d-8c0e-ad7814934e3b", "sighting--1189feee-f4c6-4fb2-bc37-e91ce06df80f", "sighting--1cf2fa04-1d4a-4ddf-b450-92699079e67b", "sighting--aba04efc-46eb-475d-84da-0e9c5d698b5e", "sighting--5290c4a6-25a3-4b9a-91bb-0f5eae16bb16", "sighting--0db9d396-4a4b-436a-8348-3396a81d7c39", "sighting--e40e7ec9-739f-4850-b9fa-6f62d9768e0c", "sighting--b0dbf6ad-054b-45bf-a640-f5c2802ac3c3", "sighting--56c6a0a8-e547-4f99-accc-ff1d99177b70", "sighting--11b450d2-f210-4b65-b3f8-974d6c32fb81", "sighting--f3d6ee7a-bb7d-4e6c-af53-13bb4d07a6b7", "sighting--af1136ec-689c-4e08-b685-f2dbc19471a9", "sighting--8a1ac924-2f27-480b-9a96-0953896bef95", "sighting--0886e874-a9ee-4f7f-88ef-3c79d8cc825f", "sighting--88c9f6e1-e14e-4265-98f6-c9186ef5ebf1", "sighting--cdc3f0ad-aebe-4408-add4-c39e36442cba", "sighting--93194109-a6d1-44b7-a1c6-8e2b49ad181a", "sighting--c1a6e1eb-07ac-46fe-8589-acd8e421bfea", "sighting--7c80b045-af33-40de-8947-32e8c9529751", "sighting--bc2044c9-852a-40dd-9f51-2c915b97fa4e", "sighting--49d22dc6-65c8-4261-a2f8-b603d42c8a7a", "sighting--56446e28-b540-4ef9-b0fa-8b9843c567d7", "sighting--72f329e3-e915-4405-a357-f8db37012d12", "sighting--58736217-ca84-454d-ac43-608458471ff3", "sighting--096a5bf3-5ef6-415a-9d0c-fc9c7fc45c3c", "sighting--e9e63c23-3ee7-415d-b945-eb00bb3654de", "sighting--a91fcda9-56d7-4ab8-8c36-ef556c5ed749", "sighting--18ef105f-1823-4e4f-8804-cbfb6db4a926", "sighting--6d0e4d41-026a-41a4-a87f-924fe330e93e", "sighting--659d4d89-3600-4579-9b58-199b620faece", "sighting--a3ffbbc9-cef5-4cb4-aa39-d0c090bba96c", "sighting--782e0395-376f-4f1f-affa-ba4f660c44a2", "sighting--851a7505-a608-45b5-81fb-9d2173cf1c03", "sighting--4e77f57e-d802-4540-9c0f-1d65fcfa3de2", "sighting--ac832f57-a669-4e12-abda-e9c43a631cc6", "sighting--237e5c5f-2344-482f-8f28-6c65817425bf", "sighting--12d37e21-4edd-4192-b896-81741a854a53", "sighting--1f8a2833-d62e-4411-ac04-69eba54a7099", "sighting--4adf3043-a3df-4d1d-a347-29a641f6efac", "sighting--18a2f6a9-1754-4d86-b6aa-79f4e5687e5a", "sighting--7089ce98-fb2d-4e7d-94c1-d1a8f843fbc6", "sighting--c1d879bf-3aec-4b85-808e-5dd116583e92", "sighting--4d1b7c15-1e79-4f2d-87be-80ebe37870c6", "sighting--a7fa552d-da06-4d60-b3ae-e7e1d510028e", "sighting--6f28cf19-0afd-408e-94e0-094c67263392", "sighting--40f382cb-36fe-464e-90f0-a15039e660b8", "sighting--9e14417c-0203-46cd-8e63-a94f271d8b9d", "sighting--ff0a3268-7944-4102-acc3-be1420e766b6", "sighting--2768e144-bff4-4efd-9898-aa9c915e5cbc", "sighting--b6dbfd92-61a9-4d99-8f62-63dc2bcedb23", "sighting--d016f738-c108-4348-9357-ccfbd4d4fce3", "sighting--9043ce44-6aaf-492d-9548-e066c04e3f83", "sighting--e4cfe231-fd43-4edc-8151-0716d33caa29", "sighting--4960f939-5e66-480e-a2ec-41a6ed983ae8", "sighting--06cea1dc-db14-46aa-8dd2-3b67987e656c", "sighting--2a5f5bd8-2ad6-4ce4-a2e2-a37a475388da", "sighting--f5ccab98-539a-4110-9028-a85d32f6cc04", "sighting--9cf6738c-2081-4e95-990f-ec625f886897", "sighting--b2af557b-b4f6-4ec8-ad7d-d036a3bacd01", "sighting--f88c83c1-b3d2-497b-b560-2d65a1644dc4", "sighting--fa29f786-de7b-4ee9-81f4-5ca90726dfb2", "sighting--3c7bc5e7-70a9-4cef-b2eb-079e283dcabc", "sighting--a5403123-cc05-4959-a296-7c7e3717646d", "sighting--a16decdf-94af-4434-bcbe-9e2c087db39e", "sighting--e940a19f-544b-4feb-b94d-b0c220bce1f1", "sighting--9a61ccc1-b6ba-4330-8b5b-caa0f65dcaeb", "sighting--5370ef59-77bc-466f-bba1-6e9044d47c4e", "sighting--8955400b-6287-40b9-a131-7517828ff045", "sighting--590ca437-e6e7-4699-a4a3-94dbae0175b7", "sighting--0a5cec86-3320-4ee9-b915-cb12dc19d42f", "sighting--cf74d2ec-a3e6-4187-bd08-ad8fade77fe2", "sighting--0a2ef522-1e39-4529-ad9f-81b0c478d76e", "sighting--066eae8c-64ce-46ef-a367-48ddb0e443d4", "sighting--5dfe2cb4-94ce-40d7-9db4-1e717830da2d", "sighting--6bfeb458-b7bc-45c6-8243-182994d5b161", "sighting--fba5e1ae-84d5-45a2-b8ab-2baf4abcfcdb", "sighting--b09e1323-07ad-4b54-bb13-e35438a4fffb", "sighting--62df2392-a706-4199-a05f-548056fd859a", "sighting--fc201179-c127-4975-8530-33e7d9e95c4b", "sighting--e76975bb-ffd1-4b66-b5b3-96d3dbb3f494", "sighting--45494633-7461-42c6-890c-80f12f228f38", "sighting--68d996a3-00e1-4deb-8986-faf212a4c03c", "sighting--be21627b-7044-4d5b-870a-27092e770203", "sighting--6e61caaf-a869-485f-b861-d08bb1f430c6", "sighting--07a7c56d-3f8e-4e0e-9305-a443b28f27c1", "sighting--edfcd328-cf82-47fa-8da8-b67a99032836", "sighting--694a6cc1-ce9a-4ec6-801b-850db3ec903f", "sighting--afbb4da1-b591-4c08-9a92-57f2897e8bf0", "sighting--597e2c6d-3e16-4fea-a235-3bbff3333f58", "sighting--0740e983-db92-42fc-811a-1465a892af9a", "sighting--40e626c2-7d28-4f87-8612-8f6e289d6fe4", "sighting--fa26ba9a-f5bc-4487-81e9-15e7804d71f1", "sighting--17d14f6f-9b56-4487-9c8b-e5c6e06e38c0", "sighting--62b22eb0-85a0-4c29-aca9-b42c6d02e411", "sighting--52c332e3-ba34-4712-a782-0742a45becff", "sighting--a688e01c-9899-4ca2-ac31-33b09b19cde7", "sighting--1f030386-17ef-45a1-8ea5-8f980e29e40b", "sighting--bde87de4-e29b-4df8-8fcc-2ffcca46d9fe", "sighting--95e35a9d-8011-491a-9027-c5fc5477cdea", "sighting--536e71c3-7aea-4dae-bac3-5a9383618e4b", "sighting--1b7e13bc-8a50-48e0-9189-8455292d7f19", "sighting--fe044122-c621-46eb-99da-7b310f062081", "sighting--f98a7716-e454-4367-b0df-c71bf346798d", "sighting--1dce53e3-e1d6-4cc2-92b8-04d10ddd14a3", "sighting--414cb3a6-fe78-492e-a693-ce7569826f16", "sighting--96e8bd88-4efb-4d4e-a1d5-efcf340e7016", "sighting--3bf1c8b8-e58a-443d-ba76-04a2448afd32", "sighting--e4337e27-dc2f-4f8e-95c4-afd933589f68", "sighting--d53a4e49-38d3-41dd-9c36-f5405a14fee4", "sighting--907dc849-e514-4418-8c09-becbcfc5e3e2", "sighting--f81dd607-dc8a-4e96-a021-870b14395352", "sighting--1fc53816-8358-4a54-bf86-2bca9b9b0432", "sighting--8574059b-ec86-4702-b72d-545684fea9ea", "sighting--1d877209-1c6a-472a-bb88-a46bf5764dbf", "sighting--f148d3b9-4ec5-4a11-b69c-8d53cac9d4f5", "sighting--340a9e10-7922-45c9-bf56-2c4c2d13d73a", "sighting--8de5b4fb-f5e2-4ae8-9200-6b9907d620a5", "sighting--bf366ee7-a7de-4b88-a268-cb368470940f", "sighting--68779ca5-c65a-44ea-ab60-c6a98f757254", "sighting--b34d88bd-914d-414d-b2d6-cf41f2af4844", "sighting--92d49c76-8559-43af-8577-9260be545358", "sighting--058e2e26-f49d-40b3-b488-49fc16bff136", "sighting--1f7187a8-0875-4149-9bf6-36fb5db9df7c", "sighting--814532a2-8f1b-4f46-be20-658f44746260", "sighting--060188a8-8e13-488c-b668-df41b3142699", "sighting--fb0290f6-729d-4f30-a04c-77710a710f2a", "sighting--18f824b5-4043-4465-9d4b-55789d7b22c9", "sighting--1adde1bd-fb87-47f6-a72d-cd1d4cfe5ab2", "sighting--ede1668a-4b5f-4172-bd74-77503f44a960", "sighting--cb7cec3e-3331-4e9a-a08a-a0f99a497309", "sighting--6add9383-c3bd-4eb4-812f-1bf278282c62", "sighting--4197d2c3-07ec-494c-8ae8-5f37856fc7ad", "sighting--50cf6bb2-7f3f-489c-8c2f-f5ced8894c50", "sighting--78f43512-b1dd-4d00-bd5e-cbc4e32b9f96", "sighting--17921caf-a97c-49cb-ae6c-0d409dde6bf3", "sighting--a3d45d8b-7ffd-469f-b1c8-b8ab53c7b7ba", "sighting--7442e200-ceda-417e-96cc-dc96e89e8d97", "sighting--fe2b7e0f-4e43-41ee-9a4e-0d960922fd0f", "sighting--dbb31d69-baf3-40a6-8957-f4c1e70dd9c4", "sighting--94d6cf14-ba33-43fb-a96f-15db1cd734f7", "sighting--7c927d03-2c33-46ec-acb5-44b97119e106", "sighting--984f7b2e-43a4-428e-980b-7126a9fc2238", "sighting--c9c3151b-4b40-44f4-856d-c6560b7e0adc", "sighting--6ffe7aca-6992-4b01-a60d-c3853ffc9f31", "sighting--a7580094-7638-4d90-8691-15b5d1f94492", "sighting--1570c62a-766a-4314-a159-789c66a4b6de", "sighting--751b2e37-d97b-417d-a2c6-070c38ab78e7", "sighting--928ac0fe-6403-42ca-b638-093687d05713", "sighting--ef602701-f359-4a05-a3c9-4ecdd48136f2", "sighting--c39b2d27-68f6-4e37-9322-827d1ffce1ef", "sighting--27450779-ad74-48c6-a1b3-989a51eb4681", "sighting--e5677152-05b4-4475-9796-dd2a6f01c9ad", "sighting--2149644f-835e-46b5-a4b2-5f4bcbee841b", "sighting--1a7f8acc-e1f6-4f55-a239-26e0fd282494", "sighting--356f3622-fcb3-43da-ac8e-e55485465c02", "sighting--09013dcc-9c3a-4079-9803-83cebad84278", "sighting--626a2bd2-23c0-47b4-bd46-5c704c45897a", "sighting--8339af93-7fb6-44b6-aefb-d65125f71b51", "sighting--06cdde6d-9e3d-47ac-ac21-ac2b34076945", "sighting--0ef7749b-152b-4d38-a2b7-b4c1a33a6066", "sighting--bbc3db42-90dc-4496-aecd-82fe274d910a", "sighting--51ec2e78-ae88-4f64-9643-f9a3a97bb86d", "sighting--ffea54aa-62b7-42be-9477-fe092d6fe6f7", "sighting--897478c2-3173-40e5-9f50-a29c916aac12", "sighting--f0eab0e7-f33f-4896-9b9f-17e8b6051226", "sighting--177e4ec4-f4b5-42ec-8e01-7e6fa38646cb", "sighting--313e705e-01a6-43f0-9fe4-73a402fc3490", "sighting--1fe28122-9b8b-4083-938e-b45fe597ef44", "sighting--da8846b6-207b-4707-b0c9-7a26341a4ad5", "sighting--e81911f6-e44f-483d-9a45-7fec5f204626", "sighting--d013dfbe-ce5a-4cb2-b77e-553dc60f7fe1", "sighting--206733f1-7cd7-45fe-a7ab-aa15a2f44ce4", "sighting--2e469968-d69d-4914-8537-894cc6a212fc", "sighting--c8c281f4-2ac7-4847-bdf6-72529e1763c9", "sighting--e340d149-11b4-453f-92bf-dc07886fa61d", "sighting--ca390b3a-483c-49a3-a21c-25152c6e6ec4", "sighting--2b272c9f-d618-4045-b238-1a4c9347c86c", "sighting--a5519bb5-4d44-4355-bb30-3ab530db4e18", "sighting--d7212108-6770-4413-90d9-009916fa90a0", "sighting--7c458273-7c88-4d00-93fa-0932e90c9006", "sighting--3afeb2bd-5dc1-4bbd-af7c-d24f7e1f0f04", "sighting--c25df4f4-bcca-4603-8f49-1b4db6272fa5", "sighting--fc5547a1-92a0-4230-aad6-b96c17a2e7d1", "sighting--ae302146-36f0-4ea4-ab56-e00a0de924d2", "sighting--181db6cc-6a60-4199-9fd9-21961ec101d9", "sighting--46168520-2147-45f0-bc9b-a44d12daac66", "sighting--f272628a-f337-499b-ad21-b179f55a2934", "sighting--8184d4cc-b805-4e0c-8b92-4493765c706f", "sighting--988e3540-23aa-4d9d-821d-2f114dc5ed5b", "sighting--c446dbab-3d07-45d8-9087-5d3fe7e9fda6", "sighting--408122d5-badd-478e-a700-1bc137ca4eee", "sighting--fbbf4034-149f-4069-970f-f7363491a754", "sighting--a8b5b4d8-7068-4cd3-86ca-9af4d79e82f0", "sighting--f56bdafa-bb22-44e7-a3a4-5c288ecb36de", "sighting--35b2ec5a-f47f-4db4-a8a1-ed7003acdcae", "sighting--6ba1b42f-0ab6-4f79-a0a3-97472a1f620d", "sighting--02a565bb-8272-41c9-ae50-628f4aaade04", "sighting--fcb675da-73f4-49b1-9ca7-cc9596a7e386", "sighting--bba7d93b-82ff-4f2e-8ca8-403e3ca624b4", "sighting--42005e29-8c31-4c88-b200-0f8104df1e9d", "sighting--39a3c1ed-83c2-4f73-ad40-c0de1616c0fd", "sighting--b120683e-0145-4767-9de9-ec702cbec475", "sighting--428ebd59-c882-461e-83d0-2db2c558f3db", "sighting--8431235a-158a-4370-b4dd-a5b8d3ae5dbb", "sighting--3da584f0-517d-4ca4-ab89-cf4ce3c57068", "sighting--0a6510a0-f9dd-436b-bd8b-4c969a1e92f8", "sighting--d6fd5cfd-1db2-4c5f-aa7f-f47c71c54770", "sighting--de4f0719-8fb1-4faa-a524-0ec9f43dd4c7", "sighting--9c50d104-350c-435c-82ec-b15ee14d3b10", "sighting--48ea9012-87f9-4874-9a2a-613efd26c8f7", "sighting--412a5343-caf0-4c7d-a93b-52faf6efcd1f", "sighting--fbcf22a5-9585-4ecd-a4d4-ac83d60c17e3", "sighting--4106f187-5aaf-48c3-9357-560f8220d5df", "sighting--02017040-48c7-4e03-afdb-4f6e2f5c6a39", "sighting--d3c337e1-d91a-4e31-946c-78adcd9b823d", "sighting--711bf0bf-8f59-45c1-bcfb-52e8dff51faa", "sighting--3691129c-3eb7-4a61-a0d5-67a8fcefee9d", "sighting--e07bce7e-5bb2-481f-9374-f6f11b1c7e4e", "sighting--525746da-8257-475c-9458-9d68ea0d9b80", "sighting--481a7671-c3a6-47f6-ae37-4eaf8949ae1a", "sighting--8a9f7165-f8e8-483a-aeba-2ec8f9ae77ee", "sighting--b9d47cf4-748d-4368-b1e2-800704e7cbec", "sighting--da0d31c5-dc15-451b-b6eb-c373e4ef7957", "sighting--1bdfeb9b-7514-4fdb-ade6-6d5b8695dc51", "sighting--508812c5-53a6-448e-8d72-8ea5dd436937", "sighting--179112b8-6b49-4642-8299-43bf37a6d198", "sighting--7618b236-54fd-480e-8341-83f5e2ab5c88", "sighting--2be67ffd-4700-430b-ac8a-63b88e3acfaa", "sighting--5d5df4bc-5371-465e-89a7-aaa8d9abed82", "sighting--091be300-b63b-446f-a4e9-71a7e9e727b2", "sighting--66d075a6-e527-4f33-9e30-d3f633ef118f", "sighting--f349c6c1-f00e-480b-9072-da35d6695086", "sighting--bb593ea4-97b5-4ad1-ba0c-6adfd3e0591f", "sighting--dbf32358-718a-40ce-bba0-6e34638d425a", "sighting--7567ceef-92e3-4f16-bac7-ccd035197c4a", "sighting--25bcc582-ea7a-44dd-9934-d48b90c5c929", "sighting--4ea1104a-8840-411b-a484-4de302de99ba", "sighting--e9d24fed-ebd6-41aa-8c2c-01310a989570", "sighting--57ba2f73-3ce8-44bb-839b-81df8da67eed", "sighting--bc889967-6fcf-4081-93a6-df0b0d1f0330", "sighting--ff294f6e-b78e-4a1c-87a6-99ec51c63ba5", "sighting--b0f5f101-8f83-4fc4-a94d-f15b250e5216", "sighting--c04e8297-0911-4e49-b942-742addaa0f5c", "sighting--b6063e76-f8f6-49ee-bea3-1c65b6e485b7", "sighting--f29b1036-3bb8-4e6b-835b-7f0a0fadb84b", "sighting--218f6cdf-cbb1-4588-ad06-387909bec7e2", "sighting--0f86ba56-9b6d-44ae-8cef-c230bbed5e1e", "sighting--a331b053-b6e4-4830-8e20-a57713ea5406", "sighting--c9e5f2fd-c2db-41e9-bdf3-70071719602c", "sighting--225527f9-9c64-4821-91df-7ab720b800e2", "sighting--d63ef243-a8d3-4525-8566-9f95d73cd5fe", "sighting--d4f95dd5-dc67-4abb-b098-cf5995865af8", "sighting--3f533627-b26d-49b0-9d5f-0aefc1c8fd0f", "sighting--633c3afd-bd2c-4c00-8fd8-ccb0ad63c8ae", "sighting--ff9dd82d-e13b-4e20-81f9-5c3334df6345", "sighting--8ab0705e-b43e-4772-9724-86d5c33dfe1b", "sighting--8ac8a626-c993-4a47-8734-9bbcd0014576", "sighting--be184c09-0858-45b0-9f28-e5290efc1c58", "sighting--1e4e6c54-f80b-4c9e-8032-f8d028a4e930", "sighting--d4c8912c-4b83-48dc-a0b4-55f87fbedbb9", "sighting--978169a2-558a-4730-9bb8-d8dfa177a67e", "sighting--02647230-54fb-476e-aec9-a965e2d01122", "sighting--2959bf97-29b9-4ea4-8fbb-ffb89d72e256", "sighting--7c901bc2-912c-4b61-ad81-bc4789a86245", "sighting--f95345b4-d96c-476a-85d8-dede92a2fc95", "sighting--86fe1a78-094f-46ec-911d-32f67ac9070d", "sighting--9563d8b6-c5d4-4a8a-9ca1-b97bfabb2a30", "sighting--b06b2715-6e29-4423-a103-c59c16fbee87", "sighting--7ef767e2-ec96-4de8-a8ab-a1beccaf0592", "sighting--9e2db6b5-fe59-447a-a1d8-9307c7016015", "sighting--edadd9df-793a-44a2-b6c0-d466e89a50fc", "sighting--a0848a4d-bfaa-486e-90c9-ee5d605626e7", "sighting--56eebe8f-8a49-4534-b5e2-e164e6d371bf", "sighting--8304cc88-dc99-4429-beda-bbb86b445f91", "sighting--0357e547-bd79-4cf0-9f6d-b704d62521cc", "sighting--6902fa6d-dcc2-43af-a7d7-b7066636d93f", "sighting--2c9d913e-487c-4200-a56b-9f94eff1eda5", "sighting--1fed5ad0-975b-439a-862a-59d87081f921", "sighting--f9f76737-0aac-46c4-a295-a776e81d50b7", "sighting--a0e1ff54-8e84-4cdd-814a-33561d8c470a", "sighting--0ff9580b-c6a3-4f3c-ad9e-cfdec992216d", "sighting--0470c584-9bc7-48ab-8d30-68708b6cdafa", "sighting--2f05401f-506c-45e7-8784-37296749d939", "sighting--139fc273-e6b6-414f-a4bb-164654a0c0bb", "sighting--9292133c-97f6-49f7-a533-fc5d21240a71", "sighting--34553151-242b-4bcd-8a5c-8c0dbb4d0be2", "sighting--91e34cf9-be10-4a0b-be7e-c378351c6ada", "sighting--ad4c6587-c1f1-413d-ba01-14925a95cd33", "sighting--27fc91eb-0905-4f3f-ab4e-8c9fc4532da2", "sighting--be3b1631-fac3-4140-a3b1-37925411e855", "sighting--671cf148-7bfa-4167-b4c3-c1ef60ed078c", "sighting--eba3da63-7228-4ae1-948c-863e5fe73130", "sighting--c95511e6-8555-45d7-902f-5bb32cd22402", "sighting--81086c3b-e6e1-468f-b9f3-e9853e0507c5", "sighting--f551cfa8-4f90-415b-96c0-066440f2467c", "sighting--a7a1d758-0523-495b-87c8-cb5089d0427c", "sighting--bcd4a272-1aea-4c09-a229-ae91019a3112", "sighting--5f62c15c-26b2-4e13-ac1a-04b4f6165ebd", "sighting--43c39ace-f3b1-44b6-b176-da137de49fe9", "sighting--5607187e-6f61-490a-82fb-95f1aeed764e", "sighting--75801aa0-c89d-4087-b188-198f63a48ef6", "sighting--498b2a54-5611-4491-ace7-69a47581a8a3", "sighting--c70700b6-bebf-4963-a557-a15cd1f70a18", "sighting--ea9325d3-8731-4127-81b8-ecbbf60f0f2c", "sighting--654eb467-3fc3-4416-af68-ff3568da010d", "sighting--ae3bbc54-05e7-40b1-80e9-cd0f25dd3776", "sighting--fe4851a1-7e1b-4de2-9dde-4cefca000b6c", "sighting--840f9c19-b65e-41a8-b4a9-7eff27ac6a01", "sighting--f99a1d9e-f93e-4d16-8134-e6dd315fcb2e", "sighting--4ccf344d-0602-4d1c-b537-83054dfbacbd", "sighting--ddac6b61-bcd4-43db-8d4a-d69275269e36", "sighting--554b4151-78ca-425d-b6e6-ffebb8fab82b", "sighting--67e51563-6ce1-48eb-8024-e2d906ced964", "sighting--97dae177-b2c4-4f1f-9dc5-371f31b7572c", "sighting--207811b8-5886-4c6e-a10e-b2676b65b955", "sighting--db811808-0b49-4210-9c8d-5b369b05a402", "sighting--046a540a-4445-4d59-94ea-0e370368857d", "sighting--b2cbf559-c3b5-4d45-8e3d-cdde18375e38", "sighting--bdb456fa-14d3-4d92-b2ef-28302af6bd6e", "sighting--3559b50b-45cc-4f74-9923-2532e5916284", "sighting--3e9c172d-a06a-4ffc-81a8-1577853c11df", "sighting--3ba8cb35-09ad-4f9c-9fcb-be58d67ab93a", "sighting--fee4e85b-5787-4642-9cd3-f6dfc7dc596a", "sighting--58652296-69cd-402e-9f2a-d3bc1890efd5", "sighting--4623f8e8-8530-463b-add9-16b914c557a1", "sighting--fc78093c-5e26-47c2-bf6f-6ffccec685b6", "sighting--cf1f1449-67d7-4be1-8e56-7411702d341c", "sighting--de9d633d-59fe-4d44-b136-6aac4782cceb", "sighting--045ecc0f-533f-4c88-be7d-d16c34c2a5ee", "sighting--cd1e1b5e-dabf-40e3-a322-47739b71e711", "sighting--c89a3af1-608f-4a29-b663-c7b55152543f", "sighting--3db75250-e00b-4b7a-82ec-b85b813db104", "sighting--981264c5-f600-4a0b-96cd-a41d85213166", "sighting--ffa74ebd-c784-43c9-94ca-abc5314fe02a", "sighting--33772c89-04ac-4da5-8053-29329f5862ec", "sighting--e8350e15-5f55-4a48-b187-1f802fc536e2", "sighting--825e9aab-a0f5-4131-8bd5-144e3ff28888", "sighting--bc4fb3e1-106c-4d6a-a62e-ebf98a54ac63", "sighting--f5d35d4e-659a-4256-b761-85240a12862e", "sighting--9f806401-d097-41f8-8a34-dc8a6a9b9993", "sighting--11be12ea-9e9c-4c01-b2f5-9032a014b882", "sighting--de4a346d-11ae-4489-bfb0-f35e0e5dd744", "sighting--23c20aff-8c3c-4fa3-80cc-d7b13a8f54d8", "sighting--b4d3076f-23f5-4235-bc9a-1a320d864fad", "sighting--a3ec61f5-e115-4ef5-a37c-e3e1a2d5ac78", "sighting--6fa8085d-a3c2-4752-bb61-d919ed8712a2", "sighting--05da0eaf-e7ef-4425-b186-29766620222d", "sighting--8b5ed73c-4cbf-4b50-8e82-666097793758", "sighting--8c644690-d47f-4130-a91f-2d373c9bfa44", "sighting--ff21646a-f321-4a96-ab53-04c28412cb2d", "sighting--95fd38a2-329b-40ed-b2b5-9bf6fd3125b3", "sighting--821b1cbb-ca21-47d0-bbc3-ea5d3fe85be0", "sighting--af505557-1b34-49cb-a1e4-081f444dd98b", "sighting--0aa6eb49-5963-4821-9b4a-c0932124b06d", "sighting--4a03a501-bd79-4b93-b7d2-2aeaa5403c76", "sighting--2c4f2f4f-f182-4955-8f5e-dd13f0f0bf6c", "sighting--40735424-1689-4551-89ce-7c07edf3f320", "sighting--af62e5b6-e5fc-4eb7-b8d6-3d4eaad0cecf", "sighting--f025e618-5b2a-4b30-8b79-0537db40e01a", "sighting--a5af7ae1-659c-4149-a9e5-908f8f5376a9", "sighting--77ef0a04-bf5a-4e10-be57-2831148212c0", "sighting--babc1992-a295-45eb-899d-3e65b14d367b", "sighting--bd15ab7a-90a0-4b4d-9242-3350790db8ed", "sighting--409eb04d-7fe8-4696-b681-6b9a09279625", "sighting--afd929e6-5ee8-404f-a8b2-d794a901d845", "sighting--b36ddc73-5bc0-4faa-8311-5c2a6ab567b1", "sighting--30e36699-d47c-4a9e-af08-6cfbb309ac76", "sighting--bdfbad33-5261-4fa5-88a1-c63514a3bcd2", "sighting--ba0d3279-8f42-41d1-a06f-1192d7c30b56", "sighting--47a42856-e8b2-4ec0-bd62-331967729b8c", "sighting--d90e853c-a599-4783-8407-272e2dfd8e75", "sighting--27d53754-c2cb-4a63-b8fe-2323aa1de150", "sighting--df0635d6-f926-41c4-b6cd-355c749a510f", "sighting--46fa57dd-5646-4c85-8eff-4cd472d91ded", "sighting--28b3b2f7-7e03-44b2-9c44-fa4378806839", "sighting--f4c0d585-925b-4dce-856e-db2ac07b43fe", "sighting--0bccf4b9-5bee-48ec-9964-bcff13418315", "sighting--15337623-cbc1-4a02-b469-297d366638bc", "sighting--45cbf0c5-2672-4243-9eea-ef9f20d2bb77", "sighting--52a424e3-8b52-4898-ad4b-5c90f82556f7", "sighting--a14aa6c9-4c40-4342-87c2-3eae8f0c0d20", "sighting--6d2e7043-d88c-47ce-8646-f2a08e26a97a", "sighting--0bca4901-a494-46ae-aba3-0b47978ce58d", "sighting--8af63c86-548c-44a7-b431-63bacb169a86", "sighting--fd9e7a03-faaa-469e-930e-779e64fdd22f", "sighting--19ecf978-0ed5-4598-9a6d-0b3fe45f9420", "sighting--c428ebd6-9b95-4d48-b30a-fea246fbb1b7", "sighting--a03c3302-6347-4326-ba70-257576558a03", "sighting--df54bf80-c674-46db-945d-7d33c9889619", "sighting--f6892262-0407-4afd-8c7b-3e4a30d55e47", "sighting--9ae24b43-7d1f-4c99-9d8f-29767c3c84c1", "sighting--d9aa7749-1e0e-43fa-a16a-5186f6a13af9", "sighting--07ff62fb-810b-40e4-83c5-9a651794842a", "sighting--4bf31e8b-3715-4ba8-b472-9635a1174b6e", "sighting--79044247-7c0c-492a-9226-f774aedf213a", "sighting--9319d2fc-d034-4861-bf5c-5f62c653b2fb", "sighting--a5221c87-f390-4cb4-a9b6-3ea57db450cf", "sighting--be9d46a4-078d-407e-9f33-d31adff81518", "sighting--8c710680-3808-462a-b3f1-2a56cae6f35a", "sighting--924edb99-5487-484e-a1e4-874e79455b85", "sighting--de95e2cd-6d3c-40c3-b691-57e64380daa1", "sighting--a9dd9b82-762e-422b-a166-cc6f4a07ac16", "sighting--e247675d-85e3-4733-b1cc-5bed5c900de3", "sighting--fff855a6-7bac-49a3-814a-b7430bfe24b1", "sighting--b91398b6-b50c-45c9-8e8a-44149f3ff842", "sighting--434e0da6-e632-4d32-869f-eaed825d86a1", "sighting--95423ccf-9a7c-4568-aa86-da3f4ea0c41c", "sighting--01ddfea1-2d1d-47aa-a357-1003a2d60465", "sighting--d34578e4-b7da-4290-8e3d-fc4f7c40b70b", "sighting--fd24cf9c-0c12-413f-ab9a-e19cd85e4ab2", "sighting--f7f44811-e5ae-41e0-96fc-b8de228ff6bd", "sighting--9e18859f-76fb-493e-9c88-263a4485aa43", "sighting--f4aec7a4-c8f1-473e-b8f3-dbd3aae3713f", "sighting--3462020c-9964-46fe-8c99-1050ab8355f0", "sighting--f3334a6b-29a5-448e-a809-3f58200b3b89", "sighting--dc71f870-ac48-4927-b3bb-e50af2decb80", "sighting--6ccf9446-87fd-4bdf-80c5-fdb4c7b43c58", "sighting--7f294ea5-353a-4ba9-8b28-db4fcdb25f97", "sighting--a7d7c54b-8d6e-45b6-b5cc-04ab6178e8e9", "sighting--e880a361-3cf6-4a6f-b51a-874d7dc4423d", "sighting--7cecb3dc-43f2-46fc-a2d2-24f520e60ec8", "sighting--5289fd03-c284-478e-b474-421cc4434b03", "sighting--77d568a4-0fc4-4611-b499-8c902d0caa88", "sighting--53a231f4-4b9b-4d5e-a541-87a4f99cd2a0", "sighting--0db7cefd-94c8-4bcb-bc08-98915d549d55", "sighting--1fb365c2-511a-485c-a3b2-d6daad7117dd", "sighting--383ca724-aab2-4d1c-aed4-851b37a06d0d", "sighting--44b9dabf-c371-4918-bfd1-da0267601fa3", "sighting--8ff88ca7-01ac-4770-9609-25158f3d6a5a", "sighting--fb7a1939-b6d6-43fb-bcf3-d22573f50c00", "sighting--bfca5c52-fad5-4f58-9d65-e61559161570", "sighting--a1eb8c68-983d-415a-aae3-b730f2a0d598", "sighting--b22695c8-1cbe-4e8a-9346-c1620dd162b5", "sighting--70b97300-bd5f-44fb-ad1f-bd073fe38976", "sighting--a348411a-07c9-4988-8ca4-84bc44f76a5a", "sighting--18f2f5cf-7fab-4fe5-86bc-083902d53e53", "sighting--81217001-3e15-49a8-8919-e6267b2d2526", "sighting--465552a5-b147-4629-8939-70f889d25aad", "sighting--8eaa861e-3578-4a34-9542-73fe93e03fc4", "sighting--0c6b5368-3985-46b1-932e-2ef72e57f932", "sighting--be878832-962b-4074-aad0-ad8cc7b507eb", "sighting--a456e663-4807-4d60-94cf-650c1c7cc389", "sighting--ceecab1e-9808-495b-8769-637201e76a2b", "sighting--882b2cb0-f0c9-4c1c-8785-5098f1a28d5e", "sighting--8717cde5-2b95-4a22-a8f6-a41600f9ebef", "sighting--01ae137f-fb57-4307-bf9a-f03f8abcde6b", "sighting--3f90fa0d-72c4-4369-80cd-e2637c70d02b", "sighting--966ddd87-d36e-40b4-abe8-50224c9b4cc5", "sighting--8531dddb-6a6d-4ce0-9f5e-eada7578067f", "sighting--ece11a1b-edf7-4edb-a0a3-047175398a64", "sighting--b0ac0cc3-405d-4fa2-87f5-affb5c2d7416", "sighting--b79916fe-2161-4a1b-8af0-da5d4c8378b1", "sighting--8ee59eee-ed8d-468b-b2dc-6012d268ebf8", "sighting--6112a11b-0240-4d5f-b2be-b7bda1dce3fb", "sighting--3a0f442e-f039-498b-bdca-31e5f4364a8a", "sighting--fde5be1a-7258-4d79-81ee-4b2409e1c77d", "sighting--ecc7ed6c-7247-441c-9f8f-a8c188272d84", "sighting--06c519a5-5bf1-411f-a748-91c8830efcb5", "sighting--894c74a9-34ad-4d5b-bde4-c5b8773b5bc5", "sighting--96d66f78-3174-4db2-9cc6-cd25ffe81c75", "sighting--bb94dd6e-d4df-48ad-96a2-d46fe751850a", "sighting--0c0c4a37-f240-4151-a334-50a3022afc05", "sighting--d72686c7-87da-4514-ac78-e44ecf4f111c", "sighting--4eeda169-e5fd-4eba-a2af-67071c01c520", "sighting--ef654e92-7c07-4bb2-ac41-91db64d868ae", "sighting--a8ff8637-cb0c-40a2-95be-54e842dcc7e2", "sighting--c59085af-5a34-420f-be20-1f058f041ea6", "sighting--f73ee61a-ddb9-4c59-a7ef-7a174d8aeb5a", "sighting--14cec88f-c568-4d4d-8095-8e8f782ae9b1", "sighting--7478adee-12b3-4025-8a1b-d733317feaad", "sighting--e0e0f2a4-f3ef-4152-b7e3-5dda9a9aa514", "sighting--7c21759f-51a5-4f2e-bddf-d4b832f11dd8", "sighting--f2b2a05e-758e-4f2e-b0ab-223440484e3b", "sighting--a372ea0b-f722-4625-8f7e-9ce3597e7719", "sighting--10bc02e6-e16c-4843-8075-811e26fee7d1", "sighting--6002872a-e6c8-4cee-a2da-e6b614b51160", "sighting--aacc476e-a25f-4e26-bedd-fb52d6c49f09", "sighting--93e0abfb-8b4b-457b-b12c-1d8d224dd49b", "sighting--8c45b8a4-63a6-4f2c-9b81-9c428c4f50a0", "sighting--6fc0834c-d483-4748-a35d-ca37fe0abd96", "sighting--e2920c58-47b0-4ada-ba7b-9c4d4cce8b3c", "sighting--f6271be7-50b8-43e0-a513-43d10f22cbd6", "sighting--9a5cd184-dd70-4ab5-8038-c7775f130716", "sighting--eec39512-d8df-4676-8100-0b03d2bb19bd", "sighting--e29824b9-6d03-4e1f-aa09-ddc132233322", "sighting--9b08ceb0-68e3-4118-a326-60d3f9354c6e", "sighting--a92ba7a1-2f0a-4938-9aca-fa15d0b69ae8", "sighting--f3f928ad-8cc4-4a0a-8ccf-1a50bc7438e9", "sighting--4de758c1-c5b7-49e9-8b3e-69ff3738d95a", "sighting--61bdca5d-ce7d-46c2-b264-edf371b9a6d4", "sighting--e9116676-bfdf-4e3c-b7d8-406e0b5d0e4c", "sighting--78dbc091-edd2-40a1-9382-4fffdf0ee540", "sighting--c65af48c-38fd-4a18-bb36-0278432ea43f", "sighting--8b741720-19d4-46bd-b051-7462f2332a35", "sighting--6484b6b0-d937-45c1-a6e0-dd62448579a9", "sighting--b5dfd352-b516-4518-a3fb-3507adaad0ba", "sighting--09579015-13b1-49e9-8a2c-63ba54d6b14f", "sighting--d706e788-b239-4078-a7d5-2679ebfaabae", "sighting--ecd3b3bc-85b0-48a9-aaf3-50148814839e", "sighting--536d3069-d5dc-4bce-9f07-23f705c80e2e", "sighting--b56e1481-05ed-48f0-96cb-14865fedeb78", "sighting--deab5342-b5d9-43e1-8ac6-36065a9e70eb", "sighting--3f1566d9-67e5-4d14-b997-e32fc5c5707a", "sighting--77dd05fe-5d00-45a1-aac4-69c18b4b45a4", "sighting--8a83b08b-5ee2-40ba-88b4-69d18e1b7a90", "sighting--82dd063f-1542-40d5-b3de-03dfca8fd63d", "sighting--142af73a-7aad-450c-81ee-a5db9b1bb8b7", "sighting--70626dc5-8419-4c46-b56c-f0381891167f", "sighting--ca27f99d-c6ca-485d-b0b9-1ae391f2d5eb", "sighting--34392699-5490-40be-b9c6-03e764d0a624", "sighting--5561ce2c-3abd-4541-a431-81acc9dc0ba9", "sighting--350b6a67-2bdb-40eb-8962-829fd7da6fe8", "sighting--2ce46846-2afb-44bc-b182-610cfc686f21", "sighting--a1af393f-8ec6-4897-afb3-403c5620b9d9", "sighting--784aff72-8add-488b-be0d-36027105872f", "sighting--4e047fa4-836a-469c-92e4-a71145103a63", "sighting--62ab5a25-ffdd-4b4e-a027-48e636c83438", "sighting--6be5d7b4-0c20-4b74-9fad-d2ac1313e12d", "sighting--60f31656-31dd-4bbd-851d-37ce0d17d905", "sighting--4aabf39e-a057-4d03-80c3-493969e25593", "sighting--c639eaaf-40c7-45c9-82fc-5e25aee8c970", "sighting--4565bd41-7500-4606-a03e-fa54feed71c9", "sighting--36545193-dc5a-408a-8f46-591fb7326064", "sighting--2bd22bc4-6da6-496d-821c-d2789def33d3", "sighting--fb964140-92db-4ff8-9418-908c3f100e17", "sighting--ce39f8e7-6488-4788-a601-3a7fbdce0387", "sighting--73432e8b-a481-43e6-a1aa-40da44bd77ce", "sighting--e8a82a7a-0da9-4063-bcc2-7e520104d913", "sighting--24260d7b-200a-4c9b-8cc5-b0987097df2b", "sighting--a66969b1-e272-4a94-bfdb-21cd0329b0b3", "sighting--c84d3ee5-31b4-4517-92c7-97d53e04460d", "sighting--0636888b-730f-42cf-8671-aa0cd054f5e7", "sighting--088b68c7-e029-416e-b82a-0ca8f686477e", "sighting--7ce89d15-3345-4701-ad8a-c2a5e0173430", "sighting--e60daa86-e4a1-4a37-8cd1-1ea477559f7e", "sighting--f7c952d7-8940-425a-babf-a38147992737", "sighting--793bff48-d6b9-4077-bf92-28945dbd4308", "sighting--db849e66-1e6d-409c-b727-193280dc17c3", "sighting--d525a89e-9719-4489-a456-af924825fc29", "sighting--a2a85996-fd17-4f08-b4f3-de11ede24563", "sighting--db443331-d72d-47b2-a390-4ab7991074ab", "sighting--91c1b662-ccf4-4a30-b230-266a497aa888", "sighting--3823e56c-f775-4574-9805-c1ad4071845d", "sighting--62f89943-b98b-473d-a668-b6d32c9f1f7e", "sighting--42dc5d68-79e2-407f-9dca-a8fa2be96df4", "sighting--d811dc92-5b0c-417d-8aa5-d3f5cafb17bf", "sighting--fa3813da-a411-4000-afea-4555b4885504", "sighting--3ce456ee-cbbe-4ad0-9e20-0eefdd056658", "sighting--fe080a1e-995e-465d-be22-c03b273192db", "sighting--291bad38-183b-40ee-9eec-42b459daf4d0", "sighting--9cc6b503-c600-42b7-9e7c-0efaa3ab9dd3", "sighting--2a08bec5-1655-44b8-8dcb-ab0552a3e8f0", "sighting--bda587fb-c857-4a1c-9ee1-28a57d380750", "sighting--9651729d-32cf-4bb7-a153-dccbe38c69b7", "sighting--d3a40ec0-b250-4f8d-9ab4-87bf15da18c2", "sighting--6120cf69-1383-496d-98b7-88024a835ec5", "sighting--de565d17-0bd2-4183-a066-dc419451fa4c", "sighting--d671c29d-9b02-4639-a545-ecbb36d3a396", "sighting--174bd546-fbfe-45c6-98a2-8a0a8ee226a9", "sighting--830d9edc-194b-4426-b604-40ea1ba98ceb", "sighting--15f0ad6b-a59f-4ecf-a1e6-a148791d7ec7", "sighting--c80c43b1-b895-47bf-a8ab-42c085abb88b", "sighting--4d695852-2d6f-4586-bfbb-a61cdf990b52", "sighting--49274a37-e6b1-47fb-841c-169999147168", "sighting--d092ddcf-fc7f-4a59-802b-f4c1d42ab593", "sighting--56a48107-7cfe-4b86-9e2e-b92543b5adc2", "sighting--f41f0e4b-d00a-4c54-8361-72a2a7860dad", "sighting--9476daee-703c-427e-8bee-10efcaa9887d", "sighting--1c980b86-af45-451f-9a17-d5d9dc69217e", "sighting--34bd08ea-b8f3-422d-81db-10a248d2d4eb", "sighting--36302dc6-729b-4d9b-83ac-d1536dc653c0", "sighting--eabba014-ac41-4de5-a18f-2a9473a2d78d", "sighting--2f2c08fa-17a8-4d61-adbc-94ba8385de2e", "sighting--5b74eea7-5770-4f23-8972-8fb2dd51d6a2", "sighting--f127d2ce-8e82-4993-a46b-2daac5db10bb", "sighting--004449d5-f0a6-41f1-a9c2-2814c1d3e414", "sighting--d2e51585-7525-4c02-a8ed-80889380b5f1", "sighting--163a85b0-ddbb-4018-8add-27aa410e46a4", "sighting--8719802f-c926-4c73-aa47-b3716a86ed04", "sighting--92533916-ebf0-4716-82f5-a114b06c2bcc", "sighting--cf2ca8bb-2526-46f2-8ab4-0d56771e5b4a", "sighting--695164b2-39e2-4212-a935-f35a1bbd7d62", "sighting--f223fb23-aacc-45fd-a442-15f6126c34cf", "sighting--2407de32-ab25-451c-8a95-c4417ee6ff34", "sighting--c922b39c-4119-4a11-a440-475334330899", "sighting--80bba7ea-2c68-4946-9460-4d2ce3ed5615", "sighting--f15ec4eb-6b97-47dc-92dd-0806c1928b79", "sighting--545c2be4-16d4-4af8-8c82-70de52887824", "sighting--f06a9bd7-9f3d-4c95-9f24-96da1e11d3d1", "sighting--33bf3297-0c00-42b1-955a-b35961c8cacd", "sighting--87ce490c-dea2-4e0c-ac8d-924b4a6929ce", "sighting--55aa591d-8d0c-4685-8a6c-c62e969e3d79", "sighting--689fbe91-6462-4096-a912-f50dc527ec68", "sighting--9afacefb-4ba7-4069-9c40-fb08655ae2bf", "sighting--9c65b5fe-3325-40dc-a7b1-7b2e692c1a3b", "sighting--c0fd7ba2-a405-4f48-8a27-7a2f19005bba", "sighting--f44749bf-1760-43a7-9e95-a5442da25e61", "sighting--373cb79d-0172-40d5-83b6-50354ddd9521", "sighting--7c09bf74-0557-41c5-ac76-0d9b6f7ce403", "sighting--4ec4e8e1-f0d0-4342-ae89-98926f3323be", "sighting--3e726f0d-a50d-4689-9cfa-8581f5316aed", "sighting--fcb9fb3a-1df8-4ad2-a4ba-49a523db3703", "sighting--b2e33841-8681-4a85-bbd8-3ac9ca8b7705", "sighting--b66e862a-9aec-4385-8de3-be363d6eaf19", "sighting--628bb9e6-913e-4f44-aa6c-e3aefadf0e27", "sighting--2b2890a0-05f3-4811-95de-b0b16b58b3d3", "sighting--73735d6a-26b5-4e88-a3be-b42b4cd39808", "sighting--c34c96b8-1dc3-4371-bfb3-142316603a95", "sighting--0cc37dff-57be-49a7-9af3-619e05bbe4a3", "sighting--a7e8df67-f5f6-4ef2-9e43-6036c30285b5", "sighting--eb442e59-27fc-4ad4-8b6e-9750775c7af4", "sighting--83a0d19b-7be2-4d6d-8aec-970cbe0be7d2", "sighting--0e969149-dc97-4027-88cd-fef7ebf2bd05", "sighting--25061af3-720c-4b0c-9625-5e7c3c449a43", "sighting--03f4fc01-e514-4a2c-807e-17bf3ac6c1b0", "sighting--c89799ed-01f0-4e97-bcfc-6e541bf2260c", "sighting--63a3177b-38cf-4e7f-8fa0-ff68e3f4fb07", "sighting--abdac286-643a-4ba3-95a0-c7f7a371d125", "sighting--8646202a-95c6-4d6a-bbcf-29252e0d3403", "sighting--7f46b4cb-48ff-4916-ae83-28d988f356e3", "sighting--2b0c3b58-6839-4eed-9fa2-01b6db2d08c7", "sighting--34405411-1afd-41d7-b9a6-b65b90d10c88", "sighting--5128514a-900d-4fe9-aad4-076bc4ae5b2c", "sighting--d6810b75-c12e-493c-ba76-536e6eeeead9", "sighting--adcdb24b-b5db-48c1-9691-f663288b70b6", "sighting--1147452c-978e-45b0-a74a-7aa2979eac42", "sighting--7d596648-69da-4643-b91b-acabbf67f9b5", "sighting--15e2808f-7a8c-4424-9639-339bba2f4d21", "sighting--14ce54ec-8378-4a4e-9e22-e52b31513344", "sighting--d9a6c4d0-1671-439a-a56d-64150c0830bf", "sighting--d8476f73-877b-4aa2-b32e-5d07282d4518", "sighting--d6574001-db42-4f84-bd5c-7f54640d6581", "sighting--f461aeed-301e-43a1-ac07-40b58ec8883e", "sighting--fdd11eda-db2b-422f-8fd6-b4270d508df6", "sighting--32c885fc-7579-4709-b855-5e121a92b747", "sighting--a3235c38-7de8-447f-a5f8-393b91ed6015", "sighting--0dfd13a8-30c1-480d-9c7f-156656118b7b", "sighting--677fc236-fea9-40d1-b68d-58e851d9ddd3", "sighting--1e6e36f9-a340-4bbd-a560-bbcd0da32889", "sighting--fce8d55a-343b-4b07-a99e-b25990bb8fe0", "sighting--31ceff76-7a03-42ce-a448-7899919a842c", "sighting--1adedd38-cf67-41da-bd92-2a64880042c8", "sighting--73252e8f-bca3-433c-ab6b-a99512c32c39", "sighting--862e31b6-bc77-4a14-9d10-ff18aed469c5", "sighting--a1af040d-1af6-476d-b3b1-0883da206817", "sighting--7f946a18-923e-4141-a52a-4d5c36168425", "sighting--3a7f0859-3bac-463b-a845-5843215f72e3", "sighting--ff44d1ba-351d-46cc-8a98-50bf93dcb9d2", "sighting--87cfe320-aba1-419f-885f-a8a77119ef6c", "sighting--c8d92d7a-2361-448b-9f68-b0011f933a3a", "sighting--1830884a-c0d6-43ba-bd47-4033d8f3f639", "sighting--385a6849-18a4-454d-9b65-c1fc8ba8e3b5", "sighting--d4edc9a9-090c-4630-aa3b-00b94d815820", "sighting--be9729b1-aaba-4616-bb6b-fa11fa0539c6", "sighting--21514aa4-710c-4a5b-a8da-db356212e303", "sighting--db417633-b310-451a-96b2-6a25b438cb97", "sighting--1c9f2a03-5a64-4c2b-a5b7-35f78b409ac3", "sighting--c751520c-bed6-4861-b8f3-62a07ae161d5", "sighting--3c7d03e7-484c-429f-a624-fd9231c46d15", "sighting--ebca1653-0f43-4b13-ba12-13f2bd441151", "sighting--ae952cb2-0c57-4aca-985a-3f5af4bccdff", "sighting--7347976a-1e74-4a26-95e0-63911daebfa6", "sighting--d3e28f4c-60ce-4505-9d29-3e58e9dc8cb0", "sighting--4d0d91be-0370-456b-9a77-5bc141288bee", "sighting--7a31fe65-a623-4175-97b1-a3f5ba04663b", "sighting--0abc842a-b80f-46f4-b068-c5f99e0edbd9", "sighting--5c366ea1-92c7-42bf-a4f9-e5b15be49081", "sighting--a585ad59-d522-4811-b7d1-3cc89e3a2f09", "sighting--35e6300c-5697-4b84-935a-091ec6c13d15", "sighting--af4a1fe6-e183-440d-b929-3fd7247917a2", "sighting--29ffc1ac-b121-45c9-9a46-084e6d024486", "sighting--d7f16d59-5f1c-456a-bdac-dbfd5f58e3f7", "sighting--7a13728c-f4d6-41fc-b553-cfd8a801fd3a", "sighting--7675d994-3e7c-4cdd-a56c-461d68c38aeb", "sighting--7ffffc20-1917-4c1f-9d50-a33783ad06aa", "sighting--2055ca67-70f2-42ae-822a-ebca58008aeb", "sighting--95e0fa9a-877a-4748-98d1-84aabd27840e", "sighting--ab5664dd-f26e-4d52-8f20-0140e632bbd9", "sighting--2ec46769-69b6-431a-a690-4a8cb4f0c686", "sighting--c9a264af-3a96-4cb4-a746-9c4e29d06e38", "sighting--981c6e94-8314-4027-b460-2c89735c2243", "sighting--f9f7906b-6c9b-47c8-abe7-697f783a6aea", "sighting--a86e730c-9fd6-47c3-8afc-1acd2b6e91ee", "sighting--dabee2a8-7b8b-4cf4-8557-51ed66c5be94", "sighting--7d6f09fa-cfba-4a54-885d-d53e7773053a", "sighting--e72f1e68-17d9-439c-81fe-ce0d7efe009e", "sighting--4bc3babc-cf7b-4b6d-a025-7e89098ae2f3", "sighting--516a6696-bc20-4bbd-85c8-b0eb77ca6f19", "sighting--c40aef13-3149-4895-8fb1-3e5b7be17514", "sighting--9fdba5f3-263e-42b4-803d-e7fd01dc3600", "sighting--a184012e-775f-4bc7-b146-df93b66f33b5", "sighting--8954655c-b263-4bb7-9159-f69b3ef8d90a", "sighting--c2d4a138-d016-48e4-aa1b-e4cd854531f2", "sighting--09eb787c-dee2-4c1e-a1d1-310034d3b0cd", "sighting--0b5e729e-70b6-45b1-b171-fcd72b54498b", "sighting--75a7a6e2-2cc8-4441-b80e-5430596cf92b", "sighting--9fd1c938-e137-48c7-83b8-5e34636c2637", "sighting--10f2e034-2223-4bca-91b0-905e6c244f7c", "sighting--55038f28-03c7-456b-8e9b-b60397d15eac", "sighting--4c14755b-e7f6-4858-aa06-d299f6e61e11", "sighting--41ae361b-e62b-4f24-9345-8a1d730ab746", "sighting--c1e98446-e6ef-457f-8fa5-63165430225a", "sighting--3badcf06-0a9c-452f-bbec-d83415c65c2c", "sighting--e21e2b3b-44d2-4677-b681-87150b990f84", "sighting--8162f189-eaa3-4159-af36-32f51e7c2532", "sighting--c6751562-ece1-48bf-a1fe-e66a28522ca0", "sighting--39d78f1a-44bf-4db1-b41b-a65e0e8cd8ab", "sighting--6d84cf6d-41d7-42c5-b4fd-0e1ac59e89d2", "sighting--cfb64330-fd9e-4d22-9493-5f86f664a38a", "sighting--5b78de73-a6e5-4a01-ab0e-c4c99fc9628f", "sighting--baf3398d-6312-47ee-94cd-ca71ace603fa", "sighting--311a2558-bdd3-4e61-96c6-ebab3affb3a0", "sighting--d39c1ab8-60e7-447b-9379-95f3b4299988", "sighting--0819c5c3-f821-41ca-a88b-6fe392a4ab7a", "sighting--c94a5884-d4eb-4299-b842-98603c28899d", "sighting--d1086a92-e854-41cd-8646-cc9503be7f73", "sighting--a68a651c-4b0d-4493-8b24-ec177e521dc9", "sighting--f4ed5254-7bb0-4705-8071-077fbd7efc55", "sighting--ee4956c3-6952-48ad-a3f3-744b432da6fa", "sighting--29e8e56b-ac3e-4bc2-9a15-febe29b7e3f1", "sighting--5be8a56e-10d3-47df-8371-95ba38550280", "sighting--f82e7fd8-8336-45cc-9eb8-7d3381b34d6a", "sighting--d559828c-a6fd-49d1-86d9-d1b0a2d8163d", "sighting--df925277-d7d8-455d-9a36-4b61deef2041", "sighting--8729ba6a-0bcf-4efd-9793-db22b24b7652", "sighting--66a36483-d0d2-4da7-87d9-1f1be58a99b4", "sighting--87668530-dda0-4905-807c-138f36d5a594", "sighting--1df718b8-06b2-45ce-bdf4-d0940c717444", "sighting--6cb12682-f51f-4d3b-98e2-971af4a7914b", "sighting--ce843ce4-27ea-4ec4-aca6-29af1570d2d0", "sighting--59ca9c34-8eb7-4e1b-a05c-3617d9024f0c", "sighting--96324a61-3418-4d7a-b3f6-808cd6aea903", "sighting--80927a63-c2b6-47a9-ac6d-294973474188", "sighting--14298cbe-2970-4415-ac09-8d314df1cd8e", "sighting--e0a30405-9d25-4c31-8073-47262dc77749", "sighting--b4fbf332-8aca-4834-85a8-45d01ab5d77b", "sighting--c00856c3-efb1-4b9f-aea5-7f71ffb32e98", "sighting--01b78df2-0232-4be7-916f-81a85796ec92", "sighting--7ab6cdf9-dbc8-4d5a-a402-1e106d3866c0", "sighting--38273e48-93c7-4449-8e9d-0c2dca372c82", "sighting--39fe09c7-b60f-4c5f-8d06-6dabc2a04e7f", "sighting--b62d39e0-0ecd-48fd-ac38-85343cc32a87", "sighting--1654b02f-9661-42ce-bdbc-2a524b3305b5", "sighting--d3279784-3dec-4cb7-a5ae-4d9d2c2fda25", "sighting--444ab411-344b-44e4-a176-e46be7b7371d", "sighting--1aebc8f6-0be0-470a-ae71-e9ad7ca61600", "sighting--fa3f6862-0cbb-49c7-ac2b-2f316c7a6351", "sighting--a5bca8c8-d865-401b-9e86-a06ab626458e", "sighting--ed10eb96-964f-43b5-92ec-a0fe72747dbc", "sighting--6d8780b5-4914-4684-8222-30322780f98a", "sighting--38c8d444-7aa5-4a69-b639-6153de297532", "sighting--7c3b2196-d4fb-43a4-81e3-569626b48a57", "sighting--1f06f893-46ae-4cab-b033-4589da3b298a", "sighting--a8faba92-8821-4586-a7aa-024727e1cf9f", "sighting--0bdb39cb-7cbe-4c5a-905d-f586e44ebda0", "sighting--5246a25f-ee29-4787-934d-a30869e35015", "sighting--81e6e12d-ceb9-4673-87ed-33554891b129", "sighting--4442cb83-b04d-4277-851a-9f3645e696ad", "sighting--d0f1a5f0-a554-408f-b884-e5d33d2c16bd", "sighting--116fad41-0e12-47b6-8be6-62b616735ccf", "sighting--252bf1df-9504-40d7-9b30-1631e8378922", "sighting--037606ef-0c64-4d3d-8164-ad9a05dd8c53", "sighting--63d69985-86fe-4901-9f7e-783bbfc03a8f", "sighting--3c2a1af0-feb8-416f-8286-9b67a5ae26c5", "sighting--6f5b8dd9-c6a3-4636-a7b6-bbe129a0d9ab", "sighting--4782ae41-1de8-4654-ad94-7a19dd7ad97a", "sighting--e97330ab-e9bd-482f-b30c-a278520d25fc", "sighting--a102a433-ac4d-44ea-aef5-b0493fbc3ab1", "sighting--d1d41d3c-90cb-4322-8b9d-61a92276b004", "sighting--13f29b94-5419-4ed9-9483-5b1313dcf333", "sighting--c99f45f6-61ab-4d58-81e3-342b2b8de405", "sighting--08d4d7da-021b-4655-a937-47daa614c537", "sighting--18e13d9b-68ac-47b6-927a-8151a30482b9", "sighting--936bbb77-2a02-41d7-b12a-20afdebb7782", "sighting--a069ab83-7032-4a80-8722-0e525991a28d", "sighting--2dca7498-698d-4847-9b44-1c4a32ce83d2", "sighting--30793ac0-a73d-4ef4-a2a5-249244421a40", "sighting--9aaaf56e-ffa0-462c-9e03-f673d4badea3", "sighting--a24743cb-dbce-40d8-9a49-e1a4ea8de86d", "sighting--fce6025f-9cc1-4071-87d6-96ff3763c97d", "sighting--816f27df-54a2-465e-ba20-84344b771a4a", "sighting--5120da39-71d9-4456-b2c3-03aae77849d9", "sighting--5b1aa7fb-e051-4629-a88a-5f79964c53d4", "sighting--2e8d19df-f79b-412a-9be5-4515bcdf22e2", "sighting--8890ded5-3a76-4a56-91bf-31fe0b599700", "sighting--5e8cee2a-6ce4-4e2e-a0d1-dc1185621e1b", "sighting--386ba527-3565-4056-a363-77f5c8ee3865", "sighting--6e4da367-e92b-43b3-9ef4-98666fb52ed5", "sighting--12d46dc2-6d25-4e87-81a4-6d38ca1ac921", "sighting--b54ba36c-4b8f-40de-99f7-4cdada370e92", "sighting--af23d692-42ba-4ec2-843f-f25bdcecc8c4", "sighting--26f7286b-f1d7-4e50-aad1-3038df0cf320", "sighting--f754d66d-5a94-4ff0-b83f-0f6b8dd0b54c", "sighting--91e3b008-9d81-4028-b9c4-cec7bc1e6412", "sighting--c699a861-1457-4981-ac2d-064623aa92ee", "sighting--1c61222f-c287-4d19-b7aa-3b0d0b3b8fa1", "sighting--ce67c5da-c49a-4b29-a41e-82ad2648672a", "sighting--73c249e8-8b27-4716-a4f4-c28e8201041b", "sighting--62d567d9-ae18-4022-a8fa-33f3f4a446ef", "sighting--c32352fc-a6f7-4954-b0a4-8c3eae46541f", "sighting--92649482-82d9-45b9-b05f-08ced7cf2e04", "sighting--1c553879-a67f-4185-8dff-6a90a2e964e2", "sighting--02bb9915-4be2-4ede-bb46-6a080fe7ec45", "sighting--ec22456b-25dd-42cd-8c7a-a9bc202cf6ff", "sighting--9b61be77-d8e5-4e1a-968c-c81e5cfb82f0", "sighting--b7975ab0-6015-4cfe-997f-7d0700199353", "sighting--b9e0f666-c2a3-4df1-90a7-c887612459e8", "sighting--adb4df5e-a62c-43d4-8a2b-1da47909a78c", "sighting--1e716c1f-2d38-46e4-9647-c7f6a896200b", "sighting--54c0bffa-596c-4576-af21-c55de39c4428", "sighting--a939c189-031f-424e-b42a-535c72b088b8", "sighting--95e19331-a919-4ca6-bed6-75fa24256faf", "sighting--d272f191-f6de-40a8-837f-4b0f52e419fd", "sighting--94c4d664-c20a-4630-8b82-6057e5fdf4fc", "sighting--5317d3be-1273-4fc7-9daf-d027ffbcec18", "sighting--44ccac55-f21c-434f-8377-21776b7d9e40", "sighting--8428653c-c368-466c-b2c2-29e2e81d6b3b", "sighting--f70e382b-2b47-4b55-9479-c1e82946259c", "sighting--8f59d89e-5db0-4ad9-ab80-ba9d9f2ccf67", "sighting--41bb1955-2d19-4a67-ac1b-d3c8a9783992", "sighting--e17ea09f-6bf3-429d-afc4-96f9a814d951", "sighting--f77c4f26-cb7f-4cf2-a6ef-026d965196c8", "sighting--0b6be21c-d49b-4198-bc75-4c2293b9e9ae", "sighting--6a7214b1-cede-4f82-8b3a-2335153d3c01", "sighting--f9e7bfad-2f68-455b-97a3-5a49d07c3746", "sighting--8cfd865c-95c4-4189-b3e5-4cae6ac05b92", "sighting--736db33d-4bfe-4025-988e-13fa2a42ae15", "sighting--379cb01b-61c7-4b8a-965f-fe84cb8ea077", "sighting--c1b409aa-f1c0-457d-8b78-b2c6cf5b3a11", "sighting--154ba927-bc00-4576-9c6e-e8f4d28f7bb3", "sighting--eb32fbf1-f69d-4991-be8b-b5a0c7ca0280", "sighting--555d809f-4f27-4b8d-9b50-35cdb456e898", "sighting--6607144f-d326-4c93-b747-21ac39c1c048", "sighting--42ccd05d-e0d1-447b-8401-11d76979d3c4", "sighting--6b9366c6-afcc-4218-b629-5de6bbc2a495", "sighting--9ab5bb69-4d01-48c0-8561-bec4828fe2e6", "sighting--7b897dd5-f6c8-4062-8a71-77cfa2a6c797", "sighting--eaf06227-43db-4f27-bdc9-3763272bc2b5", "sighting--18957179-63d1-4318-8acd-bb46f7a3c045", "sighting--31fc30b3-6c11-415c-99c6-8f7a9008ff18", "sighting--e5885c8c-133c-4804-8fd8-57167183fe85", "sighting--6616e88e-7dd6-43c4-9f4b-f4db19970bd7", "sighting--1be7dd27-e6eb-4dbe-a871-34515ba8e323", "sighting--d5d1d0ca-d9c6-43b2-a39d-dbb14c44670e", "sighting--2520a3ed-1b37-4558-a9dc-ce57cc05466c", "sighting--c56aa517-0d3a-4e70-abd1-6b94120a74a0", "sighting--7800da1d-e1c6-4c59-981e-ae437a815bdb", "sighting--d95d2964-1102-4ee9-b2a9-8950368dcdd1", "sighting--ed1da43a-fd92-45eb-b665-201b7a9793ff", "sighting--7ab8994b-aa0c-4a72-8a21-79f00e456ec0", "sighting--b048d690-5fe2-47ea-a010-bc2094938759", "sighting--b63f713e-630d-4cfa-889a-b877205f0387", "sighting--008442c0-a0bc-450a-8ea4-c7a837a9ada5", "sighting--cd3e5203-b855-4a45-8345-10b82d688e53", "sighting--e1770ed5-8457-4bc9-a40b-76511631473e", "sighting--87f9c516-447e-4c88-bf01-9823096d1b12", "sighting--b01b587f-b098-47a4-9fd8-a942b0fa7dec", "sighting--c5362e1f-de02-43a8-a6ac-07a7b825698b", "sighting--930bc4f2-e532-4fc3-9c9f-9a96dafc8723", "sighting--37d41f53-64cf-4a06-8f20-3a758e4318ba", "sighting--95d7d534-6eca-4f56-bc85-cc58765dbd6f", "sighting--d45c793c-76c6-497b-b7ad-028cfb23c81b", "sighting--22eccfd8-b77c-45c0-9f76-f86b016c217c", "sighting--40cebb7a-ba3f-4b35-a1b4-e941ec591624", "sighting--86ca24b9-669f-4351-9831-8387605c52a2", "sighting--1f8fbac3-bd19-4aef-9078-70603034b7d0", "sighting--605e91fa-4580-4e88-bdd1-395bfecace3a", "sighting--3b3d5613-019d-4b68-ad94-aeee8e7a7e4b", "sighting--eac6685a-1cd1-4560-abca-49a117bee7d0", "sighting--70b891af-74e7-4aa5-b9cd-b0695472ba77", "sighting--7bb21e30-5e6a-4100-8be8-b9d50aa42c55", "sighting--7575e13a-12a6-42ec-8985-3ab03d7d3b60", "sighting--e1a686b2-5853-476a-a74f-bd4661611591", "sighting--f08e33c0-516a-4301-837d-b82d137c27e8", "sighting--c3a2901e-1b35-4261-8847-1a772983e249", "sighting--1d977496-ac4c-4120-9d4b-2c71674418d0", "sighting--3ee8254e-1959-42dc-828f-2701cc07c5d3", "sighting--e59220c0-42ec-43d6-8af8-16f9ff89b746", "sighting--da8e0d47-7e96-4e54-a2af-4e6608902011", "sighting--c892fa66-da62-49db-9b43-41f84a5968c1", "sighting--d7545a5b-c9ea-450c-8272-39083bdc549f", "sighting--0963ed79-7c5f-4cf0-9df2-beb3d49afb14", "sighting--c0b3a3c4-2623-401d-9b9a-a1b342a1ceda", "sighting--7c53ad5a-7377-411c-9d25-69209c9c5562", "sighting--642e2a63-9eee-4156-99f0-e850d5805717", "sighting--0e04e925-1453-4b17-b76f-f8b072d330cf", "sighting--c31c3048-e51e-4f9c-91d5-14a8407f0740", "sighting--ab94abc4-b697-4157-9f2e-414b46c820c4", "sighting--0b848464-9765-48c9-b4ee-cf6905cc5178", "sighting--77a53566-9ff9-4702-9d9d-f312d2787bec", "sighting--cb7c9be8-5c4d-42ea-8001-3af32c3e3c37", "sighting--24fbcd00-01fd-4224-8a0f-1be55d9caa3c", "sighting--1f20770b-ace8-4c6e-acab-618459922b66", "sighting--a52af5b5-4fd4-41f3-a6ce-9d8bb6424f27", "sighting--3cbc8442-42b4-4f54-8452-287a5247202d", "sighting--559fd17e-8f3d-4b85-aa03-d03949b7cbc5", "sighting--035a6333-4002-4205-b179-fe109b5230d2", "sighting--bebc7662-4595-4592-bb85-736c8323dc7e", "sighting--3958d6cd-3ab2-43dc-ac46-c69f63777231", "sighting--cfc15e08-73e1-4dd4-b24d-17f6f40e2dd0", "sighting--1ec356e9-df04-4132-9c18-5686021d11f8", "sighting--47ccd0b9-31c0-42e5-97b0-2a06619d9e26", "sighting--dc7ef69e-4e59-4f06-a7a8-0051ada492f2", "sighting--a39d5524-3c38-47b5-84a6-5e09eb6be2e3", "sighting--27debfda-3c0a-4439-bc1d-bb3961af0c82", "sighting--708ae431-65b1-452c-ac0d-a81fb1eb5b46", "sighting--5b6301a6-a8cc-4cef-9650-1110b0dc5cec", "sighting--9162e495-290e-4adb-b5b3-198634078f3f", "sighting--4ad647b8-a120-4927-bebb-9b29cd524c5f", "sighting--f6cd58d2-e243-4f80-95c8-6cb2ba5247fc", "sighting--f0cd6ecb-584d-488f-b1db-24f6f54c72d9", "sighting--5950f953-a396-4d7d-bc17-9bbaa948be2b", "sighting--2cf6ff29-db2f-4803-bc55-de7cc3dd4156", "sighting--bb1bbec1-6b79-4295-aced-ccc2d54ef81e", "sighting--c1793600-75c8-43d0-af53-66b4c8e5923a", "sighting--896e1708-03e7-4853-90f9-51f8f22717e9", "sighting--5552164f-a2f3-488c-b684-8b062045143e", "sighting--23a3eb61-9fad-4053-b25f-6a05b24cd0fb", "sighting--884765a4-f71a-4262-aeb1-fdf450459b28", "sighting--ce8f18fb-13a2-4668-9ce4-70442563a490", "sighting--f36d7710-e604-4157-aa78-dbbe09b4f2e4", "sighting--b9f7a35f-235f-47f5-949b-cc1882e00d2f", "sighting--1ea66467-e9bf-4f49-9ba9-0d3d184ff56f", "sighting--862f47c2-2062-4e5c-a5c1-578f312d68e2", "sighting--fd1d6724-3ee1-4f82-99f7-8888d640180b", "sighting--d00fb24c-f187-4930-88a1-0cd7bf0d0ecc", "sighting--04b15b27-a9bd-4def-a564-d16ddc14daef", "sighting--41970ed1-fdc6-4d48-a0bd-acee2018e46b", "sighting--7aa00ca3-9fac-42c0-86a0-7de12462e12d", "sighting--ed185ca1-5a7f-446c-99b6-a80da73aaf75", "sighting--4d189dd0-3c04-4751-96ce-ff09f70cdf4a", "sighting--80f36069-de83-4e76-940c-858fe4001f48", "sighting--eb85569a-e354-496c-8c6d-d378bae099de", "sighting--83abf68d-edc0-47f7-bf90-5e1ef6e13afe", "sighting--3c04e9c5-41f2-4d38-ac2e-3ea25a689421", "sighting--35b4c0dd-1be9-4a22-8508-24326356056e", "sighting--3d1304cb-cdb1-4485-ac22-a653cdc5ee2b", "sighting--a8e224f9-14f3-4663-973d-c8dc0a31d071", "sighting--a52397fb-9395-4237-8bb3-2717c7c7a931", "sighting--fda9b84a-414b-4c57-b368-a0533a0f8ec8", "sighting--baa05d98-57a4-47fa-bf2a-a014c70ffef8", "sighting--534bc708-4650-49a2-b18a-2fa1d4e37a1f", "sighting--30d23f4e-5db8-4a2d-a432-e3d345fb24ef", "sighting--42b2b543-ed73-4369-acc5-90a13eae2cab", "sighting--5f7bb0fb-4c4a-49b7-941d-ef78953d0397", "sighting--60576e29-469b-4975-88fd-773cd06ea887", "sighting--d2512499-f93a-4b95-9bbe-53a24e67c2d0", "sighting--6d7d7d4a-7a75-47f2-9d09-a5df1b77cbec", "sighting--acb7f8e0-9dce-4349-a09d-441f5c52bad7", "sighting--2ce50b9a-8b5e-4b1c-877d-91aa2e66c37d", "sighting--a7470082-abdb-4138-9acd-b01140bb3965", "sighting--c860d155-b98f-4755-8d3f-d7917e90b58f", "sighting--304c169e-3589-4e31-907d-d612c9bd0f21", "sighting--7135e5be-1c56-45cc-9a73-c4b4f6f32922", "sighting--cb10c58d-90e3-489b-8371-e75c1f155589", "sighting--cc512199-c903-4513-9d1f-5ffcc90fc8ad", "sighting--cba269a2-23aa-4dfd-aa3e-3396c63fe1eb", "sighting--cefea6d4-42f8-4cdf-ba74-1a9f6985717d", "sighting--2dfe499b-e6e5-4f54-b20a-ef6aa56c0910", "sighting--e918fb6d-0509-4c1d-a9db-997e733076fc", "sighting--ec4bd8d9-c982-4bcb-b6c6-f4813cc1d358", "sighting--f107c6a7-2d61-449f-b5c2-10d3ed4aa7cf", "sighting--55ccff0a-90ad-4839-a53e-bddac6502a48", "sighting--6f3f7a36-447e-44a6-b4fb-14a26869a4ee", "sighting--3e9bd195-087b-48b7-af3e-2196cae72eba", "sighting--1a188b82-5159-4598-91dc-055b1d81ba8c", "sighting--eb17e43b-b829-444a-9cad-240d83db8af2", "sighting--b4b70cc0-00a4-4869-abc6-779dd58293de", "sighting--70b1b16d-b3e9-4543-a246-7efec4e7bd4e", "sighting--319f61b7-abbf-42dd-9190-9b9c75ded3d2", "sighting--ea6a116c-286e-4429-89b2-6cf57c21977a", "sighting--19767767-d339-4834-a4e7-ce17455247d3", "sighting--af20a72a-6d92-4058-bd88-117d9bd27e79", "sighting--49d05adb-6473-4567-b06a-794dcb92693f", "sighting--0dce8863-4917-4250-821b-73102273b2a6", "sighting--6b7170c2-1f16-4fb7-ae84-0f3e21ba45df", "sighting--c9955df0-22aa-4eaf-9ca0-81fe85ea5622", "sighting--87dbc10a-095a-4dac-a450-90da71ae87e6", "sighting--5a9343ee-220b-4e16-920c-515ce3a71a08", "sighting--5cbb4db4-8f92-438d-af57-0e32cd768d99", "sighting--43f2025b-7daa-48b3-ac44-607355acb176", "sighting--e04f87fe-5995-47fd-863d-dacd570f1e24", "sighting--c09d7f39-aa3f-4137-b1df-b4a40a822797", "sighting--2e7c288e-da20-4565-80a0-5959a1d47a00", "sighting--e011c455-5a45-43f3-91df-a931579c83f9", "sighting--762cd627-66d1-4544-8e38-333981eaae57", "sighting--6ca558a4-a143-4f41-af9f-73823ce0d2d4", "sighting--7930d534-21fa-4b39-8c79-d99a7ab302b8", "sighting--7f2f72b8-1fe5-41ba-bc38-feed2956f191", "sighting--786683d9-9737-47d8-a2f5-1bb8d3c4d28b", "sighting--56e234f2-b52d-4f61-bbb0-202066456e1f", "sighting--5f9bce90-87f2-41a8-8c4e-13864a7db8d9", "sighting--9c47e813-3937-499a-b784-7939822d308c", "sighting--29dc0a3f-0f57-486a-b421-ed3a4ca1f4a4", "sighting--06cf04e5-fa01-4582-9f58-6e87593c2705", "sighting--779babee-2c22-42a1-8440-e6328f6ddc3b", "sighting--e9f5619f-0ff6-4841-b129-51eefcb2f5ad", "sighting--4b6f7e8d-6293-4fba-83b9-da844285269c", "sighting--f30d28a7-581b-4db7-88d1-b4946363b9f7", "sighting--c750f503-144a-4dbe-bae5-8d7ff5696c8f", "sighting--c4f7e96c-6445-4abd-b426-7e02b60b5524", "sighting--fb7fd76e-1ee4-4644-b141-db2d1a468796", "sighting--2f9c4236-e304-4594-8ebb-4b644f1b626a", "sighting--ad76e7a9-dcb1-4769-b35b-a9f5472b5514", "sighting--c0fb0305-ff4e-45cb-a408-bdb5e9631bb8", "sighting--e20b5544-2670-4568-bb08-80caacb93925", "sighting--b5b63c1c-ba17-410e-a140-203d95562492", "sighting--6420a87e-e25b-4176-a317-18ea65e51684", "sighting--7ff0ab1b-5854-4b74-8884-5eae087c4d72", "sighting--89d0678a-bba3-4d91-b2c1-4cf89250ffe9", "sighting--1fc19e23-516c-42db-97dd-e4f10d86afbd", "sighting--60c80ac3-e018-4ccb-93aa-9ecc605e289b", "sighting--c0426e20-75c6-45c7-9482-030a218a9d9e", "sighting--555e04e2-fffa-4009-ae5e-bb7dec7bc9d1", "sighting--545206cd-b5d6-4c0a-aa03-38f8ffdedf72", "sighting--25eb97ba-e2f9-41a6-b512-f9e291d5b6a6", "sighting--72dc4afd-b794-4ad5-b4dd-32b2aa279631", "sighting--60ed1b9a-ae33-4c9d-8c6e-bac2befb65ac", "sighting--02f7fa95-f3ef-4b9e-98b9-fb638f0bf213", "sighting--91a640b7-e854-4485-9254-ae7679ef84b1", "sighting--b011345e-7845-438d-8386-357b5bbe1fce", "sighting--3ec2e32d-f483-4f51-b61a-f6df294df829", "sighting--fef61a51-17b0-41ab-a186-c5e6410ad975", "sighting--9e90b9ea-ba1c-4b94-93fd-01b022182cc3", "sighting--6fd58761-bc2c-4858-8ec3-8d2294f947e0", "sighting--458b40f0-578e-40b5-b396-2e0107da1ba9", "sighting--b09e35d2-9f9d-4e66-8d35-6ee8ac7f3b49", "sighting--8a60f1ca-0dfa-4dd6-a7a4-2b407324b41f", "sighting--bca7f481-98d0-447c-abd9-4786aaa272b6", "sighting--aa86e7dc-3dc3-4540-9408-0a4d0647977c", "sighting--2eed8c77-3b34-4f3e-b5c2-09e0853ee7d0", "sighting--314e23d5-ef55-44bb-b0a4-5f3a6ec54dbc", "sighting--79682ed5-7030-4746-9785-d05296725846", "sighting--3a82d1ae-d4ff-4e91-ac7a-ac5b25a305e3", "sighting--e193353c-58f9-478a-b919-9e64fcab9f06", "sighting--3d8b19b2-0c26-45a3-8388-bf3396b4eb4b", "sighting--ac3988b2-5ac6-4513-ab80-6a8bbb28b260", "sighting--275cefbd-4c85-4a9b-b25c-5d2a94ddf811", "sighting--0fa5f798-21d9-4f13-947c-2515138cb2e4", "sighting--0ed3b999-b354-4510-b014-2d10911a7422", "sighting--0de5dc8c-2f9b-4490-af3b-eee85320fa99", "sighting--41cf663e-aa85-4db0-b18f-39d120a41a7d", "sighting--cedfedf1-46cb-4bb3-b56f-b69da1964bfe", "sighting--36ba3da8-0dec-4517-b0a4-5a82a018640e", "sighting--e6f33c87-4da2-471f-a37b-6fe480a533e9", "sighting--81891e80-6846-4432-9a59-6922be6f7d01", "sighting--0c06f305-826a-4063-8efc-51cbe42b6278", "sighting--da815e18-a9af-4094-a854-f6a8f456fc40", "sighting--6187073a-eab9-4c93-8062-afa67f3c4f9d", "sighting--e0527e6c-11fe-4deb-90b3-0c040b52c165", "sighting--6f942b65-1821-4fd8-9a8d-19eac695204f", "sighting--a3d239ca-ae82-447a-9dc5-8b1ac7f1385e", "sighting--d4258240-7524-41a7-ad44-321a4b8f6215", "sighting--18e63e74-1a1a-45ea-b5ae-b69be00b8231", "sighting--d5490e36-81fe-4158-ae85-d6ca9584344f", "sighting--dd1441fc-aaf0-4543-aebc-c3842013ab9f", "sighting--d268724e-31b4-4869-83d8-f71ca2f7a955", "sighting--fc2509a9-52ad-4866-b21a-6620bbc0bf4f", "sighting--5cd6f131-7c75-4c70-b97f-5154a78b67bf", "sighting--9fce3e0b-51a3-47be-9cbf-89073ee5cbb2", "sighting--77a1c85d-05f6-4b94-ad0b-783ed89b1ede", "sighting--1a356034-c820-49bf-a654-a12683d0ca48", "sighting--973464aa-32e7-40af-857b-5b47588cd909", "sighting--4cfe2c4c-0023-4b69-83eb-acf54f3b777e", "sighting--79e8abe1-c8ed-4838-8538-6183e207d1c0", "sighting--3afacfa0-d642-49a7-86f9-d8065fce1107", "sighting--9b7cffe5-f254-4043-b5fc-91e3a4c3a75a", "sighting--5e3ce72c-b997-4004-921e-71d132d53729", "sighting--00895c8c-69ae-4407-9b52-a80d9411cf9c", "sighting--f6c2dc7d-7796-44b2-8243-51858a5ddc56", "sighting--05904207-d6a1-4031-9205-3db65d867770", "sighting--1e98189e-6a64-4ab1-b126-651f8b9f3299", "sighting--02c0197c-3224-4151-82e3-9af832d33746", "sighting--240e4757-109a-4f4a-a22d-4533fc2dd830", "sighting--5c346213-8871-48c5-9092-353502bc6155", "sighting--cc51b631-2122-408f-890d-ffcc2b1ff068", "sighting--f9e89a69-0030-49b9-be95-8d1fb2d623d4", "sighting--a8610438-1f1f-4d05-b7c8-a351af328a58", "sighting--a88a64d2-4d63-481e-b577-61ff1507fec7", "sighting--fb411d2b-ea85-4760-8565-16116c1fcd07", "sighting--497d8576-01eb-4150-8111-6a75b68a46a3", "sighting--6f866f23-008c-4847-8bfd-ebe7225819ca", "sighting--a7535376-fa92-4563-8e9a-e1cc91170bdd", "sighting--ea82473f-72b5-4036-9dae-d842c464c89c", "sighting--b21f6a0d-025f-432c-b236-72f7cdc81338", "sighting--9bc254a7-3a66-4c11-b27d-c8ec1f74451f", "sighting--7e44742c-758f-430e-93b5-e1b940cdb9c7", "sighting--ccc8c99f-ba6e-4be7-b088-601c227c798f", "sighting--c54f4293-6e61-4a36-823d-2e40c6223ea2", "sighting--ac05bcbf-b8f1-4b92-be6e-d33114de3ea3", "sighting--678f0853-06e3-4314-9afd-f22b55836bc1", "sighting--1583d51c-e281-4676-bcc6-e3d8d039e615", "sighting--a096c04d-2e49-4034-8fe0-9fb578595dbd", "sighting--648bd71f-1a6c-491b-a5bb-b4b28da834fc", "sighting--08f0f102-4b1e-437c-86ec-f65b3a4c935b", "sighting--5610ba3c-b9eb-4722-a6f7-7dca8a77e45a", "sighting--f233f3a0-c0f5-4ba4-8786-4bced6ae8eec", "sighting--082ee029-fb68-4d32-b58f-f523d09436fa", "sighting--48dc8fbd-b01a-4d56-9f58-de1c76bf74c0", "sighting--3af3f9d7-7a71-4885-987f-3401c0c1a5bc", "sighting--62088bea-9420-49cd-86e3-dae03d15b82f", "sighting--9181df98-9817-402b-b998-a88c1cdafdc0", "sighting--dd7ee7d9-4e0d-45f7-b3e9-d3fb38fbafa7", "sighting--0574b529-529b-45af-b43d-6beab5a71457", "sighting--1173d3df-10be-4338-a14f-812d10a098e1", "sighting--b5004d28-87bf-484d-8057-c87bad261564", "sighting--009558f8-203d-43fb-9c7a-47440bf019c9", "sighting--ca48890a-58db-4851-b546-b7546e0e45e1", "sighting--42571bfb-ad69-4ccc-93d1-0437ff697784", "sighting--085216f2-fb41-4218-9a68-f8458a297bc4", "sighting--1a3cd907-752f-4e38-bd0d-09946c18c9c4", "sighting--da4b3a0f-306f-49d3-b7eb-31b02dcea8f6", "sighting--2c7864ce-ac33-41bd-9a99-46e395a991ec", "sighting--98aef01f-7e57-46ac-9c32-d9225e9c3223", "sighting--f82b4cd3-3015-4ad6-9c98-5ff113198021", "sighting--57c09474-5eda-4eab-b8ea-41786136cb98", "sighting--c077d349-cb3f-432f-b319-7c7794bc5011", "sighting--39957523-bafc-4e83-ba13-72edbae79b88", "sighting--3fde9d7e-93fd-4fdb-bac9-85138c803e7d", "sighting--a3b8d79a-3917-4ba1-a8d3-70844a0d1cda", "sighting--a038ea75-f93c-464d-9efd-f48c6b0afbb0", "sighting--b28bfcd6-174b-4fec-9c65-60318226d955", "sighting--d0668a29-aeb3-4a0f-be54-3107b37e34f6", "sighting--0f817a4d-57c3-4503-ac41-39a10b614a45", "sighting--b1f41a06-bac6-4743-9b91-97ea2327f6a8", "sighting--ef8f4c6f-fb25-434c-8daa-1d56c14fa080", "sighting--1b8619ce-734e-4ddd-b2b3-bad8360d82b6", "sighting--8d52ae35-58e3-4922-af15-3070e3ce0aac", "sighting--bd946471-dae5-4794-a065-cd647a0b4ba7", "sighting--e4f240e5-15a8-482f-a0ca-babcf4ac1d68", "sighting--cdd903b0-337c-442c-a6bf-1afb81c5bec5", "sighting--57ee46e3-15f1-479c-81b2-42497366f13d", "sighting--27f1200b-b854-4411-9e3b-6c841213b24d", "sighting--e5a4b1ad-116b-4695-9776-685d93738a5b", "sighting--4133f397-70ae-4581-a0f7-65d46394b3c4", "sighting--ba91fc0b-ac9c-4c8c-99b4-f221070ff066", "sighting--0827df76-9855-4cea-aa66-8451bf47bcdd", "sighting--c93fc99e-390e-485b-bf3f-7b2dc84f0355", "sighting--89b00373-8358-4fca-8938-19d746ba9d06", "sighting--6352ccb8-d694-4826-a7c1-90604d99ad05", "sighting--4077951f-b85e-4ae6-ab77-0da651f8e78b", "sighting--ae8ee39c-4d9f-4513-bcaf-54b95f27377f", "sighting--2d63c654-48f8-485c-b43f-b852e13225a8", "sighting--b585a0bb-3a4f-4899-a9b6-24356b66445d", "sighting--524b6dbd-787b-4863-b0ab-cbf04fd7d9b4", "sighting--dd8636d0-492d-4b83-9d4f-e077d09ad974", "sighting--cf573ac5-51e1-42e9-9c06-7a8d3f044877", "sighting--eb5cb6a9-7094-4edb-a22e-90bd12617664", "sighting--337d3eec-2351-4bc2-b591-53468f3622e9", "sighting--76307c15-8b57-4094-b56b-3e1480394619", "sighting--dc04d5a5-1166-4fa9-8dd1-dba082862244", "sighting--1d2a6dda-5e40-463d-871d-2aa746d6409d", "sighting--85bbe97a-0ef0-4598-8b26-6c50d17e1103", "sighting--4e997f4f-6024-48d4-9556-dc81733acdb2", "sighting--bf9d80eb-6041-4dd1-9ae2-6dbb0c799a6a", "sighting--2929acbe-96d0-438b-ad2e-6312449bdddd", "sighting--b922231b-188b-4a61-b7b8-d4b3be9eb291", "sighting--015036cc-f718-495a-a3f5-0b0ff1360910", "sighting--a71fc5a7-7cca-4679-9d5b-3148d5191aee", "sighting--765d8077-7f50-48eb-a0f0-24f1ec29de22", "sighting--c03cace8-cf1c-4204-b98e-35fd98d0668f", "sighting--d8e1ec7e-d1f5-486b-b062-a57b4e629d6c", "sighting--0cf1034a-65e9-4060-8e49-b68830a8050b", "sighting--7796b40e-e127-48b5-8d81-e674b65a9870", "sighting--0ca9de9c-4139-44e9-bcf1-bd8cec12c946", "sighting--cc31422a-6197-45ff-828a-7c46e69d1f36", "sighting--b0ff7107-ae28-4276-8cbd-8987168ec3a6", "sighting--53c54727-2996-44a8-853b-e441e311ffd2", "sighting--737468ca-e71d-4a90-8826-bb96a1edf17b", "sighting--ca7050e8-a184-413b-8077-0d782bd7bb2f", "sighting--0856f08f-c748-4bb3-910a-0e38528c72c0", "sighting--b3c2eb59-ef7e-4811-adb6-771949184cd7", "sighting--d83441ff-cb03-4380-9c10-805a69e7a590", "sighting--3ed07aec-18f5-44cd-a82f-26bcda88ec96", "sighting--9cea6000-12ae-414d-bb6d-17912144cae1", "sighting--e5b81777-8d7e-4424-ad03-43848a64dc4a", "sighting--faeea490-7980-4fce-a47c-7b1bcf60f597", "sighting--23999ab1-d86d-45cb-afb4-8bfdbd76647c", "sighting--37c109ac-bfae-426a-92a4-541a7f66a268", "sighting--b8ff39df-8050-4221-bdf2-0d618c1938b4", "sighting--5f147b5c-bcc8-46c6-90f1-5e532503eaaf", "sighting--1992281a-46dd-4ac4-8eeb-cb41e99bd407", "sighting--4fb03ab6-0d8b-4473-87ed-425f3d2df66b", "sighting--60cc4b62-093e-4a01-bfd7-eda8a0b6fd08", "sighting--d20ed2da-0354-4888-8446-6126fef28945", "sighting--7749d27f-939a-4c45-8541-3e43954f523b", "sighting--b93e09f2-dd44-4a86-9084-476e7cfe749b", "sighting--c56fc92a-ae42-494b-a54a-f8fb4777a0b2", "sighting--5f0689f6-f45f-4528-affe-71beddccc3ac", "sighting--252d2cae-ad5d-4166-9daa-e6b811b36ec3", "sighting--8038d7f1-8af2-4dcb-bdc8-fd9f0bab65be", "sighting--47f4d4be-300a-4298-b75c-9e308c19d9ee", "sighting--ef807107-f593-4868-898d-32209621a1d1", "sighting--77b35255-470e-4a80-9dda-ba2cba433c45", "sighting--a5305fa3-c84c-4039-af61-e7f943f09966", "sighting--52afb6ab-753e-4238-bf6b-55deaaa5c0a9", "sighting--cdd78b94-d7c3-4060-84a9-61bc8edf9148", "sighting--5a9661b1-ffde-4341-b869-eb8bcf3224a9", "sighting--95396aa3-081b-46a6-b377-1628d418eaa4", "sighting--44d9502a-5806-4c08-a40f-96456b928bad", "sighting--d55b981e-f2c8-4cb0-84e5-763616668ce7", "sighting--b1b8cc07-9507-40f8-acb1-72408318aa12", "sighting--338719ab-96b4-4b83-8f5d-fbe3df51878e", "sighting--bb1602eb-b2ba-43ea-83cd-ed2aeb857794", "sighting--7c513fc2-ab30-4420-beb9-c711f228533a", "sighting--4996407b-4662-4e1e-b8bb-4eadd4ea3282", "sighting--0da2f0b1-e52c-4240-9151-1b59198d89d4", "sighting--e4820311-708b-4c18-b548-1af7dfbeedaa", "sighting--94ce85c7-c9a4-4bff-8de4-2943d912fa6e", "sighting--09d1c6e9-e21c-449e-95a2-c76196d5b516", "sighting--d1746a99-f145-4802-abe0-f86f8902478f", "sighting--a599914c-4719-4955-9bbf-b22ee1ac6334", "sighting--302c70fb-7978-4da5-abfd-4c6ee79567a6", "sighting--d17ce8fe-1ba5-4cf5-b11c-db0727bad38b", "sighting--31fee9f4-ebc3-4f01-9725-767954fe3059", "sighting--c5835f27-5352-41d9-8110-4e1401540518", "sighting--f585d519-10d3-4114-bf2b-ae4f17776fc2", "sighting--ce76ddf6-9b67-4218-bf1a-f632a16f699e", "sighting--941d0d3c-2f57-4c8e-897e-ba0ace7f88fe", "sighting--2e24fea5-e77d-46f5-bd55-e9ce6229697a", "sighting--99d1bd5b-3658-4ec8-8868-e9095aa3a11c", "sighting--5ec0322c-9b5c-4ecd-b880-0ea101062f23", "sighting--0a9f8746-03b6-4909-b388-e08d511d1575", "sighting--83e10e62-1252-4a58-9f07-1a24b9448f61", "sighting--16e2af4b-07f4-4985-9aa6-d7317ef946d5", "sighting--02fe6c6d-1494-42d1-97b2-f4a45da61b3d", "sighting--76a157dd-c5f9-4339-a83e-f61750333681", "sighting--7b9e47b5-8efa-447e-b704-02ef9443b156", "sighting--8a5c792d-0ec8-418c-bcc4-bade6aa35aba", "sighting--797cddbd-e69e-40f3-b64d-5c1986a8546c", "sighting--3e9f4ac6-3f8c-4303-9d54-8a79c005b8dc", "sighting--64b09896-3e9a-4d7e-8e39-2db9508e1512", "sighting--3238ed30-4418-4a1e-95a0-de1046a68672", "sighting--8cdfcc4b-ef8a-4e94-920c-7333326dadf4", "sighting--b6fa4494-57b4-4495-9476-0c26b56d4051", "sighting--85b1d5eb-e084-458a-9429-40c0ab463cc2", "sighting--a28e19c9-8c07-4301-aee8-accda00f4b94", "sighting--b609bcd0-d8c8-4e91-86ed-f4e57de31ba9", "sighting--ce9400b6-8d77-430d-bc04-ba4ca24300a3", "sighting--2ab9c187-9b56-4d8d-a6ff-cb2dcc74ee3a", "sighting--ec8c04e8-c439-446b-bc16-780ac6131cb7", "sighting--d0a5a910-4a2b-454e-9fe6-a945aff91349", "sighting--067ff6be-e964-4586-a580-6d4dbab230ce", "sighting--29d0c88f-925e-4001-94e3-ea2265d69042", "sighting--b899c3b0-ae86-434d-a196-490cda2612de", "sighting--22e70562-4e38-4e86-94a4-bf82168db642", "sighting--198e77bb-f013-49c6-8637-f3736adf76f0", "sighting--dcec7dd1-b5b8-4952-8fdb-16a0198c32e4", "sighting--ed33da01-4683-41bc-841f-4e64b596bb9c", "sighting--22b94d1a-5cea-4f23-8b70-3fce870f5fa4", "sighting--3aca455a-0d89-4a6a-945a-077f8c33b573", "sighting--22e3ed70-76d4-4dee-bb9a-8ea21e947449", "sighting--deff949a-0c21-4496-9e34-7d20149f8390", "sighting--9b4a6293-307f-4d6e-a6c3-da6f834fe871", "sighting--b014047e-c88d-4023-8da3-6e28c201b0ab", "sighting--2f214bda-1b1b-4be9-9f8c-4578a29dfd2c", "sighting--116cfabe-2c2d-471d-b0f1-eba87cc8bffa", "sighting--d289371c-0360-4db6-ac5b-2ecbce8388b1", "sighting--a614a1f5-fc0b-4124-976a-2755b3b49cea", "sighting--960427e1-e904-4822-96ab-4feb7f2a5dec", "sighting--39957f64-16d0-42de-bd50-b95497734438", "sighting--06c64863-7108-4e05-8a52-998470c45930", "sighting--e9bd8ccf-7240-4029-8a26-9ff5d1f6b095", "sighting--abe6a580-840e-45b8-8ee5-3297a9e83a5b", "sighting--1a6f64c7-396d-447e-ba16-d899148c27fd", "sighting--cdfa149b-659d-4d36-9fdc-1648d2a10b90", "sighting--07098329-8945-4ac8-9969-de478878bf7d", "sighting--a2d41bc3-bd01-4e06-a57f-1601b8666ffa", "sighting--55862651-8138-4715-a736-a6b043574d9b", "sighting--a547e564-dcb5-4e28-a5ff-b57182cb3616", "sighting--d19dc83a-2c3e-4e58-950e-164731bdf70a", "sighting--5b16056f-273c-44c3-9df3-623a84d3c144", "sighting--1a51ac03-219d-4932-8b0d-2e4ee8b8f373", "sighting--0ea354fd-3249-48fb-ae53-aab070335432", "sighting--f86f1b1e-574c-44db-ae4b-f78dae7742f1", "sighting--51eeb102-0824-49b4-b28a-dd2a397ac532", "sighting--76e90d68-57a9-466e-a87c-3571f5cdf717", "sighting--3249cbad-b826-4126-9267-d2fbb3b896d5", "sighting--36e4468f-c78d-4fcc-99e9-093ab7cb57ab", "sighting--1518e72c-1059-4bde-a584-82ca2cefa0f4", "sighting--bd70da56-5a8e-4e4c-9ddf-1a586997876c", "sighting--cd8c61f6-d71c-459c-959f-7aba6122fac0", "sighting--8df88eb9-ce14-4ddc-81ba-498b278633d2", "sighting--67d3abc4-1bcc-4644-b67c-84e0c2f57b69", "sighting--c355f21f-bc83-44fb-a92b-7317fdebd529", "sighting--964661d2-198e-4ca5-85c0-623973b1c82c", "sighting--9c2ea602-1066-4083-bb3f-4a11798fbfdd", "sighting--f46f8f58-7ab1-44b4-91f8-be9563220bbe", "sighting--4b2bafd4-e3c4-462c-a815-f7e0afcaa382", "sighting--f93fde0c-1b41-4534-9f69-0dcab93addc0", "sighting--3bf9806f-f24b-4cbb-bc6f-d898f04381e2", "sighting--fb0d5e51-811d-4802-91fa-14ee4d288022", "sighting--30471d2c-9c7d-46b3-8d3e-befe9cdeb429", "sighting--0798a27d-192b-451d-83f8-bb73a215b64b", "sighting--a81b462c-522b-4a22-959b-1365a2c50a38", "sighting--c0edbdf8-df13-433b-b2d4-28f0276cdcb7", "sighting--2a663708-03af-403a-8726-679100db0c38", "sighting--4c890524-71d2-423b-b481-c3e5451611db", "sighting--a565814a-eb6a-448c-b1bd-827ea69dec6d", "sighting--4c378ece-0875-4fba-9356-6a0ce6fd6b7e", "sighting--40d3ea03-2e72-41ec-8f71-9f8f5e96f6d6", "sighting--faf3285b-0160-4a42-9fe8-17141a548a0f", "sighting--394d5673-baa5-499f-b0cc-d5a1ffda1cd3", "sighting--96b9654f-b6b7-4277-8ea4-282be2090e19", "sighting--5d678fdf-d33b-4663-8c96-51795f9ed176", "sighting--ed5eb12a-d272-45ed-87d8-d7b28c15de2f", "sighting--eda366b7-b3a3-48eb-bdd2-31696871a4d7", "sighting--7a4f65ec-1cd7-40dd-9ec8-ce51c72fd0a0", "sighting--4340781c-c5d5-464a-8729-d61f0e893e23", "sighting--5552e47f-2e6d-4be7-b63b-b0e49027a693", "sighting--5389aef4-c467-4b34-8c1d-5d64c865e2ff", "sighting--234c03ed-e162-48ea-b15c-b7bea7cc6112", "sighting--c670e8ef-eab2-4a6f-9618-de79775db1d2", "sighting--86a072d5-0369-447a-8cc5-463904ed7374", "sighting--a27dd02e-b531-4ea2-90ff-0472492b4208", "sighting--3727be2e-33d7-448c-8aab-11f820e3d8e9", "sighting--49697fbc-fab4-49cc-a59f-7d32729f1fdc", "sighting--7974cb29-8640-40f5-8658-831d83e3907f", "sighting--0b6fbce1-01ee-44ce-a32a-4c331900457b", "sighting--e11d3aa5-4e6a-4e77-b3c2-4df1b473c4a3", "sighting--a1e0d38f-f78c-495b-91ba-049d4f9e9a00", "sighting--82ca9bb4-3a8f-4ae0-b4e6-35cb1b89a903", "sighting--fde9cc74-8b98-4799-8881-f4895e3e67d6", "sighting--20e6be67-0193-4b95-b843-e891f586668e", "sighting--a2cf7906-d097-497a-9e24-b5f32f629fd6", "sighting--e2df3457-96f7-4641-8d1b-05ba79fb8170", "sighting--9c8c7e68-4c0c-4c93-8ed6-40ed5ee440bd", "sighting--0fa58e04-3111-42fd-a03d-fcb7c3d7186a", "sighting--76757291-b31d-4505-8220-89988d5a0f19", "sighting--c2c1f01b-89bd-41fe-bd08-26cbcd7b0c23", "sighting--d147bf17-df29-4e1e-9634-e3e9cd695d02", "sighting--a0ccd25c-ad44-4dd5-8ca6-9eacbe670eeb", "sighting--4cbf84e9-c6aa-4c25-8b16-e7c2e09419e8", "sighting--2991ab42-0804-4f0c-8727-c4c8f53ee382", "sighting--337d01af-6f7a-408c-8183-fce0e3b54381", "sighting--bec216fb-e484-4556-b38b-bf2d52eef404", "sighting--d427ba52-2ff3-4de5-b9a9-bf91045931c5", "sighting--11a1a34f-5d79-454d-9efb-4c41f826b177", "sighting--ff4044bc-052b-4568-be29-7a94753ca067", "sighting--ee63fa87-c44f-4448-b3a5-8fd5f58ce4c7", "sighting--bdd614ba-72df-4cde-b29f-7618a57f3074", "sighting--1e39e1d0-5cdc-4b72-8404-24015b03b7ad", "sighting--7dccc8e6-5eb2-4bf0-864e-d9e02ead4ae0", "sighting--fc130b0a-7e30-4110-8005-6e92da181f6d", "sighting--4d0831cd-7f86-4c59-96e8-4f16b96ef2d1", "sighting--f8a82225-1ead-493f-a7db-1b672548fb5f", "sighting--f95fe7a7-b233-46ac-b631-f8d41f96de5a", "sighting--ea119db7-5ede-4ccf-ab8e-67dd9bcf7814", "sighting--9fee7dbb-2eb5-4cf3-b39c-d010d7254bbf", "sighting--9254574c-c8b7-4ea1-84c3-fb789116aa35", "sighting--0b509789-d333-4c0f-bc1d-621604401d74", "sighting--78da18b4-d483-401a-ac94-e1ae7cb90aa4", "sighting--6573cac7-1c4a-4fc4-9213-7ffd67e9f017", "sighting--e090f37f-6e64-43c5-ba8b-d0f6e1821578", "sighting--3e0f03de-6523-4cac-a150-e56e62c72370", "sighting--33ec98a4-72f3-4f1c-b397-fd4b15841277", "sighting--2c53ba9d-0946-48b6-90ea-3b839a7e5338", "sighting--9cceb917-d5fe-425f-903d-36bae3007356", "sighting--abd8b809-2010-4c9a-a5fd-54a5ff89aa9d", "sighting--fcde76a8-42f7-4fd2-b0e4-b98bbb698a2c", "sighting--70af7c52-075d-41d0-8ed6-2e45264c41de", "sighting--a7c7a223-e43a-47b1-9aec-a09efeb4d56e", "sighting--5467f621-ecb0-4b7a-a4d4-f92f3dace06d", "sighting--822e0ae0-5520-4efd-bd69-65837e34828b", "sighting--191fa9b2-c366-48a6-af52-7461aea6c875", "sighting--aaf1680b-52b7-4486-92aa-de87ec97311f", "sighting--262eca84-f1a2-41c7-80d9-b65a654a66e5", "sighting--2871e24c-5f91-4b2d-87fa-d1659f97d7f3", "sighting--16111ee1-d8d4-47e1-bd46-44a08de09dfc", "sighting--85e3e735-9fea-4d7b-a8dd-43a9e1ed2f2a", "sighting--fc21e1db-7125-418b-a65a-653629e0f788", "sighting--40613779-9ba1-464d-981a-8125d91cc2f9", "sighting--9f9cf390-8874-4276-abbe-7cb9fe2ba9bb", "sighting--380e7198-2110-46db-a64f-3274f2456ebb", "sighting--c4c7b1d2-3b48-44b3-a198-b568a7f0ccb5", "sighting--6b016d00-8b8d-47e8-95ab-ef9f02a60823", "sighting--c20ade81-6322-438e-8c27-77c110c879cb", "sighting--d01d0b58-8ad8-4e8d-9e43-01e0e0d11849", "sighting--a8dc566d-dbcf-4e61-b91f-6b8475f3a283", "sighting--c297b825-98df-45a1-8fca-4391a94261ff", "sighting--f8917646-c601-43e8-bc18-24cbefa9c838", "sighting--abb581b7-1db4-4842-a8b8-fe7ec1d14be1", "sighting--81224c4b-6ed8-47d4-88a4-23bd18b7a1b1", "sighting--4842ba66-03cf-4013-90cb-9c96709999af", "sighting--cbbd1dff-758f-4444-834e-faf5ee69d661", "sighting--c8e94629-aac7-4acb-9698-4d24af1700ea", "sighting--c6529924-c769-44a2-82ec-6b68a3407437", "sighting--890fd4b4-c270-4769-ac40-0b16bc12a853", "sighting--90b0c97f-ca63-454f-9ce3-1010e838648a", "sighting--bff1b488-79d8-4b8a-8a12-7648ce0953c0", "sighting--76cdb048-9662-4ae6-b804-a38004fbfc8e", "sighting--155509f1-7c55-4b9b-b320-b77bf82cf1e9", "sighting--d79c6e3b-d796-4055-9858-6ac4a34a8e72", "sighting--6a7b5920-354f-42f6-818a-2a4411fbc9e8", "sighting--1d5b97dd-8186-4039-91d9-4921defc3892", "sighting--7ad85409-a1fe-471c-a4dd-da717f720cf3", "sighting--5fac115d-386c-490c-8fa2-80a38cfc2fe0", "sighting--c5ca2b87-9aa4-460c-9ad2-0ec2608046b3", "sighting--fcb515d0-6728-4ffb-8962-54e01e889caf", "sighting--0225603b-c169-42ba-81aa-ee6b9a496445", "sighting--72a20c3a-c001-447b-8e85-8c5be6d1eb61", "sighting--f3dee86b-61f5-453d-b56d-590fcac6bdb1", "sighting--5d73bc35-ed8e-46de-82cf-c2f5f2e6baec", "sighting--e01b4c48-8b7c-49d0-9c40-1633d4a0165e", "sighting--70d2e3fa-db33-46db-8a56-1b654a449a75", "sighting--a4c67831-6435-40b8-a870-e0a95b3c074c", "sighting--2accf83e-bf0b-44f4-a077-bc71722a055a", "sighting--f659747b-555d-4348-8dae-464cb08815f5", "sighting--badb7ef9-9cb3-4673-bb7b-5560e7c70e4d", "sighting--b6da7a40-623d-4015-9460-b212121befa6", "sighting--0132409d-c7b8-47aa-9512-f4b4d425cd13", "sighting--5d2a7a67-c116-4ac1-b368-369d75b55bf6", "sighting--212b8eb4-53e2-43d9-a38f-b923be0b6565", "sighting--80244d8a-ed0e-4d0e-8ef9-eb945f5b3f73", "sighting--d5fd096a-2944-4ec9-9208-3fe6a7e17f5a", "sighting--6ad2f15f-dd13-4822-a6f7-129e17c17b57", "sighting--8421bc13-5165-4f2f-9113-3fcd0ff86c34", "sighting--ba8eafb7-de77-4fd8-ae45-bf5abd76bce3", "sighting--2fa19b83-1fc0-4633-8194-eace620c34f7", "sighting--cd471972-6f6f-4d1c-b471-477077740c80", "sighting--ce57c7f9-ca60-44ae-b30a-34ca52257d06", "sighting--6ac0444a-36c1-4bde-b8ff-96875b32040b", "sighting--fb028f5b-d2e9-461f-946e-85f895c5bbe5", "sighting--59123456-16fd-4669-9205-8a69e747163b", "sighting--d2280ec1-22f3-4bb3-8c9e-6f2bbd14e642", "sighting--de32190c-5d45-4de0-be7a-30503f587b48", "sighting--6d8b931c-44c0-4fa8-b4d5-5f484b65a2dd", "sighting--ba687efd-77e0-4e72-b470-fcab3a9e3737", "sighting--17564e5f-ddaa-4cfd-aa86-96d63a256101", "sighting--c52a4667-ecea-4450-9665-42f0c67d8a7f", "sighting--c55096ac-9bef-4328-bac8-9aa39db55e19", "sighting--e16d8856-8e5d-4f59-a134-994e9d086830", "sighting--3346850d-899c-4e4e-8ecc-0d26d50496c1", "sighting--8fab06f8-4f6d-4b42-ba70-58905bc14bcd", "sighting--b5bbe9b9-b8e0-4708-9d54-264acc995da1", "sighting--599cdd72-0b6b-45c4-915a-45edd16a4321", "sighting--4e722a01-b201-4563-bf51-ed1b12663ec6", "sighting--37ebb841-4ab5-421a-a740-1cfe114355d9", "sighting--35f07cd6-89f8-4e9f-9c11-2fe4de4fafb1", "sighting--f22dffcd-af92-4f25-be9a-d968e0cf177f", "sighting--0949adb0-ff4d-4ab0-b550-73644850111d", "sighting--3279039d-df46-4b85-adef-341328bb989a", "sighting--bfc84625-6c74-4dc4-8e0e-93c9ba86e037", "sighting--3012f342-99a1-4256-9c8f-05e8b6955a40", "sighting--7936f920-226b-46c3-b71a-6b6e3de9beac", "sighting--b1417243-e8e4-4740-a84f-6df4930c2b6d", "sighting--7d4a5850-e29c-44ef-b82f-5553d23c1106", "sighting--6d031b67-a4c0-4868-8d19-e8ebcb890f4f", "sighting--f29a460b-d068-4b04-8ec3-6a2e9e46e365", "sighting--c198c893-8204-49c6-b126-610c4d55733a", "sighting--7b997b80-11c0-4f5a-931d-6bbd8993c353", "sighting--b707f12a-6a94-4957-b6a5-a31581429aa2", "sighting--f0795c51-06b5-47c3-83da-b31d37e273b4", "sighting--8a4a7b07-2d93-41df-b4f6-a2352593467c", "sighting--2953433a-00d8-41f5-8d58-8cf087a78347", "sighting--8e745b19-44cd-4808-88db-1952bba89586", "sighting--a6de6c52-998e-415b-975a-05c12c101eac", "sighting--756a4638-9f28-46cf-ba51-75e23975c17d", "sighting--b71850b7-bb9e-4b89-bf5b-51b02c052946", "sighting--594dfabb-afcf-4f61-b8bd-920ebb1a0247", "sighting--6eb0c899-304d-4d5a-ab0d-8e14e8bca644", "sighting--ca991315-4285-4468-901f-329ac036b635", "sighting--aa8c1406-8e89-47c7-b0ad-e536ed6ac335", "sighting--bf4c486b-61a5-42ca-b889-4016c453477f", "sighting--c4f8943d-63b3-4475-a003-d2d1413e5d44", "sighting--2d946d01-cbda-4b6b-bc18-c77c6900952d", "sighting--6976d325-f2d1-4c20-9fb0-7a374a42f003", "sighting--4be2b0c2-af1c-4bbd-873c-0e1471ae7a72", "sighting--d2af0f99-01d6-42af-9c6c-fc8b641208cb", "sighting--e3682d97-7cda-4cf8-be46-58c05f6760df", "sighting--9394fb09-d0fb-4f83-8402-fe474ddfc845", "sighting--9fcb52c4-4143-40ea-a219-9ccc830361f5", "sighting--ce476a5a-b4e1-4cd7-be1a-ba6d0f812a7b", "sighting--441ec176-a355-46cc-91cb-6c800d40da29", "sighting--498855d7-4281-4a99-b174-2e0f574a1914", "sighting--f35cd200-f489-4760-a259-05f4ebff2492", "sighting--4e596c09-9237-4f18-9180-88ed2f1ea4dd", "sighting--8e27bbec-4eb7-4886-9f01-50266cd7fe69", "sighting--238d3a5d-ded1-43c4-9260-0855c241b9d2", "sighting--dee95bdb-2d11-421b-b8c9-e2a506ac9a7d", "sighting--fdd356a7-d0d9-4583-9f4a-9ebe01dec7f1", "sighting--4542fbad-dad5-404d-a6f3-8d14329175bb", "sighting--722461cc-c752-4914-8a3a-0bb8f661dec6", "sighting--f12fd3f7-db6b-4a96-8643-defd7e9537f4", "sighting--7773a168-3087-4682-a01f-1e1759f933d9", "sighting--a7028c31-395f-4b77-a775-037ef293196a", "sighting--d6de7faf-ca00-4a5c-afaf-637c731a9bfe", "sighting--db136f26-2153-45b2-a769-8e5528c8c1dc", "sighting--ca1beeba-7a9b-47c3-8e68-cb03682e3a45", "sighting--2f9f40e8-465f-4c21-9938-b9cb35dc5d7e", "sighting--6727bc32-5b62-4a9c-930f-6fbe8ae14361", "sighting--09c0e40b-ece7-4459-a884-70960ddd5b45", "sighting--e5433104-e618-43a3-afa6-e2e0071d045b", "sighting--6e6ad2f8-7dae-4496-a054-594011e121bd", "sighting--9c6468d7-5d4f-447d-9359-0d495058e97d", "sighting--6f0aec72-03be-43b5-9db6-22026c96480b", "sighting--2fb5166b-d27e-482f-8719-f4682c0c8e04", "sighting--2e269aef-de59-43c6-9850-c7ebedaab632", "sighting--51f4d007-afc1-4f93-969b-16171e269942", "sighting--0446a0ab-aec8-4dc5-95c5-130874d69f23", "sighting--1a294f1c-081c-4067-92be-c9600373d15e", "sighting--2d5292fe-cb67-4498-8456-528d456acfe3", "sighting--e87f83d4-de40-4c94-8a0a-c2d4068c3a55", "sighting--643b737d-41f4-45d6-9f9f-8c04779d5752", "sighting--4246dab8-9e51-411a-83be-18b7ef405c6b", "sighting--69490808-152d-4b04-bef7-22788cb944ed", "sighting--9d16f750-5752-421d-a53f-091a72d6b46c", "sighting--18fcaec4-b9a9-4d1d-aea9-db67e581aa46", "sighting--9aef40e1-dfd6-4b82-beaf-2ec3bb460322", "sighting--39dd9eff-433e-4390-87b1-eb1f8c80d0c7", "sighting--89a70dd6-8b8b-4e92-a56c-f0b606edbb65", "sighting--64dda286-1564-4343-87e6-937b28b1bada", "sighting--6e4b4606-412c-4480-bf13-152538a50839", "sighting--dc5c7ac0-df95-4dff-9407-8112d0d26ba5", "sighting--413295df-f9d7-4429-a78f-4fe823a496d7", "sighting--307874d9-9e2e-4752-8acd-b37224362ccc", "sighting--6098c179-e14a-4a47-90f5-5b511fd026c3", "sighting--93aa6187-7bab-4aba-9ad5-1ef2177acf4d", "sighting--df657a6e-4e64-4d01-8bdf-3ba5ea32f42e", "sighting--ec197ca6-eaed-4ac7-8e0f-ca4fc08a9fb9", "sighting--03ffff11-8028-48c8-b281-f613536a9689", "sighting--96dd334a-3065-4705-a53a-aee3d45e6290", "sighting--d7fa4ab6-adbe-4557-8594-34289717a9ef", "sighting--b789a7ad-8c0d-4315-9875-aa630ee845fb", "sighting--87a225c2-c56a-48d1-8b43-e937e6617999", "sighting--7419943e-3711-4155-97dd-1d801e5a8439", "sighting--59eb3c0b-b24c-4c64-a427-3ad87f7b8b9e", "sighting--ca288174-f82a-4806-904b-5cd38a78a7eb", "sighting--bf60bbd3-2f36-423b-af6a-a64b16cac3a3", "sighting--32c5c4f6-01a4-4c30-9875-9d3eef3a059a", "sighting--dc65a1ae-6fbf-4431-bb03-1e1dc0995d19", "sighting--8c4f6707-ee04-4b4a-aded-319a80633c56", "sighting--7bf1f1ad-efcf-43ed-9243-d321a26502d6", "sighting--a4db1549-84fc-4cbc-be63-dbab04f4e59d", "sighting--a44f18f5-a0b8-41ca-8138-0fad74927366", "sighting--3fbdf5a5-7c69-4064-9c1f-7de538db2b9d", "sighting--0ec762ad-64a5-40ab-bdba-00bca6e4fefa", "sighting--cd972e91-568b-4469-b546-679e80e005e5", "sighting--2fb3f944-b6a5-4776-9474-ee09851c2a3d", "sighting--bd9fd2e9-8f02-49f7-9444-c410b6a9d898", "sighting--8351c493-33e4-461e-9408-7d83b1e60273", "sighting--53f3e576-8c6d-4f38-8125-1da8c675ca12", "sighting--320e019a-2824-4bff-af2e-ffc0feb1bc1a", "sighting--46022a6b-27d1-4e9b-abde-437ce1254288", "sighting--e9d44d0f-c8aa-4375-9b9a-30b93b322ae8", "sighting--88fd1334-3430-4745-9d8e-1429adef5859", "sighting--0cd75ba4-8518-4066-9d2f-b7e02a17d798", "sighting--50a7aa88-c244-4512-9b35-28a6948f5238", "sighting--9a04c843-5c9b-4445-83c3-e01603a8a9e3", "sighting--295d6739-11d3-4024-91b3-c8c0b65aa4fe", "sighting--097d6a5d-1f58-4880-8256-acfc17a21221", "sighting--72e17ce3-e900-4bcf-bcff-ec3e740b96f9", "sighting--e72b4a79-5769-491d-ab99-eff11be0f093", "sighting--eca24767-6291-4ce6-a809-97e9226a1eb3", "sighting--20c65e93-3280-4200-b3a2-12f1b0f7049d", "sighting--b62f7fd8-38f7-4b3f-9016-de7df13b0b7d", "sighting--213839b6-4a0c-484c-96ac-42329428df98", "sighting--a3402a6b-bcef-41e0-bec4-4bb224464e30", "sighting--5db22735-4c2f-4e08-8f08-835fbd2a98d3", "sighting--444e7978-8f55-41b8-8a12-53710dd28656", "sighting--f28ca44a-305d-4583-b682-810eebf0dc0a", "sighting--9da55ee1-d62a-4baa-94e7-e915873c7b1e", "sighting--b08717c1-41f5-40ba-a5ef-8a8affffe6f9", "sighting--6cb00d10-1ca6-4655-9259-b66e9fad9344", "sighting--376a3410-ab70-4edd-a533-413335a079d5", "sighting--570bc9c8-d08c-492e-a076-fecaded96378", "sighting--8a48bbe8-d33d-45a9-89fe-a5e8e10d6a6c", "sighting--67a1f00b-84c1-486f-b2ca-fb68572c7899", "sighting--ba8c5e15-f31a-40a3-8d31-829c758edd73", "sighting--c1cba2f1-d00e-49f0-ae35-6c8f548d8893", "sighting--a5570934-e0eb-4b74-98f4-832d4416ee44", "sighting--1a4225fe-0b80-4a89-aae5-8cb1bd70dd30", "sighting--847e581e-54ed-451e-8e23-44b8f8d47519", "sighting--ca5bfeed-4df3-42c1-a5fa-c820eaca3f37", "sighting--7ee48752-78bb-4dc0-ae29-f8a30a59b3d9", "sighting--ece78410-16fe-4689-8f7e-5d7766871474", "sighting--e95f9243-0325-4ba1-a476-45abf904c5bb", "sighting--02fc4214-49c7-4b2a-a969-9ee492ca3d42", "sighting--8ccbc9b6-cff5-43a8-9432-91f541912955", "sighting--5a2ae52a-3852-4e5f-8bc6-d541a1531816", "sighting--e253322e-0c77-4db8-939b-a30c5617aefd", "sighting--ad6fe06a-0a1e-4856-b04e-1e356fb39e28", "sighting--617512e1-433a-4f76-96ae-1978a8b82d24", "sighting--9986a736-555e-4758-8e69-ef65fcc76420", "sighting--4b59d391-410c-4a88-9c9d-910a61318275", "sighting--113dbabe-3295-4e7d-9c0f-aa9dc7ce6954", "sighting--0a1a7b9c-d38a-435b-9f37-050a9a7cfd53", "sighting--d63444f9-b179-46b2-915a-84b0e831e1c2", "sighting--255ed236-4ce9-4626-8cfc-3f2e386dff0c", "sighting--3ee29108-eec6-4c84-ac93-0f3c389d8164", "sighting--984ad271-7e80-440e-a5ad-1185d8b50eb1", "sighting--e8905eba-c7f5-442b-9438-8c8ab25a63d6", "sighting--2a408124-f738-4bb6-87e7-d58ee95dac68", "sighting--e6b4c2dc-a943-4447-9888-8a451b63f4e0", "sighting--5b74fcd1-c342-44ca-8a05-d0ac63310f19", "sighting--473cab55-f8c0-412d-934a-1d6fd71c41e5", "sighting--ce472f80-6bf4-4c24-a604-4346f4d6460d", "sighting--0d699f0b-9966-45a1-a30f-0a2c3e4f723f", "sighting--1a9c1256-a8a7-4917-a228-46df699380f1", "sighting--5f2da8b6-c780-4aec-9578-965f0a17fae4", "sighting--26edbb63-bb88-48aa-ada1-78e7053d254e", "sighting--b521dc91-b6ea-4a09-b243-5a69b8ebb82a", "sighting--a44edebf-0d6f-460e-b804-175532aff7cb", "sighting--420cff5f-df5f-4433-a5b9-f7a7a6358b42", "sighting--3a58ef03-9a62-4f5a-844c-ad0dea03789e", "sighting--733207f9-32d1-416e-9c95-4c08a01579ea", "sighting--83576aae-bdca-4fd1-9e47-1890c5614859", "sighting--1724172d-8023-47fe-9a79-785434e90129", "sighting--d72c2489-b9aa-427f-b7d0-21c0715ada7e", "sighting--0d73370d-5a96-416b-9cdb-6eeaa45cb985", "sighting--8b95fa49-9053-4b5b-b9d4-44de82544fa1", "sighting--fb57d963-5a63-4b99-ae95-832d03a59794", "sighting--73a94685-daaf-4d46-bd33-1afb9d613415", "sighting--1266188e-3753-4145-9e8a-3bf20fe07c17", "sighting--f0d84cd4-3ed1-47a6-a8d1-b9bc94b22d1f", "sighting--c70cc166-b7ad-42d8-8e7a-ca0081890277", "sighting--8eda25a0-f778-4080-a5b7-5454b7951ea5", "sighting--9079d6aa-63d8-496b-b873-e306fca5d9e3", "sighting--10536ac1-b9db-4482-bd47-baa240078af6", "sighting--a8b30d0a-a1d5-4651-aa52-5ed7ff05ccb6", "sighting--73490c13-761d-4d24-8ef4-f613d75d282a", "sighting--13e858a7-348e-42b5-a3eb-b751e825afc8", "sighting--3173a35c-b929-45fb-b185-d8bd42da2a96", "sighting--5de56b1a-4f54-4fa0-9628-c3a2999954ab", "sighting--e615cbb1-29a5-4ca7-9a0d-faf0f5e511fd", "sighting--1bf480c9-f6fe-48f7-a847-6247686863ee", "sighting--e4b58ae7-ad00-4922-a699-89830dc93a16", "sighting--66ab5239-dafa-4522-982d-f22cc7dee801", "sighting--39625fb0-59f0-47eb-a7d2-ded24719f3a7", "sighting--4b604203-cd41-4eda-a3a7-2f7374b7c484", "sighting--fa7ad47a-2b5e-4651-b44e-3a54f7e493be", "sighting--da5ac826-2f64-4bfe-8e41-ec0acad0ca81", "sighting--f926d7ba-120f-4fa5-8132-855fb73a4e29", "sighting--08018602-4b04-4826-926d-d04ee1342b5f", "sighting--5cba3746-84e1-4096-9a27-9ea8366860f3", "sighting--e7a14433-9227-4c9f-b47e-ce2ed96fb31a", "sighting--c3f8f2ac-a94d-4d37-87e8-f83af0df3482", "sighting--e79d723f-e2b7-49a0-80bf-0dc97c9c5fa6", "sighting--be961c45-f443-4c3b-97ec-3fdd2c1f3dec", "sighting--aa38e0b5-67f7-4d42-b908-587b32ccf581", "sighting--412c50bd-f8cd-46b8-9f72-2c3bb1d6dde2", "sighting--3e916dfa-3fb0-42fa-bce1-571efed9b461", "sighting--bb14677e-18d1-4692-b493-b870544c2c87", "sighting--614c06c9-8e66-4918-9134-e65ed1b4e0cb", "sighting--07280734-6c9e-4f5a-b458-66ee454d8a0e", "sighting--2b43e4d3-28cf-4291-b7b9-6d132a6597a4", "sighting--f3092c48-4895-488a-915b-01d5a8afce4e", "sighting--62321bc7-6e42-4ab8-88cb-6991ae1cb5e1", "sighting--a24233bf-f522-45e5-8b2d-3f6770abe102", "sighting--2ce34569-0b5b-4f29-ac49-76bf77ca381b", "sighting--39ca712e-09c2-4da2-8532-4dab178604bc", "sighting--a6f9b60f-bc28-4fe5-a1b8-7b5223e93593", "sighting--9507e02b-6641-49f4-9bb6-e5e1bfb985fd", "sighting--86559c57-06f3-493a-a2f5-ed94b64005bc", "sighting--b6760444-c7b3-47a9-a3d1-3c0e36b033fe", "sighting--4a1dbdc0-0ad8-4ed1-b462-ffa0788d437f", "sighting--1306e3a6-4f92-4d09-a6ba-9a9e4233f277", "sighting--07cd9481-a4fb-4506-bf31-278cde64eca7", "sighting--bf90060b-316b-4b28-8d8c-10d4efcaadd9", "sighting--724547ed-5e5d-43d3-b060-fea6ccc37f1f", "sighting--c2658684-46bf-486f-beed-d797851f8d86", "sighting--b7d8bb67-77d2-4f71-98b9-19f18f78f308", "sighting--9d1f5a2e-0da3-4af3-a434-7af2788b8d1a", "sighting--aeb85701-98aa-4a29-8b61-38573ebda364", "sighting--9492f0a5-c939-4624-bafd-bc8c05837e15", "sighting--5c53b9ef-bb96-4fbd-acb0-b2a1fd528725", "sighting--e1cc2f3c-c283-46cf-b6f3-b4a408f4b1c4", "sighting--6c79e85a-e8f5-473e-b2c6-199f7643db7e", "sighting--1c39fde1-54fd-4473-877a-c57254df6a1e", "sighting--1556470a-2592-4042-ae05-b3296bbee4e0", "sighting--69c5b78c-3542-4b1d-a7bd-e384e57453c2", "sighting--1ad1daff-fd04-4049-ab90-c31bfe4ead42", "sighting--52bed755-eb2e-4bad-a06e-d44976422e20", "sighting--bfd6edbe-8916-47ff-8472-f0f4c09d0859", "sighting--6abebe19-1fcf-45b4-b8eb-5c68c7a9180b", "sighting--f93076d6-efee-4ba4-a1ca-cc4e0acded2e", "sighting--d2a6c2ab-ea3d-4d87-b1f4-2f753746acb9", "sighting--d6b2a1ef-5899-474f-8869-c68d11ea0995", "sighting--e3e1ccac-07a7-402a-bcc7-0118b2e85c03", "sighting--82bb37f2-39ff-4956-b8ee-c112ebf1b493", "sighting--ded0726a-5395-45ac-87c9-5c4ff1dc165c", "sighting--fd7bc3cb-03f2-4086-b6fb-9c956588df88", "sighting--1b258e4d-5880-4ee1-957a-28071a0fd40b", "sighting--2e7e3b57-7bac-4c29-8c28-fe0990f85d3b", "sighting--20e0ebb4-d8f0-4a59-94d9-9d326f8ea513", "sighting--4ecf308a-2193-45c4-a787-1a84cc7100df", "sighting--b2c1b969-cc6c-4630-a6f0-2fc43dac8fd7", "sighting--5085efe3-c9f9-4d8d-93bc-0f5ca4156de7", "sighting--29ec9235-8b3e-4ef4-b4c5-1f3250a471d8", "sighting--0727f46d-0c0b-4f0b-a4b8-d52cd3ac054b", "sighting--e188d40c-2c0f-4e06-a3f8-21c3a32f6c2d", "sighting--d49209ce-e052-47a6-862d-a38e2e0beec6", "sighting--0deee593-596d-4016-b02a-ad2b414ad279", "sighting--4930b9fd-fe9f-4f98-a3b2-43d22a946a24", "sighting--d6be9f44-0fc2-43b3-9360-3d14bda8a549", "sighting--9d1636cf-56c9-47db-8df6-222a3d0d1d0e", "sighting--fca9e1c6-4923-4274-b4be-bdb60c4676fa", "sighting--2cb0cbd1-579a-4e2b-b8ed-c6cf8c4d7aa9", "sighting--4510d0b6-7b9b-478d-bdf5-0102edc17ed8", "sighting--ba6278d1-9d84-4909-beea-7185ee3fb8d7", "sighting--11db5d72-3f4d-4eaf-a2c3-632c9bbfb9cd", "sighting--6592b22e-1fad-4297-bdab-a6bfdb872688", "sighting--97b2c140-e916-4494-ac56-4c4dd5c55c45", "sighting--dc36d265-031c-4068-8f65-5e4434b74b56", "sighting--a77858c0-00e7-464a-b22c-3980838771f8", "sighting--d371166d-6b60-40bb-ac12-677543a7ddcc", "sighting--80794d24-1294-4a1a-9f8f-3f2062468d3a", "sighting--08ad5911-e6d7-4870-9ad4-95c19a183171", "sighting--9e0f7651-531e-4e36-aae2-0f1906ea8cf4", "sighting--734c9ff1-fa75-48b9-abf7-f72cc0d3e3b2", "sighting--d88d7d74-10d3-4a38-a702-aafaf0989f9c", "sighting--95916aa7-de5e-45b4-9817-53c7d147ecc4", "sighting--a7e55efd-0be0-4111-85f4-d97f7d50a820", "sighting--dacf4be6-2ccf-4ba1-9e4c-b8b606b88b54", "sighting--48db00e7-1be6-4972-9fbf-68fad701e95a", "sighting--a0667ee1-e61b-4cbb-9261-f7cba2c855a8", "sighting--cf16e655-6ccc-483a-bfe8-3046200acbe5", "sighting--cf5898c8-132c-4dbb-9f5b-d290d1e4c30c", "sighting--0bf01be1-8cb9-4ba1-9abb-91f72785dc2e", "sighting--45c05ac5-c5e6-4be0-8f98-b96de005ef01", "sighting--f7f35c97-4add-47cb-8832-4bc4a8a6e4fe", "sighting--580ffd4d-9396-463d-9b33-7c6041633e1d", "sighting--d844c348-3e76-4323-92ba-05416b5be9f0", "sighting--79bac360-48f7-40b9-8f34-a19cccde8190", "sighting--06c84177-483c-4a0f-ad93-fcaee65093de", "sighting--bca58923-4ca9-44f9-b8ae-db06e141e118", "sighting--820edefe-c3f3-4eae-8b41-5f983f25f593", "sighting--63f3e4ea-8270-4e23-8d4d-c56a8106db6d", "sighting--8cc98ddd-d43d-4201-88d4-e2783ae9f119", "sighting--d267c0c3-584b-4000-8dcc-4d1dbf5c5e93", "sighting--c0ebd311-590d-4eb7-a978-a3d6bc5f0daa", "sighting--2b72f7d8-c32e-4e42-a06c-bc0bff64f021", "sighting--a41f4774-9a9d-4a91-8d07-677aa14e3d45", "sighting--acb8ede4-468e-4d4a-888a-7ba20ed7f01c", "sighting--38386fd9-46fb-4f1f-90bb-cf52aa91e508", "sighting--6315d912-8a52-4455-a5e4-5fd9ff5a9341", "sighting--c2a43f23-e7dc-4d7b-a406-21ffade904fe", "sighting--c7b7836a-e273-40f5-beb9-9a106bc4dd5d", "sighting--cd911cd9-97d7-40d4-8cf3-801bd3ed6147", "sighting--fa689525-97ce-4c4b-81bf-a91dd6da55c6", "sighting--55f6aafa-8241-4aeb-b17e-ff5b177398ff", "sighting--245eeb84-63df-4320-891c-3277dc69e15d", "sighting--1ac4af41-975d-4b3e-93b5-2c27ea6e227a", "sighting--e2ed467d-b4b4-4bd3-8a61-5a1d39fe8b06", "sighting--ee719820-6377-40b6-9277-9b6e1af7f873", "sighting--bf3deccb-adce-42c7-b86d-0c53fc30aba8", "sighting--ecda43f6-064d-4019-841e-18affd417214", "sighting--037365aa-6092-49c7-b2e2-6124dd4c9110", "sighting--08e2f18b-4fd3-46fb-8dce-9a42ed01feef", "sighting--ef76ff9d-ef9b-4937-ac80-08904efaf16f", "sighting--17257a06-6dda-4450-9757-26afd5e8df87", "sighting--b5b40bbf-dd5c-44ae-9e37-89f92a3c96aa", "sighting--c9bb3412-0dc2-4421-8199-212fcaa6d9fb", "sighting--283caff9-a760-4da2-a9f1-635155b6cb90", "sighting--6ac510a0-28ba-46e4-952b-07d9e4ec8b40", "sighting--b4204274-c629-41ed-8894-3f36ddf00b5b", "sighting--0cda10dd-0ab6-42d2-a442-b189f8057474", "sighting--2cb8ed3f-1833-40c0-a8dd-f0d5aa99db84", "sighting--0018cade-e7b0-4a31-95ac-c9c9fc4c8789", "sighting--c6650c19-7190-42cb-a90a-b76603b9d5ff", "sighting--36542993-caef-45ee-b0db-02c71679536f", "sighting--b2164ed6-fc59-44f8-b5b4-8c1ddcf93bf3", "sighting--63993d38-5f90-4da1-a5d2-9b07ef6b9099", "sighting--3a3eba35-00ed-45c7-a467-9139e0eeaae5", "sighting--04d27433-ff52-4102-8f82-c1e0f5fd9ab0", "sighting--e70b4655-8ef7-458d-b6c6-1eb06767abbe", "sighting--d6e507da-889a-4d13-b6e9-1079ab187021", "sighting--13374681-c702-4795-850a-9b53ee4a70dc", "sighting--2e6379cc-bd96-400c-acb4-af0a2c321385", "sighting--f3389891-1764-482a-81d0-763b3833f831", "sighting--f872e500-fbfd-444b-8557-59193d43e434", "sighting--2c9e4e4e-1f4c-408a-aead-053c475da1fc", "sighting--d1ac4877-1e21-4b06-b02a-44e07cc7bb17", "sighting--84702fbe-f88c-48cf-802c-bc036610ce07", "sighting--fd1ae957-edfa-4d86-8dda-aad508e77c03", "sighting--72076514-2c81-416d-801e-d76616e27d3c", "sighting--28b0f252-4e22-49a0-b4ca-f0c387a04091", "sighting--6376bb85-5c50-4a97-bdb6-2ba02a8202b9", "sighting--f56ab13d-8373-4e2b-93ab-c21e9dd8cb67", "sighting--fe44e4d1-45be-4a87-afad-f9e2e19f2326", "sighting--499e6696-1f34-434c-8e92-d14e18053ba1", "sighting--63e3d505-582d-42ed-b21d-ae6523be08e2", "sighting--164a6fe9-1c73-49ee-ab80-c07c4e871a04", "sighting--b72c8808-e600-4126-9d34-a6fa0878d015", "sighting--c8c69ff5-75bd-422e-9fc5-745047e3faaf", "sighting--e1ef671e-b810-4e81-9789-5c48efdff10e", "sighting--eeca52f4-1870-4e53-ae41-cbdcc9eed9dc", "sighting--c7ff66d3-41cc-473b-b724-a60eb5447e19", "sighting--42ede4da-7603-41fc-8e21-bba1d0aad1d5", "sighting--450a3d68-6ef6-4f2b-9949-199ebf46f53b", "sighting--af566313-8edc-4f58-ae48-46d66026aefa", "sighting--eb3d46f0-230d-41a5-9304-005a64699aa0", "sighting--7a9be06c-6676-4983-8f88-4d0ee6df6e4b", "sighting--bc1d408d-eb67-42f2-a560-5e017df4034e", "sighting--11239e4c-9f41-4da1-a774-2e7b6772e3e9", "sighting--a30e98bd-799c-45fe-a0cc-5d156607bbfe", "sighting--e710cc0f-7ce3-4a62-918c-42f7c5e33e2f", "sighting--6bc7a78f-d033-4033-ad75-9d6e2c3a12a8", "sighting--fc067b6a-ae4f-4cdf-8f1b-ce60b8eee532", "sighting--7699e064-ce60-4ac9-b98e-7042efdb8cf9", "sighting--1cd3c85b-97be-4a7b-884e-10495fcc17a8", "sighting--f10c4ab1-8fb0-4226-8177-45377f1046ff", "sighting--a0b1372d-8de3-4657-b928-b93041332ef2", "sighting--1b23b257-56b8-4d59-a213-236cb67fb52b", "sighting--0012f062-9c19-4543-a9cf-6748e1175d80", "sighting--e98ed33c-21ad-4eb1-9ae5-ff4bdb69e341", "sighting--e03d16ce-efb0-4d0e-8589-c896fabd8c4b", "sighting--18bfc3de-0224-4c53-9b47-09e5844d7ea5", "sighting--6b5d67e2-31ff-4b27-bc0a-2f58bbf86be4", "sighting--808e4d1a-f7a9-48d8-acd5-c1b7c6f55564", "sighting--8cf80266-6568-413b-910e-ace5e4dd2a9a", "sighting--2ff86ca1-f7d7-445f-be3e-f080a2d620ae", "sighting--c68fcc9a-5223-4f09-97de-44fa1a74d3f9", "sighting--20a76dec-9ab5-4c13-9af3-ab58a5d0b2eb", "sighting--7a664a14-f1d4-4a17-9c90-73d1fabf6097", "sighting--9ab26d22-95bb-4326-b744-561fdaf053d8", "sighting--471f4c85-2918-4e58-a602-8a3a7c3ca2cc", "sighting--e4453f2f-e471-48d6-8b87-91847f18cb08", "sighting--0c048b9e-ea4a-481b-8fbc-11baeb605c07", "sighting--61cf8304-d96d-4463-bfb8-349a2306f6cb", "sighting--e6836c3c-aebc-4a28-a26e-73acbeaefca1", "sighting--64dcd8e7-c974-4153-a74e-94950e1dadfc", "sighting--2be6cf74-692b-44b0-8515-730196dc3d55", "sighting--446962d0-6376-41a6-80f0-53e9614d2dc7", "sighting--6c5515a4-e9c1-40a7-b05b-47257258c35d", "sighting--cb4cd093-e390-44c4-abe2-a537c4139e07", "sighting--c42633c0-8187-4037-ab73-af34d8c5f017", "sighting--ebc600bc-9f5b-4356-a0ef-e7b21cd23f8a", "sighting--78e02904-cae2-405f-aa34-84a9b4b82904", "sighting--fc3b3c25-52f3-430c-81bc-2c2e7ebd18d7", "sighting--5e5f6e2c-32ad-4e70-ac53-3ee9ad38106a", "sighting--5355e494-8299-42a5-b191-146b8f5d355d", "sighting--575322c0-ab56-46e3-9add-fea6ff9b50db", "sighting--dc9b37a1-5513-4d8b-9d17-24ba6c7f7981", "sighting--b0485c84-3b41-4ef3-99e3-d2695cf26910", "sighting--9dd9b3db-6ac8-4341-bdf6-76fc31530fc9", "sighting--e321b738-8d3b-468c-b9fc-297a414cf450", "sighting--997f3bd5-4a56-46d8-a559-792e12af963c", "sighting--57e1f8ff-c3b0-46b7-8a41-505cb6897343", "sighting--61ec889c-a8f8-43bf-8073-e209f0e79fe6", "sighting--17d4b201-422c-44d8-b9c2-8973b8a19cb9", "sighting--cbba7cae-f2a6-42f2-b2e6-68fb530c3395", "sighting--65b3a1b1-bfa4-4b57-8c20-b8cd8173a40c", "sighting--1cde593e-a05b-474d-8849-c11817483eea", "sighting--f33e5beb-0947-436c-a6f9-a76164df0325", "sighting--d880a23d-6b55-440e-96d4-a5b3578e139e", "sighting--3192e950-5829-45e1-a446-1506b8e3a6d6", "sighting--f679d73d-86db-4c38-b17a-2634678b9837", "sighting--6e8ac149-acb3-46df-8d11-c02b54abaf90", "sighting--aa32726e-5adc-49e9-9c06-36c6d78b1e9d", "sighting--cbccc262-6e4d-4bda-9e91-4fbb731e2e16", "sighting--5c1110bb-b799-4134-bc44-ca40e505a86a", "sighting--2a36d54f-d629-40a5-a922-d153cd9f2780", "sighting--47f27255-bc69-4a65-9d26-bd0b070cfa4a", "sighting--4d1783d7-021e-453e-a618-f5b65b168c26", "sighting--d4ef8b34-4d37-4ed9-9d8d-61e76e4188df", "sighting--a7460e45-79bb-4f7d-ba5c-6aa6eb3c7918", "sighting--0d1437c1-9e73-402e-80a9-aa124279447f", "sighting--13fd03c8-c213-4089-b994-d8be69d7f123", "sighting--d5261652-09a9-44e5-b018-4e2c365b16ff", "sighting--bb8c74fe-8fab-4a17-923b-23625acb85f6", "sighting--6708d4d6-eba8-40d5-927a-a62a56baf944", "sighting--1039d438-3492-4b78-8a3c-8469fc1c860a", "sighting--6d6995ca-15b9-46cd-8c3d-83a4d08e21db", "sighting--bfe05ac4-b90e-48c8-a253-5ec7c53b1738", "sighting--d2ab35c7-725e-40f0-8964-fc2544e202f9", "sighting--733783f7-ee4c-4857-a9d5-e9b24509dc37", "sighting--e1c04968-6a1f-458f-93b8-c4c038c8ee2c", "sighting--85ed0767-d9d2-4b06-ac32-f9c16323c99d", "sighting--d5446527-8981-4e3d-bb9c-7e50eb8fb17c", "sighting--c0d757e2-372d-4142-90c9-90dcc01d248b", "sighting--568574d1-ca7e-4dd9-9606-0159937a594f", "sighting--6819623e-6082-4d95-a9ef-82a6aca675c5", "sighting--a48fc6ce-6234-47a5-8600-00731aeef8e9", "sighting--c71f6c04-dc61-47bb-b7f9-bda0a56f38ff", "sighting--362412cf-fabf-4ddb-91a2-8ae5d7a56010", "sighting--87262fc3-e171-4a78-94b1-41870d85306f", "sighting--5de7c062-5e4b-4d83-9c2a-3a0625d54fbe", "sighting--e9bc6ff1-a074-4e67-93ef-ba35c01e875f", "sighting--792ac25c-e2cb-4d2c-834a-39ae8a88052a", "sighting--538121fc-ec8f-46bb-9c26-ce39d7b85830", "sighting--272f0276-0489-43fe-a81d-fefde423dd50", "sighting--e5970a05-de42-4e2a-bcba-80d5fcc2ba10", "sighting--9bab19b9-9aa8-43a9-b2a1-f7468cf315e4", "sighting--67c08b8b-8449-4fe4-a05c-96fd10c9e3c9", "sighting--34c625b8-1c0c-43c5-8fbf-29e6a6ce7d81", "sighting--ea534bed-d187-4a8f-93e2-86bec1afc90a", "sighting--1121a42c-6167-4a80-91fb-d57b3310ca30", "sighting--5cc6632c-d7b8-4ee6-8326-c1df6a3900b6", "sighting--16e1f0f4-3a8e-4f7d-bb71-ee1d507a331e", "sighting--a7e692ee-f19d-48e4-b9d2-eacafd5abad1", "sighting--9edb1cb9-1999-4bd3-92d3-6954f73cd53d", "sighting--fef7d54f-1882-48a2-b650-539dd0520a24", "sighting--c7d9fe4f-7df6-43c5-ba67-041856091256", "sighting--3aaf99cc-50d6-4707-9927-8a4d90e8da76", "sighting--96f51a8b-ae3b-44aa-8c9d-cf9c018ad6ec", "sighting--04942a31-ff54-4753-bef0-1ba85912da4f", "sighting--fac27e45-573a-438b-b764-7aeda5663e12", "sighting--d0b13a01-1416-49ff-8b39-817522fec383", "sighting--12aeee0d-6f4d-4b56-8f95-012888fc8519", "sighting--cc6b6228-a182-469e-9051-c6fd7ee787f9", "sighting--b332538c-bc23-43c4-88c7-53ef21d46f87", "sighting--e689bfc6-40c4-4c08-b490-80a001887a87", "sighting--4a64686c-1e78-4982-bc80-d158a6efdadd", "sighting--d7ee27c9-980e-4789-9763-2c60aa5548a2", "sighting--37126903-c0a5-4cb7-bb47-6b1de93ff560", "sighting--8fcd81bd-e329-463b-abac-e742addbec26", "sighting--cdeb1d85-e2d3-4933-8ba4-93290b748a4a", "sighting--7fea9a93-e573-46c7-9407-30b53cced088", "sighting--42d8d9e2-daf2-4d42-bde7-c9c2ad4dc8ac", "sighting--c1d9f8f4-019d-4355-b461-60d889dc6257", "sighting--9432073c-cbc3-4e3e-b941-93d4e74b62dd", "sighting--d9ff3744-e1f9-4166-b6bf-49d9f4530f63", "sighting--7a15e6ed-62f0-4bc3-ac14-47a29bdda35a", "sighting--4ed40b51-f577-4713-b00f-9959a8b0d829", "sighting--49f01a79-0b5a-4a88-b30f-2c69a512965e", "sighting--9d35e779-ad12-428a-be51-ed8354162755", "sighting--51066fde-2601-4da5-a471-d82e828d2274", "sighting--29b0715f-82d2-4e9b-a856-28e2e28b007b", "sighting--f959f82f-bc1e-4e94-abaa-08204e4d54d0", "sighting--7422f52f-9721-4342-be43-2c6bb873b8d0", "sighting--385fca05-9be1-484e-8946-bd704fa3adde", "sighting--6cf233d3-709d-41f7-8f01-dd32ff87c775", "sighting--f8bb3ce2-1467-4ef9-87b9-7e96f495c678", "sighting--c6b42cad-a126-40d9-9bfb-3db48a48b8fb", "sighting--a98bcac5-e46a-408e-9f4f-2e31d4c0eaea", "sighting--79a4ddf7-5aab-458c-876d-491c3018f719", "sighting--02fcc36e-dd74-49b7-afde-17ccdb8c504d", "sighting--d4ffbda8-b578-4add-bcf7-545cef6d3c8b", "sighting--4386cc81-4e14-4aa9-b79d-1d25d26b851a", "sighting--97f5f180-0e70-420b-90ff-d52355d1ac36", "sighting--7f4b4d28-f9ac-4098-9d8b-606cbd765c8f", "sighting--c0f5f17b-49a6-45be-8dd7-9d224110517e", "sighting--fe6cbed2-aaf5-4064-90d4-e96afc728df7", "sighting--de2b1051-2b41-44a0-ac48-df77be82f07b", "sighting--5597f710-9986-4334-af06-50917afd441f", "sighting--10b31d5f-bda4-4973-8ade-14a69eba51c0", "sighting--d55e500c-426c-459c-b888-ac945f6b6e83", "sighting--097bb9cf-17b7-4921-9f97-41da7f26eeaa", "sighting--328c455a-5b4a-4d1e-a386-36dc9bf65a40", "sighting--6c32a44c-76f3-4052-99b6-678845664048", "sighting--56da3b49-3c6f-45fc-8303-32561e358a1a", "sighting--752abc0e-80bd-40f6-98c6-0adc8124c0a3", "sighting--1d5b760e-e118-4035-8f36-b000598d4aee", "sighting--62898d36-a745-4ed3-8203-efb13e227fe0", "sighting--b92451ff-8ad8-4157-a380-7469e9257859", "sighting--62a19fa4-3513-46c1-9c5d-c878cc6cba8c", "sighting--6a78a326-98ef-4c9c-9774-1e5f364b4efa", "sighting--59ad36bd-11ff-4d46-a5a6-2758f3ab7aa4", "sighting--27253415-f1f7-4512-a499-ed5e275fbc98", "sighting--ac51a457-cba4-4ac8-ae1a-8498fb56718d", "sighting--bba59828-8be4-4e06-b182-b0f2c5363dc3", "sighting--4835b9a5-4c72-42d7-9d7d-2ce5d6eec2dc", "sighting--f5ab931b-e887-4b60-8a98-03a80de18003", "sighting--e4f84105-1555-4dbe-923a-61d1bbc01ebf", "sighting--956e4df2-014a-410f-8361-674d220a5765", "sighting--ffbe962c-8584-49d8-8950-90437c850d5b", "sighting--97dd627c-1a79-4257-94c6-a762b59eef8e", "sighting--ffb1a40b-4dd2-4fea-8a28-ce4e666ee382", "sighting--a27abdaa-d6b7-4d26-b482-ade5d6449097", "sighting--fdc5fc43-160e-43a8-a3aa-37836cd13a36", "sighting--482744bb-246c-4205-9eea-beace11e8305", "sighting--025dd346-0814-496c-8565-e5b048a5e66d", "sighting--27d9d338-cae1-4f09-8acc-094762e77097", "sighting--050df01c-a749-48a4-9644-520895c11de1", "sighting--5fa9e006-1c77-4b78-981a-76bff3372b5c", "sighting--500dba0b-0240-47d5-98a3-69be017b6292", "sighting--e6a8b963-0392-4b46-891f-1abfbcc17b43", "sighting--c55a30b1-e11e-4f1f-9e07-2ffa838e0e5e", "sighting--aeb21390-cfb1-44e1-9509-9b7e998b0a37", "sighting--19d4cf3a-c50b-40d7-b682-2ee4eac05faa", "sighting--3fd50bef-3b0d-434b-b024-a6c936508a72", "sighting--60135a85-8ed5-4a74-b50c-ee93c889b315", "sighting--14d3cdf3-b4d1-4b8a-81b7-a7d433a1ff1d", "sighting--165b7ec0-ebeb-45fd-824e-4d57d53d4f46", "sighting--0e3d02ea-f442-4c3f-bf56-340362e221f9", "sighting--c3be56a4-410c-4d49-8439-f62fe0d2c116", "sighting--a9bc6e98-cf3c-46df-bde0-e5b9a756d751", "sighting--32f90400-20a7-4e80-9828-16c507488c12", "sighting--0c91929e-ccbc-47e2-900d-e4b57e0f4396", "sighting--c5ffabe6-476d-43ae-aee8-f3121edb034d", "sighting--9b1a2775-f48d-4c0a-9a03-7afe484e6538", "sighting--d09bb532-6f0c-415a-9710-e317a98393ee", "sighting--418eb099-c609-4799-a342-8b30a1ae14ab", "sighting--dfc9a280-aa58-42a8-925d-759a71ec6ab1", "sighting--46a4e596-d9ac-4d84-8cf0-b2486c512ac0", "sighting--188cd74e-6e6b-43d3-9623-ca50932fdd5f", "sighting--4b907103-ffa9-4354-951b-675f25a5087e", "sighting--26c510ed-56e8-4871-942c-96d777a102cb", "sighting--7fb74344-e79c-4849-8f7b-c2359f8f118f", "sighting--b7c6758d-5d2a-44b1-8b58-fe5ffb83c0af", "sighting--c0a986b1-e2c7-4837-b4f7-fe10d8588eff", "sighting--fb816180-0740-46fa-aad9-5baa993fb7e4", "sighting--41c4ef09-109f-4779-a8d8-8dad2a7b7f7f", "sighting--2a44c582-397f-4466-8ec0-bcb84fb87f87", "sighting--8bd3c5a3-a4f8-498d-b402-6c24be5f0f55", "sighting--b683a6c2-ea2c-45db-9e30-a0d2dc4e8258", "sighting--5404f3f2-4c20-44b1-94d2-f3df66f978d7", "sighting--93b85804-d5dc-4804-955b-cd12fec947e4", "sighting--7b352a8b-9b90-4c70-86ce-bc6d44e46bd1", "sighting--9ee7f948-60e9-4f2c-8986-f8f0adadc241", "sighting--bfd94c67-d9d9-4bc1-8656-dec1ed131948", "sighting--11a02872-8e9a-4c0c-82ab-867e985ee918", "sighting--b872cb2c-0266-47b0-8541-8a1ea84345ef", "sighting--88577c83-cee7-488d-a522-8dd1063bfc60", "sighting--7e99a668-425a-4f9b-80d9-1652713293b3", "sighting--60cabd28-de6f-4e03-9a4d-99b574591340", "sighting--92a5495a-dec5-4c70-9727-fb385406e6fc", "sighting--7d7ba3f9-0c79-4893-9804-adb61032d9ae", "sighting--c1c8789b-c485-4baa-93ed-94fa369b16fd", "sighting--6d6a8c28-0314-4b9e-abb6-215f4d62bef1", "sighting--1b8f61d4-ea20-4acf-b953-88f06cbbb27c", "sighting--aea44da9-157b-4095-884c-6d5c566e1fb9", "sighting--bc21a44c-254c-4245-bc8d-85f5d12ed63e", "sighting--9abd9e62-d1a1-4323-87fd-1dec11dccd42", "sighting--c5a959d2-5dec-43d1-aafe-63dd0a2abfc2", "sighting--06ea4c19-1f57-4376-8b93-92b8dcb1d481", "sighting--8eab13de-6204-400c-a0ed-a6dc79f8f92e", "sighting--81e8b35b-ab8b-4360-8f1d-0b9ceff2ccf5", "sighting--281c147f-f64b-493a-9776-b76a5078c8e2", "sighting--d0c1303f-d95d-4061-b641-3045c30b1f61", "sighting--1e806c2c-f8b4-4e14-b5a6-e1ede8e337be", "sighting--b417d271-6fb7-4463-b9dc-765a830ba2f9", "sighting--5803dec2-31de-4f77-ad27-3b4d6465a186", "sighting--8d8a307a-8e38-4e6a-a141-56070c1a892b", "sighting--387a2806-c24c-419d-8517-7306069d4264", "sighting--93ba20db-e21f-467f-a246-dc3e0ee32d66", "sighting--b08eaa51-e7e8-4129-b4e7-d0f7508e5c94", "sighting--1e8555a3-6ccc-4538-9b9c-999e92c42cd2", "sighting--1e8b31b0-d3af-4127-bc52-6a8c31d00e80", "sighting--99747f2f-a964-41e5-ba98-08b23ce549e2", "sighting--30331523-cb36-49a2-b7cb-e162afb3291e", "sighting--bfa68587-1860-4325-80be-1d304d994fdb", "sighting--f06d2555-fc38-4b1f-9c83-e83c3ac4c879", "sighting--89ed398e-f9a8-405f-aa61-b763ff4da4e2", "sighting--a25f7e29-fc82-4671-94f0-2558a930e5a9", "sighting--af00ecbc-f48b-4857-9afc-779e9e5e5003", "sighting--8689a268-752e-43ad-9651-9837ace95b0e", "sighting--31105c09-7a91-4561-acfa-6047877b1dcc", "sighting--53a96910-240c-4eb8-a36f-16bff255d642", "sighting--a60c7f45-e31a-4c17-b8a0-a91f8874d75b", "sighting--54bbb0c8-0378-419c-b3ff-40efd3f06b50", "sighting--3bf5510b-0d9d-4bb7-87e2-1c6826ea4a49", "sighting--fc2a66b1-d236-4d87-8175-eef20c3477d1", "sighting--eb935924-b2d6-4fe6-81aa-4e96795dc68d", "sighting--e88a01cb-18d8-47f7-81a9-07070fd09ca0", "sighting--dffe685b-d010-419d-89e9-bbb044bfe765", "sighting--a7c16843-badb-4ebf-bf19-ddc220a9d029", "sighting--ed5beead-cf41-46e7-98e0-2ed0e38725ce", "sighting--1d0e6e58-53bd-49f4-810a-c9a5085258c9", "sighting--70c5da4a-b892-4545-b341-85ce7fe21dd6", "sighting--e0afaf5a-640a-4504-be58-ef3af3ef00b8", "sighting--743a7c88-0a53-4612-a761-fcfd2f9e7dfe", "sighting--dbff1666-697c-4394-967c-940e5b4292a5", "sighting--d2047a54-d02b-4469-82ae-32f8f558d485", "sighting--266b59c1-28bf-4175-a48d-761bf3e5500e", "sighting--cabf8423-ee4a-4610-8585-f6dffaa0ab3f", "sighting--7596032b-0e94-4908-a1b1-680a67185f86", "sighting--5ff8941d-9295-47d2-8924-2da45d8d7fc2", "sighting--07f35b94-e344-42bd-b93f-da982004459b", "sighting--292d6fcc-a6c9-4719-a09b-75c238fd441e", "sighting--5f07aeda-7e33-46ea-a48b-721407f9a7fd", "sighting--96b8ea0a-339d-4105-a066-f63494c2b624", "sighting--c9673e88-5046-452c-b487-7e35786e458b", "sighting--3de08737-a3ad-4c11-add2-a0ac8668ab75", "sighting--9825c399-85a8-4ce4-bcac-ebba909454ad", "sighting--2e589551-f034-40c2-872b-929a7c258951", "sighting--58691763-194a-4034-90d9-932c4c8c37bd", "sighting--66463860-608b-4e38-a744-0545ca16eeb5", "sighting--5bda64ea-c9e9-435e-b332-b45a462f3188", "sighting--71ad57b4-aeae-4a26-bbdb-4d698fed98ff", "sighting--583df072-d5ed-433b-9151-771c73d6b751", "sighting--dfccc510-a562-4513-81cc-0a375f406917", "sighting--ee5115a2-8ab6-4517-8fd5-fb7f45a2e11d", "sighting--bcf9bbe1-682b-4f4f-85ef-e54f6004f22a", "sighting--4250715f-e933-4c5b-8ff4-e8109ddd6a79", "sighting--e3612e6b-0f87-4b8b-83e8-a3580343c476", "sighting--d20ca408-6f75-4fca-b2ad-efea9c821022", "sighting--3dba119b-78cf-4aea-94ea-3fb36c40a16c", "sighting--13d6174e-0370-4885-9923-05f435877448", "sighting--bfc848e7-c5f8-40ce-83f4-a28c4b3d3afd", "sighting--6ebf989a-e49f-4176-92cf-edf8f08e6c88", "sighting--d9092653-97d6-448d-a1cc-8fdbedceea36", "sighting--5d87f7f2-ff98-44a2-a8f5-a812c88edc7e", "sighting--7447c6ac-42ef-45be-96fb-8bee2f222581", "sighting--f6060bc1-d1e4-4dfd-9af1-3a3f2b216327", "sighting--abc1a18b-ea74-4222-839d-01fbac9f6990", "sighting--5d0e0912-f355-4565-bd24-e311ae093e92", "sighting--a1639f87-c262-48f6-8eec-6589dd3ef51b", "sighting--564c40a4-665f-4252-928c-9cba69c5d527", "sighting--13087aad-435c-4622-b6be-397648001336", "sighting--1e1ab609-1c0c-4581-bfb2-3a5ef9035b24", "sighting--9c902a11-4e9a-4b0f-9f7b-20f86f53a9e8", "sighting--600a9ca7-4ce9-4a85-b3bc-0940117f7e62", "sighting--cfa3ed08-d04d-4338-a358-73c1e988f136", "sighting--5b2f17c1-d6ff-4b2a-b976-34b42cb76862", "sighting--699ccdd2-29ca-4e04-a95f-8ffc49f48ea9", "sighting--b878c2a4-381c-4585-9942-551ee9b53956", "sighting--e9022c46-5f10-4fa0-abb9-6328c1d18040", "sighting--7b914208-8a27-477c-89e1-a39a8c185c65", "sighting--3647eebe-3213-4eb7-9178-f646b8aad920", "sighting--659d15e7-62cc-423f-ab83-fe6610ab3726", "sighting--ac988d9b-f19d-4acb-96f6-a35fe9ce5141", "sighting--77fe4d8f-c9fd-422c-ab0c-570978be076e", "sighting--919841ef-afa9-4ac9-86ba-679ea77b78f2", "sighting--a8f857c2-1c0f-4bfe-bfb3-4a98caa80814", "sighting--db738db6-2409-48ea-b219-69c94c5c793f", "sighting--7d1c5831-d365-4f83-a5ab-9e3cf9c619bb", "sighting--c1b0387b-f017-4fef-adaf-a92a91ac4c0b", "sighting--7cc47d41-7af8-4a36-a456-9c951030e905", "sighting--02dcb394-700a-43c3-ba69-c532f0413b5e", "sighting--1cab5406-e3d4-444b-8a56-cd588ddc4ebd", "sighting--87990107-81da-4c9d-a893-f2e51dfca545", "sighting--df0c1830-b612-4bdb-b018-dbdf363b26ac", "sighting--a0dc963d-47bb-4df5-8375-79ff1ac78f1f", "sighting--d524ff94-714b-4ebf-aa9c-eb67be4828a1", "sighting--40d96898-a18b-450a-8df4-b6244d1fd8cb", "sighting--3e1ff26f-a115-430f-907a-bd88755b3467", "sighting--13a5cca8-1db7-49ba-8b20-744e5f5d57a1", "sighting--666ba599-fc4d-484b-9b11-2cb53a57a164", "sighting--b5d3b390-fe40-47f1-8e8e-ffa32cb8679a", "sighting--1802425b-04e7-4247-8180-ab7ac37efc58", "sighting--dcdab136-d226-484e-bdbc-d074e0554469", "sighting--55368f63-f987-4f9c-8dd3-21e7b9fd591f", "sighting--8963ba7e-ee61-4128-8107-1644e3ef2a12", "sighting--656d112d-8ac6-418c-8f02-8eb6a3d68660", "sighting--a71b86f2-772b-4117-8b03-c6d02cf6691d", "sighting--ad57ee25-ff12-4d17-a6c7-d120c0ca8414", "sighting--789f03b2-7a60-4142-a2f2-2e9741565bc5", "sighting--aedce85a-3757-4869-a210-4e98e0bee62d", "sighting--a2c9a488-78c9-42d7-af24-517349cb684d", "sighting--cb2d064c-a301-47a5-b0ee-b001f63ce0ae", "sighting--9a38d2b4-101b-413b-af8d-44493078d5ba", "sighting--2bdbb9da-13a7-40f6-8d8d-e3b83f95e05f", "sighting--8d115382-0231-4b49-9d5a-a68f4db2bf3a", "sighting--b2d04f98-d293-42c4-8c1d-9b3da1eae824", "sighting--6282461d-e420-479f-a562-18183c7aa42c", "sighting--00cd8f92-670f-416d-b029-293241409ae2", "sighting--7658276d-3806-4945-8461-fd448936bd4c", "sighting--b758f12e-ca3b-4955-a7ec-4eaebcc01e9f", "sighting--c167fd84-d8e8-4883-8766-198ce7c53a51", "sighting--f6849740-1fe2-46d1-8e4f-c9afa547e234", "sighting--fd61c4c7-4511-40b3-8616-e41f07a4d0c9", "sighting--0e8106b9-9951-4a90-b930-10f5846fb963", "sighting--960ed025-dfd4-48b7-ae2f-45668a4ccbdd", "sighting--b0bc1936-d835-4874-9acb-950fa2714c65", "sighting--8242dc7c-c57e-476c-8ed6-46cde9af07fa", "sighting--49c72b08-a462-4df9-ada9-e42464a2c425", "sighting--d2cac71b-dd20-4382-b3c4-26dfbc63dfd7", "sighting--9b37a5d0-5aee-4470-a33d-41c41f6af2ef", "sighting--641b4c9b-4725-4e4d-a274-2593f0b1874b", "sighting--edcf5933-e8f0-453f-ace0-e4a33b90517e", "sighting--5db90a17-c803-4bba-92a7-9013ba31810d", "sighting--cb31b0db-2abd-4b48-bdea-4e316fb255bc", "sighting--a914a1fa-ddbb-4bdd-be52-e8c7652849a6", "sighting--9e615055-d3f4-42de-ab92-d6ce5afedbe3", "sighting--2796056e-3cc1-4de0-82f3-e318bbd42f9a", "sighting--deb841e7-8f47-4bee-bf9e-269979c43adf", "sighting--e0f97223-fe57-40a3-8eb1-567c23e0684a", "sighting--8dc228ee-59ce-4da6-89cc-5d90c97cc5f2", "sighting--3f24f6a0-a645-4698-936d-922589b976f4", "sighting--e475c77a-29bb-42c6-9357-e363fc6d2639", "sighting--3a8f73ad-3613-4220-9643-add9f87bb192", "sighting--0ee187f4-0fd5-4d55-ad25-4a3e2db0c6d9", "sighting--54c8d875-f294-4596-a3b8-6933bc20f8a2", "sighting--7a3a33ab-666f-4bdd-a9ff-ab00c5525a4c", "sighting--6f3a3857-ed6c-401f-91f8-ac02230b3e0d", "sighting--3ff4a8b9-ab1f-4f88-b14d-c4d00fc6db27", "sighting--bc3220b9-a86d-4b9b-a5c6-10cc58b5c465", "sighting--4c7f28ae-8ff6-4617-9db7-df62fd3c0994", "sighting--0c50c05f-86ef-4612-b703-db1d824a2d38", "sighting--c75a78fe-f1be-454c-af7f-69c424064841", "sighting--1264e81b-7ee4-40ff-a104-08c676624608", "sighting--ce6c2811-892b-4de6-ba23-3517e8a529e7", "sighting--2dc898c5-4c60-47ef-97d8-a37f694e04b7", "sighting--dfe11922-fc2f-4b0b-a922-44a6b577110b", "sighting--03472740-a5a4-4ade-b7e3-665600b2e382", "sighting--4807ecf7-c6da-42b8-a7f9-91ebd06774de", "sighting--644e5397-f085-43b5-95d4-452eef380751", "sighting--e3856c4a-960e-4ade-a495-ec6f295989c2", "sighting--e6e1968c-9a0a-4a72-a21f-72c683a2be3b", "sighting--d707105a-23c5-46c4-96be-7a856a1e23c5", "sighting--a3db8c7e-69a2-4a05-9e6a-151766183731", "sighting--6d5cbaf8-3ea5-4e51-8b9f-868b143f68be", "sighting--a46d0d29-c991-4b7b-b96d-58be90012e42", "sighting--ee5958d6-3834-4ee5-8ef2-5683d3138efc", "sighting--72e8c36f-105a-4952-8d4f-e29acbacb2a7", "sighting--a529ea06-eff7-464b-a328-a646ddbea957", "sighting--beef58da-8716-485d-9f1a-4d4d16a4574b", "sighting--0464684c-304d-4577-86f4-c657c8ca3d76", "sighting--a696da2e-5258-4cba-8cb6-0b82a0ca7432", "sighting--28c71f70-bb21-4a44-9b22-1f643952b741", "sighting--4164369f-4d23-4afc-8288-faec7ca88bf1", "sighting--60e7412e-81f2-43d0-bdae-2eb5f695b409", "sighting--5a4be023-e970-422b-a936-0dab933f3640", "sighting--318d19ad-eb91-4a49-906a-fd113311ce84", "sighting--a1df26ea-2ebe-4b64-8ffd-e7a44b7935d4", "sighting--00da24d4-8e18-49ec-9b77-4ab1a26c58aa", "sighting--bd6d63a9-57fa-4bfa-88b4-0485975aa17c", "sighting--c01181a8-1838-4149-ae0d-e407a2a43bec", "sighting--e0b13f87-b163-4ac2-8c95-e99ec4838266", "sighting--b2c54f3f-e224-42b7-8283-e3dacf605bbf", "sighting--940af360-646d-4152-91b5-5702332ce1fe", "sighting--880a5bbb-d9ff-4d39-8190-f748bcec4c99", "sighting--f4c4ec2c-debf-469b-b190-778c77daf678", "sighting--d0dab392-5f00-46ff-a36c-d890b8c4e310", "sighting--6da33c1e-73a5-4723-800f-062fe60a768e", "sighting--d78bbb8b-c2e1-43ce-b441-19f3136b42a2", "sighting--6632d496-7033-4116-b4d7-1edab36ddf95", "sighting--34d49420-0369-40d3-94d3-ab1f1c27e6b0", "sighting--3213fe5f-10fe-49fe-819f-584da4217217", "sighting--c17606a4-4201-40ce-8a23-8bf6259022de", "sighting--d8fd12e3-2f2e-44a9-aea9-d41dce846356", "sighting--5ec8fe72-9058-4125-b552-98b7a269eb1a", "sighting--cf0d3ddc-73ca-4431-9bc2-a3bc4a440e85", "sighting--a7c201a4-9365-4bb7-866e-313126b48edf", "sighting--d54c4416-54b1-41a6-8627-f81dbef895b3", "sighting--eb506d23-fa39-4e58-a910-2b0f7f9bc97d", "sighting--46829a97-9074-4c8d-a60a-289efcabe9b6", "sighting--beab63e5-f959-44a2-bc19-e8645731e2e0", "sighting--bee746b2-9b1d-4a74-8571-76fa8f9099d1", "sighting--66952d01-95fb-4149-95b2-93d31ec16222", "sighting--1f20ba75-c7ac-49b4-9079-b57abace7ef9", "sighting--a5586fc7-e963-464d-a3c5-4db6d478a0ab", "sighting--9cff4112-cc55-4af5-99b0-0950ec0b448c", "sighting--cd2898cd-313b-4992-a637-d3598f7905cc", "sighting--00da7d75-b88a-41ea-a415-047274dcef72", "sighting--ee114ee6-4a8d-4647-90ac-e4e6bb780fa8", "sighting--dbca347c-3c35-4e05-bcd8-76dd9bb47df9", "sighting--da28c2d1-4b48-4f4b-8e81-c3e6dc5d380f", "sighting--765fa457-a44f-499b-b445-94176608ffc7", "sighting--029cbc72-c18d-4fe9-93e8-cda93c3a460d", "sighting--93189944-763c-4c20-af5a-620f43a4ec4a", "sighting--a6971451-9f76-4e47-b6b1-345723bccf59", "sighting--a7119c88-e00c-4f61-bac7-a8851d6654eb", "sighting--d8f0c5bd-180c-4f43-932a-fcc6442132e1", "sighting--2f8d2eac-b73d-4346-bf76-d350dd34f256", "sighting--7a4b58b3-928b-4569-91f6-7ab24fd46288", "sighting--540c12ab-5734-4e58-9160-c109cebd4609", "sighting--45306263-38b9-4bd9-870e-4015a3272bfa", "sighting--9b002172-98e2-4857-9bd5-5fb16a750118", "sighting--11ad36b2-59cc-46a9-91db-c2a41b57c218", "sighting--8af9eb91-43fa-4b6b-bbe4-003460b6886d", "sighting--3037746c-4c9a-44eb-b7d1-f73523aa8715", "sighting--b4e2d7d7-b38d-4fff-bb2a-f94d3accff14", "sighting--a105ca08-7de4-449a-ae03-8f53a1954245", "sighting--fcc5aa7b-e448-42a3-8bfa-c37ca3baa42c", "sighting--32970b45-c47e-4d1f-bb61-50da681f86d3", "sighting--74fcea60-063f-44d5-8c11-83019d6d7ea8", "sighting--7535b0d4-f637-4f4c-93a3-dc6fe098b289", "sighting--fdf61d5d-1517-47df-8dc2-248f1e204127", "sighting--30cc7a98-49a9-4309-893d-a470805a2ace", "sighting--5f75a950-6025-4459-8dea-f7a0b8631675", "sighting--d6f8a49f-23aa-490c-ae26-749452cba222", "sighting--8424ed2d-2f6d-4d31-982f-796424e68760", "sighting--38dff9ed-845a-4839-89e3-c35e06a36b6d", "sighting--45aaefc0-cfe3-4c9a-9608-d0242d28076b", "sighting--bcc03ee1-68a8-4e36-8102-cad77a4bc7c6", "sighting--b4ee40f8-7934-4305-bf20-1fef8bde3e4e", "sighting--4883e705-e418-41a3-b807-c1ae66ec3eab", "sighting--1eac0763-7127-46cf-99d0-8b7f328d9801", "sighting--a5330d2d-05af-4730-a78c-e063de623a3c", "sighting--ca5b68aa-9e02-4116-ac33-6638bc5b8498", "sighting--cd769319-c88a-466a-9a2d-3208e7e56adb", "sighting--ccab058e-ae64-4bc5-a71f-e10cb54291fa", "sighting--591a0de8-10b5-4ae2-be51-dfb95672b0a2", "sighting--0a69b7a7-d14c-433d-9a36-38c7f596f2f4", "sighting--71f4f2e2-99e5-4f09-8df7-5bf8dffcd43e", "sighting--ce33c2d0-f442-4408-978f-13053a6a0aca", "sighting--8673c831-48ef-487b-a2b2-ffc2d5c98684", "sighting--824f9e89-361f-438c-880b-e1dc2dfef3df", "sighting--7433954a-039c-446b-b2ce-c1392758d116", "sighting--49085537-b960-4988-b248-7d737011b5c5", "sighting--a5795b0a-b4b2-46e8-9eed-fa08577b7071", "sighting--32f9bb08-eef0-41ac-a7a3-d40e743ad5be", "sighting--9b93b21d-7447-4fb6-917e-03a00534c0b6", "sighting--92e8795b-b64a-4d52-a292-c976b8a241c3", "sighting--961f23a7-a640-4aab-b8e3-b747b6914540", "sighting--f2c03993-cbdf-419b-b0ad-38a67c78c447", "sighting--d573df54-fc1d-4a61-af48-881ff1a93cdc", "sighting--9fa391f4-355e-44c1-8f0e-49cbc640ffaa", "sighting--a0634490-4938-42f1-80f1-ce55a6e0b2fa", "sighting--28a84830-716a-454b-a409-c93b9a61f059", "sighting--06f700d6-ca19-4749-bfe7-853d150a6f7c", "sighting--2e7a5ec9-6910-45b4-9caf-8a403345fb93", "sighting--5666bfb3-9f0a-4d10-a2d1-380587dee030", "sighting--eb0aa1b8-2954-4dba-b4d8-4baf5c770413", "sighting--ff784362-aac4-4324-99b0-48f3c546b5aa", "sighting--03f053c4-d8cf-4168-8985-d00f4d679d81", "sighting--44e96b81-da18-4b7c-965c-9c0ca41cc603", "sighting--445632a4-fe5e-4f62-a8d6-bcc36792e2da", "sighting--103527e1-c901-44ec-ae2a-e07056e8dd55", "sighting--1cf468fb-723d-4e93-973e-612b1839bfce", "sighting--66cb04ab-ad41-4ac0-80fb-6ad58e297696", "sighting--e76333fb-6209-47ff-8ece-9f31c20fd680", "sighting--7cf0f8c9-f949-41da-ac15-3f5ad22c06b8", "sighting--5a872c61-0878-45a7-8341-bba7e3ecf806", "sighting--d45dc8e5-3664-4ed1-9e23-75ab65682f32", "sighting--2a9801d0-23a5-436e-bea7-c8da9ddc425f", "sighting--2bb9eaf2-710c-4db4-ab7a-5367adec2cf5", "sighting--1654ff05-88a6-4eb2-8405-62068cc861fd", "sighting--b5284fa8-1c4c-4c64-bc6b-dbc9d93250ef", "sighting--00ed25d4-f5f3-42d0-8033-e8cde7a858d7", "sighting--c0313078-e5d9-4531-923a-1009ccc5b25b", "sighting--d48b3529-e61d-407c-930c-714d482c231a", "sighting--3e944833-c661-473e-820b-82f1953e12a7", "sighting--9994ef83-3f1c-40be-a289-eee10537b5ab", "sighting--74158ec1-4cfc-47c9-a9e8-f735434441b2", "sighting--bc7aae04-a8c3-43ce-9548-ab6d08d3b01a", "sighting--6419a20e-aab6-429d-a095-d56d98839e5f", "sighting--ea633ab6-1811-4685-b00a-5d552bad78aa", "sighting--290e1383-5733-4ec8-a4b5-fef467610dbf", "sighting--2f663ecc-d492-4ac3-a5b5-aade129afa63", "sighting--7bfb7421-5a6d-4619-8ee9-74f538f0429f", "sighting--9f63cd0a-54b4-47bd-8694-3ed783126e38", "sighting--85e76621-3c4a-4632-b7c9-2027912f4a8a", "sighting--1277b794-6925-4c34-980b-e38e351f3d60", "sighting--ffe3444d-9c98-46e5-a55e-95f6f3d8754a", "sighting--61205fe1-40a6-4508-b1c3-f3f190743efc", "sighting--4b74b151-390a-4756-93f8-5939c6d06070", "sighting--93af632e-804d-4bf6-b89e-1b32e0ea30dd", "sighting--3b8a2f51-12cf-4771-9c36-30d6dc4713a5", "sighting--06e3852c-8dc2-4cf8-9449-369f1d6d57bc", "sighting--215e81a0-aeee-41d6-9889-092a40001a77", "sighting--b148c5f1-4f9a-46b0-b872-0f22007feea8", "sighting--615e0cb4-ce7d-4da1-a2a8-dfbcd00038e2", "sighting--48c3dd62-61fc-4393-b636-64c59c7e60ac", "sighting--bc30cdb6-dbf1-43ee-b42f-4edfa70bf31c", "sighting--0b936077-2119-410e-ae92-4f1273820efe", "sighting--93cf96dc-650f-416e-a639-2528a8c4e665", "sighting--d69ddba4-bd27-485b-ab05-d54f4df02c19", "sighting--96ab70a6-1db5-4a1c-9c97-4f6af804992b", "sighting--1336ea91-c7ee-46d8-8fd5-4577ad75d80a", "sighting--213e9c95-b9a3-47d7-8a20-509fb6bfab70", "sighting--82091707-b365-4f54-9310-867bc19cfe92", "sighting--4c0cd50c-051c-4e17-bc35-c50d6ecae801", "sighting--bf23c955-5d85-49e5-9d5f-ac5dfcffddc4", "sighting--b04df2f5-0f14-41cf-9b15-3936f1b15cd6", "sighting--394c07ad-9803-4e9d-ba7b-508f3bde1f34", "sighting--3a2c64d7-b1ab-4420-a8b8-d8e0f6a97e1f", "sighting--242bf769-2d41-4d1e-b569-fbbbf23ac80a", "sighting--05eaac67-b3bd-442f-ba62-72335c5bdef2", "sighting--6288ed6e-0eb0-4642-b19e-6cd0152f303f", "sighting--288db28d-0f2c-4f3e-b5ab-faa70586d7bc", "sighting--9f4cf9d0-0012-42ed-8a38-e4ac95a5671a", "sighting--c6ddb140-6ad3-4f7e-ae97-abcf0f256e92", "sighting--2483b9b0-2130-4cb3-b9af-de556ef5b1aa", "sighting--88600a20-5535-4f56-9b16-5d7e573c4606", "sighting--4c765ec2-bd10-4873-ae99-b79b6a5c3df1", "sighting--fe3bc6f4-251b-4735-b0b6-390f34456d1f", "sighting--142a27dd-7afd-41c6-a982-f57ef3755178", "sighting--1bcda3ba-62b6-4e7f-9b30-92e4837c00e5", "sighting--7ff0ce22-9703-41ab-915e-998dcb8ff916", "sighting--2d9e68cb-8473-482f-986e-50d8cc3506d0", "sighting--80e2d26c-4f8b-4207-b2a4-a5ad7379a54f", "sighting--f9c7d234-dbee-4234-89a2-6099ca34ca17", "sighting--2d1caf87-80c3-4914-b11e-10d545c1b1b8", "sighting--998d5b15-235a-4ab9-ad26-e10e3e07688f", "sighting--00a1b68f-6ff6-48de-9ccb-4fb6b41f50bd", "sighting--d0f02696-f105-49be-8bd5-d777f7425ee2", "sighting--eda907c3-fd39-4269-9253-565f9aa88a48", "sighting--75f7cf94-3d41-4403-8262-e61146f62701", "sighting--85a77577-3654-4589-b87b-4f354685eb45", "sighting--373b74d3-8003-4252-aa84-28438bad3bf1", "sighting--f415fea9-79d2-4766-9050-640a529eb0ee", "sighting--10c0549b-033b-4c37-9ad0-d2b7c263d189", "sighting--15089ed1-ff53-43cc-9979-2cbff4139617", "sighting--e8253ae0-a96d-43ba-a68b-07d0ac9e9452", "sighting--705916ac-f8e7-4b9a-8626-165fdd7df12f", "sighting--8be1ee9a-7866-4a53-b355-87fe9a23796a", "sighting--c3de1ab2-29f2-4696-bd27-eacd432c993d", "sighting--a6d878bf-1f3d-41ca-bcb6-7dabb6e3e6fe", "sighting--554290f3-0c33-480d-b83d-b5365683e317", "sighting--6ad440b7-9730-4770-8033-7e50e6b388ec", "sighting--956e799a-7bdc-47cf-9c13-cb2df6967e66", "sighting--e84ff4e6-ff90-42ea-8d83-17426de76521", "sighting--9f31dd64-2c22-4475-9d2a-50d91550fca2", "sighting--d78a32b5-b110-40d4-9a43-60629eddf792", "sighting--5126ae6f-d9d0-4576-8625-4c621fab819d", "sighting--79977355-871d-49e3-a56a-7919ce1e09df", "sighting--26e2d3bb-76fa-4576-a10d-21b0d5d04c40", "sighting--5edbeb39-2bea-4632-ae92-cb39b9cd5fb8", "sighting--9ec56209-9bed-4dbc-9451-a741eccf2bcf", "sighting--5aefeb71-448b-477e-8cae-66b96acdea29", "sighting--77c675c1-9236-420c-9717-02405a2bfd86", "sighting--9261a78c-ecfe-4f85-beed-b251612308f7", "sighting--01d4787c-77f0-4e62-86be-1c15b4ed2e28", "sighting--79fa8268-1301-4039-b707-04da0d8db5ff", "sighting--d708303e-cedf-4f14-8982-60311fcd6115", "sighting--7edf0d83-1a12-4b9e-b889-0533a9a3d6c7", "sighting--7326762e-5950-4abd-98ef-36b84e219ff2", "sighting--8c40ff61-b56c-436a-ae02-24f75f5db7ad", "sighting--1d84914f-81a9-42ab-88e3-e75a0aebcd50", "sighting--585237ff-0056-4828-a5d8-8e9cc34a6f19", "sighting--6b8009d8-d7d4-4093-aba3-b81d5c23543a", "sighting--4139f0cf-1821-4b4b-9e3a-03a614fc95f0", "sighting--e2526006-16ea-41c5-bfc2-48935c57a603", "sighting--39f2cb00-656a-4c1d-9e68-9c560ffd1a29", "sighting--b67f2047-f82b-44a4-8e9a-3c5092280025", "sighting--f411c3fd-f0fb-49b3-9a5a-1acf0bfbf442", "sighting--a54db164-c615-4cf5-ace4-0d9852850b6d", "sighting--eca1b885-2854-47c9-8430-05f2a30722ba", "sighting--31cf958a-896f-4e6e-8d7c-d444c1874109", "sighting--92124d50-a157-42d1-af16-414756efe94c", "sighting--a502c672-fa78-4f3d-a47f-7da9b6f1710e", "sighting--dea31c55-7017-43f2-8023-1afe5eee04f4", "sighting--67111421-5024-4273-8230-61c80dca0a44", "sighting--1a739902-25ca-48e9-832b-9153ea7d1ad5", "sighting--ec9e6835-de27-4fe1-8524-7800d5dfc460", "sighting--e5a6b50e-190c-4389-82bc-241a5c0bfe9b", "sighting--bbbee870-25c1-49aa-bdf0-4ebeea8ca85d", "sighting--4a95825f-71be-4f78-934f-d2194d151998", "sighting--4d851eec-d4e3-4fa0-b830-8479ed69d234", "sighting--78e1d712-60dd-414c-a179-4d47acb58673", "sighting--22c9bceb-0711-4eae-8046-94faaae168eb", "sighting--e3d9562c-8fa7-4e4a-a417-1955b31277f9", "sighting--d622501d-6b63-4613-92d2-3fd41abec25a", "sighting--5eb88959-a026-4788-9d91-8b893537bf8d", "sighting--a653ae8e-55ba-4dcb-8139-de174c93d4f3", "sighting--6f2674d9-bb31-44f6-9ba3-858df6ae1103", "sighting--91ce5540-c090-409b-88ed-f6aee994e339", "sighting--a2716fc1-d87b-43ba-bb17-8ebb131dcf42", "sighting--a288119e-24d6-4d56-8f45-d8552a6d1d3a", "sighting--7f7f43b8-3e37-4c53-a5cc-bc6e6fc95dd9", "sighting--0bc82e11-d593-499e-8fd4-803cf4c86119", "sighting--e9fc3ad4-1f8f-42e6-8b50-d37a3487eb67", "sighting--1ffc7708-2d4f-4e07-b6d7-848c8e78d176", "sighting--bfdfd922-987a-448d-a114-9016f9d70626", "sighting--b85a6f98-845b-4d04-bb56-68697c7956eb", "sighting--da074aff-9c04-4a05-8327-21dd329d662d", "sighting--efcb56c0-b26d-41c4-9f3f-3980075f62d1", "sighting--2f68e803-d1b7-403c-bc1c-ef677f1d2530", "sighting--752897ed-d6a5-4ff6-bf1e-b45797b8e897", "sighting--811a91d9-21b8-4659-8128-a2bfc6ab1301", "sighting--18878c95-2ecb-46f5-9fe4-6afcc9c3fbf5", "sighting--4fd1a580-471d-47b1-9831-12ca62d81114", "sighting--96c84888-d10d-4456-ac4c-608034677037", "sighting--2201f727-7812-4904-b45c-f085a2724912", "sighting--590a85d5-fb35-47b2-b4b8-914324330a33", "sighting--888066d6-b854-44ad-9fc0-092e341ecba8", "sighting--c76f95ec-9a0f-478b-9fa7-143b58944fc2", "sighting--9974e0e4-75a3-4ccf-908a-2d27d2772b70", "sighting--359bf42c-90a0-4be6-97cb-a194c3f748c8", "sighting--bd7a1027-cba4-4f58-bca1-0674f96dc50a", "sighting--916a24ef-3ec9-40ee-a900-1fdf9fc961b7", "sighting--a5c4147b-2ee5-4508-89ce-c5b4452eeccc", "sighting--c8c78d8b-530b-48fd-8f00-1cc4b62a50f6", "sighting--8933fff9-456e-4821-8099-e1b56f630c51", "sighting--f2c7c863-1ab6-45c5-a529-d1bdd3278aa2", "sighting--d6dd9d5d-0ad5-4228-b79c-a1bb3c7cb35d", "sighting--4e0b14e7-a1de-4df5-b135-39d3d34d2064", "sighting--8bd2b6c0-e409-460c-800f-97642ba1f6b3", "sighting--f1616edd-35ba-43fb-a192-655d65e092c5", "sighting--1fe5ddce-1dd7-49d6-8e48-a554fb68a81e", "sighting--d66aaa34-4d84-4bb4-ade2-bec91112a42b", "sighting--eb129605-6f6f-4562-bd2e-c979404c587e", "sighting--4e1e0c84-61a1-446e-a1d4-82bcb4a6e73e", "sighting--0a957039-1d67-4b74-9f0d-64ef74a3c7a1", "sighting--2d8d1d20-f0a0-4688-954d-1a0079b35338", "sighting--6f32d016-7b22-4cf6-9a8e-7e900c729507", "sighting--4be8a73d-912c-43de-9a04-335ca2952392", "sighting--5d7a8075-2f22-45a2-9576-c48579f8c62b", "sighting--10ca321a-d9f7-4cfb-ab3b-a73cb71a69a9", "sighting--ba297e80-a8b6-4d94-8bc2-4ade51a5e3d9", "sighting--765a5f6e-148a-4f41-bed8-e8ab8b957241", "sighting--007b39b6-be93-4536-8044-07fd4b528ccd", "sighting--a1c0e2d5-cef6-4638-a16d-967d5a000e39", "sighting--416e6d6d-9cf8-4ee6-977b-11df9e882823", "sighting--29b129fe-ec29-480f-b1f4-ceb5af813572", "sighting--b318cdcf-bfb3-4e4c-baef-52b3e1995cd4", "sighting--a9ddcdbd-c57d-49d3-97a4-e755d5d6b5e9", "sighting--f728c1ee-5bf1-481b-a601-02dffbc5b345", "sighting--e2db9c83-8fcc-486e-9b85-d34b1090a6d7", "sighting--590c59ba-c4d3-4162-ad89-410b8272d890", "sighting--d77501ef-a21d-46d5-af1b-3aa202fff99d", "sighting--fc860ab2-c940-4abd-a3a1-6f770395bc0c", "sighting--066adc88-0a67-40e5-a659-b9825c725006", "sighting--d5511f30-e488-4dad-b1dc-27f73f76f539", "sighting--eb1f9b1f-5b30-4b3f-8ce7-95473ccbb587", "sighting--47edcd16-ae22-4625-a8ef-dd4db8b6d973", "sighting--ed12c528-4212-4717-9cbf-c7feb4044b1c", "sighting--f1248adc-49f9-40c5-811e-f55746fd9a02", "sighting--01b387d9-7abb-42b4-a512-9b00a30e695c", "sighting--896fddb1-f974-4710-9ba9-f45aabd70a23", "sighting--9487d164-52d9-48d6-b7cb-d267f461407d", "sighting--11048801-988f-460d-8648-55022423b80e", "sighting--13e84966-df36-4bea-a7d8-a6e973fa2e1c", "sighting--1a580667-17ab-4536-a406-b63ab16380d1", "sighting--e32dca70-1931-49a9-92f4-7340d01d3f97", "sighting--90741172-798f-4059-9e28-df050512b57f", "sighting--32f9f4bf-311c-4288-b785-3c5e8a19c70b", "sighting--3fc5d5a1-9c53-49d7-9593-55969e9296ed", "sighting--914fcd41-bb33-4d41-b9d5-a794fc6a8475", "sighting--1ba97bb0-ffad-4266-9b9f-62eecb18c4fe", "sighting--636d29f7-1065-4fc8-8b1a-aec1e88ca251", "sighting--b36b38ec-ba24-4fe0-ad73-e7e14b183842", "sighting--e2708929-038a-4fa7-96d8-748061f79f1b", "sighting--8e95e9e9-814f-4be8-a5f4-8b16315fd513", "sighting--e4cadd46-8ac8-424c-ba75-80eb2714df4a", "sighting--1823ba92-cf41-43d7-9fc6-93ed747c532b", "sighting--d3eefd7f-c833-4f9f-b93b-04ab4b952ecb", "sighting--887d75f7-c00c-4e8b-94a9-76f4d10debd3", "sighting--7fd24ac7-08a1-47aa-88cc-e156489ecee6", "sighting--3a6bf3e3-ebad-494c-bd38-4e5cbbec9153", "sighting--5aebbec4-11c0-4236-b8c4-9ee683e1e278", "sighting--c6d8d9ff-be1a-49ea-b748-e9330bb27e50", "sighting--6210392b-43da-445a-b26a-5f33f34d10e1", "sighting--17893aa6-16dd-46e5-a8a1-d3e4035e1a8c", "sighting--89ea4364-b9b6-4c28-b7e3-ee73e629f2c6", "sighting--649b58bd-608c-49f6-9d98-5f1066a6efe4", "sighting--681de981-89bb-47dd-9b54-321070b27888", "sighting--25bfd0fc-53bd-42d4-ac9d-fd2f6b226556", "sighting--cdd2cefe-c844-44b9-af39-df7f9859941d", "sighting--d781739e-cbbf-4a78-8393-91786dbba610", "sighting--0a58e776-5f1b-49ae-8627-b253df00f5ba", "sighting--f288fc39-8a94-4e84-990d-4955401bd4e5", "sighting--3e81eeda-32ae-4f50-a2d0-622459884479", "sighting--79e45734-c7a5-40e1-9d7d-ca7154994ac0", "sighting--84db6166-f2fb-44a0-87bd-1d891477e7db", "sighting--638356a7-047e-40d9-9b57-6666e3fa3b72", "sighting--adae95d0-2ab1-4d19-be45-5bb0e7168e9a", "sighting--258b85d7-738c-4e6f-a555-f0aef5a5c704", "sighting--fe020d80-d6e3-48c9-9c17-b2b43286efc7", "sighting--9c458bc4-aca0-4284-a198-9f3402b6b5e1", "sighting--3a3b931b-080b-4ff2-9eee-6b2f65746b31", "sighting--3c42d909-b211-442b-b24f-39dc93b00edb", "sighting--7ab97b91-b360-4eca-8060-dd094297a483", "sighting--da73a2f4-2b75-4223-854d-1028ede0d066", "sighting--dfad941a-294a-409f-8c7f-29f67b487bd3", "sighting--4f7ace7f-a8f6-4f21-b48b-0ed520122cb3", "sighting--2d1d058a-13ea-4f73-855b-765bf0fbd62e", "sighting--f57e232a-a35e-446f-9247-717d66534d7f", "sighting--b23b2434-f708-4459-ad98-0f1b65f8a7a6", "sighting--c0a55936-b8a8-4eb3-86b5-4843b47b12f9", "sighting--f56bd5e6-cccc-43b1-a20f-2fd3dd2fb7dc", "sighting--37c4ad7c-e0c3-43da-8264-b69ee183129b", "sighting--eb6e0ba5-b433-4606-9d51-d2aa384b8d77", "sighting--e4ef96cf-95c2-4a35-b6b2-50cf506a74df", "sighting--e916c6b3-ba8d-4921-ba4a-63821c1bf460", "sighting--adb5a6c1-97ae-4175-8a3b-5ca1b08e5cf3", "sighting--4b8c1812-5acd-42a5-bc33-8947a940a34a", "sighting--625ef422-ce94-4fa9-a813-09b5380b55fb", "sighting--14c15114-dfbc-4e6c-afc4-0faa8689660e", "sighting--5ece6830-0b5e-4836-9f55-d20a6ad052be", "sighting--54ca46ad-0ae8-4450-9682-6d7845c9aded", "sighting--5f3db6a6-cc9f-4f64-aa9c-19a04cf0ce00", "sighting--de5d4a3e-6557-48cf-afdc-ba9d0d37a14e", "sighting--d565ebaf-49e5-42b1-b8ea-b6296875cf12", "sighting--97b2a157-60ae-4864-bf9f-f835bdd3d1a7", "sighting--dce59551-8ce3-4be6-8702-58f2c163dd48", "sighting--533250bb-848c-4f13-b0bf-1f43dbf9666a", "sighting--7cf02dd1-d9eb-4003-b06a-ab3973c396a8", "sighting--006aaba6-a442-4184-a0e6-c9d51ea9ec3e", "sighting--96481cf0-cc24-4b19-b942-7b52a1998758", "sighting--15b033b6-6a8c-4dc6-ab08-cb3056bec2f9", "sighting--89755d2f-810a-4d31-b71d-3892c290a1c7", "sighting--2a34f052-0071-4942-b888-b3916295f9ec", "sighting--a4241bce-bb63-4489-b260-18ac097a0127", "sighting--5290589e-4661-45cc-bd8c-d963ebb0788d", "sighting--6cbfcc4a-8776-420d-a510-5dd9fc673b96", "sighting--663d3ead-8138-4d7f-996d-9964a1133b59", "sighting--89de734d-43fb-43fd-90fb-e03132b383f7", "sighting--1295bf29-6d29-489c-9593-b7b395c52507", "sighting--ce7571d3-0a51-454a-bb77-d17a4e2e1f68", "sighting--634fe12e-1c1b-4480-90fc-7e44ce9c8e02", "sighting--eaa03071-fb6f-4d72-942a-5bfb3d647e6b", "sighting--21ea2694-a4dd-4604-9abf-1dede1c90708", "sighting--34e0dd30-99c5-419f-ae4f-22c18e382a32", "sighting--50e529b8-67f7-4665-a4d0-1920dda41a17", "sighting--d2c8eb79-4e1b-43ad-af5d-6bb0b1310197", "sighting--8fd692d2-2d38-4ebb-9a1f-13a1efbb8ddf", "sighting--21e38ab3-2c56-46f4-b481-4ecde5222536", "sighting--88f56309-c8f6-4c99-8a6c-f44e94e29bb6", "sighting--a93fddd0-d201-448f-80f2-620b623cb4f0", "sighting--1a93ece2-fabd-4684-9109-11427d3f5dde", "sighting--b37f294d-4696-476b-955e-69ec49b9c2c3", "sighting--34d209ea-2d53-4e0b-9970-46353d57c41f", "sighting--d584ff2a-6281-4f36-a659-c08a4ddff28b", "sighting--2ef487fe-e13a-4c1d-8230-094ea4d658a8", "sighting--72c23f43-b64c-4a0c-86cf-f8b8fc6219da", "sighting--a06273e3-c844-49fc-b6d2-b091c3618a83", "sighting--6e021fb8-20c8-4985-bcb9-3012f4f8c47f", "sighting--9a544df9-01de-4f33-9fb3-e46a1753d0ce", "sighting--93750f23-554d-49c2-8897-f5f86638c677", "sighting--74fdc6b3-2d2c-40cc-b2a7-f1b7b7aa9528", "sighting--2603e4cc-b581-4df5-81ec-9204ef9fd1ff", "sighting--fc64074d-88e4-4ca6-a2ec-8f8bf37b42ab", "sighting--373720e5-8bed-4979-ae6c-32ed2563c86a", "sighting--23d9f378-0252-4f47-a69e-c0b5e6c00b66", "sighting--d16e2529-98b3-4710-94be-de009fd826a3", "sighting--39b2f950-0444-43c0-a489-5e0f783a4298", "sighting--01f87860-b948-4654-9fd4-155395945e6f", "sighting--6c3b01f0-c2b7-4556-bda4-cfefec43b1eb", "sighting--d7484dba-52f9-4413-91e5-f242f93d5377", "sighting--f6d3993f-c548-4226-8e74-64b95310089a", "sighting--0ce1f67d-44d0-485a-9095-972ec085597b", "sighting--8981bc6a-dbfe-4388-98af-87e4f8a25a5b", "sighting--c1fb6032-8cca-4018-bc5d-db4c5a60bd33", "sighting--6170bfdc-0f4b-4818-b124-94286a801ce6", "sighting--af5724a0-a9f6-46e1-9e28-db20e5a38fab", "sighting--c1ad79bc-bc70-4257-acea-e83d0ad4d655", "sighting--440b1728-bb8c-4905-b089-b734228751b5", "sighting--a8c4e779-0428-4600-a47c-8b2578bb0e07", "sighting--18ea7e61-4394-4b3a-9a75-3b4d8e334ef0", "sighting--6b777917-5308-42ad-b011-913eb128bb59", "sighting--7456a445-f1e3-4ef2-8199-80e49e590992", "sighting--7233ddd9-2ca7-4ea6-b04c-bb710a5fbccb", "sighting--7a950613-fe80-40a8-b59b-cab4513df5e4", "sighting--e5416e15-a0b1-461c-8bb7-2258164c182c", "sighting--58dcb810-07b7-4e86-96ee-950215c21a57", "sighting--e878f8c2-d933-4cfb-8bd4-d7b9ebd8ac63", "sighting--118eb3d8-3cfe-4a4c-b803-db724815d26d", "sighting--3925bb5a-6e33-4997-94fa-cdf93dca00c7", "sighting--947a3f22-3761-47c3-8006-cf738c1659a0", "sighting--232a8cf1-2922-41e4-bd24-2cfa816e3251", "sighting--df516c4d-cfc4-4568-861a-001308cd008b", "sighting--1c8850c7-aae5-4169-96ac-7f6b00a5238a", "sighting--727ac9b8-c10b-4500-8975-6f009aa1a670", "sighting--8966c290-22c0-4058-90d0-d5da7b6a173a", "sighting--f16f8b89-1880-4509-b5f5-b7d736086d99", "sighting--21f40499-1291-4233-b2da-a4b5db4eabb8", "sighting--b34f35fe-e9e5-40d5-8734-35afa42a1746", "sighting--13d9fe44-e455-4d9f-9cd4-1beda08849bc", "sighting--db19ef77-1c2f-4814-bada-da526b9e67e9", "sighting--d1aa14a8-2820-4727-821d-d4c10700c2e5", "sighting--9d2582f1-42ff-49bd-8043-ae7f1199c321", "sighting--cb8dcabf-94b9-4ff5-9ccc-5a68cbe2b5d9", "sighting--0f507f61-14ba-430f-af91-b28ed9f17342", "sighting--13701275-8baa-4d17-a825-5ae2e985e8bb", "sighting--5b2b718c-2870-4ccb-95d6-26330b968807", "sighting--0488725c-8cd1-4abc-917c-0a25a331694d", "sighting--a6b85616-274b-4e46-ba6e-76bc489fc87e", "sighting--b82437b2-ffd4-407f-9b04-10a5734961b8", "sighting--f250438b-6e0d-4c0c-bda3-d7e8d0168990", "sighting--c093450f-35f1-4d06-ab6b-110e78e5faaa", "sighting--afb24869-56f6-46ed-879b-89c6e4bc3bc3", "sighting--0071f69f-3990-4be1-92dd-d71a99a94533", "sighting--2d615243-5c1d-40b9-b001-c95e277a7f09", "sighting--1882067e-b401-4f96-b41d-d059971ff547", "sighting--bff4fb13-aff5-45cd-a6a6-ffcb6558d7c5", "sighting--6933636c-b5ab-405d-97c5-781011ca1102", "sighting--269325a0-8de7-4d8c-9369-8136d64e1b37", "sighting--b19fccda-5fdc-4906-9566-30bcfbc71bdc", "sighting--e0186c2d-f264-4fa6-bd6a-31a1b879da1f", "sighting--ba0afdd0-4f5b-42b1-acad-323e76542c1f", "sighting--c4357643-8cc1-4ead-aeee-bf36aeac88a8", "sighting--0f890d81-365f-4408-9638-c2322499f503", "sighting--b018622e-e7ad-4666-9893-662f9e7e416c", "sighting--95b16439-256e-495c-9111-ac0bd2b6f492", "sighting--a00618ff-d7bb-4a45-8d07-b7d9cf9611c0", "sighting--1f2cd366-ab64-4aca-b360-7c771e1b9b4d", "sighting--287f60af-572c-4505-b265-e23575b8d12b", "sighting--6bd59eaa-8cc3-4208-aee1-7e4fcc5482fe", "sighting--d6907943-4f61-4f5f-ad66-979997d02c91", "sighting--dfb35a9b-dd61-47c4-bdbc-285004a56212", "sighting--e839b918-6c14-42ba-b301-10943aa443b8", "sighting--942b7193-4cdc-48c4-92b0-39ab3d81cfa2", "sighting--d9104db3-99a2-407a-b895-5ada2928df32", "sighting--a3d191d6-3143-49d1-bab2-eebe7d7b9e4b", "sighting--4b350c47-e6ab-4591-9361-edaa76b7c6c5", "sighting--248d448a-2811-40b9-9943-17ed2d29fc00", "sighting--fc86e3b5-3615-4fbc-bb2f-411329128507", "sighting--3092bcf8-c127-42dc-ba71-16dcaf44edc9", "sighting--5bc9731d-65ef-4a5e-ac57-95e469047423", "sighting--09e5f50b-b770-47fb-bd9f-59c05a8e79b5", "sighting--7254048f-b318-476a-9655-961ae26876a7", "sighting--7141353f-f069-496a-9f18-ddc096ee923b", "sighting--c435984d-d15e-48e6-b1e5-060fa1b7c332", "sighting--a721b2af-a25f-4a1a-8fee-3350e59ea392", "sighting--5755c4f5-700e-499f-84b0-fedbdb8a3465", "sighting--d837ec93-fcfc-457d-b39e-a1f3a235e36a", "sighting--12b0c251-d127-4b6b-bfba-b5454a5d7c7f", "sighting--3a26f320-0361-4a04-890a-f1f7f31aa6ab", "sighting--30021573-3628-4eb6-843f-d0d027a1e1e0", "sighting--bb18bae5-e964-4cbb-bc32-aa2ca3137fcc", "sighting--3912e525-701a-483f-b749-8ea8e598f790", "sighting--1309071e-6386-46d3-a49b-4fda80732c2f", "sighting--ec0f0d77-0579-40b8-87d5-1a71f07eb303", "sighting--f78565d5-1609-447e-96b7-1d04457d766b", "sighting--95e6a657-080a-4d6d-a851-0e60eb686556", "sighting--5ea95d86-2703-4472-b7e9-625e447f075e", "sighting--a0941e79-ac04-46f6-a799-7b206f86a9fb", "sighting--074ad8e1-9b3a-4c9c-bbdc-d49692d6ea14", "sighting--d760efed-9ff9-4ddb-9f2f-a8b06cd40e73", "sighting--6bf5b994-b98f-4b38-afd4-5bad27e08b04", "sighting--8c70b3f9-fdef-443f-a520-e32c63d6996e", "sighting--8c0fa744-4d1c-4500-844d-44de43d89e54", "sighting--a497357c-a357-46c0-8096-7ff4f8d63147", "sighting--1dc61c77-c895-490f-8cba-e9de2ae37ad6", "sighting--1b6081d3-2648-4385-b2fc-fed16e077844", "sighting--04691037-4f79-4e45-9247-8d31cd33512d", "sighting--8e8a4c56-0a27-4e06-9b45-e49536353168", "sighting--b0ca0f7d-4a92-49d7-946c-ce76348e6c5a", "sighting--e9c55d98-b69b-47ce-b4ea-aaa01bb4718c", "sighting--e95c7dd3-f965-4102-937a-13c8ad961924", "sighting--d5d44cc8-57d7-4020-a8ee-c760b0347241", "sighting--2ab4143a-3c07-4985-a3d3-23bad8130f29", "sighting--c34e1539-55e8-4b17-af7a-5dd2da3e2fd2", "sighting--ceab568f-f9b3-47d9-81e6-ac1e48b6fe87", "sighting--0f1cab11-f6a7-4d35-bc8e-295482227e2c", "sighting--f808bbe4-c9f9-48fd-a086-135500151ba0", "sighting--d493c2f6-dfeb-42f1-b92f-c6840a4674f3", "sighting--b0a6645b-70da-42c3-8971-f43388114539", "sighting--39663f5f-2516-41c8-b177-22c7221165af", "sighting--6ec483a0-664f-4218-bb78-dcb606428763", "sighting--0c90fbd5-2da5-4eec-bad1-4510c15e95b2", "sighting--07d2bd22-cce1-421d-ba81-b64a2bcfce33", "sighting--b5ba1739-7216-4d86-aff8-90a57def05cf", "sighting--65dd17d0-676c-402d-b789-170e66ccfa48", "sighting--e0fa798e-c085-47d9-9606-d571501bab1f", "sighting--76c6f842-b817-4f5d-9aff-214dcb84eaf9", "sighting--fb0b9865-576a-437a-b501-30344afc9b32", "sighting--3ab32cb0-2f9d-42c9-b040-f383a5b3bc2a", "sighting--fa06cdfa-1e95-41f9-b6d7-e2070d196a0f", "sighting--4d2b36c5-cd6d-4788-b3b6-152f19f8babc", "sighting--b9d1a8d6-19d9-4029-8818-87ec0f38e373", "sighting--a6ea2833-ea9d-4d21-9b20-1f82ac32d2f5", "sighting--44077d63-a457-4d6e-bc41-ae15a6625c66", "sighting--e368de08-e351-4866-a7c3-7a80361e291e", "sighting--a59f0aa0-c9d7-498c-82e4-44c7a818bb27", "sighting--ac5ee6cb-9dab-445e-91dc-68fbad5a25fd", "sighting--9be9b61a-38b6-4e25-b2cb-9d577d5afa51", "sighting--71c554ac-e645-4893-bff8-e898477c50ca", "sighting--8d746657-6c68-4fa7-b81e-739739612606", "sighting--8e705be5-4e43-4b50-9140-3cac39712e84", "sighting--826e0381-48c3-4392-96ae-37246ffa4a31", "sighting--0e24386c-3f40-4a75-beb4-68b70b35e4dd", "sighting--48b1f26f-6848-44c8-a354-96ea50d4793b", "sighting--4489551d-3082-4a33-9bbf-81378cab1243", "sighting--1b21fb92-cb0e-4587-81b2-6439819a65e7", "sighting--e710e18f-37f2-4375-a50e-bec03ac07318", "sighting--0e5199e6-c917-4058-b6fd-4500cf54ae5a", "sighting--96df1022-7877-44d1-b5be-10f874e46f1e", "sighting--433a36d4-1030-4ca4-bbec-a4a847bd037e", "sighting--c3417d4d-9a12-48c3-9278-02ed17d14db8", "sighting--4fc23423-b1a8-4e6f-9cfe-ef72bccb36ed", "sighting--84a4ac40-fc2d-4579-9e61-83485b8305b8", "sighting--f8a09c24-3ecc-4648-89b1-97a847cba559", "sighting--cd5d2c6d-3839-4bc3-bfb5-c0c3464f0b79", "sighting--74f6f016-3dbc-4991-86cd-789b2489231e", "sighting--26e3d89d-61a0-49e4-b117-91d30fdce39a", "sighting--686ebe56-c741-440c-85fe-ef9574d61099", "sighting--7e6108e0-fa44-410c-b9e0-12e9f64cd8b5", "sighting--beedf40c-357c-4f99-ac57-f372973a2f56", "sighting--125e1bc9-794e-45e6-acf1-f1c0131d9562", "sighting--a320e76c-eea6-4ee1-8250-ab1a6f4f99c5", "sighting--1728e7cc-ebe7-4991-a00f-7390f4565fc3", "sighting--8c747a51-8b4a-486d-971e-036e61097014", "sighting--af5754af-24ca-4154-88df-dd21e4354878", "sighting--7df1a4df-e694-475e-a6b6-39a2e3062ecd", "sighting--d72f1854-925f-436e-93ae-091b8b829b22", "sighting--1ec9910e-9936-44d6-8d2c-5586df1b38f7", "sighting--ed2cafb2-7dfa-4c66-927f-0a08dcd3db6f", "sighting--ebac4fab-905c-4f7a-99b7-53325e55a24c", "sighting--6db08556-526d-45c5-a054-d06727fd0759", "sighting--8266b7f6-5561-45e5-86ec-1d9a74fb9728", "sighting--18513e2c-186d-4b5d-b2cb-b4fbc8a0e002", "sighting--116cd3a1-cdc6-4c0e-81f2-b2f8cbc43160", "sighting--22146266-396e-47ed-9e53-8a038e081555", "sighting--b391657a-ffe2-4968-83d8-2f89c3b4e71c", "sighting--a2782399-afe8-4962-8ebe-6aad4f6de9d6", "sighting--6ccc6788-5e3c-4037-8eac-96ff64fb93b4", "sighting--60231f9a-5391-4a96-bd64-78a1a28eff84", "sighting--c122b584-04b7-4c6f-a893-941620f08ccf", "sighting--1d37aecd-fc21-425e-a292-2e1b44c9e3db", "sighting--6bcf608e-94d7-42c9-a4f1-746a8d9bf6b5", "sighting--9133357e-0a88-40b1-8c2e-cf9f0b490791", "sighting--a37c8198-1541-40a8-9e11-d6af93d26953", "sighting--8f436042-7447-4a39-a6cb-4af1e1f284ae", "sighting--6040e914-63dd-4389-905a-c7b30bef5695", "sighting--30740ce2-f71e-487e-acae-2849908d65a5", "sighting--c00e37af-c724-4f38-bae2-1e6065c215bb", "sighting--dfa88d26-d372-41a8-b351-f2f9c942962e", "sighting--9ab0a9ba-7be3-4332-b847-b16ded8f1b19", "sighting--5260eb18-0e3c-44e1-a8de-37b5c23341c0", "sighting--b1b16928-dabd-43c1-80f6-3c520931b1eb", "sighting--8c62cd54-ed05-4868-8500-5bf0f5886bfb", "sighting--0b24988c-5a06-40eb-9e62-be8460e51c92", "sighting--85a36cd4-4a18-4df2-bb6d-bd524a599492", "sighting--e947ff7a-857e-4d07-9ef5-958f560584ba", "sighting--f33e8d37-baed-4989-95ca-452d71b71328", "sighting--0ce7dda0-ee73-4001-bc74-0a26d1aba822", "sighting--e1a2ffc8-21dc-49e5-ad9a-20f0d9246feb", "sighting--0940e916-8f29-40e7-892a-317cf61d849a", "sighting--ce58e1e5-b9a0-49a0-90a5-853b1064655b", "sighting--9a157318-c9dc-4f55-9b06-2f8ab790f8b5", "sighting--201384bb-2ee8-4300-8804-c775211b65e8", "sighting--a52af633-21e3-4023-a46c-fe2cbc145f88", "sighting--6e2afd09-8645-4894-a7a8-dad1c79b3293", "sighting--c741ef68-19f6-4806-ba12-badfba48ff9d", "sighting--153379f6-982d-4369-ae6f-5ca88ab254c9", "sighting--017e055b-da44-445d-b7e9-aebf057b4e3c", "sighting--16b8b2b6-2067-4790-95bc-0b64881d4662", "sighting--c03f7237-1b66-4b6d-8659-b9b3b6148868", "sighting--cb7a6abe-b206-4d16-a7ee-f01152a67b2c", "sighting--d08bd506-d6c8-4a89-a602-92a72961ca43", "sighting--40099ae8-d5ab-43b3-815a-7d80a8aabc81", "sighting--9ba495d1-6ded-4814-af72-dd8b7a6188da", "sighting--1a5f9c6b-5f87-47b0-898b-96d9d5b72a93", "sighting--edef8769-83bb-4d86-b0b5-96fd495648b7", "sighting--7c92e434-69ec-42f1-96af-767859eeb5e1", "sighting--ecd2c16c-59e2-462b-a386-97e7de2e7624", "sighting--cf436c0d-1cad-4938-9a1f-566e174afe4a", "sighting--584b822f-4eaf-4c7e-a26e-2608324d95fa", "sighting--07a9af09-155c-4788-9adf-4b55691121c1", "sighting--8ba304fc-d800-4ecb-b490-dfadcdbb2c79", "sighting--8052fe8d-7335-4b2d-8fb3-8dc37465de25", "sighting--657a7d1e-7c9e-4d84-a310-0fbf7ea9e6bd", "sighting--80323f18-6111-48cd-8fdc-479a54921159", "sighting--fa793538-b5a5-4d2b-b089-41b86aa971ed", "sighting--73afb280-22da-4501-b94e-b8753a666d43", "sighting--6595eb0d-688f-45e4-a075-506770f03064", "sighting--6a21044e-734a-497b-a173-4834d35cac63", "sighting--106afe64-46b0-41ee-9421-cbdbcc980208", "sighting--521119ac-74c5-4155-a2e6-6496ca4ea572", "sighting--a20e6c6f-b351-4c59-9f8b-88ca61dd55bb", "sighting--0080e0c4-e5b3-49d6-919b-71989c280c71", "sighting--2027962f-32e3-48ce-91c6-afd3d8779b6f", "sighting--8e3003db-a53b-4357-be7f-705d194b2d2a", "sighting--f0623977-1aba-4987-b5d0-467a1db45bab", "sighting--b62e4362-eb67-4f61-be7e-9f8ee2c382e5", "sighting--8c92bb6a-ce1e-4ff1-9918-ccb175c02652", "sighting--53bcadd8-57ab-4e49-9f32-b6631d41f073", "sighting--67fb02e5-8cbc-43ee-888a-ce9d0e30cad0", "sighting--ae202d05-8b57-4d39-b136-6ff6cadfbd6f", "sighting--3a3912c9-cbcd-43a9-b73a-1f09d96e1968", "sighting--74230d9f-e45a-42c3-a695-51bb7c09b12a", "sighting--b7807b52-a9fd-4abf-91d9-361964914879", "sighting--ca804f31-73da-4bde-a802-07b0b37f1175", "sighting--15f42f1d-eede-49e4-84cd-13fceb120672", "sighting--eb5cafb7-4d18-4919-828b-ed54f7237119", "sighting--c6d43d79-0f91-4ba1-971a-e90f957c44ac", "sighting--d584a09d-19ea-4d0b-84ff-0e392c7bd798", "sighting--ba125804-e2e7-4aa7-b256-20f72103d35b", "sighting--c8ff972e-cebc-4248-bf69-afb28b05b06a", "sighting--fe4d1711-a018-40b1-8aa8-1c80146d0c1a", "sighting--0a8a7f1a-1e69-4d50-91d6-422d8779e53b", "sighting--af8f5def-e1e4-465a-bee3-66a8f5a4a9b4", "sighting--961450f0-6d78-4ea2-a8e6-2811f071f8c9", "sighting--02f0c413-ad7a-439a-a0f8-be0013d01306", "sighting--1d6a32eb-23ba-4f3f-b2c0-177510a857d6", "sighting--2aeb7eee-bbca-496b-be2e-956f62768381", "sighting--93497685-9010-44dd-908f-20084f490add", "sighting--880c2c00-d94f-4ea9-b85d-e9b15a94eb5e", "sighting--fb478dfc-fba2-4966-a56d-d24bf9340690", "sighting--91d7c1f9-8e47-45dd-85b0-fa049d77d16b", "sighting--7a4b9b8f-a938-4c5c-a41b-696bbd290e29", "sighting--293be96d-ccdd-4f4f-9d16-619da38488dc", "sighting--58819d3a-982c-4547-9920-2d23915f9638", "sighting--4c65ba22-aecd-4c3c-8915-497437b22b65", "sighting--e2e2a033-953a-4608-9586-f50e21c36d3c", "sighting--1124f0e3-e94c-461b-84cb-116b5d883d64", "sighting--1b82f38b-ca11-434b-8028-7f6e162a1c84", "sighting--6cbcd360-e155-41ec-99fd-1610f2fd5b00", "sighting--b7c57a1d-3ab3-4a5a-807a-a6c5ad781c5c", "sighting--329bf2df-50b7-43e3-9c23-0105fa4689e3", "sighting--f02b02c5-c10c-4a8b-afcb-1f12d75982a6", "sighting--1adbd6b9-bab2-4a38-9081-cdba20fad45f", "sighting--f9855b67-1b1c-48df-b7b6-9eab3abd3940", "sighting--6c9bcef7-0315-4d4a-a576-509d4dad0405", "sighting--141cd30d-42d9-4455-8663-58d876eecb50", "sighting--8fe20a9f-c849-4ab5-9b1e-8a05fad09d73", "sighting--1220a986-ec85-47fb-a08f-b5ff875c4070", "sighting--c826cde5-7f3b-4426-aa8a-7d51f3320f6d", "sighting--ab259946-5813-48b0-9146-37b2bd6be8c0", "sighting--2c982202-8fae-4c39-8bf0-0ba19281dea9", "sighting--dd8225f5-5a1d-4dc6-9199-c3af491c438c", "sighting--7155ae34-150d-47bb-99ea-113cce92f56d", "sighting--1c3afa5e-5712-4acb-adc8-086e310d4ca9", "sighting--a6b137c0-71db-4b3e-b2d3-f01714f48469", "sighting--f6a8640b-57c5-4edf-9076-7322f2519fd4", "sighting--c230159a-225a-4f70-8cc1-a5bd98cd7f81", "sighting--c11c28b2-d64f-48cd-ba1b-e8aa73da543f", "sighting--89acf975-0903-48fc-97cc-000cd0127d9c", "sighting--6334481e-4e3d-4416-9549-9d4bd8edb393", "sighting--98b1d830-9a55-43b6-87d1-31d98bab70e1", "sighting--4f9e1f1e-44ba-469a-ba0c-b11989bab6ef", "sighting--8af59e42-4d1d-4f54-958f-af5612daa4a2", "sighting--1414376f-d3a5-43e1-9866-53b99cf8645a", "sighting--9ba255fa-4fb2-46c7-a177-d312116ad73b", "sighting--ff3d686c-5bf6-442d-af46-05f1253fa58d", "sighting--cc51c2fa-04b4-4f23-8b03-d9acc90e0a4d", "sighting--1e72bbd6-2a6a-4dd4-9586-9e44f7e73c7b", "sighting--3590f215-15ac-405c-b0ae-0f44ab61ab79", "sighting--38390e64-9151-41fb-a4a1-a6fae00113fc", "sighting--c09ad042-6d88-4ce6-87b3-a5bf5c0d7c00", "sighting--f8ec074a-e958-44ff-ab69-c3f60030eda3", "sighting--cf11a586-2b65-42c0-ba54-31c72cdfb965", "sighting--d2250f2c-01a8-4c1a-ab2b-fbc372eac789", "sighting--014dfff5-35e6-4970-99ab-e3cdaa78458f", "sighting--4b0825ab-4030-4da2-967c-7f10cab655b1", "sighting--b08ae110-eaac-4956-aaa1-ba47b41dda95", "sighting--738e27f1-c65d-49d3-8d8b-9fdbcfdb0bc8", "sighting--f7286282-4f19-4556-975d-17c4c82741a5", "sighting--6ab9763f-673c-4814-91fb-5084f31c1c61", "sighting--8e34a61f-7285-46e5-bbcf-e9072ac73126", "sighting--87fa359e-6447-49c8-b5f9-5cb8459b4287", "sighting--1d8fb86c-4eca-4548-a489-ecb161bc658f", "sighting--0e8b9923-e8a2-450c-8fb2-abb11203ebef", "sighting--70793a95-3e0e-483f-8951-a85d086ee2c2", "sighting--9f95d41f-029c-4ec4-b9da-eed3b8731a4f", "sighting--9ad457ae-5d2f-4023-9690-6a2f2a7f3dc1", "sighting--68dc276c-9f64-41c8-ba28-b818f80df7eb", "sighting--6a6f0a70-a5ac-4e24-92c8-344c2bdb68a7", "sighting--05140d46-a292-48c4-bed9-4aea3459dc5a", "sighting--696257b5-8e96-4d0a-85e4-c8de53ecf8da", "sighting--eeecaf2a-e79e-4890-9812-bd22d950f55a", "sighting--6d03b909-a977-4a2d-b08d-aee32e2a9ff0", "sighting--549173d0-bb97-4733-aba5-85d901f58ab0", "sighting--2835ca62-9a64-4c35-8dc6-134a4d7dcc86", "sighting--febee5c8-0ad0-455a-8d18-73cdebe4ef2a", "sighting--6f48f295-e9f7-4f9b-b9e2-eb449eff5f05", "sighting--c250d08f-64b3-43b6-9c97-e45371d4080c", "sighting--705909df-93c8-455f-b923-297dd0660849", "sighting--1536de65-4f32-41a1-859c-b26382c6a31f", "sighting--f12c92ca-3857-4043-80c9-a906589eccf3", "sighting--bbc2b002-216b-4bd3-8203-7e7022442731", "sighting--b1305812-2873-4464-b66a-11c04ad13a42", "sighting--7872f21a-8e01-4953-b6da-97aa0ae2d35e", "sighting--e5a6ce5f-cb9c-4dce-bd53-29b8d12c609f", "sighting--b1ed4c37-0772-4810-b91b-1b5c2ca4262e", "sighting--de18e3f1-dcd9-4e07-900d-5b85df4311b4", "sighting--f85716cd-3d62-4511-aac5-731a696703d9", "sighting--f3da47b2-43ce-41fb-9ff4-9a41b8a5ce12", "sighting--f75359f0-95f9-4fdc-8e17-6fa4a6ada594", "sighting--04e67894-eb7b-4146-b5d4-3a97493330dd", "sighting--03351df7-8055-4b32-8393-2b575adaa4ec", "sighting--ed92cf37-1e7a-48f0-b1f5-ab8992372b15", "sighting--e037063d-5354-4178-9652-a6fbc3eac0ac", "sighting--23eb3e2b-cd40-43ec-bede-fbbf572a17d1", "sighting--ce7bfd88-6bf6-404c-9634-1b3ebd09d455", "sighting--fbf68ba8-0e9a-4a9b-b77f-3534cab8d6fe", "sighting--1bc359be-ad10-4fe5-b7ea-8a44a4dbf512", "sighting--e92afddc-910b-479a-92f2-4cc800e997bd", "sighting--7df2f51a-630f-42bd-a0c1-51901e014cc9", "sighting--f9f2c713-0785-43a3-8091-85df671cf809", "sighting--7aad4d53-dffe-4624-b0ad-ad624e311bda", "sighting--7ec406f9-2c3d-4af9-8edb-641d07a79657", "sighting--c9bf7cad-0394-401d-b1cd-734f0d66a621", "sighting--c1940366-ebd0-45ea-b91d-3d0ba004a38f", "sighting--f63b8595-3962-44a2-a1b8-80a823ba7549", "sighting--7002de80-2b45-4384-88d7-3f0db739d448", "sighting--67ca96ad-6c9e-48b3-a3a4-62fb808dbc76", "sighting--b43b24db-b14e-42cc-ba02-d7d411dcc452", "sighting--6975cf97-4c0f-4dac-8129-9b29709c7d1a", "sighting--d858aeac-f7fd-4ccd-b718-0e6838efccce", "sighting--1b8dde19-a5d7-459f-9319-b194a3a6e925", "sighting--73bf8647-c720-4e93-a049-f511d5b618cc", "sighting--291e4187-4449-455d-9fe3-23adbbfe1fad", "sighting--83b74d31-a7f6-4450-ba09-1785c2bd127b", "sighting--88053968-ac14-4bee-8433-f67eb5882ab5", "sighting--dc8111da-e419-4a8b-8502-eebc856e73fc", "sighting--f469658b-aeae-4ae5-9dc4-a8b573e1d4e8", "sighting--331ce897-dd42-487a-8c3c-eb4fb87a62e4", "sighting--fcaab202-f5db-4043-abd8-295c82a5031d", "sighting--416091a3-2f68-4986-8a2b-63f82bea7ab9", "sighting--e64094c5-3ea2-4888-b8de-da6205058950", "sighting--6c2edd4e-be5d-41da-88c0-9c504a5e00ff", "sighting--d5154b1f-cb57-42d6-a9cf-60b3ee4d2884", "sighting--4a33bd8a-e6ce-4a36-962f-37b2a14af8b5", "sighting--0721bb25-798a-479d-96e2-5db1426a6069", "sighting--31519a38-8f79-4bf6-b7c4-1006098beff6", "sighting--d0ba0526-714c-4150-86d4-ee42a4eaa9cc", "sighting--04b4f2bc-5a92-4f9e-b52b-41a8ac7925b5", "sighting--85aac31e-4b77-43ef-a7bd-f51bd31172d2", "sighting--c0edc3e5-0db6-4554-8801-241b359c6263", "sighting--2cd2ce0d-7d4b-4047-9cec-7469e8a00b2d", "sighting--e6e17612-255a-4428-a10b-70ad7fc31010", "sighting--10e18f21-a2e4-4dd6-a611-ea1d46cd4436", "sighting--298ec3fb-4af8-46b0-8ccc-7c9a965ec5e6", "sighting--596bb904-4da7-423f-82fa-9b05da6afae9", "sighting--7247f32c-d05f-4a22-b4d3-c6492df3c253", "sighting--ea3a0ac9-9e07-44a3-9427-b611e1b67e72", "sighting--0bcf8cc2-54ef-4415-bef5-84f378275eb5", "sighting--b311902c-1f0c-4a6a-948b-598ec9a57b96", "sighting--385c850a-864e-44dc-9b7e-0e6672c0485e", "sighting--f841bf95-a23f-4427-b17f-3e6d5f4c27c3", "sighting--1d21d5b8-bb53-4b68-9871-1e144cd9b1bf", "sighting--50232e8a-415f-42f3-a43f-5bcf9e83e7e0", "sighting--ebfb2517-8288-444b-874a-71f7879753cc", "sighting--18e41992-a20c-477b-82af-e1a178bfa47b", "sighting--c027f447-e7bc-4ecc-9c20-0f8a8891c6c2", "sighting--bbdc2a08-114a-4a12-8b8a-5b6fcbbeecb1", "sighting--6da0b29f-e49a-4997-962e-db0a7f87a1cd", "sighting--fd18350c-7037-42fb-bb6d-112822999cd6", "sighting--175e97cf-506b-449b-83b3-6408dbfc13dc", "sighting--f5526339-29bb-4db0-a600-2cb721cdd2f0", "sighting--08eb2673-e88c-4a80-9564-1dafc1950a13", "sighting--e167f473-df85-4200-8280-ce4821e8e963", "sighting--810b3e8f-2605-47d4-a4b7-5d99f87d45e5", "sighting--01474578-f618-4ccc-980a-fc1ba82312cf", "sighting--c4785067-513d-413d-b3dc-1ab1fa79c865", "sighting--cef3d9ae-7f83-4911-aaa7-abd6005eeca4", "sighting--deee494b-ad27-4c58-8b6c-4ee732d3c52b", "sighting--5fc4b72b-37d4-4186-8017-db3d79f9d928", "sighting--a1a1d7d5-3aab-4cef-a948-2086dcb7192d", "sighting--98a58f53-490d-4ea2-abfb-434e92ed1310", "sighting--2b268246-fb0c-4aee-8fdb-8d0fb6e89ecf", "sighting--411d3239-6b54-45b2-948d-1667065e98b8", "sighting--64f90170-79c7-418a-90d7-7d791ebdad89", "sighting--7e2d1dc8-3f09-4a54-a46b-2af19774df60", "sighting--9efd9770-1bf1-4544-b136-c3a5da5360f2", "sighting--f4118c58-15a9-4752-a8f9-63ab1ff21fd4", "sighting--4e20270c-93be-4e2f-ae6a-4245cf24e1fd", "sighting--ec7aef81-5cf6-44e8-89f5-5123b1460f28", "sighting--5df2cb6a-2895-4453-a5b0-7071775cb1f0", "sighting--990ba8b2-52c1-4d3f-8465-748b71d91f1e", "sighting--ba27e9ad-e3e4-43a4-b112-a781f9390d5b", "sighting--657e5dfd-95e4-49e7-b676-3b84f6f1d13b", "sighting--18fb7ef0-9f90-44ca-8f2c-10cbb4006ec9", "sighting--0d1771e0-a272-40f7-9828-ef4bbedd7bbd", "sighting--24680ce0-2577-4468-96d2-a1033666e923", "sighting--e25f84e8-9d56-41fd-8d4a-4b92616d88f6", "sighting--876f47d3-8c9b-4219-9c7d-350e572aa336", "sighting--94001ab7-7b8f-4ac2-8ed8-c5c5d1a9b37b", "sighting--a82a42b1-aa37-49c0-a32f-204f00dd00e7", "sighting--5bdeddef-5ee0-474b-8152-a93f3a1a59cd", "sighting--e49e150a-a75a-4150-b400-5a787ef1ab80", "sighting--daa93bac-c69c-4719-8ea9-b4a425f111be", "sighting--f81c2eb3-e37f-4506-aca4-d0000e8d67bf", "sighting--42e6acde-0297-4a52-bbe9-200f6a0b849e", "sighting--f35adca6-44f5-4681-aa30-c40f21bdde77", "sighting--e7c7cecb-6666-43dd-8fe7-a624cdfa949b", "sighting--02173277-5a26-443a-95d8-8c3a44927366", "sighting--cea5b9b5-2e1f-4909-bc0a-2a296a11629d", "sighting--6c72c4c1-8fa4-4cc2-987d-f91933e39117", "sighting--b43cb9bc-5857-4241-9027-48ff5a4b900a", "sighting--5dd76618-f155-43bc-9882-6baf421bfc11", "sighting--580b0671-641f-4600-a659-1ecbcfd764d0", "sighting--2701011c-d6ab-4068-a585-5b70825bd104", "sighting--46612279-9016-4b42-bac2-a46a7e8762fa", "sighting--6218a9f4-000f-4bd5-bd5f-e098d3451294", "sighting--ee6fd6b6-3e97-4be8-b919-1a80964c4d39", "sighting--34c33bd1-5cc3-4e66-8505-1dae79b84210", "sighting--41c05e6e-7c8a-42a9-822c-8e12d2378189", "sighting--1644e9fa-e42d-40fb-a6ea-12e8aa2b3b1e", "sighting--f796adb7-b9d1-40a2-abee-029f5762733e", "sighting--3c67a5c9-b081-4103-89da-cd2064e9e560", "sighting--4e3ce0a6-6515-441f-84ce-e66c504e17a4", "sighting--0a91aae9-9a40-4e6a-9983-79e1448e16f9", "sighting--e4edae27-ca28-451a-9cba-e09fb27523f5", "sighting--72358728-a150-45c3-8c5e-3ec9b7f2f83f", "sighting--90876d3d-e74f-4dc0-916c-ae84fc72d1e9", "sighting--60f7c471-bd80-4bd0-a7cc-08a83082665e", "sighting--767230ef-80ac-4d54-8c33-59168e36c3de", "sighting--e778e795-99e6-42bd-9e7c-4043f5ac453d", "sighting--b4317b0a-f0b6-482a-9bdf-41daec4f5138", "sighting--b71e461e-ec4a-4ed9-88f2-90d197a8aecd", "sighting--e338fa99-303b-45b7-9e61-75f0eeba1064", "sighting--c72b6a51-bc20-428f-83bc-12bbb518f435", "sighting--c3112629-91b5-4a9d-872a-8121c0282879", "sighting--0353d4e5-97c5-4f7d-8b62-ba8a747ba072", "sighting--2982fdda-971d-433c-9740-b61052bb6c16", "sighting--29b390e3-e7bd-48ea-8b73-c0075f24b8ab", "sighting--7167b9a9-4ab2-45d9-8022-54ae5b8dab95", "sighting--8b9b0a2f-af51-496a-8a17-c79ad5333052", "sighting--16a16bca-86d3-42ff-a9dc-4eb6df14d097", "sighting--854726b9-831e-499a-ba13-a4d8d2d0b271", "sighting--70847595-2940-4790-88f5-014df00bde42", "sighting--0761d5f5-de08-48e8-ab05-e3e5d87159af", "sighting--cede22a2-12b2-4db5-a87b-deca3212a26a", "sighting--ea2fa00b-070b-4e42-96fc-b7099d784c99", "sighting--6d4e112f-f047-4b48-97c1-cc8cfc51cc16", "sighting--76ffdd36-8e18-4a60-8d9f-a81273b39703", "sighting--1f6d531e-7073-4ddc-b158-1e8b569c5872", "sighting--01f4d382-6d8a-4cea-a7b7-e733a198a4b3", "sighting--249c5cfa-7f0a-406d-880c-590bbe9d5cb0", "sighting--1883e95d-0e8f-4271-9924-3f3ea1063a90", "sighting--3a6a1566-f1d2-42eb-acb7-16a5c9aa8f51", "sighting--75d6391c-f06f-4a93-b647-cca40cd297ca", "sighting--8ac7e646-37c0-43f4-a73a-9be04a4eb3e2", "sighting--a48ebbc3-f961-4d53-aaf9-e7cf9b0b4895", "sighting--1d7a70f8-223b-4afc-b057-cea8e87a7725", "sighting--91ca84a0-78f7-452e-8c1c-ad8bafc5380a", "sighting--2ee7430d-2608-4ce3-a5df-57215acc2ec8", "sighting--0f59c43b-6dfb-4e73-93b7-eb84a730c042", "sighting--cc1b1147-8b64-4856-a47e-93fa093af39b", "sighting--9dc6141f-79ad-4c18-9d0d-d3894d6884c0", "sighting--1e3294a8-ae48-4cf2-89d0-0e967de8dc7e", "sighting--488612c0-d9e9-420a-9457-e1f94535855a", "sighting--6f7d57c5-7113-4659-b1d8-419fa24cbaf4", "sighting--07068a87-35c9-420f-9934-69bd61bccd4d", "sighting--c5e3660a-e656-4b6d-b70e-93314ca1b760", "sighting--8f0019df-b8c8-40ed-ac4e-56687a3d1276", "sighting--7790036f-a140-4497-8aee-a007863bba34", "sighting--f8a6e14c-e1c4-4d5f-a7cb-73e3c8be6e88", "sighting--d3a39bf0-4532-4acb-adcb-3fde3f991e43", "sighting--b6103538-21eb-47dc-bbbd-4580d093bb82", "sighting--5e2d0a05-4d69-4758-a129-66d4491587a7", "sighting--3f836c54-1ee2-4887-bba8-97967a16ec36", "sighting--7126d5b2-5929-48f4-91f8-9fff77f677ab", "sighting--dc95ac6b-457b-4774-abd4-3a22845301a1", "sighting--e400d981-94c0-4969-98bd-b8ad24246fbb", "sighting--59e1f561-9236-477b-a20f-e068e1dc672f", "sighting--1962534f-1f00-4a87-a39e-cfd1ab620653", "sighting--00122f54-a89b-4aa5-a7cc-2f19de038e10", "sighting--46b3b0f5-9f32-4a89-91bf-417bbece0314", "sighting--82204739-8a4d-4786-b06f-5e76938381a2", "sighting--603d0ee9-bda9-43da-9a78-310b9fbf9c05", "sighting--fe466091-6181-43df-93ca-9c86ba86c7af", "sighting--5d17b804-e808-4728-82b1-58be0da5b0b5", "sighting--3bbc8827-5b78-49d0-b4de-9c090b423217", "sighting--65ff9b5f-0fb4-45c6-ab70-3dea828885dc", "sighting--42608a8a-5e93-48f4-af31-6b9480abdc63", "sighting--567944e1-22a5-49b8-a94a-5aead4e7af88", "sighting--0ce4f05c-e982-4985-8116-f0743227752e", "sighting--0d708bc8-791d-409d-be2c-2f4f743bbaee", "sighting--e2b980fc-0f75-4bf3-9d9c-75db6cfe767e", "sighting--63b142d7-5fe6-42eb-a561-c9d48546ceb0", "sighting--2a688378-22ef-48c5-a234-2f58994d842b", "sighting--7bf99cef-f096-4c55-87d4-183ce3fd81b7", "sighting--f755ab81-d870-47b8-9067-1f4f5f1c82eb", "sighting--4fb74892-cda4-4222-804c-fff8c0cc1c08", "sighting--970552e0-3a62-4027-8966-817f4c406220", "sighting--edcadd31-d5f3-4b67-97a0-51d0b43fa280", "sighting--927f8eac-24bd-401c-9bf7-cb6177ba02dd", "sighting--18a4453d-e0a1-468d-92a0-d1b01ae67cfe", "sighting--9966c599-3553-4d30-b7c4-28f8e3d0c7d9", "sighting--5c0b0bfa-e7cd-439f-9fe1-9240c8582c22", "sighting--8b1cc6cf-8f5d-4369-94c5-f3895bd576a3", "sighting--fcfac587-5ec5-4822-bf79-ba5b79ec5a83", "sighting--5bab1616-a59e-4d58-af9a-f35e18e2d6f4", "sighting--1d5aeb75-b911-4771-9b82-c2599371f676", "sighting--70bac5a9-0b49-4172-8e97-03582a4c0e3b", "sighting--5d4ebee8-463c-49d2-9a7a-56edf1fd29fa", "sighting--14f3d321-5ca2-40c2-be59-a943d17f9d0a", "sighting--cecf802f-3126-4608-a2b6-cb9d0913655a", "sighting--be6e654e-fc86-42e7-a912-412ec8f828f1", "sighting--06874213-99ed-48b2-a59c-f7b83a473002", "sighting--fa011c90-7c28-48ab-afd9-df0a9b08ec6b", "sighting--b49ed267-0c8b-4eca-9bde-e2f2eac87d08", "sighting--ad360cac-c420-4a84-8289-f9ba2ff00541", "sighting--7ed11165-1bdd-4bb4-bffd-51e67b6992ff", "sighting--d2753a37-75e9-4160-a63b-716649112028", "sighting--7efa538d-0ebb-493f-9464-a96eabfae9a1", "sighting--d0b0833a-419c-45ef-b2d0-a7f1588cc5a4", "sighting--c97d1523-6378-42c8-bfcc-b33d98591bf4", "sighting--10a20f1e-78b9-4c5d-92bd-4c4a64d64901", "sighting--b5dafd74-023d-4da6-8fca-2e51d4310dda", "sighting--eb6fc69e-4423-41ca-a04d-6ef214ccf814", "sighting--587c8f8b-339f-4e84-b5b0-636f7f301682", "sighting--2abe9fcd-6bb5-49ec-bdeb-730d7d289196", "sighting--91a4f912-4c44-44a4-bfa3-e5efae333772", "sighting--ff9def53-2c53-4110-a3b5-bac2de2c0c6b", "sighting--c6b436b6-7547-462d-ab47-3bd28caac599", "sighting--710c9bd6-4544-468b-bf5f-8c3979d0064c", "sighting--6b82b85c-7e63-4250-b9c5-571d71e7bd1f", "sighting--0ca68410-91ee-475d-8cc9-0085f9ec64cb", "sighting--b446b37e-f880-4eb8-be66-593c1623c2fb", "sighting--e945f887-1407-44db-88bb-3cbfbd3d82ee", "sighting--e051dfac-8606-453c-96aa-9d134a1bddfe", "sighting--a58d6b85-3d8d-4a7a-bb4b-b48e9868a6e1", "sighting--ab59c592-fb68-461e-81b1-bde1467762db", "sighting--e9750438-bf30-4eac-86c7-684f1e85ced3", "sighting--79d0c59a-ff41-47f0-81f8-44e1c8cb9a2a", "sighting--55a19497-9371-46c7-9417-da5cabe706bd", "sighting--d67fa746-1512-4bdf-b397-2d45afc0e5d7", "sighting--06b1871e-8cd7-4fb8-a178-968145aa8af4", "sighting--4864baf6-db35-40c4-9cc2-d5542ec5c4f2", "sighting--d8b5bd9d-0714-4dca-8e17-311927d0cb76", "sighting--7b2b2a2d-7b2a-423b-9bd1-70e160e971e6", "sighting--99ab9977-f303-4dcf-8403-246ad6b7dd03", "sighting--0cec6468-d187-4243-ad96-b10ad3efdbd0", "sighting--efb1da0d-7833-4c34-af42-76b567a12207", "sighting--c8fb3f3d-a4a6-452b-98d6-e1d4a96240d3", "sighting--6c3e38eb-bd27-4286-bf74-40153c853f1c", "sighting--d3b11c0b-145e-4ac1-a65e-2d0db4b54d29", "sighting--e3b3a787-95d1-41ed-9877-2a0de8ff6762", "sighting--ce52690e-4f47-4059-8cd0-0bb7fc1e3d82", "sighting--3eb9214a-62fd-40bb-8b50-335afa9700e8", "sighting--f12c3e06-b2c0-40ae-b69e-4a670495b425", "sighting--d98655f7-39a1-47fc-a2f7-220fd8ecdfac", "sighting--073bae6a-0e4b-48e6-b323-5dc59f95dc89", "sighting--268f6e2f-c7e4-4bcf-82d5-4e9b854a3d51", "sighting--b2f370c6-fb50-4358-b956-f915281ce99e", "sighting--d98cc2b3-c5a8-4364-9767-202a40cd7a73", "sighting--e643a241-314e-4b4e-9be3-412e031ef10c", "sighting--b6be43c9-cc05-44c2-b124-c72225e6d8b0", "sighting--efb503df-8a50-4b0d-a773-e70b3ebba86b", "sighting--e924c96a-4dcb-4894-83d5-0939b5210868", "sighting--f91e3034-4106-4755-82b9-ec11ec591c8c", "sighting--5a1524d7-89cd-49dc-8ec3-7b01f4b11191", "sighting--b80f1ac5-7176-4e27-b7d6-5a06c51a043c", "sighting--44eba65f-1d93-47cb-82df-f5077951fb94", "sighting--bd8772c4-e991-45ea-b439-90ad405d12a8", "sighting--41dcd644-0aca-4d8f-8bcb-8fea54048001", "sighting--fd736944-e466-4274-a41a-9e8923e05714", "sighting--63f934a5-137e-4b23-affc-22b60c1d4fd4", "sighting--1b2cbbaf-d1df-42f6-82c6-eab4400165a5", "sighting--53a30b43-6a7a-4833-8446-1713f6db2e83", "sighting--54184099-77f9-475b-88a1-db34f68e8d63", "sighting--d8cfc933-52f7-4129-8fdc-663bb765e01a", "sighting--2d644af3-a12e-4085-8333-bf9041c453d4", "sighting--3886bda8-5e8b-42f9-ae5c-3fc8ea20b6b4", "sighting--52ff0f7e-3ffb-4dea-82cd-c986757e2d41", "sighting--9cc2ec36-6662-4da5-b25c-6e05238de01f", "sighting--adfdfb82-5062-4eb1-954f-948501038fd9", "sighting--87a011c9-287b-4a82-8230-9ab090b4abdf", "sighting--cd489bbb-7f39-4522-b201-39aa35c3354f", "sighting--cdf7a6dd-7bc3-4db1-91af-9b658eb3a9b3", "sighting--6b0f73db-1225-46ca-b5ad-ed663e3bc19a", "sighting--7bf91993-85e6-4c3e-bbe9-b0bbd4c58f97", "sighting--0222a64a-9be7-4917-b738-27166a8f93f7", "sighting--bc0d5c94-e533-4c62-b5e6-acbf27b2d3a7", "sighting--d566eabc-016e-4122-a97e-4cc6172f80fd", "sighting--7e33eff2-b71d-4c85-bc92-b8fe2b7964b6", "sighting--93da3197-9c99-4cd2-bfc9-188ddb6d3edc", "sighting--f900a124-2fde-4941-9398-46d2de385654", "sighting--d41201b5-692f-4a3e-8ae0-ee82d0e26bed", "sighting--4c8ae95d-bcea-4e01-8456-8401ad6a3deb", "sighting--cf3f8c23-30b4-4a35-9247-a39add8ffc51", "sighting--877eee74-bc90-47bf-8f4d-dcef57a65127", "sighting--044a36f9-9398-4968-bbd3-724da85f03f4", "sighting--f3ea4936-65e8-473a-9113-b48c4611276f", "sighting--4ef1b5c2-2def-40cd-aebc-4943cb2a733e", "sighting--33d7494a-24cf-495a-9c1f-6c61744c69c0", "sighting--da0df0ae-70e8-47f2-b518-c6e6c8e46ff9", "sighting--8776d183-2df1-45cd-9bc2-3d6ba861060a", "sighting--67638ba1-f99d-4eed-9c57-a1b48c927073", "sighting--388bab96-efc9-40f0-8e3b-71cdfb3c5b05", "sighting--f5970adc-ec25-40f6-9fb1-b843405dc630", "sighting--fd402e11-827f-45ec-b4d4-c8ef59cdb832", "sighting--2461c2a0-d7c0-4dd3-bc4e-3098d2b66a85", "sighting--72a644e6-1ae6-4189-8ab6-89de7323c5fc", "sighting--fcf82684-1427-49f9-a56a-bf965d452fd4", "sighting--7fc99057-8954-429d-89a2-f6c5a957eb56", "sighting--faa1e012-c880-4d5b-88eb-a77d97bbdbdd", "sighting--213a29bc-2048-4de2-badb-ce29fa8ff097", "sighting--dfcfd9cc-4038-4216-86c7-54d71494a663", "sighting--c2f72664-e041-4ad0-a10f-181b0e66bf08", "sighting--b10ab5c0-647a-4ab2-8cfd-fabeda4c78b1", "sighting--86df8af4-c5d4-4850-a12d-2edf261ce6de", "sighting--aaa3d989-c871-4eee-ac28-f9eba2874bdc", "sighting--60d2c6fd-219f-47b0-9bf7-053bc5ea8022", "sighting--d6096e04-8a25-4019-879f-5e4b6de94eff", "sighting--454ca0b0-b68e-466e-aad2-a050311c39cf", "sighting--6e1873b4-7693-4c37-b456-01e112e6ac35", "sighting--f45b8b08-b6c6-4b7b-9be4-d59c551f2168", "sighting--392e7c65-73d1-4265-8bc4-1d65e5441aa5", "sighting--3e575498-7ea2-4358-bb25-22c42cccc164", "sighting--9d8cc6eb-6a17-4ad8-960b-c6f6d42cdc5f", "sighting--47291623-aae1-43f0-b069-8df60705942c", "sighting--912253f6-5645-4114-9ea2-995200c89fc0", "sighting--19d989b0-d1db-4490-98ae-a5c1b172356f", "sighting--7d27644a-7dec-4906-a437-ed3676a853f1", "sighting--17766752-e45c-434b-bcf6-1884dc693ef3", "sighting--99c37646-5410-4310-b816-e61ad2507893", "sighting--b3d30806-d56a-4996-8dff-7f6ad3a19061", "sighting--40a329a1-4339-42c6-bf2a-ddd05e2a3f0f", "sighting--c36641f0-916e-488c-9009-b82a87e36f58", "sighting--ce53446b-f765-4071-ba48-29526d61f2fd", "sighting--6e06afbc-b77a-42de-a147-16d2e7e3c833", "sighting--be0ab34f-5a70-4c97-ab51-e7f7be9c5b8c", "sighting--d0807c4f-5a30-43b3-83ab-4b011506d7c0", "sighting--d2de4f99-6c03-4c63-ad4d-1eaddfa7586a", "sighting--54c00c09-be4f-4397-8f37-ee304b5fe0d2", "sighting--23b91bfb-0656-4d5d-9f0d-7c3e05af2fe1", "sighting--313d6579-3e3a-406d-aad0-e136141bbfd5", "sighting--c79c0478-db6a-4a08-a4cd-ea2df51ef563", "sighting--bc0f3627-de2d-4bd0-b1de-5a1f9c10a3e2", "sighting--97ec197c-82c2-49c4-ae08-475b0d85ec63", "sighting--99d273b7-ee0e-459d-82e0-752e15aa099b", "sighting--c9961efa-e646-41f9-9d9e-35df4f354111", "sighting--806891bb-d278-4b8d-9f66-4209180bd8ab", "sighting--18e38aba-caec-4acd-aac9-8222d4959b89", "sighting--30424866-2b69-43f3-b353-701009008d39", "sighting--c3240bf4-ac5b-44ef-a663-0961503079ff", "sighting--450f170c-1f15-4ad5-8e61-e3eecc305357", "sighting--aa7c028f-79dc-4f48-9ca8-12e70cbe7ea6", "sighting--cc1460ca-8dfb-449a-b46e-918706a98903", "sighting--a897a4b3-ebd9-46f6-8863-c009f741e5a7", "sighting--a92e9df0-2f68-4d93-ac9f-f10fbc659195", "sighting--44f20c32-6929-4e2f-ae59-ac82ee21cf12", "sighting--c45e440b-72b5-4e3f-8164-8ba34aab9234", "sighting--5db3ea3b-8f1a-477f-b8ae-fdf1d2544f50", "sighting--48d1207d-bcb3-41ce-839f-ad293acdac18", "sighting--181567d2-df4f-4a24-8446-4a7e379c1530", "sighting--9c740761-0607-48cc-8fe6-6c8a3c79c8a3", "sighting--44ed2a63-3968-4f01-95db-9afb5b3c4cc8", "sighting--a3c8215a-5ad3-4135-9409-5f43a01f5d7e", "sighting--d1b04f1c-515f-4c7b-b0c7-b4d5f8c810d2", "sighting--6ba90a7a-a6f0-4b3c-8454-7427faa93d63", "sighting--5458b595-0b25-41b7-9830-af678f76735e", "sighting--56a16a02-7894-478d-a30a-9f418fea9483", "sighting--3c2aada7-1142-4a9f-858a-7b8318c4c5d7", "sighting--79b307dc-3175-4ab7-a8d0-fe9514c51f7a", "sighting--4c87f0d1-4c2e-420c-ae19-c77690962ab2", "sighting--597621a0-7110-4c4d-ba37-4ad0fe7f79f3", "sighting--8920ad33-d3ad-40e1-ae35-bab713d76e0f", "sighting--959ed220-53a0-4ef5-9d9b-977341266c9f", "sighting--c480b358-a235-4fe5-9983-d87cb2daa390", "sighting--176bfc76-897f-41e9-a1ca-e32de75bcdcb", "sighting--78443245-5136-42e7-a32b-d0c882f006da", "sighting--387b01b7-173b-4da8-a6c9-6582230c1e4d", "sighting--f90aa162-c17b-4439-812f-dda082284ec6", "sighting--d4e960fb-b459-4e86-99a7-c434456f21d9", "sighting--d1e17b0d-1ff3-4176-98b8-1bd8c57bbdd6", "sighting--e5307ca5-43be-4acc-abc9-bce134ba7e3d", "sighting--ce83c992-9b22-451e-8f37-c80114427629", "sighting--133f2abd-da51-4f52-ad58-9727cac3c859", "sighting--5050f842-6a9d-4be0-9bbf-dde204c0459f", "sighting--e99cc78a-f5ee-472c-8faa-6c8fac1b2f21", "sighting--ad79d7e6-469f-4196-940f-ece33dd04539", "sighting--7a85a74e-e91c-478b-ad41-6de147b67d34", "sighting--481bc1f7-7067-425b-b49c-11abe9a98192", "sighting--035edbb2-0115-4ff6-b457-1741b7eb3baa", "sighting--6fec6b4b-a0aa-436a-a9c8-bf98a1406cb5", "sighting--7c4e6738-a251-4beb-8d36-dd2f00609807", "sighting--ece3f7d2-4570-4d92-aa57-03e02dc4c248", "sighting--451381b9-630e-4c6a-9a94-28cd7549c08d", "sighting--6e4ecb96-8637-4ed6-9837-b5906cecd61a", "sighting--82017f23-d499-4c70-9803-ac039b490401", "sighting--b60581fd-c7ba-4c6f-bd8e-832209edc49d", "sighting--0be0b52f-3976-4eea-9d71-5a8520e26530", "sighting--a54e554b-afac-4a5f-b547-d40aeaf550dc", "sighting--d4c579f4-9204-4c49-97a8-2ffbd5b3c30f", "sighting--0fbc1977-6605-46b4-aa56-2f4bf1a5fbea", "sighting--7aa008d0-f8a9-409c-aac9-cdbbd020362c", "sighting--07957787-ee6b-4937-b24f-bada68ea922c", "sighting--2bb3ec8b-a136-4fd7-bdc0-1f7a4be183bb", "sighting--8728d980-c647-492e-82ae-f67736920fb3", "sighting--00ff9905-4877-4bc8-926d-6b954abc4381", "sighting--a6f19db5-c66c-4536-b1b0-e032678c3c9b", "sighting--db4d8052-700b-43e7-8d4a-9657c665b93f", "sighting--fb6251cc-6776-4866-b6e6-b878391adc30", "sighting--52bcae49-157e-44f1-948b-2b552dae1418", "sighting--23f27ebe-9eae-4aa2-903d-78f09b0eecbf", "sighting--ef948efc-5051-4e0e-a5a5-36d709096926", "sighting--06e59202-9c5b-4e06-9762-733f72622fb8", "sighting--4fbe4ba7-f09f-4288-aecb-fe4eb435456c", "sighting--0f7a6c2c-9542-483a-b919-5e13483f0606", "sighting--5d6c7d96-5072-446c-8643-be9de9f06528", "sighting--d704bf0f-e6e0-49a5-812d-84f5cbb6aaf5", "sighting--070840f4-201a-48d0-9d22-ce8bf9fa434f", "sighting--c9d65b42-9c0c-474e-b81d-f085c1784de2", "sighting--a6869a7b-4e87-4444-8d50-495fbe7810c8", "sighting--fe33c654-ae16-4c90-91c2-a6eeb4d2e169", "sighting--73bb4c06-0f82-4a84-b5e8-6c0b2feb484a", "sighting--d513e381-a188-41b0-a214-7d4ead8a4211", "sighting--6799c12d-70be-48ae-abfd-960a47ffff7d", "sighting--a4de7c27-960a-4603-b641-102cd7771904", "sighting--c69c8cca-6344-4ae9-b37b-8d7860b3ee34", "sighting--cf017389-3489-4051-8aac-f72f67ea79a9", "sighting--5772f8e9-45bc-4002-85f7-ccbbe90fe3da", "sighting--5580fc10-0ef9-465d-aecc-29b47ead0dfa", "sighting--d6d115c0-7bd3-4ce1-8576-4743eabdd746", "sighting--e76cf98d-00fd-438c-b5ba-fc220f011376", "sighting--9b3ed0e8-75d4-4a7e-abde-d9e9bcc34e99", "sighting--e4a24c5b-e54a-4bfb-b158-16763db59ba9", "sighting--365651ef-272e-4e2c-9b8f-8ad17fdaf874", "sighting--de23d6dd-63d1-4d89-9ff8-da9f8c789ab4", "sighting--12b92808-e751-4ccc-abc3-444dbd700350", "sighting--f80270e1-bdd0-4047-9b22-37395be6fcb7", "sighting--d83fa9d4-822f-4554-935b-802147403fa1", "sighting--aa2ac63c-28b0-44f5-99c4-fec889c2b368", "sighting--0324c75d-cd07-46da-a4a5-ecc1c26c4ac2", "sighting--8cc451b2-831e-4bdc-ad9b-ac0d9e48bae6", "sighting--7d256b91-bd9d-4555-be03-eebdcc9c1ab4", "sighting--560feeac-f7d5-47f6-9882-4673fbd9dd7f", "sighting--3be607e0-38d5-4444-8ab4-ff0b54df9e14", "sighting--021b59cd-8d53-4421-8975-7856ab53351d", "sighting--2fba929c-9eda-400e-87a9-22fe10fc2654", "sighting--11c7c16f-f917-478b-8c39-a247868b6a43", "sighting--4c9f0eb0-5b3a-4589-8eda-6241c86dfd69", "sighting--6560f10a-2b79-4938-b77d-b873abc183e6", "sighting--13603e5e-5b4d-4ec0-b1b4-a3fed5bd9263", "sighting--f7ce501f-df3b-4fc3-8224-8e376b96c3c3", "sighting--5c09658a-ac4a-40c9-ac5a-62e959e66fa5", "sighting--8abd316d-88fa-4294-a1c3-aeeb298582e8", "sighting--f6ea5953-d3e8-4ffd-ab01-8fd019d0ef4a", "sighting--c430ca4a-2e2a-459c-9fe8-f80c772fc6cf", "sighting--4dee063b-5161-4c0a-9937-9ec2968af947", "sighting--cba92408-aa7a-4837-b071-b265b309a35b", "sighting--7b163053-8a57-42ec-9b9f-93003d1a29b5", "sighting--60794b4f-013b-4fc6-b70e-f12c4989f6cc", "sighting--b530b829-1ad5-4a4f-8617-8cac933e018f", "sighting--63c0fd9b-43bc-445f-ad7d-0508c808c0cf", "sighting--f240afd7-49ea-49dd-a330-cc986aa6f3a3", "sighting--51851a71-29bb-4c18-9a56-f63b4ad2f057", "sighting--b304ca7a-ce5b-4447-9e5e-692c4d663ebe", "sighting--42d6a601-01b5-4436-80d6-55508a549b16", "sighting--67a14367-a184-4281-a74e-10ec2913525f", "sighting--97bcf5f6-344f-4922-a861-68a5ebb55b33", "sighting--f6684a4e-f0f4-4306-adf9-b8b8da5b5301", "sighting--d7a2e365-5b09-4149-9b33-0729843edfe2", "sighting--023b97ae-2e6e-4fd3-8010-3ef1ee604f40", "sighting--4a938f0a-06c6-4580-97b9-ccc336120eca", "sighting--2dc26384-ec21-42d5-aaf0-f0b7e357fd18", "sighting--fc7b0831-b1b8-416c-9cb5-18a32fdb8ab2", "sighting--b5c89cda-45fc-4554-b200-fe33e1dc3a2f", "sighting--ad24c943-bb1e-475a-a4f7-9311534f3ee6", "sighting--e36e313b-7150-433b-b32f-dedc02095b41", "sighting--e170276a-5b54-454e-be0b-fda15f153b41", "sighting--5a74b1be-47ef-4189-9ea3-3236499fff66", "sighting--3da7a18a-f15b-4fb8-9364-e90933af0cbc", "sighting--64c4b0ae-7dc8-4219-ad34-a2c82951191d", "sighting--f0aa9677-3757-4c44-b480-2d1d6b344ba1", "sighting--76d677db-fc02-4213-838e-7c6ea3ab8345", "sighting--ed4dfd6b-2ca7-44e6-8e61-dc5455e37184", "sighting--7e4bfe2c-b7ec-4edc-b5f4-865c1a35476b", "sighting--c60ed887-427f-4f32-9243-cabd71400d7c", "sighting--1061d648-2b0e-455d-a327-c2c1308a3d2d", "sighting--44a5e9f0-ca46-4af2-88c2-96cb99af30af", "sighting--9b5d92c3-0e3e-48cc-9382-5d4fc7def446", "sighting--ffeaf576-d346-4bc4-bc7b-4cbef9090106", "sighting--fffa9d71-846e-4942-a5de-664ca61385e8", "sighting--5f9c9a0a-4871-4b4c-9849-a70169488841", "sighting--e03399bc-9a1e-41d6-aeae-819c1b423053", "sighting--0533c301-f051-49cb-b2f6-bcc137b9206a", "sighting--ed78da3c-d557-4e5c-9c48-9151650f4c5a", "sighting--800b1bf4-d04d-4e5e-94df-988fd1139727", "sighting--739cfc20-0afd-4f79-9059-be88a7e864a9", "sighting--db18737d-42a9-4cfb-b0e4-f4d2fd41f525", "sighting--b1812ae6-499c-4487-8131-08d042df7c89", "sighting--598a452f-d086-4d9d-8746-14a0520e221d", "sighting--488c728d-2809-4009-b72a-b96805eccfdb", "sighting--64aca519-6a2e-4e37-94c8-d7a3bf511362", "sighting--9d46f2a9-248e-4ae4-bc83-118d2cbc70de", "sighting--de532d92-c98f-42bc-87aa-4cfb33f04b11", "sighting--3a1a958b-aff5-4826-b702-e816f163dede", "sighting--c628f088-299c-4ce4-891d-b6e1bb1bda37", "sighting--c546bdd4-3052-4f21-8859-b69a5c7acc05", "sighting--16b6d46b-cafd-4400-b447-1663b44068d6", "sighting--edac40f2-4c4e-445d-b5d0-46638d7ce6e0", "sighting--5c5b12ec-700c-42d3-bd80-02eb66852bc7", "sighting--f5d5a0ea-b774-46a7-8cec-fd3229e10217", "sighting--e77e567e-ef11-4200-94fa-74951642fba6", "sighting--566c515a-ddf5-4524-b52d-f7c35f25add3", "sighting--2ce54e95-7cf3-4ed8-b998-dc08acbbb43a", "sighting--acf8655b-09d5-4dc9-839f-e2d34f8d1b61", "sighting--441f83ac-1755-4434-83fb-ffb97ba04e86", "sighting--83887c12-109f-4358-a24e-db7a1f5e9b43", "sighting--4c539b42-0f5c-4192-be91-888bbea3c6b8", "sighting--d2ec4157-6c60-43cb-b6f3-36570ac37c82", "sighting--6fb859cb-c7f8-4e2f-9f04-b7819db371ca", "sighting--8c90aa01-9fdc-4326-be5d-ef389e0457b6", "sighting--3ebbf912-7c6b-49aa-8bc4-dccb7f6cd137", "sighting--f60f9448-a605-4245-a2e1-f99712a4fe9f", "sighting--3b7be1b1-2465-4225-9405-8a086b2ac55e", "sighting--3e6573fa-740b-48c2-afab-1ad7fb24e180", "sighting--f7753dae-2458-43c4-b4ab-d40846e09a87", "sighting--a5af7ef4-7136-42b7-a8fd-deb83f1a89af", "sighting--820af81a-c9bf-4c3b-91d7-442cbd602047", "sighting--0fd24ad8-dc61-4f32-b2e3-2e376c179963", "sighting--179288db-1aff-477e-ad55-85a66bebe0ae", "sighting--df619ddd-e61b-4754-8a2b-5897a7013149", "sighting--8cf8253f-f57f-453e-a2ae-cabbae7fbd21", "sighting--bc1f214b-b4ee-41e1-894d-ead088f10e02", "sighting--38c01d67-472e-4c58-8866-dae30f7b6a7a", "sighting--dfebc53f-abf5-442e-bf99-ffe8fc481ab0", "sighting--2b08d0e6-ea5f-414c-b58e-5a580edfc679", "sighting--56329985-7f19-4bc0-b7c9-6d220b78087b", "sighting--651bd09c-510e-418b-97c4-3f791fff037c", "sighting--5add9499-7405-41b6-9152-f1e1ec6d7dc7", "sighting--b79565af-83a4-468f-ba1a-57bb758e15ca", "sighting--79342753-a8fe-4a3a-bf3c-7218dc543323", "sighting--22e539e5-9e3e-43a8-853a-41c8e8499797", "sighting--1ed0fce2-944a-42b6-8301-39ca09e1cf0b", "sighting--49380d0a-be33-41b2-8a5b-834408d8bb6b", "sighting--dbf57ec9-ae7a-4fad-acff-8119677fcb7b", "sighting--4ef3d702-e7ee-47bf-ae56-4a4bed7cbd8b", "sighting--6013144f-6cae-45cb-8091-aab6a9a67f2a", "sighting--fc616091-008c-47ac-a190-f01db50c784a", "sighting--41a0c4ea-9386-4514-98a9-66bf75884e67", "sighting--4a4a94ae-70a2-469d-a720-58261ecf40ef", "sighting--c788d6ca-54ae-43cd-900f-52927aeb8726", "sighting--8f551974-acbe-439b-8d93-e1a7bf873f51", "sighting--1e2dff6e-06ab-4115-bd78-e20e2cce6ad2", "sighting--4335d040-3d9e-4b8d-bf79-196a223a8735", "sighting--9c51cfc2-f301-4a01-a1dc-14fed4fbebbc", "sighting--37b39375-1722-4243-ba6f-7ee08f714f32", "sighting--49f05246-0194-4940-8d3a-560835885ffe", "sighting--4a034b07-039f-4964-9e73-201966b46126", "sighting--09938fad-13aa-44b6-a18b-f5c1adc432cc", "sighting--f7216a30-477e-4800-a121-51fbc5f9553c", "sighting--7c781a70-30f9-4e2a-a388-5b28363dad1c", "sighting--7bc66e67-33ac-493b-8c3f-ecb43c95743e", "sighting--823272fa-5164-4675-9cb8-c773ba075a2e", "sighting--c5fef9cd-c819-418d-bde1-c15e16e3caee", "sighting--79d11107-3a18-4c59-9f81-57e641b5919a", "sighting--6ebc9cd7-9a9c-47b5-a8a2-5812de14c7a7", "sighting--a291a514-c469-44e2-9a47-0175f0f3724b", "sighting--837a7361-d2a3-4414-9250-8d2a33ea8607", "sighting--59532160-1cbb-4fff-8246-1e7103833604", "sighting--eb56683d-4867-4628-b2f8-55979d2230cb", "sighting--20fb015b-2b2e-4245-95c7-5fd1c867a321", "sighting--b749645a-63fb-450f-9b86-b168de912d05", "sighting--ee9e0f8b-1553-41a9-b1b7-225bb59fa310", "sighting--8fe3256f-deba-4c8f-b5d7-728c4f043571", "sighting--a41f5f7d-0289-466c-80de-91de9e02beff", "sighting--8835b915-9363-463f-a4d3-033fcbabb598", "sighting--06e55dc0-c485-4230-b06e-7d388f7b6997", "sighting--bc7fd434-3f26-4bfa-a9b8-138bdb041e38", "sighting--6dae9621-0afd-4825-b74b-5beaa59f8fdf", "sighting--78e96578-3887-4de5-aa4f-4729f1ed3bbc", "sighting--3d568fd2-8158-4775-97d0-a6d0f10d99ad", "sighting--d3865859-2856-4cd0-aa39-763195a85fdd", "sighting--196eabbe-f115-4f56-b446-8ca1904c10db", "sighting--ecc679a5-29fc-4836-aaaf-90aa654baac8", "sighting--3f249a08-dbdc-4b12-bdc8-c9f5044a55fd", "sighting--b1cb9e68-9b66-426d-80d3-7ca2736059d5", "sighting--bbe1e273-18fb-46ee-9af9-ddcf5f407713", "sighting--c15c1f8c-d510-4980-912e-9386192b8c6e", "sighting--1d920ae9-c189-4b49-a090-c60e845b064f", "sighting--4a8df96e-4fda-4258-a3e6-ab3979c662d1", "sighting--e0801c74-d86f-4c60-9f2b-7117a5768518", "sighting--5f14ce03-00a0-41c4-b325-0d1a311d3616", "sighting--95c62a90-71ca-4d13-a6d2-c2235d04f49e", "sighting--c6331218-91f9-4dfa-bba5-aa04478c9ac1", "sighting--4f1f58b3-3e57-4812-b30f-5d23a8683cbf", "sighting--b3456e0f-17f1-41b1-8ca1-6477e06695a6", "sighting--84e7b589-4c34-4fb9-9ee4-e1e6d9021e6e", "sighting--32725a25-1d5a-4268-8a6a-4d709ef564a2", "sighting--9973a712-b954-4b99-820b-53275f2fd448", "sighting--bd0ccd4a-b115-4ff8-b8f4-a9c0a4f60374", "sighting--47aacaa1-f789-4ea1-8a20-e95750caa579", "sighting--3b2bddd1-6cbd-4312-9f1b-127ed2661311", "sighting--7b732d5d-0bbb-498d-8ab2-0b86ee5f3554", "sighting--9f2ee990-60f0-473c-9a24-5375ee747e3d", "sighting--064e251e-a447-48ec-8b6a-0bdc02303e8b", "sighting--f4250a55-d2a4-400c-8b9e-f3b8df9a0aff", "sighting--eaf0f881-eae6-4331-80bc-dd88dc09f8ac", "sighting--d90a045c-53ba-4c9b-9d26-a42c7d6d40d5", "sighting--5d1c1cde-e335-4490-b97d-18af500514e4", "sighting--102c57ea-411b-4442-9809-2b7d1ec69969", "sighting--bb53eb19-ea8c-469c-b93b-f63f015464ba", "sighting--c32603cc-7c33-463a-af9d-115496a4542d", "sighting--e8e71919-e4e2-4384-95d2-1eaba109f20d", "sighting--6414077a-57a1-47ed-8c30-efd761ab5adf", "sighting--279c893b-a2ce-496d-8e4a-2c5b42bab5e7", "sighting--a47480eb-f55a-435a-b2ba-ba5caea2a429", "sighting--d581e307-f1eb-4010-a01d-0e27b7a183ea", "sighting--47ac6378-5437-4db9-929a-7e2ea0b0088d", "sighting--befaef85-b133-45d7-b314-6c971a6805ab", "sighting--b8e5c32a-668b-4d37-a932-723c70c3a02f", "sighting--399bcf28-7d98-4267-9ae1-9ea03b7f0b71", "sighting--b5a58fe2-6e71-45f9-bc52-91136b6d247d", "sighting--54f40150-8223-494c-a4ae-499b16ea58a6", "sighting--bb77afe2-e0ef-4363-8264-efae0a4a5942", "sighting--6efacdc7-cb2f-4aba-b99b-d2b55a3f2bbd", "sighting--b8ed90ff-4714-4fe5-a59e-e95f3df68c03", "sighting--b121404d-b1d9-4631-902a-6c1a06825af1", "sighting--d8d93b12-a5bd-4cc9-90ab-d562c3cef5bb", "sighting--52dac52e-64a1-4a81-abd5-67a0792856d0", "sighting--0b317bff-8b3c-460c-a97d-bdf6aa9b1ced", "sighting--a588657c-5f3f-4978-b058-f05b231b0d67", "sighting--59fbc7b1-3fbf-41c2-b382-696cb5d5804f", "sighting--b6cd3a15-eb9d-4dd4-893a-db7757b708d0", "sighting--74f6dbc5-76a5-4e56-b9a9-7f6d2c4ade8c", "sighting--51a927c3-4c9e-4298-9f86-8d206c5e69a2", "sighting--4a369c9a-c251-4420-b11a-fbf3b214ac4c", "sighting--f63b666e-9a75-4d31-9c0f-14d79d311792", "sighting--4b150849-c208-4b3e-bd3c-75412a5596df", "sighting--e64914ba-3545-4329-af43-8693ecca777f", "sighting--3575c958-31f1-47e6-a45a-b770bd5ef847", "sighting--e0cf8bc8-3f8f-4f89-b74f-6e00c0b67f93", "sighting--d6427183-f9e9-4d89-a47a-c29d3c945dab", "sighting--92b59798-1dd2-4dba-8ba4-6941a0645b11", "sighting--1f2989a6-a7b9-4a7d-810e-e6231949f814", "sighting--834f6624-bf7e-445b-a6c6-90fdacae3f2b", "sighting--4f201096-835e-4ea8-973e-92531c2a79be", "sighting--5cfad817-38fd-4cbe-bae3-dfd1a4927e62", "sighting--8ad55652-7477-4113-a551-29554e7ffaa8", "sighting--53f2a81a-87d0-4f4a-9676-2874fb3d30c0", "sighting--5f84fa43-b2f4-4c7c-a38f-68768f0294b1", "sighting--45090bf0-09b8-433d-89c0-e3f2d61d0ba7", "sighting--be0e6c8a-4ca3-4340-a958-eee949a8fcf3", "sighting--387b5880-d348-4d6b-8acf-36b593f52149", "sighting--94e40459-aa88-47c1-aa50-fc1259df55d3", "sighting--c56c5e1a-8d51-4d40-8e46-6efa50a80fd2", "sighting--b9dde06d-ea2a-461e-84b2-fcddb3959e65", "sighting--c1493a0d-03f7-4c98-abf2-23908a78e40c", "sighting--be260f27-974d-499d-b5ad-098d881cbf04", "sighting--54ded2b6-cd40-450c-8abb-031fe64393b9", "sighting--b2d25e5a-7b5b-4bf6-b790-43004fe24cfc", "sighting--fdf44f96-4866-42da-9a78-aa1d9c0a2545", "sighting--473eb49f-0ded-4843-87fb-495bdd30d134", "sighting--6c5521b0-1546-4740-b7f4-68d0e40b8317", "sighting--c00d714c-e29f-46ca-9a0a-c6f3fcd845f4", "sighting--35efc9e3-b82a-44c7-b1c9-86c4b369b5ee", "sighting--af072002-0dc8-4a78-ae71-57e6daf6dd8a", "sighting--c22abba5-7ee8-434d-aed5-42ab5d0634c6", "sighting--eedc8de1-68b2-49d6-979d-f6b338065e7c", "sighting--6035c585-a7ca-47f7-a235-706ac601e97b", "sighting--cd37b2d4-6c8c-4042-b665-dc566ff93e63", "sighting--26ad1297-7f65-405d-b85a-08e25ec5c407", "sighting--9372bf82-fcb1-444e-b6cc-866625a5b632", "sighting--d6313d20-cf61-48a3-9c03-ac9d34bb5f21", "sighting--5677f783-ed36-47c3-b1b6-8d8c63cb3099", "sighting--0ab09d9f-c08f-4656-a0db-8fb5b6501ccd", "sighting--f53968b8-cba6-483b-a975-3f3419e50636", "sighting--fe3ff5cd-d740-4c23-bd53-b7c720a74e10", "sighting--9807f0a4-deec-4c9a-9476-134e9c13c298", "sighting--61c5f5b9-0dd3-4b98-84ad-be758018232b", "sighting--7d443dca-cd47-46d4-81e4-e93900d87487", "sighting--1130294c-1547-468f-b710-4561cf1cf30d", "sighting--040d0648-2df8-4fd2-8249-92e40147213a", "sighting--7575c21f-5ee7-4eef-ab48-d13b19a5b7db", "sighting--d14dc71f-f917-475a-96f6-ac461582ae4a", "sighting--1164818f-dc34-4164-88f8-5eba1c67a2e8", "sighting--bb77421f-ca34-4af6-a12c-cf6eef935408", "sighting--ea7dce57-2f8d-4c55-bca1-2b6121a66edf", "sighting--a1b625c0-8aad-4d15-838d-0df40532a708", "sighting--c9257af9-c01c-4e8a-9d88-841558d66414", "sighting--b401dc37-71ca-4b02-b290-1cbb3a3cc853", "sighting--98a8acf0-cb1e-4bcf-baa0-54a98f815925", "sighting--a8f4772c-2ca6-473b-9fd6-972af56c0ccb", "sighting--a8d4224b-e9d3-4238-b2bb-a2202838148b", "sighting--29ea9d13-e703-41f9-b929-cfe55bebf7a0", "sighting--b76828cc-be95-4007-8fb1-33b70fb2a7fb", "sighting--4f7757b8-1cf7-4964-9ff1-a2bbd5693bf2", "sighting--c0f72877-c9e4-4575-850a-8b74f5d5c48b", "sighting--60de8350-4d32-4045-bc5c-c3ea1e32f53d", "sighting--1780e623-d49c-412e-bd4a-4f8f5c578d96", "sighting--13b8db2d-9004-43a1-b7dd-1be112c61401", "sighting--7b6850bd-6bf4-4e38-9939-c3e9567666ba", "sighting--e6b0eaf0-cb18-45e7-81ee-eba5b6a304cb", "sighting--e971d27a-6b50-4c84-97e1-eaa5ba586304", "sighting--8fbe2dd4-ba4e-4989-87cc-4fc87e8a9150", "sighting--da1cac1b-a134-48b8-b078-5f22424395ff", "sighting--d36be25c-bd74-48ab-bf0e-1e01d20a3975", "sighting--c461b803-1d5d-4ed3-aa45-c007417e6422", "sighting--4e9199d7-6d31-4af4-9b7d-10fd78e92b1b", "sighting--c2f843bf-e7c4-454a-8204-3ea378f31145", "sighting--1500eb19-d00c-4d27-a084-e16b53af81eb", "sighting--fdf99d9b-16a2-47b4-ac38-ad2c231e398b", "sighting--8f0c1dc6-4e1b-4b25-8249-440c7b27c23b", "sighting--8cbd0f87-5d9c-4032-bbee-a956add61e9d", "sighting--af22e09e-766b-4eec-9836-b64f142892a7", "sighting--10d47208-4446-4e15-bdc0-1b7de8f06636", "sighting--776ef224-f136-438c-a589-2c812127a3f0", "sighting--fe252b10-b4fd-417f-a58c-c83b1e409518", "sighting--282df9c3-cdfe-4155-9e90-1a9090e8682a", "sighting--a4bdd825-7579-4444-97ca-b63c3329380e", "sighting--fd5e0acb-ba56-49b8-b628-c9d53453579c", "sighting--9055d755-9c34-4bb1-8b1b-1a2504cc4a48", "sighting--a266e4fd-3a9b-4619-935c-48285f8194d5", "sighting--51ad792a-b380-4b0b-8fbb-25484671620c", "sighting--40735a5f-5cd4-4ca9-9c41-74af9ca45713", "sighting--85ed548a-9300-43ca-a207-aeecbcbf152d", "sighting--77adeeb1-8a6a-42c8-a25e-b976196664cb", "sighting--2e1ea3b3-15f1-462b-a110-620c5d83fa90", "sighting--f9a5433c-be88-4d29-9275-a19ffdf54673", "sighting--76b44a25-f88c-4c54-9c6a-4d2a5a8cec41", "sighting--50a83c04-217d-429f-a1ec-8c4bd7294458", "sighting--e977c17d-36ff-40b5-b208-8a8bc19e17f9", "sighting--afdec6e1-5fee-4a15-84bd-844b132194d5", "sighting--80532a31-d069-433f-950c-e5fb9ffd86fb", "sighting--4f0607a6-0570-4b2a-9482-b3d9ecd74c7a", "sighting--eed4b40d-93fd-401c-a941-73463c633e95", "sighting--7c02bdc7-d85a-4640-85ea-915ed24d15c9", "sighting--dc9b5581-4b35-4b7c-a23a-ef3a697184aa", "sighting--bb5d990e-920d-4d53-8bc5-fa42fab9fb3e", "sighting--ed5f2994-f9ab-4029-81f2-47f8f49956a9", "sighting--8de78e33-e6f0-40d9-8991-99e5349b7df1", "sighting--2a624e87-d6ad-4379-92ba-9bd0ad65e043", "sighting--1f0af05b-3b9c-49e1-91d6-813d8a931536", "sighting--5bd1fe0c-e311-4aa6-8176-da265935b8fe", "sighting--45f7c16b-3bc6-454f-85a6-04af97873c79", "sighting--fec7de8e-449b-462e-a661-89a8f22d87b4", "sighting--6c9cca4b-b612-45db-9443-6dbdc735564c", "sighting--9c354211-46ef-49a5-bb0e-18137ffaefe1", "sighting--712036e6-3ffe-426c-be05-fbb7d82d5cf9", "sighting--b01a8d5b-b670-4b05-ad5b-4f600a299e3f", "sighting--fee16b2b-8f59-4b07-9bf2-8f6101f42107", "sighting--b8c3d040-3243-43dc-bc6d-5a5f5f756ba4", "sighting--834d7949-c8d4-4fbd-ae5a-8a2cc8083891", "sighting--94991b3b-0034-4d47-9fba-7abd4be14dd7", "sighting--5fe95531-993f-44c3-bdb0-768cb4cb86e8", "sighting--710f7647-ed6a-4d42-8b90-346148d8d397", "sighting--e79f53fd-dd0a-4f3a-9569-f5de64106220", "sighting--dc61f41e-0486-461b-af23-7edfb519548b", "sighting--a6761637-7205-4a65-bcaa-c590b75e0025", "sighting--23da119d-72ef-41e5-b123-f8e74640d990", "sighting--702de5a0-eeea-4447-ab86-51dbe52f47b4", "sighting--8e5c3660-9b5c-423b-9c07-01a1d880a0d0", "sighting--16f96c51-dd59-452d-86b4-0b0060a9e20e", "sighting--63f45847-6a18-49ad-82b7-63dc0b948f91", "sighting--b957b908-85bb-49d9-945a-f430d8886789", "sighting--585241a0-3d4d-4516-834a-7b2949d8c367", "sighting--10292b5b-7604-4224-84ce-6d1b581771b6", "sighting--c2044f8d-a280-4896-9cbb-b8560d95fadb", "sighting--f4afbf82-1b56-4a2c-a1b4-9dcefb315269", "sighting--e57eeab9-1cbd-4031-bbfa-22251bf82808", "sighting--a697d25e-5bf7-4916-821a-214b3c7013cb", "sighting--6fd4d15d-b675-475a-a066-af301f23da87", "sighting--71f34eb7-cc0d-4177-afbc-a1685a564a58", "sighting--843b485d-8d51-44aa-ae2f-85dbed4a9bed", "sighting--2c4e8619-12d4-4485-8864-ccaebbae4ef8", "sighting--6a94f05d-056f-44fe-b139-9d112b6e9885", "sighting--3efe17f2-6ee9-4733-a8e5-87abb46e8c16", "sighting--d8d7f675-4623-44e8-97b4-8155147c1047", "sighting--dc7254db-6c4d-48f8-bc91-79dfeba4b397", "sighting--fdfbea86-e297-42a3-9731-46197a3aa185", "sighting--fa6c3b96-9efe-4dc7-96ab-7b9f86258ef3", "sighting--dd1c61a1-9e32-4798-8404-11b8818d34f0", "sighting--e6353872-a6f7-457b-946b-c455e0ee3b19", "sighting--2b560bb9-cddd-4088-a0a4-6a2a7b1fb79f", "sighting--1c443253-b3fb-47cd-bf69-c015ed7d1b22", "sighting--0eaede6a-ea1a-40e2-a307-fad52dc54ef0", "sighting--ab96cadb-e446-4fd1-a373-50e934ce938c", "sighting--779133f0-84bd-4ffd-86f5-71620281ef9e", "sighting--a2571243-29b0-40af-aaab-d57b2b54b74b", "sighting--53128cbb-6ff4-4651-8498-323bcb6aae25", "sighting--212cf32d-2a30-4f29-a3e2-6d8fd3c5562d", "sighting--d1ce9909-422d-47c9-b84d-4cc33763d439", "sighting--98206e4b-a68b-4f7d-ae54-5f6598bc5271", "sighting--3406f6c8-4b04-40fa-96d1-16c893d0e937", "sighting--ab937139-df06-4ee9-ba07-ab7d1c043e1f", "sighting--eceafecc-dc83-4051-9a01-29351a4934d3", "sighting--ec5b0e64-8721-4811-ac05-c03355f8d9b3", "sighting--2aa62958-f0eb-44f2-98bf-978b1b846969", "sighting--3d32c12e-7db8-4ae4-8c59-3be09d1ee09d", "sighting--fa043a26-79eb-4408-8014-c914196c5115", "sighting--a5eda696-5d25-4006-b9b1-63fbefe110a8", "sighting--0b5600f2-f531-4c64-bd8e-cd49c121bb56", "sighting--362050bf-1975-4f25-8ee4-928e056ae346", "sighting--184e38c8-de27-4128-95a9-34d98e870a1e", "sighting--515fa5aa-32e1-4346-ad2a-39e413785799", "sighting--eb2439d7-81a8-4d56-9a05-1bc0e5c0506f", "sighting--d51b614d-04c7-4b53-9ab6-9ae49033a901", "sighting--7e1d1849-00b3-46bd-a14f-150adfb14c13", "sighting--1a35a8d2-6c77-402b-a88f-9a674e676806", "sighting--372b7671-2edf-41a9-a824-befbaf413a7e", "sighting--f1ce1c1e-7ed1-4818-9abe-1cf906b76c6a", "sighting--9847faa2-ca6d-4129-9cb0-f71e7043bf04", "sighting--78fb85de-8775-4135-8598-c29096788fac", "sighting--8b70ba5c-cbd3-44cc-b43d-ebf6422c6bf4", "sighting--f357e009-53fa-4e5b-b826-c4ea45b6b796", "sighting--78de0a1b-1089-49d2-a396-4a16d4944f4e", "sighting--6ac46624-9b78-4df4-b9ee-6b387171e427", "sighting--d5d0a929-8625-4834-b380-e8664b436975", "sighting--58bf8d7a-83d2-4058-bd1b-992f523e5a06", "sighting--6a86c661-454a-4754-961f-88b93d9738a4", "sighting--a14f73e4-0fc6-4ad0-864f-53d417ef20fd", "sighting--3527edb4-7fbf-46af-a440-89ee6c29f2c9", "sighting--e887802b-8720-411d-b1d0-76cdaec60cd1", "sighting--a62823a8-02b6-4ee9-9df9-b4fca3eac24a", "sighting--9154772b-51f9-4dc1-a60b-e929f9a3cbd3", "sighting--1bfafbd3-1650-485c-a9c8-7ef44c96c827", "sighting--8a324243-08cb-4176-ac01-387bc1644ab4", "sighting--bcd837ce-5d6b-4791-b9cb-cccd4fea7610", "sighting--31d59c45-ff44-4dbb-b6bd-cab90d20aac8", "sighting--73142160-2690-45fa-a685-d7df9288d62b", "sighting--560bddca-ed30-4513-8971-9f501a904326", "sighting--129a64cd-b2b2-440d-9ff6-0aac21f4ecb8", "sighting--c21972bc-cf1f-4c91-bbfa-1ba6e3e6bc52", "sighting--35f54e33-0ea0-44e3-b67b-e20adc30b176", "sighting--1fe93d36-0bff-4d3b-a1a2-6685cbdce23d", "sighting--722fd9d4-7d83-4245-b53e-7075825d4870", "sighting--fa43504b-729c-4ac5-8d2a-d41c0bd472cc", "sighting--56019e56-49f4-4f4c-b44f-872234a245d1", "sighting--7d355a1d-0e3b-4c3b-bbc2-d0c97f02e0aa", "sighting--8beda574-02c9-43e6-a030-515c7d817623", "sighting--d01b2acc-0c5b-466c-9b76-408714bb6340", "sighting--67dad571-3ab2-4ce0-b1fa-a58d624e6a91", "sighting--250c592d-ce1e-4dbc-bff8-89a5f338463a", "sighting--2f64fe00-9ec9-499c-9ff3-ae3d9972a4cb", "sighting--6ec761e7-9d1e-441b-a9e8-d9e8c66120cb", "sighting--aff87060-e418-41a3-876e-2ccd055cc4a5", "sighting--13b5b031-cd35-4976-bf9a-3fd7372b228e", "sighting--c4d07ee2-f127-4e7e-8995-2d022cc55554", "sighting--45202104-0ba4-4256-898a-41772caef6f2", "sighting--f3cca998-ca02-4bee-986c-2214fbc045fa", "sighting--ebab8c64-ec6c-4f64-8a91-76a4c6e328f7", "sighting--4d224b2d-9727-4bd9-a619-fa8ab09b8e6d", "sighting--7a5bb354-8e93-442d-b9ec-d6aef138bafc", "sighting--caffc1a4-a0c3-4f6a-91fe-d8a1dc8d730c", "sighting--b880b608-de9c-4c9c-bb25-3e8a1b37b541", "sighting--c80ffa7c-6d74-4b09-8638-4fad2a128840", "sighting--45661e4e-245c-4da6-9e24-a78de8e31e92", "sighting--18e9da1a-0ac2-4711-9686-ee2fed12f9ba", "sighting--f6cd2820-be65-407e-80ff-2cfaf7e4649f", "sighting--73849cc9-c119-445d-a418-ba62f90cd89b", "sighting--6cdb744f-d86c-41c7-9a93-e0586ca31dc4", "sighting--1f542b7f-f50c-421a-bbb3-5e1bf8cff556", "sighting--b16e163b-372b-4708-b909-4a955f3f9b43", "sighting--153982b9-4740-46a3-a959-3c47b396f73b", "sighting--587e10d7-37d3-47f1-8947-9e2f93119c2d", "sighting--d607ee95-73d5-4e5f-bf47-0bff1f8a7646", "sighting--0ac13f87-a7a3-49e3-bc67-1179cef49f40", "sighting--bf7bd4a8-927c-47d0-a833-42a0941ee388", "sighting--55e78d84-c9e2-4113-a0df-df5f261fae4e", "sighting--c7e36cf9-79bc-4218-b158-793772600e51", "sighting--ac748645-a647-4ccf-9eeb-4da7aef5fd49", "sighting--53f92749-ffff-4dc7-a52b-64ab757cda26", "sighting--f479b32f-05a9-48ea-8be5-d8ba97cd2a4a", "sighting--10143a5e-35b8-4dac-9732-510f04b21e8c", "sighting--8743467c-978e-4bcb-8854-6d14954e15b6", "sighting--e329de9c-7516-434e-9458-c475d65faf02", "sighting--4173579e-6851-4904-b8fd-c6f9d2da4024", "sighting--f12acc09-67b8-4f49-ba29-f886e40bb410", "sighting--f40f55a1-75bc-42e0-bd41-6b6453e316b2", "sighting--723e287b-408d-4f4f-b1df-2f26acd7f007", "sighting--1b6ae545-8dbf-4c89-a917-427466893736", "sighting--59135132-2828-4302-915a-aa6549770b34", "sighting--0a558936-b657-4f18-8272-83eee6d9506f", "sighting--fb332faf-afc1-4fe0-b2fc-9ff3383bb6f5", "sighting--8db90c20-a660-4590-9f35-fa78d6b744ce", "sighting--da5300a2-c8dc-4bba-aec2-593dd9c8242d", "sighting--deb7719a-e5cd-43c3-9e57-b3360f75df65", "sighting--75074b06-736b-4fd0-b7f6-e5270c6ff7be", "sighting--68ac6a20-2517-4c70-9362-33f173f8fcbd", "sighting--be5f454b-9218-4d7f-8b66-a1194ee01876", "sighting--a9dae006-1241-45d0-b8b6-02cc41f750b9", "sighting--c52749ec-d064-4016-90f8-cc97c50f0d97", "sighting--971d8068-ed73-4cab-a7e8-699fa6c076dd", "sighting--8249b440-ed03-4798-976b-ed212b6bd3ab", "sighting--3aaa9776-3689-4bde-9212-869020a44a1b", "sighting--fac70761-ecde-47af-8d79-c89e6fd6a79f", "sighting--6dca942f-9ae0-44f3-beb9-86d0eee99489", "sighting--eb88fa7d-adc0-4c15-9084-ffc93d4913ca", "sighting--696cc1ea-2646-46b2-8ec8-3ad468c0d700", "sighting--cd4763e5-19c8-4471-b8f2-22f1d019c1fe", "sighting--6198d616-d7a5-4eec-9cd6-b3d4dafe04b1", "sighting--936d8ee0-a8f7-4282-bf0f-215ca505a494", "sighting--3cf8c01e-e831-405b-999d-eadb1bfe3be0", "sighting--7e9e9a4a-d21a-4f68-a28b-982e9413e57c", "sighting--fbc5d9d3-9c55-4537-a257-e55b3e12ef02", "sighting--f44e8521-d74b-4db2-9ea4-4831ee35fbcc", "sighting--4eccfec0-405d-4741-a3c3-c7c180b7e34f", "sighting--741b3e45-e0c0-4e36-8ab8-57ea0a72ca23", "sighting--500a7724-d4dc-4b46-86eb-50c58c29c89b", "sighting--dfaa5302-62eb-4c63-9be8-56299ccd1687", "sighting--389360be-bebf-40f7-b14c-04818dc97c5e", "sighting--1a6c2f36-a93b-49e0-a101-c1af87b1219a", "sighting--705b1b9e-3844-492c-9284-b0d79c05ac64", "sighting--231d4c28-7cd3-4e2f-ad6a-dc0bc49b6c8d", "sighting--05383d81-91a3-497f-8658-8b7ecb88ce83", "sighting--9afca939-f170-4ab2-8ac8-43644d956c46", "sighting--0c8440d1-8acf-4531-b40d-44721bcace40", "sighting--7104a78b-43e9-4a28-8bd9-7670e1537299", "sighting--acd6574d-96e3-44bd-bcab-f8d2749d1f0d", "sighting--b705e2bf-9454-4300-80db-d0328614484c", "sighting--2e905dff-c598-49e7-a24e-554185365d2a", "sighting--88e91e35-8f04-42f7-85bb-b19b3e6c864a", "sighting--1f21f17d-9415-40f6-9464-ca0616812649", "sighting--7837f525-5fbe-410d-8d3f-f239a5299277", "sighting--8e5323a3-7292-4f6a-9b52-6efb5d43481d", "sighting--5b38c3c2-e811-43d2-b76b-a0645c91c431", "sighting--325e7c2b-9124-41f9-bef6-21e368676ce6", "sighting--8130a96c-7326-4c97-8a07-70eab85dcda4", "sighting--929d88fe-6c70-415f-a11e-906ed6e05a05", "sighting--3dcc9573-3795-4919-91d6-786ac9ac7e2e", "sighting--5da8b9f0-801e-4dda-9fa0-dbd2b9657423", "sighting--9480e17f-7d89-451b-8f02-a866fcec1529", "sighting--742d9831-2dc6-44fe-8580-1082218826d9", "sighting--39b83fb8-0738-43a8-afbe-cb98ae8e440f", "sighting--86de2ec2-3c98-4447-8231-5e42292c6016", "sighting--f7353cca-a159-4df3-aee4-17aef6d3c588", "sighting--34e6b889-d88e-4672-be31-29f2a956e8e0", "sighting--0dd3f06f-f70a-45ba-9d6e-8c084ffbdb38", "sighting--193f7edf-6704-4b1f-b274-09c1608cdf2b", "sighting--9ecd4a66-ff5e-4e48-bb5f-600833b7d0e9", "sighting--026fffad-3140-48f4-98fe-454dab80df17", "sighting--fdea12bc-ceaf-4a94-8e84-afa1884e4134", "sighting--08073e60-76cd-40fb-9628-ce6d1063db5a", "sighting--7f6c5483-bee5-40e4-b4c8-9d822e31fe1e", "sighting--6f9e79b7-e518-4d85-9fae-50fbd69f53b2", "sighting--c7199f84-fc63-4fab-a5b2-e61bc13217ce", "sighting--82be0392-6121-40bc-880d-f2fe0d559877", "sighting--413027e6-ca35-4f8d-9283-45006049c75d", "sighting--b11231ca-3b25-4dd5-bd13-494e8b64acdc", "sighting--e3e0b4f2-3def-4f96-a84e-40d5b596302e", "sighting--6303df68-466f-4927-881c-379cc766aced", "sighting--b7e08145-986b-42fa-9c66-93e6f610bc22", "sighting--0e312c9b-8b57-4116-be1c-c3a49a82f2c4", "sighting--b82a15da-68b4-4b8c-9301-03c6970128e9", "sighting--51d84905-2877-439a-93bf-2306d3152b31", "sighting--3b06074d-63cd-4377-97c5-14178ff7a8e1", "sighting--73e060c2-ea89-4517-87d5-0345d4227884", "sighting--3d4f878c-f184-4927-8dfe-9eaf67e71fb8", "sighting--ab3330a9-0938-4791-9751-3bb3e3877b86", "sighting--4db382b9-123b-4505-9700-ae8369911a23", "sighting--246c3a98-bb5e-4d45-b227-f625ef088e24", "sighting--258c761c-851e-4f98-82d2-ea4119f9293c", "sighting--4ae2dc20-24ac-4d9a-aaf0-b274bab8055d", "sighting--a1f597a7-634a-4d01-b08d-af0ddac53f4a", "sighting--ef25fe35-498f-4578-9517-778363fa81eb", "sighting--1653636e-f905-4350-af38-3665f4de4c69", "sighting--982a6f72-c1f8-49cb-97f6-fd5a17f57354", "sighting--46c8074a-bcd4-4083-b9c3-365f0f58d96d", "sighting--71f87d5f-81c9-4de8-bc75-fe2f11c90949", "sighting--e805f349-efb2-4fea-a58c-4476bd313ce3", "sighting--653b2c2d-9f0a-4fac-a70c-99d7300089b1", "sighting--c965ed7d-724b-4cd6-91fd-86cc45d68fdc", "sighting--db5e2a73-4314-4519-b44c-b9d0baec2a05", "sighting--319b1224-918e-4c42-bbc8-7f1a023d7c5d", "sighting--8c3b4428-5e66-4b6e-a6b7-5450b636f886", "sighting--e5c5423e-083d-4413-b981-084a4e251ef5", "sighting--efd5f4a8-652d-42af-883a-756e82ccecb4", "sighting--6ebbea5e-a991-4bb2-ad85-b5a16345afac", "sighting--142af322-4878-4c38-9669-d575d8469d47", "sighting--14945467-0e2e-4a45-a5fc-f40fb768589c", "sighting--fc0d278e-18a0-401b-b089-32a7f6a36c7d", "sighting--acf2d132-ff77-4c43-a14e-ae1341742464", "sighting--484a1e4a-4c54-4251-98e6-8d56e5048c74", "sighting--171cae85-e8b5-485d-bbd8-f3ef9bed5601", "sighting--acf1cbf1-75e2-420c-871c-247cb5c686e6", "sighting--3d555e54-1d85-4185-9c2f-12608434893e", "sighting--b79efff3-0350-40f6-8455-bcd7bbeef57c", "sighting--ad8275e5-5eab-4fc9-803d-eaafdbeb9aef", "sighting--bb962a9f-aa19-4938-9b8e-545bfbe1a724", "sighting--c49ff0c1-1024-4287-9709-72914297c64d", "sighting--403390c3-8eab-42d6-94e0-bc4c2ecce2b9", "sighting--d8ebe141-cf45-48d8-a269-a032ea0348db", "sighting--00a2c5c9-7d37-4106-8e20-135ea5cb47e7", "sighting--14de282d-d9c2-4395-9d82-887c002b9e72", "sighting--2ca88eb6-0eeb-41d7-94a7-7c1cf5897411", "sighting--021b1633-a8c6-4a87-b203-4ad08c389912", "sighting--686f6407-bfd7-4525-8c90-3644755e732d", "sighting--97d9a413-269b-4253-9a80-1cca71e6ffe6", "sighting--2b747582-14b0-429a-ac26-b1d55a32255f", "sighting--42e28c36-f507-4dfd-b32e-d1c86cc3e623", "sighting--f21bb358-b237-4131-8ac3-8b1ce8c8dec1", "sighting--fa67261a-248d-4b8c-98c7-f989dc7183b2", "sighting--c09ca660-6ed7-4a49-a878-0e4a07e499de", "sighting--bbb57f72-9f6d-48e7-83fa-7175a5ff53fb", "sighting--f8a2133c-ffb7-41cd-b253-fd29410cf8ff", "sighting--2ea7a978-aac6-4e8b-9136-8a8a55869cac", "sighting--755c5b63-651e-475c-968e-10b952be5c28", "sighting--f1d6cd0c-71e9-404d-9174-60ffe88dd0a6", "sighting--7dc5f71f-06b5-4ecb-8837-000e70bd73d6", "sighting--b5521c87-eecf-4159-9f43-f19421ebe69a", "sighting--54260f9e-e4f6-470e-9ebc-bd644cfa1421", "sighting--466fc1d3-f68b-4062-98b5-6c5f000d5eb5", "sighting--75960727-242e-4bd8-b468-6b2245fd1650", "sighting--09899a72-d78b-4544-9792-88b4373e9941", "sighting--97ad9597-6e01-4b28-98ba-3efe340e0b50", "sighting--a1a76cc4-b0b6-42ab-822f-26186712afef", "sighting--d93520be-a6af-400c-bba8-872625b4baba", "sighting--3141a216-5334-4ea3-910e-cde64b27e092", "sighting--3362e7f5-9c8f-4860-b196-2dbb9a7af051", "sighting--fb08f371-5687-4a53-bb9b-a6eab4f4f315", "sighting--34b6535c-059e-46bb-a515-43314b300996", "sighting--25987994-2123-434b-9d60-3e97d1ac6fd1", "sighting--83fe2d1e-24f2-493c-afd4-8df68b0e3fff", "sighting--39e4d974-7539-41f7-a343-32d65cd884d0", "sighting--0b90281e-6739-4843-a6e1-d80649abb762", "sighting--47d7876b-affb-4a07-85fb-dfe79682d974", "sighting--f06ab570-d297-4d22-9abd-1b77ef2d8d37", "sighting--4fa42b5b-783b-45c0-b8e0-989b41275f6f", "sighting--4c93f11b-a907-4a8e-8ade-00e636d3f90d", "sighting--a81e1bfc-6bd8-48a2-9710-5805614097be", "sighting--a0d2e6d1-d333-45d7-99ac-46819bf469fa", "sighting--967748cb-4741-4821-9f62-f6c4d91d9d39", "sighting--1b11f1df-1069-4df9-83d1-46e226951c68", "sighting--b8f5009e-6079-422d-8c2d-bef55cc96c8f", "sighting--b8e6bcf2-4756-49d7-8346-7a5ad65aba28", "sighting--dfd868b9-b7fe-4aa2-bc0d-a5c0c1d7ef83", "sighting--c5d191bc-d446-4c9c-8d95-5b321ba5a4ee", "sighting--bbba1e47-7649-44c4-acdb-7ceb69a57423", "sighting--0c8b635f-3c1d-4efd-aca2-efdad85ca1de", "sighting--0605e7cc-2e07-48ed-b53b-3876d244030c", "sighting--787e4879-6877-49cc-a870-a9f68f5c8c79", "sighting--10ab398a-25ee-41f9-9776-f217a155c2c2", "sighting--31d5828c-35d9-4225-8829-99003ae74fc3", "sighting--befd8b46-8716-4fd6-8e43-0614b46a60f1", "sighting--d2c94630-88c4-44d6-bfdf-dd05bc9bd89d", "sighting--f374e5cb-944a-49b6-b72b-7422f3ea7aca", "sighting--b7dc4a8d-e055-417e-80ad-9da342fd7176", "sighting--15eefc23-e625-4ed4-add9-35ad24bac9a2", "sighting--88d7b229-0e66-4ef5-8ad9-8fd46607add2", "sighting--18fd94a5-b2d8-4863-b679-877e72365123", "sighting--231b2afc-99a0-455a-822b-9358a83ad8fd", "sighting--ac692a1b-dced-47ee-9ebe-b4e0697e8288", "sighting--060bcf89-19d1-47c4-a221-3e9f35897867", "sighting--ca4046c9-d099-4ac1-9e0c-7dc14fb6538f", "sighting--06e67ef7-35e0-4b80-83ce-aeb8074718ee", "sighting--81e79082-8d83-4d0e-bcc2-84c6e9ab8533", "sighting--b48b90e8-f999-4420-81b6-496516ca9958", "sighting--cfa8f7e7-dbba-4aa3-b50e-763de442b6a2", "sighting--98036e0d-d8c5-42ab-8a1c-7a295f1fde1b", "sighting--e24e085a-9ea8-4cba-8bd8-08d4f3ccd21d", "sighting--9071204f-5459-4f19-9e09-0cadde299f07", "sighting--98748048-fde3-4334-b6c7-36b286126fe4", "sighting--0b323e99-e352-4035-9b03-eabaa31fe1e1", "sighting--7a3a418f-4415-42f8-b77b-ef15542da119", "sighting--441a2095-49cc-445f-94f9-0a1c71dba08a", "sighting--c6e1cd87-90f9-4551-a08b-b850c115246b", "sighting--d4b499bf-2ab5-4e99-adf1-de244228a2d2", "sighting--53d35fc1-5677-46f4-bff2-7c6ce4aac1dc", "sighting--fb464fc1-03e3-4b9d-bbff-6a7d95a31ddc", "sighting--4eae1d4d-bd58-41f7-b4b6-334e5cb7ecb0", "sighting--f509cfee-08ab-45e5-a7e3-4e628690c786", "sighting--1aa2d86a-5b6f-4cd7-81e1-2021a27cbeb1", "sighting--76ce83ec-667d-4be7-9f1a-e922d1c7490c", "sighting--f8a8f2cc-1cc4-4b0f-b11b-964885fd5683", "sighting--e00f6496-e549-49f4-a836-4561a3492bcb", "sighting--b7968d3a-bce2-4a15-bf76-44b2c7409d83", "sighting--d8fbc1c4-3fc8-45a5-a84f-3c356dba80c4", "sighting--56bb4599-8f71-4ac2-a086-72cb7ed9c299", "sighting--65383868-7827-4825-b260-ae8690b67d73", "sighting--6e7b3f62-e829-4343-99d7-b88946cf7c2d", "sighting--f472e7b5-5775-4ed0-a484-5559f8c6a6c3", "sighting--3db745ef-49d4-4b35-9a90-9cbada5c85cd", "sighting--92865642-66bd-40cc-aa94-0d99c2cdbdee", "sighting--4fcf471a-7141-41df-b3a3-2824400dae53", "sighting--3e7eace1-6e1f-4a2f-956c-347f574ad7ca", "sighting--c42e3cbd-e5b5-43a3-ba13-5f7876aac47d", "sighting--2274608d-2c64-4e89-8db1-1de824430876", "sighting--14b87c97-c62a-4a07-afc7-f3a15f7906d8", "sighting--af2accd7-0dc2-4889-aff4-1c77103367ae", "sighting--4fed03bd-787e-4ee4-861b-509fadaed730", "sighting--1ea5bcd5-146c-4c1a-812b-c66dbece5d88", "sighting--b4c946d0-4dd3-4523-b8b3-fbf5d98ec8d6", "sighting--a92b7e98-f576-4052-b8bb-a48dc969e01c", "sighting--1680823b-55ce-42c1-8eb6-780bbe702ff8", "sighting--dda70822-4104-4463-9032-89e486520c96", "sighting--1feb6ee6-76db-4355-8f34-bf95ed5ae386", "sighting--b517a72c-1bc6-4b81-b2bb-a55fcd4dae17", "sighting--8648c1ee-a4c4-4989-93b8-91bf741ee22b", "sighting--d99a4468-fc4d-4179-b692-2121aeec4dd6", "sighting--2c22d588-d4fe-4ea0-8782-c418584dc33e", "sighting--573d1658-76b3-4a8b-b57c-26a5147ee082", "sighting--3f569c4f-9bcf-4422-b599-eb16980eb54d", "sighting--2f812684-f76e-47d9-9b81-65e7054be85d", "sighting--aa3dd93e-1f7c-40db-9d13-80639fe018be", "sighting--157c6b17-6526-490f-a5d7-29d38b793c24", "sighting--f3d56dd5-a5c6-4b67-9087-fa1109f82c8c", "sighting--0a874694-2f7d-4b30-b9cf-7c619a05dd3d", "sighting--c3d21551-e293-4cf7-9468-579c48e28fe2", "sighting--993886b4-73d7-4817-8408-9f147125b94c", "sighting--9173b657-d048-4a81-9683-8b4e4193f1fb", "sighting--a038dd92-cb8f-4cda-93b3-b66873621902", "sighting--5bf6ecf6-e75d-4914-b523-f7e6992f110f", "sighting--d6316b1b-69d0-4900-b0e9-45c19adb8a68", "sighting--c9a208c8-10ac-4532-9666-55a7bd3e8c27", "sighting--4e98b9f1-63da-4e9e-a920-d3809c224130", "sighting--8067fbc0-5a11-4841-84b0-4405a68b6658", "sighting--3273d32a-8d35-43e0-857a-772c50e1868e", "sighting--a41f77c4-7ca6-460f-bd23-78e4d6b086b3", "sighting--e3fdf212-4cb2-4c00-b839-e59c15543ae2", "sighting--a46e5d1f-c77b-466b-aa22-5c114e2e09d5", "sighting--4bc5c437-f2cb-473d-9a33-10c35872fed8", "sighting--b3cebd96-1e72-4939-a1cc-2d39c777e966", "sighting--b6742426-5477-4a0a-8375-cf96d48dabe2", "sighting--1896fd88-b11b-45da-a253-5851db9a61e1", "sighting--3c0753f7-60f8-46b7-a0b6-ab89e1391997", "sighting--d564cf64-886d-49a7-af44-45cc34f59e53", "sighting--93e5c8ff-74c2-4b98-9cbf-a0a595f958ab", "sighting--d0eaf29e-d290-498b-aff7-1f03b359f17b", "sighting--cf3984fe-eecb-4d4b-8af8-44cfb80e5f45", "sighting--21537ece-5686-4c8c-bab8-a275072de910", "sighting--a56c9c31-ae8e-4a12-8d83-11d0bc12e1d8", "sighting--c71f1f33-826d-4ae4-8d60-819024e2947f", "sighting--16a2ec13-e78f-4682-a1d2-f6e64e485bad", "sighting--bf035fb6-fe4b-4fd0-b7d1-3c6dae763d12", "sighting--b2c60077-6ba2-4256-9d40-1d379e1cab0b", "sighting--7825a065-e012-4d10-8899-865601dd7748", "sighting--fe5a28cd-e08a-474b-a151-6c807d34453b", "sighting--4f0af571-6ed3-45d6-93a2-525789a012e1", "sighting--391606f5-1655-4682-8c3c-43d59fffa72c", "sighting--b77c1c70-eb6d-4de6-8924-cdd6138f49b7", "sighting--aa37e736-5023-44fb-8a60-0dd1980db82f", "sighting--8425ed23-ba24-439f-9c50-86292e83f96e", "sighting--1c580146-f6e9-4d33-b6fd-45e7850edc4c", "sighting--eecf3f20-7de8-430a-b1a3-7d3353c06590", "sighting--4fdb68fe-2fe8-464e-bbd2-94ce1156b21f", "sighting--b5d70cf3-38c5-4b74-a594-66e7873f987d", "sighting--227f455a-c84e-4da1-a172-4c3163ad3ef9", "sighting--a09ad211-a1b2-4a18-9078-d399134a4de4", "sighting--e66f7c7c-521b-4951-8e2f-dce48639b620", "sighting--1733a4e0-6f22-485d-ace2-4eedbd92aa69", "sighting--304a7b98-3010-4afa-92f6-4d3da0ec14fd", "sighting--626aa548-894a-49ae-96b2-2df4932605fa", "sighting--f8d4110c-bff1-414c-835f-6470aa042da3", "sighting--92fec279-0519-4347-be88-960b408bad2a", "sighting--6c475fb2-23a4-43ad-830d-b34b6baa3d8d", "sighting--03a91ba4-030e-4c5d-9b99-a135b349e632", "sighting--549cfbc6-0fa1-4412-aab2-3a144ebdbcaf", "sighting--baaa2d72-e341-4fa3-9caf-0db2873968d3", "sighting--4ec29ff4-0bec-4a30-a5f7-055ccf5ebce8", "sighting--641ef3aa-80ee-4517-84de-95c43fc1e812", "sighting--1c4fcb5c-e9b8-4df6-b3c2-425e2ba79972", "sighting--c5254cda-8b36-4645-9e28-e622430739b6", "sighting--4e2a24da-70e8-4251-bbaa-195b0928c0a9", "sighting--acb71156-531c-4621-acfa-6bef9ddc4b5d", "sighting--d1661c3a-cd78-4f8f-a1fc-aebed771c769", "sighting--d7d528dc-532c-42d5-bb07-66047e749f2c", "sighting--6883b98b-8cde-42aa-a70e-60fa2858ea36", "sighting--f9e86524-3ebd-4f52-b9cd-c4bff7351336", "sighting--8c292904-7b0d-41df-bbb0-6302b153e488", "sighting--6d58f883-7b7f-4519-943f-4a6577860ed9", "sighting--5776c8d2-e513-4106-bab4-04afd18c490c", "sighting--5ca8ad01-72a5-44f3-bf0d-6549e931dabb", "sighting--32628914-da44-4ec2-90f5-9dede49b9840", "sighting--bc3e7071-bf3c-48ae-9bbd-baf5be5bc36d", "sighting--a86c83b7-add7-41b9-be09-4aed661c4261", "sighting--acdb987d-83c1-420b-ba24-c2df38312f22", "sighting--95aaa4b2-8cf6-4561-b80d-462e154ea620", "sighting--8f111e1f-5304-47b6-8930-f5d4ac07c25a", "sighting--27a8f154-cdc3-44a6-994e-c892a23b5d8b", "sighting--a5a1c3a9-9212-47ab-b345-3c95d4953b0d", "sighting--9b96f888-a25c-4624-8b36-823f73d1ddbc", "sighting--1daede0c-eabe-4211-bb9c-6234668565b4", "sighting--856eb62c-b025-42a8-9c64-25b78eb8c1f0", "sighting--194a2db1-8894-4ce0-9fb2-1ee960849bbf", "sighting--851dad1d-5342-485d-9d4e-a89ea2f41853", "sighting--f8b07273-f15f-463c-af24-9260d44832ab", "sighting--3f6572d0-1f30-49e2-9349-01b1257f506e", "sighting--3f361d13-4162-490a-87d8-31f8d20f4667", "sighting--46a97c23-17ba-406c-b7b8-9dbfe65e6556", "sighting--2886d3a1-0817-48d5-ad8e-538805604488", "sighting--9f1cc7c6-ce79-42df-aafd-44ac8c24a0f7", "sighting--c2e79c13-7855-4b07-896d-b07fd45962e0", "sighting--4c85a04d-9d0b-4389-8d47-582ad5266c8e", "sighting--c69de9cf-4ab7-4fcb-b698-256bf9dcf48d", "sighting--e6838449-6d06-4181-badf-085c8fc51027", "sighting--2a488204-40bd-428c-bd4a-33200a0949f8", "sighting--043b9b84-d3f6-4f3f-8971-c4e0b4a1ce37", "sighting--a2de9666-915b-43d6-aeea-ba295ddf53c1", "sighting--416d69db-4f5b-4d32-a34b-de9ca5d5526e", "sighting--8be3128d-1054-4980-86ce-e8d43fac29c1", "sighting--6e1b9b68-c62e-43af-a282-1cf552ee1b1b", "sighting--77c91123-0ce8-43d1-b1e7-b455eb4965ee", "sighting--496a258a-7dc8-4157-b387-ef03b40fe677", "sighting--e2de3835-75bf-4b34-9dcc-a4b973545fd4", "sighting--aa76dc8c-fb95-4be5-97a8-b77a9f9bfdb0", "sighting--d75f3f7b-7074-43d7-b75a-cea5f80a243f", "sighting--03698be0-8032-42be-b060-e8ca8e66fc92", "sighting--43eb626c-d458-48ca-9b2c-048c6912f2ed", "sighting--79d04189-9016-461c-96c7-75fe9bc138ef", "sighting--990543bd-b154-425d-ac9c-0c3a230c085d", "sighting--fbbe61b0-17a2-4e4c-ab01-33ec7ade8789", "sighting--594a86fd-fa38-4096-85ec-9178fff14a4c", "sighting--9bfa5a93-850b-4167-9b1e-05d39b16dcea", "sighting--65165e2a-746a-462f-94fd-ddf90e2671b5", "sighting--c7b9973d-961a-4db9-ba56-cbd296d84581", "sighting--1360d602-58bd-42e6-83b5-efa58fea2d7c", "sighting--10691055-cec0-46a1-a4a2-dc91eb493022", "sighting--6b7fc894-b377-481e-b4b3-3e637956ee6e", "sighting--412fb2fd-593c-4c63-9ca0-4308ee9744b7", "sighting--4c121ddf-8ecf-4943-b5ea-127a0517b769", "sighting--6bc1f7b5-3ee1-446b-9031-165a16e443b2", "sighting--9a8f33c3-fbc8-49ff-8885-da1be8a02c08", "sighting--e31cfd90-881a-44db-a93d-7d8299839616", "sighting--6b8c51f9-1349-4306-8c9b-7451ef59d400", "sighting--5d980043-cfd5-4be3-921f-6fe92c6e9eea", "sighting--e5f4c651-7835-4568-a58a-3b037943b8fb", "sighting--5ee0be21-9dc5-4dd5-b04d-3828ed014ff6", "sighting--9b60305a-16ff-47c6-a1e3-e8b45bab2856", "sighting--f324403c-0e31-4164-8dd2-3fb8a79e2d3a", "sighting--bbfbc5ea-68f3-489a-a0c3-ce54bd488f58", "sighting--d48f5e20-325c-4196-9bc6-15c983905459", "sighting--4cac451e-d4f6-4b08-bc8d-6aac1168ec62", "sighting--e5b5ea14-80ac-4736-b71a-8d0a8918ce22", "sighting--52aad0a4-ef53-43fa-a8ae-374339e6cc14", "sighting--f0ff25ac-f52f-4815-a102-c78c0b59aea9", "sighting--2128ef41-9c31-4b96-a1eb-c03590783db0", "sighting--3c2d6d50-d439-4914-9774-1086388781b3", "sighting--8c4bf737-c758-4cb7-a187-e17f24c869cd", "sighting--458ee864-8e3c-42b3-ad0d-e635d839cc83", "sighting--e967349b-d7bf-4e6b-b954-6d850967f5b6", "sighting--17fb4354-997e-45e9-a3bb-3517f3b48416", "sighting--08c172fb-5278-49aa-907c-35992fb1cd8c", "sighting--b8dcfb84-6d79-425c-8d4d-c35a7db3c30a", "sighting--0731d34e-da37-40bc-b054-66e7f267a255", "sighting--7ba6bcad-1d71-45b6-b390-a19acec1853f", "sighting--7a9e1d89-4c57-4e3a-8e3c-319332856a5f", "sighting--82ef1fd5-f5d4-423d-9fef-7fafbf596b12", "sighting--ed24927b-43b0-44ce-adc8-3826a203cfe1", "sighting--6444629f-94c4-4e6f-bcea-cac4d146e7ec", "sighting--d3ebf914-48e6-4fdb-a7a3-a2bc271cae9f", "sighting--2a08b9b4-2dfb-481a-9466-14eed43afe0c", "sighting--8bfc208b-7dab-4379-ad52-a48f00f622fb", "sighting--d5739d85-a3e6-4c76-9fa1-c5b89e7e8100", "sighting--3418c6c8-3ca6-4381-acb5-11d7474126f4", "sighting--5c586100-9771-4e6c-a472-8a38d9d30d2d", "sighting--32fbe357-4a6b-4575-9e47-8d5c2079b829", "sighting--ae214d00-5dac-4ef5-b777-d0fa993bccc5", "sighting--5e1edd0b-893d-464b-a32c-6be7dd6a9b00", "sighting--a2e49fc8-57f7-46b8-8ad1-e5061f8d6ebc", "sighting--1929c058-2990-47b6-99bc-64dd2ddd9639", "sighting--739e63fc-9a0d-4414-a166-0821259438e6", "sighting--546f8a05-0e7b-49f9-adf3-8400fb159955", "sighting--8093ff6d-9b67-4f92-8557-99fd8ebf3ddc", "sighting--e234e41d-00c7-49aa-93cc-b16a9c07b173", "sighting--4f31fd95-43de-4cad-a871-cc01a0017b63", "sighting--5f8ea0fc-956b-4200-ac0e-fb5ece2b2408", "sighting--a0764cd3-3e47-4ed5-b243-c9f0e099e26f", "sighting--89fff677-040b-4f35-96e3-c9f2d62f6e64", "sighting--94b3808d-8eec-481a-bc71-d65fa02637c5", "sighting--1215b629-b633-47a3-ab9d-1646df3002cd", "sighting--a704743a-8be3-41b1-bf8c-a0ebef0b92e0", "sighting--0f0db09a-5a53-4d4d-9cb5-b0e1afaec2a4", "sighting--43ef8615-9973-42e4-be95-d40448d68a4f", "sighting--9ef0357e-5718-43e6-9238-3c91b452ae3b", "sighting--28a2709c-7254-468e-8d5e-9c160847f39f", "sighting--83c75d13-c1e0-45a5-80a6-8e6cb8086d81", "sighting--43191bab-2753-4bd9-80eb-c5a83824149e", "sighting--72e7d5c4-0d53-48fc-b0d1-9f710028b7d6", "sighting--a61f40ab-f190-4764-9676-70d21aaa887f", "sighting--7746b973-0946-46ef-8e66-c75f3a42e82c", "sighting--9fe13dd7-e511-4d36-9ec7-b0bf00f5d08e", "sighting--5e843d25-6fdb-401b-a6ed-b83f16c942bd", "sighting--71cd0d21-7f1d-4f8a-8471-65e67486cdd5", "sighting--a3ae5959-4567-47e9-a5fb-3589e7b7fbd9", "sighting--392fc51f-135b-4a4f-9da3-8243d36dddcd", "sighting--53a4c73f-120d-4975-95b8-7aa85922ca30", "sighting--645e5b41-75c9-4b33-8f3d-6d5c1ed8ce01", "sighting--69094c84-9291-4fbd-9940-22d003841327", "sighting--08b05fc4-603e-4a27-9324-62dbbac92632", "sighting--a0d370b1-afed-4cc4-aace-0095b8323b88", "sighting--97803d2d-772a-4476-af0c-8189df827cb9", "sighting--2d0b9cc4-d4a7-46ae-9e0f-682baf1be3aa", "sighting--518f994e-c195-4856-a3a5-83cf7980f4fa", "sighting--2fdedc23-8f6b-4f43-844b-4fc4db3209eb", "sighting--dae6828a-ba4e-4de2-9e54-300e7866b083", "sighting--30b3921f-9734-4eef-b706-a91519d476dc", "sighting--d8583f4a-3725-43fa-bde7-5e83ee193fb0", "sighting--fc7fb17b-039c-40f3-96e9-74a012ae7843", "sighting--b536690b-1fc6-4db9-a898-68402dcf0fff", "sighting--e9733716-39f4-4295-8282-70a74a68dd1e", "sighting--938db798-fa40-4729-9ee4-33b0da96bc6f", "sighting--74a22d49-af91-44bb-ab9b-aab29313738c", "sighting--905e293d-bd2b-4636-927a-c253aae31657", "sighting--54eeafc9-92b3-48e5-934b-53df02b12c56", "sighting--0557eb93-467b-48c6-908a-ba932e830b7f", "sighting--c03d76bb-9dfa-4213-8d8c-92db8d58349e", "sighting--648f4a5f-9fa5-4870-85af-b691179822a5", "sighting--76eb1853-3d80-498a-8b7c-6b77858ca1e6", "sighting--7c885447-a0fe-48b3-9bce-3ea0f612032f", "sighting--21e07107-7cd2-4e27-a73f-701066816e76", "sighting--3bf332c2-fcd0-4369-8e20-805ed39017ea", "sighting--fb695751-77af-4ce5-b9a5-d027de960121", "sighting--c3b59b40-a7ba-4171-8476-66ff800d8cc9", "sighting--72046b44-ba11-44d0-8f4d-233ce73204c0", "sighting--670c28bb-1b76-48d6-8d5c-9c2629675289", "sighting--dcc24b26-f92e-4f0d-9853-6cd490e950f6", "sighting--206a3daa-4e27-4927-abdc-ae98d9268eef", "sighting--b77dfb2a-71af-425a-816f-2e73d78e8859", "sighting--fd454277-bc8a-4eb5-8315-cec2636ffa70", "sighting--6dcce359-e9f5-4930-bf29-b6efa1389bda", "sighting--804e0428-d619-4b6e-badd-e55f64d3c67b", "sighting--8832d48b-5bb4-4254-931a-7bddcc7c5282", "sighting--b9f43aad-452e-4640-ba5d-cc6f7e202f9c", "sighting--dcbc10c3-7abf-44f0-833d-c8cb2dd40bd6", "sighting--11132e78-e652-47c7-bf9a-8fa6ba900ca8", "sighting--fdacf759-411b-4266-b3e1-24d562797715", "sighting--d704e9f6-025f-41ef-89a6-be0bafc0f4b1", "sighting--3a371771-8866-4c21-b1cb-20b03c659d20", "sighting--88bed51b-adf3-4f69-9b88-7e5a4d6e9342", "sighting--3a32d5af-1850-4acf-91f2-f0085ef72431", "sighting--0b332b83-e7af-47c9-82b2-c5e68e95a755", "sighting--19fc9b19-3d64-4788-b0fe-87a669d8a675", "sighting--c9f7031b-d711-4b3a-87fe-27b44a8e1584", "sighting--1bf3365d-8ee1-41ad-a0e8-9a1bdfc899b4", "sighting--3b12df73-97ce-4ffc-be14-5e72662f93b0", "sighting--ad2c3971-55b6-4c90-b2b0-ee1ebdf0f395", "sighting--e8c026db-9938-48ba-818f-fc0032cea356", "sighting--83e78b5a-26c0-48d4-888b-a95c4ad9d60e", "sighting--1d048126-ab58-407f-9e0a-96eb6cccdc13", "sighting--8aba645e-ffb4-46ae-9c3a-bd148a7c0428", "sighting--1b70426b-b069-4ef4-9c3d-139eadeb2081", "sighting--365d9e4e-4f2a-4a19-8ac3-7f18f1eb270c", "sighting--207c56fd-b404-4f5a-a0ab-76435cfe9deb", "sighting--1f679e53-1736-4435-9af0-4220c89c5872", "sighting--f2722dfa-9ec3-4fcd-bb2a-f13a5d032647", "sighting--1139678b-4e30-4f3b-9ed7-157b52b565cf", "sighting--36a8d075-9239-4bb0-b630-4e40af8104c5", "sighting--8c1c5bb1-054a-4324-9de9-8ffa756f528f", "sighting--cc2e4922-07c3-4fa4-ae33-79fba01b6e9c", "sighting--c11d6225-97ae-4530-90ca-b6a90d7b9afc", "sighting--2bb135ca-e795-419b-9fa4-1fd4ade46eb4", "sighting--127186c4-f53a-40ed-a03f-6193d50fcff7", "sighting--5179c11c-0b0b-484a-a451-e0419235cba2", "sighting--71c92c6f-a53a-4a1d-bd18-fca3c790b8be", "sighting--82494c83-8797-4efe-9b11-8ebdadfadf3f", "sighting--24259230-0663-4b0b-8189-a5eb9444db90", "sighting--4908c9b5-e06a-4808-a75b-f8f3c05f00d4", "sighting--2baf73f1-2985-4b9f-8301-415903301cc8", "sighting--99ac5138-c668-478d-a31e-e33172f6badf", "sighting--776e4c4f-ee7c-4936-85d2-eaa5babd4d42", "sighting--cb7aad0c-79d1-4915-8c4f-6da8cadfc061", "sighting--6354c8b2-ca3f-40b5-adc3-eef467dd3fda", "sighting--b27f0be0-714e-48e3-a18e-128dd9cda013", "sighting--b3732ebf-a45c-42d7-b2c4-3af1f5a091d3", "sighting--f16878c4-54b9-45ae-b5f9-56ddf50631a5", "sighting--db63e99d-4a87-4cd2-94ad-417f04f1ee29", "sighting--6dcfc497-0807-442f-9921-84f4792dbedc", "sighting--47829a0f-f9ba-44b9-93f0-0a647513410f", "sighting--96cace70-e24e-4f3a-b2ad-bd49d6f39ed5", "sighting--37764207-1b69-4436-b4a3-ff99e5df6105", "sighting--4272bf00-4a8a-4353-9aa6-af18af219e43", "sighting--f3462167-4738-4e7a-8214-8a92af4b75a9", "sighting--603b7cfa-0671-4b4c-8aed-33a9a43318d5", "sighting--650b306c-d6d1-4342-b0a3-8f99963b49c8", "sighting--afcd0177-cae3-4493-9c5d-e758eea85d9b", "sighting--9861fddf-c29f-4859-bab3-5d4a784dab35", "sighting--1edb97d6-413f-4ec8-8946-9640d4c9c51c", "sighting--604e2474-b489-4ee1-b457-360efcb73d0f", "sighting--15a58fc6-4cbf-4c48-88e9-1404b2907db6", "sighting--889d7156-fc66-4e78-b2f6-32ed6574605b", "sighting--00e301cb-fb1a-4679-a141-beacb374292c", "sighting--c62762f7-176b-47e4-b8ba-a2de195667c4", "sighting--f932fb90-0c2a-4842-9986-216315edf3e4", "sighting--6141952d-803c-4e4c-a994-72cea383576e", "sighting--e2e5ee28-23db-42d7-920e-5f5065bb32f0", "sighting--5c33ca0c-c17e-4c4b-8efa-7f1112b66acc", "sighting--64ace493-fd17-4a0a-9898-f26c713a792e", "sighting--5ae3dd54-d314-40cd-a40c-f67280e9c50e", "sighting--63609374-9399-4206-865d-a0c56f2d53f5", "sighting--99ac1931-ab7b-4dab-bbdf-8e37d66dfacf", "sighting--17300485-27b0-42bd-bfd1-8b3be94836d8", "sighting--3bb5a289-1697-45e1-84d3-92bf94d25e4d", "sighting--43f44a8f-2789-4eec-b0f4-c9c6761cf58f", "sighting--e71d03e0-27e0-4a7d-9c5a-09d5476f05aa", "sighting--9708b836-3537-47e6-8340-b0a890759fdb", "sighting--933bde1e-6af7-4532-9313-b6fb016dd31a", "sighting--b45fc3ae-7e2f-4b19-90a2-17bba258efa4", "sighting--cefba515-2579-4738-b5fa-bda426ce564f", "sighting--a3d5f819-fc76-4f04-a714-ae20ddc2136c", "sighting--1dd2416a-c8dd-4b01-95f1-71791b99fafe", "sighting--d4883c3a-867b-4f15-937a-52ae71fe60bf", "sighting--172578e4-e159-45d3-934f-7400e500e552", "sighting--2d5b6da6-5dd8-413d-a0f7-bad9ed83ee4e", "sighting--cad5ffa0-fbee-4a26-a482-2bb736329a0d", "sighting--26c5ca6d-3c70-4fc0-939f-9bec60742dd7", "sighting--031adc9d-0ceb-4004-bbcc-7cae65a313d2", "sighting--6022a961-adab-437e-94a6-61b43c4057b8", "sighting--cba2e7f7-ecf8-4c65-8dfb-174689ca7ae1", "sighting--2551c406-e32c-451a-aa50-6b0a96db6c0d", "sighting--392c2afc-afa8-44b2-add4-f09d0ba04781", "sighting--4e7ef883-36a5-4e5b-beab-9df5e432bf0a", "sighting--aa92a731-801c-4f9e-b31b-8164e4a44518", "sighting--59a5b6e6-e37f-468f-93a3-a889c1d71bff", "sighting--ece114b0-4079-44b2-b049-6f8b9ec8bf95", "sighting--85ff128c-727d-4a51-b47d-916af592ff0e", "sighting--a841e417-aa0c-4cb9-ade9-11ac619234ac", "sighting--617aca8b-5c89-48b5-b139-1f075b267eb7", "sighting--1cf4033e-96b3-4312-8b0c-9076f0bbf266", "sighting--1cacfdf1-495d-4042-85cd-480699924efb", "sighting--2bf34798-a83b-402f-83a6-d7c17f11cb7a", "sighting--3d1bd48f-d7db-4dc1-9f3c-baeb40d42249", "sighting--293b8890-208a-4d6e-8188-5495791fc10e", "sighting--23f7deb0-ed91-4660-92f2-31105fde1ac9", "sighting--bf883c76-bac3-48ea-898e-6855d58b917e", "sighting--eadc68fd-10e4-4c03-bec4-f71cff1ecc88", "sighting--eeb23f7c-025b-4748-aa64-d9a905dc1b75", "sighting--ac7ab1d2-15c7-42f8-809e-da26d3b9d881", "sighting--9a4c2d8c-e455-428f-943f-0d4be1d0bd5b", "sighting--26be7858-592f-4e48-ad12-8e384d88f333", "sighting--e68feb6a-c9c9-4c25-96fc-1a2ec1ad4e86", "sighting--6e8d8022-0900-4737-9d34-dcf82b2cbcee", "sighting--1e09dcf7-4d1d-4562-90b1-5ba30762aeaf", "sighting--70d54330-0fbf-42b6-b4ab-a30de126ad69", "sighting--cf9665b2-4937-4d81-8769-e91546779edd", "sighting--f26bed44-22c8-4f3d-bd8e-eb4d7ba4ba2c", "sighting--f97f9e94-85ec-4624-a6d9-67432e13018b", "sighting--23641bb5-aabd-4cf6-8fb4-b1a82166cd81", "sighting--58ad6fbe-b12f-47e7-b1a9-9dedfc0b1e58", "sighting--77c8f41d-3d64-483b-9e04-d4ab8e4a582a", "sighting--0e0d28ea-f7f8-4688-a63d-f5a4373c2794", "sighting--df33eae1-42e1-46d8-aaac-49ab24e4b827", "sighting--2c03cddc-aa87-4e7b-ad80-c8309143e9a4", "sighting--d9d7c0a8-1b73-4c05-a9e4-984c4318e3e8", "sighting--93922284-f62b-46df-97c8-8c01f429be89", "sighting--53332348-22f0-41ab-8461-a482a5b89b9b", "sighting--665daeb8-b280-49bb-a4fe-d75f1e0ed723", "sighting--e270587a-e9ce-4ac5-a291-f0ef2171918c", "sighting--d6e38b11-20e8-4e06-a5c2-6f9fb4383e72", "sighting--a2ff86aa-6055-4ab8-a5a3-a1ec1fa9aa29", "sighting--a1aaf09f-682f-4db5-9dac-c4e979c01d5a", "sighting--7f71d77c-e353-47ca-8a90-6b3198a0ad6f", "sighting--816b6018-d7c6-462a-9b80-cb21bb3817f2", "sighting--18d30852-30fc-4a02-97be-688a4492962a", "sighting--845ee599-5ca4-4bbb-b07b-0b9395da60f9", "sighting--db8a4b27-ccd7-41ed-ad2d-8c9a6800d723", "sighting--ae2ee064-a4b0-4c80-994b-5a6f7441141b", "sighting--7d4a4e21-7724-4b71-9713-dc1e8d6e198d", "sighting--0d473605-f8f9-4e66-aac3-dbac6a95e897", "sighting--49d8e15c-8b0e-4f16-ade5-c8135741c6c5", "sighting--19f82980-2269-4e87-b8d4-dcf07578efea", "sighting--00a851b8-fb06-4efc-98f3-91182bde919f", "sighting--cdae12da-1d8e-459b-ae10-3787f5f88b66", "sighting--4ba35ff8-ef65-4058-93d4-648ee25b5db3", "sighting--92361029-f635-4d46-804b-46ac6cdf0fed", "sighting--0dd84112-3e6e-4b5f-bf3e-254823e6c894", "sighting--cd5f5b05-d2c9-4b17-9855-943d310dc275", "sighting--7459d450-c05a-4124-876b-1d1051876997", "sighting--70a053cf-bea8-4a99-83f6-cdcd71827ef8", "sighting--ab759d2a-15e7-4dd7-a319-16fff123bc8d", "sighting--8d675232-8dd1-4c0c-9fbf-4734736e2c15", "sighting--3df12942-a8da-41c2-b870-f6227abb0811", "sighting--e8f48d23-a6be-4fb2-b1cd-3b8de895822d", "sighting--62044abf-be0f-480b-983b-ac934b7e7611", "sighting--887320cb-dc71-4605-99c6-b06da94c521f", "sighting--a0f2c13b-eb56-4516-836e-1bafb53fb0c1", "sighting--4ae92e00-0b0b-4252-8228-05669efb6462", "sighting--1d01eacf-0473-4b56-86da-057ebf19816b", "sighting--0c4c0093-58f8-4590-a316-2519ec32ad76", "sighting--41c71a0b-cc0f-4d35-b841-71e7f4a49aea", "sighting--d4e20efb-096f-4b51-bffe-ef3a8d44427d", "sighting--96236291-3a13-40cf-a3a3-2933f57d7ec4", "sighting--e8401445-de76-4eee-b6c6-18450481248b", "sighting--fd5f5d5e-fae2-49f5-ae2d-caf49c46bcd2", "sighting--7858ec5b-0039-4699-b38d-17f3b504ac57", "sighting--7fbf77cc-d436-4637-8703-b330afde56fb", "sighting--f829a89f-8c15-451d-8caf-fcb24feffbb8", "sighting--b72affba-7892-4d8e-b5e4-854f6539141a", "sighting--b53227fb-e89d-4dd7-9438-9fedb759833d", "sighting--3ea0b1b9-b92f-4c20-9753-6fe79d1429fb", "sighting--533af53f-4efa-4c13-b77b-6ef332978719", "sighting--1e33173e-5cb1-4d6f-83dc-c1e8b759145f", "sighting--0bb23317-4aeb-4f9b-811e-e407b4443ad2", "sighting--842c16fb-9530-4f24-8c88-6deb52222ab9", "sighting--2d557069-861c-428d-b175-613ec6dbbcb2", "sighting--c1c92bdb-c214-4418-a84b-77b2c57d835b", "sighting--266f3410-6b22-4ad5-922f-68bdb47a65fc", "sighting--5b02b18c-b26c-401f-a1df-b0f710a57c03", "sighting--4a0cfc0d-3561-47f6-af26-acb11721f593", "sighting--760f5fd2-d8ef-47b4-9c36-c126a26c6cdb", "sighting--206bf4f1-e330-4767-a94d-0aa63acbf36e", "sighting--160ef30d-671e-4000-92f3-c2cd6bfdc0df", "sighting--ea110486-ad7a-4845-a0ee-5b103d27a004", "sighting--f05afbdf-1e89-4df7-9ec6-91617f12749c", "sighting--2635ccad-7974-420d-b5c6-548f335f1b5f", "sighting--e4376a59-e1b1-4a0e-8544-f87053ff70f1", "sighting--36764af1-b74f-478a-a5c9-1fb677b5cae8", "sighting--9c55d43a-ddc6-4266-a654-178f8a4c8f97", "sighting--2eb65e2c-5aa6-420f-8be0-d0e3dcd21a16", "sighting--c3783b7c-fc56-4385-b0bf-675f298dfc03", "sighting--a360d3bc-4546-4660-b48e-46fd487adbf2", "sighting--0d923f98-25eb-4f4c-8c68-4bfea03cf02d", "sighting--03005b0a-b24a-4530-bef7-a597f7aadaef", "sighting--8825b8df-1ad4-4a1c-aebe-27bd3c708c60", "sighting--e2d2de60-072f-4a4f-bf79-9c2866a65ae8", "sighting--8cdb9663-60b9-4fc2-bcad-5020009db62a", "sighting--7c8964e1-fe20-4c01-b3c7-54ac49df77b6", "sighting--2120a480-773d-4418-bf53-d1b8287b5797", "sighting--c4c266dd-6ad5-4dd7-905d-af5d0b919b8b", "sighting--30614c84-f5a6-4422-8162-54b0a2c15410", "sighting--c23ea6b4-e0eb-4b06-b774-fc2d735d90f8", "sighting--5378c919-7920-4e06-9a1e-88f815cf65bd", "sighting--490440e0-3a43-4f3b-adc5-4c9feaa73830", "sighting--8d3bf0dc-b41e-473d-baf2-a235364810c1", "sighting--5ccd25d1-d515-423c-ade5-b5c6853c2cf3", "sighting--4b6b9573-9553-44d0-a9e0-5d44cfab4c3b", "sighting--9cffd544-519d-4f9f-a914-4925ad1dd352", "sighting--fcbd744f-05d7-428c-b26b-37be5da921df", "sighting--6ea86c01-0c48-4381-a772-8b63da281da9", "sighting--c432c323-1d4b-4831-8a2a-5d2f508a7ded", "sighting--7144e9d8-b6d2-4c83-a831-7f2b0a6e5f94", "sighting--8fcf8044-a4e8-4751-9348-2b439aac3909", "sighting--74bc9ebc-83e4-4b97-b4f1-84820c4d0d9a", "sighting--546948ce-8b12-4cff-a379-6008054d83c6", "sighting--635d4195-5379-4ccc-b75c-75b0a4a2db15", "sighting--20c47733-faac-4def-91da-6a7d221e3545", "sighting--bf8b5b06-7c24-404c-afcc-59b1ae47f1b6", "sighting--b1eb012a-1609-401a-a01b-54e9e1c6107e", "sighting--ba65dade-8dde-4db4-97cd-977128c83056", "sighting--cfd1c34b-bf0f-4316-b0cc-2099d1ed5115", "sighting--546584bb-2be0-4204-be74-32148145c67b", "sighting--bdd0f1ed-8661-4dcd-8626-02ea3f9f60e0", "sighting--1a88f7fa-31bc-4d27-a826-412e8b8578e9", "sighting--a33556dd-3d24-489a-bcea-330cdd38e19e", "sighting--8964193d-a555-4031-bf7d-deb0c25d5314", "sighting--a1448fac-9ac1-4f46-8afa-db5281209eb9", "sighting--c7ce2963-af26-4e27-8040-1b6332c3c7ee", "sighting--04b6db0f-972e-4800-a7a4-876bb7af6d0a", "sighting--fcec01a5-6ab1-478b-8819-c7b727c29963", "sighting--8ff69054-85a5-48ee-99ce-3fa6824cb3b0", "sighting--5b986caa-8b3e-4ac7-93e0-00b0ede1b43b", "sighting--3acf7ddd-1f60-4976-bba8-4a4963a7eb1f", "sighting--58fdc524-a5c8-43d4-930d-cc11922a392a", "sighting--9f24709a-06e5-42b2-9f02-ee27ffd2a48c", "sighting--961b5ffe-094c-4ce9-b928-3fe4a4113174", "sighting--5e9d2b33-bd0b-4bbf-90cf-3b830a45d266", "sighting--c78d0b21-b86d-4cfa-9897-76aacf7634a9", "sighting--d3944d38-9179-4c29-b37d-f6ad0ffb86cf", "sighting--ea099f87-448e-4fc0-9e2a-6aff2a3dae9e", "sighting--cee11369-9295-4e97-aad4-2c7a69f615fe", "sighting--1206d5eb-1618-4166-9b6d-f45ae296ea4f", "sighting--654c253c-911d-4ecf-a1f6-097e4821d593", "sighting--442f247a-0680-4351-86bf-67eae759f4a9", "sighting--e5b5a2a4-83cf-4df6-8f03-8a00f20b040c", "sighting--c636b3da-c4f1-47cf-b906-17496d34d3a9", "sighting--f1d410a3-42c3-42ee-8e84-29617f8ac222", "sighting--dca8c463-8c20-47c3-8562-d144e9ef9c26", "sighting--ed4c6f2d-46a8-4706-9a8d-2ae25e0e4e11", "sighting--f92821d6-fe89-4d25-918a-77a34348655b", "sighting--da36c4a0-e03c-4ed8-aba3-87f8557a2cd0", "sighting--27aeecdf-27e3-4e69-ae0e-f45cb0ea2437", "sighting--ea2f78b7-bfc1-484c-8786-5333af9dbc91", "sighting--f4037758-93ac-42d7-834a-ee5d98b8a111", "sighting--a2c58701-4985-4f9d-82ab-930ee5b4b397", "sighting--ca257b7b-0b75-4e96-bbb6-76ac3480c547", "sighting--882966ad-84e9-4cea-9180-f9597bc38092", "sighting--88293929-36a4-4665-8fe5-91e011a5a68c", "sighting--96ae23ef-72ed-49bb-93e2-4b0c433ce098", "sighting--1b1c14ec-bc9f-4370-b5d8-5e2367dd7043", "sighting--43cf26e1-33be-4f98-a306-8e2315c6cb32", "sighting--c9705515-4d51-4c32-94d8-9ec3a9a4ab18", "sighting--1be8d24a-507a-49db-bec7-cc42b42c0e7a", "sighting--20bab7bf-f20c-4057-9d6e-e007b2bb8ef7", "sighting--15a3f7a8-6901-488f-905f-8ccb58c93e0b", "sighting--9fd8481e-1002-48f4-881b-fd4649398323", "sighting--c94d0399-5d04-4621-9622-686cf527cb76", "sighting--57003f1e-c101-47da-a301-5e1e8fa1454e", "sighting--442fc3c8-f198-4dac-b414-5034dcebb778", "sighting--cf79fc1a-888f-49b5-bbe5-1b41a4274c3c", "sighting--a4bf064e-e7d6-42b3-bda8-d1e91b12e57f", "sighting--e7ec3b00-3f68-4f77-96b5-a08be0f05639", "sighting--982b3f02-3599-4d80-8678-8e8c15b2985b", "sighting--14cf59ed-40d9-48ad-af83-bfc0561423ff", "sighting--648c5a9e-715c-4e6a-81d4-87e8f000916d", "sighting--4df87aba-70d0-4c41-a710-97317bd28a86", "sighting--24cf2dfb-ac3e-4893-8df0-2231c2a128ba", "sighting--2d75aa6d-9424-4589-ae11-0cd10b7026df", "sighting--37c8c5a8-580c-4f96-ac4a-b0743f79c0e3", "sighting--4f997a7f-8d82-4317-801f-c7d6f3edb32f", "sighting--4470d0ae-8426-459f-9c1f-6790fec9dea8", "sighting--54f000e7-8b8c-473a-98e3-dfae567117c7", "sighting--8b6ef0b6-7f65-429c-988b-3e1447b6ea58", "sighting--83629f9f-c798-4160-8619-aad8fe9f7c3a", "sighting--a547bffe-f4d8-454e-a74e-2f75110e35f9", "sighting--c329885b-8568-4b44-8e1b-a7673cf3da7b", "sighting--785f63e7-842d-4e9b-83f3-c3e746420c90", "sighting--f4552544-a38b-4d1d-9228-d3fab57784a8", "sighting--23a45be8-74f9-4577-a648-03c968b9f600", "sighting--5a8f3b3f-f07f-4b7d-b917-ab5f9cd8f56e", "sighting--3ff37756-4acf-4e4b-ac95-bda82f01d3a2", "sighting--598e85cb-a54d-4cef-be6a-ef08423245cc", "sighting--61f248af-d91b-4eec-a3ad-d351b03d7915", "sighting--6141117d-2574-481c-9662-6240582b69ce", "sighting--6b74e754-2754-4a87-8e87-970cf0d029c7", "sighting--0a7f3d8c-2eab-421d-8f34-a0177e98e052", "sighting--0a3819d3-b40e-449f-955c-1d53a85d5691", "sighting--c0cc0d36-1550-476a-8b7b-c7b8f9ac2f5a", "sighting--69551198-516b-400b-82c3-2df785a7265a", "sighting--0623fd67-0009-41f0-9e71-7ce6adb95b3b", "sighting--540b583f-4c2f-42c1-a0b7-f9abdeb798b5", "sighting--d2f85f97-ec19-4d1d-8e1a-7c2bf223a8ca", "sighting--0712e200-5f68-4d07-b4a5-7c4e4285884d", "sighting--ee98ec8d-35ed-4ce4-9945-844ffe160777", "sighting--9a874571-0f54-414f-b5c5-08fae93e26f1", "sighting--216581b4-3263-4055-96ec-a22a4b9067f4", "sighting--8e7e9e0d-1941-4dde-8a9d-694792a57889", "sighting--458cbe50-5864-4c84-aca3-e61000c07c9b", "sighting--55afa933-0ee3-4768-a82c-53b74a374eb7", "sighting--174a2449-1c8e-46e4-8d6a-8eb22e517ed0", "sighting--90cbf69b-e8a9-49ed-a1e1-d337818e7607", "sighting--854e21d7-320a-4d46-bdd4-eb226ccc6c7c", "sighting--c41e1fa4-0b09-407a-a254-7b9b7cfe4722", "sighting--82c140cc-c95d-4e0f-a3d0-f0b54578ec2d", "sighting--304808ed-d241-4370-99a0-b163f9baa303", "sighting--878fa9fd-a116-413d-a869-277602dea11d", "sighting--83d7303f-e8ac-4ba0-8a43-7e8a058f53a1", "sighting--21350291-59da-490c-8f10-90aa03cbb743", "sighting--06e71f2d-6f2c-4387-8f1d-8145fa812bda", "sighting--c7821948-d75c-4397-a94a-9fbe44264f6e", "sighting--827d8982-074f-4373-a855-f1d909eb7610", "sighting--0eb3919f-7879-41ab-ae6b-7022117695c4", "sighting--f98cc69f-2f03-4892-af56-4e7c96da16dd", "sighting--06d63bd0-0453-409f-ae83-bf098df28db8", "sighting--5518d63d-2e76-465e-bba0-fa8fa564d1d8", "sighting--5eaa827e-3c8f-4415-97de-a21ae151f732", "sighting--027b18be-03b4-41c3-8449-38e43dfba754", "sighting--a3f9a56a-3fc3-4a95-afe6-fe3c23dfcf92", "sighting--132235b8-9128-4801-ab62-0244a9b78d84", "sighting--467d5484-5ea8-4d69-839d-d040e17f8ae7", "sighting--ce0fe0b9-d082-4b4e-9f44-7d82e6d7a84e", "sighting--eabed795-8b51-4894-9cef-33f0ecd18969", "sighting--1aee2727-fd5d-45cd-a97f-e541d133e47b", "sighting--b6c6bf47-69c5-42b8-a059-561b0cf9ae5d", "sighting--5d3ccb31-826e-48d5-9498-82b30686c6fc", "sighting--665dc858-6fce-4ec9-8c09-bc6f7f2d34ab", "sighting--4dd14524-d1fa-47a5-8a99-ca960df62319", "sighting--46eee186-4ffa-4658-b8ae-b4a3a878fad2", "sighting--e259b63e-c29a-47b9-9ed1-acf2c56e077b", "sighting--fe32d76a-6457-4f65-9e34-6ef6e51dd2c7", "sighting--6eb8866a-60bc-4016-8fcd-0c8c4c5a96ce", "sighting--85c8acb1-3d0d-408d-b7a3-b8ca7654bbe0", "sighting--f3e52eec-a124-4bb3-bf90-a9a8bbd51abe", "sighting--84d4867a-5a20-44ac-ab21-a073e260d9a7", "sighting--037302d5-7de6-4886-bd06-9639f189df23", "sighting--035c06f8-7a9e-4082-bb4a-bf01c0712947", "sighting--0405a722-f34f-440e-bf87-4c72e237dde2", "sighting--5c5280cd-f9e9-41ba-9642-642f3c066c21", "sighting--07bc595b-787f-4198-80aa-e24aa38ab4ee", "sighting--09209f17-c2c9-499c-9d53-fe227fad6d2e", "sighting--e7c9338f-8200-40d2-8ddc-6180a0e5b971", "sighting--cb087c6d-889f-4d5f-adec-bb8266e9a4fc", "sighting--4aed886f-8922-480c-aaff-e44ccb3b0c93", "sighting--aae5d691-c89d-4914-9348-40dc5b41f453", "sighting--87cd60ec-d909-4414-a1c2-9af6419aa133", "sighting--9dc8f4a2-6cac-4c90-ac37-297ee24294ca", "sighting--d1e0d931-54a6-4507-bb98-6a0f7f81d7e8", "sighting--05a3eaa1-54a0-4a9f-b36b-540b84cce756", "sighting--c77247c3-dc28-4430-9e9e-8ccda0a2b589", "sighting--d80b5579-bcca-4baf-accd-98cb8af38a51", "sighting--f47742ef-7b18-4fb1-9af0-2ab39cf4052d", "sighting--826266cf-ef61-40c7-a4f5-83bb1bd5a689", "sighting--21510b77-970a-41e1-8d82-48f424195cb0", "sighting--9dfa7d48-85b3-4523-88c0-b586664d9cca", "sighting--c2785d6a-ac6c-4adc-99ad-f7d9b46673d5", "sighting--025d364c-1462-4c9d-ad8c-85bbb6053b8b", "sighting--80391415-6d81-4ed5-8b97-82c67b153da5", "sighting--af5ce6bc-c7ec-4608-b908-40a74307b984", "sighting--ea0de36f-8566-40b7-b4a7-b9e50fad8e2f", "sighting--33f70781-da1f-4e3d-99a2-7c9a30a77e17", "sighting--ec543f2e-694b-4b20-bbbd-946a861b9adb", "sighting--6942a5d3-cf84-4a2a-8066-5e5e4d867da1", "sighting--99afd933-8293-4c01-8b0e-4212c4c59b4e", "sighting--9bd2f8a9-1db1-44d2-a14a-b8beb316a8c8", "sighting--7defbfb3-61fe-4022-b76e-0173f8e47234", "sighting--505b039b-9e20-49d7-bd35-1fb56af21c19", "sighting--a7c99438-236a-452b-979c-ab208c3d1212", "sighting--a8254142-77b0-402a-82ab-466e1f118ff3", "sighting--bb72dab3-f700-4913-954b-da7de0a23db6", "sighting--b1e5efb0-c0d7-44a2-a7ce-c24e585ae561", "sighting--e89399b7-b2db-4e87-9637-f3dc6f77bebc", "sighting--52490356-34bf-439e-816c-a9beed8e3f19", "sighting--6734ff7c-cfb5-4b57-b341-c6d3c32f6a8d", "sighting--362082a7-0482-4a51-b264-fe7cb74ccf53", "sighting--42df8d11-38b8-4274-92fd-aca522d6abe0", "sighting--96e0c911-5069-4585-976b-1c7983cd0138", "sighting--c54bd035-155a-4dd3-bcc6-3fe0a5ed1a50", "sighting--dec7de82-1141-4022-8798-a6687d0d1cad", "sighting--f233c917-ddc9-4bd9-bad6-e92f0bc0cf02", "sighting--7802db9f-5ada-4162-bbf2-2ba6ffc04746", "sighting--8764fff4-f7ce-4890-87f0-814a960c0f53", "sighting--e0b8ae7b-a13c-4568-82ab-95825f2e8873", "sighting--0b8d883c-31c7-452d-b8ef-0cf8eab8867b", "sighting--9b06bcfb-9c72-4b67-a188-ed652b5b7bf5", "sighting--c28ffdb7-63b7-4bce-879b-ee6a6ca1cb32", "sighting--682d9d65-565c-4566-8b06-db969e18b5d7", "sighting--0f8a624c-6dc1-42e4-bbb2-fc3b42fb7b5e", "sighting--3c4b8bea-3708-4032-9ac1-66fc96aecde3", "sighting--5460043d-2e26-4719-b217-23a377bd20b3", "sighting--fee36af2-d237-459a-8e5d-370149fca850", "sighting--4623d840-ec25-4f1c-98e4-ad4debd277a5", "sighting--b98babb1-7630-4360-83d6-1b2e1645c42a", "sighting--b29635eb-3d4b-4e97-8264-61896baf390d", "sighting--3b96ea7b-9589-48f3-8750-0156a33ee060", "sighting--eb677155-9ce7-4b4a-9484-5d7d8fcae573", "sighting--f25136a3-fdd6-4dde-bc32-c20265a04aa2", "sighting--beb29fa9-a68f-4a2a-8078-9d5b27dc38e7", "sighting--2fe20c62-b510-4f11-a904-038f7655bc44", "sighting--0423539d-9201-4d8a-8ffc-9a121830ab80", "sighting--9f8baf16-2e60-446b-89f8-7124179606f7", "sighting--9f7cec92-147b-4eab-bc80-ec6613046b7e", "sighting--d53e6d32-0c19-4e5f-884e-1c20346cf834", "sighting--9795a55a-d395-4e77-a73e-0cf594b0e33d", "sighting--e4cdb39f-3f8e-4018-a32c-3c56a6c67d5e", "sighting--0e970e42-13e7-4d31-bc30-547e236b100d", "sighting--e7f45ba1-81f4-44b2-9112-ce0c411f9ade", "sighting--83c7ade4-84ea-4b55-84d3-db35028e16e3", "sighting--a9b6fa62-f898-4b29-9be6-d6bf84676749", "sighting--dd8cdd50-ea6d-4125-817d-73098ee14a54", "sighting--25bccd87-d0b1-49b1-b549-ca0a233ad6e9", "sighting--718780f3-58be-45f9-8247-32293d6ba21c", "sighting--025e5ac0-0dd3-4ecc-ad18-81ff3e9e1bbc", "sighting--c65604bd-41da-4a45-a6ea-9bae998779f2", "sighting--cf4a3ccb-2e47-4865-8854-2e7eda93e61c", "sighting--3193e90d-9fe3-4a55-88ef-36f4a0e8af78", "sighting--d0b247aa-cb12-47cd-bf73-4a9a345aca59", "sighting--67e5fb93-6e88-4485-8a06-49ff3dcf42ae", "sighting--7e5f2a5b-2c46-456c-b887-2cab291055cd", "sighting--2cfa3702-bd4a-46c3-b030-a2da9a15dd5b", "sighting--2c848c3b-1e44-4787-a638-41bcc06c4658", "sighting--ef99cf15-cdba-4652-ab95-99fde5db14fe", "sighting--1f428ed1-98f9-4d86-a1e0-a7bd8d32c9a8", "sighting--9890c5d9-4dbb-49bb-b394-f21bdba25491", "sighting--032dfb12-bbdc-47ae-8836-dc17a3ecabd4", "sighting--dea79025-4378-4589-8613-8941b0199366", "sighting--845a375a-3bfa-456a-95dc-ace6d3057e37", "sighting--35839bf6-5c30-4f67-8e75-4667a35f5c78", "sighting--4b727b19-e472-49c5-b405-9c64602c7f30", "sighting--b87edc76-5aed-4403-8e77-1e1ad12eab83", "sighting--1e547f1b-3c45-4476-98bb-693fc080505b", "sighting--4b342cc3-43c9-46df-be7c-fa9af95a3830", "sighting--b1099a70-9b09-48ca-8e9e-5fb87b135417", "sighting--3492dc5c-2914-4414-a2cf-2d7239eecfe9", "sighting--c26d4c0c-c7e4-483d-b148-9f180e03382c", "sighting--0a3599b6-4fd5-4443-9bad-830f1d82e37e", "sighting--3e1a5050-910a-4386-b6e9-bc06283c0e88", "sighting--530e30b1-772b-4436-b952-9623891dbd1a", "sighting--aadc9ed8-c8a2-4e1e-ac3f-44979ea0ef6a", "sighting--d181958f-63d7-4ae4-aa3f-7a7e9efe4fd3", "sighting--27c34864-d395-4b26-8430-d78547e635cb", "sighting--e894a3bf-cc31-4970-8d8d-2e6a88001dd5", "sighting--c44a41a6-6a34-4271-902d-f83f703e1946", "sighting--98ad638a-54f5-45fc-ada6-47a991e882d2", "sighting--1713d80c-6045-423f-ac00-f687e677fc75", "sighting--08e15444-44eb-4d18-8a11-6daa94d3a33c", "sighting--9c1229da-c7ff-49ff-89e3-33cc79eff727", "sighting--9fff1b39-5a4b-4728-a685-2065918dc0c4", "sighting--7d63b57b-aed1-405a-a142-b7686fd68350", "sighting--be812490-4780-4ad4-bebf-4476eb810c00", "sighting--bfc739c9-1758-437a-8e21-ea756896c826", "sighting--a95017a2-b720-4e37-a284-6f1fbc71d85a", "sighting--2a224355-55fe-477f-9b55-4bd14acc2486", "sighting--06f58555-4ec3-4ade-9006-5820d055af91", "sighting--262a6e86-3043-4c24-9046-894a4b902e1b", "sighting--1adf47b1-298f-492f-89f2-48dfddd942f2", "sighting--931439d1-9a13-4b9a-ace3-292f469c0461", "sighting--304273b0-2ee9-4b22-965f-fafc642104d8", "sighting--36157244-79b5-43e1-95af-b466644a2f3d", "sighting--899b7852-acd7-48f2-a4f6-9376cfac8d6c", "sighting--efe19559-543a-404f-ac2c-3fc781cb151c", "sighting--b688226d-a994-40e4-b18f-0502e51f8d7e", "sighting--5a8a4535-e526-41d2-b831-c2c17d322612", "sighting--7ed5b900-450a-490b-a215-6374e638ae9b", "sighting--85b115c2-60cf-4907-9870-f9b023b2e35e", "sighting--8ed6d7a2-7de9-4c86-b97d-03c557113f38", "sighting--d28f88a3-d416-4092-b923-36b4b0671120", "sighting--916635f0-6793-4267-9f77-03a1e10c5526", "sighting--c6a753d8-a329-42c8-8d99-171e2e76648e", "sighting--3243b312-af86-4679-8d59-daaaa6239f70", "sighting--908437c6-b355-4a1b-8359-692fa7f247d0", "sighting--6ee231f5-500e-4c06-ac46-8cac0dc1a29b", "sighting--c4c442d5-7b5e-4ec9-be46-8a9245cc8782", "sighting--ba227a4e-76f3-4c55-b322-942351a4507f", "sighting--7b579ba9-96cb-4007-9497-1f0abe94b381", "sighting--e5530603-dc9c-48cd-8de9-2827f3d76c0e", "sighting--3520b5ce-1963-4022-9115-cd96eb1a5607", "sighting--93047bc4-4644-4b93-9939-902ce956045a", "sighting--5bc46811-ca16-4e3c-8d49-0fd9eb3548ef", "sighting--bba62f04-d792-4b7f-b7c1-479000389482", "sighting--82b0869d-dc04-4a49-95cf-b2eae506f5b0", "sighting--395fb994-d41e-469a-a659-e0c2e640aab9", "sighting--9acafbc9-3edb-4e04-98ba-c9c80b1f48e9", "sighting--3f354cbc-2f77-43e0-9075-9ffcbf367e72", "sighting--3b10d5a6-da1e-44b0-9720-0a6318e352b2", "sighting--10d9b361-6c49-4d10-b442-50b714ace950", "sighting--4061fd68-231e-430a-b8bf-d9166039efeb", "sighting--8cd3912c-a23d-4fb8-91cc-7af7d46eaca2", "sighting--194ab460-20fd-4377-b315-572604a52e11", "sighting--2aec7c4b-4f91-4bc7-8b99-07217117314b", "sighting--f6533df7-7b6e-41c7-aec8-d5f106d53720", "sighting--f31f824f-5b61-4dc8-8901-3fade50b050f", "sighting--1aa5f86c-889b-4a5f-88b3-e80a7cae3c07", "sighting--12c0cc43-4618-42b1-969d-41427048c085", "sighting--0a162dc5-f26b-4ca9-b3ef-f34bc810e932", "sighting--3ac7df8d-6626-49e1-8d94-6053ae2a3dd3", "sighting--f3a5d345-e337-4e3d-bf5e-bce79b71c505", "sighting--9ca4cf63-d063-4626-9452-1ba624245595", "sighting--47225db9-7940-49a6-9a6c-5ebb766fbe77", "sighting--b6dc158e-f89e-46a2-b206-7c1798f512b3", "sighting--c449a7f3-a37f-40f4-9546-14b5776e2520", "sighting--866ece39-bf5a-40bb-8434-1fc8a4cbdefc", "sighting--d21d3723-c96c-4389-b5a1-0514687dc9b4", "sighting--e9bdd916-6121-4c3b-b9f2-c0560b660284", "sighting--460b2d46-535a-4d15-bad8-74afa790dc5b", "sighting--84dbee4e-9f5e-4557-a407-737e3d82f7d6", "sighting--54cc31c1-09f6-4cc7-9220-52fcebbf871d", "sighting--990f0d26-bc7a-4fd3-a210-da387505fb0c", "sighting--8af2e90a-2a12-4576-bbc1-5673b3df53c9", "sighting--08e4b886-4a69-4efe-8ac6-34f95067c234", "sighting--54d48086-cda5-4ac1-bf31-53de27320162", "sighting--56fa65a7-ac57-4397-bf9c-ea5733b39de8", "sighting--5390806c-481f-452e-907d-99607c8cffe5", "sighting--d9bdb608-6943-4c5f-bbf3-c3f71592bca2", "sighting--71328570-cfde-48e1-b680-26c9824982ce", "sighting--23a26dc7-e588-482f-b94c-5337e8e8179d", "sighting--3c7fd244-5847-4ae2-abe9-4f0e5a98718e", "sighting--b72aae2d-1e01-43df-902f-b515fff421f9", "sighting--0fde0910-3b2d-48ce-9287-2c21e544a4c8", "sighting--ad393d45-556b-4d56-b273-c96e1bb7830e", "sighting--e7f32fc7-dcf6-40de-9b75-b116da2317cf", "sighting--e88a7067-67f8-4af3-a8e7-acc1d419ce89", "sighting--1f77db0b-59c1-4780-9aff-e1159fad54ef", "sighting--c063896e-7472-45e9-8255-9936a430d2c6", "sighting--47fd1100-b7be-4e45-93be-b3b882d29b72", "sighting--3e1b9fe8-4ada-406b-8d9f-dae28dfc2195", "sighting--3e7e26c9-ad2a-48ec-a91a-bc9a0a3243ac", "sighting--367d8778-fe53-4cf2-90a4-b200cfb81ff9", "sighting--3a49b14a-575d-4890-ae49-35ea6dc75111", "sighting--ad841776-9072-4ad9-83b6-a60262cf5b36", "sighting--fdcf0005-34ae-433e-be2e-4214275e9c1c", "sighting--8eb2fb41-0a55-408d-9576-371d77584d41", "sighting--4dddb9a7-f0bb-4b70-b361-00470d9b1ad3", "sighting--bacf91a4-d92a-4124-ba37-ab5160f70a35", "sighting--fd2033e2-43f4-4d2f-ac8d-5cd67873d702", "sighting--154b50c9-ae09-4ae4-b22e-148e56df111e", "sighting--08519808-3127-4ef1-8391-5dcef5b41d51", "sighting--8c79f05c-df0a-4c11-bd15-726e7fda1d1f", "sighting--273b9f8b-d5e8-4d98-8811-0174cd9e7aa2", "sighting--1f388342-f9e0-4e4d-8c65-5e883f002154", "sighting--7494cc96-b8ab-4f51-afa2-72424c0d01e1", "sighting--849f8cb9-808b-4152-afa9-65dbb940602c", "sighting--c879205e-4899-41ac-b090-eabb245771e6", "sighting--c7ae2c41-fc0e-4a63-9d13-df4f7fb42fa9", "sighting--9c96e809-db9b-4682-b10a-fedd7b3ba242", "sighting--948f402e-35a7-4f5b-82cb-baa0eb161416", "sighting--59eeb2ba-e316-4878-bdc1-50ca68b2e6b2", "sighting--fc7b45b5-18d0-41b8-8b46-17be804d780f", "sighting--e15ee0c8-26db-4384-8cfb-2f460d42e122", "sighting--21d806bc-451e-4334-8e83-ae1dcdd27d3d", "sighting--eb3adcd6-7cd0-4d66-861d-8d6348d9e112", "sighting--7965a656-1bf6-4ee0-a664-0a8b2b0da9b4", "sighting--c7a2fd66-3701-4f94-bd3c-e1d9a0927ef3", "sighting--3c4593d6-8cc1-44ef-8e51-939f19a451af", "sighting--c01c24d8-e0f1-443e-ac9f-607dca9290da", "sighting--3ed047bb-98dd-4732-b0a9-10d865959735", "sighting--e8ef78a9-681b-43ce-ad33-6b6467ad5b01", "sighting--7caec0fa-bf93-465d-8c76-1f4fd09f0232", "sighting--b5ff4061-aca4-4d86-bb5d-65d26224f714", "sighting--84a2c012-aa1c-4681-8c47-a1695fd81be4", "sighting--2876cd8f-a2d3-42a9-89ed-43c21fe56bb4", "sighting--d86ff3a4-0503-42c8-a1e5-2058b37a5d6f", "sighting--3a489d4e-4e0e-4892-a564-4ce3eb404262", "sighting--262843bb-fbf0-4505-b0a2-44e979669bbe", "sighting--d0066a34-2716-45c2-ad60-7586d0c6eac3", "sighting--d66ab70b-84bd-4f3c-a6fe-cafddc397c93", "sighting--77eed809-7949-4492-8ebe-1405b62bc858", "sighting--bb548a79-eaab-44fa-9b33-8f9c97394425", "sighting--973c940e-aee1-4a37-af42-57e5e6f3b870", "sighting--46e09e3d-5325-4dd3-b768-41ca749f5e90", "sighting--11070421-36d6-4306-b01d-4cf3806ce33d", "sighting--0a48fe2d-62fb-4fb5-a879-4e148bba9ca1", "sighting--f1a0da2e-174a-43bb-a10d-2110fe8fb251", "sighting--6fa79572-db09-4bc3-b5b6-2cefd38e99ff", "sighting--d4ff4760-fbbd-4620-b5a8-e809f7198fc4", "sighting--f94ab41e-f8d9-49c9-8b03-30c0954f6885", "sighting--f2cdf49c-a15a-45ac-9f4d-dbc551330dfa", "sighting--476169e6-fa3e-4cd3-80b0-a33becd5f83f", "sighting--7fa950b0-5d32-491b-ad3e-0dac24d292d5", "sighting--d9445846-62d3-47a8-b084-f92021a5f37c", "sighting--00d96f77-ec0c-4667-b78c-3a48682733aa", "sighting--33c00794-526c-4963-b1ca-6ac10ce57a7f", "sighting--f5f73b6f-4ec4-4140-a1ec-bb05259bbd6c", "sighting--274baad4-3ba5-46bd-99be-c01a1484b126", "sighting--9af6fea4-a79a-4c34-9f23-f0d90f765749", "sighting--fcef5cca-a615-44da-9e01-c4ca7484d904", "sighting--c26da16b-d70c-4262-aa05-e27ae99cb8d3", "sighting--10bf008e-23e6-4a2c-800c-0c4f7ad61645", "sighting--f012f25a-b17c-4eaf-83b9-0c53d0fe91d3", "sighting--46c73fa4-2c32-480a-bc68-7dedcdbc45f1", "sighting--bee1a376-7432-4c48-83d8-612e6a01e7dc", "sighting--7c9372c3-7c09-4323-9448-085f0f588e58", "sighting--5931c34d-ed9b-4f80-a9e0-645bd5c9caa9", "sighting--c3376b42-112d-430f-a30f-98e84620eac7", "sighting--4acadf35-2088-4ef1-a2d3-8aa480e22f15", "sighting--ae8cb4e3-412e-44a2-b6ae-51e5e920782c", "sighting--61579849-574a-43cf-9143-f552665ba70d", "sighting--3a15df44-cac1-4d8e-b6b0-c01c0459f3fc", "sighting--973f547a-acea-4c7f-866a-af71ffb85da9", "sighting--1990bd04-e406-4878-b6d5-d55ad6c77582", "sighting--2e3c1050-bc70-4cbb-a9ab-a70442d22581", "sighting--e245ec0c-e3b9-4451-8c49-cbbc5ef4d5a5", "sighting--e523d18b-2524-462f-8c42-cff2823efa19", "sighting--bc6c42e0-8936-4048-a00a-371543955798", "sighting--50110fd9-83cc-4766-8983-04481543cfc1", "sighting--49c17bd1-85b6-4786-b1eb-781d04267cb9", "sighting--c1d063fa-5c33-4661-956a-c89cd727cd35", "sighting--a7586e5f-44c6-434d-843f-921484a54954", "sighting--b2b57b1f-b282-4045-b640-6c5b38f88884", "sighting--bbb72501-b787-4044-a742-59fe163a6250", "sighting--f29f7e79-f732-42f8-97bc-1e8b5b0ec7b5", "sighting--675ae486-aef0-47f3-96cc-5e362d314cfb", "sighting--1e085d19-6436-4f91-bffd-e98519157691", "sighting--25c18549-52a5-4286-9130-cf58d750bfda", "sighting--0585fb26-b065-480c-be15-420fa03351ed", "sighting--6a110c70-b71b-4602-bcf5-52e38ebbf30d", "sighting--bdc6c4f9-d191-40e0-af5a-e5f7262b345e", "sighting--b5b6524c-fa42-4c36-affa-633d975037b7", "sighting--daac02a0-9961-47c7-8fd8-eca33778c827", "sighting--346f1635-66e9-47d7-9080-69ea27fde95f", "sighting--1a14666b-fbbb-4249-954d-e101301b3974", "sighting--92866dbf-c823-4eba-b180-dc830e79d167", "sighting--a388cd68-818a-4371-b739-7a1f521150ad", "sighting--9af63ca3-365e-4db1-81bb-803a8b0c3986", "sighting--f93ca9ce-cc34-459b-a521-49caaf22b01f", "sighting--05f3d0a8-98a7-4300-96ea-086870c33423", "sighting--2dc0f478-ae8e-4836-b63f-d02cc71f95e5", "sighting--23f3520e-483b-4992-9e58-9e209882ae91", "sighting--a118d8d3-927d-4e39-9211-54fb84a7dadb", "sighting--74da536e-709f-4ef6-9721-14e63503b0a2", "sighting--1e54fdf9-681e-42e7-9421-beb9efe20252", "sighting--725b6a39-5321-4b12-9e9f-1d77ca1ca410", "sighting--ed4ea5ba-21a8-4b15-b5dd-d68a072b5047", "sighting--9eb96e7a-d595-4c6c-9573-b31950093668", "sighting--2e9fd5bf-1a6d-46ca-8ead-3272785fc465", "sighting--3b8ede61-5c04-47d5-be72-b930665ec7b9", "sighting--5004aca3-1906-4cd5-bee3-be6f3364c1dd", "sighting--79ecf118-e4c9-49d9-b716-45d7a166bc5d", "sighting--4122f347-98bd-4fc9-9f13-c0d5ca1daf01", "sighting--094baad2-8648-474b-a8ef-48845f104c2e", "sighting--e482ee0c-8c76-45b8-bda0-f691233b98ef", "sighting--1203969a-9bd1-48a9-a5d2-76d3a34d9e65", "sighting--cec261ac-f1b0-4f31-93e2-ce27cb830fca", "sighting--c53af1f2-f12f-43ea-a12b-9a7c77486c88", "sighting--1456409e-8062-4674-9728-e237eeca538a", "sighting--a7872bf0-c47d-4324-a004-e1107c5971e0", "sighting--eb077589-1f72-46ae-9d4d-6197383f5b17", "sighting--d296bdf1-2f36-4b71-82e4-884b2018c1c4", "sighting--77d620fb-e74a-4697-accd-7173b284d610", "sighting--51335bc2-dbe2-447d-8757-dd4c5d6a2457", "sighting--3a3dd26b-c3ae-4fdd-9b65-b2457c2fda5f", "sighting--226ff60a-20d9-40a3-b6f1-899dc2efa94f", "sighting--e9667eae-f3c5-49c3-bee3-1a13323538a5", "sighting--5d380ca5-5897-458b-9852-a5be0b37db50", "sighting--b34c53e7-b705-42dc-86da-11a2b72736d0", "sighting--0274b378-7348-4d59-bd71-bc5d3d85c2fd", "sighting--a47ece5c-557f-4baf-824c-e43f384d0bff", "sighting--4e465fec-f305-47a4-a218-48ed113ee1d6", "sighting--ffdb6220-f191-4297-a5c8-4eb05c619e0a", "sighting--135e8fca-3937-4bc2-ae62-1b8f8172cf31", "sighting--a34e76d6-03e7-48b6-8d0b-16f6a77fd688", "sighting--ac9be714-3e9b-4cb1-8b55-ac8761c8e2e0", "sighting--7db67d9a-4d15-43b4-9be9-de6f8aa67a0a", "sighting--efd92774-64e0-4e3f-a2f2-cfb8fbaa3604", "sighting--6f27e218-3cc2-4105-b402-41b218916799", "sighting--09cd0d83-937f-4a9b-a58a-d346acdbad94", "sighting--baa137f2-6287-4dc1-8b32-661863b68b0b", "sighting--997c668f-24ce-4e18-80c9-de25c719a219", "sighting--97911ae6-f54c-4e11-83be-23776db80014", "sighting--b8fd8e0e-aabf-44cc-a824-797f558cd8a2", "sighting--0c8b8a1f-a2fe-4aa7-9991-0ac003cd7ecc", "sighting--bb5621df-e32e-4d15-afed-34ff78677a12", "sighting--877c0f6c-973c-4ab8-80ad-f61822a1e0b0", "sighting--65c625b9-4ffb-478b-9138-63cb2b7c8ca5", "sighting--1b5016c5-2585-4009-b0a6-9e23b90b4448", "sighting--d51cc48b-c139-451b-9c3b-eddd388f7e6d", "sighting--4a878977-1e6e-4f24-ac0d-659963eb4503", "sighting--96478379-a045-40a7-b905-45f0aab85d40", "sighting--9fd7b364-2272-4ab1-b907-9e1148449335", "sighting--0fe8744a-f820-4feb-b84a-5e48cea88f1e", "sighting--0767dfbd-8c70-493a-ade6-377d5bf6531e", "sighting--ef18698a-31c4-4fda-9feb-93594133b33b", "sighting--acdcbe5d-6b8c-41db-a8d6-4a9ec83e8f86", "sighting--d4156465-9d54-4b37-9c92-b54dc1446b07", "sighting--12d20e7c-993b-493e-9c3d-ed0ee97bbdf7", "sighting--52a132e0-06cb-4d31-8606-eceb715dd424", "sighting--40f9c3c4-7703-4fa3-b0ff-c1eead74774b", "sighting--2fe76ad9-7811-43f4-bf4c-3ff3061aea6e", "sighting--42db0e89-2ca9-46fb-835c-45f79fc533f2", "sighting--37e8c552-f02d-4eaa-a67b-c255ac5ea5c4", "sighting--67e04513-8309-47db-a1ec-267a357122b9", "sighting--8e95f2d2-05cd-49b3-8fc3-d2769db6fd5a", "sighting--a4b32a0a-c2ba-4c6b-9133-4bc0eba3c1a1", "sighting--c55c9382-994f-444a-9d0d-0c0fa5775ad0", "sighting--2b63944d-9649-4587-a1e7-d75d7e38cecb", "sighting--6699c37d-6201-4853-b4ea-103dd7020511", "sighting--da1d852f-7f4d-4f5f-ab82-628a5ebaa75f", "sighting--c951883e-c352-4c13-9a37-9d80ae58c662", "sighting--34ab99a4-b7b5-47f1-83f8-4df825c861d7", "sighting--d188599c-3bdf-42bd-b79c-f0d392021872", "sighting--006f5b1f-00ca-4042-a989-03d712a79f31", "sighting--de2326a6-1632-4d69-ac5e-e25d4873c194", "sighting--85d041cb-5b26-4ebf-8eb6-4890ed73422a", "sighting--41ce0e9c-7e38-4d79-9f70-fa2d7ff35ac1", "sighting--e0ddf242-8030-41c0-9380-a89cedf9ac46", "sighting--4fcf6db6-fca1-43ef-b540-2a7b7533e497", "sighting--04bcb18d-afc8-4fc1-9114-59ee82a596c3", "sighting--119b13e8-8ca5-488c-a367-fb0682608321", "sighting--8c296209-ba21-42cc-9020-3f1c825af606", "sighting--76c00d35-3113-44df-b499-a1716340d83b", "sighting--fcc043ea-0e4b-44ec-becf-af87a18d9f1d", "sighting--2679ddd2-3dce-4548-be0f-96f756957606", "sighting--f4c119b5-1eca-4c3a-b6a0-3b8b7c9c7e00", "sighting--6fb4caf5-8034-4fdd-baf0-d94f4c304455", "sighting--1b467856-6615-4a74-94d0-eebcdc46ba74", "sighting--2b159726-cb09-4d52-867e-77a71d6049fb", "sighting--db14e971-4d16-41a8-9966-687ee074a845", "sighting--bd0088bd-0fb1-4252-ab8b-9a1b33eb10ee", "sighting--496bfa12-7a64-4804-b725-123985803dc6", "sighting--3f089873-1f4e-4085-85d7-464bebd61b61", "sighting--1237cd69-29c4-4c93-bd9a-a0eea20ae803", "sighting--a6db3c91-8712-43c4-8f12-b80d532edc7a", "sighting--ca5335f5-365f-4941-9dca-d892ad682917", "sighting--d6557237-18ce-49b4-ada4-1c8b03a9a649", "sighting--47ce5c53-e9fd-4e54-a391-d31dee4d09fd", "sighting--a5b63664-90ae-4934-9771-fa0400fd5ca7", "sighting--30f186c8-3a12-432c-9698-05341b993cc7", "sighting--7c8c0658-8439-47a7-a102-614e4948cea1", "sighting--6648f4bf-f9c5-4735-9127-ba95d4d3b091", "sighting--c4f64761-9782-484d-b220-f06d9f7690c8", "sighting--41bf13b5-467a-4a70-8605-0b9e9c5134e9", "sighting--2c7f3e0d-602a-4f72-bb8a-5ef00fa01e58", "sighting--b7136cbb-09d2-40c4-8cb5-76cbee3ef177", "sighting--72e6f20e-8bfa-47d0-b15b-5eecbe7eceb9", "sighting--ee3f1b6a-f0bb-403d-ad27-a7d81c79481a", "sighting--b5edbd3f-6ef7-4176-bfd3-f0285057f858", "sighting--d5294fab-d08c-4dc8-9cc1-263b65f3ab3b", "sighting--d12b64f2-9c15-4b3e-b57a-2a5e3f4b61f1", "sighting--bb2375dd-de4f-4bd2-b0db-c0962b494672", "sighting--0f99a12c-378c-4c06-b009-e8a41e0f609b", "sighting--441a6772-6571-4ecf-ab83-fa55ce39813c", "sighting--a09a726f-d5f7-4902-b171-f2ec941ff9a7", "sighting--e4d18faf-4083-41fa-9ec5-8070796ad30c", "sighting--86eaf739-f917-413a-a916-c924c9451b82", "sighting--df0a03a0-916d-4f40-a669-4dca19518f70", "sighting--96bde5cc-c2b2-4463-b10d-1d65d2479e2a", "sighting--458c46d1-2b18-42ea-a8be-950b1a2dcc9a", "sighting--8254859a-a90c-4b86-ad31-fe15bcae4c5b", "sighting--56811b83-c248-4421-bab7-4da46fbdef5e", "sighting--51939958-7eff-4ce6-8080-3e3f86e79571", "sighting--8e3c55a5-f9c0-43cf-b350-a5730e885292", "sighting--b1752047-5be0-4d30-861e-871fd816041d", "sighting--cc1bf114-cd77-47e9-a106-2210f17237c5", "sighting--555d45b2-51b7-4238-a030-bb917a626598", "sighting--43afb55d-5e9e-41c4-9330-145b11011624", "sighting--09fdd06a-5ad2-4b36-ac59-d65088e78a93", "sighting--7f535f8e-b3e3-4940-b747-5d1569e0f26a", "sighting--d9f80633-945c-4523-89db-fd3e1ac9870d", "sighting--6de26275-17a9-4343-be6f-00797d83da33", "sighting--29cb4e3f-7cd0-48c1-bf22-85f53028f048", "sighting--a7ecbdfa-bf0e-47ba-b0e2-8b87869d9c9b", "sighting--5c54b91b-60d6-410f-b5f9-5552ebba6652", "sighting--f9d56d85-3386-4b9b-bc83-fb18a7e9a704", "sighting--5c19f949-37e9-4564-a42a-56c0a4b40a03", "sighting--88afb0ae-1e52-4c8d-8675-81a9f660e74e", "sighting--92638f23-99c1-41ac-a30f-38e15144b1ba", "sighting--748533e4-bc2f-497b-8648-cdb4bbbf86fd", "sighting--fa6a33d6-3a7f-453d-b08f-641aa61b5ed0", "sighting--6b5c6b65-8767-49f8-8ee0-d499ccf701ca", "sighting--611cc5de-25cd-4d5c-a3e4-db0eb385bbc1", "sighting--d813bffb-30d8-49e2-a13b-c9837b05a29a", "sighting--ef3b05de-11f7-4cac-8790-5fe79cd2d9af", "sighting--237c830e-6d29-4fc2-8895-f85fe9b17578", "sighting--969420e5-3ea4-4546-8ec6-ad7e43426a98", "sighting--31e834e3-51d9-45d7-883c-7757bb09197f", "sighting--7c05addb-1aae-4784-8eb1-08a42c4cdf9c", "sighting--4ecdae67-7f5f-445a-93e1-71a3290b7f2e", "sighting--a963c2b3-925e-4734-b6f8-9041d58836c6", "sighting--4692d929-ed6b-4af3-96f1-bea582e4fe32", "sighting--53a996c3-5f47-48c0-bb46-ec70e63446ef", "sighting--5cfb6126-c948-4d7b-9114-2cbd595220fc", "sighting--d81acd0f-42dd-43da-8e05-88ab459d0617", "sighting--5f5f8262-662e-41f4-af96-323a8af8ce71", "sighting--42568a9d-ee26-4548-9408-5337e4bb4c4b", "sighting--5871648d-762b-474a-9ff8-d09c15f0c5eb", "sighting--f5d18def-2840-4139-83fc-390f76a5ba30", "sighting--13f74030-3cf3-47c8-bee3-ef024fe4fde6", "sighting--fb6dda59-a2a7-4d7c-8f7a-150174bac431", "sighting--4c9d8972-7e8b-4b10-999e-fb58952d7ec4", "sighting--bd4b9a98-6ed0-49ee-b572-428165e7aaed", "sighting--23e3c201-af79-46ef-b686-9c07e58157aa", "sighting--1b64a25c-d31d-4084-ae8e-85e49f0dc66b", "sighting--979e35f1-d492-4e8c-bb1d-7595f4040152", "sighting--107f36e5-94fd-4a41-a48c-c27b9be6b3db", "sighting--a0a89506-4c53-43f3-8e04-83ca71dcf2a1", "sighting--59819690-8e78-4555-957e-56231ce87504", "sighting--2badfd87-3a6d-4c1d-bd01-e1c985389923", "sighting--fc17d24a-6d37-44aa-b691-5bc99b0f2052", "sighting--0f22e2d6-0049-44fc-b6a9-2f5b130936cc", "sighting--f91bf716-3ef9-431b-9622-d35e1a0ea0ae", "sighting--99540c61-a823-4679-a3b2-9e5d38ba4456", "sighting--23baa5b7-e049-4cd4-9346-54c8d229cc63", "sighting--7f2420e8-5197-4d15-be6c-568edfcb8d59", "sighting--22c33361-8f0f-4b7e-8012-ea858d924c75", "sighting--861746d1-4ea2-4b70-a37a-f9584699382f", "sighting--d434119c-1715-4f8c-93b8-7f13e0a997ad", "sighting--02089269-c7b2-4722-b34d-7e1c29fec689", "sighting--4f19f943-a530-427a-82c3-3c5eb15d1419", "sighting--2b430bed-c565-434f-a1e1-09a5a8e80ab8", "sighting--abe1b0a8-5c35-46a1-9989-b0a0575b7b5b", "sighting--87151fde-4a37-4277-b9c3-e6afc082b040", "sighting--485b94ce-61e2-4516-9091-965a5afa2b2a", "sighting--d040eafc-31c9-4367-91af-e71c65727030", "sighting--b9f77c4f-1628-4a85-9a70-b3db54817352", "sighting--500b8cf1-ee8b-4f08-966c-d771d9479a7f", "sighting--c0c7f8a0-91b0-4e22-a287-d31239f43bfc", "sighting--55c18d98-0cf1-4d21-9e4f-f7909d9b290e", "sighting--53fffeda-a73f-4fc0-a7b0-2e5048068879", "sighting--b1be5f8c-37fa-4bbb-89fb-75d8e6a6c108", "sighting--03ba8d91-28aa-4199-8891-45459e58f4f1", "sighting--89e399e2-d07e-4ebf-a494-0a728b9a2baf", "sighting--62ff3d78-9001-4981-844d-7e18c0634fad", "sighting--7136e852-c1cc-4fa4-9a31-b782fe44d90a", "sighting--f7f19bbd-2fd6-4908-9e92-d2c3c1126a03", "sighting--3d64e121-f2e8-4cdd-b9f6-ce0e645d0580", "sighting--3a913ec7-99b2-4fe2-b9d9-3d6222e767bc", "sighting--411c5b90-b5d8-44ea-af02-e74db6077c4b", "sighting--c4b0f4bc-cfb6-4ed9-b224-e83295ac7b68", "sighting--7ffe3028-f555-465d-b841-1492c34ad9ed", "sighting--1f097fb1-97c4-4b56-8777-8ee4a13a51bd", "sighting--c558ad1a-6769-44f6-8f2f-bbd52fc57133", "sighting--a75c4ccb-5d64-4321-ac99-5a8819e58ae0", "sighting--e082a335-08d6-4d50-a9f9-be81e9e13e02", "sighting--a2d46eb8-e843-455f-a898-1d091621c247", "sighting--1471491f-d0ca-40a8-8b73-d83fa0183d84", "sighting--4fa417e5-5e05-4758-b712-69504696199b", "sighting--5940283d-cb9c-4d5b-8744-8833cbe5d1eb", "sighting--015337c5-309c-4505-a873-422f7f9e488c", "sighting--3a4eecc5-4fa3-443d-937c-74c9887fd80a", "sighting--45f409e8-86ee-4ee3-b176-10bc3f96c746", "sighting--83fdd16e-bf7d-4676-9c81-136051c85d0f", "sighting--ca2e91ae-4bcb-49c7-a27f-43c54e7c891b", "sighting--c3e739fb-5c45-4945-b3b3-b3060c0b4fef", "sighting--4b7374fe-103c-456f-94ea-c8d64936f92b", "sighting--9d71cff2-592b-4804-8549-3df2030dec5a", "sighting--970a5404-d438-4635-82a6-eee7c69f5ad7", "sighting--95b80c4d-4c42-4682-8f3e-8f8d28696aeb", "sighting--aa5123ba-1a5d-4730-b5c9-d1b078da8baf", "sighting--a8fc84e5-c637-4d64-b0c9-54d4279f63de", "sighting--d845b97e-edf6-47ec-883c-6ca06b9cf820", "sighting--49914a42-0bab-42d9-b272-f2e9f1063b85", "sighting--b1ff0591-6ff8-4000-8e49-5410577d2268", "sighting--708ece44-55e9-4399-a84b-06f14395ffae", "sighting--8a3a8656-286b-417c-bebb-0d3a1671a071", "sighting--b622d3c1-831d-49c3-89ff-7540d69fb7df", "sighting--743bf77f-1a7c-466d-936e-cf77f8ec3593", "sighting--30f08794-703d-475a-81c5-9b3986b88417", "sighting--fbc9a08b-0862-4160-80e3-2cb992042174", "sighting--bdc501c3-65f3-45f1-8b90-0b025397b27e", "sighting--8dc9df24-51f4-42dd-9e0e-d28e25acb2ce", "sighting--15795433-bc1a-4e12-ba1e-a0f8ca40f5d1", "sighting--4f5311e8-0cc6-498d-b018-881aaf5d6e7e", "sighting--fb55ee7b-7824-46ea-a85b-c9555a055c15", "sighting--96164a18-1348-4b5d-b4ae-43436bbeb7ca", "sighting--7768b7fc-39df-4bfd-9ae2-c7007c49be44", "sighting--8001baca-26c4-4068-a258-d27793c1ce8d", "sighting--02fb0ad4-83f6-4488-bf6d-9ef686cc87fd", "sighting--e3b68d5a-e8ad-4261-93f0-8aa8f3ea3f2d", "sighting--cde86ea0-4edd-48ac-9027-838cb2e9fe28", "sighting--62406dde-c3fe-46c5-a414-b306e5d5d538", "sighting--b0aca1c6-60e0-48fb-9896-8ab92d1a9b4e", "sighting--8254a577-a928-4eae-8c79-ba68eecbf94d", "sighting--f869a85d-6ad6-436a-9bc4-1e17213bd5f4", "sighting--bb8644a4-6d42-4b30-bf70-c47c46e5fed5", "sighting--831fad66-feab-4653-b1e4-a125bd41618c", "sighting--8ce6d055-edbb-4be5-b76f-259d11d07e99", "sighting--bbfa8fea-5886-4bfc-ad7c-3aa2735cbfbb", "sighting--4c5a7bdc-27ce-4806-b8a2-82eddcb38198", "sighting--81977a62-0a30-45a5-80c6-8ba69c852572", "sighting--aff94008-39d9-4310-a0b4-fed6dab83a8f", "sighting--0642ba0a-faa3-467b-ba6b-0bddc9b59add", "sighting--eb19d3a4-2090-493f-9829-7276627a9950", "sighting--093e218a-64fc-499e-b103-689370cceece", "sighting--b6307118-be78-481c-a1f4-e1d043fb09f2", "sighting--595321f1-fe85-4214-83a2-61551db1a948", "sighting--529a8aae-1168-49da-ac49-90e5679b7cf3", "sighting--44c4ee91-26a2-4480-b2f6-e446e7a70ad0", "sighting--71294b9f-d4be-4153-8517-ebde814eba2d", "sighting--266979c7-fdd6-42ea-9e87-96a60ac4d8db", "sighting--c1466b92-278f-46d0-b758-7d0e9200baac", "sighting--e5cef262-ddd8-4235-ab3e-aa362ed550bc", "sighting--0d7bbd06-4835-4c7f-979f-74af5d266c11", "sighting--38b85eb8-48a6-432a-9860-2423c8852544", "sighting--c87007d3-0494-4f65-be17-17e00c0d8f59", "sighting--5eb944b6-ef6a-440c-bc25-9fc27dd214eb", "sighting--6490e51a-8f18-4ab3-8174-0c30999c9d34", "sighting--c73126e8-e48a-4d2a-b12e-edc2fa0ac342", "sighting--58271982-41bb-4f1f-b226-092e6e26125a", "sighting--00443995-80f1-41e7-b49f-563e7a67a25e", "sighting--f4fcf8be-a657-443e-ab07-5ee3b61be110", "sighting--b0a3cfa7-fbff-417c-b09d-af2d2b68861b", "sighting--f78a183a-a4f2-4bc2-b141-b79d97eb8516", "sighting--4ace63cb-6793-4a00-9668-91af5ca991a9", "sighting--2c62cd47-438c-416d-8eba-2802b73d4e03", "sighting--f754118e-c3c5-4c74-af40-064dcfdbdfc2", "sighting--dfad4def-d21c-407d-b624-8ad4e611febc", "sighting--08c75fa0-d5d1-4c58-9b28-fa5da40eb73a", "sighting--14250924-39ef-4d8d-97fa-e2e51b386722", "sighting--d4ec7e5d-e829-403d-a9b0-ee009f72596f", "sighting--4aa8cadb-46b9-44c9-b4ca-2bc0dee3e324", "sighting--5a519f14-a88a-4af5-85c9-c889f4d288e7", "sighting--065f143a-ed17-4a9c-b95a-550bd8c4cc1c", "sighting--318c0558-0fb9-4b8d-ab6e-74706fb01aae", "sighting--2c1ca9bf-553f-404c-9b4f-73f27f864f81", "sighting--99f4ca9b-3b2e-42ae-9b77-4553b56be4b8", "sighting--69476167-74d0-4625-8fdf-740be626dce3", "sighting--4b273cba-a9e9-4025-a5e1-7425d1989310", "sighting--7e0cf5c3-ab25-4a31-a47a-fd81762967f1", "sighting--ad11454c-af35-4a1e-918f-46258c86feb6", "sighting--d640baa0-0755-4bb5-9821-b3f075198135", "sighting--e175fb1f-e2bc-4ad5-bacd-0fbda25524c3", "sighting--fd374839-fb96-4896-8121-c7cad001e433", "sighting--6ec48c8f-30fb-4e64-acc2-916a4ec944c9", "sighting--575d2326-3521-443e-8cad-b4422610321a", "sighting--8e5b4907-4a56-421c-bda1-cbafb0f883c8", "sighting--58251786-c190-43c4-87fc-a105576d821b", "sighting--e0175bdf-2ccb-4c1e-ba1e-042a8494119d", "sighting--5cfc6b12-5fa0-4a61-9e99-c88bce07fd56", "sighting--b1186e1a-e24b-4490-b10f-e69cb36fc4ca", "sighting--e99908d6-d2dd-4523-b53d-07dbde658679", "sighting--44b8ff29-74eb-4f86-9573-56772d4e95ab", "sighting--b71da717-7c2c-4d62-adaf-a866f581c3e6", "sighting--ef617b27-3cd2-4943-893c-23900c510883", "sighting--313ce2bb-e225-4190-9ca8-83fc6c3184c5", "sighting--9dcc7408-ea0a-4616-aac9-ab6ad50b17e2", "sighting--027c7b30-a3cb-4660-b62b-d5d4b22a9915", "sighting--b74131ac-809c-4461-b7d9-23f6c36786af", "sighting--235dfe16-37fb-4547-9028-61f3092590d7", "sighting--f2caece0-da00-4d99-8f15-fc8205e6a88f", "sighting--e107b8ad-a172-4f06-9774-fc6f4dca218c", "sighting--d0a6394c-b1e7-40db-b923-623e2978fd20", "sighting--9cb5eef7-706e-4bfc-bff0-88847b85c803", "sighting--31c0844f-4533-4a8d-a1f2-1ce69564a8bc", "sighting--4ddc1519-a2ee-48b2-8315-4c8626e4bb16", "sighting--dc7800bd-2b74-4938-b005-db5b19c074e8", "sighting--8a6bafe0-e5c7-4e68-92e1-de605241f647", "sighting--459dc7c5-2b48-48c0-9b70-7757b76e738c", "sighting--d0865abb-044f-4337-ada8-809cedfd8b02", "sighting--f5894beb-7d68-456a-96f4-5742bcaee671", "sighting--8bc1dd5e-35b2-4c43-9423-13c902fac25d", "sighting--12e6ec48-08c0-4d84-9b9a-d11113170bdd", "sighting--abb97dd9-c0cf-43b4-953e-66784bb319f9", "sighting--5e7b9127-474c-4f9d-bfbf-95e826f2e7ea", "sighting--a71ab6d5-7cc8-4f34-9700-399fde2394c4", "sighting--2cec7749-a05d-49f7-bd83-635f4383120a", "sighting--4d465bcd-4a3c-4b48-a402-6a20a6e1141a", "sighting--165768cc-6c85-47f5-adae-2e3dc4c4fe26", "sighting--c6c3469a-e7b3-4830-bb86-7e28d78d160a", "sighting--0753c0a8-da68-428c-84f6-6a3fc80503e6", "sighting--b4da07d4-dd72-4c40-8139-c9b0e46e1b2b", "sighting--29378070-f2b2-4e74-a3f7-6709cfd977aa", "sighting--d419cfbc-e803-4601-a337-0bf133c4b22f", "sighting--23c02dc3-eb21-4469-a7be-b024703dbf70", "sighting--d2d5be5e-df44-49f0-a31c-abce7ae0ea57", "sighting--eaf3190f-d3ba-4290-9134-26016fb6e661", "sighting--aa2ee78b-3bc0-411f-8bf9-f0190b7d16a0", "sighting--869c4475-db36-4e5c-a8da-e6d80a740874", "sighting--5e4036a5-3ab6-472e-90eb-65cb93c9ae2c", "sighting--5e8d546c-0f32-4e42-b4e7-bd574f5e2d01", "sighting--5e217fe5-354b-4428-b548-d7fa7eda9a90", "sighting--65146619-7ff5-4fdd-8646-c9975e613e09", "sighting--8717767a-6105-40c5-83dd-a62fc453cd3e", "sighting--c4d49d73-e00b-487b-a25c-b6ccb8a40f0a", "sighting--be534633-36be-4c09-afd2-0ff50e961538", "sighting--5033acc5-5668-4fa2-ae23-72c69bc7ca53", "sighting--cd611c79-277d-42a6-8500-a5012240ae23", "sighting--fe937a6e-5e3c-41e1-aa37-73bdc71cfa76", "sighting--68f98c8e-8abe-4147-8e28-477e78a9d9ec", "sighting--f6e6dba2-72be-4c3f-a1fb-20dc974ab5dc", "sighting--5bc77d87-267d-4a04-8df5-0c1d3c608a4d", "sighting--1da73336-f613-4d3a-9e57-062d16c98999", "sighting--27c85291-36bd-45c4-a015-308cc945196e", "sighting--13375888-73cc-4a37-91d0-1fc6b52c1e97", "sighting--3b76787a-5004-4215-a0b9-f6a8f91b2c62", "sighting--a9eecdc1-bd2d-40ab-884e-421adca0ab09", "sighting--ccb2d45a-1abf-4383-acf0-99cad23fabb5", "sighting--79cffb71-53e9-4a13-8007-aa4f97ccf180", "sighting--14123c5e-9ccb-442a-8405-b1a9b24d0f6e", "sighting--7ce1e92b-9ec6-47e8-9646-7bd3fd3b7801", "sighting--63fc4c00-3bfb-496a-9899-580b6ea07b8b", "sighting--d02cfad4-33a5-4691-98b4-8c58184cf67c", "sighting--7526767d-de4a-431c-9766-9c743d99afc8", "sighting--34a24b41-b308-409b-a83b-a877037b6a6c", "sighting--ae6512fe-69b0-4a6d-adc5-0c16997abe8e", "sighting--9809bede-55a6-452f-815b-22d6e540de8a", "sighting--0d97b6c8-8b57-40e3-8d6d-6c9f368d164c", "sighting--a1e273ba-464c-4da3-9c62-63c8fcca4a8d", "sighting--68320fe2-e1b2-48ee-bb0e-52fe07bc4724", "sighting--af6eed4a-7f25-4f28-b499-0dae754af4d3", "sighting--39d1ed3b-617e-4727-862e-15288f910495", "sighting--17ff5a27-19d4-4b35-804c-5459d1eadddd", "sighting--d2ac94eb-8b46-49d8-b868-87c25ed2fe74", "sighting--a869a1f1-e219-45d4-aa96-ff0ccdf96bef", "sighting--934ceac2-3705-425d-bf88-cf9aadaa4655", "sighting--5e071b8d-69a6-45f0-96e5-82c0f9b157f1", "sighting--5379e869-6443-448e-b4ce-8ffe22d9e016", "sighting--d2cd97d3-6a3f-4553-9de6-5d1700e9ed43", "sighting--25aed5e9-79f4-424c-b2db-d5de2cde4ac3", "sighting--296042be-36e4-4c53-85b9-e3ac02ae28f3", "sighting--739159e5-a4ae-48a4-bbac-ddabe4cd95c2", "sighting--f8805ea8-d3fd-49de-9f2f-55862e7eb7d9", "sighting--6ae5218c-8ea9-4ecd-8150-6be2fbfc2772", "sighting--6aeba86d-67e0-423a-b92c-fd26d29706a7", "sighting--3e7abb40-8df2-40cd-8872-116253faa595", "sighting--cc530507-382b-4e5c-94e1-e8995292e751", "sighting--d5971067-a7f7-4355-bdd6-5be9972fc8e1", "sighting--d06c2efd-6285-40f0-8b43-33cf43709eea", "sighting--534bdd1a-296d-45ff-af5d-6454c41e9bd5", "sighting--c9618c2d-6fc5-4c61-ae54-504fb0317733", "sighting--d95a8938-46eb-4072-8b78-91e7eaef66ea", "sighting--929fada8-41ad-4966-838f-d798bd497276", "sighting--8d354aa0-0972-44e9-9b1b-062f8abad39d", "sighting--f11a9d3f-53f3-4f06-9ab0-86aea941536c", "sighting--81a5c214-9871-4427-89f2-82b13dfdac07", "sighting--814d3432-a61d-45e9-898e-72ef61c08822", "sighting--75dd8310-2018-47d8-8ac1-0f76d97275f2", "sighting--df93882a-25c8-4d3c-b4f6-73af0f54281e", "sighting--dd77a81d-cde5-4967-ba2d-f3866c05d4be", "sighting--9673765b-f1e6-4268-a6cb-c28e73b64eee", "sighting--f1c06fb9-b7ec-408f-af56-596b5293d950", "sighting--239f464d-5c41-4687-84e6-9c9d7733ea00", "sighting--ff8f803f-8636-4311-9220-6ce8b55b217a", "sighting--a4911490-ce4c-442e-bf5a-47e835fddc84", "sighting--518e5f6d-bce4-4d5e-b94a-281b0622e177", "sighting--1cee22a7-7bcf-4c36-8844-8dcb8de76680", "sighting--6fcd2487-86c0-40e0-a183-3014af60575e", "sighting--362d5b28-8c46-4927-abf3-c6ef96297179", "sighting--f3f7e5ed-b914-4528-88be-c009dfa19856", "sighting--329cb9b9-8802-4932-a7d7-8adb10c8c4ac", "sighting--3d4a17d9-4ca3-4165-89bd-a18464aad940", "sighting--b8025ced-7b25-4f2e-ac7b-5855119a7929", "sighting--5ca0539f-8ec1-4d64-b507-8e09703023d6", "sighting--780247ed-0bd3-4795-8012-d031c556e15b", "sighting--17f7941f-e784-4ba0-b107-0d8639fa3387", "sighting--3921a738-9e07-4644-b9e7-9900ac9b05e2", "sighting--2637219b-a5ca-4e1b-98fe-3649c542de2c", "sighting--b0114df2-e5a0-492b-a8d4-82e2c9c60593", "sighting--4c12eac0-3882-4479-bc59-eab8fd0f9926", "sighting--6357492b-1a61-4995-b0ff-fc4fbdc6ab3d", "sighting--a7eef6f1-2a92-4089-8365-f50a8a179b1a", "sighting--a5324cf1-2acd-4f1b-aebe-421e79222b5b", "sighting--aa598da1-828f-48e1-925a-5563dbe495c7", "sighting--d4f2fc6a-5ffa-4ab9-8500-42119a0c7f1e", "sighting--db0bcd5c-c78e-4e29-b6c0-ec8a77f16d1d", "sighting--68d141dd-9774-46ee-9da8-e8559088a78c", "sighting--f84de9f0-087c-476d-8ea8-deb06c34f154", "sighting--12f1e782-1525-4ba6-bbcc-a48483237990", "sighting--8f6c5114-dd05-49f0-8f3c-a55e26e67c22", "sighting--6f4ed757-aa3f-44fb-bec4-7a965f10af0f", "sighting--3e7476f4-60f8-40e3-864d-d844b8328862", "sighting--43d608b0-99be-49be-b6f1-b16202b56a57", "sighting--102886ad-d179-4a69-8372-5fd346391ccf", "sighting--05c659b2-7b34-4413-9454-02768d0f374f", "sighting--8751f18f-a511-444b-9538-d219b9c5e12c", "sighting--215566e7-cf18-48d2-92b3-0f77720d31bc", "sighting--9ae1a2a7-5cef-4a60-83b9-940aed37b0a8", "sighting--958fe072-4760-4098-95be-f89eb9600aaf", "sighting--bb0d9a5f-4f05-4e89-8f64-46fee88efc57", "sighting--ba7a5adf-02da-4f2f-ab0e-d8a5cb7879d4", "sighting--fbb9f0f6-b20f-48bf-b2c2-5cc761c33f97", "sighting--d5915117-bef5-403e-bba1-a4f43faf6549", "sighting--c2bffede-6a0c-4c01-8b6c-cb4298507a6f", "sighting--5490cf0b-98e9-4a03-b23f-291064ca04c1", "sighting--64958177-7202-430e-af5a-252f182a4570", "sighting--d05f427f-1611-4893-98a7-d65249eecfb1", "sighting--a6bdb2f1-303a-4745-b71f-c3be9fd03145", "sighting--01dd9981-dcbe-4678-823e-e5386c15bf0b", "sighting--88a060cc-bfeb-43ad-8516-77a20921866a", "sighting--e67785ed-0da8-4c28-b8e5-d227d811adb0", "sighting--90ea5f9a-293b-40c0-8bd8-6642f3d46e68", "sighting--c6657727-f9e4-46b6-aa97-6496c302b732", "sighting--07671b62-9d73-4cb9-a000-775ebb937743", "sighting--0ccf3c0f-7bc0-44eb-968b-9d3ab67e6f02", "sighting--5f12ff90-dedb-41c3-8136-8eadeaae8121", "sighting--788047ee-f439-46ae-a854-334523f3270a", "sighting--1ebeafdf-68f0-405d-ac97-ce6148cc2d75", "sighting--9a1c64f3-bdfa-4ee6-854e-b16bc7c9996e", "sighting--165e12ec-e8f3-4628-98a7-f9e00ea2f245", "sighting--3742b02a-d64d-4fc6-849f-595c54b514c1", "sighting--34987821-e8c6-47b4-a685-8dada588ebca", "sighting--334049d8-53fb-4cab-9c3a-4b0ab725d91e", "sighting--e4e77b48-6dfc-4f8d-a85e-a934eb0fb0ad", "sighting--e7ae1bd1-0522-4de0-8723-67655a89e364", "sighting--f1cf530c-0511-4709-96d5-ea97eeeaa370", "sighting--34aca495-4661-4f59-b0d2-685ef072acbf", "sighting--f3054b95-3c10-417c-a24a-826f405948f0", "sighting--7329c12e-48f1-4f83-9e11-343da85a74fc", "sighting--62c539b4-883b-485e-a5bf-8b7cba9a0403", "sighting--80f950c8-f8a9-4b85-8053-ad2622e85f1f", "sighting--4581dcb9-99ed-451e-b89f-3e9eafc78cf4", "sighting--a5e7f1cb-5e08-4efd-a813-8c46ba877b2a", "sighting--3bb719d2-500c-4cf3-a212-4d26a2784665", "sighting--4eba9ecd-aa78-4cbb-9eb6-bb937d453702", "sighting--7cbc6fde-98f5-4c25-a029-3eb49b364c3d", "sighting--19255f26-3891-434f-b348-c15b02717741", "sighting--59f25ae5-58f8-4d68-8be1-23d6daac60b7", "sighting--3b152778-2403-4ac0-9358-d3200b121ff8", "sighting--fbf7dc9d-e4bb-43c1-a16c-1824bbc2f54f", "sighting--5b9ebeed-8e66-4e2e-b79e-d37db881bd9f", "sighting--100bb6b4-d776-4717-8217-f939630759bc", "sighting--e0f71424-e14e-45e8-8179-c89366faed44", "sighting--9bc354bb-5f25-45e1-9889-4544209572b8", "sighting--92e12b1b-2ca0-4bc1-8bf2-cb96d927f71a", "sighting--e7278bba-7320-4060-9250-9356005ef51d", "sighting--e62be639-b923-405f-a93e-16906cb1ee97", "sighting--75b4e098-ff5b-40d8-ac66-2286ff69c4a6", "sighting--65ca9cb8-336f-4bb8-918c-9a255d1eac24", "sighting--f7bae52d-0ff1-4906-9d1b-e2e66bee58ec", "sighting--1ab4716b-5738-47e3-a2ac-043e4aded8a3", "sighting--e1958f33-4075-4984-9f3c-216196a23826", "sighting--1731f83e-3a0e-4200-bcc9-3c12b0fab186", "sighting--6a002c4f-8504-4d46-8bb0-5d5a88597015", "sighting--7197ea00-89f3-47e9-8117-7c81af5efb56", "sighting--e331c0b1-23e4-449b-89d7-6bdb897b8d8e", "sighting--55eed934-5796-4dbb-a9e1-73a1951c1b29", "sighting--d26f6c56-e01b-4295-9c1d-e58dd62c83af", "sighting--8ec73aca-184c-4c91-ae46-361e5f923b56", "sighting--a2cf1553-cbb3-4985-bf65-b5a4503ab3c3", "sighting--fd642f3d-4380-45ef-89f2-43d2b358b44c", "sighting--60284648-5dd2-4f45-b496-9acc210ba888", "sighting--a559c3ad-8a1f-4b40-9fd1-8687ae85e5cf", "sighting--4c21cbaf-2810-47de-abca-bb6661ee203e", "sighting--00b681d4-b404-49ee-baa9-1d3f58bfc58a", "sighting--a16df7ba-973f-42b3-bb5f-c7a654f2fca2", "sighting--d347e263-d44d-45e6-9b3d-e23d7a268a8c", "sighting--568f73a7-b5d6-4ccb-8b10-d24dcfe82f50", "sighting--442887a3-ebc3-4bf6-94ba-383d2797433b", "sighting--f7275b2a-40b8-49ce-90f1-eee5aebea85b", "sighting--f58fdacc-b196-4057-9a1e-cf6fec15244d", "sighting--3651a6e1-8f9c-4112-a8a4-e6b71b7c6444", "sighting--120c2f7e-0d4f-4aee-9aab-a95f04d52603", "sighting--87b3045d-fab4-42e9-9813-1e985c7066c9", "sighting--18a97f90-29ff-4ed6-9ccb-bb450f09da71", "sighting--9b6cea2f-ddac-4bf3-8560-9058d2c2ee51", "sighting--7a3a0072-5ce4-469d-8ced-48645798cad4", "sighting--8b5943fe-dddc-4849-b12d-ee6187d9a89b", "sighting--377ea7d2-997c-4c39-a74d-94eb306a630f", "sighting--36dacda9-ea8b-4231-bf23-d11690f1798b", "sighting--ee160f70-ded2-424b-b416-cded2005787f", "sighting--c39e4462-0238-42c4-8e8c-781253945860", "sighting--8ef280b8-f239-4884-8c6e-a051bbaf8550", "sighting--84f2d353-8252-4c1d-a356-a5065363c478", "sighting--60268b39-0051-4057-937b-37bc1e4cd1ff", "sighting--dd1ccee9-69fd-401f-be3b-e5e4573213fb", "sighting--2071fdf4-d368-422e-8a10-0bf8bdb911c8", "sighting--473055db-993d-4c5d-94d2-47d8147884ba", "sighting--d9b09a43-27b3-461f-b1fa-839882dd723d", "sighting--6c48cda7-e992-4fc3-91b7-c4b931d09f1f", "sighting--c92e24e7-1fe2-43e2-aa82-a92913d594d7", "sighting--facbb088-7fd1-4981-897c-c61992e48a02", "sighting--76e656b9-93b9-4b9a-a5be-1a4e891d7c10", "sighting--07182866-f8f4-47f2-8f66-3c8031593b25", "sighting--7687173c-62e3-4d67-a5e2-0bc61fc66b3f", "sighting--27c2a148-e2ed-4ca0-b2aa-2d99ecf41d51", "sighting--bf5d13cc-43c7-4fda-b517-d4fe08cbb819", "sighting--59f8315a-db1f-49da-9001-2c87dca5a029", "sighting--f137305b-faba-4a47-927c-08db498d86c6", "sighting--de59bef7-02d3-4e8c-a603-6708e0c2ee98", "sighting--36a1d147-28f5-4b53-be07-a1f4e8535f66", "sighting--5aeecdb3-d2ac-461f-8bf2-ed452675ba76", "sighting--c2a7c1c1-e9ce-4c01-8706-574c136e8f03", "sighting--be243a41-d477-411b-a61b-fde527298d78", "sighting--11f815aa-fe08-4925-9beb-c5caae5b4c29", "sighting--d2da7e8e-2da0-46d6-a03e-82452b74214f", "sighting--6ba9483e-31a4-4d89-a864-69eb761c76c2", "sighting--4d87bbf9-a56a-4e7a-8867-251b874767c7", "sighting--0d11f1e1-fee0-4674-9796-943555e0789d", "sighting--816d0400-75ec-43e1-9f86-57e0d6cacab2", "sighting--3a31bffd-bf4e-4ae6-8ebf-3af59b5a5a0e", "sighting--a5548e18-cedc-4736-ba5b-4cc51d2968f0", "sighting--bd4c441f-78ca-4b12-9f7c-0d426ceb148c", "sighting--b064e71d-ac07-4fc2-9d1a-299d3ca9fed6", "sighting--b48a7732-43bc-4a5c-a49b-2cc669c46d7b", "sighting--09024bfd-cea8-48af-af79-12d50e686e34", "sighting--cda028ae-8e13-4d05-b8ca-57f9fc58909d", "sighting--b37afd7e-cd22-42ba-ad55-24c0e31be786", "sighting--5c6e1dd9-1b58-4cdc-895c-f94e466a156d", "sighting--2a9e4fe1-4040-43ba-b5bd-2259a3eabf65", "sighting--76b817cf-4d68-4acd-b874-771270842208", "sighting--701da2ab-9b7a-447b-9016-223d1d67fc13", "sighting--9c959479-8721-4020-bd57-54268b3e8c65", "sighting--b98583d4-dbc0-4237-b2cc-d6455b705797", "sighting--db7aee5e-df64-4e92-8595-87b482ad4799", "sighting--bfd64ee6-8c1e-4df4-9e8d-f8c50d7c0aaf", "sighting--ba086101-8336-4c8a-b145-1ee7737adb14", "sighting--e48ebe74-1a71-44c4-8f04-32f91d679927", "sighting--1c2ba05c-93af-4af8-909a-adf006f753a8", "sighting--7f183578-f3c5-48b7-92f1-7badc74f0d44", "sighting--af7218c1-d600-4c1c-a28a-bffa28fbb5da", "sighting--7effc48a-0221-45cc-a695-9c18bbd69251", "sighting--828e10d0-6135-4555-b995-a7a1229df0cc", "sighting--56908e05-6d46-4839-abfc-5b4a834ec301", "sighting--0f151a94-867e-43d5-a45f-8d719604efce", "sighting--a0e3a073-0df1-4488-ade7-415fe8b293e1", "sighting--593b0254-8260-4c24-8e1b-1d04ebb2580b", "sighting--bd6c79e7-7880-4ca1-b25d-1de0e5a8d85e", "sighting--a053820d-b864-4995-96c4-61cc83faaf1f", "sighting--27ffe166-bb37-491b-b96f-578bbf432c61", "sighting--21dca0c8-fa7a-4045-9cc0-2eeb4a5cacc2", "sighting--a4880909-fc4d-41a0-93e4-e27dec443c52", "sighting--3392f35d-c078-43a5-8e1f-200e316f07cb", "sighting--f0435efa-aa5b-4040-8606-63b9fbe8e7a3", "sighting--4a1d7f04-197e-49f2-9afe-16d9e77141d7", "sighting--d3e82025-3dbf-4cb9-80a8-478459a1f74b", "sighting--adb4ea25-9bfe-4559-bfa9-5e90c4f73318", "sighting--26c5e0f3-3d81-41e5-9a66-f5801912d587", "sighting--7d059163-d088-47e6-8c0d-ae465c8c10d6", "sighting--65e42828-ea2b-4138-a1b1-d11b5faff151", "sighting--82efbe98-b1d6-42e4-8823-7c5ead6106b2", "sighting--38896e35-1fcf-4a08-a412-f57fc0abb593", "sighting--8143608d-ffce-4648-b0e6-c8f6d84d70b1", "sighting--0208b85b-3bcc-48ea-9999-d09fb6c59fe0", "sighting--b3ce39b2-cb0d-486f-8d06-3f2fa954ce74", "sighting--4c8c173a-7890-475d-b918-a6b01ad9839a", "sighting--1f091b52-8ac6-44ce-b64e-93435332de14", "sighting--f4356ae0-c46a-4e37-971c-39e8bf2e0423", "sighting--ed7027bf-e202-4620-b0cc-0df43a224e4f", "sighting--b326cc9c-525d-4108-914d-bd3033ae89ba", "sighting--63955fa8-4b37-459e-9488-7f82e3c49d86", "sighting--fd839540-05e1-44b1-acce-044223416ff3", "sighting--18ee56fd-010c-4788-93e0-a4e26603d38f", "sighting--ec0bbf92-f1a7-4f00-bbac-1bb40c059c0a", "sighting--157402e3-afbb-43ae-9177-030bfec41c50", "sighting--f44810e3-e7f0-485c-9916-3ef1f1cc245e", "sighting--b4800953-3c1c-4980-b304-d910f940ee2c", "sighting--a513c71f-0f01-4349-8c3b-c73e9b99ec5f", "sighting--42d219ef-5617-4134-aca2-e8fe1cdba59a", "sighting--125e9977-1970-4408-a61b-4774fcb4df27", "sighting--7beb88bf-6e40-401a-867e-ac9d6c3f7540", "sighting--c248306a-3317-40f2-8a1e-b307888bd603", "sighting--21c985af-aff7-4ff6-ac38-f87a204f0977", "sighting--bfa82026-8851-4440-a05c-fde7455e1f3f", "sighting--53069f1f-6a3a-4d05-8fd4-aca411e8b359", "sighting--44fc7965-4ddc-45a8-ae9e-895af57c9ddf", "sighting--cc240b9c-654f-4629-8a33-32d11b9965ca", "sighting--538999c4-d42b-4204-be27-7958b3ae9c97", "sighting--311f2d5b-c989-427b-9b0a-1ba09c26d9c3", "sighting--278019c5-76c4-402f-8448-d3d35feb94ad", "sighting--0c9fd46c-c15e-4fdc-bda9-4ace54b8863b", "sighting--66812f14-7a0f-4e49-b335-c1e549d8d8a6", "sighting--7fd84737-c8d0-43aa-b6b6-a41e0b061049", "sighting--883162db-f7a7-4401-b599-154dcd4d405e", "sighting--b794e675-401e-4a4b-beb6-8feac0bba221", "sighting--9e267adb-1011-48a3-b1e1-918e03e490e7", "sighting--db795a01-30e1-49f2-9a76-ac3bd74683b8", "sighting--ce0ad36e-f3ec-4161-add0-ac57696aedf2", "sighting--e4c453cd-7159-4ee8-85a0-570cd9c15fd9", "sighting--8e281780-a3c1-4907-b6e6-db0a7c576a33", "sighting--a11fcb63-d978-485c-a030-59a9eea3f7e0", "sighting--a6e2b22b-12bd-4229-8e8f-7f6d347cabcb", "sighting--8c3c3f0e-a224-490e-9941-a8d7ffbae00e", "sighting--0f0f18ce-62b6-4877-9bbe-77610a7b2b84", "sighting--695c51c4-766f-4c6f-b065-b980668ac0f9", "sighting--5ac8d332-7955-412b-b0a7-6e0d744d291a", "sighting--952422d4-bc11-491f-9bd6-10ab1371b163", "sighting--86926e31-9f01-49d5-b3e1-085eeea3cc92", "sighting--385165ff-2bf7-4b53-8609-0d30629ab269", "sighting--460779d2-a7fc-4dd4-bcc5-701fe678156e", "sighting--81169b4c-bc60-49ab-8105-98f3756bd7cc", "sighting--ef884de9-6fca-4962-812d-196a9e34bd55", "sighting--8da7e2f2-7cfc-45a0-88c1-754960d7c344", "sighting--02322752-8ddf-40a7-aceb-40e7205656e1", "sighting--afacb096-d682-47f4-a722-7a7fc83632b4", "sighting--e48f0b67-ab11-426b-8426-3cf2b095fc01", "sighting--d0644f8b-d1dc-4f3a-bcb8-0670016ed81e", "sighting--17aaa239-02fe-4281-84ba-03bb36aba6af", "sighting--ab14d3b5-0542-4127-b488-847d893010fe", "sighting--16cb2994-081e-4867-a677-2f9f7d7f9470", "sighting--2b273838-ed92-4d12-aad1-67f4f7ae2fca", "sighting--374e98ab-535e-437d-8917-69f2424ad887", "sighting--11e3fcff-e686-4c55-a9b0-0cbe21fcddde", "sighting--12e63854-66ba-48e5-a0d2-27a72f6dc743", "sighting--9106dc33-e8ee-4e18-b58a-1802bb2f2fc3", "sighting--7797d328-b3df-419d-89d0-6e22bd393b94", "sighting--7643f5c4-63d1-4dca-8e6b-f9016b15ef90", "sighting--01e5d776-8ba0-4015-9812-5a4071c48863", "sighting--bda828a1-175b-49f9-b0a8-a8f8a992c0ac", "sighting--c96d4f4a-362d-4cc1-b118-062924507fd6", "sighting--cd0ca7ec-7730-416b-a31b-f55229524802", "sighting--ab97db96-f36d-4111-a00d-cdabd20a692d", "sighting--eb3fc4f3-a810-4c38-907a-0cc8f91c64d2", "sighting--9dc8c0bb-d5f0-4f27-830d-8e58e498e2c6", "sighting--475ad878-231b-45e6-9d0e-06042566ace7", "sighting--3458c359-ec51-4441-a775-b87d2179e81d", "sighting--783133df-b932-4982-9e8b-4d3c3574d7b1", "sighting--b3314486-95e4-41f5-aa8c-cc6704f3be3c", "sighting--c1297440-1a53-4465-a948-5af25173de93", "sighting--8358013f-0c1a-4e2e-b763-c18405cad3f1", "sighting--880dd2fb-0911-4fc7-8d09-05573ac1cded", "sighting--862a8bfe-259c-4424-971a-8e0918b3ed8f", "sighting--cc294498-25a2-48fc-b122-e65d669a5feb", "sighting--e2339d99-2a35-4a52-b528-5fcfa6c90c36", "sighting--1a06ab8c-b8a0-4c33-a5b8-d56ea6bebcee", "sighting--94ab83a9-d6fb-45b3-ba3e-7861506852ee", "sighting--f9666494-17db-435f-be0f-89e709d1b306", "sighting--49473cc5-b3e8-4036-9d6a-18e9986367ae", "sighting--72f3a69e-195d-43a3-8f74-f1ae2defd4a4", "sighting--e70b0be2-168d-4180-acbc-d0151a243daa", "sighting--586ca7ba-d7ef-4c66-8d5c-d961fa3f0a73", "sighting--d990bf05-21a6-47e0-9190-45a9bc910b3f", "sighting--10552e95-6c8a-4308-8e8a-da9e2a87f460", "sighting--8d837187-2ecf-493c-8988-5ae35eb255ce", "sighting--da4f63cc-7cd7-49c2-af15-9bc07fe3e63a", "sighting--c802faf5-df83-492a-a674-4a63e68f9e08", "sighting--74549818-0a67-40e3-9812-486397f5a8fa", "sighting--02a08eca-8e84-4449-9828-8af209df2ac4", "sighting--ed77e7d2-cf7c-49be-8a12-7483076511b0", "sighting--bdb91d48-8f93-4c70-9893-82c180a70905", "sighting--78414c25-9f13-470a-9be6-5f6ad3ab42bb", "sighting--0eff6f9a-2ee0-42b7-8a36-b123abfddc08", "sighting--9b45f9c9-333b-44a6-afcf-c0ccfd3dda21", "sighting--9efc2cd0-cc7a-4b48-a2ef-bdd24562a7f1", "sighting--9ed8f2b0-7333-4cf0-8954-7c3c9986bc0d", "sighting--caed26da-ad80-4b2e-99d6-12a3b9034bc0", "sighting--f57d4c21-eaac-4363-b761-dc30b2a7bcd3", "sighting--cc89ad88-69a0-44a5-8c0e-250f7b32c9dc", "sighting--7174b500-f81c-4341-afd6-903757c4393b", "sighting--381ae175-9873-47b4-97be-3e294aadfb5e", "sighting--30a48851-98a3-4c75-93f8-8b75d6a13107", "sighting--8e66edde-7e13-4dc8-90e1-6ff0a159650f", "sighting--9ab636f3-d746-42e7-9b22-31eeeef1fa59", "sighting--976b3df7-ae7d-4982-8e7b-49364f9cd758", "sighting--dd7b8ff9-7acf-465b-925c-ec3bf071d4cf", "sighting--6aba6aa0-107d-4c13-8ebf-cc83c156d577", "sighting--0d21ff4f-6822-418b-ad6d-7c10ef41068c", "sighting--55636adc-a3ce-4444-baf1-e3fd93416786", "sighting--34089d3e-ce88-4102-a6c6-2f3e4ea9adf1", "sighting--99226020-ca90-40dd-bffe-50a3a09c8b5e", "sighting--952d7a0c-e94b-4ca5-8ef5-8cec26db6542", "sighting--97d24438-1b05-42f6-aa41-514290128503", "sighting--690af56d-61a5-4edb-a20a-76d1e5111b8f", "sighting--bb83d9d3-29ed-4225-9db7-bf75c26a53e2", "sighting--125e1ceb-0bc2-4f6f-b7c2-e58094094f6a", "sighting--df839244-121d-4ef6-8307-2acfeec10bb9", "sighting--c8f01866-0987-4f68-a704-b9e6b399473b", "sighting--3d33f286-90fc-4855-80d0-e6fe09594a61", "sighting--cfe0886b-a1c9-4fe6-81a4-daa62864475a", "sighting--b873c07d-e9af-483b-8bcb-107270cbbfbe", "sighting--f7077413-595e-4fba-bbe2-842eb65027c3", "sighting--a337cfe0-951a-4f51-a6ff-15e0720ef83b", "sighting--c62fe6ae-7fdc-45ef-a3ee-5fecedff9c2c", "sighting--87b0435e-2ee1-4551-a4df-c851081f3b59", "sighting--feee2786-d565-4f7c-9191-b8cb50d7463a", "sighting--75d6396a-0569-4aeb-9b39-4a05d5a071e0", "sighting--9d8e41d1-65ff-4f1a-b952-e76090ac4127", "sighting--b3bc8d5a-a36b-47f9-9759-6ce6257f20a9", "sighting--9537f69e-2543-43c5-82f8-f7f8febcf6a9", "sighting--408992fc-8737-486d-bdbf-f5e8018fbe0d", "sighting--8b6a83b7-2938-4a75-88d3-28da07ef541c", "sighting--cc34ef87-148a-4ddf-b0fd-e79981258d27", "sighting--0ea7c4d2-58da-427c-9e84-ec3b9dceefd6", "sighting--6e0a3aea-5cb8-493c-acf4-ea89c7c5b901", "sighting--23d227fb-ed42-4943-8758-2c74560f44f5", "sighting--7df83264-9e58-4e44-9377-351cdb091fa4", "sighting--ce5384ef-4d43-465c-8324-8e932c57cc44", "sighting--157e8986-1185-45d9-9b88-5c3743e2d798", "sighting--8e9f0c94-220e-4046-b6ca-e26deff5138f", "sighting--3dab328e-7d94-4710-a541-a83bf67ce815", "sighting--6f2444e2-031e-40f8-a2c1-733913b746fa", "sighting--eba0804c-cb08-4757-aea7-afcd407a6f7a", "sighting--7f7dd05f-4758-4a54-ae5f-b05051914475", "sighting--78cd2879-df86-4a05-ac8c-c0d5e799a3ce", "sighting--3d1930d5-5d0b-434a-ad0b-acaa156b645a", "sighting--36c03d40-7139-4c94-899c-4458a3bd908d", "sighting--54bef4b2-9c4e-4bc8-a64f-ae7b4a71cab4", "sighting--d51e7a3b-3790-4814-9147-3978fad9ecbb", "sighting--0b6146b0-d619-42d2-bac7-016b48640e31", "sighting--faa4fdda-8aa7-42dc-b7c2-2d3ac0da40a5", "sighting--c7405ec4-65f3-4646-92e5-08f57ede8384", "sighting--07f47b91-c0bb-43af-8496-f196890d0e95", "sighting--6a418507-3d3d-4ca0-9fb9-db322d442201", "sighting--6b3d60df-7f8e-4c04-8275-eec8ed0162f6", "sighting--45a3c02e-c391-4786-88a8-d15e2cd7153d", "sighting--fdfd2a79-c48a-4461-aa18-d115f73e9f81", "sighting--5b57469a-130f-47c6-ab78-433af2524409", "sighting--ee9a8843-df05-4e5f-af9c-d9dd893ed8e9", "sighting--8326de9a-6762-430f-a167-c1fb92e75ca4", "sighting--b42a8b10-a8d1-4fbd-bec1-18ce0d044056", "sighting--454a9761-01ac-4eb2-b663-47cf766f3439", "sighting--bd85718f-8760-43d0-8cc4-71d29f97c1ea", "sighting--f54ab0d7-31d9-492a-b20a-3b2b010543c5", "sighting--e8e5949f-d916-4794-8df0-1efd0dc2a48e", "sighting--d7826fa6-bd2e-4436-b346-3814b956637e", "sighting--38a663ad-2262-446f-a085-7b07ea6e827e", "sighting--02c033d5-3462-4be3-9af5-7047cd2b3ff3", "sighting--90c938fa-db81-47d6-a891-fd5e1d05811b", "sighting--c87c7ad1-4bb3-4bd4-a3a0-6948a6ff4873", "sighting--c43326fd-d473-4e7c-9635-b72c5f9568f3", "sighting--1c678ea9-1784-46e0-82bd-c6a2b3517269", "sighting--d5c8d82f-e933-4e63-b186-e413b80dd557", "sighting--491b0873-6e96-482e-bf6e-b3d952e1a0de", "sighting--cd79dd95-6619-461d-9fbc-3bac0d58638a", "sighting--96dd7274-9965-4a38-8265-942033c0f6a4", "sighting--02a0e872-ac23-4545-903a-46eb541e34fb", "sighting--1c5cfb32-35dc-4874-9729-3c5430cf3f2e", "sighting--5a8478d1-15d9-4d44-91ed-090f8ec2e02b", "sighting--c7539f08-96cf-4c41-a601-06ff0a6e8ae4", "sighting--801eb009-4709-4bf8-ae1d-2194db60169c", "sighting--8e7237f5-267c-4ff0-be03-57f6ed959ce0", "sighting--ea7155b3-40ba-41c3-865c-337e206a7b91", "sighting--e869cbdb-4f64-4c0c-8724-ac68e0ef89d1", "sighting--8dce7370-fe2b-4664-8ff8-22b44b233ea3", "sighting--edc36b6a-e455-4486-91d2-e0297e48d5f8", "sighting--e80423b2-8ec7-4705-a587-e7b23c6da5ad", "sighting--1e257c79-b014-46f9-80b6-5a9ee20201e4", "sighting--476e14e7-a049-4910-9e91-74ba59ba0c21", "sighting--3eeadb08-b5e9-4d33-b758-eebff4773d1c", "sighting--a1feffaa-1f96-4b7a-9941-3d8eae2e27dc", "sighting--4fec4288-b427-4bc1-8fc7-f72c45381739", "sighting--4b7323a1-faa4-4aca-85f1-9e1bae3ccf1e", "sighting--39b090de-9a49-4ec5-b29e-d4f983f2cb78", "sighting--09dfb40d-b107-40e4-882e-3e90c9420259", "sighting--e47d12bd-ff44-4b56-96fe-e568ae3e1127", "sighting--7aa149c4-1aeb-45c5-a1f7-7e8a5d672fda", "sighting--3fd60dd0-425e-466c-918a-744da12ce970", "sighting--61fd050d-3491-4c6d-886e-b196509e2193", "sighting--cd56a874-ced1-4bef-9234-946d178d7077", "sighting--4d87c1e6-a756-49d8-9042-7a4130af5080", "sighting--f4592d60-f686-4c98-833e-68163e079fbf", "sighting--8d5e933f-d634-4595-b1df-0169aadc4efd", "sighting--3e516745-f784-4b4e-8c9c-207b3d4d3db2", "sighting--61c54474-1cf8-4171-9d92-7f490a4c6655", "sighting--7fbc1437-909e-49af-a796-681992cdfe7d", "sighting--147c0b8b-cd2c-4fb3-87f0-65670c240021", "sighting--40a8ddf0-b80c-4bb0-becc-a41d9a432045", "sighting--c9ba5d8e-aac5-4fd1-bedd-18e41b506acf", "sighting--4c8aeefa-cd24-47f2-9dc2-e67b767834da", "sighting--5b085155-7b07-4998-8102-dca67ae7495d", "sighting--a768c4ab-a1db-4851-b97c-9255b2a086c0", "sighting--2985540d-0b11-4566-86c8-4b9944a5c16d", "sighting--91e8da0a-61aa-4ba7-8ecf-89a1e5440af5", "sighting--6546ef99-ce05-4b8f-b272-f8d75a22ccb9", "sighting--ca47dc0a-1198-4cac-b5c2-667a54654d39", "sighting--2392754c-0871-4468-8bea-980df35e9b88", "sighting--64a600c0-0bcf-4d97-821a-38599ff0b58e", "sighting--5ee60329-ae3e-4d84-ada8-ee65cfc05a40", "sighting--7d622908-a743-401c-a607-6eac70b827e1", "sighting--49991d5f-c97c-44ce-ad76-1b71fee3c2c2", "sighting--3951afaf-b15d-4689-8835-9c7e2b375d27", "sighting--c67073c4-d999-4d01-8f6c-a3525540560f", "sighting--8b201bb4-4266-4ccd-b800-4a59177b9e1a", "sighting--0f4f6d82-7cf6-405f-980d-f09b2d97f0d0", "sighting--81a02e71-9ce6-40f4-a8e7-9b582f001205", "sighting--ac315573-db74-4505-9b0d-101ec965d740", "sighting--3e7e94ad-103f-4e43-8eb0-88af18ca091e", "sighting--688f2f84-97e0-44a9-9cef-67c07c4ba9ce", "sighting--4e14126d-e3bb-4d03-ab38-1fae8542d6d9", "sighting--04427525-4ee0-4ee7-bf01-712c6d88fd5f", "sighting--7d7eee55-0742-420a-95f7-12a5d4818382", "sighting--6ad2eae4-ab7a-48a8-9625-f55f7feda2ae", "sighting--f875f98c-e4de-4390-96a1-743e304280ca", "sighting--886dec6c-ab9b-4e22-8c1b-2fd1b1bbb6ed", "sighting--613a34da-a639-4774-934f-cfba07f7596f", "sighting--d7c5b370-1ae4-4dca-b2d6-c7be7b80faa6", "sighting--6f423069-74d1-48a2-942e-af91269e1a29", "sighting--fe517c63-7d08-4aa2-b246-bf366e2aea98", "sighting--3bc846d7-9f98-4d70-8158-0fa57e15321b", "sighting--cbe70675-0ae4-4000-9c74-e5ea9e34e92f", "sighting--3406d4d2-b7ca-4d26-bddf-6a6598144fd0", "sighting--f7ad26a5-7cb4-428c-95b8-7e10c140658c", "sighting--963d835c-2917-4f68-b5eb-e8be5c39f7ac", "sighting--c714a3f6-e04e-48ab-8fc7-c08d4e74b538", "sighting--17de7bfb-c9ee-4be4-9d23-dcd73347d423", "sighting--66f82b21-9f7e-402c-83d2-4bb1510cf334", "sighting--95b371f0-b85c-4f67-b83f-7654f276f66c", "sighting--932c59da-896b-4fd5-8849-bed5e1b7399c", "sighting--eae14e59-b0e7-47bc-b468-b9e555d84e7d", "sighting--3e8b5660-c357-44ac-bd2f-cfb106b0887a", "sighting--f55b8890-a4ff-4984-bb30-e096d15bb9be", "sighting--526a7f86-7bf3-4b2d-a89d-197793b5707f", "sighting--9bc0c3e4-90d1-44d3-abb8-2fabd4979e25", "sighting--f55034c2-0b28-4997-9402-188debbca369", "sighting--905ce600-6d67-40f8-ae87-09d28bcc162b", "sighting--735177f2-dd7f-481b-93f1-ba4864c6e46f", "sighting--9e1fd979-a776-43be-a789-ab79132d8243", "sighting--3d789d8f-9ef7-4975-8e5c-ca1667186d42", "sighting--b441c78f-54a9-4593-af2a-ed545720fc85", "sighting--c2cbe160-e52c-4a58-81d9-e9e220cbbe7f", "sighting--513991a2-4066-4838-a542-d9c877563534", "sighting--0cca6bb7-854d-485b-8901-070ca5c74f84", "sighting--458795c2-ec4d-482b-8d78-f0b07638a9ed", "sighting--a387532b-6d5a-42cf-a06c-51878d7e0595", "sighting--2f4a801e-df06-43b5-b312-172d4a770259", "sighting--6fa65c09-7583-4b4b-8231-2c8680fe0e94", "sighting--8afff8d9-86b0-49f3-b564-f8da7503b959", "sighting--c937f34a-0607-446f-9449-be98e05a74c3", "sighting--35059aeb-93c5-4d92-966c-a0f9107a6d2a", "sighting--43901b1a-878d-41fb-b589-85705da404e2", "sighting--1aa9af8a-d1ec-4936-832b-22c28b6a8ab7", "sighting--6c84720e-760a-417d-a21f-f8f86b3fdbe8", "sighting--6d169577-5735-4406-9233-a4bd97af18b4", "sighting--69cbc267-7f0c-4b1f-90b9-092832936b6b", "sighting--815bcbf2-0bcb-4a17-9107-94f87a146158", "sighting--0e08d7df-a131-47e3-98a4-2e6e10b274bd", "sighting--98d7baaa-df80-49ec-8caa-a2b6d6e45a48", "sighting--9301ecfd-5218-4869-a176-16f212115d95", "sighting--64db0450-9d15-45be-a4b2-cc393164f574", "sighting--a2f61f72-895c-426a-b553-1be5e05eb04a", "sighting--2baf4f46-91bc-4150-aa4c-9e1a7867fd2c", "sighting--ac4ddb25-2d5e-43ce-a477-32a0b7826763", "sighting--a398d122-73e6-4ed5-8148-cd2f7aab0290", "sighting--807b22cf-2c9f-44bd-ae30-1d41591e62b0", "sighting--3c747856-f46c-4089-a74c-5f9e896444a4", "sighting--dec10291-73b2-4a1c-b91d-15c83461ae3a", "sighting--1204c118-9353-4884-8734-e25d51a109c3", "sighting--ba5d86a7-15c4-4e75-9c90-102e97bef941", "sighting--417ea517-8886-4d76-894c-0af1dc2d2b49", "sighting--41b96ab5-e465-49db-a7fd-dda4852866f8", "sighting--56166fa7-fc29-4418-b2a0-6719fb9dbca2", "sighting--10cad02f-17f7-4626-a9b4-fe8ac1523a21", "sighting--780ed8d7-34f8-4431-be8e-7c50be63e31c", "sighting--623e2e63-de38-450a-a7d7-094907e7c53e", "sighting--4b5ee045-d185-4d11-8cc5-782edddbb7f0", "sighting--d3a3c6bc-0a7d-4145-931c-f3aa89da636e", "sighting--ab1b732c-3816-48e3-95d9-eb6f9b3eb4d4", "sighting--7a4e6b27-96a8-42e8-a6c3-a589c8e5a97d", "sighting--60708bbc-e7f6-4cc4-a685-a452f2542c36", "sighting--907722d4-d704-44b2-ba4e-93b3b109c562", "sighting--c74526c0-acf7-4c4b-87b1-bd6989222409", "sighting--eb46aa28-0876-4e16-9681-3d516b92aacc", "sighting--85543b1f-e42f-4489-ac8f-f6fa22979234", "sighting--f750516c-3ab6-4d66-a464-e61fa2e396cc", "sighting--7059af01-77af-4072-8666-1964ceecd141", "sighting--67482908-5f27-449a-af67-b322b7078e81", "sighting--2c9a8071-d984-46be-b71b-fa07197c88f1", "sighting--3af15662-fd23-4847-aa42-df7ff893c031", "sighting--2c70187a-8ac5-4155-9d98-ac4e544aa075", "sighting--cf70e502-f23d-43d6-8aa5-c3ac397edbee", "sighting--895d28f4-1a90-4280-94ab-c007082e824f", "sighting--fed912f3-6b88-4f33-b19f-05248f918e12", "sighting--eaaa5624-d091-4688-85ca-861873b1d2ce", "sighting--8be17b61-b0ed-41db-9616-76ee347397a3", "sighting--764b4eea-fe09-4cd5-82ac-14ceb317b045", "sighting--38b27d36-5f34-4baa-b584-2a0d059f8eb3", "sighting--65c474f4-fd4a-4142-8371-834709f31baa", "sighting--82a5848f-e2ef-46a7-be2e-31b7247b6695", "sighting--a7e2ef0b-951c-4f9c-ae87-3fe92e39b090", "sighting--9b21692c-92e6-411d-8b57-6985f945f904", "sighting--bccf076f-2f04-4f08-bd02-606a300e5316", "sighting--ab0d1da2-c0d0-4890-a4e2-9ead292e45c3", "sighting--b09950ec-fba5-45f0-b567-8225d1e19e64", "sighting--a5d9b652-1d51-4697-ab96-a68be70209f4", "sighting--087bd4b9-5a36-4fb0-aed2-ab38ae47e779", "sighting--72976e4f-d56b-4ec3-84fb-7a835ec37369", "sighting--18c7986b-dd55-43ab-94db-a041c6385524", "sighting--830acee1-aa94-4dc5-8bad-db276e7e075c", "sighting--d8b91c9f-2867-486e-aebb-a324346e8e9c", "sighting--3c5f0fe3-5751-4859-96e3-6f00d2aadd6f", "sighting--02874b8d-6f3e-4fa3-9ecb-a551f02703ce", "sighting--e2387701-4d41-4ab4-bc5d-966bccdef4b8", "sighting--783e4658-5bc9-42a5-a05d-b429d64e56a0", "sighting--94264b4b-d702-46c1-8fdc-e4df58a4b222", "sighting--0270ea2a-4a68-458b-a0ff-a669769b404d", "sighting--adfa4c3f-1162-4592-b543-529f97e9eaee", "sighting--c9417c2b-a680-4d03-a1c4-b4f1f07122f4", "sighting--e0fe4fb5-9e2d-4de8-b37a-d19b4c6d2cf6", "sighting--037de7b8-559b-47dc-a739-7e2abe4993cb", "sighting--e348e992-e37d-4932-a873-5981946ee851", "sighting--f196875d-82f6-4c4f-b7d3-aed675aa5474", "sighting--1acdf22b-7db7-4886-b44d-4848fc0b5359", "sighting--8ac70ee1-a3ea-46cb-bb36-ca1be379ec5b", "sighting--137f6555-0946-440f-9920-c59300d748b8", "sighting--aea0b4c8-e162-40c3-8220-ed91c7d71b7b", "sighting--ec2a8630-2a50-4e04-a1e7-9dbfdb1f1006", "sighting--513f1cf5-e588-48bc-b232-9563738b490a", "sighting--14bdde1a-434d-40bd-9282-8aca35ca0e50", "sighting--9b4c356a-8ce9-457b-8b4c-231309be099e", "sighting--3b59c7f5-2657-4443-9cb8-87ff6d583e2f", "sighting--391dbac4-7af6-4a3c-9067-a50f4b1304dd", "sighting--6fdb58e6-f6b6-4442-a04e-97c3a8008bb3", "sighting--f1d3f9ed-c9ed-4764-b121-0d2cb839124b", "sighting--c568c0a8-fa2f-4c7d-a625-db3ae0d519d0", "sighting--34d2c0e6-3d08-49f3-90e0-525e3f969e6e", "sighting--f32c7115-02b5-4aa0-a8be-f9cf603efca5", "sighting--41aca4b6-311f-4efe-a267-e84101d736cd", "sighting--8e26cfce-4ce0-42ba-b85e-8dbee96140f3", "sighting--72f3bb6c-7263-48a9-b57a-e5d9fac995ee", "sighting--a2294774-8e2e-48ef-a0f8-531e476a3c5d", "sighting--3eb9eb47-83ca-424d-b866-194d9f2ef5ec", "sighting--29e43cc6-eac6-416a-bd31-460b29eaab30", "sighting--5af1c4c8-b53a-4a41-8dc9-9509fbcf495d", "sighting--d0b8c782-a6ab-4e7f-bafb-ff73e0f33062", "sighting--5ea071c9-4ba0-46a2-bd42-35854d8c986b", "sighting--df023846-f6f8-4f10-a4b9-359b23b01c76", "sighting--a7723372-3d09-4496-bd99-f88013d97746", "sighting--4d588f9b-f8f8-41a7-afe7-3cb816363996", "sighting--1cc5e75e-ac10-4b01-bd01-0dee5f2cdb03", "sighting--4a69cbc8-30c2-49ff-b86d-fc5970027dd7", "sighting--2bd9ca7a-056f-46d4-8ea5-89832ea9a0a9", "sighting--910a6cab-61c9-4679-889c-cbbd37d014a5", "sighting--dd10429c-3da0-4614-a357-0eab5a1d5818", "sighting--b266767f-b262-4c2c-aaed-bbdcadb5302f", "sighting--90dd7ac2-f611-43d7-aff0-0bc681125f93", "sighting--596aeb20-ea64-4b82-80cd-1bf676ec4e22", "sighting--68326296-b0ff-4880-a5ba-fa1b01e90e33", "sighting--1c1ff194-2a4f-4b62-b53d-70410d1504aa", "sighting--9b23bc5c-e82b-4ce1-89e2-4f41ac544aa2", "sighting--2cd9ffe3-e23f-4642-a71b-aaee09c3a2b8", "sighting--3dc25c31-80f2-477f-a0e8-2e594632d5ca", "sighting--61afb9d7-07c4-4e47-aab3-3b415e41369b", "sighting--b432f90b-1d85-496d-8c9e-bbb9730f392f", "sighting--e4651cdc-3101-44f1-8010-59d5f4a69752", "sighting--86fce0ec-d93b-4a98-bded-c9b97cf2c9ec", "sighting--5a3b5e4c-3f1b-40b5-979d-24c8eadbdd2c", "sighting--6c94f006-d041-4cf7-82a4-69811f820ae5", "sighting--ff49b313-45fd-43f7-89ac-b92d6d7d7e37", "sighting--1203db23-ecc1-48c7-b74e-41a8f84f6eab", "sighting--bdd5e8e9-9432-443e-9507-3ddfdc9c24a6", "sighting--d181e688-a194-4831-acb3-61a7bc4bec49", "sighting--b424e755-3e65-494a-a3f4-187913410d96", "sighting--106e3210-753a-48c9-abf3-f6c3ed9701fc", "sighting--b408fd27-a737-467c-b12e-76a030bfceeb", "sighting--458ccbe5-d284-4c05-8795-3f4ae55f88e9", "sighting--84a1346d-efaf-4027-a8ec-804e2bf86a6e", "sighting--739e1a19-6ce1-46cb-ae80-23992c6032b7", "sighting--9ca1784b-9eac-4830-b42e-d377c6feb207", "sighting--db77cc54-36cb-4304-8c29-525286b733d1", "sighting--f4e8b1ec-6e68-414e-a1d5-176e6c37a1e3", "sighting--4ab7ace6-5689-4130-8ef8-d5662519fc89", "sighting--2bb18e31-a975-4746-8c1a-29aa07278f3d", "sighting--398a6e71-6723-47ff-b3fe-0517f87a82f1", "sighting--e601ea93-1b99-4eff-b34a-be5e01f1a2a7", "sighting--d240b620-05bf-4d9f-ac6b-6e149951e66c", "sighting--23acc022-1f51-4252-a57e-f4203bd8cfef", "sighting--6193cf96-5142-4c3c-a7f4-b153c840c962", "sighting--4e908577-a8bd-4c2a-a550-36a36169b108", "sighting--29482fec-93dd-4870-9c23-c1500b66d3d5", "sighting--ff2124e2-adfb-4ec8-9035-d3b4e34429a8", "sighting--6bec08f9-2d4c-428b-bf3a-efe8d36f5609", "sighting--0a5761d6-d9b1-411a-aee2-be639a1a3c8d", "sighting--0aaf2468-a765-4257-abb5-34d6532d8788", "sighting--76321c88-c61d-4742-9863-662bdd13f61a", "sighting--72abdb7c-1987-4945-8069-a30181da0fea", "sighting--7d181b97-1716-4e3d-be73-f557f150aaad", "sighting--21be4e7b-f979-496f-9d8c-e485542bb576", "sighting--35f3bbf4-021d-4435-881b-d252687bb42f", "sighting--ebfa16ff-ebb5-46d3-b675-ee539c114e8a", "sighting--eb3e2aa2-e6e0-49bd-81db-0196d4ee1a0b", "sighting--a8fb909c-d0d1-4e34-bd5c-0d7deac77832", "sighting--e65ccee0-e144-4b62-9d46-251f162a435c", "sighting--846715f2-3577-4a8a-8e71-0ec138f12ab8", "sighting--559381b5-45e4-4c10-8cde-cea4643f3bb3", "sighting--0fe23706-6469-40c2-aef5-ef0c5ac419b1", "sighting--f2aff269-fda1-4a4e-90c0-717d70279515", "sighting--0a5868c3-0a93-4f8c-8c50-9bf94968bdd4", "sighting--652d9ebb-618e-455d-a265-6b76652fac18", "sighting--47a8593e-344a-4a37-8ffa-adefb7738980", "sighting--ba135f35-65c2-4007-99ad-8ac1857f1434", "sighting--e6237edd-3929-4eef-a22e-093902af2664", "sighting--1defe1b0-a630-4bcd-92ea-bc09d32803af", "sighting--f6482c15-e419-417b-95b2-444390e5591d", "sighting--0c36caf0-63ac-402c-b5df-9095be45a3bb", "sighting--e6061275-0e0c-4814-81c3-d25f9c8993ae", "sighting--2f69c72d-b85d-44f8-b844-670202494825", "sighting--b202f1e4-b2d2-4f00-a5f7-313dcff286c7", "sighting--8643f9c1-e6f9-4389-97e0-3edf7f0885cf", "sighting--cd12e0d4-a19d-40d6-9d95-081f78c82ace", "sighting--6effb2c8-28be-45e9-82ca-17f2b5317610", "sighting--e33435e9-9cbe-487d-a4ed-5df70ac87a13", "sighting--0b5d5537-9593-40c6-a1a1-b04f28f7a8cd", "sighting--2a9037d8-d6ae-4931-8292-ffa3f85276ea", "sighting--a57a5995-71d2-4d76-aaf4-c43560b2b352", "sighting--e0a81369-e110-46a5-93c2-8c276f085232", "sighting--97e80f1f-6fd3-4ab6-936e-f0078dc78af1", "sighting--fa5f2b56-f976-47de-ac59-a48d05005807", "sighting--891730c5-d539-4daf-b195-169918877dcc", "sighting--4327ec8a-9450-4369-8dc3-1c76fb5d74de", "sighting--9ff86147-471c-47ac-af38-f09a39a36994", "sighting--17c86a0f-427b-4d59-9a6c-1c169e0524ae", "sighting--63eb7f13-18f7-4201-86d4-1b30c6792a45", "sighting--6a1af2bd-6084-41e9-b423-04301cae54af", "sighting--a68318e1-6860-473e-bc82-f1d297a7ca31", "sighting--b3a39190-8015-4ca9-9147-90206d4dcf88", "sighting--415d9839-6840-4448-808c-021a3fc36f9c", "sighting--d09bb561-53b3-47ea-9038-e795c8765b6c", "sighting--ea4d64e5-6e5f-4525-95d8-0eacb7c7edc3", "sighting--a5b72c51-a84e-4c35-ab23-0deba69450f6", "sighting--681880c6-963c-401f-afeb-d0d755af71ee", "sighting--8c01b4ce-84d9-4849-b991-1d452dc49fa5", "sighting--c32afa3c-c429-4917-82fa-32426de41d0c", "sighting--db472f35-e912-4860-9bad-6f4e17df515e", "sighting--4fdc1422-f725-418b-abd5-7e0fc851c75b", "sighting--df5944ce-4371-4181-8535-0a7b5afeb2bf", "sighting--c8f587b0-6da3-4e97-84a3-ef0c20a55843", "sighting--678654e7-8f2f-4027-a950-26b167b6ba85", "sighting--583e8db8-5c0b-4b93-a009-bfe80699163b", "sighting--a07ad97b-c6f5-487b-b654-baf2e8aa242f", "sighting--ad454bb4-e88d-4860-95dd-a4d740c0fdb0", "sighting--57a3a59d-8a1f-4d34-90f8-edd129f0542d", "sighting--cf24a85e-e3e3-401f-8807-163a9934dce6", "sighting--5d468da3-eb78-4066-bda4-dd343a6be265", "sighting--0cf1cbfb-eb41-4b4e-bb23-36e541ead53c", "sighting--f253f085-cc16-490e-808a-981359fe9cde", "sighting--eaebca74-6fb9-47ed-b4e9-7570dc663374", "sighting--0f2153aa-543f-4cd4-a6df-119557a5c9f6", "sighting--c199d6f9-b151-48ef-b014-f7439e7dc6ad", "sighting--be05eebf-e67f-411a-93c1-f6f0fe508053", "sighting--84d36924-1b78-4693-b69a-8b87e0cf34b1", "sighting--7e1e8ada-0b91-4dd0-9449-815c0b0d1669", "sighting--f08b2e14-6489-456d-92e2-2fe78399fd1f", "sighting--d020e7eb-9b56-4d02-829f-81b6b193b4f9", "sighting--46a0a4e2-5546-4406-9f6d-42fbc8a8f596", "sighting--67ae7a23-5cd4-4e1c-8c3d-c28e89a4429a", "sighting--5d7670d7-4ecb-4ecc-9d41-23b1071def4c", "sighting--dedf4482-2881-4d81-ab7f-6570e8b0cd1c", "sighting--edc9b069-f887-46bd-91e9-d771f5ac970c", "sighting--ddcc5f38-d224-468c-946f-7c88991db3ba", "sighting--0f0deeda-843b-4eb3-b055-58e540ac0ad4", "sighting--13f6eb3d-55d8-4c16-98a6-aceb805c0781", "sighting--7de28db4-6a32-4212-b080-2bf3e315f927", "sighting--a3bc1147-7b74-4441-b555-f757cc32df1c", "sighting--008bab58-fa1b-4b46-b91f-0df394b17a96", "sighting--b3532ac5-99d3-43e1-a676-06309b92b1a0", "sighting--583cf6f6-15ba-44b1-9c11-1ecd154c4fdc", "sighting--22186030-a70f-466b-8711-6255bad26044", "sighting--e2b9b556-b434-4664-a4e7-777b3f675b77", "sighting--99ae5f50-6769-45bd-9de6-4eaed1246930", "sighting--35e6ce6f-aacb-459e-9aec-e5cf575b4db3", "sighting--17afb99e-8511-4589-936e-b3524ca4a414", "sighting--bb1cc9aa-b91d-4330-af8e-24cdab0e12a9", "sighting--9efb67e1-df2d-4d4a-b467-5a0edf77c042", "sighting--0b0a2d84-c5ac-4ae2-b784-8d0cafe99719", "sighting--c196c998-e4fe-4789-a2b2-1f090532e3af", "sighting--063e76ab-7fb9-452f-88b5-fa1377891f55", "sighting--b2a94607-6810-4f9e-a82b-3ae614c664ee", "sighting--785fb9e5-df7a-45d5-a42b-ffa75fd4b556", "sighting--2d2931d4-4564-4ff9-b430-6dc8ece92340", "sighting--496472ea-a506-4880-804a-e417c8a35eee", "sighting--03620a64-f317-4cc7-8f99-d0dc37d04e8d", "sighting--53990ff6-1643-45ca-82d8-3a0741f48026", "sighting--f4acd223-3292-4604-a069-8afd59465686", "sighting--134d037e-416b-4ecb-8150-f0bd8b991c8a", "sighting--002cb5e5-5b9c-4429-b9de-b5dd8589fd56", "sighting--350c9616-8e96-41dd-8946-2823b16f7094", "sighting--235f5d6b-83c1-43ef-aacc-935885725c76", "sighting--f22cc259-4b3b-4ba5-b7d6-50f732d823f5", "sighting--ea057d3d-5f31-49cc-803e-a40bf0a09678", "sighting--b7cd9f4c-6216-46b6-bb1f-0ad348b57042", "sighting--84aec2d9-2a7c-4385-9b49-ed84d30b0095", "sighting--518e2f5e-7e00-40ce-9785-333b154c081c", "sighting--351b87f0-06d7-4235-97eb-e00b60be5e48", "sighting--c657dcee-6574-482f-9cf0-33abc6130a4c", "sighting--3a400cd7-48fa-416f-8933-8de0e2807740", "sighting--bbe27f60-fe5e-49c9-839d-728b2f38cc4f", "sighting--72c7d526-e124-4347-8ba9-410870a2c19e", "sighting--ef5c658d-a3ac-49c1-82d5-36396e740804", "sighting--15e0107a-ed0f-424f-86f6-56b097f20d97", "sighting--b2299b39-a9c4-46d3-8926-a577da685402", "sighting--e12285c8-0efc-42d9-a65f-a7de6206afd1", "sighting--d128a13d-1d9a-4e52-b218-831f2fa60cbd", "sighting--4dd0c120-8535-433f-8ebf-600dbc4d6b38", "sighting--e7da740f-bc40-489c-bc8b-44fc39ad7688", "sighting--0ecf8c3d-cc30-415a-ad04-b2b585b21aae", "sighting--41f65041-9889-4d27-8d3a-75ca288bed9a", "sighting--b14aa3fe-f3b1-4db7-88ba-2bb5dec954e8", "sighting--6d75ffc0-2c74-4f0e-98d3-478f41bbf317", "sighting--9e5ae9ed-95f8-4b5e-8182-82931bc46f3d", "sighting--7f623182-514e-4f6d-86d4-fb659fdf4f8f", "sighting--7eccf42a-691a-488a-9721-0a76bf2122a7", "sighting--03e4bbac-7725-42ba-9882-cdde23dcfcde", "sighting--3f6ceeac-4659-4407-b46b-14bb13cc6641", "sighting--2526c448-7cae-42fd-b893-b4aac12d4fa1", "sighting--7dab2c2b-f1bd-4de8-87dc-13772de270cf", "sighting--32351916-edfc-4510-875b-105064b07d17", "sighting--359eac8d-3cfc-42c4-85a8-9db5b9bc297c", "sighting--9cb615f9-89d2-4d17-9cf6-ab809c758321", "sighting--4f65aaf3-0ab5-4aaf-9c35-4c1f6da2ef7b", "sighting--457ed920-67a9-4563-99ab-8513b9abbb10", "sighting--a97dc75b-a8aa-4593-b6a5-14c73781f3e8", "sighting--3994d253-f2fc-46c4-8c7e-3625a6d0a99b", "sighting--040c10ab-d1f4-4262-8f09-08f1b46129dc", "sighting--5310d6db-1fd7-475f-a45b-dd6de5038091", "sighting--c4156f24-52fe-4089-993e-c5aa401124c1", "sighting--b4c504ef-7240-4b85-854e-927684982e46", "sighting--489c46a4-02a3-487d-90f0-215a7bdabe8d", "sighting--1fc05ef5-fd6c-467c-8a62-3fb931fa614a", "sighting--b3b2aea6-cef8-46eb-85eb-d73497d8bcee", "sighting--6219bc03-a911-4807-ac55-60ea5a66b184", "sighting--7d4a52ac-61ff-4bc2-aba0-d921e8175ee8", "sighting--f489c9f4-042f-4c10-800b-112761f73f83", "sighting--e6579efa-18da-4e03-aa3a-1939fe16aaa6", "sighting--3adc106c-7221-4fe5-a2a0-c9e2840eddf1", "sighting--0925b08c-4d96-4619-ade7-c85569f4c451", "sighting--3b4932d7-8706-4d1f-9f18-eb0e3aca2ef9", "sighting--c680692e-157d-4db3-8d13-23022c7bfb4d", "sighting--e81d8906-ba60-4dd3-b7d0-f2d9eee4a85f", "sighting--f7559538-4d0b-46b8-aa8b-35046ec9a300", "sighting--c72885b8-4ffd-48aa-871c-775eaee1edd4", "sighting--fb554d92-73f6-48a3-adf5-68f6e0d92bc2", "sighting--b137c0c8-08ca-4c1c-a58a-f6fa848233d4", "sighting--aa41bd6d-d564-4f3e-8377-13162ccf44db", "sighting--3ed4691e-014b-44ed-bc5a-3ac48a47ba77", "sighting--efa97b2b-92cc-4e96-b85a-11fc6175eee8", "sighting--3970d805-32e9-425d-90e8-0afa85d65c37", "sighting--e2ed46ce-6d39-436d-8d10-d7ff911b2fce", "sighting--b05e9dd0-7fb8-4a99-914e-3c0fcbfa6233", "sighting--958fd966-5acb-416d-a6ba-2afb928b37bd", "sighting--83f5ede2-d201-457b-89c0-648d19722492", "sighting--b3dedf0d-8367-4a0f-a3fd-3f94480a1eb9", "sighting--59484429-7be7-4709-afcc-9f7e8a1df286", "sighting--571da4ee-2a5d-4246-a221-6bf7cd3b11a1", "sighting--5f935b61-705d-45a2-aaa4-b583c101533c", "sighting--720c838e-86d8-40f7-8822-e56fef9d5368", "sighting--60e34db7-5047-4d60-9646-dbff78bd1fac", "sighting--eff94332-f095-4d1f-b398-5be398f3a269", "sighting--f294ddda-9c07-40b6-a775-25e68ee8316e", "sighting--1de47518-d50b-4102-b8f9-db704e143961", "sighting--7d8e1d80-a84f-4fa4-8b97-c7d933f42bb3", "sighting--6186b2f6-11a9-491d-90ce-302c1e1ca6c2", "sighting--3244f209-5903-478d-8210-af7e9650d6ab", "sighting--9f2294b2-68ea-4205-8fb3-a00517d4a824", "sighting--3951846d-d756-4b2a-a1bd-bd3c17ed2230", "sighting--416a6a9c-74eb-4f58-b533-84e0f93bc390", "sighting--e32bcc72-a0de-47c6-a10c-b5ad1b83048d", "sighting--65444519-0d2d-43f3-8646-68419d73e875", "sighting--f2d9d7d7-0e41-4823-9743-8af516f6ec4c", "sighting--ebf20a46-c73c-4f2f-8118-28aaa5270080", "sighting--75203cf0-f0a0-4303-a013-6bb5848adf20", "sighting--e7935e88-c249-4e23-877d-c7b40e7cc134", "sighting--2a08646f-1a5e-40df-9c05-779cc26b8181", "sighting--ea556f62-2df8-4248-860f-cb961fccea49", "sighting--59b7229e-f6c4-46d1-a351-caec9b299cda", "sighting--fc8ede1e-993d-415e-9ff9-f65c8e1b1723", "sighting--6548b599-0ac9-48d1-a982-a34abcaef2ed", "sighting--c693594e-4eec-4add-82f0-711f996addd0", "sighting--9ab9732d-ce98-48d0-b49d-88ad3cf33b36", "sighting--4e0ce70b-50df-48cf-8c61-c0959134eff9", "sighting--ae2528db-b1b8-449d-a096-d202506655c0", "sighting--d66e3403-6a90-4819-925e-87e692366527", "sighting--22d26d2f-c8bc-4d1b-b050-30c2f6926bdb", "sighting--e5ce988f-8121-47b9-aaeb-e5db1dcd585c", "sighting--0b0c0c03-daf3-42eb-8b89-922bd541cc48", "sighting--633abbe5-47a1-42e0-bd8b-a27697c509bb", "sighting--4244932c-ff16-4740-b37d-696788a542e4", "sighting--fb55eaf3-bb9f-4da2-9878-a53bcf45840c", "sighting--bc25fcc2-29a9-4b3d-908a-12807e9174c4", "sighting--66774977-e88c-44e5-b4f0-ac85afcb5222", "sighting--6fc1b652-c9f7-4934-be0e-f1f3193308bf", "sighting--33b88d0c-1883-41c1-8339-49b5ca25ec30", "sighting--13bd3d3d-047f-4ef6-bb37-f6eadce4db7f", "sighting--e63e6e8d-38e7-4e7d-9bc1-cc97976666d8", "sighting--6118f9c6-600e-41dc-9c02-897b9c4e6016", "sighting--e4556631-27bf-4161-bc6d-d11ab0bc1a0b", "sighting--6c82996b-61c5-4681-9114-990095e73e45", "sighting--2e322acc-155c-4bea-a007-0fe6713e5bc4", "sighting--2fa3d7c8-9422-4bd7-9ca8-6a6135ef9185", "sighting--179a821c-4cb7-4910-be78-1c46729779b2", "sighting--95ca80d4-7d16-4aae-be74-66e29aee7f0d", "sighting--d54d2a82-0264-470d-abcd-2cf91950a510", "sighting--e441e144-5477-435d-b999-3ad8b26f5318", "sighting--37d5e1e0-4ff7-4291-ae9c-f704f6a18fba", "sighting--ef994308-ebb4-4646-8afa-446bf527b5d5", "sighting--32335074-ffd7-45f1-93d0-8fac8cc5627d", "sighting--d5db3066-4834-4e6d-ac75-1440ee96a674", "sighting--154b1278-ff1f-42f9-beeb-338182d06d39", "sighting--ca48ba7d-0929-45cb-a816-243a9e78ff5b", "sighting--a89893c4-5542-4f95-85c1-5ceffc895d4b", "sighting--9e402180-bc81-4cdb-b5b6-36a55fc7eb32", "sighting--5e153f31-5847-4d0a-9471-8e6b76b40be3", "sighting--1aec37be-8f37-4f84-b850-548a80fe8922", "sighting--64ec2a5b-713c-4ce3-9999-c85f150f9aa8", "sighting--d0513091-20c0-44e7-acf1-668a9c1ca369", "sighting--38c3dd8c-a724-423c-8951-6b75e007f3f4", "sighting--9b832e19-cc11-411b-b494-fba8b755088e", "sighting--2290f3a9-0d8e-4372-9f35-8cae34f9ca31", "sighting--90e6cbc0-b757-4369-b025-ee6f25b38bde", "sighting--cc4f41fc-476b-444a-99f3-483046d325dd", "sighting--432ec6e6-91ac-44db-b15b-c31ca3103418", "sighting--5f936241-572c-44fa-a0a8-61b912d721a7", "sighting--69fca83f-8604-4c3d-8b14-8ac199f4bc56", "sighting--a30d5eb9-b4fb-4683-ad81-ae6a0f4b49c0", "sighting--a27999b1-c7d4-4905-a18c-6b2988601ff5", "sighting--e10a757d-ac81-4382-88d1-6b6333d90048", "sighting--02822b9d-17ba-4074-b2fc-844ff929273b", "sighting--8a2ed4cd-a897-481a-b434-8593e90c078f", "sighting--47485c53-87ea-4c9c-86e3-75a170e0c7e1", "sighting--537a45ef-dc7f-40ef-a73f-8c11e29eea80", "sighting--047eb7c5-bc71-4fe7-ac0d-c7a0995aaaa4", "sighting--1b91451e-1cf4-4a43-84a8-95aac108437c", "sighting--246c868b-d556-43f6-85d9-a3f6110afbf9", "sighting--8497bd44-beaa-49b2-8d13-c737691a725c", "sighting--44fc3d7b-edfb-40c3-a9f6-3fb42b103701", "sighting--084558be-c395-4f22-9f80-7f2b41f9886a", "sighting--3a7b85a9-c4bb-4fa1-a9f7-b9d8917520f3", "sighting--782acf30-ab62-4f1b-8ffd-a0bdf6f858fd", "sighting--ea33ce70-3052-4905-8214-21bc00c65626", "sighting--a10187f7-a8f8-4e32-8762-fe761be15492", "sighting--bf3391c8-cce9-4eb4-a768-94eaa7f37983", "sighting--1a77ecbc-c76a-456b-a6ae-4f9c57c66fb1", "sighting--30b9ae11-f487-43ee-adc4-3ea11430243b", "sighting--3f8ed524-4df4-4e20-84de-167cb27ac009", "sighting--03ca003e-f75a-4055-838f-0795cb248d7c", "sighting--ca573a88-8387-4859-b885-cf0a1819c527", "sighting--5cc9fa9b-1fcd-4655-ab33-bc7b1046290c", "sighting--d65ba4ab-0c61-454c-a3d2-ac9250f2cc59", "sighting--f0577379-63f2-4c3c-ab37-07b6ee1713aa", "sighting--af9a10aa-fd54-44ae-870f-767dbf6d1740", "sighting--19c6f704-5269-42ca-b438-2280daf3953c", "sighting--f7b38531-68c4-4942-ad17-81ebb38a3930", "sighting--f1fbf016-b651-4d0b-b602-11a4a2804346", "sighting--9c271495-14e3-44c7-a564-5fdf27dcf420", "sighting--51ce4ca3-4dfd-47d6-9290-4b6cb9bd351f", "sighting--1c4e716c-91ff-478e-a0fa-ddaf6739b1bf", "sighting--e90d32e6-307a-4d32-8759-a96100591afa", "sighting--8fd29b9f-39e6-4b5e-8412-e0380e4f87a7", "sighting--0d24e924-e87c-4fc8-a062-8ed1ab947d38", "sighting--6a53267a-a132-4cbe-a77c-c625069cdf8c", "sighting--0cc0eafd-2e6d-41c5-b04d-7f991274e101", "sighting--12858974-b087-4fa1-80d4-4d83c33fad26", "sighting--0cde56d3-d055-4fbc-857d-3118195a507d", "sighting--bfa7b2ac-55f3-4c6c-bb2a-908a1b35c5b2", "sighting--442e1dfa-78c4-4eb9-a8a3-a1881c2f1b5d", "sighting--1bc73342-1672-4e1a-a80b-5feb1d4d658b", "sighting--44442703-0d64-4664-993a-52eb91e7cbd8", "sighting--ffa9c93f-b89b-4e22-9043-ea8f1d06d439", "sighting--9ad22c25-7fea-4a65-a5a9-37bd0a336e8d", "sighting--f27066dd-f914-401d-bcdd-57354067f757", "sighting--7aa1b037-2ddc-4608-9662-aaca0d3147e0", "sighting--d84c4b27-0b19-443b-b948-26a8cbd0b873", "sighting--3aebca99-4c4d-43c2-af50-578f920e5a5f", "sighting--239a555f-1966-4a5f-8a1d-ac40fe363271", "sighting--0cc91043-3fc2-4d9b-8215-faf49e90d4cc", "sighting--bbd90285-d138-46f9-9790-653c49a8a69d", "sighting--7a8c2ec6-c866-419d-a733-d897350a44bd", "sighting--6bc3d40c-9d89-4b97-bc99-ff8569fa68ca", "sighting--b3e8b4e9-2614-4f12-9cdd-7b9d58f90569", "sighting--570a4f53-d15b-4bf9-b39b-55fc5b462604", "sighting--77226548-b765-4d9a-98ab-0efbfc9a3dfc", "sighting--6bc2a2e9-0a9d-4772-ac63-746d76cc5b2c", "sighting--2171e922-787a-4599-b30a-cc04198d55b0", "sighting--ff3e2fee-92b0-4455-b371-c23122d97497", "sighting--0594ca2e-f74c-466d-a720-088528113929", "sighting--22da1d43-8c21-431d-b776-9f138e589383", "sighting--4965f99b-95ab-4e71-8e92-882f35efb8e6", "sighting--a4fe6ee2-335a-4cc6-b641-40b80edc0abb", "sighting--59c64492-f935-4658-9db7-8928ba2aacaa", "sighting--5c077957-54f3-49fe-a1f1-a593d1bb4ec2", "sighting--7dc4562b-e7d3-4f78-bd4d-e9ca547a4d4b", "sighting--5490ea61-98af-421c-8804-09acdbeea4d7", "sighting--f958f720-c3dd-445c-adbd-4c87069bb9d6", "sighting--f30121e8-7959-4d1a-9548-ab82c05eb5e7", "sighting--c1321ae1-9b49-4910-8421-cd9d9d60b334", "sighting--a57a0934-d685-40ae-a9ce-00769c0e0f01", "sighting--f3e7158b-3201-49b2-8b15-21dbf4bf301d", "sighting--61dd14d8-65fe-4f58-934d-60d35ee1965d", "sighting--fdd968a5-d322-4d95-ba4a-78e5472e701b", "sighting--179dc2d4-d9d3-4b55-a844-64ea790756fa", "sighting--f787a99c-e355-4f55-b78e-d871394f57f6", "sighting--387976ce-a894-47d6-bb9b-b593ede0c2d8", "sighting--9a492448-d739-414d-9aea-7dd3ff4aeb10", "sighting--f2d12d40-7a67-4aaf-a019-b7bed6e74bd9", "sighting--00d70b38-ac47-4703-89b4-bd6df65c396d", "sighting--944904a9-abf3-4611-bb1f-f67f4756c706", "sighting--bb26af76-e5de-4132-9c6c-b4412e464eaf", "sighting--62bd7df3-6a2f-4438-9251-76be0f36d632", "sighting--cf1aeaba-f518-4fef-adcd-975853e4c2c3", "sighting--cd9cf0b7-e27e-4d07-8592-1cc39a7b729c", "sighting--f6b3ee8d-3388-4f47-b404-2dcf2fa177e5", "sighting--c59ea8e7-a3f0-4421-874d-827d641e495b", "sighting--6d1f49e5-86d7-47e9-8cbd-02f8b2c2190a", "sighting--8a10af80-dd79-4d2f-88ce-cff07851201d", "sighting--c83d7381-8251-4111-ad27-3d85cee6cb72", "sighting--d2d1f130-3ec5-48fb-b02e-da9244146b00", "sighting--43e16492-c1a4-4d49-9195-b8579694f817", "sighting--b66d77e7-e0eb-40b0-b8c5-c7ee051629a7", "sighting--42dd472e-a56a-41b8-868d-724eb9af5cbe", "sighting--58f037f3-3dab-4b72-9e34-7cfab8039d87", "sighting--70764ba7-79d7-484b-9ebb-52e0c486dde9", "sighting--66afaa16-c9f9-457d-a140-9476bb5177f0", "sighting--2e248f2a-9ea0-4514-962c-e83757d34f0e", "sighting--97d7b60d-2a17-4e09-b2c5-18f478e01c6c", "sighting--bdb0295f-59f0-4b4d-a1f3-cb6b83568852", "sighting--d52eabb8-66b7-4842-a7cf-dc0e9a81f60a", "sighting--5dc82e6f-78e4-41fa-a9eb-087e8306dc54", "sighting--203c38d1-673d-41eb-acac-f182c7e09516", "sighting--1bc4b514-5221-4263-ba19-773b100ecc14", "sighting--b8685666-aa5e-42e5-9e4e-eb7d17a6d163", "sighting--fab604f4-e11f-4f4c-a28c-0e937c032d4e", "sighting--8595d2d3-f7cd-4b8e-86cf-101d058f7f15", "sighting--dd02aee2-c6b2-4347-a6bb-f41f25b5f63c", "sighting--c033184d-2409-4a42-be63-9b39a5d2925e", "sighting--0b2ff013-9025-473f-8dca-889750703ccd", "sighting--e7574e07-d18b-4efd-848b-ca3c3f5d363f", "sighting--58fa0b0a-d81f-4204-9f70-3c9308bcbbce", "sighting--18fed716-8b11-46f7-82d9-74e15fa5972f", "sighting--903e53d4-4e6b-46ec-8a1f-acc7976cb22c", "sighting--6f585707-1cf4-46d0-9b54-8136b8e3c50d", "sighting--869b5b0e-d4f6-431d-b654-34ebea851f04", "sighting--d13a11ad-7456-4f5c-b02c-81f5e6bdd421", "sighting--0b189383-ff34-4220-891b-332873396c2c", "sighting--aa1cd4d9-2096-451f-8f43-6675eecf1e72", "sighting--3eb7233d-9df3-4ccc-b0d1-28f8759c75df", "sighting--e7afc313-f1fc-43e3-bc5a-a8841c50d791", "sighting--b0cefb08-b938-4512-8e9a-d8361f18791b", "sighting--e6a923a1-1e73-4b9b-a939-b4e537798b82", "sighting--1348d04b-0971-4e94-9335-cb33b066ca5f", "sighting--f2175de5-d765-47f9-a408-e01b010302e4", "sighting--ea87de35-4c17-40ad-8856-0c926dd4585f", "sighting--0d24d482-4398-4de8-bcde-9dd84bfdbdca", "sighting--2a6b65cb-67af-46e3-b66d-b542f3694ccb", "sighting--3363199c-cf57-4b4b-91ec-e528908fac60", "sighting--f9e4c217-c5da-4419-8378-b7fd86bd5391", "sighting--e48f4573-7893-4ad2-aca8-ac2a6e28aac6", "sighting--672f8a84-c31d-42df-b3a1-1639cc8a8045", "sighting--c37ce9de-3c09-4455-af80-c7ce1864d252", "sighting--ffe6991b-d077-4f78-a549-216c218815ab", "sighting--2b5f67b4-6497-4142-be43-12e8e3fc1bc6", "sighting--f0b17c3e-5d7f-4dea-bbbe-972b7d0b34fa", "sighting--b0d87a31-d738-4859-bf6f-9d3e4a0ffcaa", "sighting--16bcdc0a-ef87-4a1a-adb1-f601ebc9a9ce", "sighting--82b3fe42-a273-41d5-884d-0dc3bea51ca7", "sighting--8507951d-3c99-489a-8165-3cf35f353db8", "sighting--332b1c7f-a9f3-4db8-a4d5-4687177efdf0", "sighting--60970867-b7b5-4e17-a7f7-5a5478e727a8", "sighting--9a3bf7fd-d347-41f2-9753-979614df2abd", "sighting--70daf6c8-b277-42c4-83fb-b9cf00ec3e06", "sighting--7b669dda-3666-4258-8fad-1fd4a2195f6c", "sighting--c79f527c-61dd-490d-a50f-7abc1e80f160", "sighting--c75e3cc6-a051-4c55-87ca-0328d87f3387", "sighting--f7e26703-01d4-4c57-b86c-1f510c8b2824", "sighting--8260e615-4f19-418f-bc10-70bef1bf0308", "sighting--118026f3-bcc2-4d6a-86da-7ed974124cad", "sighting--61a665c6-9697-4b89-815e-94b7169f5fd4", "sighting--673eb7be-7876-4603-85b2-1373611723b1", "sighting--1fe36e8d-d9cf-42e0-93b0-ecb14681562e", "sighting--20efb607-5f9f-4518-8b59-be5905f4effb", "sighting--f3e38ee5-a196-41f0-99d6-3252b60ee278", "sighting--6fd7c253-757e-4133-b480-13e85b719acd", "sighting--83698a3a-a63b-4344-8f8f-2cad12ff6ca7", "sighting--73f09757-9cc6-4e83-9663-06e1a009a183", "sighting--ebca8f6f-8a21-4abd-b9f1-4ab195b16616", "sighting--9b547d7d-bc92-4682-a0b6-0e413a56606a", "sighting--ab17b182-e977-4615-999d-c51f0cc79c3e", "sighting--b9647ab7-2c30-4667-92c1-7d2fe73058af", "sighting--1190ced0-2754-4d45-a2bd-129b6f6df471", "sighting--0a3ce586-8ab0-4288-8ae4-5368f2c1624f", "sighting--d3a4af6e-8bf2-41f1-b3ec-27c7c7b3a3d1", "sighting--aa99378d-c5c3-4924-8a38-5a33bc5781aa", "sighting--bf6cac73-97c2-4071-a0e3-57c78a3d96f3", "sighting--948bcf37-ef9d-475c-b148-d2e4b124e756", "sighting--046f3a49-a409-44c2-850a-17f599b2dfb7", "sighting--75a31f75-b24c-411d-be4e-1a7d8ab72d94", "sighting--9dd1a3c4-2c49-4c19-b79e-b3a707940982", "sighting--7f1784fe-0a80-4d30-a764-f470325cc02c", "sighting--49c64ada-f146-42c4-90c5-d0397137ca32", "sighting--fc79e21c-7375-4439-8f24-c187785c99b7", "sighting--7eb7aeac-201d-468e-b5d1-4ad1fb92c591", "sighting--0902b17c-a1f8-4561-b1c2-64e0e7c36947", "sighting--7b4abc19-83c0-436a-995d-b8440489cfae", "sighting--a8ce5de7-bb0e-4f76-8136-8668cf5b292e", "sighting--1946bc4e-f5f1-45f2-a9d5-591fa8fe811e", "sighting--6908921e-cd1f-4548-8d81-63d64a3d6c55", "sighting--d01fffe8-5cbe-4f6a-82ac-53ad40713558", "sighting--898d332e-31e1-42a2-9b69-47b6977b7c39", "sighting--a0605312-9dde-4c69-a8f9-16ca407b4f46", "sighting--80974961-31b5-4f61-a109-2b1ba1f22e8a", "sighting--2c991709-85c4-4b6a-bfac-567a8ca575ae", "sighting--1264c6e5-35fe-4c3f-8ac4-a5dd1b4bea7b", "sighting--7632e0fa-1443-41c9-af3b-cb32089b05b2", "sighting--7da50874-d461-4746-9b08-3a54cf7187f3", "sighting--507e5a4f-744c-4ceb-a725-06149121624c", "sighting--2687ab03-60d7-4855-a12f-f845658f6bc3", "sighting--a91978f8-99f2-40ef-86a4-f61bac90fa72", "sighting--2f35ca94-f72b-4c87-857b-e9ec22aa0783", "sighting--545dec3f-bbae-446e-ba20-b6d9fc03277c", "sighting--b5362bd1-6ecd-4ba1-8dcb-72e4ba6a515c", "sighting--deee4dd2-b65e-444e-afd1-775760b75fa0", "sighting--5416bd30-7d7e-4e66-b824-0543d27f5a5e", "sighting--1ef3d36a-cd89-4ada-91d6-108c715894e1", "sighting--21256e6c-8fb7-47c6-83d5-e8077170f87e", "sighting--235df357-c49e-4322-b9ad-7bfed0b5361c", "sighting--faba5f37-2914-42ab-985f-27bd3ee75446", "sighting--f9e75b47-a685-4c95-9a20-375d0473d68c", "sighting--3224e3e4-f8c4-4115-b737-916f08933dec", "sighting--6fdbf99d-6d13-41d6-9e05-8e54a0bed623", "sighting--997ce076-9991-454e-bbb1-58d87c2f2ae2", "sighting--3bb4a928-d42b-4551-a132-ab444f75faa9", "sighting--438f864b-8e37-4b85-a122-88939d106218", "sighting--14ea8487-647a-4a75-896d-4b5caaae8821", "sighting--343db87f-a91b-4d7d-ad82-6beac90ba8d0", "sighting--64e7ee98-30c5-4898-b25e-2d9ca093503b", "sighting--206fa98c-3de1-4dd1-9313-680727656557", "sighting--0a7e225c-223a-41d5-b8ef-3843758c6f68", "sighting--c9d37def-a416-43a9-8fae-6af9a6ad6287", "sighting--5cda8f96-f0d7-4473-9e98-540072cb2516", "sighting--3942a84a-e3d0-44c9-a31b-87e1bf50fe17", "sighting--4c1f03d1-d178-4943-8232-52a0b9a5345e", "sighting--201b0aea-cb5e-4c07-b227-0fcd7b0a401d", "sighting--3f6e1623-13ae-43fa-b673-7cd64e0d5089", "sighting--ebd4af3d-aa59-4907-aa65-8837e085c32e", "sighting--1ce63246-f499-4a1c-a3d5-c9fa5a7865e4", "sighting--d59b1f72-85bd-49e5-9823-23327f69390f", "sighting--dfa86338-4f0c-4f22-89b2-304f3a601fab", "sighting--1724188d-7859-4803-8140-f5a5917cbd4b", "sighting--829e8a65-135c-406a-9019-75567d0e8cbc", "sighting--65e74a10-fce2-4195-a663-65ecf8555190", "sighting--3329b310-e6f7-4443-89a9-7628d0fcd97f", "sighting--592287f1-de0b-452e-a3f1-75b203e09543", "sighting--530a9db0-c5be-4026-adcf-d96bfb8b621c", "sighting--5c5b2502-6201-4a98-81a9-fe91c5fb12d1", "sighting--82ae79e1-d3de-4b76-9f20-04e30f3cffed", "sighting--ede6fa80-9f38-48b2-9913-b77df7c1e98d", "sighting--8b4ae245-5f7a-4873-bf4b-d204355ce21a", "sighting--415d3599-9231-4509-ac68-89d871421d4e", "sighting--a3604e8a-7262-4f34-9ea6-87b1d9e9240d", "sighting--7e8d9c06-b999-4065-afd2-727a5502d22d", "sighting--bc1759ec-0fff-45d8-ad57-942e10acc5cb", "sighting--94f34f1a-dd51-4add-9f52-94cef6a222e9", "sighting--dae52097-acc3-4637-9928-e513628499de", "sighting--806cbfb2-4f08-4ee8-832b-42d4a1b791ce", "sighting--d946ab19-bc35-4ecd-8344-6f52a15c7e6f", "sighting--5b6c7bd3-c587-4b82-ae1d-133726213e81", "sighting--9354a489-d3f6-44da-bb7a-3aebc24d32f5", "sighting--2d35f747-bbae-408e-878b-aab42497bb6a", "sighting--b218f3ef-2d21-439b-aa05-a2005f8e36a4", "sighting--f1f2cb30-0929-46a6-baba-90a747c3dbcc", "sighting--effd3b72-c77a-4113-8178-5936f8facf32", "sighting--e2bc10bb-d2c2-402c-b93b-3812821d5202", "sighting--80cfb76a-ba59-422a-9399-9e84a181cb80", "sighting--b7c74147-4020-4463-9a77-474836703dc0", "sighting--3502974a-7846-4bf3-8eb7-21e5dc4a699a", "sighting--c27a7422-62cc-4867-9865-22889c541ccf", "sighting--26a82616-1db3-41f5-b969-1e3ce688aef9", "sighting--f1a955ab-6b74-49b7-962c-2753a74f72bb", "sighting--7c5a9768-a5da-4e96-a269-6293a44474e8", "sighting--ae5f1d8b-47a1-4302-8f52-6aae52826b5f", "sighting--a08a52ca-2a10-4c52-a304-f018bb525e57", "sighting--2192d0a1-1df6-48cf-9acc-014c65f31681", "sighting--13f8ffca-9fbe-4eaa-a5f9-a6e306749855", "sighting--726f66c7-ebf8-4a82-8b24-a26e814b9108", "sighting--46065166-f547-4ff1-ac47-bbd85f7e2cf7", "sighting--1c14d552-e0db-4b59-be5f-08b262029945", "sighting--c5fcea80-8fc4-4387-b1dc-e4eb7e26e1db", "sighting--e6b1ec84-b8d7-4c8c-8434-90cafcf9d206", "sighting--5418f413-0f31-4200-b4ee-15562b19cce9", "sighting--c3646330-df26-40b8-8701-3db001f83437", "sighting--09cf31e8-f0dc-4f7e-980e-c1deb5d5b872", "sighting--91325008-59b1-4db4-b789-973292a58b36", "sighting--ee66205a-50cd-4233-88fa-10d297fb5d59", "sighting--0ff69966-1776-425f-a916-f98075768289", "sighting--65a5f56e-c82e-4ef6-8964-d9bbc0099602", "sighting--9455a9a1-3b99-4f86-aefb-03dc98cef7c8", "sighting--55c90477-a8fa-4bdc-8417-da7a15a49185", "sighting--26818e27-614f-4c41-a267-e00f7d364889", "sighting--b9e3da58-0528-4d3a-92ae-836a0de30781", "sighting--9b29cfa9-3b99-403d-8bf6-406e66f13adc", "sighting--69d16dc7-6bab-4ccd-93ee-2c377c5ce1eb", "sighting--294dcae1-17f2-4e81-899e-9bc8c74774d5", "sighting--a4a7f352-1ea8-428e-bca1-09b1bfc56477", "sighting--b1c0110a-9f3b-490c-a276-01f89a0ba9db", "sighting--23a9b62b-5021-404b-b260-109a3c1d5c0a", "sighting--c66be593-ef0f-403e-b968-cc830a0155d1", "sighting--d49520b8-8fc7-4a44-95b4-f9d0a658629b", "sighting--11b92a29-2336-4a74-ac69-147932b7af5b", "sighting--af4980b2-57fb-4a53-938f-68a53a293a02", "sighting--17751070-6d3e-4739-a792-d03d3a3d7185", "sighting--1cdb58e1-4a7c-40bb-9820-6998222cf334", "sighting--ce4e6002-7e22-4ae6-83de-d3e3361a052c", "sighting--ecd46671-e722-4699-94bf-e3d4a245fe14", "sighting--4a6f174e-03a8-4604-ac5c-d4a762675538", "sighting--efec7b6f-9054-412f-9300-e9c026f9a566", "sighting--97d0c5a7-3866-48af-bf2a-518e9c589e1f", "sighting--cc386d50-57fb-4c60-b0ce-70b98a666a2d", "sighting--5164c97d-dda5-4663-b6bb-50e529186ab3", "sighting--3ce46667-a4ec-4194-818f-0a0d7ee1079b", "sighting--f3d5d1d4-c2bb-46d7-9a6d-98cc11a736ee", "sighting--5e0dd24e-b9c9-4095-a3ad-b79f6ee22aa3", "sighting--ae8cc311-a282-4e9f-b04a-762ac8715727", "sighting--cca6fcfb-bec2-48cb-9cfc-d158c01e0a54", "sighting--da8acfdf-95f8-4f2a-8b72-d7bd5b892b52", "sighting--eaf28d4f-5acb-4710-9264-80a2ebf4dce1", "sighting--d00261e7-d8f6-4b93-9bb2-8d125dfb9e51", "sighting--5c1109f4-7543-41c3-bf72-3bf13362fe59", "sighting--a8c56272-0cbb-4961-a67d-cba9b53466bb", "sighting--173d826d-8def-42a5-b0dc-0824eeffb74f", "sighting--8a92b544-d7f1-4265-b07a-337ceb7072d2", "sighting--c16acaed-f85e-46a6-b8a0-2f234c9c6434", "sighting--4cd73083-b224-47f3-af92-7917e64a2b35", "sighting--5ee18945-b41a-4105-8e5b-378443afb482", "sighting--24a19f9a-876e-44e8-81b3-ab5693f815af", "sighting--4a3f8321-5640-4276-8399-8064f09efb30", "sighting--a5d5d9a6-0060-4bcb-80fd-b54c772aef2c", "sighting--e6a0a698-8239-441c-8193-a14098a4c102", "sighting--dfd7010d-9ad6-44fc-a90b-da16e4ce33fb", "sighting--36dff88e-2545-4b82-964e-501ba27afce8", "sighting--b8557fcd-c9ce-4701-9c0f-7fa25d117802", "sighting--d635a4d3-4899-4050-b5f8-a2f4b7b619df", "sighting--72510de4-29a3-4029-b35c-57d0bd3cc127", "sighting--8f4f48b5-5c5a-4b6c-b306-143a7ae04277", "sighting--6ef8d8dc-f1d5-4103-8bad-9d2141875e64", "sighting--ba748728-bb9e-40bd-ba5b-11b06a86855c", "sighting--314b0632-ab59-4519-a278-5e06276f6468", "sighting--dfe6eab3-63c3-46f9-a9aa-15487b1bb7f2", "sighting--ca455d84-0d11-4fd5-95dc-d160bdc90442", "sighting--cffb1cdf-8842-4127-bc53-fa24e03e8bb1", "sighting--79607380-4df4-478e-8f07-e65bb2d35fc6", "sighting--217f721a-af5b-4ad3-a56e-05d8ec58619f", "sighting--8eb70009-8335-47b3-956f-49349ba07b7b", "sighting--4906cf08-86ea-4a26-ac53-6b7966a05c38", "sighting--d2e21a6c-dd2c-4ab4-a5e8-555e86cad9d8", "sighting--0347a839-750f-439b-a680-92cff012e3c8", "sighting--248506fa-6e88-4066-b098-65dcd07eddac", "sighting--3fe7264f-2594-4300-98a6-6b3af7ba7d63", "sighting--e0339172-81e4-4028-9fa1-6d8135129720", "sighting--750af2dc-6db9-4e0c-a5cf-65483fb3d417", "sighting--e485d3fd-ae55-48f9-91a0-e85f1e867536", "sighting--84a5f5ac-b6e9-4bab-b125-ca0751265855", "sighting--7d9a3bfe-62d6-4ab1-88f6-f38cff9dd0a3", "sighting--3a91c773-ac3a-4230-88ab-2838a5827c4c", "sighting--69bad79d-2147-4de2-b360-d69e6b543e43", "sighting--5db0b9ac-6f56-4c4e-8600-44ce3ecde150", "sighting--0e667d1e-ae19-4977-a8ea-97d2e46b70f9", "sighting--aa28559a-7fb3-42d7-b822-a19c124d4d60", "sighting--c2018391-fe10-48f2-bcdf-34c6ca34a17e", "sighting--e511e0e2-3feb-45b4-8d46-6594d5d59ecc", "sighting--6dfbb5ce-352e-4bdd-964c-631b9112eca7", "sighting--5fa163ce-f41b-462a-a523-91c5c1081e4a", "sighting--70d41c3c-1e65-4448-b241-7e30a0d0e036", "sighting--43bd31ac-d83e-488c-a33b-f31b090eb1df", "sighting--15ad894f-b976-4c00-b270-339944445e1d", "sighting--797590f5-3a70-4951-8833-37c287ddffbb", "sighting--b32e217a-e28f-437e-81fa-94ff04965840", "sighting--7c4a33c1-56d3-477a-9ada-c76b0362e4e9", "sighting--f1805923-915d-46ce-a3df-966f57d1b076", "sighting--8c3e3362-83b2-403e-8323-7f4424cd1ccd", "sighting--72047eb4-cf94-449a-b830-ab193a81e357", "sighting--983681e8-d102-463b-a653-22e59cae13b2", "sighting--6de4b406-1099-44d9-9a88-265916aeac13", "sighting--3cd4903f-bb00-45ff-8c85-ac442b9f56e7", "sighting--8409bf2c-ae85-4ff1-9b4d-c6be08a2cb48", "sighting--07e3b218-6d55-4aa8-b4f4-2ba41623e2a0", "sighting--f760b260-d103-4596-92e0-d6f9ba3c9439", "sighting--3baf3b90-e3ba-4d06-9bd5-56c2c4addbff", "sighting--8d785208-090d-4507-9f8a-4949dcc2f37e", "sighting--088652dc-4645-4011-9fef-84435731d403", "sighting--4a5efb95-4d3e-46bb-adcb-787531bffd3f", "sighting--b015a78e-86b7-4574-9ab9-92034a814aeb", "sighting--f726ce12-8b86-479d-bdc3-dde8d24104a5", "sighting--a941f8c2-5946-4185-a8f7-5b6cbe474979", "sighting--73baf9b4-60d0-441a-bcf1-76c6b74405c6", "sighting--97b236c4-a083-4e60-bee7-d92d51f93a24", "sighting--70ebdbff-54cc-41db-afe9-796f447ce85f", "sighting--96d5a143-7009-4017-9bd2-9ad7f9760fac", "sighting--6696bcd5-b99e-48b2-8a95-c639a61aea2d", "sighting--df57cc50-6468-4fbb-afcd-2f0509e85f97", "sighting--08b4fbf8-46ac-4375-bc6b-dc8fac5986a6", "sighting--24ff2301-c379-4c24-81ea-394fdb31668e", "sighting--d0dd0ac1-5ba4-443c-973c-f462b1878da5", "sighting--25ba6cf3-0f96-4339-a6a7-fe042b913dd3", "sighting--138e90d5-2558-4937-8180-036628457a52", "sighting--f40be8bc-8b88-441e-a6ad-b8cb092a3c9a", "sighting--8a914cee-462b-48d0-b365-72d8d1b50877", "sighting--98ae371c-c988-4f4d-8c69-39fb585e052f", "sighting--0e55d39d-3a59-4fc4-9a2e-4c790140f641", "sighting--0a9782a5-b625-44aa-bf71-bf264588348a", "sighting--3f3edae3-5b71-4d69-b4e6-f405d1a8215d", "sighting--31e6d9c3-ce60-42be-813c-6583119ff367", "sighting--546c4614-a9fd-4af7-a227-19e003395b53", "sighting--589b01e4-f36c-46a9-b659-ddb4f59445a9", "sighting--d7572d1a-e214-4d03-95db-9b471662c8c2", "sighting--8283382d-dcbd-45a0-a9a1-3170c798d1ae", "sighting--e428e4ad-78c4-4432-b6f7-34d5aa8fd160", "sighting--abba4453-3aee-4b38-882c-bc57fde664a9", "sighting--b10d13a0-4f17-4b8f-96f7-d383ecd2a366", "sighting--c62365b3-33a5-4f04-b698-69fcbafdfc92", "sighting--805d3d70-a462-40ed-8f98-0718ee10f8df", "sighting--8f005376-d498-40ad-b5ea-b776758857e4", "sighting--719af019-0708-4418-8abf-60fa67728ac9", "sighting--6bdd463d-c67c-4756-91b0-1431b9101475", "sighting--74f16c2e-f5c5-4d9c-8d51-7db5132d0eb6", "sighting--81cc1109-b6c0-4f82-b3a7-732051d8bb28", "sighting--08706dfe-c65e-4b35-8503-97fe38e15767", "sighting--c9862b3c-d488-41e8-8527-c108bc4c50d5", "sighting--b935319b-7478-40bf-8269-2b7703d5a906", "sighting--71e3903e-6fad-4aa2-97ed-71e116c9cba0", "sighting--117c4671-0b7a-4722-8dbc-db1086580f45", "sighting--fb17596c-b6f4-4dbb-baf8-793c6ef1f174", "sighting--bc12d0b0-e52c-4a64-9393-bc5991c55299", "sighting--3bc89e7a-b952-4711-bdc1-5b82e1191738", "sighting--1a13ad52-c0a1-4404-8b0a-7db7b7acdc91", "sighting--4655e04d-096c-4d1f-9e49-ce33ddfef5d2", "sighting--188b4690-5628-4aad-a3a6-0ee96d0ee125", "sighting--c7c019b9-21c0-47c9-8510-67a6ebb6a1ae", "sighting--351dc0d2-f0c2-48a8-9154-6532849d4b09", "sighting--147e757f-3ef9-4d7e-bf34-a0ac6a59f80d", "sighting--79566574-dfa7-49ec-b1bd-d5c4a4a0c733", "sighting--27325bdb-66ac-4a66-83d2-bb6c514027d6", "sighting--a7abcf12-7bbf-430b-8f1b-07b29d7be6e8", "sighting--bf521265-0cf0-49f2-895b-e81bf95608f7", "sighting--44146a76-ecb7-4540-9db3-72f4ff9c28f0", "sighting--36576196-24f7-4082-8095-2b7de0fb0a45", "sighting--edc629af-69f9-413e-b86e-9384e7c6b1c9", "sighting--4e76ab84-5f5e-4267-9d7c-690e7717277e", "sighting--70234204-02af-4a5e-85a1-59a92586448f", "sighting--48d0fc63-399a-4220-bc69-46628e4274ea", "sighting--0639a3b4-8c76-49f9-8ea1-ba89282581a8", "sighting--b65874cf-f2a1-4a3a-952e-92cf4df45333", "sighting--c222ab04-95c1-48ef-9e59-1aaf3de816ba", "sighting--938bd620-24ee-4dd8-989b-142b4c9003f9", "sighting--73471ce8-9508-4ac7-98b8-3d1ee637da23", "sighting--aeda9f8d-9df3-4f3e-b265-93bd84bb0825", "sighting--f4916edf-cd79-488f-95ff-9713e5acaccc", "sighting--f6c65109-8852-4c9b-a9b8-769ebaa09e12", "sighting--14bcf83b-1de2-47f8-a54a-88fca74f7420", "sighting--72716b7a-5036-4a0b-814d-283958ed42c6", "sighting--1fa6e8c0-9bf5-4780-a495-ddb11d703ac3", "sighting--0f8e5abf-418c-4445-82cb-22880b647159", "sighting--3e6faba4-32ff-4f25-bf3b-05c9db36b3f9", "sighting--b12c77e8-e153-4dd0-a4b8-a81c34c1a0da", "sighting--65eec35c-4578-49be-a128-edc635171325", "sighting--f40d3abc-8af0-4152-ac6f-450bc4c98837", "sighting--4eb1493f-bcc0-4845-83cf-7b64a0bd0ec8", "sighting--6ca0d4f9-9580-4455-b572-0dd5c39b56d2", "sighting--d5739e78-3e6c-4292-a335-d5705749fd1f", "sighting--31d42b6c-506c-4d5a-ba19-61a28e9f32aa", "sighting--90af7783-d655-4d37-bcf1-1a7fb3f056ad", "sighting--d45548ca-0120-4e51-8a17-1744b0d85468", "sighting--31e6a180-3599-4a35-8dfc-b2cc5bff1efe", "sighting--40bde16d-9537-405c-bc15-734ae8378d2b", "sighting--95801440-3056-48ed-92cd-3df1c4ab937c", "sighting--c587402e-7371-4a27-a5d5-ec4fab18868c", "sighting--47494203-080f-4843-bbca-20be5f6b5824", "sighting--4c4239ac-6333-435b-af18-7ec08e974b1f", "sighting--de17f10d-35d1-4b37-8148-82683bdd286e", "sighting--52ab7217-8b67-4755-a286-4f26110554fc", "sighting--a55b0596-fd39-4192-9d15-762aa6521546", "sighting--ac84935d-55e8-4ea4-8931-95b99bf3a2ed", "sighting--95d6bba2-1591-4d91-9953-aff4e30a1a8a", "sighting--163e3fa2-5eaa-4123-8fe8-978c1ab4c7fc", "sighting--c9d5a983-3429-4072-9961-ddfed340d221", "sighting--b61058bb-72bc-4fd5-bb2e-c48b54506448", "sighting--6dfd1267-c37c-460a-8e04-328aa220bbc4", "sighting--23083184-912a-47ee-9fec-e79983bf1c82", "sighting--d25d65c7-cf58-4ea5-a029-5a670d0384d8", "sighting--8a0ce17f-f846-4afd-b561-b36bfd682942", "sighting--69cdf2ad-73c5-40a5-89ea-67c4ecf9087e", "sighting--9fabe991-a208-4a72-b8dc-0be24bf982a9", "sighting--fea819d3-225e-4f96-b320-2660a77f500e", "sighting--dc52b289-8d82-4327-8dbb-19f18b9a07cc", "sighting--61f51df7-d458-4167-8ef7-341bc6d27290", "sighting--5eddf47c-a6d1-4349-8ce8-9f08c3bce231", "sighting--a77abc41-3dc5-4b37-9395-13af49058069", "sighting--47150724-8c80-4d42-a527-fb7fe88a9f75", "sighting--e2379ccb-4d87-49a9-9bc2-79fc140d6b35", "sighting--9430ddb3-2905-4ce6-add0-dd6c5a9b33f8", "sighting--67a73e2e-c36b-49b6-8738-9391ce81c043", "sighting--f46b70fb-7a09-4fc7-a98b-d152ce7022ba", "sighting--ee7bfcf4-f4ec-4d17-a258-d261ebd59899", "sighting--61d934ea-4187-4454-ae01-5d8c63bd8720", "sighting--3099e172-6222-4744-b53f-db220ac2aef4", "sighting--c195093f-d4bf-4bca-a25b-24cf3197ec55", "sighting--027825c7-504f-4426-b6bc-ed39d4ab33b2", "sighting--2e9b7385-0f39-43e6-bca5-e20bb58f8e3f", "sighting--0783b90f-52df-4e90-82c6-bda0536f337d", "sighting--581acb4d-679e-46a2-9b6a-a417e9dd0075", "sighting--3fabb346-35e7-40e2-bddf-15ef006bb46f", "sighting--0b160e15-221d-411f-bc5e-810fe0ff15a2", "sighting--9af42b82-7e9a-4fc8-8482-5957c0aff41c", "sighting--83d65d4b-039f-4e1f-b1ba-664d0c94e03e", "sighting--2d48f7fa-6f1c-4ffc-aec5-8d779d56e9b8", "sighting--e31cb722-0336-4898-8242-3ebabeb00de9", "sighting--2d785362-f860-4011-b989-7ef6ce1280ff", "sighting--2963d613-36b6-4988-9a8f-14bb6421bda4", "sighting--e1180fb9-371f-4d60-a542-8b304f3e44af", "sighting--e2724d82-eee6-4778-a679-c077a29adc87", "sighting--b5cb9fc0-83b8-4d6b-b5b0-8089393c3a79", "sighting--32c1b898-7f95-42bc-9b91-914ea007f506", "sighting--7464b22f-c98d-44c8-b7a4-f19b14101a70", "sighting--cc5a3ee9-d021-4414-a861-c864850f8e0b", "sighting--53ad66be-910d-4141-86ee-c04e10c7b833", "sighting--c59add42-6cbe-4bbf-ac2f-e1650a954e41", "sighting--a83668da-4461-4dcd-b8da-bdc06c9fd4b9", "sighting--634c0345-ddd8-47f8-9784-d8193eb442d8", "sighting--60740f4f-0075-463d-86cf-85ca045b08a7", "sighting--486ca872-a688-4a93-ab02-9485f0aa467d", "sighting--fda6ae3e-393a-42ee-a4b3-c1739ba23ffa", "sighting--f11a60a1-64e0-42f9-b7a4-c18e405c1d1c", "sighting--a287b514-1b78-4da4-aead-46969281f189", "sighting--7248cd09-6472-404d-8d2e-0c051023339d", "sighting--962cc578-a709-401c-8af0-cc8757a694c4", "sighting--d529df78-6399-4983-a718-03539a33547f", "sighting--d4232860-82de-432f-a1a1-7e5cf98c7754", "sighting--55c0b597-75df-4b9f-ba3c-be35d9dde576", "sighting--af85d949-59ea-43a5-bdc2-f23150919d96", "sighting--69d7b97f-8630-4810-a33c-33a50de9eb9c", "sighting--de07ca5a-776d-4ff1-aa99-fd5efea1f863", "sighting--dde47680-0144-4aac-83fe-3c7886c0a8bc", "sighting--64d90e7c-5efd-4e4a-b580-59638acecf9b", "sighting--9d6df832-9db3-46ae-91ac-77125b3f0979", "sighting--5a516630-b43a-4897-9531-26de94f1acbc", "sighting--fd84a079-65bc-4f14-a0f4-fac1ade86b83", "sighting--57bd6ae8-5828-47f3-bea6-f8412cc996ef", "sighting--5f69056e-219b-404d-b650-1fddf564ad5a", "sighting--7a8b807c-9589-4e35-b564-ee607a2669fb", "sighting--7a84e685-d6bd-4fe7-bd2e-33b115c972e1", "sighting--40904041-5a7c-4ece-9e79-38fd923c62fa", "sighting--dae974af-e208-4b63-8ae7-874ff8fe8df3", "sighting--e6390c7e-5a8d-41b3-a170-aa565ebcc864", "sighting--8bc005b9-ecb6-490d-90c1-4f1f03fbe968", "sighting--6e07a8b4-37d3-4181-90aa-e94eeb215c2a", "sighting--100b6ce3-25a7-46f5-8941-f5175af3ebba", "sighting--1237089f-7f57-434d-9089-2d45324be56c", "sighting--d49d7d3d-86a4-42ca-80a4-c53e3a11d4d2", "sighting--3d1320e3-2be9-417f-922f-aa48ef9db0a3", "sighting--4cc6dd48-6ea0-42ee-a2c0-ee2a28374015", "sighting--2f811c66-90e1-4ff8-adea-921ed33c1036", "sighting--2490af74-90f1-4390-b18d-c2369ddfa9c8", "sighting--56e55035-c07d-4f47-84b9-dccbdcb2248e", "sighting--36a14c76-f338-4b25-8429-3a66329243cd", "sighting--23c0d7f9-3d2b-47cb-b8cd-f82e65329131", "sighting--a6b74f17-f325-469e-ac41-d7eb21528eec", "sighting--a1b9c2c8-fa49-436d-a7f4-0277af22c7bb", "sighting--d2ada85d-58d8-480c-be85-5b7845e82aa8", "sighting--8e7a25b8-ee01-4952-a75e-a140e49e293d", "sighting--1bfae78b-0809-409d-9c0d-13df209a44a6", "sighting--3001bc22-93e1-4ced-a07c-6cb69bbb549b", "sighting--a5491025-0aff-48ca-8ceb-3e61b34a3c40", "sighting--a20c16e5-e63e-427c-9d36-c9befc7cd1b7", "sighting--63ef5a0c-7e1f-4566-ad7a-336d4d84fb8b", "sighting--9d5e88e5-6f6f-4c5d-890f-7c171174cc8f", "sighting--656b7612-1775-472d-9167-fcb133a79f5b", "sighting--6dffb3a7-6b68-4a31-a701-e19c2257df4e", "sighting--317b7e5b-bf77-493b-9079-577005eb3688", "sighting--a41d2cd9-fe8c-4a2b-be5d-e0f2f87bb304", "sighting--daad2a7b-9d09-4abc-a171-d4fc18ae30ae", "sighting--089d2847-28cd-48c0-81ee-9bd2644ad717", "sighting--bb78b0a7-b868-49ad-8439-9366e18b5f49", "sighting--ca2ee62d-1db7-40c8-8b74-344d8a095890", "sighting--f73bf25b-e92b-4f01-b42a-e03bfdc02f54", "sighting--a1660308-c28f-41dd-aa27-d84d9c88acd5", "sighting--3d73ce4a-931f-4c1b-b375-3d27a3e5d1e4", "sighting--7dab1c61-b6f7-42e8-a510-78c0c979ffee", "sighting--fdeb4405-78e6-468f-88bf-a9d9d6a1e8d5", "sighting--f2b1c4ba-33a6-4522-83ec-9146f1b46a1b", "sighting--b7775bfa-8b5b-47f3-b43a-8832a3312101", "sighting--16c520fd-e8be-4f3c-a746-356a307ef0ae", "sighting--0b13470f-fcf0-4683-b45d-f4f03f0d8c7c", "sighting--212e7250-46dc-4c4e-b006-5808696dc80b", "sighting--02c314cb-296e-44fd-87c4-208c51e0dc7d", "sighting--598cd190-76c2-4d97-93b3-3f9252f3814f", "sighting--727a6c0a-ec2a-4a38-bba6-d6307c1b873f", "sighting--aa517ec3-7df7-48eb-b7c7-dfcb9a0f9ded", "sighting--1cc12bc3-0f0d-4004-9ee4-250e0d38c3a4", "sighting--6f17daa2-4c1c-420b-9a52-4f42d6455d60", "sighting--8ab5bb57-7801-48d7-ab2c-94dd5aaece19", "sighting--0a2ddc40-b267-463b-9c02-163d9d4b2e6a", "sighting--38f98a1c-fd82-4455-b475-c9ee90fbab0d", "sighting--29a76915-0ed3-487a-bc77-ff2998fc7470", "sighting--bead213a-9512-4330-af2b-79be5b703c69", "sighting--bca06635-02bc-4e8c-82f4-e9c3b2da8bdc", "sighting--6bbdb737-c214-4b74-8eca-96152947d892", "sighting--3fa57c0c-48e1-4656-bb6b-ad6a6ee03db9", "sighting--7f610948-ba4a-4a12-a1b5-696ecd36b64a", "sighting--f146159a-5f1a-49bc-b82e-d1da73dabbdd", "sighting--45645685-90b6-4ae3-b48d-1af5bf28bb0c", "sighting--a6c765fa-9dd8-4965-a699-600d6eced8bb", "sighting--16262e13-5a2f-4d44-871e-3c93e25e7023", "sighting--492781aa-5fe5-4885-a85c-70af50eda714", "sighting--acb48d01-67b5-4595-ac23-c1183fd23bc1", "sighting--418ba4a4-227a-4ee7-8531-61e1982d2fbf", "sighting--67b00159-97b1-48ac-becd-62f459ed22e6", "sighting--02423eb9-9e52-42fd-9cba-a68c6b2a507f", "sighting--74a64a14-47e5-45d9-8358-1beabe1c0246", "sighting--7e86baad-654d-482e-9c02-9e24fc635979", "sighting--99f7b284-ae3b-43dc-be8d-a7afc8b35829", "sighting--18f315fa-3a0d-4780-b25f-e9ad68d5fbbd", "sighting--a083e096-7c65-4b3e-8cd2-86ccbcd96148", "sighting--ef5d2a01-0b6d-4067-958c-660fd5f4a994", "sighting--e487a677-f06c-4aeb-bdf3-6e994bf246cc", "sighting--273df54f-96c9-4db5-a159-9553f0a4cd0e", "sighting--56be5f21-5706-4826-934f-157dafa6a3ed", "sighting--1216ab64-be74-4b3c-9388-4ca10640475c", "sighting--81ce4bb4-a7ed-4f94-81a2-8371d54ba1ca", "sighting--a707e213-087b-4cc7-893a-307d28244fc0", "sighting--3bef92aa-663d-4fb3-882a-b7faf52b055d", "sighting--047695a2-6cc4-4faa-9c26-cc40825395f3", "sighting--13cb6ed1-be25-4275-9cd8-225cf57f17b2", "sighting--284fdc4f-ffb8-4b0e-9a03-fcd31261e344", "sighting--047d22c6-8e7f-4e2e-be85-1c997132c707", "sighting--fc01c62a-6b10-468b-b912-b8197d579f3f", "sighting--23642235-b4fe-4ba3-967b-8ff5fecc7cd3", "sighting--e11bbb1f-aa70-4dc2-9adc-dddd190a33e7", "sighting--abe6e1cb-887d-4e97-91a8-d8be8461a7d8", "sighting--08365293-546d-4edc-b74d-fdddbeba2dcf", "sighting--1754576d-f5f9-445f-8b6d-48b8d962c8bd", "sighting--728bdadd-6496-468d-bccd-f70d98a65f00", "sighting--11617170-e768-49b4-9003-73d8cd6599bb", "sighting--9de5d1d5-5f77-4045-87aa-0fa4ea7a0189", "sighting--11481e24-c295-407e-b860-59c75d7d1357", "sighting--2e8a4b82-5595-460d-bc7a-7a9cdb8bd69a", "sighting--25953280-7a85-4566-91b2-1ff9cd01c8c6", "sighting--18d26cbc-e077-4bc0-9661-2d5b7a774659", "sighting--8bc63056-ad03-4947-bb20-5edab8fa89d0", "sighting--28e5331b-1ec4-474a-b716-9919140627cf", "sighting--fde2bb8d-6499-4061-a7dc-ca91b4cfac42", "sighting--927f953c-d4a2-4fb0-bc3a-25d9c2f6f6fc", "sighting--bdcedb4a-66d3-4cbe-b0d0-798a27cb8874", "sighting--48346dd1-6239-48a6-b63e-0fc6661c805a", "sighting--23a5e78b-479c-49dd-b875-9337981f375e", "sighting--ebb0cacc-0c5b-4b2c-ba33-77e752ba7a88", "sighting--c82cdbd8-3b71-4c98-8359-dc881fd954ab", "sighting--83a67728-cf04-4511-a9b7-a5fa7f4ed662", "sighting--7f274c0f-0d43-442f-908e-b3c4910dc603", "sighting--2c386250-a340-4769-b634-c04b119384b9", "sighting--c48995ac-12b3-41a9-9bd0-ce75311c6d04", "sighting--6168c19b-d8cd-4799-830a-c93f44eab77f", "sighting--5892c077-042b-4a14-a8dd-032292dbe3f5", "sighting--7cc578c1-9f8e-4cd9-8681-d634af370941", "sighting--cadb78f4-ae4f-4f2f-be81-73d27e619607", "sighting--e383b846-0bea-448f-b2ce-696fae35f67e", "sighting--9b59037f-cfe4-4564-9667-758194fecd2f", "sighting--487a80ac-1e06-4ddb-9d60-e492f21805df", "sighting--239758cb-7b8b-4f4e-ab33-0cfdd30272c3", "sighting--6402b083-9c97-4841-9330-81fac6f4911c", "sighting--a59ca450-5b1a-494a-9ffe-de4adeb5ff50", "sighting--275fa4b8-94fd-4698-acf9-49f08c405310", "sighting--7fea83d0-7d6d-48ae-82af-8f7068f0c1fe", "sighting--bd959a35-c4e1-4992-b03a-8dcc0d5bb086", "sighting--b6397ad7-e355-416f-9ec5-d2ce99af761a", "sighting--ce9c1168-2993-4991-a056-3c41703ffea2", "sighting--00a7a77e-ea95-4f60-9285-8b39e3f292a3", "sighting--6907c4a1-54ab-463a-9e7f-d4ffaa20a547", "sighting--c006c6c2-3969-4b7a-9a1e-5043c195f599", "sighting--30ecbb07-4c64-41c8-8538-d5197d5933e1", "sighting--1963d544-6220-4458-96a1-5cc5baf1eb76", "sighting--db6b7369-0864-427b-ab2f-13c9c24b3e52", "sighting--928a017c-808a-4f57-955c-8bad77da7b7f", "sighting--cf868e8d-aca4-4d62-8311-efac7d20ce1a", "sighting--e1bbbbe9-fdfe-4de3-97c7-25a8d0f9f891", "sighting--0544bf93-7573-4f77-8ad6-9e239917f9f0", "sighting--5f6cb67b-a833-4980-8147-bc002996ce69", "sighting--dd5021c9-b3e5-4e44-b286-1858801262d9", "sighting--26d44b41-7cfa-4e15-865b-2d839c1c3014", "sighting--fc569c92-2dc6-42eb-81fc-f27973957808", "sighting--32a6f938-b344-4f03-b7e3-037b43600530", "sighting--b909d346-de5b-4e33-b8cb-a904195df4f9", "sighting--c6e52dfe-6e13-428c-b2c0-8ac563d91126", "sighting--7b0a81aa-505b-48d0-9440-669e9fdb6a24", "sighting--93591157-7dda-4cde-abc0-f68240fb4c95", "sighting--db67d989-1286-4799-80a5-ce8a8e24a0c9", "sighting--bb7c5553-8bd3-483d-8334-e1893a795e4b", "sighting--931ce4cd-7398-467d-a225-7f5074370477", "sighting--eb60983f-d8ab-4ef9-91ff-801068615cb0", "sighting--1f7fdfcd-bb31-4544-8b22-7712ea7edf07", "sighting--5ab43a54-c76f-433c-87a0-c71738b40f73", "sighting--b4b1fc5d-5ba0-48e5-8045-5b276aed3469", "sighting--184705c1-8d98-4199-9bab-c0f25b15f1b9", "sighting--01810e53-007a-449c-9d08-ae980eeae369", "sighting--3d677170-7cc3-4f25-b381-d10bedd7d380", "sighting--07410b3d-ee80-4095-be27-78ce071d7ba7", "sighting--3e55c935-d3e6-4669-b632-33f755c1020b", "sighting--9fb3c6f5-7276-4daa-a0ee-96f9425ee1c5", "sighting--f092125b-bb1e-4f76-8575-7aa911250e5e", "sighting--4ab7dda4-2f6d-4372-8e5c-dc8d768f8479", "sighting--32110d92-f581-405a-8f77-49666c3cd0f4", "sighting--6d834c28-b689-4de9-98c6-0fb55692dbdb", "sighting--ff242757-0e21-48ea-9435-b17bb3a2e23a", "sighting--39e6719a-bf32-42b0-b8d8-6dee51dc23c9", "sighting--05dfd910-a304-416e-a8ef-7a974e97f9c4", "sighting--97b86545-9034-4e94-82d5-a938c2be84be", "sighting--e349dd82-86f8-4c03-8ee7-645962fb498c", "sighting--bc5baa1d-a9d2-4da9-88f4-da07339b5dab", "sighting--6aa4fea7-4015-4f9a-83b6-281b5f6be04f", "sighting--1681f2ca-8e32-4d7d-8230-71570e476f4d", "sighting--1d24b1d6-aba5-4560-bd37-e13fba9ecab8", "sighting--da2eb0cb-748c-4667-a42c-3ec483811549", "sighting--41d7cb95-24bc-4fba-8d6a-ab8c509ed2dd", "sighting--7c24213e-6906-44bf-9df9-7c254bfa3492", "sighting--fc366861-5a09-4770-b74d-80366ff1cc8a", "sighting--6214d601-eb40-4346-9d3e-db6301d85ba8", "sighting--4e8423ab-d858-43d5-907f-5f5e3f7b90eb", "sighting--1bd5a4f5-1dae-4752-9372-54ba79b68c95", "sighting--1b1b1d5a-939a-47d6-bd01-ddd7a1251bca", "sighting--e10de462-9c73-41a8-a012-86553523cd7f", "sighting--f67732e1-86ea-4ba3-89f2-8a4730153419", "sighting--3465e491-1a0a-4d71-89da-7988d3db932f", "sighting--c8bbaddb-4164-456a-9468-cddb95dfe1eb", "sighting--13877d03-a31b-4b1e-8025-91c8c9f85e35", "sighting--46e40353-a81a-4161-b959-0a653f19dc71", "sighting--962f3108-1e79-4a5a-9f4b-15784307b1e1", "sighting--63c93c60-02b0-4ccb-a254-745852ec1562", "sighting--4e8c0ac2-4737-41f8-a7e6-7a74d04b7264", "sighting--818ff173-6530-4200-b9d6-680d403897f2", "sighting--c79176be-3a01-4d6f-b379-f029ee7125d1", "sighting--57cf6db5-c566-4ac5-8822-8fbdb5d77e5c", "sighting--ffa7823f-2748-4473-840d-096bfbb98ced", "sighting--f17621da-3c9d-483b-ad75-35ab83d72ec9", "sighting--e001a1c5-f018-41b1-b5be-c4f160069e5c", "sighting--e250b11c-952c-4402-9c86-2c8aa6c1bb7e", "sighting--7b9d901c-8aec-40ed-951a-7236edb28dad", "sighting--6842a4cd-f373-4596-b6d0-a6fb8e1e48df", "sighting--6cb5faa5-5896-48ed-8e85-8e23b1ccf01b", "sighting--3f5a2618-ca63-4c49-9aef-e3b062c84896", "sighting--fcbe70ee-0850-4438-98a5-b0a658cefeef", "sighting--a21ece45-d0a4-404e-9f9e-08099d18163b", "sighting--c2dd370d-4733-4a50-a5e5-c81cca2fa124", "sighting--fb43984a-ad60-4029-850b-60f09670336d", "sighting--3daf4e69-2f7a-43cd-9be7-13c553f40275", "sighting--7b374459-ae42-4d55-b5ed-e1f02f5fcff4", "sighting--1d72b148-cb8a-4757-9e1a-24d5c80dcad7", "sighting--d988294d-8b17-402c-92cd-3578ac2b6d1b", "sighting--2848c4af-754b-403f-9ab0-ba921ced303d", "sighting--13733ce5-24a2-4165-8b7f-8927bd0ba821", "sighting--d7effb98-2d9f-4cc0-bbcb-aa52e2e2933d", "sighting--87837367-d463-41a7-ae8c-6056ef80a274", "sighting--542469ff-ac7b-47c5-8bca-226bbb2f415f", "sighting--efb41451-8b59-42dd-addb-c8f4d52f6f95", "sighting--6cb2eaa3-fcf8-4745-99b3-749f41083b83", "sighting--207c727d-c142-4d8f-93da-7be173db3f69", "sighting--e9afabed-da6f-4146-9906-4bfea8f5c3d4", "sighting--2e9d3da6-35fd-4e22-b1d6-7e90e9f4148b", "sighting--38139e21-ace0-4767-81ea-eacea2b4e23e", "sighting--c8f77a01-8545-4afb-8f9d-cc3eca36795b", "sighting--f5e9eb89-6e68-4259-ab0e-05f30295698b", "sighting--3a476da5-c504-4559-ba83-a276459100fa", "sighting--7aeebab7-40ad-4a87-93ef-42139152871e", "sighting--89fbad1e-e80a-4b87-bf47-2816d43ad515", "sighting--ee8fe173-8338-487c-ae64-1f4359674f12", "sighting--2fd23103-01a3-4487-aba8-702324bf4db7", "sighting--e72cc45f-61cc-4dc1-869d-8056a51910fc", "sighting--cc4b422f-7d01-4769-9449-a07ee477c77c", "sighting--e758541e-caf2-4c5b-bd9e-c11834c3f98d", "sighting--811a01d9-639f-42bb-9c0e-22927edca3d5", "sighting--b0ab6f52-f575-4a1a-96f2-24c764d3f89c", "sighting--404a30eb-7a5d-499c-9d87-a2b216601c31", "sighting--aa1b45b4-5ec1-4c5e-9379-ebe6ac0182a7", "sighting--f8e86165-6ac9-4b24-b5eb-52390ab72887", "sighting--4717441c-02fc-4e46-9f40-73855c18210c", "sighting--f77d2e33-fe1b-493d-8aa0-b2f61a0c9235", "sighting--0d2d2766-2c58-46ed-82fd-f88a3d4ee2e6", "sighting--03d87845-f492-45a1-b743-6588a13432d3", "sighting--e85ca9b5-2e10-49d8-bb41-71462c571bfd", "sighting--f55a83d2-23dc-41fb-929e-12509063c70b", "sighting--24979841-4abf-42e0-aa54-2719b9702c55", "sighting--726350b1-d0fe-4bbd-9d32-1c58acd297c7", "sighting--44600369-43d0-494e-94ca-c4b2700c18b3", "sighting--1a6f1d5e-fc06-40ab-9a54-d99c8acbda5a", "sighting--1ca759ee-212b-4f7a-a753-93b6441859d1", "sighting--86117bda-2c30-48b1-be79-973fa0de84c5", "sighting--bc1d1f95-9c3c-4014-94c0-cc4f1cdd8c40", "sighting--cd748f98-d31c-4642-a57c-7613795b0fa7", "sighting--c6037bb9-3340-459d-bfb9-6b4c3300b28a", "sighting--63f60260-906c-41f2-a372-31d27a779ec6", "sighting--3c1305bf-b6c6-4e69-8e3f-f6bd042f6059", "sighting--77a26e15-e203-464b-a9bb-6131657341f9", "sighting--afdde0d3-1171-41a9-a189-56d0aaf54aec", "sighting--d83ad735-0987-4176-a72e-9228da48b1fd", "sighting--a14ad82f-ecf4-45a1-8b52-41e8478bf378", "sighting--d464e420-18a2-485a-9096-da1d93eee40d", "sighting--bae04c25-d4fc-4071-8da4-3a8a3aced5e0", "sighting--e163f35c-dcf9-42c7-a0b7-f675eaa4fb32", "sighting--b51bff89-629c-4869-bfce-f9556e0bf60d", "sighting--2751bc55-9993-4ae8-9409-02398bc53516", "sighting--467cf516-23c2-4b30-8035-3e6986302e88", "sighting--efb4b56c-a1c6-4804-a934-e6a9e4e4b049", "sighting--e82d8402-7d20-4f17-b803-beeda68d701b", "sighting--c7324f1b-12c0-4a8a-aac2-ebfe7d42e710", "sighting--7a1ae464-ffa3-4c0f-8a3d-f3ca7d7c3c1c", "sighting--107899f7-cba1-4a6f-98a1-1b93826c617e", "sighting--a6b986c6-7f96-4626-89d5-3db218f97c9e", "sighting--23674e18-ede3-41a0-a4ff-66efa7b11525", "sighting--4e3f850c-b60b-4376-a353-1dff2e8147d6", "sighting--1ed8c8ec-340d-40ad-8501-7fc1defea683", "sighting--fb9de476-3a20-45b5-b007-0b745102e8df", "sighting--4022ab33-a07d-4e6f-b43d-da40cfbc458d", "sighting--b95a878b-c990-442e-9070-b8d51b691373", "sighting--8088d2b6-4147-48ae-a1dd-ab4fa63707bb", "sighting--d4968db0-d35c-46b5-8ba7-84d206da7d0d", "sighting--12425dc6-5515-407f-8acf-e503f14cf417", "sighting--ac2f3e16-1be0-40c6-bfe1-ae475fdc691f", "sighting--044f2304-46b9-4a56-8844-f7b0de7ac79e", "sighting--d764c72a-280c-4110-9255-ede733791858", "sighting--78a57c86-0c2b-4c43-bbee-5ecc3b5279d9", "sighting--92ce6e02-7d62-4919-bc71-7c4575ea837c", "sighting--aacea221-e011-43c7-9f8f-5b80af397a87", "sighting--b1761c80-e037-4bbc-81f3-294e8e527bfc", "sighting--1c9413fa-14c9-41f3-a173-d4f60dfeff76", "sighting--c0e31857-9b91-49cc-82b3-740c43f1db45", "sighting--cc7e71d0-2f53-4d65-9288-20273d8d6d36", "sighting--9c6ae185-00ab-470c-9e2c-4431dd99b27a", "sighting--ff07e569-a07d-4407-9b7d-8e560a755ddf", "sighting--323fd0a9-7a9b-4931-a9c8-91f638e63424", "sighting--18c1a402-566f-487f-b538-fc991fa7032a", "sighting--28d0ad80-1037-4b49-8070-69703d6fbc86", "sighting--9609a100-1f1d-4cbe-aff4-4fb563af5862", "sighting--4e34c537-2b79-468b-8829-7b2c87dca691", "sighting--df9c3599-1efe-43bb-bbf6-9b8fa23a7d4c", "sighting--2463b04b-76c8-4cc4-be2d-2a1900d73711", "sighting--fd73f9e6-cbbf-49ee-ab0a-4be929db4fd9", "sighting--e2aa98c2-a7ff-4097-a87e-9e082b732063", "sighting--3605f73d-9f34-4322-a773-b4c7ad893e2e", "sighting--800fc067-2ac4-4218-a576-d8250e101add", "sighting--75db7d3e-a7ee-4fb1-8f13-b5cf2abfeeb2", "sighting--72f6d779-aa16-4ee9-9d72-fc6442bfc86d", "sighting--9cce3574-ceca-44df-9f9f-8c0ffbeb7086", "sighting--ac74d76f-3057-455b-8068-a46800a94e71", "sighting--a5ec7551-1d5d-4fe4-af4d-c03c95a371be", "sighting--f16e3f9d-323d-4ac6-a578-894dfeaec25b", "sighting--7f429c89-4e28-439a-a753-70d5daeca99b", "sighting--59c0f107-91ed-4692-a481-6bf3bffc1cc7", "sighting--e83e1b20-caf2-4ca6-83de-6205287e8e98", "sighting--143a4e63-2d14-46b0-b676-a6cbe891a331", "sighting--666cf32d-4334-4345-abb3-d8c9e9fe8e25", "sighting--a9c72845-005a-4829-9e5b-a006062ee0b2", "sighting--24c61873-bf27-4341-9813-4710ecb4e0d1", "sighting--0fad7dbb-fd59-40f4-b0ea-10c883c61f53", "sighting--9279abb6-b0c7-4626-9cf9-14d8f978a8bc", "sighting--89be6899-b77b-41ef-8319-7014d41dd99f", "sighting--8f807965-e430-4d8d-ba84-3afef4801973", "sighting--5fffab81-7062-429d-bcdc-e5ed39d399be", "sighting--712014ac-4cae-4729-bb9d-e41a9f0b9e2d", "sighting--d77de5a5-74cc-47f9-b937-c113733b027d", "sighting--be9650d8-dbc3-4257-aa05-3af130b9ed63", "sighting--66e79d80-60f7-482d-bd08-b3f61b50c7f6", "sighting--856cf2c8-ce46-4191-9c56-ee685472daf8", "sighting--43ae01a6-d6ee-433c-b467-9cb9d94b6323", "sighting--d7732f9a-afec-465a-a2a0-2a94f88e782a", "sighting--57e5e720-5506-4f66-b40d-7d3b32ea259c", "sighting--68565b5f-7f68-4e2e-919a-9beeb9f3ca49", "sighting--3bf63440-b367-4ec1-9c81-e74f5654e1ec", "sighting--09cce350-4d5a-40c2-bccb-a0bfd3332a00", "sighting--fdcddf0a-14bf-4ae6-b5fa-dea879550677", "sighting--e888e15c-4b0f-4fac-867f-f7fe5b367537", "sighting--1f7097f6-13af-44e9-b575-8ced0abee9cd", "sighting--2d6b066f-1cf4-48be-9a2e-62832a6d9c1f", "sighting--26dd3a06-c44e-46da-a45d-9b692fa0c130", "sighting--b4b21186-318e-4c50-8383-f0875a61026c", "sighting--b49578a1-8966-4e61-94b2-17c5541e2270", "sighting--7506bfdf-0aae-4883-96fd-06870fd46946", "sighting--b2cc30a9-7e5e-43c6-be94-f6a0a5973fad", "sighting--6b0a995f-fb11-4c48-9b8d-fbeb7592573b", "sighting--0b89e036-42a5-43ca-a4ce-ebc92bd43ff8", "sighting--a0008dd0-e468-40c8-a23b-5b46e5d6e53f", "sighting--e394acf9-f719-4325-98fe-98de28befc97", "sighting--8e5776e4-6981-4458-9807-5df821474df0", "sighting--ab65281d-28a2-4894-a95c-b8ff87882b8a", "sighting--1bb1ef1e-a779-4d86-bc7e-9206f8b0bd40", "sighting--d7ec71b8-e080-41a8-98f9-06a3be3176b3", "sighting--ae24cc51-58e4-4a77-a01e-4ad6ee2eb6f9", "sighting--b41552d3-2239-41a9-912f-d046d74c500a", "sighting--93a22f0c-3aa1-42f5-84ba-88611d4c13de", "sighting--c9228368-3977-402b-b8bb-20f3a3a14471", "sighting--82667709-fea2-440c-a6be-503b9c63edf6", "sighting--58f037b7-21e7-4ea8-aedc-dd4639d36a73", "sighting--7596b0ff-467e-4691-8fda-bd4784fee893", "sighting--59e77016-c0b4-4b26-a667-368967460180", "sighting--cd91012d-8ce3-45da-951c-c96ff81a809d", "sighting--5c7d647a-7f89-4fa8-bf81-0dbdf06336bd", "sighting--e3a609ae-78b6-47b2-9d72-fc58aa2b262f", "sighting--504a9edd-185a-4fa3-b9b7-51faf1eab135", "sighting--c7560315-6db2-4098-945f-c2d29b6f10f7", "sighting--76367f39-a956-40d2-966d-f87655eff3da", "sighting--f34b063f-b484-49ca-8488-661d8469465c", "sighting--8b4943ba-539d-43a8-95f5-000f98165fa1", "sighting--1a27f94a-ce43-49d7-9dfc-cd9f4a5c164e", "sighting--a02942fc-54ec-4a32-b682-346d3f92d6cd", "sighting--1690d030-20bd-41c9-a4f2-7d5a6852f5af", "sighting--661eca37-8467-439c-989d-2961713099a8", "sighting--903108bc-d538-4be9-b74b-25277385b1c5", "sighting--077146b5-ff8b-48e9-a1e9-a7c3772c9702", "sighting--7504f704-08e2-4d1e-9fef-077dc8a52c66", "sighting--4c0203b3-7c15-4f00-b911-95cf6a41b5c8", "sighting--a8cbd723-df8e-46c5-a931-db6431db14e6", "sighting--d9b05564-1740-4601-920f-f275fef4752a", "sighting--55a99dc5-c86f-4851-a975-2063dc3c12bd", "sighting--6aa97937-0d40-4450-811d-4c98c259bb70", "sighting--090f889f-72f9-4eea-8038-71fe33147d39", "sighting--b9785cd7-5927-4294-9af5-4e794e722c3c", "sighting--abba8509-c834-48db-b938-705a1ad3da3f", "sighting--ec139857-dcdf-4994-92a4-692f68136372", "sighting--a52bbb89-d012-4bbc-aa23-92578bac3d2c", "sighting--c1200d7a-c0e8-4df2-a22a-e07df277d678", "sighting--d1a8d9d5-66a4-4447-ab55-4144e1abde3f", "sighting--b3ff0acd-14ae-4557-90b8-3efc2313ea5c", "sighting--aab44d7a-18d3-49dc-b4c1-b7b62da37f81", "sighting--09b00786-9c15-4320-8ae4-f4b4a79987b8", "sighting--3fd9ddd5-19a1-4e90-a93e-0c4a2bf2f4f9", "sighting--c2fe457b-64f2-43cb-9fe9-6dc5ebd3460e", "sighting--7f06cf36-421e-4e60-98dc-f5d2e5c68b77", "sighting--21bbd756-7919-4dc2-ad97-785f15625679", "sighting--729844da-8fd2-448e-af12-8d91a0859db1", "sighting--7a45bfc3-9316-42f1-8199-9beef853fa11", "sighting--d52acb32-3486-442c-ac70-73326b10b7a9", "sighting--cb05f3d8-733c-4e59-a0b2-d30c9d63d9ad", "sighting--b4dc35be-509d-4bcf-a2a5-a623b1be4af9", "sighting--69fe74f0-480b-477e-b2a4-545ceb4f26d7", "sighting--57c1dec1-c496-4938-adc3-169f8b459b96", "sighting--419b3362-4ca9-414a-b994-c57baf292eec", "sighting--50d7051b-3fb7-4f4f-9c52-9af01aa461a7", "sighting--92f5ca8e-a943-4093-9a95-7037dfbf8ede", "sighting--c95bc370-e73b-4770-b336-0e416ac27e3b", "sighting--e2649455-08fb-4f81-851f-9ea82396473f", "sighting--981c676a-8098-4648-b88e-2ea3366a5edd", "sighting--3e99333d-487c-4a7a-89ee-b717c5d364ab", "sighting--35cd35ef-3a1a-4cb5-99b8-e35bb1abc67d", "sighting--02c3c8d6-5aa9-4e6c-96b0-4f552e81043a", "sighting--d0505ab2-00f3-4d59-ba8d-981557811bdc", "sighting--00c93742-a7d8-4231-95ac-b8142a5a48b2", "sighting--c214708e-630d-4b15-b137-5b73f1b0ce9f", "sighting--8f3cb501-b544-4948-b3ff-aa89081a1f78", "sighting--0b818327-3a29-49d7-bd5d-af24504d7c71", "sighting--e47e89fe-f77a-4ed9-bbb9-8079aab26ac7", "sighting--f64849eb-2419-4f9c-84bf-f3a1bfbf90d6", "sighting--a690ecf7-d824-43b5-a78a-80e1cafac07b", "sighting--906613b9-1ac8-4a3e-8fca-13256ee9db5e", "sighting--416bb149-20dc-44b2-8ccb-a7f81341dded", "sighting--cfc6c133-9ba0-4e9c-b8de-0ee2b0c7b444", "sighting--48788ee2-3bfa-45f0-8455-7a306c694b66", "sighting--9efb7e8c-fced-49b7-bcf2-67a38c5cedfc", "sighting--3bdde1c4-7bbf-402a-b52a-cfe3ad30a5d2", "sighting--d67ae060-3b50-4540-92b7-e882c44de9a8", "sighting--9fa86ea6-345d-4cf1-b557-955727c01eb8", "sighting--81523648-7fa2-470c-95a7-5f27d3085c36", "sighting--b5e7d126-9a12-4319-9cf0-22820d7a4a78", "sighting--905ee040-29c8-449c-b8c2-f80b1d305f02", "sighting--ab6d2a75-f576-42c6-85c6-528118b43828", "sighting--7f56fccd-baa1-4a25-83d8-d7b440c4832f", "sighting--17ce23ae-d860-45b4-b459-00444c161c91", "sighting--882c8800-811a-46dc-87a2-26e32af5cd49", "sighting--e30d2298-3e1f-4c33-9a81-aec2cfcb832b", "sighting--e21bf44b-f98f-4ee4-a2e4-3a16b75adc15", "sighting--baaeeb63-f3d8-4f3b-9240-00249acc7667", "sighting--40ca9a6e-1391-499d-8274-476058013637", "sighting--e7534b48-5e3c-44e1-849d-b52fb58ba1b9", "sighting--225aece0-0b70-49f7-9a19-a50dd522ff16", "sighting--d483fd54-6ab3-475b-bc72-9cdab3d2a986", "sighting--98a88f7a-318a-4474-bf31-d7ebfae692e6", "sighting--5f828e48-67fa-486b-99b0-665644c81823", "sighting--3c24490a-04f6-4746-87f0-272daa1cbf61", "sighting--b35fda1a-8e3b-47cd-bd5e-25140e9c32ea", "sighting--7e03248f-86c4-4a0b-a84f-240fecaf0efe", "sighting--9720b78b-b366-4a25-a0ec-f3f776eb783c", "sighting--7ecc1ede-c3c1-484c-bff9-a3397ce50d32", "sighting--62fa934e-ceb5-4949-a747-ee3f3d82192c", "sighting--98256338-6b21-4a65-a3cf-2f0ef3ca2a79", "sighting--791f0089-0f23-43c5-99cb-6b4a5dbb0428", "sighting--2b24cdf0-1399-4974-b87f-798a6e875b60", "sighting--c77aa032-efdb-43d5-922f-97dad04c82fe", "sighting--e580bc8a-cad7-4f91-ad7f-b432935ee360", "sighting--b6ca0d6c-b3d9-4ebd-849b-776107485fd6", "sighting--90d82535-cf13-4f10-9e7d-ee48904a0946", "sighting--7be9af69-553a-41e0-9810-06d5020b6ffb", "sighting--30e36b09-33a6-4387-badf-0c7853fcf752", "sighting--68d33c55-a8bb-4950-984e-d1a7e21dc5ac", "sighting--3b88104c-3918-493d-a559-9408be383764", "sighting--ca3ab395-42bd-4ee7-908c-6cfedb29f2db", "sighting--edcf58bb-8d1f-4aa3-be40-e544258a5443", "sighting--369afb91-73ad-443b-a03b-acd93f28d77f", "sighting--5eff68e7-0028-4500-8a0e-6a1094b5625e", "sighting--6772737f-3440-41bb-8de2-3b37bae13ed2", "sighting--cad7479d-9796-4792-8e0b-a882158c3117", "sighting--1830b752-f074-4f6c-9562-c0e2aac2bd97", "sighting--dc2c296f-7069-44fa-8c3c-41824e40b7d7", "sighting--6c08b3d6-01e0-4fdc-b73a-96d8b667b864", "sighting--14851ce5-0a3a-4718-a92d-76783913957f", "sighting--0dcbef3b-0ecc-4e16-84cc-c70ac4feb49d", "sighting--aceea348-0ee6-4f1d-94d4-6814ad32fda0", "sighting--3733c6e1-e443-4c4c-aac5-8c6a5d687d7d", "sighting--3cc1d7dd-98fb-4999-bc67-f3ede2e9524b", "sighting--49739730-fc0d-45de-87cb-f47304ce7d75", "sighting--fb404777-f0ed-413f-b71f-62cb32af9dcd", "sighting--d5938eca-06df-47ec-8ac4-3810ddf4af74", "sighting--1cbb314c-c942-4540-a013-5bc05b47c014", "sighting--c7a63855-4402-4924-a468-8773933499a0", "sighting--e2bd3905-7c20-4eb1-bf84-0c5d62b1970b", "sighting--4cade066-b577-4aa5-b6d9-d8e82985be3e", "sighting--46484c9e-5fd5-4739-bafb-3b3133e8ad08", "sighting--ba06ffaf-a50c-48a5-aa01-2166e148e54a", "sighting--4d3a92f0-3ca8-4f22-873f-0a5208636aa7", "sighting--fdd2aabd-0604-40d0-ac8f-365d911aa529", "sighting--6c19fbcb-161b-4cdb-98c6-b1b2023a40ed", "sighting--5721ce77-a893-41f6-92ee-6b428e17dcae", "sighting--0c7ca334-ff0b-4de8-9552-aadc8fea1533", "sighting--35e2d441-48c0-41be-b1f8-974cf3800093", "sighting--23f6c453-8198-4ceb-bc28-99a5763acfc5", "sighting--8df201dc-f717-481f-8572-8ed799ba3ab9", "sighting--5a83c979-75d2-4e26-8d2b-11a6e056417a", "sighting--6c29ada2-80e7-4100-9b84-08d50107142c", "sighting--d1859973-0f53-427c-8106-8431ad8a5f66", "sighting--38017076-1e04-4726-8c81-34fa8040fd3f", "sighting--7a41d249-62f2-4575-a6d4-ed6a1fc7fa73", "sighting--aedf2930-d6a5-411a-b43c-2e46cdc367bd", "sighting--a170ef8e-4ac0-41ce-9067-bc312cd0f012", "sighting--8bffc51a-a0ed-4244-baf6-d2a55751df21", "sighting--9639e7c9-44a1-423b-a549-1c493420ba1d", "sighting--b0f86fe3-f9ff-4ec2-8e04-45644dc6547a", "sighting--ba5a814c-03db-4569-98f9-99a4abb00edd", "sighting--b6366929-99a6-4510-83e2-6d097d2c1b23", "sighting--944064e2-2a7a-470a-b6fd-8186e2d92cb6", "sighting--bc9e072d-27c0-4902-ab6f-ad04b1b7f6aa", "sighting--57885b5e-c8de-46f1-a2ef-00337e0607a0", "sighting--52a4b44f-b2e0-42c3-bade-7817de98adee", "sighting--e966dba5-6abb-4730-89e0-9b98d3464634", "sighting--8bf48310-0e13-4da2-b70d-bfc4993bc546", "sighting--f8ecc4ac-f828-495d-b183-4cc1a9ace362", "sighting--c8cedb87-6679-4c4e-8fcc-ddd3543c1713", "sighting--b3c05155-a7b3-47f0-aa26-cb156f9dab1a", "sighting--79397f0d-c359-4cc3-885a-80ef103c3e49", "sighting--a294695a-2e65-4b9e-9fc3-b2fa48520def", "sighting--acbb73c8-99ed-4259-b3d9-aaf9ed5966fb", "sighting--31d16b25-542f-4f85-9cf3-53e1bef8a150", "sighting--575a7d35-5c91-4ea4-8d29-1a1151a32a6d", "sighting--25781b1a-be3d-43c7-9aab-585c8039a157", "sighting--bd7b63b5-0935-4ed2-ace7-c501d540af8e", "sighting--363e95be-c46e-4fb5-8b76-da6ef74ced5e", "sighting--2b79d397-5167-46d2-99e4-c7ea2690f228", "sighting--5893895d-b6b3-4a22-994d-e896f2ece7c0", "sighting--e19fd03e-27b9-4d72-adbc-d72e905c3d4c", "sighting--4803162d-5186-47e4-b56c-a273d41c4fc1", "sighting--4986858b-785b-4505-872b-3106c48a8c61", "sighting--29e8b99c-bb7b-42a8-bbcb-e94804ce5bac", "sighting--fef5231e-c07a-4333-a35d-d9f93ef5c054", "sighting--8a4521af-5983-4317-853b-b70703a1d17f", "sighting--7a61ce02-362f-4109-b42c-09e2b8057c38", "sighting--e01392e3-fbd7-48af-8dc8-b66f7d3c177f", "sighting--e30c1892-0832-4626-af29-9dd57cb46763", "sighting--d8a504d6-5494-4bf5-a9c5-dd9102d58b3c", "sighting--6d2e0be0-e862-453e-bdaf-d632c8883904", "sighting--9a2b503d-3797-4e74-86ca-cc287ba89b91", "sighting--634f8480-8140-4cd4-874b-0dc53a180e1e", "sighting--2067f173-8c92-401a-83a9-bd502964a27e", "sighting--64eb87b3-961d-4e05-b206-66807bb548d0", "sighting--3d56c499-323c-47cc-aae3-daffc27642c4", "sighting--dc407f9e-726a-46d0-a025-a2b7d4fc2576", "sighting--bcde7a2f-9061-4b24-9aed-85c139363db4", "sighting--18624782-5510-48f4-8c85-ccb8ae3fda89", "sighting--e1b2161b-3f49-4cba-bcb6-30673788e9f1", "sighting--b71a6235-bec1-4f17-a040-0ec097c7e4df", "sighting--a24ae5e2-9ad6-48f0-8bd1-99eac02b5956", "sighting--69952f8a-94e6-4769-a7b4-b964eaf904cf", "sighting--8cfff14d-89f5-49fb-8f91-8a76b1377c83", "sighting--a1e5690d-34cc-4e03-a393-6faafe0fb9a0", "sighting--0667459b-07e7-47c0-87a3-c4743a318321", "sighting--1a02d8bc-14da-453c-950a-871e2fdc6b31", "sighting--ee6a81e8-dfc1-458d-afcd-f002e3ad90a1", "sighting--a242d539-5482-489d-9b0b-3079ef46f4f3", "sighting--9f988cb5-3dd8-4e14-a12d-14c0e59b968a", "sighting--5a811dab-2de3-4e10-8b5b-4d9a71a2c682", "sighting--c8e5c925-9afb-4952-8088-fdfe55aa9b69", "sighting--b3791f02-1a1a-4709-93bb-77088085217e", "sighting--bc023c2f-2adb-4ea5-b20a-fe92e24f7c09", "sighting--2d36acbf-d101-4455-b26d-4a2b4b938ffc", "sighting--fc857f13-7392-4793-9823-7a76f03e82a8", "sighting--bc06c7d1-6967-4e81-b6bb-9aab449f8f00", "sighting--d3952846-b48f-4a6a-86d4-171302d52a84", "sighting--862940c4-9aed-4b85-bfcf-2f66a6383258", "sighting--2a82c97e-f967-4871-b2eb-4ba5f60a79fa", "sighting--0e1e1c36-5bb7-47a4-b5c1-527e40b98bac", "sighting--b32fa12f-276c-4b2a-87e8-d250e91c10cb", "sighting--740493fe-55bd-443a-9132-2f240518bf98", "sighting--4b50670c-0bf2-409e-bedc-4ec487582755", "sighting--525a0c08-5920-4fef-a290-4e9c2396425f", "sighting--a2484279-8999-4b96-b2d8-8b4c9cbd82b1", "sighting--79ca8902-0ecb-4928-882f-a4fda7fd6829", "sighting--096d4c0a-b7a4-46e3-95ec-a775ae793b19", "sighting--b532b741-0f9e-49f8-93fd-f3b301a65dab", "sighting--f2fb4103-db0d-4e70-9919-b24586d25011", "sighting--a7c68e98-8d26-4c30-958e-d8bb1d929993", "sighting--63056c8e-81af-4ce3-9db9-61740ce584de", "sighting--2ed3b80f-a54b-4526-9c84-72ca694c148a", "sighting--f18e4743-a7c3-4d3c-bcc8-77cde04d7fed", "sighting--928f51fe-3298-4107-8960-932c9de2c40c", "sighting--2b9b5e61-05d5-46fa-8a3b-cf7d5448e4c4", "sighting--2169ea2b-003a-49dd-a7e3-deefacf2e7a7", "sighting--5064cd1d-c5dc-47e3-bb0f-0cabe789250e", "sighting--28c2f502-39bf-4be5-af29-4159c6cb24f1", "sighting--ff93b600-b20c-481a-8e2b-2ea0c78647c2", "sighting--66fc9d93-0f11-457b-af73-0f7c2d0332f3", "sighting--016701e9-d44f-4ba4-af4c-104260aabf00", "sighting--b7420cb1-8e0f-4689-8d35-2980463c377e", "sighting--0612019b-1b4a-4bf1-9e86-1cb65f8802ba", "sighting--ebcea098-07af-4bf3-b38b-7da0e0598d77", "sighting--44649a17-0743-4828-a690-1f704c514944", "sighting--a5744fe7-0018-446e-b5cd-8a5a52284d05", "sighting--12241c1e-6b76-4fc9-a91b-2dff1872a5d0", "sighting--8d3c02bb-6a5c-4864-9da2-b95ef0482de7", "sighting--0f60bd8d-ca02-4bf1-af36-9fe3732cf837", "sighting--c311e3fc-67b2-4d50-9508-848bd5f4b813", "sighting--f3a4dc18-5d4e-479f-9b5c-8f6e0fc50b4f", "sighting--b561fd0f-9a2b-423a-a0ac-a7999fe1d41b", "sighting--fb9dbd55-2fe5-4947-b060-1b93e2fa01bf", "sighting--bec0b2d5-f4c4-424b-a5af-df68b7e7df23", "sighting--50fc27fd-306a-4f3b-a9c3-3769a5e1f118", "sighting--431450f5-dbf5-49b3-b34b-f0f83946216f", "sighting--dcc45f37-7df3-44a7-b39d-c3557d7c4ea7", "sighting--8c6026cf-cb12-4df9-8c79-894eab5cb7e6", "sighting--9691f6de-5901-449b-8061-8c0405b3b6be", "sighting--e8013d4f-986d-44a8-9ba3-19c1c7bd2965", "sighting--1fc4001c-2540-49a1-9025-71848a8ca0c6", "sighting--3f571a8c-2465-4283-a8fa-817262473814", "sighting--0f5026a6-c8d2-447d-880e-65675b546cf2", "sighting--b890a34b-36bb-43a2-ac51-8a5c5bbc75b8", "sighting--d3b7360e-4c95-4fdc-ae9a-61ed10454ad0", "sighting--170ef782-81fa-4cff-92cf-5cc81830a053", "sighting--8833bd2b-ce38-48b2-bdac-3d469857f829", "sighting--12d2a08b-1cf7-4d85-bfa4-9a4bc171526f", "sighting--1e399513-f7be-48bc-9138-ed0621d671cf", "sighting--ccba1ed8-b2fd-45da-bb88-8f3d66793146", "sighting--90e0a455-395b-4e0d-ba78-158ca330a253", "sighting--d10507ae-bec9-4d94-978d-d70cb8e869d9", "sighting--7fd34984-e4db-4736-ac36-7a4c466b7b19", "sighting--043c3440-fdac-40a8-8da4-5ea6213faa3d", "sighting--53686d38-cd55-40d1-adb0-9bba4f649d54", "sighting--17ab5498-7885-4182-9e27-e148c8fe176d", "sighting--6ecb5221-653e-4c69-85bf-a823d9186b00", "sighting--001ac001-bf76-4c14-86d4-4750d2d2dbfd", "sighting--53fd5c4c-5a28-4426-99ea-ff022e85bc85", "sighting--db2f66e5-0ae7-45a5-aec6-ecb2ed9c4115", "sighting--e082724c-4195-4456-a6ef-45e608d3af87", "sighting--c8cf730c-5626-45a0-92df-45fa8adb5777", "sighting--a015a785-4174-43c6-a65d-8b3d826e4b1c", "sighting--ee5b67a3-3050-4810-b1a7-c091187cd07f", "sighting--f4267788-46ba-49c0-a743-6c94599301f7", "sighting--96b342a2-81ae-4bfe-b265-16ffb2087364", "sighting--5f82c144-54f6-4acd-96ac-01cd6e16eeed", "sighting--56d00143-184d-4516-8669-d6a9dd61612d", "sighting--705184d1-af9e-4e7f-8544-556f81d3e822", "sighting--a4eef3e9-38ed-4b45-a077-f67d06c4f66d", "sighting--986b6ad2-8fa7-4e20-8278-a5e6839b64dd", "sighting--13b9369f-6066-4692-9db8-539e959a80d9", "sighting--e94972be-b359-4e91-8863-357f86ce9175", "sighting--7750cda8-37a2-45a6-805e-d83610295f3b", "sighting--0e085590-a979-401d-a565-dd1f8bf14acb", "sighting--58fcb8a9-86b9-41b3-b7b5-33b0d04c3933", "sighting--c6ad4b3f-8d45-4ab4-bf5e-12c93f99af36", "sighting--e562afe4-2a44-4b0a-ac0e-cbd2749a035f", "sighting--786e0268-412c-43e2-985c-e451c5f5d3a8", "sighting--8388e51c-2f05-40c6-b39b-5561898f31ce", "sighting--c97c7a54-3223-4a11-8b8c-9c579a540d12", "sighting--950138d6-e285-44a0-96f5-3fb3a92231b1", "sighting--78b700f5-c195-4ff5-a1de-858e23058d93", "sighting--70dedf34-69e9-45ef-93d5-44b5e2f22803", "sighting--ffe63546-446a-4779-a50f-26ccf1212635", "sighting--f801bf07-4299-458e-b07c-bc28da27c616", "sighting--22c4c453-16a2-4b60-b845-160f5b44dd05", "sighting--3976288e-993f-4ed2-a5f1-00609f0494d4", "sighting--071c5b35-db8f-4385-9212-f663f6001624", "sighting--029fed0c-71f3-4efd-8c85-5059f97ad6a6", "sighting--64a27f73-da00-46bd-8a55-8d8a176a1ec9", "sighting--e0aa39a1-20a7-4205-9097-b542ea1bf07d", "sighting--12a0dfe7-6fa9-45aa-bdec-44733a2eb41e", "sighting--c6991196-b2e4-4a0a-a0d4-6517bccf3591", "sighting--7e95eb64-9e84-4e32-983a-bb91e966334d", "sighting--07081393-3767-4ead-b81b-f4e2e7944cff", "sighting--a36d6624-6e0a-481b-8685-68641146f95b", "sighting--92205bfd-d4ef-4d16-b9fa-f029d441d2da", "sighting--6a16841a-79ec-4268-b00a-fc891e9fd7e4", "sighting--049a16fb-f7b6-44c8-83fd-e6d39078927f", "sighting--3329b136-bfef-4cd8-b26a-1e01ceb30d89", "sighting--aae3aeb1-ba11-45d0-b6e7-49a9fc3373c6", "sighting--cc76dd22-0cfc-46b7-b61a-c8fe088459b6", "sighting--de5a9e92-39c9-4b70-9b2f-ec09b590ab04", "sighting--f584bf81-3814-4232-ae2b-8a93d297fe95", "sighting--dd3502a0-04c8-40f6-acda-a07b8989fe22", "sighting--4a64dba1-6b08-4dbd-aea6-15470895a996", "sighting--8557a8ed-9e06-4584-9f3d-c9e44ef42ec1", "sighting--c29bac65-c029-41e0-9d25-491447d329eb", "sighting--450e0642-6c03-4215-b082-896d69241110", "sighting--f7f793ce-f1f4-4d54-8531-ab36327019f9", "sighting--85d28613-e5c9-42b0-bb25-480b0cb23797", "sighting--3a940c20-ec3d-44cb-a252-dad9a24731a6", "sighting--98ad66ce-f855-4bd8-9759-cdb8c1cef3ce", "sighting--073858ec-7446-48da-b2d1-520b4ce85e01", "sighting--7b0768b0-db1f-4475-97c5-8b6cc1c4866b", "sighting--e39b99bb-09c7-42b9-a395-f70a352b166c", "sighting--e894890a-f05a-4cac-b661-358bc4a182bf", "sighting--92cb58e0-8193-4e97-a225-ad9ddc91d980", "sighting--3fd1482f-86eb-4a55-9768-c461004eb734", "sighting--67b15475-8ab8-4d36-8cbf-f44fc919b0e0", "sighting--5bc56e0f-0b2f-44d3-90c1-b6fec7cd4361", "sighting--76dd0b56-45b0-462b-b139-a43c6c870b59", "sighting--0c033fe5-179f-436b-a3cd-2f8b6a5ef364", "sighting--ffb9932a-69e6-4818-a341-85f540b75cab", "sighting--cf1d2adb-d0ec-4879-9cab-5371169c6abd", "sighting--7c845ba6-f3b2-4b39-a0ba-a0891ca0afab", "sighting--d0f83d96-02a5-4ed4-b73e-3d276ed53c18", "sighting--dc25642d-d995-4d33-a71c-db48c1b481d5", "sighting--6bf7c9b1-4768-4d9e-bd8c-a4832c5be774", "sighting--881c810b-1168-4d17-b3fc-5cf647747c5d", "sighting--2dcb8d58-b718-403b-b59d-154b6f7e0016", "sighting--5d24bf3f-4a75-404e-a674-45e68cd653d4", "sighting--96bab3b9-0311-4698-9af8-2ce4dd07aeea", "sighting--5e38db48-b78a-4340-b472-5226139b1188", "sighting--3858def5-6b0c-4673-bf94-f8c2a72c85f3", "sighting--c43bea2e-d6ac-4a01-9028-7528006b53bc", "sighting--2ccac54b-4451-47b1-84a0-41c89bb886ad", "sighting--cb34d35d-2773-497d-a606-776b6b698118", "sighting--d5e2c6be-2f98-49f7-bf74-57188fd21b3d", "sighting--4f2f989d-d4f6-4edb-8d94-dc69d77bf561", "sighting--cfb55493-50b5-4f11-b948-d5239ac466b1", "sighting--3800b14d-9bcb-4b0e-a02e-f2a44c2f3493", "sighting--7a3698d9-a46f-437c-8632-be14df6cc9f8", "sighting--c0e0742a-9fdd-4a2a-b7e9-85a1d1cdab6f", "sighting--ad89163d-bd3a-44e0-bda7-1357b2c5789f", "sighting--9db994d4-ca4d-4bfe-ae2f-0e338c536c31", "sighting--44d878d8-8821-42f7-8792-9ea687256f3a", "sighting--2f0fcf7b-4ff3-4ebd-aaf7-004fa9aebd69", "sighting--3bf6a52a-cafe-438c-aa31-8dae16fe2a97", "sighting--20ed78b0-e3d2-4029-91d0-c07962f84a06", "sighting--972925d0-11d4-41ef-8288-3d3694378c81", "sighting--318836fb-607a-43fb-9b84-edf39da29552", "sighting--d27586f3-2a57-4635-8ee5-9e4e4ec11b9f", "sighting--0a9884d4-eaac-4f93-9a20-e79cab4e7077", "sighting--12941b10-0aa8-4650-aa7d-1f6134878922", "sighting--3a280ecb-b556-4e55-b7d5-bbe5836e370f", "sighting--bae84dd5-7808-44bd-b5f4-a94e61a66176", "sighting--f508126c-ac60-4708-8365-7166f082e985", "sighting--a2ce04b3-cda3-4626-9658-a0dc960b8e40", "sighting--a288dd96-2362-4918-9987-4b3c90a4f91e", "sighting--6ed61511-94f0-452f-b45f-3de2ceb274e6", "sighting--2d8594a4-0628-4da6-a31f-13ccc2082219", "sighting--55b173d4-7040-40b2-920f-3cbe3faa133e", "sighting--d41583e2-bd9a-4d01-a895-1b26448260d5", "sighting--136dbf93-1dfe-4b18-a683-c81e41f516b4", "sighting--61bf73c0-6260-411a-86df-726880728883", "sighting--78569a1f-edf9-4072-8a0f-cc082946aa32", "sighting--6c8fd9cf-2af4-4d16-9e62-c173e31a49fb", "sighting--aa82d5df-571e-4ebc-ab72-9d58396a3857", "sighting--3428f0a8-2cbd-4624-b2bc-b635756e759b", "sighting--dd25b3e7-0b9f-4074-876d-a835916f8ff0", "sighting--7c733bd5-0f9c-4f04-b468-0e0bd340f087", "sighting--96ce2a20-2018-41ea-8f48-19f174cdbaf4", "sighting--597bcea4-034a-43f7-822d-c7a3567516d9", "sighting--98447bdf-0f5d-4e6b-a0b4-96fdc344ac88", "sighting--aa4e945a-b4b5-45b2-b8ed-2c918278c719", "sighting--db524c84-370f-4456-ad91-229f91f26b5b", "sighting--84f890d7-85cf-46d0-88cc-7ecb405ab7c2", "sighting--931a895e-b22d-4cfc-9b9a-b984fcd94f45", "sighting--11764be7-3ac3-4149-b6b5-34d4ac882910", "sighting--f164aeeb-724f-46af-9c18-aeb2db30d4b4", "sighting--f252d6e8-553d-4e6d-9bd3-142d25599867", "sighting--1278b3be-c519-40d9-89b3-1230775a2e68", "sighting--fdce6e10-ce92-4a9d-9bad-49be7f8546e8", "sighting--967458e9-b18c-4ef5-86a5-67e559b1a585", "sighting--225b2dee-5161-48ec-b17d-ff3145204dd3", "sighting--50f8321e-8606-4a04-b2b1-368fea0249c4", "sighting--8278d9a0-47d7-4ab9-8392-c046e5584178", "sighting--560a1228-c3e6-4367-bb85-80441366965c", "sighting--873f4dc1-b519-4c4f-b03f-f06d28d8cd08", "sighting--b7cb9d90-fd77-41c2-894c-52616fbb4d51", "sighting--afaa9743-e355-49cf-a8f7-928a4373f83e", "sighting--4288699d-bc26-451a-824e-a1dd57a17356", "sighting--90529b7f-c6f4-40a3-8135-e5095f968c3d", "sighting--00c98716-c91e-4ed7-832e-04f90b4f52f5", "sighting--659e6aec-43e4-4093-900c-dbb97e4821cc", "sighting--a918d359-31ad-4f67-bb43-5bf223c414dc", "sighting--498d0a12-581b-42d8-9934-3b84e16cc095", "sighting--8f41acd1-00ff-4677-bade-24a8dfe4fc19", "sighting--ff5625bc-f880-4760-89ab-cd550cc1f899", "sighting--48c7230b-f0a3-4bc8-9007-5426311e1204", "sighting--49fc4c38-6b16-4ab1-a6b3-0ff58d576cb4", "sighting--77c4a0b0-efa5-46ab-96d6-c90fe505138d", "sighting--a3c44901-25ed-4c88-a057-26389b9197e3", "sighting--d709012c-4214-495d-bc0d-038edffe0021", "sighting--80941c3c-68b9-41ed-82b6-6bf9282a99b8", "sighting--4a5adaab-011d-4433-b468-c9eaa300f681", "sighting--77a6ccfa-c513-424c-a827-6ca6f484c608", "sighting--dc46cdad-2aca-47a6-9d73-78d87acb7bac", "sighting--1ab323f7-db7e-47af-9fab-0efff72750ef", "sighting--3a972d8d-b312-44f5-8ff8-4bf59d23f38c", "sighting--797f5d7f-0414-48b3-a54d-b9a46db121e7", "sighting--4549da21-5890-4b59-8ab2-c2cb6a8792cf", "sighting--a1798ee8-a919-4ae6-8cbd-73f2dffef00d", "sighting--3696b723-13ab-4e12-ba77-e14b4c04f258", "sighting--f22d4e5e-4d65-4661-8472-238b82ca9411", "sighting--9dc74aa1-c1e3-480b-a343-f0b07c741539", "sighting--76154d68-552b-40ab-89f7-7c3f23f45800", "sighting--db3018cb-6c0b-47a8-86d2-267175b1d0b4", "sighting--ebb39986-ebb3-4b46-b0bf-110b6a72114e", "sighting--857eb284-a40b-4022-8728-87555519cd0b", "sighting--8ec0fc6b-54d9-47a5-87ef-265a60225e52", "sighting--582e3d33-12ea-4aa1-a84b-f0a86fae81cb", "sighting--50fd9070-7513-481e-9863-4c1d9847d499", "sighting--e0ceb1f9-cb74-4159-b3a7-933a4054376b", "sighting--c3bdc3aa-3051-4640-8719-ec585042bdb0", "sighting--3faed860-9805-4576-a94f-b2cf2062f112", "sighting--a2f4a201-3f58-42c7-abb8-ba5f471c6744", "sighting--2b2122a2-5856-445e-8624-63c44f17d54c", "sighting--2950abfd-6f27-4d54-84bb-bfd6c3140561", "sighting--177a2899-c590-420a-9038-a40ca7511041", "sighting--ba10253d-5a68-4d3e-9466-7370f595b27b", "sighting--eb7ab907-b3a4-43b2-b6f8-18d06cc164bd", "sighting--45fc04a3-fae8-4279-859c-149df9d70fbb", "sighting--03c7ba13-164e-4dc8-89a6-72c2d03c53ec", "sighting--9d819e8a-540c-43c2-a482-c87f86267fed", "sighting--0093d8ff-0373-488f-93df-a1b61d6d6f1e", "sighting--740008b6-5e04-4ac6-a8c0-49dac483f9fd", "sighting--b0bd6acf-17e3-49e5-b6a6-47f7d862f857", "sighting--3b80e48c-77d8-4dcd-83a2-2d81568cf831", "sighting--c65f3b59-6726-443b-a3de-00682beb1066", "sighting--2ac46152-91a5-4348-95a2-6fd5fb2305b6", "sighting--42b17f97-37d6-4352-b009-bc0d86a66d0a", "sighting--7d506bdf-2ded-41eb-9efe-d9fdc1fe40e1", "sighting--c8843fdd-ba84-48a8-a47f-58fed09f5d7f", "sighting--37519930-51ad-49f2-a556-6c6f0bbf28e0", "sighting--cb6b86ee-030b-4b4b-947b-cc36b0f2a05c", "sighting--ad3e0eeb-9192-479c-a824-75895aeda466", "sighting--53e8d1e9-f5f5-439d-b45b-6495197ba6c5", "sighting--65696302-3fe9-4d0c-b39c-a748fb55f7b1", "sighting--0b24bca1-26d5-49c6-8086-7f9602b501d0", "sighting--1f89a331-1750-4b80-9c51-f623d34a2434", "sighting--37936158-f87e-4752-b61b-1d4c498f71fe", "sighting--ea4611be-9a5b-4070-b15f-5a4102ea3446", "sighting--f1f90ebd-ff6f-444b-9f7a-6ca080532748", "sighting--9dbadeb1-e6d0-47ce-90dc-f7673d8c4144", "sighting--5d3d8dd5-3a2c-4717-8134-9fd11e52d8fd", "sighting--7aea25ca-cbc5-495a-a0d1-e09e2409db0a", "sighting--2108cc36-ad18-4fd7-a02e-a083bbac518d", "sighting--51e39d3e-e257-41c7-ba6d-f61581e7d6da", "sighting--1c216e9b-637e-4391-bfb5-d421f383d4fe", "sighting--ab8e13ae-4503-4f52-8541-d664dc886e83", "sighting--c13f64ff-d32b-4e95-a05e-bbd1a6c566df", "sighting--42660073-cbca-418c-979e-7dc3eb6b7443", "sighting--71366ffd-0509-4bb3-9a66-f6805ab2979f", "sighting--c20319c6-adc8-4577-9208-afbf162f2c26", "sighting--c7b5528c-5c0a-4d24-abc6-3a5b45fc7176", "sighting--7a26304d-6052-4c4b-93c8-763d2bd042c7", "sighting--c1e5a16d-d68f-4090-aa44-2f24e7a502d7", "sighting--7f891566-cb9a-4c0b-94dc-83675e7f2795", "sighting--76dea59b-d2aa-4571-b7f7-8f38b744e67c", "sighting--cdd996ca-57ee-43d5-ad61-257972e23547", "sighting--af26c405-516a-491f-9c69-8e1066794cf9", "sighting--14a8b5fe-3876-44e3-89fe-c8aee68e0479", "sighting--a9f6e03a-eabc-4e35-b49c-073702c0c577", "sighting--d50e6800-d538-498d-92a3-867e3506bcb0", "sighting--dddf691e-d63f-4064-a965-dbd7cd7d50c2", "sighting--c945438f-9e33-4dc1-95d7-992b00a8ed23", "sighting--8c6adc2c-c9ef-4c89-ba7c-92dba707a5a4", "sighting--95978fa2-fa6e-4f10-9c07-3e2e8d0bedd0", "sighting--6812e7af-44ef-45dd-ac13-c7c347215349", "sighting--c309b905-afaf-4578-94dc-4d0401dfce06", "sighting--b9915547-3ec5-4b7a-a2a8-21b7b76b155e", "sighting--e1b73b4c-3cc1-41ae-ac37-344fdfee181e", "sighting--7a76aede-94f3-48ea-ba48-6d160d7d94a5", "sighting--f42e14e5-853e-4089-8b73-891a3caadcf7", "sighting--605eb7cc-107a-4820-8fb3-064494ceac90", "sighting--10826d89-6663-4020-a135-8579e74e5133", "sighting--61c704a9-7657-4943-8f8d-498377988654", "sighting--f4ef3d68-f294-40bb-900b-d79ffe38c29b", "sighting--f5efa18f-8693-4407-ae7c-9f4fa6a50477", "sighting--74154185-6d0f-4007-9899-58ec7d811c52", "sighting--eac50ae5-56c8-4264-a7e8-b28de966f166", "sighting--e752997a-fbcb-4c74-802a-b2dcfe3b0b69", "sighting--3e178484-73dd-40c6-9510-7bec3d1bbd93", "sighting--7c196ece-3d9b-42f5-86cd-f5bf24134237", "sighting--d6b00e29-eac6-40ba-8ded-603e824e42e4", "sighting--f63a683d-cf79-44a8-b077-67069fc11c13", "sighting--8433b417-eb35-415c-ba93-a438594519f7", "sighting--1fe4b32f-4994-4c4c-9bcf-fa89b1adbc66", "sighting--042dcf2e-727a-4a1a-891a-dc09de18ce4d", "sighting--5fced1d5-29e3-4c5a-ac8c-a0fb4541ba72", "sighting--2077e1a9-76d0-4e10-8306-16927ab7c73f", "sighting--a139d6af-1d0f-473b-9078-5e08df116c2d", "sighting--b88bd4c5-a986-47c1-828c-89b5cba06e81", "sighting--fc5e0cab-6cad-4f24-ba14-081a14c4f6bc", "sighting--e9da7469-0886-453c-ad99-65e744c100fe", "sighting--94aeaff4-f0df-4bb5-9bea-e5d1cc5a2347", "sighting--c9de53cb-6a71-46ea-aada-51ea04e4ef3c", "sighting--da237bbc-ba9b-4c89-a6a9-1be148677fa6", "sighting--85f5e134-4120-48ce-be43-a5e46e623b8f", "sighting--a85fef88-da3a-4f89-8ac1-6cdb2b818de6", "sighting--f353e6e9-ea87-446d-a937-e4715e42ee8d", "sighting--c01aa66e-f32b-4763-b349-0a70e282231b", "sighting--3734db1b-38f0-4a3c-a015-64b42ea76b01", "sighting--b0c1a99d-f076-4db3-bc81-3954a2d60b95", "sighting--86690a32-e52e-42d5-821d-de7182ec10d7", "sighting--c7e0b7d6-89bb-4b10-b208-adef97ce9f3d", "sighting--1b614e78-7505-4548-bc4a-fafa53383df4", "sighting--321bf9d6-96d7-4f0d-9a75-d3e82c7a982f", "sighting--38dd67d6-db4e-4490-89b1-9771f747aefd", "sighting--d831d8a8-c4d3-414f-b2fa-1789b43514ca", "sighting--84c24163-9cd5-4294-8c5a-31390ae8ffe7", "sighting--b2de0d82-136f-471c-bdf9-0d601ecdb5a3", "sighting--8d2ef81d-3863-4b09-945f-81cc72b0047f", "sighting--a0710278-6c9b-40b2-9f44-89f9029776df", "sighting--12dd7ac3-ea82-4dac-9198-f789e028f87f", "sighting--13ab2b28-ad54-4c29-b62d-c7aa330ad656", "sighting--b82bc907-8ad1-4aba-8cdb-80abc55a355d", "sighting--0df23956-9947-433b-b05a-b23cb04ca3f9", "sighting--4b4e27c3-d8a5-4b41-ac5a-09f0d3c104fb", "sighting--af6ce2ee-710e-451a-bf1f-8e5a8d547429", "sighting--95c92668-4ddb-4c25-8d6c-65b362db419b", "sighting--df36537b-b291-44ae-b1de-a0fc4a13f4a1", "sighting--70ddd942-bf9f-4479-81f5-e1c28f3084d2", "sighting--4dee9afa-6a97-40f7-a4c0-ce32c40365b0", "sighting--7bfff334-1c44-433d-94a1-a5c0d1e82e7e", "sighting--861f2444-ccbe-4508-90ed-32710e6b567e", "sighting--fa8c1923-9376-4894-a6ea-baa00ee540b6", "sighting--6c4ef752-688f-4437-9789-3d2b9c9dcacc", "sighting--b8ec7039-db38-4745-a27c-bd7bc10c93f9", "sighting--87ae242a-90a5-48e9-8610-f155c6badddf", "sighting--78780011-624f-4531-bfa9-306b1f7a3ee6", "sighting--197b538b-6157-4090-b341-c5d089a66d10", "sighting--ad9b3b32-5eee-4fc6-95e9-931c44c8af8c", "sighting--68b03fb9-1dee-44c3-9765-04fca39e8e4d", "sighting--667949c3-88a0-4b43-bb4e-23c32ce2a9ee", "sighting--6a2d8bd4-c88c-4217-a3c3-69fe886cf27a", "sighting--d68446c2-ccff-4c24-b9dc-b6f663efa3a3", "sighting--2e9bfc05-7364-4ef4-9d94-45e780f3ba3f", "sighting--23a9fdb1-c20c-458b-a5fc-d00958b840f8", "sighting--4cdc69b6-4df3-46e5-b72b-f06d338fc222", "sighting--82726c63-3508-4860-bab6-aebded976673", "sighting--dbd298be-2294-4824-ad29-d9d2e7d90df8", "sighting--e34d95fe-178c-408d-a541-f0339c809a7d", "sighting--ba94c174-e6ae-420e-a44e-5d0e63af1261", "sighting--2316af25-15d9-4c34-a457-8825803a004b", "sighting--fa9a6218-1f93-4c0f-b714-54413feae848", "sighting--6972f777-9426-44d1-b943-4298526165f8", "sighting--48cde44a-d06b-40e0-9902-729fc05a067d", "sighting--8caa623e-2394-4a2d-8bc3-42f9fcf1dda9", "sighting--ed1ecf08-57e5-4b0e-a124-195debc05974", "sighting--0d7881b9-fdcb-4475-8056-8183cee13a2b", "sighting--3a477755-5baf-4259-b25b-d8753adaf9a6", "sighting--aff2b80a-3ba2-4802-9a5a-6da1b0f9069b", "sighting--0d294fce-5a1e-44ff-9035-6e16836809d8", "sighting--150c7aa4-cecd-4644-a22d-112ec6c45f93", "sighting--2d117360-5ea6-4957-a83c-7783978478b8", "sighting--cda8fd4a-52c4-4ae8-b79f-9107455fd0f2", "sighting--1a95c6f4-5606-455d-a2ed-460a54339827", "sighting--5315f6df-e1a1-4628-914b-56405e61b8c2", "sighting--52fec654-7671-4b58-b51d-3e73f31d56a1", "sighting--1369febc-405e-4fbf-b1e9-65c910b37b2c", "sighting--3edde178-5a34-4757-b7f1-d3930770644b", "sighting--1d4e799f-5e72-420c-b23c-20613100dd3c", "sighting--262a391a-25ae-4dd9-84b8-743638b6c595", "sighting--48eadc55-0e7b-41b9-b220-8052bf03f0f5", "sighting--7ca2e31b-31ab-4824-af57-a4766e4b8564", "sighting--b4cbfccf-c9ec-4d63-b00b-7961cf60681c", "sighting--7248829c-5471-4eef-88f4-c0b63400f993", "sighting--605a1cc9-106c-455c-a1cd-c941ea56552e", "sighting--18dd6a84-55ed-4f56-b223-53ca7f18bb4c", "sighting--2ed48abe-131b-480d-9c81-ad38846dcf53", "sighting--854fa3be-2c5d-47d1-a129-8150b37e9380", "sighting--e18fbee7-ec4e-43a4-9340-c2685ab4c775", "sighting--5f0c860c-e3aa-44eb-ac33-68a19693e413", "sighting--3d60cfc8-a217-4deb-9b0a-4c0526dae28a", "sighting--0cd215c6-b828-4b65-bb5e-e85817943947", "sighting--f890bd91-36f4-4ba9-99b0-31ea8a417eab", "sighting--fb15bfaf-bc46-4282-9e4f-55bb5e980914", "sighting--fbfd61e5-d921-4c4d-ade4-496f64357543", "sighting--5be525b5-1d1a-438d-b3a6-87009bef99f3", "sighting--96b7c4b5-10aa-49e9-9ed8-651f92f439a4", "sighting--3da8b468-e447-4b6b-8c65-8f79151e0882", "sighting--821b4589-57d7-4399-8c52-d581b0aef1f5", "sighting--a898c389-2fdc-4d93-b4dd-db15b54a52d5", "sighting--889105b0-6120-4df6-924e-172225cb9757", "sighting--fce0e1e8-f1ac-4341-8de3-c1b62be20438", "sighting--bbdada75-f786-49c3-871e-cac45c850757", "sighting--777093c0-81d6-4b54-bcf2-1e16ba95e76b", "sighting--73b69407-f3f4-4478-81f7-836de22076be", "sighting--ac928220-6cbc-4f23-bd4d-9d6abd43a376", "sighting--e5d9ee90-f8f0-45c8-b4d8-78ec2791fd87", "sighting--078fcc63-e4d8-459f-b34e-9f36e32745c1", "sighting--3ea36610-712c-404f-a998-8b96bb4fae81", "sighting--e28f6aa4-7b86-4bf4-91aa-14c3b5e59baf", "sighting--6fb81f12-c15b-4e76-819e-19fdc59bfa31", "sighting--c7bd0985-3ad9-4a5c-b38a-a1363b172dc4", "sighting--513a9746-40f1-479b-935b-c48af1115f62", "sighting--357b6edd-6758-4d69-ae41-80308e653c8b", "sighting--a506bfaf-feb9-4dbe-a334-c95d880a10a3", "sighting--c6281644-5a6e-4bf1-93e5-5a42c60530ec", "sighting--82311355-9fc0-419f-b364-9f137b097fa5", "sighting--c8967849-ad13-4d27-933e-df4ed2586a53", "sighting--e18ad193-08a9-4b12-bd44-ac69080ac8c9", "sighting--2f57fce7-59b4-4899-acb5-6525b65a25cf", "sighting--f409d26d-f089-4688-9ba2-cd805242373e", "sighting--3563da78-bdfd-4f13-a38c-f48eaa8ebdfc", "sighting--8570134c-d23f-486a-88b9-88fa3487dd51", "sighting--a47a7ac4-9c18-495a-ba5f-1f1d771799a1", "sighting--70fbfbfd-8b2b-4179-b957-dda68bc32f1d", "sighting--b1754e82-567e-4aa7-b882-11ff726391d4", "sighting--88c3c345-0101-4294-8258-2d95a49d5e6c", "sighting--1bd81902-b4f3-44ce-a957-1c5f99bab218", "sighting--404d1a10-a8df-4579-83bf-7db80145988c", "sighting--2a968a6b-617b-4140-bba8-5c10117431a3", "sighting--02e7acbf-f698-4725-8ce8-9fb0a2515b4a", "sighting--09a9bb9d-f513-488f-a7ed-ad9e503c4088", "sighting--421af71c-5719-4f63-a55f-da9ca21f22b2", "sighting--adad6785-5959-4c7c-a1f8-6fffd1e747c1", "sighting--e97a017a-fee7-47f4-bea1-9f0e0a1b8c73", "sighting--9dfff55f-ec15-4438-bc22-85dac0f98d90", "sighting--b51290c6-ba16-4706-8557-5b92a70222f8", "sighting--a2571b08-e0a4-4d32-9c22-72f5b50b081a", "sighting--bdf1e35b-ec11-4c17-b9d2-77d9ec254f86", "sighting--b6cff19d-8933-4dee-8b07-1bfd5e4d58e6", "sighting--d537a0b2-ff66-4e99-91a0-470abbe63120", "sighting--039ed8d4-c04f-48d0-93b6-0e66668bc837", "sighting--0708ec33-02eb-427d-a982-ba2106bc3ba1", "sighting--22d625f3-e8fc-4f43-8378-59db3394d732", "sighting--80e87f4e-0389-471a-a9d0-7cf5497d5485", "sighting--2fdaa4fa-8b77-408a-867a-28643630f85e", "sighting--5ce05ed5-d4df-4a5c-a526-4696268a3d56", "sighting--3cfff316-4543-4f83-b6af-072cdd786f48", "sighting--307f9218-6ef4-4883-a831-476f3a7c2a5b", "sighting--f31b3ddd-13d8-4afa-bc01-f0704f774327", "sighting--68435d89-4939-4f5b-9722-1a4f2ebf3601", "sighting--831b5f56-0ae6-41a0-a461-acf1e8e864e6", "sighting--bed95b4d-d993-4e03-9783-5dc5b347bf8f", "sighting--b06ade13-944d-44dc-9875-3522019af8c9", "sighting--bd49bc8f-4b14-4770-879f-b6ac7d0af124", "sighting--a2af98c4-8153-4f20-a68c-0c19f84691df", "sighting--3ad86d44-fb23-4c78-9d46-d6e86f95e565", "sighting--2a62c57b-ff99-4d6d-9098-81c7d6a76796", "sighting--b4f68fbb-9f5c-47b4-aa11-d0fe5762cc37", "sighting--6c232eb4-36f4-4a2d-a44e-139c756c1258", "sighting--6820d8c7-eb5e-4ca7-93c8-5448bb8e2a40", "sighting--550155ab-537c-442a-bee7-48525e0aecae", "sighting--f9e57a34-8878-4225-88d1-6b2fe08ba8b5", "sighting--5bcb6648-c26e-4b40-bd7f-08fe010fc4d2", "sighting--97539f11-b045-4b90-8455-a63e3cc2afa6", "sighting--6e60c48f-e23c-4ebd-84d7-f6ff9142ce22", "sighting--f7a41ddd-3ceb-492d-9d2c-67fa45bc112c", "sighting--842784c2-d406-4ad8-a5a0-e62dd7195c69", "sighting--31dd42f3-c7df-4eac-b862-82b71ef94018", "sighting--334110c5-dffc-4852-b10c-1b1b6caed007", "sighting--bbd9883a-9069-4c07-9c99-8a5f8ebf71a0", "sighting--4b03ea55-1778-4de7-8abb-63f97c73b3f2", "sighting--f62babcd-3734-4744-be44-25b0f16db026", "sighting--9bd8b1c4-4188-4a50-9e25-6b84989667d3", "sighting--10680201-0755-4900-a05a-7d7fc1e54437", "sighting--a98852fc-021d-4c49-a5e2-f13ce0e9d6cc", "sighting--1546ea3a-2ff9-41e2-bb46-74a1cef0c743", "sighting--0ba8b1da-7df8-467b-8af4-163d4aa3d626", "sighting--2ec88da4-5474-41aa-9dbe-9a7af3479fce", "sighting--70bb61fa-2888-4642-afbb-d707b2c592d6", "sighting--855b11c8-4332-49b7-a484-052c5ae63af0", "sighting--bb5422df-ef12-4349-bb08-7049fcaeb510", "sighting--82fda67a-f45a-4e4a-8873-2db565a0f698", "sighting--acc8245d-be75-4d14-add5-a3d0197e54ad", "sighting--3c0caf26-91f1-4fb7-9afa-22f9c9871fb7", "sighting--c6473f07-b863-4fe5-bf09-8403190c8372", "sighting--aa1e4967-f10b-49bc-b887-fb7d2c3b38c4", "sighting--76a77207-2591-4088-bc16-ddea04c622c8", "sighting--1de7a5d0-b197-4fe5-9f07-1773a23e585b", "sighting--22714fcd-e3b7-4203-a7b2-c63867348b0b", "sighting--82c362a6-94b3-4a6a-b676-cbdd3684f447", "sighting--65ef27a2-836c-4946-a0bd-12b730a9bd5a", "sighting--a7205c55-82c1-4faa-80b8-15eda4ef0b7c", "sighting--d4c6ad63-0ab3-4719-9ae4-3fc4559f0e1e", "sighting--07e71376-f224-4a6a-acec-08e2ab4671ad", "sighting--df58fe3a-61b9-4fce-8999-7c88febcadd1", "sighting--989d6d69-deb6-464c-880c-c4faa5a91aab", "sighting--48c62107-a0c3-458e-bbe4-103c3815b44c", "sighting--93c914b1-96c5-4a68-b44f-a7934d19b608", "sighting--51572990-2641-41ea-b8dc-39bfaa4fa11c", "sighting--2cc97eb9-365f-49c0-9323-06119f258369", "sighting--f7db3adc-c681-422d-b8bf-7353aba944db", "sighting--c9306f40-430e-4ef0-998b-b67760983806", "sighting--10f545b4-1d7a-408d-a6eb-32b6c64be4ed", "sighting--4cb45fd8-7a56-4854-b93f-c6b05ea75e09", "sighting--f3edc6be-ec3c-4007-910a-b7893a51b392", "sighting--12422b5a-0f84-44ce-97e1-0371e9f42854", "sighting--310040e6-0013-4e62-9d11-3bddef694d8a", "sighting--87a95d3e-a736-421d-8f86-3f68f158cdb9", "sighting--d7743c03-ff1d-476a-8bc3-aeec2e9eafb1", "sighting--100fa339-70a8-424b-b64f-7aecc75c323d", "sighting--0018db97-eb12-4ae3-b2eb-a56f41de54fb", "sighting--cde4dcde-c8d9-49d1-8226-cae476f3a16b", "sighting--3cd6a68a-9fa2-4c26-950e-881a14769344", "sighting--6f39ce73-191b-4fdf-9993-1970e47f919f", "sighting--97e00185-949b-444b-a55e-49109f1ef56d", "sighting--8f2240f2-c516-4df0-ad78-0fd31430b1f8", "sighting--bb0b6bde-8a0f-474c-8f7a-ab2e9d5564bf", "sighting--71546b27-994d-4066-9e26-16138952b229", "sighting--ddd29c8e-db1f-4d4b-a537-cada0a03ae61", "sighting--96e49231-23f6-4699-950c-6eea4672c091", "sighting--5b24ed56-0449-45d2-a55e-8816839eb16b", "sighting--00d121fa-fc78-4d8d-bb76-496997be899d", "sighting--3f6cfa9d-bb83-404a-9d44-9d68713e7df7", "sighting--a46b6dcf-1056-4e02-a2b5-6a1dbf68a424", "sighting--b9f78cf2-5f1d-4a83-a377-65be3848ecdf", "sighting--bce029db-bd67-46ac-9739-412aaad88867", "sighting--45fb10c4-0ad1-4f87-bb6f-7381983f6d89", "sighting--9f577267-a61e-4df1-86c0-b65440322705", "sighting--f6a11d50-6dbe-4e7c-b71c-f53c17ac1023", "sighting--5b6aa43e-ac6a-4d10-b628-6a445ba98b99", "sighting--cdcf2545-fdd8-4ebd-95df-6e165f1261d6", "sighting--bc990dbf-afb4-46b9-9afe-3f089eafb6f5", "sighting--1a67418c-40c7-4f93-91f3-922ae17cab70", "sighting--84908e0f-d229-4011-a2df-df814548d565", "sighting--e4e62bf2-59c1-4640-b6a0-d99c372b067b", "sighting--e8cdd27b-707f-475a-8f2e-40381fed6d67", "sighting--083998d4-9615-4474-b651-08cd42de99b5", "sighting--57901f5b-eb06-4130-911f-46fa9dce5893", "sighting--0c7f49ae-4a9c-4771-8b8b-1c1a2c483522", "sighting--60eea0bc-5d79-4256-85de-ecd07fe984c9", "sighting--23cf9d6e-a7f2-4b46-a773-65f255ef343b", "sighting--8aa51150-9a63-46da-b11a-8510c53eb143", "sighting--7892d6da-a7ca-43f5-b258-6bef5187eaa3", "sighting--bd74389d-34d8-4647-8f5f-b362665d5544", "sighting--be9d738c-7705-4648-a97a-ebb63e3e354c", "sighting--012b0081-6d13-47a4-aa68-0553d97da7c4", "sighting--6c5a1da2-c361-4374-ac21-43ed9856eb6d", "sighting--bad676e5-e5c5-4e76-85a6-e2329d4d5fa5", "sighting--fc750a24-8c12-485d-ba86-5ad8c9e0ac13", "sighting--c7d37f1a-5cd7-4e1b-bae6-70d396375a53", "sighting--0b6e1386-bdca-4a6e-9bd7-dd25972c67d1", "sighting--0479e667-3030-43df-8210-288ae9628f14", "sighting--33e3b02d-fc00-4bc0-94c8-510c7c9738d3", "sighting--f95395cc-b85a-40d8-a39a-4cd74ca4e309", "sighting--b26eaff8-89b5-4d4e-9a3b-50e9c8c383e2", "sighting--e19840f4-e1d8-44ed-b494-0838e6ad3e74", "sighting--6f8c3cf4-be09-4d6c-9822-62feb53ac0e6", "sighting--f9592fac-2bda-4507-9e5f-a322cf1d8a10", "sighting--440b14a9-cc44-458d-9c0f-8615ad655311", "sighting--f6b65cd7-522a-49a0-b5d5-fc39cd9cdc73", "sighting--92b45fb9-ed64-4f70-b3c9-d660ef5783ee", "sighting--6671ba71-727e-4fee-a4fe-17225c755107", "sighting--ebbeebf4-df17-4a04-8c10-0cd2a649e725", "sighting--b93b1c62-3580-46cb-ae9e-4f4da32713f1", "sighting--14402ad0-3755-4feb-8c7a-64cb3c8fdce3", "sighting--112cc30d-81bd-4234-831c-abe070098860", "sighting--b0f9acd2-62e8-4136-b1a5-2e9536358537", "sighting--ee558c08-2470-4f88-b331-3bd3ebf890f8", "sighting--e1c4ded6-9dad-40a9-bfda-a751e881f2c5", "sighting--d23b0ba6-27a9-4b15-9d87-c174c881b95a", "sighting--54ce70dc-830a-4780-a299-3b37a2ddc3d1", "sighting--76cbb042-e91a-401d-8a0c-2936ac7e7779", "sighting--7e402aa3-8eb9-4bf2-9e4c-fee3cd3fcd79", "sighting--1723de8a-3dd0-4462-a253-acf2832de79a", "sighting--5e42e263-ea86-4b69-9df1-f29ab0b8190d", "sighting--db713162-ee27-4d09-8017-428c8cf3958b", "sighting--090a7f8a-7d93-48ee-b0f8-5fd728d16059", "sighting--ba5d21bc-9d25-40a0-a9ed-62bede44f35b", "sighting--168f0db6-68df-4124-b4fb-9de0288d8efa", "sighting--5bdc23e1-1f69-4b64-b5fd-0cb9226c5ca8", "sighting--06bbecea-b34f-4e69-be09-e08b09afa64a", "sighting--8deae608-17a4-4911-92ce-23ef97717a8f", "sighting--b9ad031e-f157-49f9-bf83-9f2629dd8be6", "sighting--9447bb5b-d72d-4295-b36b-acf2d41e7af6", "sighting--2ded6328-24f3-4645-9b74-94c5d5f79de8", "sighting--14c37c45-18bd-4a08-89ba-1a5106c0c441", "sighting--4cab01d2-5bef-401d-898a-40143463a074", "sighting--29401ccf-2e83-4c3b-8d27-5b0f93ec8e79", "sighting--e5c68a63-326f-489a-93e4-1ead4533e47b", "sighting--e042c46f-ab26-4bce-b84c-6660636b5ff9", "sighting--c108189c-2563-4e99-9f36-12c1860b2e3d", "sighting--8dd79876-4413-47c4-8e55-1b67c3207d70", "sighting--75c4cddd-9024-4d76-b57a-94794568e60d", "sighting--daeeb595-24b5-4fa2-8a4f-e88f0bc49f43", "sighting--bfcdd387-9d09-4a45-9227-9f07c678b765", "sighting--f5957a8d-67f6-43a2-abc4-7521c763a3d8", "sighting--f3e9161f-dea8-4098-9105-07098af109a1", "sighting--d9fb4709-df9a-4a31-a74c-768077e13d6e", "sighting--3cc00730-52b6-4678-aef8-179af5a83ffb", "sighting--1112a186-d281-4664-87b1-f2ee26b34dd2", "sighting--0579c297-f026-4a16-8871-35e1f928168f", "sighting--ac1da7df-762d-47bc-b91b-4319f63d5e3c", "sighting--bea9f392-d74a-4ed3-9514-45689cc7f92e", "sighting--9c75de7a-9284-4df9-85df-295fbc6833ff", "sighting--e536b132-375d-4b69-899e-36dc3f74426e", "sighting--62d8c305-95e5-483b-b09d-c06d9f0401d2", "sighting--b0cf1ecb-5d03-4c0c-9595-9a672ae75a5c", "sighting--ec7ccfef-cd71-4e4f-8c3b-c4b7944f80f0", "sighting--04866aeb-5d28-4b0a-980a-552bd477645e", "sighting--30efbc99-37f3-48d8-8fd8-2e7780916367", "sighting--78e1f5ae-7f8d-4d6a-bc25-d6b13b9b2a91", "sighting--03a52dad-00b5-4aae-bfa5-7c1c174d2ded", "sighting--6666266b-d1cc-4219-9828-c155b0dae1a1", "sighting--358a069f-cd0e-449a-a2ed-6ff61459abc5", "sighting--4d735f69-593a-475c-9bf3-7ac5f8563689", "sighting--6512d8c0-1890-4e74-a7a3-755d669c8aed", "sighting--8147b9de-e3c1-4790-ba52-54e3feff2a36", "sighting--863506b8-139a-46f2-b9cd-44d0fd6d78bb", "sighting--4fe98a93-6778-44a7-9a22-d42387fb908c", "sighting--03ed5f26-8a0f-48b7-b1a0-6d7a58013619", "sighting--cdffe7a9-b711-4cca-bf3c-c5eb4b4c4da6", "sighting--dd0ccf76-8f51-482e-b9e8-681ce6b6f697", "sighting--6992057d-c80f-4b53-8fe0-7c89c21bb92e", "sighting--1e02df39-4c80-4015-bddc-143dee0d53bb", "sighting--2ea6712f-1ddd-4458-9826-002e71a6c310", "sighting--cba7222e-16f4-440a-b569-4c7ddd3591b9", "sighting--90622e57-4f3f-4a81-8ccd-5df9e3c2d023", "sighting--451cf9ef-fb47-4c62-a0f2-1040e0ec80d8", "sighting--89e34e16-0ce1-43df-bdc6-c157d131c779", "sighting--09ad0f16-afaf-46f8-9435-146eff2b7d65", "sighting--11fc4ece-b020-4f8f-9d03-77e42241d47b", "sighting--de746595-77db-4284-80aa-d2241089deb9", "sighting--7fb42c11-e4ee-4ac2-a789-733abe7f48e8", "sighting--f715234a-23de-4ba5-b59d-be75adfaa650", "sighting--e8b41bb6-7ea8-4297-8e3e-64ce440f6630", "sighting--3fab2103-1ba6-4043-8ed1-d0acf85f747b", "sighting--6ec667d6-c402-48d6-b6eb-a47c38e370d5", "sighting--1399bf93-4a1d-4bc8-9cdd-35553d9542c8", "sighting--c1194fc5-7d35-4326-9df4-d38f4d2f31cc", "sighting--5ea2cb87-fb4c-473e-aafd-9cfa16a88e93", "sighting--bbe9db2e-bc68-4324-8c29-4c9b7af0d21f", "sighting--fb50731c-c067-41bb-ab22-9858e6c8cda4", "sighting--276e86ef-fcf2-4944-a854-411b0dc19f5e", "sighting--d125ccdb-cc43-4828-abd9-72741f6c1a38", "sighting--729cadb5-78c7-41e6-bde6-00d8f7aae27d", "sighting--d5146ea2-c862-4cef-9620-a7359ac47c44", "sighting--5cd7d945-1e5b-4018-af67-c6b04d8ed47d", "sighting--bdeea256-0ca8-42f9-a6ee-962b343fee7e", "sighting--05268170-4eb0-468c-a5fb-87d81b599679", "sighting--bad8e3f4-c7b4-4700-8617-cd887b656e7e", "sighting--f701ed3c-4f82-45c5-b45f-9fe1caa371f2", "sighting--b94ea30c-428a-4f77-926c-c6c631334421", "sighting--709456dc-494a-47fd-8bbd-684b18e20395", "sighting--2b885e70-f6fe-4961-ac84-e9dedc20db1c", "sighting--eb170704-3d18-42c5-b843-400a93408c90", "sighting--99096b3c-5e02-4288-83d5-19b8f3a9f149", "sighting--5f70032e-8a07-4ea1-8e81-0b84110edd63", "sighting--70860b9e-f6f7-4206-9ae2-fbc9e9d463bf", "sighting--20ce1903-da61-407e-b7f9-1386e822ab34", "sighting--29439ca8-6cb5-4ca3-8af8-3a7ee2e2949e", "sighting--4859e8b2-8e1b-4bb0-9c8b-447774c1fd39", "sighting--fe4f49ee-d9da-4302-bb27-799e0be10a1c", "sighting--3a577d06-cae2-4d75-9bee-fa247d773d9b", "sighting--f23497be-83af-4e82-9fe8-c00e7ca68334", "sighting--ac3297de-41f8-4a97-97df-e796cf982ca1", "sighting--579dbf28-ec88-49b0-a856-6141101ee913", "sighting--fb82ad7b-c1e8-47ed-9577-7515584306ce", "sighting--bd41c79b-be93-4564-8cc1-d620a657d57f", "sighting--718d8ae3-4efb-45b6-8d02-c5b0dd249cf4", "sighting--77781fa3-ea19-4c57-b697-846adaa296f2", "sighting--1846d4b5-bae0-4187-ab0f-e8d0b9cb61b0", "sighting--21e65bc0-736a-414e-9da7-5c6eff8543a6", "sighting--f0ec60db-b0c2-40f2-abd9-59ec8bff027d", "sighting--b4618529-83ff-453e-9b05-f4dab2931e51", "sighting--d4848858-3cca-4322-906b-86f6ba2c6a2d", "sighting--2f4dfcf1-87e3-45f3-b248-e808a38e8b42", "sighting--1ca86ece-ccd7-48a3-ab6a-5a9b64ce0721", "sighting--b2637e4f-d130-43c1-a207-762a67e8237f", "sighting--3fdc2375-fe64-44e1-9b71-612b5fde0444", "sighting--03f6a39d-be76-4c04-9a31-932e93485e1c", "sighting--1b85ccfa-9e6e-4f15-bda2-78749c162386", "sighting--450357e0-b312-4f44-bd9f-a8f00257893e", "sighting--52a7549a-5850-4cb1-8dd0-f7dbb65a65b8", "sighting--c07d45b7-58bd-4664-8d38-971d4e909e2d", "sighting--40aa6540-7453-429d-a526-4d0ba5813ac2", "sighting--6b6a08ac-61d8-4bdf-95ab-ab55f29886f9", "sighting--ef0c967a-17fb-4ca3-b018-9da5264565af", "sighting--28555036-2d34-40ac-90b6-99ad8925ad00", "sighting--29537de4-fdde-43b5-befa-719fe76b69e3", "sighting--920470f4-5df5-4828-ae5a-6bae0aea1c80", "sighting--873b0b2a-ec01-454e-99e7-d0aa4bffbcbe", "sighting--0cf01c87-2999-4f74-9be3-aaedabfa976e", "sighting--09f6927c-6fae-42f7-b232-4e87914acebf", "sighting--fb3f5b81-64b9-4240-ae54-9f4af5b02ef8", "sighting--4ea0aa39-3065-4261-9936-cb6f518fc9c8", "sighting--6afc7d39-c1e3-4508-8679-7809a6456313", "sighting--6dbb8d02-8188-4231-911d-9c143d9bd386", "sighting--86299a47-f3cb-4bdf-a422-63a2b225fd07", "sighting--9612e567-f745-4485-a6a2-9590444a68da", "sighting--5096dd6d-dcde-4718-9d6e-9808f44ae598", "sighting--7f6fb7b0-7ab3-4bfd-8aa1-2f8ecd0c15fa", "sighting--02bd7f18-79bb-464d-bfd6-0219b329d30a", "sighting--688777a4-de0d-4117-b014-928cf5e044e1", "sighting--ed2ea03d-a397-44bf-83e7-05d10563dab1", "sighting--55c92971-5ac4-41e0-a36f-c2a8c4cd1d94", "sighting--cf76a43a-641b-40e4-af27-06885cb1a482", "sighting--157ef67c-c337-41a1-aa51-da49347441b0", "sighting--44052444-a2f8-47a8-839f-2d7917a6d9d2", "sighting--9c845a05-bee2-4b61-b664-38b54064717e", "sighting--da40d4e7-a17f-412e-aab6-6aaf33eef246", "sighting--23d20823-bb19-462e-8608-8051f7707e3a", "sighting--d0ccc9f1-7acb-4bd4-b0e4-68b0b73b08a5", "sighting--c14bb6ab-6039-4401-a60b-33442f7ea182", "sighting--8befcc59-3550-4604-ad0e-91471c41bb60", "sighting--462c0356-acf3-4b93-8232-2e2cad8c86c8", "sighting--ebe354a2-6681-4f5d-8898-728ef8b258df", "sighting--8caf4fce-d347-4f78-b94a-e5227c079c51", "sighting--298d113b-cd30-4969-a53f-a8e44ffd1f95", "sighting--6e5787d8-f0b7-43fc-a790-527b23991891", "sighting--dd17d295-52db-4e47-ab01-a2f955561783", "sighting--0a12d624-1d30-4fbd-b3db-a9b1b383ff97", "sighting--6a78fee8-91bb-469c-97be-7f18fdd9a207", "sighting--e842b85e-f247-4ebe-bdc5-f17b0494a212", "sighting--2b9927e6-c3cf-41c3-9d13-17cef81ac0cc", "sighting--4fa643be-3ef5-4d9d-967a-f93686dfea84", "sighting--25e3eae2-48dd-4aa2-b9c4-cf2479fb7848", "sighting--42ef057b-1d07-46e1-9ace-17cc39ff64d1", "sighting--70a9ff59-f52f-4032-aace-e658028455af", "sighting--2fd467e9-266f-465e-9f4f-c2c1362a9f63", "sighting--9e842292-c26b-4630-bbd9-ab23e02e3a60", "sighting--cbd1535c-4ad7-439a-88f6-e705e855fc4a", "sighting--b82c9682-1b42-44aa-ba55-52e7c5be34bc", "sighting--0b0225bb-2990-4cd9-90ac-76948080e7bb", "sighting--8c9f982b-2b08-403c-9288-78e51dcecc13", "sighting--bd2542f2-8302-41e9-be88-b5e3ce72a73b", "sighting--55b309a8-9bc9-4125-9755-340f035116f7", "sighting--f8f53de3-a20f-431a-8c9f-a6fdaeeca13c", "sighting--39a78eab-3a42-4f36-a6da-9ba99a910c82", "sighting--c02337a2-afee-4d78-9579-69b8489fed46", "sighting--99c041ab-f650-4f93-8135-3b3f377a09a3", "sighting--12fa1c04-2283-4efa-9cd2-c004278bf35a", "sighting--10c0a13f-0f8e-4e41-a025-9fa7255fe37a", "sighting--8fefb936-266a-4e6c-a1a0-5ff5e2312afd", "sighting--a7bf86d1-b994-4ba6-a193-4b0ec8f87ee6", "sighting--0b34bc93-d06d-4b99-948f-e67a348ba292", "sighting--ceaed815-0054-417a-841d-a04ec1b8a843", "sighting--a31160f5-c4ae-4cff-ac34-e135d6dc75c7", "sighting--6cc45aea-bd05-4d33-9fca-5f8850cf2b6c", "sighting--ac0725b6-ceb7-4d96-88f7-6215e983d79e", "sighting--cb206182-7059-461a-84d2-b798616db42b", "sighting--063050f8-8694-4f4c-9a35-1695b27ac1e8", "sighting--ecff84b7-ca37-4b2d-aeff-d17d1c7912fe", "sighting--2e26dce9-b03e-413c-b7e8-1d5598e7cb37", "sighting--3729f017-c22f-497c-961c-8a5ca6ab09e0", "sighting--51f62b8c-7877-438b-84cc-811ce2e68cd0", "sighting--2b3539fc-5c8b-41c1-8a8e-67078345781d", "sighting--a4afad42-a1fa-4814-8947-57e678351477", "sighting--be0c3ad2-46bd-446b-9ccd-9ef3e28a5113", "sighting--089e7c58-0ef9-498d-a517-0901abd70a33", "sighting--a97cba69-c4d0-4e08-9725-37789222f378", "sighting--8049862f-1ad6-4c2c-9117-2887be326088", "sighting--1e77abb8-1ec4-4ca9-844a-87d686220f35", "sighting--7f537f06-65f1-4971-bdc6-640324c0815f", "sighting--8fb48a78-4218-4874-9725-f6ad5edbcc51", "sighting--60d2c42b-4a90-4074-8941-365a73bd1ec2", "sighting--ad301f92-2ac9-4d3a-9b83-17a12d73e155", "sighting--09402481-7e22-4066-9064-092cce9be1b5", "sighting--a208f29c-dce5-4206-b86f-e0e6ee324dc9", "sighting--86b31877-d88e-4528-b8e4-79508c7acd93", "sighting--9dd42b95-628d-4c3d-ac70-036daeb57c9a", "sighting--28ec13af-67f7-45bd-81b5-0fb8298c238c", "sighting--15efe783-f428-402c-8a0b-80db4c1b310e", "sighting--19806f97-d30a-44b1-804a-3f1bfafde34f", "sighting--30ffb83c-2b0c-4666-b1c7-52408674d40d", "sighting--caa9286f-2932-4fa0-bdda-5708507380dc", "sighting--6cf78c4b-aec4-491d-b1b2-1275e6fea203", "sighting--1b36b9be-bcb5-43be-a18e-a2ce97a72ec5", "sighting--89472707-cf9e-4577-8aec-aee6f3bc38be", "sighting--4ad77696-d944-44d5-b5de-20b3c6d69a49", "sighting--c5151069-c4cf-47ff-acf0-12f5a5e95a29", "sighting--994279bc-5058-4d05-ad71-1274b3c72aaf", "sighting--75a57cd1-4ef3-45a9-94e4-51cd99760486", "sighting--36c611d0-0a1c-419e-9a83-aa145f6bb8a4", "sighting--3d63c757-890e-4662-a43d-13135a34d513", "sighting--9538f9d1-990f-49ba-91ed-638ee6bc7db0", "sighting--00ec691e-98cc-4b4d-9d17-79d18ea8b486", "sighting--f2880178-bb36-4363-aecd-4445e30782c6", "sighting--9ab3fe3c-0aa5-427e-b66f-10d179dec9b7", "sighting--107472ee-d14a-4806-9ee4-388779be7ccb", "sighting--4e8225a8-9f5d-4476-bc7a-16406de42a14", "sighting--b9e4451a-0a51-40c6-aeb7-2b10b957efae", "sighting--85157178-9e22-4873-934c-891842a6defe", "sighting--ab6e55a4-f09d-409b-8532-eb32c8a48963", "sighting--7cf02fb9-452a-44be-b84c-888041482be5", "sighting--500044d7-aac5-4a3b-a2c4-d73e7ee87b2c", "sighting--88d957bb-4369-43da-906d-17b5cb9d34e6", "sighting--8110d029-a882-4c07-a54e-580e382dd1dc", "sighting--8e9fbb2f-f35b-4533-b2f1-f042f91a5604", "sighting--9a7d039f-d3b5-4b76-b6d8-0bac4414d881", "sighting--7c4e0fc6-44de-4ce5-85e3-bc9353901f76", "sighting--ca60c59e-8ff3-4399-88cc-70f5283ade7f", "sighting--78c94583-a76b-4fa6-8c21-e0c144d8f702", "sighting--6372f971-efb8-4e17-94d9-84cd7cc733c4", "sighting--2b2ac125-12c3-42a3-a900-099b29a09835", "sighting--91e69b09-6114-4673-a4b2-49772c40489f", "sighting--745a3be7-c323-4239-a094-2265b23d0e22", "sighting--bcf6df6a-d478-4186-bb9f-5d4d445ea3cd", "sighting--5ac5954e-000b-44ae-bb30-eec5c826fbda", "sighting--defe7ac9-7538-4836-8026-8ebcb24ecbfd", "sighting--922a299b-4813-4879-8749-7e550139d14d", "sighting--6d589f38-ecf0-4166-9382-fe0421277bf5", "sighting--0ace7bb2-87b0-4c26-ae78-534b6c6821fc", "sighting--a8c14013-82e3-4f51-b573-bcd2c94bee35", "sighting--5fb8c55b-01b3-45aa-a81a-fe65d2249b3a", "sighting--faee73a1-a2c1-498c-86a6-52a5f08d5d80", "sighting--bd363f2f-0320-403d-b9e3-59940ba64bdc", "sighting--25c48f59-e806-4038-b6d9-39cb8a603984", "sighting--fd985179-b34d-4a48-809a-736dc22ba568", "sighting--424a540d-31d8-43c2-9056-f6b56d363f9b", "sighting--f212b140-1074-4fe7-9736-b9e8ca9f52a4", "sighting--5d837126-9daa-4fb1-8826-063a5692e6ea", "sighting--2ce3b2eb-038a-4d47-bd4a-0e2b56176fd4", "sighting--d4b44620-3df6-4dbb-ac8d-d928f369e262", "sighting--c886d681-0b43-4e47-8908-1848750afad0", "sighting--a4f2ccb4-e745-4be6-aa8f-447b11cad433", "sighting--83cdc32e-c643-496f-93a0-ac932f3e8ae8", "sighting--d20a43ab-1f8e-4043-a225-133ffa4740a5", "sighting--9dbca738-54a0-4850-93bd-d6f0aa4f737f", "sighting--354df7f9-c7f9-44a0-ab97-f88ad03ba96c", "sighting--664ba0c7-85e3-4019-a96d-26dbce5d95fe", "sighting--67004a3e-5d00-485c-8100-6f44c3f7a25a", "sighting--0ef221c8-0bdc-4321-bf0c-4ea1ed08e3c8", "sighting--5d8b658f-ca16-466a-8972-39bc7abbed7a", "sighting--93f6533e-963f-41a3-a985-b51cc32873cf", "sighting--fa77708b-0a38-4de7-aa3e-0bd32298089c", "sighting--b9529f55-2eb5-4965-b11a-1b02674d8486", "sighting--a32ef759-4b8d-43f2-ba7d-dcd74f4ed894", "sighting--34c2a944-e076-4fb1-ae8d-d9eb7c00327f", "sighting--38a9c06c-8d01-465f-b087-bd33e2ee54df", "sighting--18fc2768-ae66-425a-b283-904ca40d1633", "sighting--f57aa06b-d58c-4059-9414-98d1017fcdd9", "sighting--ddbea3a5-a6b0-4cb8-b439-654294f4075f", "sighting--55ccfbdc-e3ec-400f-a6eb-4fbb50a043cf", "sighting--782aa917-4811-4e56-812b-78b15618817a", "sighting--7a330f16-8242-41b1-beb9-acf5d7b38317", "sighting--140e7309-496e-481d-934c-359b8174668e", "sighting--4a8c0270-e5b1-4266-9b03-6209cc31c928", "sighting--a1deb9d9-4c02-4d62-b70f-36ebc881e757", "sighting--3984a319-b571-4ca5-b30f-0cd63e9e568c", "sighting--5beb552c-fb18-4a9b-b27a-37d3d1d6b1af", "sighting--50f47041-9db6-4f55-a4e1-46151fb713d2", "sighting--3b9238cf-f4be-4315-ab0f-1c4497ecf1fb", "sighting--0fa21448-9a15-4df7-99b7-dfd65ce2f4da", "sighting--1c5f3dd2-6e55-405c-bce8-1837461bacf2", "sighting--8ac0e5f1-10b9-4dd5-9ca3-9ea20d63fb0e", "sighting--d23f70aa-6295-4a1a-bd43-9667a1a9a5a0", "sighting--af5d9bc7-6b95-49bd-9b9f-d38f6d78c793", "sighting--d709a2b0-27c3-4a37-8a7c-3a21bc5e7c3f", "sighting--8dc6aaec-1f7a-4dd5-b5f9-5205ecfc380a", "sighting--eb499902-07ca-4233-8d1a-a0ea2eb1e8fa", "sighting--566efa31-ae33-47d9-8d18-b2d6f478422d", "sighting--c8875439-b478-498c-8328-0cab5de9e5bc", "sighting--56b55263-e4f0-4ea3-9d4c-caccfb56efdc", "sighting--3f174ed0-b05e-4379-b996-ee5884d3a59c", "sighting--a866c0ae-8aa2-4cb7-8365-09a44bc74bf4", "sighting--8b7270be-2949-4e0b-a7e8-aed8a6cd3e14", "sighting--25e56c53-8307-45a8-b6fa-77a0c51eb25a", "sighting--5178cd3e-300b-431c-87b8-26364dbee338", "sighting--d48e9812-b323-457d-8ec3-1072be8ad147", "sighting--3cffd279-f58a-49fb-9f5d-75f5806b24cd", "sighting--dcf63f4f-c9bc-4d07-94a5-38eb9533b85e", "sighting--14bf8467-d263-40b6-996a-cf0087a46700", "sighting--cbb1573b-b50f-4190-9891-8e305c0b0807", "sighting--fc94465a-3666-4805-b6e8-49438dcfb8c0", "sighting--b6a141eb-b486-492d-9865-4830f1405937", "sighting--b2d6c7f3-53fb-4abd-b16b-769bb570f68d", "sighting--951a3ee9-19d1-4873-8c63-3101bc369ddc", "sighting--056238ed-989e-403b-a8e8-070333e97198", "sighting--58066d80-294c-4194-ae86-cfe27370c261", "sighting--b9e9645b-f9fe-42bc-a326-d8489cdf3118", "sighting--7d2501af-5c50-4b5c-86fd-8ccb6a6cfd9e", "sighting--ff51ea2a-4e7b-4559-98c8-c3526ee33d81", "sighting--7613c0be-70fe-415f-9241-f8c1e83ce62b", "sighting--17eb8a31-ac44-4233-9edf-0bbfcc0b5baa", "sighting--ac237fc3-c1db-4070-a796-c27f61d6734c", "sighting--ce3fac05-bf54-4576-8506-296ab3c2e154", "sighting--675d45de-d759-4b66-b439-f0004806dffb", "sighting--18fe8837-b93f-470a-90d6-9d415dd22d93", "sighting--6dfce437-7602-405e-8837-8997efef608c", "sighting--69a7a455-56cc-44ac-b843-ebd64b617e0f", "sighting--543afdfa-2d31-461d-b926-6451fddb5187", "sighting--3e2e09df-28e1-4e54-90df-3c1d847abb04", "sighting--edaf837c-8bba-4bd8-b03c-6f9d491fb819", "sighting--081f19b8-654e-48e5-a965-972d37a864b7", "sighting--710e3296-aacd-4b0f-8442-3b45c3554028", "sighting--527e7b3d-4613-4385-ab60-af0fd1bb3cff", "sighting--66e915bc-49d0-4eef-b2c4-fdd0f9d5dc7f", "sighting--901c8764-3e6d-4210-a836-832dca35e988", "sighting--9804a7db-80ce-41c5-81cd-62f9b4949ee4", "sighting--a7db5721-181b-4cf6-83f0-30c7fa4f0d9c", "sighting--c88b5a4c-331d-49e2-8af2-aaa711a2c2ad", "sighting--a33d8527-7fce-4c77-b489-591771883056", "sighting--31e04b76-57bc-4467-88ae-61f84e9b272e", "sighting--e351a7ce-381b-4d06-a579-05f274dc1263", "sighting--66e748d1-dab3-49d2-a56a-e17582451aef", "sighting--b678b32e-e7be-4f63-a1ea-52103e9c4f71", "sighting--09d07ffa-0429-492b-abd5-8ab3cd79716a", "sighting--e8e331cf-5985-4ddb-b8f2-e408dc45db2c", "sighting--28a2c308-25b3-4fc2-9588-052aced9e950", "sighting--78efde0b-1c20-420d-95dc-cc73f230f483", "sighting--56f40505-6178-4280-84d5-c75a50a37382", "sighting--2b89c8bd-fd13-4d4f-9686-21e44b07d913", "sighting--0b335997-841c-4c3c-a1c6-4838ef8bb13a", "sighting--21da06a7-50a9-4de2-94ad-e38b2fe17d03", "sighting--0ec87520-a288-44b2-aa9f-44d19c0963f7", "sighting--36569ab1-718c-41ef-8505-c7bdea939251", "sighting--15c64471-5937-411c-87e9-c733b4685915", "sighting--56956e26-fd64-40e3-b6c5-ffe13eaf527b", "sighting--6dc56d53-c328-4b5c-8c59-74eec07c3111", "sighting--e7896cf0-e70e-4186-beaf-f6fd5312e6c6", "sighting--b7af6e8f-5206-4c5d-bfc1-48599373b73d", "sighting--dde52ab8-7019-4a0b-a100-d876b05d6d45", "sighting--75490d0a-7742-453f-85ab-0d71f14e4fb6", "sighting--bf6df8a1-743f-4d1b-8e0c-ad85447c6176", "sighting--d2eb854d-9f63-47e5-8b17-72ce2650db62", "sighting--6b2d79f7-0da9-4fcf-8d34-5d1c3c199712", "sighting--fc48198d-e322-45f3-b07a-f6c79f2bd59b", "sighting--0a8024b4-cd27-454e-bc41-9b7b24c8420d", "sighting--f21561ba-641c-4ebf-937d-1ec7e5dc3719", "sighting--a0b2be32-7fc3-4981-b47e-5f4b74aea077", "sighting--0e67bde1-9d39-4399-b0bd-6fa3c93d4fb7", "sighting--dc66f5db-19d0-4d3a-8746-b47b8563bbad", "sighting--61f30ea9-5181-46a4-843d-a846e3bb770e", "sighting--719bb3a7-285b-4f3a-9e99-bc66a026e67b", "sighting--f14bd71c-c25c-4466-96e8-30cf59c282a5", "sighting--ce4a3f61-10e7-47cf-9a6f-e27a1ea554f2", "sighting--51c95f7b-8ac2-470d-8ad1-197139867752", "sighting--f7eda553-5b90-492e-9ece-69f7dd89717a", "sighting--a22226cc-0563-41c3-88d4-1483d5fd8424", "sighting--850f8db0-dcc8-4d04-84d4-b77211e47e4e", "sighting--b4926ec7-9913-40d9-83de-50579b12fcf0", "sighting--2a1239af-ced7-4d09-96a3-6058e2f2b4b7", "sighting--848d9c14-de27-4add-aafb-ac417a8af2ff", "sighting--20130485-654e-47da-828b-b35dc313760e", "sighting--cb042704-2ac9-448a-b61a-3082f4d05df1", "sighting--2840c8b2-ac77-4ae1-be0a-80569becd896", "sighting--bb920f8d-c8eb-409d-b9b1-de8c9940893f", "sighting--cb60c03c-d4bb-410b-8412-f06edbdb7abe", "sighting--6df311dd-412c-40a8-8bee-6b913be2a28b", "sighting--478e0772-1115-4f07-bc92-0f93f0fca437", "sighting--a814b063-26e1-4f11-9818-58d574dad631", "sighting--4780ee07-6989-453e-bb34-6eb5e98cd1de", "sighting--cd70e683-f9a0-4863-a67f-062f20032a44", "sighting--a252cf51-c37f-4d47-bb55-2c560f680c1f", "sighting--dcd32b7b-eefb-4498-bd8b-c431e64af7bf", "sighting--7e472f87-e17d-419b-b226-d99440c2bc0d", "sighting--0f4937db-4d00-4520-a88f-7806160ea5b6", "sighting--ea3f5482-f8d4-40e2-bf32-404d101e8d47", "sighting--5fa8f457-f94a-408c-9973-aeefd477d0d0", "sighting--a54871a9-29a6-42aa-b457-111c14876285", "sighting--c17b54c7-47ef-4d43-918a-c809d6655475", "sighting--9d6c764e-89da-4000-9bfd-cdc47ae5bf07", "sighting--d5e12e88-6318-493d-99fa-df5377a2e0d7", "sighting--9fd8ab24-5c08-4862-ba16-ac061b92d83d", "sighting--563c5b66-28ca-4287-a9e1-e961c6df59a9", "sighting--52793857-73e7-4a17-a213-b76ba7a5fb53", "sighting--83d3305f-b75d-47ab-8bd5-83a1cd4dce7d", "sighting--d83d0235-8bfe-43d0-84da-7c7ead540bd0", "sighting--1eff34f9-20e9-4249-b85e-a5354305441e", "sighting--115fe3e1-aada-4aff-843b-581c13c910bb", "sighting--848cca0a-1004-488c-9af5-596003f38f34", "sighting--06ed14b4-7546-4a06-bf6c-3bdc2f6864da", "sighting--64e78983-31f2-4b15-ab5b-0a66635eb204", "sighting--1de7fa18-bd17-4339-8588-9546d76ee917", "sighting--da4da52b-ad9a-485c-be52-17c2212d82f6", "sighting--c1111425-b8f6-444e-baf1-3f49ab1a26df", "sighting--959900e1-dc5a-42e0-8cd7-6f5d579a0d60", "sighting--027bfd5a-6293-4680-98d4-aea4979d6664", "sighting--b77e8fdc-6bd9-4509-873b-d9a23f5a8636", "sighting--90e712dd-a9b4-4143-b8ae-dc29ebb60cb8", "sighting--c9344bfe-ec86-4e2f-badd-6292b9d1b3c3", "sighting--0fa037ce-d647-4d9c-8b1a-f7e18c6d843c", "sighting--172092c8-f586-49a5-8aa7-7750b9546134", "sighting--6aeb8d9c-25c6-4946-a97c-2f06bcf365c7", "sighting--9f5d2d6e-2c6c-4bc4-8a7d-5c0374a771e8", "sighting--857588eb-2ec6-4374-b209-54b1c523a45c", "sighting--9989a7c0-f1a7-4d81-8021-cc35dfdb99ff", "sighting--8eccb6a2-5bf2-4a95-a341-e78f1f44cdd4", "sighting--a7d93b76-696a-421a-a8af-47c124662def", "sighting--48a08fbf-175d-4356-8132-1e4a8936623c", "sighting--8e213063-9194-4b6c-aed8-451544ca9060", "sighting--3fe25107-c2f5-428f-ae6b-2155b2e9c43a", "sighting--ceef4c8e-9802-401e-8dc6-00efbdeb6d6f", "sighting--af0d62f1-ec6b-4b21-b3bf-779cd6dbdacc", "sighting--587d950d-6d1b-4d4d-bba7-42659bc61697", "sighting--fa948250-e2ae-44c2-93bc-c03da77427c6", "sighting--67615661-e352-4f75-b00b-18063320483c", "sighting--e67daccd-0fc4-407e-9e44-7b868679d957", "sighting--2e436e22-5f37-4e1a-b698-af67c0b4e066", "sighting--5c1bf798-ebf6-4748-9633-b03716cb7feb", "sighting--4ae43809-bbe6-4d25-bb75-a2dfa4690fdd", "sighting--c2c8eee1-aa9b-41c5-bea9-ffde43ea647d", "sighting--830a50d6-1016-4a82-b2be-ea73cb787b47", "sighting--d685b529-1c67-466e-abb7-321bc1ac1327", "sighting--20cdc6b4-3d5b-490c-8938-a7e62f029201", "sighting--534871cc-a9ae-4ef9-9a22-acef2270774c", "sighting--c43eed92-1848-404e-8ed3-73190304f516", "sighting--7720d215-88c8-4751-895b-4a561b5c542a", "sighting--ec2f8b8c-9d19-4a30-b7e0-98ae36ad0fd4", "sighting--5927b166-fce4-4c38-ab39-04783f79f62f", "sighting--cbb11ba2-ce8c-4818-95ca-3dc084a38cef", "sighting--50e7213d-6d9b-40cc-b9a7-5f4e1cb2329f", "sighting--f3667cca-9a74-491e-9382-7a7ed32d7ba0", "sighting--41e2bb72-757b-47c0-acf8-f0296837436a", "sighting--c6ded917-b4e2-479f-a94d-1e9ad0a9850f", "sighting--76112109-54ef-4247-87fe-ddd49470a4d7", "sighting--1f974f03-7eea-4b03-b536-41ac01fc37b6", "sighting--54601034-b5c5-4860-b38b-c6baa5e39190", "sighting--59cb53f9-af41-4438-8739-722747db784a", "sighting--6d2e407f-6d3a-4589-a164-3452c5afb755", "sighting--2267a84d-47bf-4204-853b-73c838b1cbbb", "sighting--a87b5554-1757-4247-bbf4-6930c1fbb1f1", "sighting--8aa23219-366e-44c3-bd39-a0ab37276933", "sighting--14ee41e5-f0a6-4070-8595-95823c262cd3", "sighting--7b2cd4c5-10b0-4415-b73c-6715b5780add", "sighting--d94d0215-e0ac-4245-9b5d-fe8bbf7b4a12", "sighting--9a612840-767e-4bee-bd11-c683a98e3edd", "sighting--d2cf05f5-69cd-47c0-94d5-4e7cd7352f7b", "sighting--c9aa7eec-b711-4c76-8578-b6e7b7a63327", "sighting--bdfb38e4-bd25-4e88-a220-17fa18f31dfb", "sighting--4c161194-ecaf-4309-a567-6fcea272161a", "sighting--8f0f43cc-6c18-4f12-940b-05f1f17fda49", "sighting--aebb5eb0-f15d-4d4d-8017-5d20d2e58ff3", "sighting--3446ab78-33cc-45e8-94ce-fd6d6fa9c4b9", "sighting--fa9e1027-ca78-4b6e-ac1e-01c642119a34", "sighting--e19de223-dea4-43d0-801a-bbec1268dbe7", "sighting--c943d484-7601-4580-af84-f16747833e4e", "sighting--14f4eda1-0bcf-4a9b-857a-aace9fdb3ef9", "sighting--8190233a-137d-462b-82d0-cb52625644c0", "sighting--9e97ecfe-923e-4656-86de-3a3950a6ed56", "sighting--0d210a19-ce64-4429-a102-cdf1f59bf6b8", "sighting--8371483b-7996-42bc-80cb-517f1e50ef0b", "sighting--33b78334-b7b6-4102-ae60-2e24d357c5a2", "sighting--ebcfd410-8675-4fa9-bd64-0b94080d6df8", "sighting--418f4b4b-729d-44de-86da-e125ed69f539", "sighting--7dd29110-7f27-4011-a743-d64084c9c74a", "sighting--f0fe12a4-567f-4179-964d-ddc8a91b32d4", "sighting--7b6a0c24-c0fd-4e23-a8ed-782cfe2e1b1a", "sighting--7f0b6bea-9ce2-4ba8-8c16-5331c5f754a9", "sighting--a9e7a766-73c3-4839-9a90-73e2e7bebd44", "sighting--d81fe4dc-46c0-426b-9fcd-00d4083e602d", "sighting--d7214ea0-b7a7-4dee-9d7c-6764229e3be4", "sighting--1a6aefa5-411d-4d22-8ef2-ece3cfce133a", "sighting--8ec4aa92-2110-4a06-ba95-5a29be44ae46", "sighting--7090c611-4e73-4b05-85a3-65977c7b3470", "sighting--2a47bc96-1d2a-4fa7-ad48-47dc4645d503", "sighting--351ef665-b050-44a5-98be-a5a564ed206d", "sighting--afc7b262-5f6c-41f0-8cff-03691b1c6b9f", "sighting--e31385ea-d1cf-43e8-9c00-022e0b17ed64", "sighting--c407ddb8-0bdf-437f-ba6e-f9d761c17c8d", "sighting--cc050685-ff78-4a5a-9892-169e13d9de93", "sighting--eb84f235-46f9-4446-8be8-ee817aac3fa6", "sighting--b5e4adb3-4421-4b54-97f7-2e71573c0351", "sighting--8cd14865-20ee-462a-852b-f0824878790d", "sighting--4249119b-13b2-4868-8376-304bc483ed72", "sighting--c1b9b9ac-ebb9-4850-a065-ac4a5e19677f", "sighting--23756ebd-47b5-42f5-a815-082ee0101060", "sighting--94849574-45ac-4871-8650-f179bc863f33", "sighting--94140c7a-580c-4743-9ee0-1804a61292d0", "sighting--6a19b9c5-5b2e-4073-9119-0052db8c509d", "sighting--e9c86fa3-134e-4b73-a15a-1b54ca17887f", "sighting--7428c713-d5c8-4f3b-8ecb-4437135de11c", "sighting--2dd17f1d-cbf5-49d8-8249-fddba12d7030", "sighting--7d6f6b5b-f3ff-4c0a-8caa-c534daeb32e4", "sighting--5969d0e9-2f49-47c1-9bab-4f95c7b0ec95", "sighting--cb31ebc9-7282-4a20-a7eb-47e16c4bff34", "sighting--98e3da17-d5c1-47fb-b7e4-6a4673909e27", "sighting--318cb36f-4558-4fa1-b05e-d686a3fc1487", "sighting--a56ea2b6-0931-449e-8594-db1754cd2a4b", "sighting--8c90a63a-6f11-4eb3-8f01-5039a2412121", "sighting--3f96ecd9-ad6c-4aaa-a122-653805ab048e", "sighting--72dee5a3-9288-4f23-9b6d-c81b7cb440b3", "sighting--3dbb29d3-6d40-46a2-a1c1-e2c135fc4ebc", "sighting--20d7e8ea-9096-40b8-880d-5b9230598ca7", "sighting--f9085243-1af1-432d-b74c-7474a68c8c6b", "sighting--f8a36d9a-9755-40e7-8419-2ea45ea26d15", "sighting--abb93fc0-1b1c-4e23-9035-fa034e066ce5", "sighting--46b42dbb-a015-4e07-b969-3040d165d242", "sighting--e8f5e62a-7ed2-49d7-8bda-32e8b3f1d023", "sighting--60200316-9f8a-4dc2-979b-b51dde69fa32", "sighting--040937ea-f13e-414c-a228-61a50d93605f", "sighting--41de2b34-f563-46dc-8e62-176b3b2c2e65", "sighting--dce3d4e1-3311-42bb-ba56-fd65541ce1f8", "sighting--8fc739e8-d5dd-4e43-a537-d5112a014e67", "sighting--99aa4c05-0461-4549-a4bd-76956d5b2a2f", "sighting--401588da-cd53-4b1c-acd0-5e4a2bc94dca", "sighting--cb1f2a0e-4722-4d3d-a85b-f2ed48d812cc", "sighting--5bafcd76-c4de-4dc8-90a2-71d3b7a3ff11", "sighting--f611e6c3-e3fc-4807-b4ab-9867fc2e2e69", "sighting--1c9ec357-de04-45d7-8de5-413aeb1e6b4f", "sighting--401ec9fa-4581-47d5-bb71-b765cbe50aa9", "sighting--ba61d2d4-02ce-41a1-af49-d4dba3ad3367", "sighting--44b709de-6fdd-4d85-b62d-a913febfec42", "sighting--7e419918-b609-4625-8dc7-926b2f8b9c71", "sighting--ffd4146e-9c52-47db-ba30-2558c812bd6a", "sighting--419367f8-7f41-4a15-bddf-3121d10f34c4", "sighting--6cb288fd-fe60-4981-acec-4251eaac28bb", "sighting--522de7bc-7978-46f5-9ab4-ed36d695796f", "sighting--6b08f099-9873-4a70-b722-0364da228408", "sighting--a1b3cfe9-21a8-4b00-b267-f567d35bbcfd", "sighting--a06c996f-0c7b-4c71-a744-2e4283fb16dc", "sighting--27f80965-b26a-4bad-b28d-19518df40666", "sighting--79792556-2c11-411f-b312-106c0f04b9a9", "sighting--6ba404a5-cff3-4137-9a8f-365a9ccaff2c", "sighting--c454c9ff-105e-4ad7-9a11-3ef09a18e186", "sighting--b1015f6e-dfd9-4352-bc6d-e10af53b95f4", "sighting--be7b46c4-7822-403f-8135-acf70089b59c", "sighting--6e173102-169f-4726-b953-4b669b734141", "sighting--4075a45c-c5ce-4eac-9723-9275743891c0", "sighting--34777775-5222-4d1e-872b-c39b9094f174", "sighting--dbc08618-ec46-472f-8219-5a9cd2ddae6b", "sighting--ec79c392-25ba-41d1-8ad6-d28895336c0c", "sighting--afb2ece4-58e3-4e5c-a164-571d9f44a474", "sighting--26e3d177-acb0-464b-9330-9eb5b895ac78", "sighting--63af5533-1970-4e53-825c-8a42d0506844", "sighting--c050ec4b-74b7-42e6-9161-8deb92e1adf6", "sighting--133cd4a7-7ae5-4ed4-b728-67ae17bf9b21", "sighting--5b75628b-a5a2-4d5d-b7b6-123babfb7f24", "sighting--c22bf628-39f2-4e42-ae4e-43c92fbda17e", "sighting--2fb5b0a2-8dbf-4864-bfad-505709811d78", "sighting--5b852c89-ecc9-4096-b11f-ed4645df4653", "sighting--76f50032-77b6-4df2-89a5-371f8cef98c4", "sighting--d9c54ed0-4de1-4b68-bd9b-bd151abda16c", "sighting--6df0a0d1-2995-49c8-bbef-0e9f8ed4db66", "sighting--0efe6cdc-7b10-4f41-982f-3f00e558fa9c", "sighting--57307345-ad9f-4a7e-ad68-0174f8aad947", "sighting--bb1f5f17-9cd3-4c69-9343-fb6f4ccf3234", "sighting--3fcd9f65-fe34-4070-8d3b-53d407105fd8", "sighting--586567e8-5c04-4029-95f4-e3a52e0516a3", "sighting--7b31b599-d765-45a9-8c6e-465540c5a4df", "sighting--f13fe949-aa03-4afe-9905-c78ce44a70ce", "sighting--e98f3ee4-629f-495b-9501-523c8f22199e", "sighting--930768f9-d3e8-41ca-a461-3e440b0f2a75", "sighting--bef9b372-a5d3-469f-ab56-ff55fc22dd27", "sighting--7629cf0f-9bc6-47ce-b485-474d9d6f2a51", "sighting--6cb75379-a464-4f94-b91c-e5881ebd7ddb", "sighting--4f23cfed-cb4e-4e77-9c35-e1c367263962", "sighting--3d33ab18-d7ee-453f-b4ee-d4d055e2efa6", "sighting--50bc5132-8ce0-4052-a323-cae268ee8783", "sighting--88eb3370-a15d-4f41-b3b8-ce77362dfe08", "sighting--0edbae30-82b5-4ffd-b49d-20681978c1cb", "sighting--94e938cb-0729-4dcb-9049-52367e1f22a9", "sighting--5d0c8f03-b349-4776-a837-19edb178b20c", "sighting--79dee48e-1310-4220-ab65-f2094b5d8e3b", "sighting--c2ab2609-f7b4-4315-8901-0648383cd440", "sighting--aa6317ce-f66f-45af-880a-c27e8b1d2128", "sighting--de20c545-468b-421a-a9d6-2aa24c4e0581", "sighting--b0cdd772-8b53-4bcb-8680-fb1573fcb48d", "sighting--115b8260-d66d-4b89-afba-b100ad8e43ec", "sighting--96222b4b-846d-4c65-bdb5-d2fa9cf8fdad", "sighting--df39609c-d830-4de4-a868-f89cb22d0584", "sighting--85131054-8c60-4c53-a209-15a704c82924", "sighting--288818b3-d519-452e-b8e1-9703ba0996d7", "sighting--01ba9c84-4167-4b39-a9a9-084688302b9f", "sighting--c967de5f-aa37-4083-a3b1-d5041db54dab", "sighting--bc4d23f3-9854-402b-af2f-314aa53802ef", "sighting--de88147d-c4cc-4f99-900b-3494b94a0650", "sighting--3ee317bb-4b8a-4855-9529-5aaf3440a6e1", "sighting--3aaf666f-70e7-4132-906b-c9d9fccec8b0", "sighting--a61cd0e0-fe75-45e8-814d-7b4cfeeea519", "sighting--962d149d-39e2-4c49-9285-61cbce85efac", "sighting--767e16ee-7568-46d0-8d1e-0bcd423f4946", "sighting--be6f3a02-4387-408a-8fec-20efff781d60", "sighting--5ca335ac-4fad-4b2b-a05d-9d1357d7cb7b", "sighting--d104001d-d305-4d65-808a-d419290d9587", "sighting--0e3772ab-e1ad-4dea-9d2c-f987bf6b0492", "sighting--97542322-5aef-4e21-a7b1-0bea6693ddcd", "sighting--6d9fef28-262c-45ee-b9e3-d250039a67cc", "sighting--3fa41555-e99b-4b79-b7cc-4b08416c9f20", "sighting--569cfea6-54cb-4541-8d2f-fa35b7a93f61", "sighting--04edbd48-423f-4444-a3d1-76cc1106e34c", "sighting--1941e3da-53e5-443e-a824-06d796444550", "sighting--87d182e0-a130-41db-a8a8-afa771b5f522", "sighting--7c6d0a31-bfbd-4cac-943d-f3aa7c566013", "sighting--1d53588b-ab9c-494f-adf0-0e30a4688926", "sighting--57a0b5fb-513c-46a1-84c4-4779c317bc70", "sighting--ff644f24-ec62-49ac-bf50-758ed74bb7d4", "sighting--4a52d565-abcb-4f01-9d55-f176ab3b29a3", "sighting--f8314f69-1310-4631-a89e-286307e8731a", "sighting--b699e987-f0ae-4c60-9b0c-d5f767a46f28", "sighting--8a907c72-c500-4051-b89c-3c7bd1a77886", "sighting--16552121-7499-485c-9f33-660621845edc", "sighting--3de340eb-20df-4b5d-b2f2-1335afb9a053", "sighting--ab632068-c7e3-46f2-a12b-81a1e6d53879", "sighting--89510f73-3321-4bea-971f-ab21442cebb7", "sighting--3c663b5f-310d-4efc-a736-4825511ac4e5", "sighting--427fc3a5-653d-494b-b0e6-4036f1641f5f", "sighting--61dab521-d06d-47eb-bb80-2c63c9111ab6", "sighting--2538319d-17ef-43b5-b850-9f1f493f8044", "sighting--ae1c2573-e3c4-4ca9-a32a-4c89336ef6f4", "sighting--16245328-ebeb-4828-8998-465d22f457ff", "sighting--b7d0d225-807c-4e7d-8f95-9ba536c7af6f", "sighting--9aeb9da1-2a16-4744-b11f-83d3d49aeee6", "sighting--8cac1894-7048-4d50-9030-fd81efd15457", "sighting--306868d0-2678-4975-bdf0-da7576a808c4", "sighting--2c79fc61-46d7-4df7-a37f-8138e64e6e20", "sighting--f8e6a313-f694-4a77-baca-669c77e479da", "sighting--f2d95c63-92a3-4bef-ad15-e6a5cba5118e", "sighting--71232e44-7e35-4aeb-bbfd-aacba940970f", "sighting--087801bf-8da1-43c5-a409-24e8850f0a3d", "sighting--0e4fdb4c-8a81-4654-a507-472034517346", "sighting--e5f52b7e-9e00-4b16-96b4-963d3dd90569", "sighting--41091b43-5bd1-4fe1-a147-3acd81cd5ffe", "sighting--387ce3bd-4fa1-47c2-87ea-afba5965c094", "sighting--518f75bb-69ee-4792-8e75-c107a006566c", "sighting--53d07844-8c1b-4d12-8954-c53740302ca2", "sighting--6af148dc-abeb-4736-9d57-b1f2649ccfc6", "sighting--20b12a86-7308-4216-9d33-152f54c36e19", "sighting--803b2570-dc47-4aa5-aab3-781658a9f2fa", "sighting--e301d961-b313-41fc-b7d8-d3508c664cc8", "sighting--f4628bd0-ddfa-4d23-a95e-2a1c15ea34e8", "sighting--d8152b6e-390f-4109-b21f-2b775ebe1fbd", "sighting--124c241c-63d9-4e50-a0f6-123811562f22", "sighting--795060cb-0103-4ead-b955-ad7e1e3574ad", "sighting--5e1734a3-4353-442d-a0e2-ec65c1eda8f3", "sighting--a9cefd49-a671-4f2d-86f1-abfb12ee3a5f", "sighting--a726f50a-b761-4874-9cfa-4c19b4ea38c9", "sighting--91d29a2b-7f70-4e66-961b-25d9ea214a6e", "sighting--4b1cd1b1-24ff-4ed1-80a8-d1c922acf50a", "sighting--ecc6d1d7-b410-4f1f-9a14-2782f8fda0e4", "sighting--68642b24-8e5e-4f28-a937-77ec479e66fb", "sighting--a6dc16d5-7b08-4671-a09a-bc4347657284", "sighting--d079f634-dd95-4647-9708-ea0e5f09215a", "sighting--81fa7209-48a9-49dd-b081-cf172dff00e3", "sighting--6921c66a-24c6-4a54-bd53-e1242433de8c", "sighting--a856e2dd-ea9c-4da9-8210-45bddb463361", "sighting--60f7699b-2739-46e3-b5c8-5f83d3759bdd", "sighting--839cc572-42d6-4e5e-b9e6-a132bd96d326", "sighting--c9fa3f59-e4fe-4fd5-a3d0-442c4d5c7962", "sighting--65a7fdbe-5da4-4662-bae8-73dbb9277893", "sighting--c3a46082-2e3f-4ae4-8546-031ad6353e6d", "sighting--d2b78b10-0561-4be5-af95-7c0e813e7b7b", "sighting--949c09c9-00ad-4e03-bdb3-8145c407d966", "sighting--fe44315a-7bb2-4f7b-a948-00d3938efc90", "sighting--56072c7c-e3d2-4cb1-b10f-5694dfea03e1", "sighting--efc1887d-8352-4b55-bc7d-6553c6824c6b", "sighting--3d74c207-5fcc-4136-b190-76ff70afa327", "sighting--e3fa6ba9-f0d9-491a-b185-dcc41eb46841", "sighting--7c40a8da-bf60-4c0e-a4d5-32d3ecc2d40e", "sighting--8e3f379c-fcc1-415b-9d6a-67341d17c538", "sighting--5047b444-a57a-42d0-90ba-a45e8729d979", "sighting--f143c2cd-3dfe-4df0-a87e-40a732406287", "sighting--ca89c2be-9db4-4965-90ad-be8a15c39f18", "sighting--c7a3d43e-0ab7-4755-aef8-815add9f695b", "sighting--94a3aedf-e7cd-494f-b5f1-8bfd95e97ddd", "sighting--862ced39-e2e9-4d1f-b4b0-3d1833686eb6", "sighting--8ed170a0-fe42-4755-bdc6-4dea8284a149", "sighting--bbea35dc-9ca4-4bf8-8e8f-1845b26ae338", "sighting--43a3a047-f2cd-4f78-902a-f925fc212adb", "sighting--93d4cdf8-b281-4bae-b416-0ca4b13c9f8c", "sighting--605d3a8f-2d23-43c5-97b0-db2ecfbb9b23", "sighting--27426f94-4d97-4157-9a2c-3c34c3227fb8", "sighting--b9afe3a7-92af-463f-addd-e0d4183271b5", "sighting--4430460b-05ac-4a51-ab39-f1e231cd9240", "sighting--0839d452-d655-473d-9902-7bf212ebfaa3", "sighting--5a179906-2fa9-4e7d-814e-bd0c85f425ac", "sighting--4750ca63-485f-43b2-9637-2a6717380c6a", "sighting--fa33b377-254e-46ec-8f2b-5348dd72d5e1", "sighting--70fd8558-c6b0-4c0f-b8e3-6cb2318391cc", "sighting--363099bc-850b-4d19-bf8b-360c9746023d", "sighting--4bedbe08-ab73-444f-8596-cb67015ec61f", "sighting--55c28ebf-c844-4ea9-a6a6-fcb491054571", "sighting--3e6b3100-05e9-47cc-80f4-5f7469c4dfc5", "sighting--98523cfb-fc80-4105-9811-d0854fe61cf9", "sighting--7b2d4d9d-2932-4e0f-9a06-a768faea7669", "sighting--c6afebbd-cb3a-4b32-81a9-c7d46b209380", "sighting--fd5dae44-8825-4cc0-958c-4441ad8f482b", "sighting--b2e53c22-04c1-4de2-bafb-4302be77004b", "sighting--728fc1c9-fd6f-4c86-8c18-01966f5b0355", "sighting--ca86fc81-c671-49f8-b6af-ea62c4b0f342", "sighting--5a4b2e5e-0404-46fa-b206-b21252e99d1b", "sighting--64fe5868-7c09-4d9c-8463-12b79bc5583a", "sighting--1ea72876-d2c8-4594-8e11-81a187216a69", "sighting--65820510-3109-4ed1-a981-2048dd131099", "sighting--30ef4b2e-5c86-42f1-953a-dfda9a769165", "sighting--f6c7bff8-b6dd-4dab-b047-2998dafc9197", "sighting--684daf7f-30aa-4b69-8ff3-d2a06adfc717", "sighting--0c537ccd-fd69-44eb-8e83-9e6c05aa0a50", "sighting--945b810e-1056-485c-aeab-a59d252ced2a", "sighting--5d0c1fd4-96a3-4240-909c-4d2c0ce5d506", "sighting--657c2dc5-b63e-4e86-85d3-38bd2ef78b45", "sighting--29fa527d-115b-4cbd-82d3-e2f1236dcf05", "sighting--def7374f-5f98-42be-8391-395f5c06a408", "sighting--3146e8c2-d2d3-4dbe-b23f-650068343e49", "sighting--12d86218-49a3-4e7f-812d-79cdca91ffd1", "sighting--4f48ae31-1593-4e8f-b9c6-45cd64d06255", "sighting--78cc5742-8a53-4c75-808c-58f9ed8531d4", "sighting--8836d96a-96e2-4bec-a07c-bd5b6f745d27", "sighting--0c3d31f6-ccd5-4dca-a17f-784967f75fd8", "sighting--68b51593-14f1-499d-b9e4-abdc77da633d", "sighting--08d006a1-daf4-4fea-a6cb-c3fd4020b02f", "sighting--3dbd7306-b270-4c74-8842-078113c48be4", "sighting--75d1425c-db25-4bcb-bc8d-ff0700e49a11", "sighting--cb0be1dd-1919-48cb-a26b-39deb1960d1c", "sighting--96ebe96f-b305-447e-9be5-9c6f7d757fe3", "sighting--580da2df-81bf-45ba-80d8-54cb7842c7b2", "sighting--8e2ba7d5-451a-4a10-a481-6c9613ad6dee", "sighting--84739ac1-5ed8-4e65-94b0-5ee4dec0c88f", "sighting--2a4ecce6-b80c-4626-8086-be8a07cd0590", "sighting--2c61d999-9fb8-4c9b-b826-526a1c4134f6", "sighting--eaa2c9f3-4951-40ac-8b76-e9baf334d31b", "sighting--16b610df-6e55-4c85-9973-f2924e887d3c", "sighting--0efdc494-24a9-4246-a4b4-0627d2e691e1", "sighting--8f046d4b-d52a-4c8f-8516-3c94e198436a", "sighting--064ef619-77b6-409c-85ba-6b9c3aead8fa", "sighting--ebfb71ba-240c-4875-836e-aaed30ec075d", "sighting--d6477edd-6886-4509-ab7d-4bb14371dbc5", "sighting--8728472b-54f1-42c1-9114-cf7495d450ff", "sighting--f2bd7ce4-9bd4-494d-8a4a-f452c8d28d35", "sighting--4751d009-947e-47a0-93ad-f1f254acbc9e", "sighting--79b65a9e-b40f-4919-accd-fe52496a01b7", "sighting--5bc404d9-aef1-44c7-a06e-57648193a90a", "sighting--29e9a81a-8989-4dbc-b02e-afbd669d34da", "sighting--9db58fe9-a581-417d-a7be-53bcaecec19b", "sighting--06205984-50b0-4ccc-a295-9eb98a4df04b", "sighting--06737d83-604c-4353-8e39-1bf961f4c724", "sighting--f760f30e-394d-42e0-b519-82b956c63ed9", "sighting--c641df61-3029-43f3-827c-161f6806c0ce", "sighting--6a6f54d1-ece4-4e86-89ac-1e67ff2fb41c", "sighting--12691b90-c368-4478-8803-734dc5e562c0", "sighting--9ffebcfa-58ae-4899-9ac1-b042aed5bdd1", "sighting--628698e9-7ee9-4bd5-8a88-efb36f55fbdd", "sighting--df20f0a6-9955-4a44-bfc3-8011a6f7ce9e", "sighting--bd6cf927-78a7-4c1e-bdc3-5d42e7c2e423", "sighting--0be826aa-1d04-4a58-84e2-755f61270f65", "sighting--73695f26-fd86-40ea-9228-3f1a94851794", "sighting--44274a6a-69f6-4504-8e58-801f35553e35", "sighting--f99327b8-4fb0-4c15-99a5-f48d653be5bf", "sighting--888106a3-d06f-4e6e-8d4f-53013c7f39a6", "sighting--bae96855-a2cf-41b6-9b82-6d47e0a54ce3", "sighting--2147adc8-506a-48d8-abe0-1d55a390b7ed", "sighting--ef59dee0-5c8a-4297-a686-71706da05900", "sighting--5eb1c33a-3ce1-4d0a-9d48-b7bd1b5192df", "sighting--68d525c2-43c1-44ef-9915-18921cfd6147", "sighting--f93b8e92-a743-47c0-bd50-f015b66b1ae8", "sighting--ecc9eda2-edfe-4651-9650-1d26580921a3", "sighting--a10735b6-8f72-4bc0-b970-8fafcffc690a", "sighting--eddc93b1-d36c-4a71-af62-1cd701cf96cb", "sighting--886b9f44-10c8-42e1-9c68-cc1effccdb26", "sighting--323b1b87-f943-4ff0-9eec-4e0e9172998b", "sighting--70fff724-2855-438f-881a-d6f854de0f8a", "sighting--f76583c3-d722-4625-befb-4502a6d42b8f", "sighting--8a1ff1a3-5a45-4f09-a272-96147901ea97", "sighting--02dbb978-15a4-4261-af4f-99e05efd4c00", "sighting--f30b20ea-08ce-49a6-acba-859c80de7755", "sighting--09e799fa-98bb-4c4a-a56d-28dd31e735fa", "sighting--ecae5f3e-6378-4dd0-a436-30dd8d4447eb", "sighting--d1afea0c-e691-4edc-81b0-4e5fe7f80c0e", "sighting--9486bf07-6564-4617-ac13-4ae23fe5cda8", "sighting--80bb09a1-88ef-45b1-b061-aa801618cc29", "sighting--37c09c9d-f45e-4c3b-b931-0d73608712e7", "sighting--a581a574-3fa7-416d-8235-6ac72a8bcd46", "sighting--6f9246ab-a65a-49a8-8b9b-c3ff4072baf8", "sighting--d706e613-9875-4baa-9496-c9af693d796f", "sighting--04b0b39c-af5f-4f64-a983-3162433a1c56", "sighting--2458c888-f18b-4928-98d8-09bce7a63e43", "sighting--e65fe956-2889-435b-815f-21d0cc053791", "sighting--d6707ca2-afe7-4e6c-8969-c5ba2218dc7f", "sighting--5a3e3baa-ce9a-466d-8267-c97d9372f975", "sighting--94d4afac-63f8-4aee-8aaf-73038dd65f97", "sighting--a1fff541-f4a0-4db8-8a6b-fe103033360b", "sighting--ed0fe253-071a-4b4c-9cc7-290c56246215", "sighting--c7bf4123-23e6-4bd1-9e15-3686a7e42f76", "sighting--cf22089c-793e-4e45-925d-3a0d6039a897", "sighting--70854eee-3ba9-4fa9-a333-de5126c46158", "sighting--4b24e58b-8366-4d5e-841e-ac1d3659da3a", "sighting--6158a864-231c-4e84-a84c-8258a2fde9dd", "sighting--ef3bf96c-4b0c-40e9-9fb0-2e6b2da38288", "sighting--a9b8b3c5-c7c0-441a-80c6-b53f1eb21357", "sighting--b590b094-9736-4821-9af3-9c48d789d816", "sighting--4dbc16ff-d2e2-4386-a308-9aac9c3dd82b", "sighting--65fa3ee1-cd10-4748-973c-8f70e3fb832d", "sighting--fbaff89e-9e2f-44ff-9072-a85c7af4297c", "sighting--ae4cca8e-b74c-44aa-8811-61075f948920", "sighting--976e647a-2924-41cb-a257-a9ed8e3a3fc5", "sighting--750c956c-6994-40bc-b8c6-f51858fd8abb", "sighting--c7081f14-6cb5-4a99-b873-fea2f1380638", "sighting--8477f81f-6bdc-44df-84f8-eb652872a0d8", "sighting--8d53af67-8233-4647-8487-b6d43c1875c9", "sighting--c71aac86-ee0f-4449-897c-4a29c61079f2", "sighting--02ff3a62-795d-4c3b-bc5a-2e91ba069d41", "sighting--98f3ea31-7e63-4e43-b3dc-ef88816b5a04", "sighting--85d7f7b4-bfdc-43a2-b0a7-5ac40448f520", "sighting--8aee50bb-9512-4ddb-977b-1b635b05d159", "sighting--08c85d5e-7239-4c45-ba64-a28f64836f32", "sighting--f4d0e1c4-0c85-42ef-b7a2-ddd6086f64db", "sighting--2c9656fa-8738-46c2-bf51-7884fa01c8a7", "sighting--96479526-c181-46d0-a622-7f786cdcfbae", "sighting--fea86107-f660-4cd4-850d-76381f3f48d5", "sighting--24e8960b-8200-44b4-9034-fd3fc109271f", "sighting--b77a2e43-8d28-48c1-bb47-54b4a085bda4", "sighting--c547f7df-27f4-4221-ad51-9b5336c5ed16", "sighting--1d565acb-8171-4754-80a4-4319f19b1ddb", "sighting--d0ad6253-4f00-4c38-b20b-1a92b7961af5", "sighting--b94bd016-fcad-4d02-a114-3d006744759d", "sighting--e3bf6857-c823-40b6-9a5e-f41fef6dd895", "sighting--213c5df5-51f1-4005-a1cd-43faaa499355", "sighting--c1361990-1d97-41a2-afb1-3db6d2576fb5", "sighting--433600ce-db1f-437a-973b-6404ea2a57d3", "sighting--288961d5-69fc-48c4-970e-ab52eddc2546", "sighting--69dfff49-c4fd-48e4-a461-0c2bdad9d581", "sighting--cd99d500-fe05-4c0a-aee2-97daaa637aaa", "sighting--9126134a-0e43-4c89-ae86-1ab71643761d", "sighting--2447a8f6-ec7e-40a1-9ea9-a75ec8283101", "sighting--4f20053a-631c-47a9-9c5c-c9616ca5cfdf", "sighting--1f03f85d-09f6-4500-b0fd-17e1db150f31", "sighting--4dbcf497-f17b-4f7c-b879-fb445c29891a", "sighting--fac2ad63-dd90-47e6-8907-ace0012efe1c", "sighting--6c1e54f3-8275-4550-9fb3-4f578e5ce492", "sighting--88236900-f7cc-48e4-b831-f7ea36912952", "sighting--fcd401d0-f19e-4758-9772-c00d1d50a5fb", "sighting--d6d6f2d3-82c8-44d3-8738-c31a5e7e934b", "sighting--b494918a-e411-4fc0-8bb0-f714eb841ab4", "sighting--3333129e-e778-4910-970e-607dafe4a8e8", "sighting--20343b2b-85af-4cfd-80e9-35d18a8f30d6", "sighting--5dc23d0c-e593-4b0b-bf40-3e44cf64fb7c", "sighting--10e992bf-6044-4ce0-b267-99101511834a", "sighting--59d64aad-3291-48e5-b1ee-ac901b12ea74", "sighting--04a10f5b-a147-4024-bc92-d38871431718", "sighting--48afc21c-f51f-4f77-b9ba-253075e693dc", "sighting--abe08c00-f14c-4a6b-9737-01c1b1bc9261", "sighting--dcf2e8bb-d833-4f6f-a326-1ca8d99ce465", "sighting--085bd756-6786-4119-9f4a-022c7b02f08e", "sighting--b07dfe1e-7a28-402d-aede-54bc3820a978", "sighting--09a6ad96-d19e-4b45-93cb-925c66d93ef0", "sighting--ddeb72be-6547-46a4-a907-93e3e30ec14c", "sighting--b6079ac7-5925-4406-b118-2b3619007016", "sighting--30d4af4d-0df2-48ff-98d0-6fe7957486ea", "sighting--6aafbb99-447c-485a-9e32-86b688f8c094", "sighting--fe5173c1-c092-4891-8131-366ac054b39f", "sighting--5676c7bb-626f-40fa-862a-29821498a846", "sighting--441366c3-8b34-4e9d-a19f-6844a295dec3", "sighting--b3d1b969-4887-40ef-8ee9-74d82aede56e", "sighting--a110b19f-91ab-452f-8f21-125eae6af086", "sighting--abc8627c-9b3d-4431-aa29-aefdceedefe1", "sighting--d61f8a03-61ac-496f-9891-4e67bda7f40a", "sighting--4d2594a7-1537-4336-99af-862c9a467721", "sighting--f3d2d8db-cfd7-4e52-933b-d6521090fbe8", "sighting--b0c836c1-88e8-4fa9-9010-186d16e35ddc", "sighting--fe1a7eb0-fd0a-4e2e-a4bd-3cc641f1dba1", "sighting--4c33f262-869b-4c08-a18c-33e8c4a78c7b", "sighting--1450a3a3-dca5-4c04-a8d2-6859b3bf110b", "sighting--2470e776-fcb9-4b77-92b1-6b6c6244abb3", "sighting--ce8bc0f0-0ccf-47a2-90c9-99b946ace8fc", "sighting--14a7a440-5947-45bf-a851-0dd268f8c13a", "sighting--1cae5e7f-df97-42cc-8646-6c71dcfd6b76", "sighting--23021e51-ecd9-40c4-b27b-34aaa0a01169", "sighting--8e6fc7b2-c6d4-46fc-9228-9f3ab7354930", "sighting--bc2b3261-764e-46f9-95bd-792aa9ed4135", "sighting--c8035f90-5b32-454f-94b3-0d780b1eeb17", "sighting--b6091e8d-5900-47b1-a23c-bb7027f908ec", "sighting--bccc4f2c-b888-476a-a23b-3d3637ccdd08", "sighting--d16593fe-8d34-4a80-a457-57ab64b808b2", "sighting--5e07b33d-2498-44a4-8ec5-fb57a173dcd9", "sighting--43644ba1-09d8-4c19-99f7-afb3a49fcf5f", "sighting--0d80a906-b3c0-4c66-a34d-5c27902f2039", "sighting--fbd46827-b564-4557-8dd4-39545840e6f0", "sighting--abe23520-5719-450b-baf0-2c8ba9def96e", "sighting--05bffebe-7f9c-4168-a7a0-832252568e3d", "sighting--281665d3-ff8f-40a4-a489-1d9e0861acc2", "sighting--e28f1a01-cf87-4b40-b4fc-ed8ef3242b7d", "sighting--5439b40b-05da-4abb-9ceb-3e41ae5089b1", "sighting--710abe76-7b9d-4343-8207-96eb4af6141e", "sighting--ff8287d3-1ef6-4e08-90ee-2590c7f60c05", "sighting--0cb7fed3-a1b8-4f8f-877c-e9cff958dd36", "sighting--1bacc08e-a988-43a3-bb47-6d962f94ac55", "sighting--8db4f350-07ff-4760-a1a9-216949e89361", "sighting--e0c8d0c0-958f-4c9d-8995-f77a23e09807", "sighting--b944da56-8c72-4d1e-99fc-e8a1497d4237", "sighting--6ebe2203-179a-4b6d-983c-3c649142158a", "sighting--a289db06-d282-4db1-8e04-db495581220c", "sighting--1fe43cf4-dbe8-453c-825c-a5daeec17e38", "sighting--512d5eaf-8c58-4ff3-a480-24063893577c", "sighting--3cc73dca-01d2-48f0-97cc-138c47ce1278", "sighting--9222107e-a099-4196-a3ed-e1bd84eb04b5", "sighting--3ddcef13-4ad1-4571-a5d9-0058c22d2be1", "sighting--1b1906fe-beee-4996-b775-d61d66d7994c", "sighting--6787e0ae-35c6-4a75-b859-5ba36bf677fd", "sighting--3e241422-113d-4e6c-a440-063180714526", "sighting--bd071522-7232-4008-986d-758799b58688", "sighting--a1aa585f-986a-4fcc-afc0-780fbf56c6e3", "sighting--8dd5dc3d-4ad2-4e6f-a633-e9d405302881", "sighting--9e49bfb2-08a6-4e26-8477-e33b326236cc", "sighting--f6562c20-de3a-4415-98b1-bd711b363eab", "sighting--a0817830-1ff0-4ccb-877b-32daa1867f13", "sighting--e215a6be-737f-4757-872a-8a52c2b9eacf", "sighting--1a63f8d9-5e3d-4ed2-b715-437904d9883d", "sighting--9f49c285-01d8-43b9-8fc2-f4f4bbac8874", "sighting--540dae00-096c-464f-ae09-4976f4dfa593", "sighting--12ea0111-ce18-4f40-a371-a8556cdf8b63", "sighting--836dc475-8605-4646-8620-d6701f328aaa", "sighting--c354391c-e0c4-4803-823e-6b1faf7fd05e", "sighting--34c88f3f-da26-40c6-acc7-de7e282dadd5", "sighting--010082db-1486-4667-96e7-fbe988b7eb6f", "sighting--46ed381a-8abc-4b25-a429-9d2029b7dd54", "sighting--018a70ac-3763-4fb0-beb5-1d3a85c4d4f8", "sighting--3a234807-dbc0-4666-bc30-a850218a7acc", "sighting--7e86d877-f774-43c5-8871-4c79d9c33371", "sighting--1cb7a29b-5d7f-4c77-bc1c-84a8d9e2996e", "sighting--ac0e17a9-8bb3-4ecc-a9b3-c714f3012cc3", "sighting--de22bb38-d12f-4d49-98ec-824b49b264a4", "sighting--4167cd9e-ed09-47f7-877f-5499a1e8ee5f", "sighting--32a57dc2-0042-4ac0-8c1e-f1a9f9af3eea", "sighting--fb66c1d6-9cd1-4cf7-b575-4d9b8429b93e", "sighting--bf49e20a-bedf-43b4-8fb6-008d703b5a28", "sighting--d588baa4-8b6d-49b4-82d8-ab1ca71d5f00", "sighting--240297c5-6bba-4ca0-ba6f-baee163600f8", "sighting--106ff208-4219-4c5a-af14-69649647588a", "sighting--d3828798-52db-40d6-ad1b-56ed4365c693", "sighting--077a5be3-9f5a-4a8b-ba6e-33de0812fe7b", "sighting--6dbea006-9b62-446c-87b2-fa8c8fe6fe43", "sighting--9332fbc8-e9eb-4011-9328-d78c8e99fddd", "sighting--a60dfad8-e7de-4e94-89bb-fbc662909caa", "sighting--bb9dde51-928b-4def-850c-6d7a2a816cd5", "sighting--2250602e-ec89-4508-8c05-b48dda47ce62", "sighting--b9795e26-0f48-4496-b307-14979cbc394e", "sighting--a9fa2c91-56a7-49ff-ad3f-5f1e5b8a7459", "sighting--9e5e4ab5-0d42-431e-a636-a11116625be3", "sighting--464750cd-d688-4a66-b283-ed94a4ca5c7b", "sighting--065e4c7d-6219-4dcf-b760-27df361e5da7", "sighting--d7e98197-239b-4340-946a-dab9a1a8bcda", "sighting--dee7879c-25db-4c75-9bd5-bdbc38a02565", "sighting--3d1cf6b8-4473-4b31-bc06-7ca319485309", "sighting--4d4f4cc8-2f9a-4f81-83fa-4ef89867bd3c", "sighting--2b3ccec1-557c-4c8b-9492-3013b5cc625f", "sighting--f8c7bc98-8938-4d42-a2f9-7b732bced900", "sighting--78455a89-9d07-4358-9896-5c13819e9a03", "sighting--afa6bd74-3c01-4762-8541-4bfc19a34f17", "sighting--43bcaec5-d62a-42d3-a17d-4520ad86bdb2", "sighting--9de97f75-7dea-4da4-9db9-9554d43b4f54", "sighting--6519d8e5-ccc6-4814-9746-b485d312ceff", "sighting--fdbb42ea-ef76-45a3-9e24-5f892da3c218", "sighting--50a91927-dad5-4dc6-8bd5-05dc05e71a69", "sighting--db95a822-d2b9-4562-b780-342720648203", "sighting--07b5ad8b-d706-4fa7-8695-6cd7084c3fe2", "sighting--ee32f0f0-e945-41cf-8844-9b621e6a1be1", "sighting--2537d004-0f27-4bd7-8b6d-538d8cfd2d4a", "sighting--2b1cf194-654c-47d3-91a1-08285a955207", "sighting--cdb295e3-772a-4c43-be05-b7fd80e2b373", "sighting--a60c5471-bf0b-438d-b7be-6209ee1a3814", "sighting--2902928a-7a1e-421e-82b3-925371d2fc99", "sighting--3ac38706-709e-4052-94e0-942d7380b219", "sighting--9812101b-3fd9-49b6-825c-d7ad4d9694d3", "sighting--ab70287b-46dc-46e1-a988-bbbde8390cfe", "sighting--01a87286-ca14-4349-be26-f1a838be73aa", "sighting--eca90764-07d5-4e24-bc20-50b9661bd9bc", "sighting--de1e2ba5-0043-4870-a275-6abd5dfa56ce", "sighting--6d0b39c7-69d4-430c-b76b-2e397d468210", "sighting--3f585852-6a26-4f9c-9818-907c7daeccf8", "sighting--1db2c9dc-df27-4d3c-a35e-28105f0002c5", "sighting--055644a1-a5aa-45be-9ee9-d65a3bc83245", "sighting--fbaf69dc-6f6c-4dcb-854d-183c13bea6c5", "sighting--44b97227-aba8-420d-abd0-3367145188d8", "sighting--60540370-f82c-4efe-8dfa-518ff7f6cb10", "sighting--52898ba6-febf-49dd-b00c-9ab5093c6566", "sighting--596d8e4c-14c4-4228-9779-f65dc2a99f10", "sighting--0559bca4-f6fc-4f11-a2fb-b9ff661f7557", "sighting--35043c87-d6f9-43cf-a65c-578c70276959", "sighting--6f2df383-9b56-4c97-be87-3c14002b1725", "sighting--7d6e5ee8-75cc-483a-b327-9d93bf40be7e", "sighting--e646d7c7-5492-48e1-9ce0-11c1627d7248", "sighting--f5a1f246-2afa-4f5d-aaf2-e78f8feb5b27", "sighting--6f1420bd-0cd1-4c10-93ab-4fc99d6042bc", "sighting--f889619b-28e8-495e-b0bf-fe58b6e6ccff", "sighting--e565b780-0daf-4b86-aa24-289bee633bb6", "sighting--ebe12b75-845c-4782-958c-99de32d2762f", "sighting--6680c299-ec84-44fc-939e-31fa3a39fb80", "sighting--ff0d56d0-c1ae-4862-b0fb-ce8e2d6371e9", "sighting--e0b65574-0a41-424d-9f71-67604b450aeb", "sighting--0f47ab52-4ea1-453e-81e1-6b50e363e641", "sighting--91c981f9-0518-48fc-9919-7a7b3b3f06dd", "sighting--824bffee-311f-456e-8354-22aab710f29a", "sighting--c9e515b8-f767-4747-82e5-dad7875e8080", "sighting--d26d8b96-f0ed-4866-962e-568e3809360a", "sighting--ced32e18-988b-4f5b-99d5-eae0fe93276f", "sighting--b90ac729-5f19-4b77-939e-988030f22f17", "sighting--b1f9c9c3-e517-413a-aceb-105c82b60074", "sighting--9ec424f5-7881-4714-a02d-19f7251853cf", "sighting--b94d8361-7176-4722-abca-3dcc7cbeaaf0", "sighting--42d47dd7-5e9c-4382-8a17-464b01de4156", "sighting--946c2902-f9d6-4edc-9f92-13aefc1908e2", "sighting--90b81802-eb81-40f9-b752-19137fb84403", "sighting--f6549991-f222-4111-9325-28cc4176c741", "sighting--47542ab2-031f-40df-a5a5-e5cd0e2ed1a6", "sighting--c48c0dfe-b897-4837-b3b5-4b203397a721", "sighting--f89eb348-5e11-4713-a555-31e377bc38d8", "sighting--a5cab828-825c-4621-a388-a8572569038c", "sighting--a6395b49-2785-4222-86cf-c13bf6f86fac", "sighting--013c4994-fa3b-4ae3-b5b8-18ed9f886b96", "sighting--184cf9a6-22f6-46eb-872b-7ac26444f42a", "sighting--edc64d06-9361-4dcc-8672-46e5d34b2e36", "sighting--05ce94f8-6113-4393-bdc4-8f28e65a33d5", "sighting--f43b5d6e-5268-4cbc-a4bf-6bd0138a5e8c", "sighting--14578db8-b38a-4707-9bb6-07b9a7b76a8d", "sighting--1370a35e-49e6-4dec-ad61-4b61f837f1d2", "sighting--0f88a53d-691d-49a5-9789-c9e0dde8992d", "sighting--5b1bc1a9-5c23-47b2-a8d7-b3afd96b3a79", "sighting--d3240dfb-580f-44ea-b97d-aeeec409edfb", "sighting--800cde62-ed82-485b-a803-fee17fd03202", "sighting--1c54d4a3-f791-4523-b4b4-9c92ad710ed4", "sighting--4b9a48e4-cda3-460d-8970-9715003d4c7f", "sighting--5968aafe-0a25-4706-af7e-210b92b89c1b", "sighting--77447fa8-c3d6-4407-bb0a-70eef6736b3f", "sighting--a12f7440-d0b3-4907-b829-4a6048f7bda2", "sighting--1ff56787-0063-4dbd-8db0-035828c6c2df", "sighting--a0b982e5-290d-4454-ae86-b30d886c42dc", "sighting--080434ad-8bc3-4808-9a2e-ed18d85fee4c", "sighting--4c2c505e-9fa3-4925-9f81-602a474b2c76", "sighting--9dff700b-f23f-4e50-8af0-222f77c34187", "sighting--09596da5-77e7-4e3d-a9f4-3759177c7272", "sighting--97cf5890-abcf-4db7-8668-ac3708039ac1", "sighting--d8da5f86-30b1-46d9-9345-b47f93fb5fe4", "sighting--1bcea94b-6a25-4f81-9481-5f5fa50e7513", "sighting--e0d0ad1c-e594-4939-8b3e-640058691248", "sighting--a296a919-0b97-44bd-8adb-37de3afa0575", "sighting--f27e02b8-b3c6-43c2-b9d2-17bc10f30744", "sighting--9f211289-1b75-4c4d-8e8b-3839cea6f5cd", "sighting--dc117a39-8a72-4568-ad8c-e2b9f319f42b", "sighting--a2ecf43a-20c1-4587-8273-b82f3c910b04", "sighting--99331404-ef7e-4ed1-ad32-8c25e2e476f6", "sighting--c6de9692-34c4-4946-966a-d001c4402185", "sighting--e8ced845-c2ec-4c11-9693-c85db6a34728", "sighting--36fd2dbd-0797-48d5-92c9-c36a9fae1dd2", "sighting--da620128-f45d-4235-8c8b-c0884695ac65", "sighting--bcb93647-b798-471b-84a4-cd1254be1fde", "sighting--747f6f32-2341-456b-b81d-ebe731de3527", "sighting--065ce716-6aa7-494a-87c4-ab305b854ebf", "sighting--bbc98f10-ef27-42ea-98c9-f533d9b21f4d", "sighting--b9ee456e-e971-4622-b19a-e34315bd2f42", "sighting--aead3788-29eb-4d96-87be-ef92bcf9677d", "sighting--a275f8b4-8c0d-4ff3-ba59-db97fbe2bab1", "sighting--d46e1e31-4562-48fb-afc3-762059ac6d24", "sighting--60b399c1-1e4e-478c-875a-7f485dbe4137", "sighting--84aeaf7c-d12e-47cc-a93b-4e048221ac56", "sighting--b69a8fa1-d7cc-43b1-903a-5a6965ed8489", "sighting--173ca1fe-b82e-4713-aedc-e7eaf7a93e1f", "sighting--ea6a40b7-77d6-4d72-8b05-925165ef73f0", "sighting--4f9d1554-93b2-492a-b6f4-44c51ec1437f", "sighting--d62f7f91-8ecb-4641-9d28-8c403ca61b65", "sighting--9a05da13-c405-4b94-8a83-71295c7f848e", "sighting--ea06795d-4cfc-4694-a121-71602a8d68eb", "sighting--13bf92dc-acc0-4c40-af26-efe39d7755b4", "sighting--048fa518-3954-402b-9a5c-36da0ef98b51", "sighting--5542f18b-c322-4118-98d6-3f94fee48835", "sighting--2714d1c3-6942-4222-beeb-33b61ef77df3", "sighting--bb3d734b-1f68-477b-afbc-537e87b8f234", "sighting--2b2c005c-7e18-471c-ae53-2241a7d36b39", "sighting--24fcbeed-d058-4fb5-8b61-6bd4964fb2e4", "sighting--8adf9058-0584-4d9d-bf37-9213aa1be45d", "sighting--c44cb8f4-a947-476c-ac9c-b87d348848be", "sighting--4c400872-898d-4535-bd8f-dec905d070d1", "sighting--1e8c54a8-74d6-4ced-9592-c84c30446850", "sighting--f50df0b5-d610-40a4-9456-8286fadf70ce", "sighting--f1f180ac-32db-4bda-b2fd-086c04694a59", "sighting--6ff685c7-160f-455a-9118-ef67f599a508", "sighting--2c949783-c5e9-4437-b8d7-9be94ee1d28f", "sighting--13fae502-a4f6-4e74-bed1-a2d2de797872", "sighting--094999ad-904d-4055-adb5-84a7b09c4632", "sighting--e235ccbc-8e76-40d1-af4d-d3fe05ce9657", "sighting--b72a847c-992a-49fd-82ba-055a6e9375e8", "sighting--cb74cf66-9514-4e04-8096-607312308ac2", "sighting--d7b798ca-9e3b-463e-a96f-324f9a949fe9", "sighting--fe4cc27c-e36b-406a-bbe4-11a650c85c8a", "sighting--756746f6-beba-46f7-9af1-d13c203cf88f", "sighting--af4ac2ed-203f-4bc7-86c8-b1df9c2c6aac", "sighting--f015fe7c-3b19-464e-a02d-3693f714fdac", "sighting--704e4e50-f9c4-4725-af48-0c8a79b7a80c", "sighting--c5093afe-4a78-4d8b-9073-e1053a983128", "sighting--a5c62f08-8d1b-4be8-ae1d-8d3aa98175c5", "sighting--987f0970-15a3-418a-ae10-23ff6e888746", "sighting--d074a3bc-4b5a-4c1f-b9a3-e1cbd73300f6", "sighting--d708ca59-630f-4d02-8678-e44428e9983f", "sighting--1d0d72f5-953f-42cb-aea6-1cb73b59b99d", "sighting--f139663f-7966-4316-b456-5b2e10f74ced", "sighting--162d71b4-47d3-4939-9ed7-8a0c8e05bf69", "sighting--ff23646c-a4b6-42a2-a9ac-c0c499de1f29", "sighting--dccf2ca5-4dd8-46de-88f3-14cfda182481", "sighting--0f5c8724-a619-4b3c-877f-326cdb763af5", "sighting--7b82c1fd-44f7-4f9c-b26f-b850fcd0f180", "sighting--ff953174-0cb2-40ed-8c50-e9e300abc786", "sighting--f095b637-9f87-45fc-8e0b-f0188deabb65", "sighting--062fd672-6735-4517-a4f7-28ba7608617f", "sighting--14b487a5-8a4f-4602-bedd-47337e74276a", "sighting--8aaf0f57-14a4-4463-9bee-dc4424feb697", "sighting--2b7ba615-cf84-40e0-bc09-34e0766bed28", "sighting--4eda0a39-0fb7-47f8-ac6d-340d8389f3a4", "sighting--88897031-f353-42b6-8916-fa59406609ed", "sighting--65bd007b-7621-4999-958e-0ba7cb1251b7", "sighting--541cdfc8-7233-48a1-89a0-f5fbfc94480a", "sighting--12b661b2-956e-4eaa-ac7c-6edeec91089f", "sighting--e5d253b4-f7b5-4064-b684-2f1e5fe264f1", "sighting--57628ae7-828f-4a53-9b67-2e9ca418317a", "sighting--c1662777-405a-4180-883a-a45995cbcb3d", "sighting--e7cc3676-d99c-4d02-97cf-d10fc9779bd8", "sighting--4a9323ac-a241-4a15-b2d7-8dfb254d4a39", "sighting--a3586c29-7b90-4137-9766-cd14342b0307", "sighting--f8410256-55bb-4307-a4fc-b69be0b0712c", "sighting--e987c708-c36d-45a7-b91c-20d46dd19137", "sighting--07562454-06e4-49c0-a4ec-e25acf50346f", "sighting--0e5a742c-3fe3-4d41-9935-201b0e498d87", "sighting--a89dd674-ca27-448e-8954-e98cf7b8399a", "sighting--b0578056-eed1-4dd0-9dec-843f966d1897", "sighting--4057cf09-7e75-4a9d-9a3c-a9875358f622", "sighting--243c43a6-17d3-4648-91be-61d7da3412ba", "sighting--291dbd9b-c257-440e-aee5-ddd93935c211", "sighting--46553290-9909-454e-9c4a-f7ec5b5358cb", "sighting--464e9db4-8cc4-4820-a14c-91f404f1e8e8", "sighting--55ae2ded-2e31-4667-8f1d-cf186677fd05", "sighting--bca31940-0176-4a6c-a06d-5aaa48682ecd", "sighting--7eac2aa9-5db5-4115-b614-7b94895ad337", "sighting--45abdd0a-c912-47c1-a9b4-d610a4e5a587", "sighting--9e6ba977-634d-4915-843a-e87952bd3888", "sighting--3b490dac-7a11-4a5b-b597-78e6971d4e88", "sighting--8cb641ba-5561-47a1-9702-4f4b89f75169", "sighting--63003703-b6a3-4419-b5ad-61f311ddb83b", "sighting--9c18c23c-eae9-4c85-aa69-ac6e279ff33e", "sighting--daaabe71-1ef5-4851-ad55-fd73c532531c", "sighting--ccebabe6-1833-4633-9d39-d6a4f7b99429", "sighting--c844a6f1-d06a-445b-8acd-9e77ba6194f1", "sighting--df36157d-259f-402c-989c-31755978572a", "sighting--736bb4c1-9b85-4e35-8ba5-016a0ce75914", "sighting--e6d18e6a-18e9-4826-9e29-f15d8a9a626d", "sighting--87e319b8-cbf4-4c05-8e5c-9db3787cbaf8", "sighting--41d8240c-fac8-4186-8e3f-965055e01e2e", "sighting--eb351204-b627-4a62-aa88-ddb5ec13be0e", "sighting--44d55533-8ac1-47e5-8b65-4ee7c97e3d7d", "sighting--4ef956c4-8abc-448b-bfd9-06c3e9455cd4", "sighting--a61e516d-6afc-47c4-abd9-9f5accb0ea68", "sighting--b40a3586-ee92-444b-9535-e7596ec05e25", "sighting--6e442646-675c-48fc-972d-c42d31bbbf40", "sighting--f5fb5421-002f-42ae-a09f-ea155b27b60e", "sighting--ddcf44b0-db7d-4669-acec-bd822e39c4ce", "sighting--a76f04ea-6e6e-4a89-8599-17d826873922", "sighting--ae36289d-9d1e-499b-82c4-0e48132a6a85", "sighting--6c67c3a1-1e7f-4d53-ae2e-3feef82c927e", "sighting--3b2d1433-677c-461e-a515-5342471b357a", "sighting--140d086a-58d2-4964-b219-d298c12840a1", "sighting--54d5da29-ea47-4356-99dc-c915481c5588", "sighting--c9a6d774-b844-41e4-88b6-218b8bc1c861", "sighting--c7cc48ea-2aec-476f-be12-41c5702cf49b", "sighting--05a5fddd-4b5e-4d95-8f78-4a13fb3016bb", "sighting--a97f1770-5c00-4614-842a-eff0902037d4", "sighting--cff86eb4-8116-4b92-ac0a-5328ef5a1e0f", "sighting--976584c3-beee-42b1-bd50-475b1e75132d", "sighting--9861d2b5-a7a4-4c98-bba1-c57a4ba67f14", "sighting--3c67e47a-5112-4a6d-bd27-22dd1dc22126", "sighting--9c338d7a-48e9-4322-b356-7daa5da87d63", "sighting--5d524bf5-d3b1-4033-84fd-60f20445d5da", "sighting--30d08d22-79aa-4e5f-84a0-2eb4839cb851", "sighting--ffdb63e4-4170-40a1-b591-f79c44ca85eb", "sighting--45936056-c542-4dc9-bf02-da5b90d352ad", "sighting--e548ab02-48ad-4a7d-877c-adf091c86b68", "sighting--e57d89a0-9d9e-455d-8820-4bad4c792f98", "sighting--bcf64736-d6a3-47c9-b4d6-f0fea5320969", "sighting--8263f6f3-a2f5-480a-9e5a-cadb4f7f73b0", "sighting--7541cbb6-c27c-454f-9581-d71bc47fe889", "sighting--e23f5418-41af-4f05-925e-c3d1b72f7132", "sighting--6bbfdffc-fb45-404c-9981-2cf8594b27c8", "sighting--341d9a3f-e2f4-4526-b522-03cd352100fe", "sighting--af6c2f27-a1bd-4909-835a-40442a355c54", "sighting--ed172207-c297-415d-98ec-e21f57ba2daf", "sighting--54e0a928-8159-4f46-9c3c-c079be04cbbc", "sighting--7abe1d91-a089-4907-9f7b-25a2d0d23646", "sighting--99c6e1fb-bbb1-45d2-b61e-1a19502ca7fe", "sighting--55ce9a2f-351a-4fe9-ab4a-d94ac6c9f3f8", "sighting--45622f9f-e229-4696-b8dc-f17f7c6edbe6", "sighting--3f7b1e68-f0c2-490a-87ed-135a3b6590a0", "sighting--0f2bebb6-d459-48f1-b8f1-722a7ce32d61", "sighting--b93132cf-7839-4705-ac0c-03ad12be9a1b", "sighting--8b855724-7a7d-463d-998b-4d0525a525f8", "sighting--6de154c3-ce0e-4b7e-a9d8-757fedda1e2c", "sighting--b436c0cb-8d76-4f64-ad0e-4746f60dfcb1", "sighting--6c34498d-9de5-45bd-a603-9739b408781b", "sighting--54b5f137-109b-4377-9b2c-0468f3397434", "sighting--7d22cc4b-c41c-4ec9-a64f-45dc60a8d1ff", "sighting--37483103-8c4e-491d-a136-10f38a1b8926", "sighting--c6dbbfa0-a5ca-48ea-a55d-8b1276030049", "sighting--5bc64181-3ccc-466f-a137-855797f03c9b", "sighting--923e0229-d9a5-4da5-8808-cde9acfc7acf", "sighting--7c90fd00-4a1f-47dd-83e9-bb760ecb54bd", "sighting--022fec38-dd3e-4202-be9f-e1ea5df87d80", "sighting--788850b1-583f-4dc1-bc46-9fe1139aba33", "sighting--e23c9960-f4cc-4db5-862c-f0a65b5d2e37", "sighting--e22ea397-830c-41d9-84ad-34d1e22403aa", "sighting--5d368aee-2747-4d77-8cf3-dda6c7bbd204", "sighting--1ded889a-acaa-4c3a-84f7-a73f7211e447", "sighting--429498e5-647f-4709-abbd-17b9691e6792", "sighting--94c05300-0ba2-402e-a224-161f5eb7238c", "sighting--853ae387-0480-4969-a73d-2c18e94f724a", "sighting--235f73f0-2fff-4adb-b420-5f44cca7e600", "sighting--f0ef2ddc-96b1-4e2c-b323-88357bf3b556", "sighting--c2a164fc-07e2-4544-b9ac-3a515339ee82", "sighting--a3493a87-4588-4479-b8ea-4844bd90914f", "sighting--97efbbc5-9fd8-4191-a2aa-f6df4b90e5a9", "sighting--b6f98709-7524-4392-98b9-801ff0d5a152", "sighting--22f081a8-b0ef-4310-b411-dd6d4c42b027", "sighting--dae319e7-64b7-4495-810b-d6503768c741", "sighting--052a8089-2947-4f5e-8ea2-b78b8417e48e", "sighting--49da7661-b489-48fc-818f-a902d7521600", "sighting--274ece68-bc6b-4e19-b987-771127e99f55", "sighting--b4fcec55-ea43-4109-ac5e-994c6ffb220f", "sighting--42e725bc-b0ac-4202-ae4a-1fbb649522da", "sighting--518da584-0852-4862-b421-0084fbc43144", "sighting--2fcb8ada-b35a-4b26-976e-1c9922b661fd", "sighting--b26e9b79-0c6b-470a-8638-41118fe35c50", "sighting--1bc032bc-5276-4962-b2d7-5c43717befcd", "sighting--f9e69d0d-49b6-4e00-b248-334e64e29f48", "sighting--f64bbedf-f13d-4dd4-806c-d75e0144262a", "sighting--e531743e-001a-496d-ae6c-b89ac3d5a8f3", "sighting--45657325-6c6e-49e8-8746-d4ebff7aea65", "sighting--f7a55508-fd9e-41bd-8476-962ecbffb1d7", "sighting--22b1669f-8eb2-4aca-98a2-2d400ea9398e", "sighting--12205c6c-9878-4058-b943-60ce4b714428", "sighting--f2d15c70-9e3a-45a9-b272-fc2096c8efc3", "sighting--15d387be-4a80-4267-867e-cce2bb2ab937", "sighting--0f78ab0a-a0b6-4a29-a3cb-147426b3055a", "sighting--898a9e43-2ea7-4cf7-9735-e9bcf21f7567", "sighting--e826642f-3537-4c82-bac6-dbd5c2c6d47f", "sighting--ae168792-3b47-4f69-916d-a8012fdeb425", "sighting--2250f7bb-13cb-4991-a7b7-b9e444c20dbf", "sighting--606ced35-c327-4ffa-986e-881f530e7315", "sighting--6acb2fc9-307f-478e-8ed7-0698186a7457", "sighting--afdd929a-f023-45d6-9ca0-04d9ff4335da", "sighting--f14ba8c6-0281-4698-bb37-36c2a551d3c0", "sighting--6a48465e-d67f-43cd-aa45-82997a3ee8ef", "sighting--a35aba69-5b56-4bad-830f-7ef32a6bf6c6", "sighting--8e1ce922-9581-40e6-af61-996c8da8b7e4", "sighting--3ea7044e-13ce-499c-ba28-03846508a0b2", "sighting--fa33ee72-0e69-48e9-bdac-5a2320bb6233", "sighting--27a82a45-7a34-4b75-8432-f6abb26de0d7", "sighting--b2ad6f69-ff3a-410c-a8d5-1a22620bbf7f", "sighting--bc6adfeb-ca6f-40bb-acdc-4c076d276f6e", "sighting--c933dbf8-8b2d-4491-9a96-ce28ed3e2f86", "sighting--1d72e0cf-173f-4001-ae4c-5c16ae9d1874", "sighting--ae2b9bd2-34b8-4ba6-a3df-13bcfcf08429", "sighting--910ceb63-c1c6-4039-82c2-021d9714a39c", "sighting--82a1f582-1f75-4936-ad25-cd5b62434404", "sighting--9095f6cf-7cdd-44d0-beed-5257dffd6a80", "sighting--9ec4d332-99f8-4ee1-a40c-54d029a8bf1c", "sighting--9937e1cf-bc39-4093-bb62-ea7bc7d74508", "sighting--b1e20ee2-2d32-40f5-b2e8-284287eb346b", "sighting--5ce9ead2-79ed-47dc-b408-65a4c8749d04", "sighting--22a61c4d-483b-479d-872a-67e5125dd4bf", "sighting--76a9745d-8402-4258-9bf3-4f62e49b65cc", "sighting--0618e656-4f26-42d7-b007-850fdd1bb2b6", "sighting--9fda6b62-a071-478d-9a9b-0f6cf124abb3", "sighting--9190347a-01b8-43a0-8af6-3727f885b928", "sighting--28483ef7-7037-43ba-abc8-e34da3158c48", "sighting--da998507-d0fb-4160-b3ad-2e3de4aa1f11", "sighting--e62b8761-05c7-410b-963b-60f107cca97d", "sighting--e0ae8202-a569-4789-a85d-3cb989943407", "sighting--6db59ece-5f0c-48be-81b7-4474045b541a", "sighting--fb2b256c-b652-4595-967a-9807ea1df757", "sighting--7ceb216a-af66-4783-b6af-56f0beb8984b", "sighting--896437f4-9eea-43ac-ae4f-18b2bc41e8ae", "sighting--b87020a1-84b3-4ae3-a5f9-1348d27c2641", "sighting--f5ca1903-72c7-4ec8-aadf-83f205102e52", "sighting--992bc5bf-2757-46fc-9e66-a18715445392", "sighting--e8f854bc-2ace-4b16-89ff-e89dbcce30aa", "sighting--2f42d82a-0a84-448f-9ef7-14f078904dd1", "sighting--008b8807-6fcc-4698-b1d6-ee8ef1c8c2e7", "sighting--68f3ef97-4bf7-423a-b2c0-ed105e9049cb", "sighting--420444e0-f33d-4ab1-9693-6bb1726c00d0", "sighting--45478e0d-65db-4f85-80cf-134200a97408", "sighting--c6d89077-01cd-4bc3-bb28-33af8f23ad2c", "sighting--01046eda-b33f-4071-8c3f-c0a9da2c932c", "sighting--da0ad24e-64a7-41de-94d0-5873652f93f3", "sighting--75e9ca16-8743-449f-8d85-158fcaaf80b6", "sighting--42ea6a3e-2430-4772-a7ef-62bd9dda47d6", "sighting--74b30cc9-3798-44ca-b4c1-4e58661c71c4", "sighting--4d6bf497-dac5-4987-aac0-adb19aa964b8", "sighting--df14b222-3707-4fda-9e94-ce034b13c480", "sighting--8d5ec27e-1f56-4e21-a724-165b179993a9", "sighting--959343f0-3813-4ab3-932a-816e195c6e46", "sighting--a1d5fd54-0872-439f-95cd-1b06252c7e66", "sighting--7bb9a0e8-acd5-4c15-b7c6-22dced246d53", "sighting--523c3959-1107-47b4-8fe3-420221422a1e", "sighting--a111c8ac-dcc7-4f58-8569-5b72cf79318c", "sighting--ee567b5d-9090-4b90-8caf-8f903542df0c", "sighting--05ee151e-28fc-4282-b52a-c93db1c9f1fb", "sighting--afc3937e-c054-4f48-a010-ad2672c6e56c", "sighting--6b60a2e5-8bad-45c6-9e1c-dc6a9eded169", "sighting--556fd9b2-5243-48e6-9ebc-1c590810f052", "sighting--52fdcd12-720c-45ff-bc1d-66e39118b469", "sighting--fcb595a3-fac9-4140-91f6-28bf600db15d", "sighting--48939a2c-1e3b-4dd2-a1b1-303bb536c11a", "sighting--f5bdd968-63e4-45b9-8abf-76bc4e1d17ea", "sighting--78baba10-95d9-42d7-b5b2-b1d651969101", "sighting--9d614d65-22be-4366-b1ea-149c9c2bf73f", "sighting--670969d0-baf5-4d8f-9d46-bbf83927dafb", "sighting--fa3c7f8e-640e-488b-ab04-472b0438e382", "sighting--4293f6ca-a4ee-451c-9c0f-74436473cc89", "sighting--a42acd03-8963-41d8-8012-5f998e3d2ca4", "sighting--5feb0853-8993-4651-88a5-5441f45fb72e", "sighting--764149dd-1616-418a-9846-9368a49feafa", "sighting--c512e704-08c7-4c48-8e78-746c015b11a4", "sighting--42fed183-4de0-4a06-aa89-0ebd2314f74f", "sighting--88e74818-6d30-4e26-a1e6-59912fb57d88", "sighting--dd3a6c9b-51b8-46bd-ad7e-18ab0b6bab38", "sighting--2d02ca62-39cc-4e9b-8cdb-2843220a2106", "sighting--78d0db18-47be-4642-8dc0-58cd73cf6a3b", "sighting--aea17aaf-a497-4526-9d90-82d246aa6fa9", "sighting--210f722e-2cc8-4ee4-a2bc-ebdbf065752c", "sighting--27c92842-c071-4bcc-86c8-704e3fdd943c", "sighting--8ed0ac33-3ea7-488b-ad3b-69aa90f5a3ea", "sighting--ab146e86-872d-44a1-acdc-8187803d1ac0", "sighting--af8a1d8b-702f-41ac-9c4b-6306d1694b40", "sighting--49d605e9-4336-4d3a-b6d4-557800389506", "sighting--4e3fcf3c-ab04-41fb-b3be-244dbd688b28", "sighting--92fa8d94-d735-46f8-bcf5-99edb0f41afe", "sighting--88782e29-c421-410e-af90-fc0c198bad5b", "sighting--cd042149-15f8-4340-bc65-e8b48b4ab0b9", "sighting--cbc17516-8aaa-44db-b911-2123a8520160", "sighting--f7519ae5-94cf-424f-8bdd-77aec740cba0", "sighting--4ee414f6-10b7-4c8a-81d7-85a74b51f29f", "sighting--46fe59b2-7c40-4cbd-9c71-5e3ab9233d2f", "sighting--66c8902e-1faf-42e1-9400-a43127be31f9", "sighting--34fd706b-7090-4f04-9592-6126b2e3799b", "sighting--f4bace32-9ab8-4670-997a-38ce5fce7de7", "sighting--97844af6-a34e-4b51-886a-4ff055028bee", "sighting--84fca364-b009-4930-b02b-dc994ee2ff21", "sighting--a5eafeca-6971-400b-b0a8-b7d1c22b310f", "sighting--adbcf8a6-1b4e-46dd-b116-53a02fc93a9f", "sighting--e231e789-cb91-43c7-bb0b-9fde91c39546", "sighting--5b8e837c-af97-4041-b0cd-68b373c24a01", "sighting--9448469a-6d14-4392-a9f3-4714cd796a3b", "sighting--8d512bdf-4e69-4492-b742-34c477d967f4", "sighting--3f61f33e-4c0d-44c5-a200-348fcc9d332d", "sighting--cc410285-ede9-4dbc-97f8-dfdcf98a330e", "sighting--1de01057-d92b-47a5-9c08-c7cc884f9ce5", "sighting--d4387ba6-618a-4d75-a431-535479150772", "sighting--9cbad38a-7d23-4c5d-9aed-8a654a337e05", "sighting--c90094b0-f0ad-49e6-87a4-c263bc8f6cfe", "sighting--acaaa31a-6b3b-4339-a960-d761850b5491", "sighting--3481afe7-470f-48dd-8648-8c92001fc27c", "sighting--d66089fb-ca56-4f0c-88ec-daf29c42e198", "sighting--28bf7605-cd20-4c25-adf4-9594d8cd7de9", "sighting--76807fcb-f94c-43d7-977d-cf39fe534066", "sighting--fb2cc896-84a2-409a-a04f-3111ae71b5a4", "sighting--7e8b907b-4fa0-4219-bb1c-2cfe48475956", "sighting--59a79ca9-585e-427a-91eb-deb6300efbeb", "sighting--78d61e4e-eeeb-43d3-b909-dde2f094ad07", "sighting--8ce39c3c-f92e-44a6-98c0-0f6ef1df935c", "sighting--7017c0d1-07cd-4ac6-af58-6e82468abed3", "sighting--299b4356-3c33-4b92-825a-8f7842a540e1", "sighting--36b607a8-7eed-4c44-a78d-3c965b19a6d7", "sighting--32cdb8e1-6622-49a2-a59e-58c5e20603ca", "sighting--144f6059-72a3-492d-9fe6-523226f69da3", "sighting--978d9d24-3aad-4cde-9547-931ff91641c9", "sighting--6ff87b92-4aba-4dd9-a9ad-46bf2857abf4", "sighting--e6a2d2ff-c61b-475e-84d8-84ab4d7fe698", "sighting--c6b3f441-2895-4a61-bfaf-de2b2eda3499", "sighting--2bd631aa-eee7-4523-bea3-083ebd37cf7e", "sighting--4c63c6ab-7cfa-443e-924f-261458c66c6e", "sighting--36fa6526-157c-4fef-93ea-59269437fe10", "sighting--a7b9cd89-3564-40f4-abbf-b728da652e9a", "sighting--87690c9f-34e5-4be1-885c-457f677a1496", "sighting--d2c3b891-4b8f-4a0f-91fd-4b93f8b941a3", "sighting--6ef1bf04-cc0c-409a-b874-edacd8254545", "sighting--d73c9e96-1d6d-4689-a332-3750234e7d5c", "sighting--2165e8f4-d1b7-4308-b4c9-c1557686b2e0", "sighting--6eddf174-3057-49f3-b77b-a9f605d8ec76", "sighting--b03b6475-51fd-4f25-9fb2-82d083520be3", "sighting--96770ff5-1135-41ab-86e5-20ef364933f3", "sighting--f031d79d-84af-41d4-a342-3e0db23cf478", "sighting--3f9f7171-1a8e-42e7-aa67-a22dabdeee5e", "sighting--de4b5769-5cec-4ff8-8564-e2adfd8a1f69", "sighting--70b3f8b0-14a2-4bf4-98b4-623b85f0965a", "sighting--3ca40bcf-7bc7-4493-8f00-3b146c179f29", "sighting--d7c17565-9bcf-43ce-bc7c-19a5dcee357c", "sighting--118c8184-fb88-4ede-96ad-8f9d166c8e37", "sighting--5cc60fd0-ae7d-4b2d-98f6-2de63b42c5af", "sighting--3cf403cc-5a03-49dc-9cc9-99c883933149", "sighting--92decdab-eb3f-4e6f-ba95-10d50acb225b", "sighting--2f6fc621-b138-4f39-9f3e-959a7e8af16a", "sighting--70bd6d06-ea83-4007-b37f-041c7d15f18d", "sighting--0d50b922-41d1-4fc0-af0f-472195af460f", "sighting--da07eeb7-5c21-4d8d-b41d-5a1ddd1d1688", "sighting--154dbddb-e568-4d3b-9be8-efbeec05663c", "sighting--a1d3ffb3-fb57-4f45-9154-f90546c1a975", "sighting--880a8262-dcc1-41a8-98d1-24d33f5b0fa8", "sighting--6fbf4a92-8a91-47f3-96fb-1f7e0aac5f69", "sighting--6d558d1e-ccf5-44bb-84cc-e681b4b03b37", "sighting--bdc42739-7381-4039-b718-54ae538f8d7c", "sighting--9cd9d2fa-8bc5-4f6b-8dad-d4db26a6658f", "sighting--22769a2f-3b37-421b-9559-64590bc80046", "sighting--cfeb1cbf-3f6f-4ac9-9ea6-ee41868954d3", "sighting--414b0c95-1881-4ef0-8ee3-3e78fedcaddf", "sighting--fd1b57f8-95ca-448c-a523-623389e20d4c", "sighting--2c73bf53-388d-4ddc-abd4-9c0d1b4a6893", "sighting--d0b39558-b7df-45ac-ad99-c053681aa32e", "sighting--64742c1b-87f8-4e05-8aca-e74b40ff9903", "sighting--c5df9875-7e7c-428f-bf32-6fc1d073c401", "sighting--a1d0373b-e529-4afe-8710-a571a8d1d412", "sighting--1a3082f4-28fb-4d7a-934e-3c4399a978aa", "sighting--2c0e70d9-2865-4187-aade-9d442fcba6e9", "sighting--74713381-0b2b-4b0b-a5e6-d7d22e4b46e4", "sighting--0c6946fb-8f68-4df7-9390-eb8cf038a1fa", "sighting--d34a053a-91a6-4821-9d74-4b834853ce45", "sighting--6300b3d2-12f1-4f1b-95c9-c75bbceb0183", "sighting--0777a2c1-9d44-4dbe-b567-a9b8399529cb", "sighting--0caf66db-e84f-491a-84d8-266ead25be5e", "sighting--aad0f21b-3aa7-4591-8a27-399bc705d894", "sighting--3c003e72-a489-474a-ad70-39f6ea2b803d", "sighting--e32bc271-b341-43dc-8641-885473263c4d", "sighting--9c99f178-b3c0-40a3-99ca-c7c9858c2fe5", "sighting--5890c3e4-3bd5-4ead-8a3a-f4a287fe544b", "sighting--c780e74b-0d25-49c5-b2f2-4ab953426fcc", "sighting--e98eeb12-2d0a-4bce-bc59-6602a793e845", "sighting--1189c015-52b2-48e4-87ad-2e6f8cfa9815", "sighting--428d8427-900a-4714-95d7-4dfa5f702fe1", "sighting--27d5ce8c-f708-4db1-975b-3fd5dd795edd", "sighting--9a21d8cf-6f89-4eec-9aa1-80152ba9b4a5", "sighting--494a8e51-2fe0-4d96-984f-10d43ff40676", "sighting--e7b9082c-869d-4a7a-93fe-cb9a521abc54", "sighting--42f5ec2e-b78f-49bb-b3b1-6c7f85f7e35c", "sighting--39f3db3e-ad26-42fb-aca1-efa75a5bce4d", "sighting--7969ff36-648a-4e4f-b1be-30c1c641e658", "sighting--3d253ce8-da9e-45d2-9082-f3527d6fedc6", "sighting--22bcda45-7c1f-4d23-aea9-bf1548713ecc", "sighting--e63d9797-f3a4-4991-bc1c-f25bdab69898", "sighting--07b7ec83-0cc0-4450-b6c8-18f1cc3c49aa", "sighting--ebe92759-472a-4931-b656-6eadde33af73", "sighting--63ce99f2-6afa-4ff3-ae69-c0e36b0cb928", "sighting--1f595b7d-a3c8-4d77-880d-3c1769a02fb3", "sighting--4698d9c5-8499-4094-8b8c-db8b22f32f43", "sighting--a63a23b5-05d5-4b9f-a8e9-154d7eace4ac", "sighting--7f618069-6e20-4194-909f-9285a47cbdca", "sighting--28293646-4335-478d-85c5-9bfd47d06ff3", "sighting--866eb0ec-108d-4081-b9d7-9e8e949cc034", "sighting--ef154ebe-45dd-484f-a6b5-c2c1e1e96c32", "sighting--ed273d0e-4db6-4c41-bd9f-07856c8b6c88", "sighting--5c7c4084-61fd-4a13-8cfa-6ed509d7667d", "sighting--66fd8d34-4988-4144-a25f-935dd154a9f2", "sighting--3b72e50a-8ef3-4958-9980-0faf3d545e92", "sighting--eb326ae9-8998-4a8a-873e-15a78b12a1cf", "sighting--69dfcaef-3c54-458d-af84-2248ae1f2296", "sighting--3909c76f-1a0f-4bcd-a444-4fd171146a75", "sighting--ec265608-6b01-45b6-9671-f551bce7a188", "sighting--f68c6407-a021-452c-b79b-2041f39be8df", "sighting--41ae3a27-a64a-4f77-9e07-66dfb533b2ad", "sighting--c9a9cf04-f411-4bef-9745-f5060feb2b9e", "sighting--0b613308-400f-449a-8aba-a49fc50ede75", "sighting--a178072a-2265-4a2b-8be1-b217f1f535a9", "sighting--274a032b-a2dd-4173-9cb8-70fb5db4e317", "sighting--471e1f02-52e8-478c-930c-b47a14ddad9b", "sighting--a276a084-f407-4b9d-a4d0-6c83173d0e06", "sighting--400f43c2-13ec-4cb9-a389-6b2dc4158468", "sighting--46375bc1-af53-430b-a533-a24bdbf0f8b8", "sighting--bc5fb043-bbf2-4917-92fb-053283da22bb", "sighting--f5482ba6-2863-4ca1-8c2e-b4fa57a16989", "sighting--66fd9220-5b55-405e-ae8d-b8633957f669", "sighting--b39654e8-6e6b-4e24-8dbf-fa8248da9e0c", "sighting--b4ff1027-60f7-47bf-9679-de4342e1c961", "sighting--1e6fd576-d890-43f2-965c-16a1791b1913", "sighting--bfb2bc09-9c36-4472-882c-e58db5250671", "sighting--0b4e5f39-6951-441e-89f5-c182dfad800f", "sighting--fd59ee8f-dffe-4332-9953-da4f2765fd1a", "sighting--62a4c106-eebb-462d-ac22-0831d5389662", "sighting--2f0e7e05-fd43-4b78-9df4-0c62289c40a9", "sighting--96f94018-c418-4d25-aabe-8cbc8c67e18e", "sighting--3c520e8a-ec9c-4386-9116-e83384436a2f", "sighting--bb634194-ffa6-4caf-971c-936850257d6f", "sighting--af13b688-c8e4-4d68-a16b-42fa5588be46", "sighting--6c214bfd-ef51-454e-9a34-8e4ff66a64c1", "sighting--69196911-96f0-492a-be1d-6a82282c3e7e", "sighting--bd542581-9972-4d09-9eda-6d535b1fe2ab", "sighting--fadd9a54-bdae-4e3e-91a1-d954222825d7", "sighting--bb96c5b4-db34-47ce-a4db-4e3e3013b544", "sighting--bd234800-4986-4e60-ab8e-ab6dc652ff33", "sighting--be44a19a-06d7-4408-83ad-5f32e2da9977", "sighting--cf13cdf5-8fd0-46a5-bf81-ca19177f9e79", "sighting--3d688017-3466-49e8-a314-b393dde8ab0a", "sighting--f2f90301-6b7b-4352-b2b4-a883eb509c1d", "sighting--8a0ff089-bb31-46b3-bd32-fb1a2a2bb7e3", "sighting--551576e4-4188-40df-aa5b-950b15c5757e", "sighting--463d66e4-bbe1-4754-9b58-9e4ec98fff32", "sighting--7ad17ce3-7a55-4a98-9f8a-4b87a052a2ab", "sighting--851d7667-5ee8-40f9-8724-b8a5e3ea47b4", "sighting--84490529-489c-4eca-aeda-a6111c8daad2", "sighting--2bdf5d15-a1ff-446f-9d47-3aafbc3a9d66", "sighting--4a3049f5-9a0b-42c1-b177-08658204a7af", "sighting--3fcc8016-4307-4847-a8f0-91b7152519c9", "sighting--39017775-b412-46ac-be4d-194f186d8744", "sighting--8fcaacc6-2c65-4cc5-bf7f-bf44c6ee6aeb", "sighting--09bce7b9-ef50-43eb-9133-87fc5bf63ac3", "sighting--f768abdc-7295-4cf7-925f-579f8d6d0fc5", "sighting--6d897bf8-2ced-4544-952f-7ab4ba2080b7", "sighting--7a8679f6-a502-4deb-b8fd-38b0df4cdb4b", "sighting--430ed71f-3c5d-4df2-a8b3-b6a2df35a0f8", "sighting--8b1aea99-f9ba-4555-be7f-bf713cadd145", "sighting--e2908d6e-2f2e-4322-b24f-1bb29d10f27f", "sighting--9c753318-bc58-4d7d-81aa-a485767ade6b", "sighting--a5ef4913-a58b-4d03-8cd5-4ab627c53ebe", "sighting--a5116f4a-210c-431d-a733-1c66ec1a820d", "sighting--55a10199-47ea-48a9-920a-e4c290a20162", "sighting--b30f830b-0ae5-47cc-af7e-c43d8545ed01", "sighting--c9267e26-7a8e-4eb2-a261-6a00a7d61557", "sighting--85711a89-0b4a-4dd2-821c-391f2beeaee3", "sighting--88914eee-04df-40d0-9c54-631cc02367d4", "sighting--a8d407b8-eb93-4da1-9e61-4a9deb7f85b9", "sighting--e6602313-0195-4ce7-bb2d-8cebad75ad83", "sighting--ac580ee2-5824-4d14-b60b-d2efcc576067", "sighting--0484c435-e603-4523-8d3e-5220071bb9ef", "sighting--539854a1-0acd-4cc1-a459-0318a2b30986", "sighting--52d8ef4d-7fcd-4f14-a819-1d8abdf61f1a", "sighting--f725c363-685a-4e8f-b1d0-3c65249f8eb2", "sighting--49c3f90d-9f6a-439a-b515-83b5b428801e", "sighting--434a4871-923d-4c69-b171-53df2db59995", "sighting--27f9944e-b642-4514-a614-b5eacaaab880", "sighting--eb5525a8-89f7-4c7e-9aaa-99b0fb7df2ba", "sighting--247828de-c7c6-413b-87d2-111755d2cb2f", "sighting--a4fcdb91-34d1-4422-b8f7-8d9101c148be", "sighting--14cc34a5-b824-43bf-946b-d21cbb1c9178", "sighting--728ecc79-c913-4b51-bfde-6a8d2a09cac6", "sighting--abbeb205-3892-4320-89d4-9b3730440410", "sighting--bb7af205-02b3-4bfb-ba4f-6781c31f00a0", "sighting--ec92dbae-995f-456c-b298-059928c4b948", "sighting--c75f89a2-c030-461f-bee9-b3b9ea008a1a", "sighting--ce941672-e1b7-499e-9150-7c5af48272f0", "sighting--2ca3b903-cb90-421c-91e7-a07289f89fd5", "sighting--eeecb34b-2307-4c8a-b2ef-b8a1880350c3", "sighting--223b60d3-284c-4e10-bbc7-efa4a83debd5", "sighting--4e389fae-286f-4481-bd4d-a0aca06a619d", "sighting--b1139dc4-f597-46c3-b47c-854d6d087aa1", "sighting--70a87b6a-2748-4fca-a579-458625e7a359", "sighting--766b9d15-cc52-4be3-bee3-5a7b6a026287", "sighting--26a90453-da6f-4d83-aac5-5e31ea1e5b52", "sighting--df56c068-c884-43c4-a6b6-69b443dbdf19", "sighting--3e53b0a8-ab60-42c1-b1a7-ba0fcfbc8b1a", "sighting--d5860e7a-efc7-48db-8859-7ef13f727e5c", "sighting--7e7acda3-eb05-4ac0-9d70-0e9cf5679e06", "sighting--a833eab2-bcdb-4809-aff5-6131dd144b43", "sighting--ba5b73fb-9a99-4f94-81e4-72b4b2b07883", "sighting--a41aa092-1d56-4f82-9e5f-6747cc73acbf", "sighting--66c375d7-4e9d-419e-9c6d-8ff1bdc379b0", "sighting--53f40359-eb89-4110-ad0a-f614cbc47264", "sighting--4290fcee-8d8e-4261-ae90-f1f9f074f7e5", "sighting--ed1212af-29ba-46fd-85e7-f214887d29f7", "sighting--a21581b4-fa67-424b-8ae5-508b85bd17c4", "sighting--8d16e5b8-98b0-4797-9ccd-48847130e242", "sighting--f0e3e59d-d516-4f9a-97bc-c872ebb4fbac", "sighting--650d5368-e6ff-404e-a197-466188920b3d", "sighting--90a0cebf-164e-4c36-b7d1-ebd1c3fe3381", "sighting--c941030e-0e75-42e9-a8a1-6124f7203e98", "sighting--ed2fbced-5069-424a-a9e9-6dca71595ef5", "sighting--1c827ac6-82d9-4f19-8fc9-440c4cd519ec", "sighting--71881c01-d708-4a43-ac7d-e0652c619997", "sighting--0b03c546-cf06-4381-9ba0-3efd161538e5", "sighting--c1705695-6bf6-4e0e-b0d9-5ecaf721e09f", "sighting--e4322989-d7fc-4bcf-a8ca-fec5b223059b", "sighting--c0c1d23d-1b44-4c1c-805d-74219acdd69b", "sighting--a1107169-c180-489f-ad93-bc8f0065cba2", "sighting--b3be5be4-4f2b-4273-860b-7944d7619b18", "sighting--b5177a27-127b-441c-b5ed-583bd6c2b7c3", "sighting--3042a28e-ea8b-4df7-8182-f125f78184bc", "sighting--1d8208e0-88a4-4ebc-9c78-5f7ce0ba8b13", "sighting--7bf1cd1d-cb9c-4334-8e80-7b49e6b12d6b", "sighting--7e721432-4d7d-4b26-8b42-bb64a990b014", "sighting--0d876511-117d-4c0b-84f3-59318ac22be6", "sighting--f79a3800-cafc-4204-9b24-ad6a3f3c17d7", "sighting--bb3f3828-3bb7-4236-9bee-eabcc490ca5f", "sighting--7a9ff9f1-6f22-4b62-b78a-f79036bd8a3a", "sighting--c803fffb-fb70-49fa-9472-b096cd8707ff", "sighting--b1a3f74e-4703-4df6-8260-c0ea5a1ffd40", "sighting--f0783cd2-2d97-4cec-8a96-a165d2e4e4dc", "sighting--d8f1425e-3bb6-4f30-bca9-e32084defbea", "sighting--d9cab168-dcac-46be-9395-7f28f2e3573a", "sighting--8e08ee69-3d0e-446c-8f3b-483c7b87984c", "sighting--80828658-36f9-45d4-9402-0e38130a91fa", "sighting--501c0071-ad19-4b57-a7bc-371fde68197b", "sighting--917a1de4-9803-4886-b867-a11180cb1b89", "sighting--007adc05-f007-4f4d-a94a-0d2e3853894d", "sighting--f119b940-b1dd-461e-9549-dfc907f754c7", "sighting--d26e2b70-d36e-46a8-9e8a-ef05ba9725ab", "sighting--261029c5-dc34-40b6-b05b-1081b51f2291", "sighting--a42b6a88-30dc-484b-a2e5-6200c9ea440d", "sighting--1ddcc3d2-2982-4ccd-b767-0abe706841d5", "sighting--6d4a229c-f27d-40fe-87b2-73682188bfcb", "sighting--cc2e5e1a-6235-432b-815f-97095f8695ca", "sighting--a337c1db-3c4a-4fbb-b427-6bfe1a6c7414", "sighting--bb016f92-ad29-4526-839b-b0cc341266ea", "sighting--cf3287d5-f310-44cf-bc63-5f123d408c16", "sighting--198755ff-74a8-4a2e-8bb2-274524e8a18d", "sighting--fcc810d2-1521-4d01-9e74-f8a543ded6f4", "sighting--83abde93-209d-417d-8e57-a388bdc72d28", "sighting--e1aa4fd9-cf17-4247-ad2c-5e5f94d2f223", "sighting--d079856f-5298-44ff-87d3-b93e5e81f695", "sighting--9916493b-efd8-4da3-a441-72b14754dbe3", "sighting--26000b68-cb5f-487b-be03-bbf379b8448c", "sighting--aff44667-b57f-41e3-8f9b-467fd73df4d2", "sighting--53bdc268-de72-494a-84dc-aeb1ac07019c", "sighting--81049a26-9e80-4ac4-961d-4605bdfc1deb", "sighting--4e750e1f-bd76-4f76-95e6-6c9baac863a7", "sighting--9e441876-1ce2-4559-aa21-545f940c70ea", "sighting--7ed57b68-6597-4fc9-877a-a553f679288f", "sighting--3759d145-6df6-4382-8b63-05ff07e85ed0", "sighting--2f73f437-97df-4206-8b45-81c95e0a343b", "sighting--7443a465-386c-4510-b637-f10cde010d10", "sighting--25179e2f-1012-4632-97bb-09b27fbc7178", "sighting--1a055584-6205-46d2-ac18-9327f3575e2b", "sighting--73d6f185-36ad-4e50-9325-ca114ce3e2f5", "sighting--d9b4773f-c839-4fb7-91e8-a63f3b8146de", "sighting--30fa36ff-f793-49e8-9867-c6c3150a0df4", "sighting--8df97cbf-4308-49c1-a0c5-eb71ad6faf68", "sighting--70a15e71-4df9-4926-84e3-521c776533cd", "sighting--4396fb37-26d6-461a-9a61-d2263125592f", "sighting--ec0f0b07-66d7-4c15-88dd-7214d4b795d9", "sighting--47e40df0-4d9c-492e-aa02-544ac6d2fbd2", "sighting--4fcc6d36-7c3c-4efa-9602-86223d6ed134", "sighting--7e700394-b57b-4318-91c7-e907f7c38875", "sighting--8a2418d0-c1c7-4f5a-abf8-faf862fcfd4c", "sighting--1c97d9e9-6a9a-4054-8a17-7445e228dd7b", "sighting--1bd507d3-c49e-463b-b75b-3dd6fc277dc2", "sighting--132f4eb7-3d43-4217-9c18-bc1512cac0d8", "sighting--d7077033-dd08-453a-abc3-ba549575ee61", "sighting--fc59579d-46e6-4893-9ea4-076b7add735c", "sighting--8bfb5b8b-f92f-4b28-97cc-5995c7d82de4", "sighting--8aa91c5f-55c4-4af7-802f-8a4de7ff5ad5", "sighting--5337f991-f8dd-4d8a-9ecc-470772bbfff1", "sighting--26273378-5d04-4274-8f3d-30a2c0c08411", "sighting--004a4db2-ad6c-45a9-b342-79acba3d3cc6", "sighting--d5e3a2b7-8e0f-4bc5-805b-dbc4b208e720", "sighting--b0abd650-f910-4bf2-938d-5b57f4c6a5f2", "sighting--0cc8a41f-5383-4ccb-b068-3b443551946c", "sighting--2675b543-cf57-4eea-ac7f-f5f0288bb6dd", "sighting--e724a7f8-177f-4efd-afdd-85dcda6ced71", "sighting--e8c28b99-d5fb-4994-ba04-fdce2d404f0c", "sighting--d122b5f9-e031-438e-8246-d45fd653ee87", "sighting--ab849e71-ac87-4a28-9f06-d8f748585ed5", "sighting--d7d5cfeb-4a03-4130-8836-ac7bc77dba2c", "sighting--96919f37-fcef-4912-ad9f-8fed324ff59e", "sighting--505ba2c8-d6d7-4d3d-9d0e-e0098bbe9d8a", "sighting--296d188c-7ef2-42c9-a52e-a6537090a98f", "sighting--3bc83eb5-b036-46b5-ab5d-3e2bcaf7473e", "sighting--3db9701e-dcb8-4c79-a049-64294fe836ce", "sighting--9998e72e-8272-4134-92c9-dcbd0c116d77", "sighting--a99921d6-719e-48a1-94ed-8ecffc8bdc08", "sighting--6ccfb9bb-96c5-4d73-8bdf-5e288eb79a9b", "sighting--1ebef2c3-1fda-46f8-88ea-1047cc407c21", "sighting--fc67cbc1-dbf2-49e0-830d-f4d29326ae0b", "sighting--36fec89f-3cb4-4bfa-b116-ce987a5cc024", "sighting--a605ef3c-bb55-40e1-b5d8-df40e7f65691", "sighting--b51924ec-9a09-42f8-b380-68919c1c090a", "sighting--1bd18080-7070-4aa6-9243-f12993f61f06", "sighting--4cc032f6-e705-40e7-b8f4-bafd17233fa8", "sighting--c68e5c04-df69-4eba-8389-ff5f16b3c1cb", "sighting--386b28c7-3106-4392-8ba9-59accc6a6df2", "sighting--12702e37-61a8-4d28-a9ba-da997492f00a", "sighting--2e1278c3-973a-45d9-94e8-846526fed38c", "sighting--b34396aa-fc7a-4d36-85a8-35a6bca7d5d4", "sighting--973727e6-47c7-4365-bbfd-005b01e2af4a", "sighting--b65974ba-65ae-4b75-a8c4-8626d8fd47a9", "sighting--e75f361a-5f6a-465c-a52d-ebe5d3f7a334", "sighting--5fbefddf-f3c9-4df5-9fe1-985ca8615f2d", "sighting--8f7e931d-a54a-482d-a26b-d26c381b2ebd", "sighting--098c1c6b-c29b-45d2-81e6-d3015b9e3c11", "sighting--a26f6cce-dfaa-4576-9301-6a0425a891da", "sighting--00172d60-8272-4bb9-805c-194e29c18844", "sighting--b4aa61ad-01ca-439b-b685-8472c7dfb119", "sighting--646a05bc-98d9-4645-8268-2158efd7e791", "sighting--5564d019-a318-47c5-a201-526b38def606", "sighting--f34882ff-f9ff-4af6-88fc-8518448f25a7", "sighting--6b746d78-ca84-4f6c-a32e-d35775462c97", "sighting--095a12dc-6f75-4ca4-97d8-4bec19c0afb9", "sighting--254293c1-dbc9-486e-91e0-508c8349413f", "sighting--e68a57be-f109-4603-bf34-4f75847afbd0", "sighting--99c69330-3dcc-4ba3-bb7a-af739081c7ee", "sighting--68aa5f3f-5742-4af8-8ae2-84bdc17d19b7", "sighting--a1524f5f-0b6d-47d3-a16f-bea48a50ccb0", "sighting--d5643235-4223-4cde-8b07-97030b2b96cd", "sighting--bb7a5096-a469-45f7-af48-09602a1846cb", "sighting--8963fe6e-3832-4fc0-999f-d77861f25d12", "sighting--323dbd3e-83cc-401e-adf4-89481ec943a4", "sighting--8da38736-65c0-4d34-9953-73303fc935aa", "sighting--6f996aed-cf07-4de4-8cd2-632fea2ee343", "sighting--cc1f9feb-ec08-4dd2-bccb-4c34c6c0c7bb", "sighting--8f28ce54-7c51-48c3-8b82-b7436df3ea47", "sighting--dd52056e-439a-4e3b-b310-45950160560b", "sighting--813b66f4-ce69-4957-ad05-7c3bfa42fe6d", "sighting--58ba7a49-ac96-4f68-87f4-d73981ac45d1", "sighting--534d3d29-a534-4f3f-8d1a-8915ae57dec2", "sighting--f1eea8a8-30b8-4219-8c2e-1ce765337231", "sighting--116b894d-84e1-46c2-a9d6-b60d426a7251", "sighting--0e2921c6-d6e3-4f68-acb6-5a535c23180c", "sighting--f04499a6-bd0f-4ea1-92a5-5505ec2ce8ea", "sighting--9667efb7-4f3f-47f7-9077-05c24fb077f0", "sighting--5ea018e9-8d9c-4ab4-8d4b-a22049df67a3", "sighting--b53481bc-20bb-4517-ad33-9f57abc1cacc", "sighting--20857275-060d-4b26-b09b-bc031912a23a", "sighting--e9b07987-c9af-478c-98db-b407c67b3d35", "sighting--1fc5c334-15c3-42d2-99b8-7c0d93f7a864", "sighting--e140c30f-b1ca-493a-8f1a-220aab90acfc", "sighting--12a6224f-88ea-45e8-8be5-a1512b8e1779", "sighting--08875a3d-762a-472c-bf2c-7ef56853a813", "sighting--5df77802-18ba-424b-9d6f-502c2aaa2dda", "sighting--3afe6fea-b5f6-4b8b-842d-d630544d1fe1", "sighting--50230820-2efe-4d6e-92ba-e269cf73dc8d", "sighting--c5593252-41c9-4836-b5bf-2b2f9e052b2d", "sighting--be139f81-b2e7-4aca-9cf7-6221fcb2bca1", "sighting--bd6b80a8-8afd-4909-9b7e-5a4ac6630ffa", "sighting--54bcc821-6539-4c4d-b09a-8c31d48c4534", "sighting--5fcff2ca-3f3e-43fe-901e-c69ae399c4f2", "sighting--88bc6dfd-67ef-42ce-8575-3b81ea315239", "sighting--a96d6985-93d7-4a0e-a7ac-a7d042e34796", "sighting--f44b9dd8-5553-4474-81f4-75cbc8703e24", "sighting--77415d5b-19f5-4e43-bdc2-9777e9730ed8", "sighting--5c538172-4e3f-41a3-b860-157c3e770e1b", "sighting--4b8e0b20-db94-40ec-b2c9-c8d55efdfab5", "sighting--527182db-0bd2-4def-9d45-2723155eb6fd", "sighting--bbd7ff28-05dd-4a38-8e4a-e4da5436f50a", "sighting--107b42d2-509d-48cb-bf86-78c4a9516b38", "sighting--f3c5b2af-d86f-49b8-83d2-481c9aa7a736", "sighting--725c1a54-e9af-495d-8e9e-975315c5df42", "sighting--c63d819a-0429-425b-aa85-2bcc1e95b9b3", "sighting--76c7ec9f-f486-414b-bfdb-ee9728016607", "sighting--6c4be961-763e-464c-a590-a6e8772c455e", "sighting--6146777e-a1a4-4873-83be-3955c041650d", "sighting--6e3886db-8595-42ad-b3af-24e7214f97ff", "sighting--cf3ef220-ea3e-48ca-9865-6c75e6c403fa", "sighting--9194bc24-2a34-43f9-baed-6611cd84cd9f", "sighting--94f979a9-7835-4a9a-9d52-fcd20b6a99fb", "sighting--629d764b-1c34-4fd7-84b1-c4261a9ddaa3", "sighting--ea71b46d-94ed-4c1d-995a-52956feba011", "sighting--51e921b2-aa24-49f3-859d-00e8390b886c", "sighting--88d26218-da4f-49d1-aee9-794640b740c0", "sighting--b5484f7a-7ab8-4038-a453-b7356f2fc2c6", "sighting--c52213fb-0d7d-4dd6-8c52-759736a2fcbd", "sighting--722d55a9-147e-427b-a590-b270a18051c0", "sighting--248c6dd9-fc52-47d3-b978-801fadacaf76", "sighting--bd70e947-e5d3-4c65-9a64-a68963dd3ad8", "sighting--2df557f5-b5cb-4dbe-a39d-ad8fdc676d73", "sighting--23be2055-97cc-4938-92aa-3522c6d3ec26", "sighting--02f13463-749b-4c00-9135-78dcb026114d", "sighting--d6fe7c04-79a2-4aee-9782-3ee7ad9579e0", "sighting--2e0a1b6f-1100-49c2-95b9-7b663b0e8251", "sighting--a27fc1c1-8f56-4729-b3a8-7da85a3c5d16", "sighting--33381297-568a-4cbd-afe8-15eaa76073e6", "sighting--4ccf71af-c1b4-4723-ac17-ca5edf190c63", "sighting--1bdf207a-39ab-4e86-ae7f-b32143994648", "sighting--83906d3c-40e2-43f8-aa22-ea4e2a39e3b0", "sighting--f3c1184f-5fa2-45f2-bd21-97e6c348b3a7", "sighting--cd8e0bf3-eb5a-4c18-9401-561978b6e724", "sighting--40f2a195-086b-4225-af3b-0406f4c0627c", "sighting--74c7cddc-e354-4395-a02c-1e0b5f1b551f", "sighting--b7e58218-b3f9-4296-8f3c-1741238ba593", "sighting--9270cae7-5f24-46dc-bead-4b32fd389e7b", "sighting--5404c12a-44f3-437b-a536-3775f0573f3b", "sighting--49063407-4ccb-4957-85ed-ca8761b85c18", "sighting--e7e84e6a-1e1f-4084-b2cd-f3d36438476a", "sighting--45af7118-e643-42e9-9922-8c17f53c9085", "sighting--ad689527-66f9-49aa-93a0-46fac56d5fb7", "sighting--4b4f4500-63e9-4c95-a4f3-5cfc0617991a", "sighting--02d39bc5-534e-4696-a63d-6852ce991b8c", "sighting--61efcdaf-dfc0-4ab0-ba3c-be05c6d3f83f", "sighting--69abe98e-f46c-4b5b-8ccb-11f87836c749", "sighting--3bfffbfa-4a2d-4285-b4ea-91f45bd21f35", "sighting--75c2970c-4138-4820-9e81-eeca436b4bf4", "sighting--b6a09035-d2f8-4283-9325-617002dccd08", "sighting--319cf4f2-f403-410f-b788-0cf058c7a809", "sighting--26837e28-a443-448b-91a8-86ff2f49650e", "sighting--1c210e09-9dc4-47a7-bd8d-4ff2a03695f7", "sighting--b391af72-71bf-48d4-a4c6-f838721fb7da", "sighting--a4c801e0-26fb-4540-970a-9221afac717d", "sighting--c3ac6f47-e2eb-41cb-9df2-0e520316cf92", "sighting--e646e133-20d8-48a4-9bc0-1bc7ebc8aa51", "sighting--352190f8-1ec5-424e-a937-13c63cb7fd9b", "sighting--b1678034-9dde-4e02-a271-fc0ca865db1d", "sighting--06dfe72f-9a2e-4cfb-b4c9-960de5e5c882", "sighting--ff113efd-c601-47f0-a775-53d2f4f89977", "sighting--2884b906-c17d-484d-98f4-e27d73bdb9e3", "sighting--b3342b2c-ca3d-4018-aa3c-a1c6dc0d87c7", "sighting--de1d083b-4bf5-4a6b-a1bc-8ef4edb4420e", "sighting--cf15dd01-f9dd-4456-bdfd-f6ff4f4ce7d9", "sighting--bbf1561b-6452-4196-9963-b9b5b7917475", "sighting--41258bc4-7229-472d-9f7a-607e2a3f6df9", "sighting--97bc0449-db4f-4729-87e4-87079485f219", "sighting--b394210c-81fb-4060-820e-fd9034388ed3", "sighting--ec3f1e4d-abee-4f02-bce0-105f195fa5a8", "sighting--ee24bb19-3d38-4580-be41-c219f41a936d", "sighting--d137195b-2435-4253-b238-5f81a2242162", "sighting--1e697103-9e4b-4b20-a3c7-239f0fd1ffef", "sighting--065d41a8-bebb-4cdd-b317-bbcd50a9ca8e", "sighting--a247a9a8-0d59-45e2-b7ca-461afa17f72d", "sighting--dad7f9a2-ac63-40d6-91a0-de2a7fdbf1d5", "sighting--b2ca7282-d8ca-4aec-a3cc-283677f91bc0", "sighting--091dc08d-313e-4d18-b1d7-d74c2b23e41b", "sighting--5054b4fe-8c35-4547-ac9e-aee43edbfc42", "sighting--0d4a29af-5bc0-4405-9f89-2f39e9a08851", "sighting--b7f5bbb1-249a-4561-acca-28d8c2372f89", "sighting--88cb536a-3561-45fc-bd00-7d908f88d084", "sighting--fdf55eb2-b6b0-423e-89d2-bec5b6a3da4f", "sighting--e2b926f1-3004-4d0b-a663-c1fb54957552", "sighting--3f749387-98fe-4d1c-8939-a9be596df7af", "sighting--419eae46-2f6d-4034-bd26-a0701f58cde3", "sighting--a0961441-0fe0-4ae9-bbb6-eed03ca7dd2f", "sighting--7b5ac493-5fed-49d0-a8df-b6d03e28dce0", "sighting--b695c3fb-84e1-4683-8961-8c1017cfd8cb", "sighting--325fcd7a-69ce-42fc-a715-1b7e1af82418", "sighting--3265fcb8-b56a-498d-a9e3-b8b23d45774f", "sighting--b543d6cc-4054-4ed6-97d4-8226bcc56732", "sighting--f09748d1-baf8-4f0b-b8ec-64f661232bbd", "sighting--e0ca5e3d-87d8-44c5-98d5-13ab2c034fbd", "sighting--fe3febee-12ae-49b8-824d-72d277d14bed", "sighting--e624b148-314f-4c2b-8389-648ccf80c2c9", "sighting--0dd706f5-24c4-4123-b4dd-ea96412725a2", "sighting--f3899973-e9d5-4cea-94df-429455398c1d", "sighting--13fd8c36-1d75-46c8-9ca9-c6edf786a9c3", "sighting--9e8b0b00-362d-49ce-89c3-27d578c1eb08", "sighting--8175da30-563c-4f94-aaeb-b1e5fc426e91", "sighting--ca795e99-bdf0-4d41-8b82-41823974ae11", "sighting--94bedc58-8189-4b9f-957c-331af44b9441", "sighting--0273d905-3692-48b3-8e84-fc213234a7fb", "sighting--76b7ad91-da35-4821-86e3-36d35712d631", "sighting--984f8b12-f54a-4b5e-9193-d8ddb7c6b871", "sighting--b902070b-f903-485e-bb79-07641fba40c7", "sighting--45b20675-1ead-4cd9-aafb-d4f9b8ac5e8c", "sighting--f9ab7d1e-4698-46b1-b74d-752d26a9f13e", "sighting--0b267f1f-30ef-4d5d-8535-50cca2c76255", "sighting--d9de858e-203e-4e53-9509-c3b0455e3efc", "sighting--d0d7c5d8-838b-480e-97a3-48a45825e090", "sighting--5833692a-f58c-431d-90de-875a61908e20", "sighting--211c534a-dffe-4666-99a2-0d9f1a928301", "sighting--9e058527-50a7-4816-9557-9f28f38b40d1", "sighting--d576bfeb-bc81-4fd2-9052-08eb94866d62", "sighting--d1f86396-fe8c-49a8-beb9-89e44970f510", "sighting--53cd9184-f117-4560-b2c6-79c1b2070b75", "sighting--4abec7f6-bacc-4db6-8f13-1b2b3075fcb2", "sighting--89eb5e81-0431-4d3a-81ee-ed61fbc874ac", "sighting--f23e6a8c-48f7-4ebd-9188-0f4b02282cc2", "sighting--8f89b9b4-1b1f-4c31-b6e1-eb1fb556c149", "sighting--8d79eddd-638d-43b9-b74f-ce3be3375aa3", "sighting--06bac058-e17f-4e3e-9947-79fd0054751c", "sighting--d553f5fc-b678-4fdd-a34d-38ae1a20934d", "sighting--4114625a-e62f-4fcc-a285-702b8c5d780f", "sighting--6892598e-4702-47b9-9e3f-a487966a41b4", "sighting--0f2f1490-b34f-4f06-b447-9411f46c9120", "sighting--5d91f570-6d56-4cff-8292-dce07196c143", "sighting--0074e2d2-cb18-4af3-8381-ad9111a6ce14", "sighting--1a3268c7-9bc1-48d0-aa2d-e71350b2f873", "sighting--aa47715e-3fc4-47d7-976b-1e04e3e27dd2", "sighting--6824eefc-bbc2-4869-a886-576fb99ba5c4", "sighting--b6c1e77a-d929-441c-b9dd-5e641f68019b", "sighting--486fe350-c756-4e9a-a5a6-d1095fcca6a5", "sighting--abb28613-1cf4-4942-9912-ed306542b691", "sighting--40ef18e0-24b8-45bd-83cb-bd746bb0ec9c", "sighting--093844c8-d32a-4958-9983-65711e23d103", "sighting--662ba640-a4e5-4409-a52f-37bdc65c562b", "sighting--d28a8ca2-a65c-4c9d-bd79-83eac96ccbdc", "sighting--a24baf9d-c761-4504-adf9-b3532816c778", "sighting--41760eb6-8e8d-4791-9660-994c3e235ad1", "sighting--579ec19c-3890-4e5c-8ad8-1683173cdcd5", "sighting--3cda1073-728a-4c39-9f7c-e45f9e8bdfc7", "sighting--662c0f26-ff6e-427d-bdb6-e700d9696e25", "sighting--b3dd7cf6-7ba5-437f-b32d-89e123bd98cb", "sighting--fd94bff2-275c-40e3-97a0-a870c8ceebb3", "sighting--04a4c829-b716-4c27-a65b-8e1975a7a24b", "sighting--c007eb6f-5465-4c00-aeb9-9610315a01c5", "sighting--c6e1c3c0-d14d-44f7-aaed-9a2eac12c2e7", "sighting--fcd14dbd-da9a-414f-89b4-fd850bc6549b", "sighting--2d0ae07b-c149-4afe-a22f-d2bd12f3ab4b", "sighting--ab860d83-78a1-41b7-a7d1-4e221a5b93bf", "sighting--9d19ed5e-e779-4929-b977-2da2827c6882", "sighting--18b41fd5-57fb-4a44-a6ba-0574443bc64f", "sighting--cdfda1a9-1949-4482-aec1-a8bf0ee8a6f3", "sighting--1b52a2c9-0e5e-4655-a7d8-3bf570897261", "sighting--3573d77b-a4d6-47e8-88c6-56b7931c65b7", "sighting--30522f94-682e-4ff2-a20e-3a6243233671", "sighting--749fd1eb-85eb-403b-8b4f-97400717efbe", "sighting--6fc09f61-537d-42cc-b2cf-f61ac8c86a67", "sighting--3a3eb7d3-201a-46e9-91e4-e58d712d17b8", "sighting--bfd622e4-c914-482c-9c8b-e216ce048535", "sighting--37b1ebb4-b9bb-4e6e-bed4-be35f22927a4", "sighting--ad88652b-d275-4ca6-b0e1-3aaac2681323", "sighting--e0d695c8-b598-4dbd-9864-05f2997a5f64", "sighting--7eabcdfe-c1ff-4722-b2ad-b3ed54613802", "sighting--876df713-7bbd-4129-b2c3-437fea673514", "sighting--8581cad7-0eac-4b93-85b1-0acdbacd2574", "sighting--c00ace52-5706-4fbd-bac5-26146f63d536", "sighting--54576bd1-ae58-4043-9cd3-c561dc9ad3d2", "sighting--48f89ac6-5b1b-4c58-b224-5ae8569d1fad", "sighting--289a5259-e3f1-4fbc-be54-b1afb3ffaa4f", "sighting--81af77e4-b10a-4242-ac4e-1ffb103e526a", "sighting--ad12b32b-ec5a-49c2-a4ba-ac3ef775f40b", "sighting--0727c2ea-0fd1-4f82-a626-8a63d17bfbb3", "sighting--6ddfb99b-0018-4be3-96bc-c2fc37514117", "sighting--53c38bd9-bb67-4b6b-a519-7f15f1231aa1", "sighting--97d23583-af22-4d1a-988d-2e4e6aa6e44d", "sighting--fddf5a7b-68fd-4699-9f8a-2757903de4f4", "sighting--1e1fc4d0-c487-4bdc-af1b-1615e8161d01", "sighting--98404878-7d7e-4c25-92b9-c761f2b752a4", "sighting--3a1e27d7-5980-4c3b-9474-ac8dc8e786ed", "sighting--d272b8f0-34ec-47ed-810f-095055af4055", "sighting--0e0f3eca-5d1f-4ef5-9dc2-dd7a8a978f37", "sighting--801f5787-aa6c-4560-8160-c9819ec4e696", "sighting--fce36394-d150-4ffe-9fe7-4044f3cc9002", "sighting--123c17b0-fe75-43f0-82e2-3ac3f3e0fac1", "sighting--c34b6aae-927c-40db-af7b-7aa72186439a", "sighting--aaaed7f2-e9d9-42c5-a961-591273f577fb", "sighting--de17cd86-9201-4a5f-837c-d7e84858b0be", "sighting--081f8c8a-9cd0-4546-a7b3-170e5963c60a", "sighting--d88c22f8-d5ba-436b-bcf1-96ddccf06bd8", "sighting--298e66c0-17e4-4646-bdb8-74754f883bc2", "sighting--982711e6-2fc1-4987-b8d4-4cf2d8ac7283", "sighting--7362366a-16ce-416d-b193-5158b1168493", "sighting--10fa1151-6018-4586-8455-5335e77eff78", "sighting--1f678197-8a7a-420a-8d0f-999d7701a302", "sighting--63c4746c-857a-4315-8e73-1892d2691303", "sighting--ca989181-2d30-4cda-9a29-28a747488e8d", "sighting--2235e02b-e460-4dcb-802d-f695f6da97fb", "sighting--503375a7-3d6a-4b27-99ea-9f2ac33d0e71", "sighting--7a497edc-4c1a-4a79-bd4d-86a47ca23b7c", "sighting--542302f1-2c9f-4e66-87bf-a0b94f428238", "sighting--6ce4670f-98a5-4c09-8bb3-5005987e60f0", "sighting--f6c584e3-170b-4ab5-86e9-55ea90f5b458", "sighting--26f36c44-561a-49be-8a04-08b57708d03c", "sighting--81e5b86d-6d69-42f3-9e42-165ec0f64d02", "sighting--94f7ee0a-7894-46b3-81c4-51c5476e696d", "sighting--04826d8e-fb6a-4f5c-b219-40855bfe4691", "sighting--d5835a4f-8d61-43d8-8f7e-f29c4feef1cb", "sighting--ee104a26-0b5f-4810-b27d-37973ca018a0", "sighting--c38721c2-bd3e-4c00-b282-a39c1ea7629c", "sighting--c92c88df-bfc9-497b-81ce-c7508a536d6d", "sighting--b24f3eb0-eafe-4b06-8fed-9fed59d9d282", "sighting--bc7feae5-1dee-4944-b827-3dd3ffb4b741", "sighting--9841491a-7db9-48b8-812c-fe93beb211c3", "sighting--ea5e5412-3fae-4de8-affd-5decfcd991ca", "sighting--bb961f7f-2d36-4f29-be66-9b05500abf4f", "sighting--417a3c34-03fa-4b27-b171-de20c90e7665", "sighting--134ba80c-c905-474e-b210-7e97f9894a6e", "sighting--9d7c77c4-5574-4d06-865e-76123face470", "sighting--6f5b0265-0e65-426e-9343-06d21edabae7", "sighting--872df8ce-372e-43a2-9f18-66b5ca5c9ae9", "sighting--7e93930b-05df-4e5f-9eaf-b424c5790c54", "sighting--c71b17eb-bc4e-48b7-97a8-8d571d31104e", "sighting--29bdf18e-ecc3-456a-9c67-5f0543522531", "sighting--8a4aa357-b908-4248-87ad-8e42ed941c14", "sighting--fae0d143-3ee6-41f8-9248-3f74d371fc7b", "sighting--4d0d34ff-36f8-4ff1-ab00-6f463cb62b7d", "sighting--1957ac3f-1f4e-4202-b4df-785a5d0aec86", "sighting--db82dbe3-a0c4-4180-b152-a337816c0dac", "sighting--0fef50e7-f116-4594-ba4e-7ce6f0192cdb", "sighting--d521dd9c-2707-4dce-88ea-929bcbd000d8", "sighting--6d1ad692-2af3-46e4-b5ba-46e0b8d7096c", "sighting--d0ff2658-6c02-4b45-aaab-a8e02d40e36e", "sighting--d3866bfa-da6e-46c1-be15-78fb71f5867c", "sighting--b3d768a0-fc95-4d3e-8d20-d090f335e89c", "sighting--48d79083-0e08-4f43-814f-96e5476c79c7", "sighting--5bb8dd58-40dc-4efe-ae5b-a13ac8da87eb", "sighting--3668b8a7-51b2-4057-adb4-81d37862ca8a", "sighting--5d677653-3a7c-44b3-b3b0-3e725a1a9f54", "sighting--b5897896-3f6e-4540-9325-fb7560030eb8", "sighting--2617b4e9-6e0e-4480-a636-6bf26be357ed", "sighting--8b254732-0823-4c24-837f-6689867e0cd0", "sighting--d701b191-7e51-416d-8adf-4f4a9263994d", "sighting--ff06b3c5-0191-461d-ad67-ab2f0cf4ba35", "sighting--5c57ddc2-f9c9-46fc-b542-cfd5e2f9b2d8", "sighting--139e8c20-072b-4079-8237-edcfdb946e12", "sighting--d4da34c9-50f5-439f-890c-4e3afe06c93a", "sighting--f5bd19a1-c835-4340-8c52-f775a575afd7", "sighting--370477d1-7542-4829-9f84-8806d1c5353d", "sighting--57d8ca9c-8de6-4e00-a451-723119bb24e9", "sighting--9d46b956-e4f0-478f-89cb-9e3ee856c079", "sighting--073f9c9d-8928-4a4c-b741-abebe8e7679e", "sighting--7c0310ed-6b3d-4f35-8ec0-0c2e839552c2", "sighting--7d85a7cf-5897-4cb0-ab0a-46d733b089cf", "sighting--aee10c14-eaae-4a21-9d63-30bae1d14394", "sighting--c978283f-d40b-4bb9-adc7-69dfc190e2a8", "sighting--8ae3cb5f-7de3-4da4-a953-bfcff94d6682", "sighting--eb195270-f379-46bf-be0b-ab94348dd9be", "sighting--9d26aed3-6668-45a2-83a4-71a6ef0cbda8", "sighting--15e173da-77c6-4bb0-8219-e925cb5666b5", "sighting--49a8bdae-93ed-41c3-8980-8c9601a671bb", "sighting--ffe167a6-d428-4034-976c-e852cb7f1b32", "sighting--f01cecff-1b81-43c1-a267-2ad52850c6e4", "sighting--9564b09c-c74d-4384-a54b-e314fad8c45a", "sighting--fb158db7-f5f3-4f75-8b05-cc2cc7569761", "sighting--164811cd-908c-4e82-98f9-453bd10b5399", "sighting--7e432d42-a6a8-493b-aecf-6376567388f5", "sighting--d366d36a-ea7c-4c72-969e-5e21065e4c42", "sighting--b462899a-ddf9-4a70-b782-7d89b3c2dea1", "sighting--bf1c0126-5432-4a6c-a056-ef6429499122", "sighting--2ad24808-c67f-4deb-8500-840c529b0a0b", "sighting--aa6ade14-e61f-4305-891f-02f4a1a42f3d", "sighting--18f36701-5c59-43f6-a912-af73bbaa95b0", "sighting--60e86b59-a90a-48f5-b735-ee150a07121f", "sighting--c37c0500-76c2-49b6-86c1-a0921bf964de", "sighting--ad4dc774-8cde-4734-9246-cc7e3df00f17", "sighting--da24165f-697e-43b0-bb76-2b43a3129aab", "sighting--eb417186-f4cb-4fb7-8b14-6c1b34006b6c", "sighting--89ea5bc3-87bc-47b9-970a-e713be246277", "sighting--3c50d2bb-5907-4530-9585-61171275d811", "sighting--a1ef8e46-88ff-4c5f-b996-317c5680c50f", "sighting--ab52efa2-0ea7-4dfe-943b-13436e383428", "sighting--a9ef3044-39e1-4b45-8670-2cb246e24b14", "sighting--38cfdf3e-0592-4593-9af9-23dd10c48ea1", "sighting--f2062b27-1942-4601-9525-60e5d1c27b13", "sighting--77e931ff-5875-4cdb-9820-01e83a9c9b30", "sighting--fb437fe2-0b19-43fe-9455-29caa17677b5", "sighting--e7dba97e-4cd0-45df-8486-91fae46cb1bc", "sighting--d30ca03b-e8c6-46cb-9cba-f5d46479c498", "sighting--fd535e05-380c-45dd-9e11-13cc5e9088a1", "sighting--0647561e-6fe1-48ea-98e0-10e1ff990122", "sighting--d6e342ff-fac5-4ed5-a17b-4569087b626b", "sighting--0e40861f-b998-4774-8732-4c6e1e11c867", "sighting--5c96f2f7-a3cc-4343-bb01-d0cdc33c483d", "sighting--6d0f5ab8-e400-48a6-8251-7ef5a2f78abc", "sighting--0497f63a-f6a6-4a06-8b44-177b157b41d6", "sighting--74bbc9a8-cdfa-48cb-9aab-41f40bfebf6a", "sighting--ae3b480f-0dc6-4c2a-9ada-8f508782e629", "sighting--c74976be-97d2-4863-b4b4-fc4e841f2c23", "sighting--e02aec18-3b05-4db6-898e-aa7096de6b0b", "sighting--a9b142fe-ec2f-4534-96d7-2e1b1a9310f0", "sighting--fe09d7ee-a579-4ae6-8ea7-586968f1ea1e", "sighting--15d0e8bf-a92c-4e94-a851-72de36ca6213", "sighting--d398a076-6492-463d-8e28-537d11a638ff", "sighting--e3ebaa12-0014-4cda-92b6-1b6fbc32a66a", "sighting--bc8c38c6-a23d-496b-a8c0-33d3a6268f3f", "sighting--e030b4ee-0881-4e58-beee-c16b91350742", "sighting--a163ce5f-fa8f-4d67-b5bc-e045980270e2", "sighting--b4c7d39c-f452-465a-8a16-53c21161dd2c", "sighting--e9bc11d4-d286-4dac-acfd-39afcca718ac", "sighting--8e558419-a59d-4830-9cbf-f149e2d2b8f7", "sighting--b717aa1a-f710-47e0-966f-3e903361b464", "sighting--f6016a7d-7ded-4cf4-9a98-47cd68265004", "sighting--d854627c-2464-4a21-864e-6935324d91ce", "sighting--d7cb34c5-827e-48ca-ad21-bd3090719fcc", "sighting--02918daf-b031-4938-8e86-a0bc94cbbc47", "sighting--fe7241ce-1b43-4856-989e-46624b83def5", "sighting--b2ee2215-f58a-4124-990b-96ab4191c147", "sighting--5c2d3549-634c-4c27-a478-4300577e70b9", "sighting--3af51082-5a32-4337-b7f2-297b71441002", "sighting--8f631632-e9f6-40f0-8697-8915a8d25888", "sighting--f15dac5b-fa4f-462c-9b3c-57a9c685d545", "sighting--b2ff000f-bf6b-4f72-a57a-e1553ce27de1", "sighting--e628457f-d6db-4f0a-832d-56a7209f84cb", "sighting--d6ab8a90-f068-47a8-9c58-ccc9f1e09eb0", "sighting--455f030c-3e2a-46fd-870d-a4a16173a888", "sighting--09684da7-3968-4087-ac08-0a07959ce21d", "sighting--fd72037c-d2f8-4b63-915d-cf1488302232", "sighting--03d4c9a2-71e5-4fbe-9499-fee8630d3c31", "sighting--a41d63d0-a5bb-4883-9cd6-d003e930b0ce", "sighting--218d1d86-a8bd-4efa-9eee-ed9bf0cbfbaf", "sighting--08919eea-c281-414c-8efa-7ab5ef55b389", "sighting--965986d7-2f9c-45aa-925f-c4f12812962a", "sighting--9fd3a909-1db7-4391-9b13-ffa570309a49", "sighting--051b729f-fb6f-491c-a87c-d2f30d13eb8a", "sighting--94a8b96c-a63a-41a6-aaad-b4916cf88a64", "sighting--5e0c252c-a4c0-47a4-b796-bf6632d888b5", "sighting--1b5b34c2-2402-4a72-bd6f-746683a3de2d", "sighting--066e42f0-364b-44bc-ac06-bd89798a589f", "sighting--83e550a4-6a83-4a7c-8dde-a13e507b6297", "sighting--c71063fe-217d-42e2-8be7-9966bce65659", "sighting--df7505c0-98f9-44e4-a4cf-3fd63562c6ba", "sighting--889edf09-567c-4e70-ae8d-0a74dc473c74", "sighting--4851280b-f4c1-4d0d-a527-07fe64fc1375", "sighting--55bc19da-a35a-4a85-bcdd-23cd60d361b2", "sighting--ee9a9d31-fd0d-4005-be27-966c451fa8c6", "sighting--a5325e4b-135f-448a-9dd6-6b299716978d", "sighting--134d061c-0d90-4a16-9e6c-3f8ab426a7f7", "sighting--77c62952-6083-4376-b4e9-f04b80793d2e", "sighting--e8da52b3-c0f1-438c-82e2-60a0d09ee9e3", "sighting--c9d94204-2083-4ad2-bfec-b2b8ce6fab9e", "sighting--7f706640-bed4-4842-90e2-13b2a8078495", "sighting--82da8069-41a0-4ee4-8ca4-ddc9f1b2c8f1", "sighting--6ce528cb-9f1a-43a0-80ba-fb1de27fe2d7", "sighting--c1eb0abc-b6fc-415b-9c3b-da46232451df", "sighting--f88a5eef-21ac-4fca-90a2-5629f0859d60", "sighting--adbe2233-af9f-4bec-b02d-6eb30f90301f", "sighting--17589b0d-6287-442e-a869-ce8a9a52c103", "sighting--8d9f10eb-1edd-4fdf-9425-0e65d38dc86a", "sighting--87b6a252-166e-4514-9ec1-d4c8115d352a", "sighting--2e611318-b357-4e76-93dd-3a3cda4aa86e", "sighting--45c4b940-11b2-4084-a11f-a639c245ec85", "sighting--9d57bb47-0355-4c1b-87eb-c2b9ead96b56", "sighting--16f43d6e-a688-4f4d-a23f-597128c841c9", "sighting--9e22c0d5-3697-455b-bf7c-feb8a1465f20", "sighting--bae0350b-63c9-4be2-8975-5aef4a8c3095", "sighting--b8229016-159a-4e90-8d48-35cd3716458b", "sighting--d70bba69-1668-44d2-a5da-2ffd7b8d5586", "sighting--6dfd9bd7-f465-4f05-923c-fa907d955025", "sighting--34dab3ef-9748-49d9-8005-5c64544c2551", "sighting--168caf2a-926b-477c-a296-b453109ab88c", "sighting--0dc2ab3f-eaff-42f5-a5fd-d4d856eb202d", "sighting--41b589fe-78ff-4e40-b7aa-a0fc1facc580", "sighting--a76be814-862c-49a2-b2ab-33d1e38dace6", "sighting--39117868-37fb-4290-b453-fbdfd295c92d", "sighting--5aa244b2-16e6-488b-8690-4e1b6097d3ae", "sighting--e6bae950-974e-47bf-b193-2f5bd651aa32", "sighting--5e58ff3a-7e19-495c-a3a2-23327c4a2e91", "sighting--22b880d8-b7f4-46c1-ae65-f1947e198088", "sighting--82542ba0-4859-4036-ba16-8bdd6db3df97", "sighting--a45aa32d-1c31-4f10-8c53-bff7262153e7", "sighting--50ce09b8-f148-4629-a410-7edd2b9bdd99", "sighting--c7e9d24c-0236-4c87-99d2-76846c486c86", "sighting--271f750c-ccbc-4791-b1eb-ca207142682e", "sighting--07259cfb-08f4-4384-a994-8c4d569d37a7", "sighting--7bdef714-c3f7-4a1e-b030-32571f01f168", "sighting--3570f74e-115c-4c1e-8c10-64e962513f71", "sighting--e831f063-7328-40b6-ba47-440b2dc8d29d", "sighting--569fd212-3175-4ca6-b216-5ce6b39fc18a", "sighting--4ed53dd9-f7b4-4ed3-873a-bdd8caeaa839", "sighting--cc3563ba-b06c-4c8f-b9b4-ea50cd6a1257", "sighting--5f4a7dec-6c2d-4186-9972-f46abe2522d7", "sighting--b28b9df6-31a3-4126-8fb3-03f8f050f58d", "sighting--75cb2452-2bb6-47e3-9a29-09ff5d2c4f1a", "sighting--cee64cb6-5712-4991-8874-3955358e169e", "sighting--3161660d-0d24-4c0c-99fb-5dcb8df50cfa", "sighting--96ca9a8b-57b9-46c1-979d-7b118529e2dc", "sighting--ecb76f3b-cead-4585-be64-96e1df6f76b6", "sighting--85e21b84-0ca4-47e7-b092-f8bb44c33ef6", "sighting--3a990913-cc9e-4575-90d2-ca008a9ed165", "sighting--5a36a912-7db3-4934-b97f-0cb669ba71e5", "sighting--c865c2c4-4b20-4d97-b4ec-4c45ce569d3f", "sighting--a3314cd8-043f-450d-b3c8-4c0755ca0090", "sighting--bb52e1ce-fedf-48db-9636-497f78a3e11b", "sighting--709cb7e9-dd61-46e0-8711-b209ca2fee21", "sighting--3ec983ca-f134-4aed-a125-47041795b3ab", "sighting--c1c50131-1c2e-4a2a-afb3-0673fa475039", "sighting--fadda4e8-89e6-4c94-b3dd-190cc737945a", "sighting--c4920598-efc5-404f-89c5-e6ddbbf5cb2e", "sighting--0d9ba19b-5cbe-40da-9c61-2952f692aaef", "sighting--01705a2f-4177-4a2e-ac8c-baf37b82dd86", "sighting--621ca95d-9c98-4f8b-ae21-f61873fb4d5a", "sighting--cd16af55-aabc-40d2-aa07-a16e54edc540", "sighting--6c3bf485-f642-4046-a8d2-9c320557974e", "sighting--1b05aeef-ab49-468b-8db1-655fbdb4c792", "sighting--0d4136a5-a46e-497c-b278-ced449a0390c", "sighting--af606c6e-32ee-4301-9928-1b7e1bda720f", "sighting--e2bca936-cb11-44c5-ba30-0caa7f6a2563", "sighting--1b4ed86e-238a-4c18-a96e-2e6cd7aa1f46", "sighting--17e72655-d24c-4fe9-a5ea-1e21238388ee", "sighting--3c8bbc7c-c991-4f01-ad55-640f61c40673", "sighting--39f46e71-d4bc-4610-a66b-0b49429d8a00", "sighting--65eaa3ba-77d1-40aa-8b12-6b21caf9cf9c", "sighting--e468d914-04cf-4e8f-81c1-8809c8718c7b", "sighting--82dcef31-1773-4a5d-8624-c500088260b3", "sighting--3ad37892-06c6-492c-b9fb-9e0aba8ede1d", "sighting--2941ffad-5fa1-4baf-9829-70968e609815", "sighting--5c6b8e30-2a3b-419d-9441-765d4f4b19c1", "sighting--db2c9709-fe60-4785-b25e-58c90f955147", "sighting--b3dac2ea-03bf-4c30-90e0-696ac68e6cad", "sighting--2d34092a-a82c-46b3-8d56-7f1e3f77454c", "sighting--70137ad3-e810-43de-a5fc-326b597a488f", "sighting--2fa085c5-13cc-4668-b72a-9bb0ab3adcc7", "sighting--55d4af16-c9b0-4d7d-a304-8bf18ef784fd", "sighting--09868dc0-74c9-4a3d-8dc7-8b62ecfc3c59", "sighting--0d906c1c-a003-4ce0-83a2-0ec11b17f4d7", "sighting--0f43b8c4-ee14-40ed-9b87-76799909c692", "sighting--df4c0d87-6874-433b-a83e-d74cc7431615", "sighting--dc709c22-2a92-4332-ac54-add1e6af5e4b", "sighting--758c93d8-e1fe-40e1-bb01-16b46eab424f", "sighting--562082c1-93a7-46a7-b7b4-35febe1e3a4a", "sighting--028ca12d-3069-4f90-8b75-f22005fe0709", "sighting--00d402e3-b60a-4604-b194-b04acc8b4cfb", "sighting--abfc9b94-f719-461a-957e-d334346019ee", "sighting--fb186a3a-d61c-40ba-8f90-bc25e71b42f6", "sighting--d6556f09-d9c1-4c57-a192-e74d32da5c13", "sighting--daa08200-c6b1-41f2-8c1b-4cdc1793d703", "sighting--aec3fb63-c1aa-4c30-9a0a-7b55cc8f4c62", "sighting--6f99ea3d-06f2-432c-b16d-26e9a9c6e040", "sighting--672ddda1-a10c-4c5a-a3cb-f0210ae66766", "sighting--d826a12b-907e-4b05-ad24-57a29d736d15", "sighting--01849d85-6e12-4c32-b3bc-642508e99eba", "sighting--90f5479a-27a5-431a-84a6-0566cd764a07", "sighting--5cda0213-376f-4270-bca8-32fb793da07e", "sighting--fbe6d988-af04-400f-9717-8f914773cd0d", "sighting--e4918edd-6cb7-4d64-a7e0-01477779729d", "sighting--c75a9ca3-dd62-4b8b-93af-c2ee637de66c", "sighting--e487985e-bf02-45e7-9b94-d6a42e903c32", "sighting--9cafba98-72b0-4bd6-9066-150b6f96bdb2", "sighting--7e360909-4899-4da9-8b3b-f7f3b0fced65", "sighting--5481887e-68a9-443e-bdb5-9e4266da720a", "sighting--f8a9fefc-10b3-4670-9343-6c1cc60a0f0d", "sighting--48b122be-fdfa-4552-aa32-b73d8c9d47d7", "sighting--75db3d22-7d99-4c94-8832-edccd0ca630c", "sighting--5efece86-803b-4aa3-83bd-358741d26fac", "sighting--3d311835-6bd5-45ba-bb0c-2124053c63da", "sighting--b0d5dff2-a299-41d7-b91f-2f0cc422b1a9", "sighting--f30898d0-216c-4bac-bd59-5651da51950d", "sighting--ed3b3c1e-7a27-46a7-b205-1f685b5db071", "sighting--f22e19ce-409a-4a84-baa0-78980c1756e6", "sighting--1cd25c50-6fc6-43a4-988a-e2cdd1d97765", "sighting--ea156cd9-7f3a-4432-9a76-276139b95b7a", "sighting--41a08305-2839-45f3-9cff-07aafa737de4", "sighting--64c30a0c-f78a-42c6-9336-b4c6dc5946dd", "sighting--3db76061-26d9-4d65-940f-8d7e787005a5", "sighting--49848e6e-4b82-49d0-9ab9-9dc3075d7dd7", "sighting--ed54de3b-0673-458c-91f4-c5e6b8647533", "sighting--3feeca85-4811-4150-9fe5-d232f6662461", "sighting--64e39e8a-62b2-48c5-b71c-7f7ac69cdabc", "sighting--79d6aebe-a7fb-42d8-9d88-9b92101cfbff", "sighting--1a4c02ad-34a7-4db8-8277-536a3df1cf33", "sighting--bb35546e-13d8-4704-a670-56bade26ac72", "sighting--040a52cb-0538-452a-bf21-e9ec8e3e272e", "sighting--58a79dde-9002-489d-ac05-49620f7e9cc5", "sighting--6d91e8d5-455a-467c-8659-cfc2844c03ac", "sighting--f2c0e18e-f4dd-46c0-ac5c-8624b54e39b6", "sighting--87fea107-a795-4bbf-9a51-211dca3dd19a", "sighting--3dfd2f85-e166-4770-9203-d9bceef3a151", "sighting--9a78861d-11ab-4425-8cfe-5460836a14c2", "sighting--4a892b0a-272d-49af-b203-51815befd34a", "sighting--f8853e14-2f05-4cb5-9dd4-0e87626b1002", "sighting--6e94bc02-31f9-4552-8ffa-971a03ed93de", "sighting--8a333bd0-064b-4b6e-88c4-014055720a60", "sighting--776c98a4-c603-443d-a8e3-31be0b3ad2c5", "sighting--e4c87a11-a2ff-41ce-9985-1215414bf527", "sighting--cd48ab38-d8ec-4c8b-9620-b8a63e9441e5", "sighting--bb452810-76fb-4f3c-8730-4ad5d6057b6a", "sighting--1d0ad22e-c2b4-46b4-bf77-d7f2af8759b7", "sighting--7c068635-91ba-4358-9755-ff5ee3e83959", "sighting--965a19d0-b111-45c1-b9ce-7b1b7406767b", "sighting--8563b76f-2f17-485d-a723-67437894afca", "sighting--0de76078-6e19-4592-93b5-1084bf3b61b8", "sighting--0f22f4f6-a4d0-469c-b409-c76b982d4deb", "sighting--959c5496-45a2-479b-8702-3008161e8fd8", "sighting--ba1d6f5a-9deb-4bf2-8310-84c507f7d22d", "sighting--54606890-37ae-4750-b158-8da1f3de95d8", "sighting--8f6aec97-339a-4472-9531-6694793d921e", "sighting--5c9ef8d6-0367-4092-9287-04e64fcfd587", "sighting--69e24b8d-6147-415c-84e5-a0afb04d93ba", "sighting--74ae14f8-2924-4257-8dd7-243014e1b1e8", "sighting--82cf85d5-a785-4630-82d0-940c9a056c49", "sighting--195fe3d0-c8f0-4ee2-aacb-f9e6b9e3c154", "sighting--9c0a310b-af59-45b6-be3d-068d71392021", "sighting--457a4575-476b-4381-bbb8-80f0945c48d6", "sighting--0c9318d1-0875-4c2b-a631-d517c907d67a", "sighting--70a1d72c-c5ce-4bdb-9309-91569cff92a8", "sighting--2fbb06b6-45c0-4ad3-814d-eff6d63fd643", "sighting--5ad2805f-a9f1-4365-8914-728333b28047", "sighting--6f05b744-fa26-4004-9d31-8b944b5e5331", "sighting--ed7ab047-5ada-406f-9969-e306c652c3c3", "sighting--d6d6cc65-c8f3-4259-abbd-caf3b3a9503f", "sighting--af4d8d2c-4e14-4ad6-8765-a8ae04680e01", "sighting--104fb503-d8e7-49bd-aae9-ad22bf58720b", "sighting--9d9c2210-85b4-49af-adaa-c06a519a7622", "sighting--71bdfc6d-223f-4ec2-a30b-2ed2f0c1f638", "sighting--fc6c9ec5-9a2b-4261-bad6-fde4e659f005", "sighting--683c3d7c-ecb4-4ab9-861c-976102b65f37", "sighting--bd02e82b-e286-4779-8d51-dc09098b10b1", "sighting--646c1fac-85fe-40f3-8b91-c40f872875ff", "sighting--84707fca-44c1-48d1-a1ce-ea984f3defd7", "sighting--08047564-8ce3-4be8-92e2-2353d4fcb56a", "sighting--6aa27bad-4af4-4065-9deb-8575ecf641ee", "sighting--64b47e69-fe84-4b72-bf56-6f128606f5d9", "sighting--128d0480-420b-4c24-8b59-5dbce8710698", "sighting--bab22197-214b-4c89-9add-05c85e35ca07", "sighting--992b1e64-aadc-4ec5-871f-d5a4cd1f3c74", "sighting--b35d6280-67c7-432f-81c1-e55bf1c16f1b", "sighting--741a1dc6-119d-4c60-bf4f-02dcc0520b00", "sighting--cd33f1e4-21d7-4707-8e7e-92f0ca2ad7c3", "sighting--8f4d161c-2b3c-486f-8ebf-2a4227269dd4", "sighting--e70f2625-8138-4254-9ef1-d2b71234d617", "sighting--d1d02359-b9c5-4d2e-88a5-79ce78cdc9be", "sighting--b6eb9908-bb8f-4f0f-aa85-e9ae05b3e01f", "sighting--42af33ea-8b3d-40db-8265-499d1fe8fee5", "sighting--6c9f0617-2183-427c-98c6-fd16b9bd71e6", "sighting--95e71c8d-c7d9-4f71-bd02-d251dfb1e63a", "sighting--816760b0-a7fd-40c5-8d5f-4a579464856b", "sighting--462bdd6f-1898-4da7-87a9-c69b4b22c912", "sighting--fa1f7cdf-9500-4c1c-b398-de1082b4776a", "sighting--967e43a2-2332-4706-8657-2df26966996c", "sighting--e6d0a4b2-9f79-4fdb-b882-ea510a2e1dc1", "sighting--b7da7d4c-e917-4495-8ff0-16100b228ff8", "sighting--143aad30-a8e5-433e-832e-69ba07d892de", "sighting--4f256f35-33d9-4c1a-93c4-208135e19eca", "sighting--d66c2341-f3cd-45b4-9c4f-1462031c016c", "sighting--a73687b7-9867-4887-97d5-a0ca56e0df82", "sighting--01bbccd6-0310-4ab2-9404-98ff90bc5af3", "sighting--7f1adeda-590d-4f98-b49f-c5421e4b081d", "sighting--c595b4b1-716a-4c3c-bb81-f142a400d8a5", "sighting--58d52dd9-7b74-481b-8916-8159bcb4003d", "sighting--c0d3194f-0e3e-4929-872e-efb5ec47306c", "sighting--350cf305-3d35-4d7c-a423-d7d60928c0ba", "sighting--045e09c5-2bbc-40b8-99b7-39eb9e5d058b", "sighting--4580fd8c-a735-4368-8fb2-30f83297faa6", "sighting--617d6f84-fd08-4dec-8402-49dedccbe578", "sighting--a0718663-fbb1-41cb-9716-8505298c5764", "sighting--2d3588f8-466a-484a-a110-789491cc6046", "sighting--6732cb4b-08b2-4921-a39e-612d10e9cf96", "sighting--cad16119-055a-4ca4-b080-277717ffd82f", "sighting--af3d148c-5f50-43ad-9ba4-47793ba92431", "sighting--cb590e41-ae4e-4cd5-9549-522b1721cc71", "sighting--e8232cc4-2535-49ba-9488-1eea29c65420", "sighting--fcb566b5-6a68-47a9-8c80-0b58394ac22e", "sighting--ed484ce1-73ee-449a-af44-814520b5c6de", "sighting--ed29d864-5e05-49ae-997a-021ec4843b59", "sighting--bb069660-01fe-4232-afe2-ad52918973fb", "sighting--3a014440-0fc3-4829-baf7-e954a1ad2d89", "sighting--3a4ed036-697d-4382-bc5c-f8f108d6cb21", "sighting--77913fdb-e90a-44fa-90bc-5e76df48dfa7", "sighting--37967db6-3b20-478d-80db-cb0f968cad50", "sighting--81c95e02-1af4-42a7-a3c9-8903170f6ec6", "sighting--86ef5d31-4c4d-4cd9-9460-87f631bda099", "sighting--de91dd4e-dc2f-4c19-a881-228450872527", "sighting--88b626a5-2c28-44d8-8a76-78579c049818", "sighting--2fec0ae7-2a3d-4c1a-b6f7-bf0a9627d396", "sighting--bcbc40e1-7f6b-499e-83a2-9a6e4e5b1b95", "sighting--c04d43c2-3e52-4314-8dd0-97f94c988fad", "sighting--b51ff268-6f52-40f8-8ad9-ab43c4e5f9e9", "sighting--2594afd4-6f58-45a5-b00b-30ed731f2ef7", "sighting--b0954ef0-b4c9-4517-b6d8-e37ed57f52e8", "sighting--d57093f3-ddf0-40c9-b701-b11cdbeec609", "sighting--647212dc-0521-424c-aae8-985e61c936a2", "sighting--9b8a0d63-5400-4eb3-b4db-9047f2679460", "sighting--e74d2869-6de8-46ba-82a2-becad8eb73b7", "sighting--dae91286-6256-4aa6-924a-30b7f544f03d", "sighting--28b64ec7-3b76-4867-b27d-a31d71552066", "sighting--8881b0fc-7982-4bbd-9d0b-1046b6fec3d5", "sighting--80d567ef-093d-4c4e-8a43-83c1edee437a", "sighting--bc077c2c-c6eb-4b32-ba86-1d39fcc672dc", "sighting--da3a9caa-f69c-4ea0-8cc6-caf08fc6d782", "sighting--1c0bce8c-589f-4b8b-8e50-d0078377a4e6", "sighting--681e62b5-f6ef-4908-91d1-e748b2fa9b66", "sighting--6d349c3d-eb0d-425d-b4f0-54a7edf79d0a", "sighting--63d57ae5-b419-4a4f-b622-317dc00477c4", "sighting--5e8fe6e5-710f-4483-b195-7ac08f173c1e", "sighting--6e2308ca-0cd9-491a-8f64-29d7d0786db0", "sighting--ef768f22-1012-41c7-b8d4-ca226bf64009", "sighting--6b135da9-6202-49cc-9103-1a4031a2bd5b", "sighting--f2780481-26e9-4ac0-8104-949f851494af", "sighting--13324f21-bd84-4bb6-9919-c8c68bb5c1d4", "sighting--e4cad274-53c0-4790-88c7-70d6eeded6b6", "sighting--ba387c41-2f10-4c3b-946a-d50c1bfb5006", "sighting--c79e9ffe-b659-4fb6-9dec-c409a59e73dc", "sighting--51841a8b-b683-491d-94a1-7c8a47f1473c", "sighting--b1785d6d-abac-486f-95bd-7c13dbc4e0b5", "sighting--8bfd823d-f217-43c9-bf1f-3fd981ea0e0c", "sighting--0c9156bc-ccad-4ece-8ccf-fbfa34886550", "sighting--584a6d54-a534-465b-9409-967a7c149234", "sighting--4e07da27-c361-4857-b497-170e9bbdf28f", "sighting--ed2362f8-3a16-4804-82fe-01fb7c0b941d", "sighting--51982589-0120-41e1-bc05-ab29ed70c9ac", "sighting--a37071a9-9dd1-4475-8766-9440c598392a", "sighting--46bd9c72-3eb8-4e87-9439-26f114a80c91", "sighting--ad0084d0-5c61-47fc-a576-0b2e890de0a5", "sighting--b4674dfb-9d29-43c9-bfd4-a0ef27d363d4", "sighting--5555d785-36b0-478c-9e48-d06f020d3a7a", "sighting--426a6823-19d5-499f-9755-cf50999019ed", "sighting--bfe81b74-73fb-40df-9ffc-b8eb47697e3e", "sighting--bf60db11-3fc5-4a20-b6c0-077ceb857d69", "sighting--94127bca-8164-43aa-9ac9-a898c87a73da", "sighting--d470c8a1-22de-4764-a0b1-9292d6b7bb4a", "sighting--f8034a64-78d0-4d0b-bbc2-39c355d2e253", "sighting--26dd8227-576f-477d-b0a6-13862bb04dd5", "sighting--c5040538-285e-4116-bb97-7bd4e4b3bb87", "sighting--1ec81a69-9d89-48f8-b26e-4590aea2acdd", "sighting--7461c29b-c0ba-4c5a-b5cc-7087f79d9b26", "sighting--e74623ff-bc8e-4f17-bc03-0d879331e262", "sighting--6d1a6d80-cd77-4710-8bd6-d3017ff6faae", "sighting--52da6835-4f94-4d2d-a085-e64ae24bab0a", "sighting--f44d3184-7e4b-423e-a873-1482b8e95a72", "sighting--a68e92d7-ca56-49d5-bdcf-1c153fec5953", "sighting--32e5da35-75ca-43fc-9774-489953746418", "sighting--a9dd1441-9b3e-42b8-a74f-f06c4037e774", "sighting--15b0e0d8-bebf-4269-a587-a0f34bf42961", "sighting--69b6f222-8383-438a-9c64-616eeeb73d53", "sighting--b51a2bb1-fc6e-48c4-b154-0a031210246e", "sighting--ba32d190-d242-4d44-89ff-2c9764076ac8", "sighting--c214bd61-a91c-4b63-a9b6-f38296ff5bcd", "sighting--dbd9a63e-e358-470e-b9b5-352882fe921e", "sighting--95e3c331-a394-4e0f-9265-3b4c2cb31ad0", "sighting--6f7d8f94-7ac4-4390-8d90-724ac7617a16", "sighting--78e79b8e-9624-4846-82d7-b14570f06c4d", "sighting--2f4f8b4e-4b81-4c21-9a7b-97802309ffae", "sighting--3ea7b466-00b7-4e4f-b5c5-3542de343d5f", "sighting--4a791139-867e-4d2c-979b-53688e6e0792", "sighting--35ef4cc0-d3ef-47e4-af6c-5c0a6fad9042", "sighting--5d1939a5-c742-4081-824c-2fd7da65a577", "sighting--aba18a38-db4b-4818-bc3c-53ae40b18c8e", "sighting--d304179d-1f5b-4d71-9450-57f6ac4d629f", "sighting--bde5d3d4-b4d8-400a-a6f0-60c7e599ad3d", "sighting--15b05e31-bc0b-4228-ad09-48b190ea5495", "sighting--43839a59-86e6-4781-ae95-82616eeefb78", "sighting--52a7f175-2550-4e54-91d5-d4f9b9ecd270", "sighting--0200b330-3997-468b-9c74-42d06d2c811a", "sighting--d09bac58-ccdd-4c64-96d8-bd0f766dcf7c", "sighting--215f1438-8d87-458a-bf47-9919ca4e486a", "sighting--eada8385-a51f-439a-b740-5dc9f231a6d0", "sighting--5bcea4cf-3faa-457e-8fcb-52aa421d7cb0", "sighting--e5ee00eb-0128-4ce7-beb8-515451e8ebf9", "sighting--0b5cce3f-4e50-40f8-b73f-8f432029978c", "sighting--52581d0f-3ab2-4baa-9759-37c5c8af8f8f", "sighting--5576b6b2-1f60-40b4-8703-c21ce10e1604", "sighting--860a6d26-dd26-41cd-ab15-bfc06ca61cf1", "sighting--91254b3d-d195-4e64-a025-33c141efba16", "sighting--6d351d12-59b4-4886-81dc-ea32dc147432", "sighting--673b23ea-bc85-477f-81e3-fd2557ac9d74", "sighting--091da1df-eafd-4327-8488-05c581c09134", "sighting--c990d978-68b1-40c9-9d71-aaf349054f6a", "sighting--36378f5e-3978-40fd-8848-ca1af836935c", "sighting--622d7ef6-af5f-4e79-b3a5-79891192936b", "sighting--e57fc2e1-a298-49fc-8004-07a35400ea31", "sighting--815d7d96-76a7-4e23-a85e-2216b2c89615", "sighting--028c8f4e-e016-4175-aa79-57029e3b4c9b", "sighting--705b2c2a-5eb1-434e-aae3-be9f2d6eb84b", "sighting--63aa69ff-ec0c-4b54-a0d3-0603c9619738", "sighting--5e33feb1-63d2-41ca-90bb-b4549e327b25", "sighting--e6ec28b5-f992-4df8-904f-8d936e76b45d", "sighting--f549d8e7-67ad-401d-95bc-5a353e0a8a27", "sighting--9de94254-2fbd-4700-af4c-ab62981253a8", "sighting--c43ec614-d9f2-40d2-9bc8-ca191a765e71", "sighting--bc4d5b30-26f6-4064-b884-82ad2f365e58", "sighting--dd3cb402-43fb-42f4-b3dd-2c32b2d7b6ae", "sighting--74405645-1bb8-4058-95a7-80808f830d01", "sighting--270e833e-588c-41d3-9c70-7845bb27ef57", "sighting--30c24585-a341-45f8-a1ea-14d9e3369498", "sighting--6b3e91d3-96e4-4a47-99e7-c3834cfce94b", "sighting--b5685c92-8391-459a-9fdb-e33b61b8ef44", "sighting--26bf52e4-edad-4092-81ed-6a9b315871a0", "sighting--868d0f9f-d746-42a9-bbb4-7625d287b7e4", "sighting--dad91f8c-6967-4d24-8ea5-811b1ff9c334", "sighting--970c6d86-3bfc-4a90-9d2c-9df877a887b9", "sighting--78c7f451-c43d-49ca-9624-5329b1a261cd", "sighting--2e0aa9bc-6c3c-4d8e-8d55-d75b68268961", "sighting--7027f9b2-010c-4256-90bf-3c58f4a5107f", "sighting--e6f2cf6b-ab8f-42cb-97c2-1f23b7130e8c", "sighting--912456e3-6933-4c7c-b3ea-60bc1edbe65e", "sighting--9d18760f-94b1-4bff-9c0d-12be7382b134", "sighting--a5d74c44-66fd-4ec4-bf83-9d876e2bbeb1", "sighting--d66024b3-6bd7-4041-a569-e5646f561c25", "sighting--d7d8aa46-32a3-4027-9081-44f0edbb5be7", "sighting--399b90f4-f22d-45c6-91a3-51d9e09790b7", "sighting--5e8038ca-53dd-46f9-b9c8-316b4111e200", "sighting--28e5436d-bbca-4fdb-8ade-14b41bf6a7f7", "sighting--9698b297-038f-4d90-a1ca-fd01d4f96a4c", "sighting--3232d2b8-ee55-4d0f-a36f-3edda82ecf1c", "sighting--487574af-7330-4952-89a8-cf18713acfee", "sighting--c116d1dd-05ec-4334-bf11-68141c4073ce", "sighting--12136e28-7674-4f27-ae4f-c29a2f26acb6", "sighting--6ea355ee-f7be-4c8b-8b89-e7dbab3d9def", "sighting--72223314-d01e-4354-a0ca-900ed68fa89d", "sighting--1c215c88-dabe-4053-9e5b-e1b3ee408245", "sighting--2a39ccbd-0021-4a5e-8cab-a203dce33d5a", "sighting--6c2d7457-b3c8-48e5-b05a-43490eb6291e", "sighting--b79e83c8-375e-4dfc-83ef-4bba59222bf5", "sighting--bfbaf3d7-3acf-4f86-945b-971cebf7948b", "sighting--3b36e6fe-dbf4-4558-9931-1b5a5cfd0986", "sighting--78cb6d51-b028-4442-b6c3-cfc3ffdac54c", "sighting--e0c9eb2f-b1fa-487c-b4d7-cd9874def5a4", "sighting--83546147-04b1-4b15-ab4d-a444c547b3db", "sighting--de5a86de-78f5-4deb-84b3-cf34861e6f3c", "sighting--6748fa81-4683-4598-bf0c-1ab96e409993", "sighting--21e3826c-0e30-4a0e-b09d-7d12103caa48", "sighting--b11ad792-4981-4821-ba61-e7783997996d", "sighting--307f90d3-6d09-47cb-a35e-80e1762a45e4", "sighting--9c5331b4-161f-475f-853a-dde62271847e", "sighting--b8e60600-8c3b-46ce-9468-5cdc970cfa22", "sighting--35e4237f-c3a7-4428-86fa-061dc1238409", "sighting--ee179a31-da1b-43c5-967f-83614e500b35", "sighting--fe139189-7e4e-4ed0-8052-5f1aee02ab44", "sighting--e54e8aea-2254-4a1c-bb0f-a7d66e62f3e8", "sighting--17c2f649-2c44-49a3-9c6e-36262beab053", "sighting--c47d653c-1712-4751-96df-e10658b4fb0f", "sighting--23c3b37d-bfa7-4efc-8adc-e92934d8727b", "sighting--bd175a4e-07e2-4747-b7ad-bf431418d312", "sighting--c9a78178-728a-4c80-8f11-c926bcf49acd", "sighting--33f0e305-d7d9-42c7-89fc-cfce0bbd9aac", "sighting--f7f2a739-0e00-4dae-931b-52d5f3e9a3a8", "sighting--cdb971a2-cd58-4e72-83b7-6abd58663622", "sighting--e84a2884-73af-4a64-a83b-2d6e7467b6c7", "sighting--22949a15-42b8-49dc-91b1-c8e6adbaaf3e", "sighting--87abd1dc-4f6c-49cf-80fb-fefb161b5e98", "sighting--64bb2322-ed67-44b6-92c5-579c6cc55536", "sighting--16abe126-eb4e-4903-9947-c1673b1d2f84", "sighting--14a0ecf3-1a12-453a-88b2-21ff1c4a3968", "sighting--98d784b2-e887-450d-8a0e-5e30228cd806", "sighting--dee04742-befc-42d4-860c-4f0fd446c5c7", "sighting--328f541c-af3c-45d4-ab56-ace4de5acce6", "sighting--5d1f1238-eca2-4f1d-a03e-883776e44c75", "sighting--68fc51bd-1199-4101-9718-6084692d7d9a", "sighting--324f5eaa-d4a1-47ed-bc47-3943844a52fd", "sighting--34c97280-c0ff-4a33-b4bb-95e580bba538", "sighting--38d0b7d1-95ee-42d0-8b5b-15555fd1a1d3", "sighting--78cb19f5-e7bb-4a48-a887-3b5d6bd7b821", "sighting--0aed2906-10b8-40cf-863f-8b237f6fd69d", "sighting--5bdd32de-5ebc-4891-9f19-b4ff62552641", "sighting--fce46cb8-de2d-49e7-a120-ffcb8c3b6c1a", "sighting--d3e47f40-d221-4322-bdf5-39e2fa66b598", "sighting--797c5e4a-b7b2-4713-8c0c-6b42228f4e44", "sighting--f8f2b382-f2b2-49f3-ba23-b6e131740b6b", "sighting--180df404-c6a8-488d-aabf-c6a89ba3ea27", "sighting--99470310-41cf-4574-9739-b66a5364497c", "sighting--c0b0d56b-7b93-4099-b54b-9f7c6c176cbe", "sighting--c322110e-a505-4db7-8fad-4cc72ef17417", "sighting--52301fd1-af01-4388-89e9-9c50a47a2fea", "sighting--ed3e7f84-6b54-4188-93cd-901e64e81a75", "sighting--8fea1c2e-91e5-490b-bda8-438fc37d1c47", "sighting--ab76e75f-96e0-467a-88d7-96f9f81d8141", "sighting--1fed0ac5-735e-4e04-9940-ee0a8ce6e155", "sighting--52c1269f-559b-42fd-a62a-f723085d7da5", "sighting--14c0e5bf-bea8-420b-a6ac-ce840966f712", "sighting--f1a46e70-a4bd-4283-84ce-c904146bd369", "sighting--81212cad-feaa-4fce-a28f-1ef2368c2bb1", "sighting--a1561629-cac9-4244-ac12-009d67074de9", "sighting--c457dcef-0889-4e41-8170-3f091e012829", "sighting--7928f7ad-7448-4311-9e20-5a34c03b4626", "sighting--7ab6360d-ef8d-407c-abbd-07ff9549de46", "sighting--803dd227-4bef-4d7a-8c35-c9067b72b775", "sighting--fcd24dea-b4c3-4bef-80de-3a2538c8a51c", "sighting--6b82a2e3-247d-4706-9c0c-8ba02f317176", "sighting--9fbbc9ac-f167-4c15-aad8-5ba4ddb9b5fd", "sighting--6860fe59-c470-46ee-8b86-e43bcd654a14", "sighting--47d54d6d-03d9-4410-9d6a-187b2bbd2f29", "sighting--bc165eb0-e822-48d7-86ba-8cce6240cfa2", "sighting--12a6276f-15e1-4937-8dfe-80d1fce6a729", "sighting--4c29b9a4-0eee-485c-aa02-04a549047f8a", "sighting--e15b3595-48fc-40d9-9efc-f49eb804f5a5", "sighting--94ab3276-dc08-4eb4-be7a-9f99f11abd3e", "sighting--37ff1fa7-03bb-462b-9f7a-691504f60ea9", "sighting--956c5169-8564-470b-9ffd-d755f8af53b3", "sighting--8fd1ec2a-8c1d-4cbb-94e9-e7571c156dc4", "sighting--15fe2222-d043-42fe-a8e5-63206108ea72", "sighting--ac7a4af3-c458-4ae8-abd0-6cff891a7f15", "sighting--c03c0e7a-3ae6-43c7-8f14-644965ca3afc", "sighting--35399279-7303-44b8-b9c2-e84b2d71d2ee", "sighting--27134a1b-b195-4300-b8c4-2844d0f6b715", "sighting--56c3857a-5606-4dff-b630-c5fd306bea4e", "sighting--531c57f9-e8b6-4eaf-a162-33844f2cac5c", "sighting--03e2c12a-28d6-46cc-9862-0bd008acfa54", "sighting--3ac6076c-cf75-47d8-909e-01e71112145a", "sighting--334ec563-5add-4d6c-931b-ffd92e5331a1", "sighting--2dc4220c-f860-437b-b948-6ee9d663f678", "sighting--3e52e97e-94fc-40b9-ab1f-cd3e9fa6cd65", "sighting--4242dd79-3b0d-4356-aebf-779df88e6bd4", "sighting--1738a1d1-e802-46f7-8003-dba401c54b53", "sighting--df672bcc-47a9-45aa-aa5d-72a9938cffaf", "sighting--c2434ce0-7c31-449e-9a7f-b93a9e258114", "sighting--de6b16d5-e78d-42ee-97d5-871dd15e67bb", "sighting--1d556f56-733d-44ab-b2ed-46a4d4f817a0", "sighting--50aa6512-2a8c-4253-9309-1a17e4731a80", "sighting--45b6cf02-e3ff-4314-b2b3-7e0b97bd182d", "sighting--ba981bf5-1ce6-4007-b2bb-37b436451ba3", "sighting--76cecf56-d75c-414a-847d-a3ec670212bc", "sighting--a16ee126-2b07-4467-97f1-d6b82ac2d0bf", "sighting--be044d8b-24ab-4181-ac71-a0cfcf80d1a1", "sighting--9f7c6170-6ac4-452c-b9a1-747772341ef1", "sighting--61da7de8-5695-4a17-b898-d7b720735b5c", "sighting--867d9162-112e-4ad8-bd58-6bd8d107c0c0", "sighting--28f20405-7f49-4b7d-a4e3-4b30e22d2ad3", "sighting--a8eef028-25aa-485e-9495-f945df1e2e11", "sighting--17f30a7c-dc01-4c9a-9820-ab57f4ab6bbf", "sighting--28e7ce2f-6161-413a-8dda-0c227eefc873", "sighting--e6cc5de3-10cf-466f-a1ef-27855df59826", "sighting--4ed54c66-e0ee-4015-9576-5af7bcce3d01", "sighting--a77ab281-276f-42c6-8a1d-20413900deea", "sighting--35ce37dc-6312-482d-a53a-3eea78e7bf0c", "sighting--fccd3fe6-b5a6-4a43-9939-4093ce7724fd", "sighting--52d2bec1-870c-400c-8414-1626fdd3bd3d", "sighting--c672a5e6-7e85-445e-a54b-7ffc90a7c066", "sighting--2e3324f4-9550-4d72-8d30-1e08b1902b9e", "sighting--d930516f-b4b4-4aaa-9301-594c08609eb2", "sighting--6f099220-acc3-48b3-b8ff-f8d88a7b392a", "sighting--190bada9-e8f8-4e39-ba19-05743bd93281", "sighting--01d02547-e1e6-49df-b580-68f003a4160f", "sighting--931f7f16-a1fd-4695-a459-3ce237a21690", "sighting--102e610a-869f-4ff2-82cb-c1abd5d7ae10", "sighting--3840cbe1-c3bf-49c2-a005-245d8b551944", "sighting--9a8330e4-1451-4306-bc7b-74131ac77ce8", "sighting--548d2698-8d1f-4859-9cae-1e02038c7c44", "sighting--46ae22d5-9626-4854-a95f-dcbb0c244fb4", "sighting--d43863c5-03d2-4c55-8ee0-30f5472bfee9", "sighting--daf43894-c911-4d78-9371-e02a2296a3cc", "sighting--00aa0ed2-53e6-43bb-9788-da5293659bdc", "sighting--1a2c3ba0-72e2-4952-b773-6799869d8177", "sighting--62607118-3dcc-4da8-965a-4e47d733c0a6", "sighting--b179b604-deca-49f7-b126-bdcd43381c48", "sighting--c37c7443-f281-4af7-a2f1-89d556322085", "sighting--68c2b29e-72b6-4f43-97d6-9013232fadf2", "sighting--da65ce46-c82f-4c92-ae84-5a82632b6573", "sighting--b952fade-a93f-48d7-aea4-b5db92d20b8e", "sighting--71c0336c-0716-486e-86ee-26f1c2966666", "sighting--752fff2b-6fed-4d21-82d1-894d950164b1", "sighting--ce592095-26be-44c7-9c39-049693dabadb", "sighting--7a82af03-801b-4ccc-94c0-3d3a235beb65", "sighting--4edf4799-0c80-4d1d-ad07-9daf4e65a4ed", "sighting--824b8fbb-4a30-4f1c-9bc8-e9c5eb101709", "sighting--c48c8972-b17d-4378-905f-9c5a80676367", "sighting--6e45115c-78da-48e2-a448-ce114f1a3632", "sighting--86d76661-5a71-43b7-bd86-1ccb3336cb71", "sighting--11a53706-04e2-463c-bee0-79bc04a64d20", "sighting--48b31210-c045-4048-a756-1ed2b5a041c0", "sighting--6f30409f-bb9a-4839-a099-4ae2e2d0915e", "sighting--b047e93b-3623-415b-86ef-48aa16e086b4", "sighting--1172a57e-af56-49c6-a962-2f630f275a72", "sighting--345219a0-30e6-471a-b477-104b3a202437", "sighting--ca375eaa-e9ce-4890-8184-95bee0b8c653", "sighting--519664d4-aca2-40bc-8440-1676e96725ab", "sighting--9eb43503-12a2-420e-80a7-1a0e7f7b5d15", "sighting--eed1d03b-31bb-414e-b928-5dfda64161bd", "sighting--8158110f-b3de-48f7-a1eb-9c9353047275", "sighting--f2820d66-053e-4517-85dc-7477bc67d3e1", "sighting--3cbc8676-ad77-49e0-9b42-82069f512b60", "sighting--950f84d5-f542-416d-b5a7-8fa396512d1e", "sighting--7f54ec0f-d12e-4033-99d6-9f9ccae9c69c", "sighting--5398eea1-be67-40ba-a034-2a29a92ebcfe", "sighting--229ab769-7b26-4b07-b644-bdbdf463701a", "sighting--127470cc-9c17-4e4e-95b6-879f090a1f28", "sighting--3bf1d5b7-8595-45b0-bc92-67381d0dd4b8", "sighting--cfa077aa-b26d-45be-a46a-9703f76468d5", "sighting--33e57490-8aad-4fd1-b3bc-597ae1c1a061", "sighting--e29fbf8b-7e89-42c4-8963-786bfe0eda97", "sighting--9ee1be45-56f0-4f13-84d5-015cba7a6eee", "sighting--73679d72-8048-4227-8a12-9ee03a1bbd6b", "sighting--e3207573-e3d2-45fb-aa86-a25cfd23423b", "sighting--1e538d44-a089-4fef-93ed-38672e603bb3", "sighting--156ead07-7910-4092-87cf-bd71d3d05cec", "sighting--b0a7b7df-16b4-4080-a7ce-b1ebfea373e4", "sighting--2f33cbf7-df0d-454c-ade3-0564a8da025b", "sighting--a4f3cdf7-4767-47a4-befc-bc3487b2540f", "sighting--c8f273f5-ec4c-479e-9a02-7facfeae7c8c", "sighting--aee72ac8-c5e0-4dbb-807a-c0deb7a9dec6", "sighting--95110bbb-62c0-4eef-a034-0107fe35061e", "sighting--96f4fe73-33dc-4336-8d7a-89e9a77e4cb4", "sighting--22c97b53-2ac1-4473-818b-4118eb17d300", "sighting--63e06823-5152-4629-b296-a38398c1b0c4", "sighting--d67655c0-c983-465a-8634-f4bccd9f65f7", "sighting--eac61d67-3744-4237-aa4a-d8d338a8c6ff", "sighting--6cbaaafd-0cc8-48f9-9cbb-4c8e6a4dd0dc", "sighting--dc571cc9-fd0b-4550-8391-5a16ae66c16e", "sighting--8f25431f-7c94-41f4-b5d0-3d33dbb6ead0", "sighting--685556e0-3d04-4a64-b0e1-c7746e51b333", "sighting--21d4c68f-4f8c-489a-9800-d30c943dbc8b", "sighting--17825a17-b13a-4cdb-bf78-7f53150af87a", "sighting--1439d125-4ef1-4838-93ee-9e7e62a84786", "sighting--c3d7bc6b-9970-477f-bd4a-9a4ca00ef5c0", "sighting--4424d6ba-f967-4778-9cf9-5efbbe27128d", "sighting--611cc1d9-7738-4f94-a2d6-dc0a536b984e", "sighting--34089e30-a722-4713-a813-a3b93225de81", "sighting--0fcea197-9f32-48d4-be45-bdd6a09cb6ce", "sighting--35172770-e4f8-4d8d-a7df-04c7e4847dce", "sighting--69b66f90-c455-465d-8003-60469212334f", "sighting--5fda9abc-38fd-4822-9fbd-edce470d24f2", "sighting--85eb5226-dd52-4e77-88e1-6b4d5346c052", "sighting--15e1b862-d4ed-4688-832e-2db0c23c4666", "sighting--12f72a13-619b-4a99-9825-c52602ed6e94", "sighting--48502ddd-505e-4a18-89f1-7418bc56809f", "sighting--f8e13928-2436-40cf-82f3-5d8e84691f33", "sighting--e5c92c68-6403-4b4e-b694-0ce9a1d96ba3", "sighting--7d765fd7-2fc4-410d-8344-37beab1fd9de", "sighting--0d5c2f3f-29f8-4946-ba07-41332fd84b3a", "sighting--b403cc87-1e94-467a-af6d-4048cdbb1e35", "sighting--2ae42137-ef0d-4741-9b72-64065f5f7a03", "sighting--39e1710e-92ae-46b0-abd0-8d9149bb8b8b", "sighting--ac1e67f2-cb2b-4704-a894-ae1d2027c0e0", "sighting--60594bc0-6074-45ae-81ad-028472424c81", "sighting--1dce8f98-d664-4eb5-921d-c6de77483c27", "sighting--276a5e5f-c719-4c10-86ab-5b6e2009f834", "sighting--bd26a7cd-1677-40c9-a7c7-9ff96d85bde0", "sighting--d646ad47-87c8-4513-8c5a-4d1e4437efea", "sighting--4a938644-0d83-428d-8af8-47606edf4d9c", "sighting--4ca1bd0d-bcdc-47f1-bbdf-f76174f7261f", "sighting--7fc1a7c0-a498-49e0-a49a-8543cebba37f", "sighting--35ca421f-61ac-4215-89cd-298c32ca077b", "sighting--a5cfff63-c12c-4e6a-a7e3-d0568fad5415", "sighting--9cadb111-d5a6-4361-a73e-80af7226efae", "sighting--84e5ef7f-a742-4b52-8daa-dd30e916f791", "sighting--2264a199-3dc2-471e-9bc5-0def717f04a9", "sighting--7f1d4dbd-665e-4f46-b01b-e8b449a91f6c", "sighting--39905f6f-a79f-47f1-866b-2d3f71745b23", "sighting--ebc34ad8-a43c-4bfc-9902-7304a74ec49e", "sighting--57303672-50a7-4cef-b33b-20d03fe903ee", "sighting--50bdfe92-42df-4fd6-9042-12f69a01daca", "sighting--23f43f5b-88b9-4543-b7be-07a9f5b7d7f7", "sighting--b1369503-d7cf-4680-8b22-dfe4179112bb", "sighting--b1a807ab-d5a9-4331-b7b2-e7191391a145", "sighting--2c74e528-9c39-45c0-ac31-5e6472027c4c", "sighting--56c4dcce-7ddb-4fc9-ad68-657a0c1bcb05", "sighting--5799f424-5605-4aa9-bbe2-cb040cfe326f", "sighting--702d76b0-d6c3-4714-81b9-6d17287178a6", "sighting--207c15fb-20f2-4bc5-96e6-0b16b121a7ee", "sighting--6131b3fb-8801-4f81-b1b0-f499113d0ef8", "sighting--8db83243-2359-4386-887f-c0b44419715a", "sighting--ff89fecb-940b-4d80-b543-41991eb89f37", "sighting--549d1fa1-e828-41d0-9af1-3b122ee00567", "sighting--0a6d13b4-f446-4c44-af1d-c06c3aa42d94", "sighting--3d8f1975-5b9f-4351-8295-7d201a9500d2", "sighting--7ca1e1f6-b4e3-4d25-9606-933f41ac429f", "sighting--658db91e-978f-4915-b51c-04ae6b2c359d", "sighting--2834b1f9-28ee-4d5a-badb-60642e7b7b9f", "sighting--9d5bc536-6639-41b3-9b16-fd553a6760c1", "sighting--f404329d-fa3a-4a16-8942-a9be1e466c65", "sighting--73ff0d62-4f6a-4206-859b-2671f5645fff", "sighting--b4205695-0c96-4b0c-9cf9-1d8f37f5dc7f", "sighting--bd45e505-d729-47cf-95bd-62961964e8f8", "sighting--51a17577-91e6-42f6-9ce4-825d8d30652d", "sighting--965c0677-e8c8-4aea-841b-b767264235d3", "sighting--c9e2c6b9-0864-4044-bcbb-4517d47074e2", "sighting--fe967305-663d-4913-9391-bd766269142c", "sighting--c0797763-ec2c-4e53-919b-813326c6164b", "sighting--78aac82e-6a19-46b3-8caf-b0c57667ff51", "sighting--1c1fb7af-09ce-4891-b3cd-0529558e7446", "sighting--f5db3011-de55-4fca-83a4-15cb76e99839", "sighting--681c9674-0ee0-4817-89c3-7b0d9dcfba6e", "sighting--48024347-a67a-4b03-9941-627c8347626a", "sighting--0e0d62e7-ba23-4454-b441-759a1e7179e8", "sighting--e7ce0e5e-45b9-4bb5-a71a-19fde541342c", "sighting--1dc7f93f-d776-4e0f-bca1-184b5f5716b8", "sighting--25d35141-12ee-4208-b639-059918ea7e42", "sighting--04135698-7ba5-4f9b-8676-43e9b052b866", "sighting--a7068b55-cad8-41bb-9e78-a0b988bae214", "sighting--b3b1539c-2fba-47eb-8699-f3dcbb51f9ba", "sighting--5def8798-18f2-468f-a59f-198d061c61e8", "sighting--ab0978a6-2e9b-428b-8a3b-3dd1f979c498", "sighting--67c41165-91c5-4c64-9966-bca5feccc369", "sighting--f6664da3-1d4e-4090-a35f-6f061044f568", "sighting--2de358d5-151d-47b0-ac04-979db634d2e8", "sighting--b5a9aee1-92d7-4279-91a0-b6badcce3f91", "sighting--7b60be02-a996-4808-8535-95aa53f685ef", "sighting--35e4f09f-b568-4865-aaf7-bc2db7f163b3", "sighting--63a6b065-2375-4d66-913e-e2d7422590e3", "sighting--a616f619-c779-45f9-8844-286e5e5b19f9", "sighting--f8178acc-09a5-4ac4-baef-919bb7f43723", "sighting--e7211a35-3119-404d-a507-dc0774f43479", "sighting--8e3e8c8f-0d36-4700-9405-3c9d1534aa24", "sighting--e09711f1-2619-406a-a7ff-8e6c310c783d", "sighting--3a59c05f-feb8-4ab2-b126-1db9decfdd07", "sighting--1a64367a-6864-451b-a8c5-178e1c07d502", "sighting--3dc760cb-4b8a-4ed8-a5d9-8a257e239e9e", "sighting--41aa28c2-b441-4a18-a4b8-759028e7b395", "sighting--29674743-392c-4551-9453-c6127323b19d", "sighting--66a5940e-0a85-45a2-897a-5b6cbb92bb07", "sighting--be16d4bd-5b86-45ec-b048-3e1b1b8ecfa7", "sighting--199f0c1f-a383-4ab5-a192-58d47a97b1b2", "sighting--d8cfb9c5-f71a-4d1a-a566-0f32677ad744", "sighting--20333c39-5dd4-4e36-95f1-757da9020c31", "sighting--ee944a79-8aa1-46d6-b59c-25972de37636", "sighting--5be1ea03-7a6d-4719-a7ac-d47d7564e65a", "sighting--e25206fb-cc8e-4828-a27f-ac5eecb806da", "sighting--b5806a57-7b33-448b-847d-92dfb3aac1db", "sighting--90a226d1-a7f9-4bc4-90e0-1bded0c37d44", "sighting--b1cc4732-53ba-4543-b4b3-a83e86850236", "sighting--d7350741-102f-4b1d-a91e-b1cff4ba0a66", "sighting--3a852f15-ac1b-4649-846c-4fd96d9a3b33", "sighting--55bd7bb7-700b-4152-8fde-a10e08676201", "sighting--ba346466-5b55-456d-bdd2-3ac701f9b1cc", "sighting--bf613e6e-c4fd-4cc4-96d8-e04f51506c92", "sighting--4f8351d9-44bb-473d-a5c0-228aa835681e", "sighting--e5bbf6c6-727a-4ea5-9f8b-b1c7d4b1f0fd", "sighting--ed4021d7-c9ff-4783-9345-24f24337888f", "sighting--01e583a7-9d56-4df0-aa11-4d00f6c3e1f7", "sighting--fbb57dc0-f28f-4801-af71-46735a68beb2", "sighting--1bec77b2-6894-47ff-9638-164005362d46", "sighting--a21a7e34-2a9a-43e0-b9df-ed326dca61c4", "sighting--8b7d6a18-519d-4fd2-ad56-4f735954612a", "sighting--389af758-1424-4739-9119-5c73a2ef6916", "sighting--28a0b801-03c1-47fb-b1d9-2fd9d24afbdd", "sighting--e119ae83-5eba-4cb3-9618-468c8a2950bb", "sighting--b5cb0534-4f9e-4986-9904-d6661c8ae0cd", "sighting--2d14e610-490b-4c38-a5b4-986644fe2423", "sighting--1f981e9c-6684-4830-aa02-7e1448815274", "sighting--c9c898a9-1257-4779-bf0f-4feb5b806f04", "sighting--5c7998fb-7592-4485-a882-7cb2f215a8dd", "sighting--a36fc159-c932-4496-b07d-bb70beec67e5", "sighting--8b1db642-b23d-436f-87a8-fd91699d9ddb", "sighting--2e330a96-99ed-44ac-8432-628b3df2c28c", "sighting--503cca82-bced-4a88-886b-3f0b8f8ba7d8", "sighting--35d123b0-d69d-4d01-ac6e-3a0d475a9e97", "sighting--ab66a2f4-61b3-4e4b-9160-924d3fc26ca2", "sighting--ef583601-5cfd-477c-8748-23de8671e78e", "sighting--ad6ace47-b56e-46ff-97b8-34f9637a11b2", "sighting--61a474b6-43e0-4e2b-8960-fe1cd195aff7", "sighting--58e9cb2c-6b98-4125-9bba-46d803036f36", "sighting--038007d2-5649-49e3-ac9d-409a4d14537b", "sighting--60ebf089-b851-4e0a-9cc9-67e26a9ba8f4", "sighting--c40cf399-b9ea-4e68-9fa1-579203d96f30", "sighting--749f5ae9-3676-4543-91ea-f92cd705dffd", "sighting--1f88b0f8-728d-42cb-ad80-970ecc27eeca", "sighting--14c3cefe-764b-418e-85a5-aabb693c57b9", "sighting--54f792b7-2270-46c1-8b2d-4b34f54eae74", "sighting--30fa40b7-f79f-4949-942d-125437c6c6e8", "sighting--932dc188-adcd-4f59-975e-4687c65cbcc5", "sighting--09c5b6a0-dbb9-4221-ba74-cd38a2315b14", "sighting--ec1e5802-1bf8-4299-b246-cd2b6abc0e37", "sighting--668c434a-58c2-445e-8d10-aac8e142cb06", "sighting--60983093-4e03-4ae7-bc22-f9a3f0773b7e", "sighting--8a1b4540-b769-4930-ab63-332244d8edcb", "sighting--7f88791b-d84b-4874-989e-dc08ae6e62c4", "sighting--191bdc37-80af-4da5-9056-009280e185f3", "sighting--3502915a-74d0-47d5-bb8b-71452fc63155", "sighting--33ab87e9-f142-443d-8d3d-af309caaa654", "sighting--b4d155e8-8ba5-4039-88dd-5d2a169612bb", "sighting--647b2735-fee9-4508-8008-d366d757706e", "sighting--a70c0f32-5680-4874-9b8d-c8ff8e762e9c", "sighting--406af442-73c9-408c-8aa6-7af1fb3b3857", "sighting--1b0ce8d4-eac3-4185-87b0-ec34686622bc", "sighting--415c6d2f-2952-498d-8d9d-ef3be9319e56", "sighting--a9a352ff-f2df-40b1-b6f0-378d058c28fe", "sighting--4b18dada-c63d-4395-88df-248f4fd325b7", "sighting--4f4eb5a1-730f-40ef-9fd2-a3e2c4a1a986", "sighting--7807578f-4ca2-4e62-a4d8-8caa57ad282c", "sighting--d23bb09d-96a0-45b0-98a1-6be195f371dd", "sighting--c1abde72-7b2f-471e-9bcf-e95455bc1b08", "sighting--3d908c5a-c25a-4a56-88ca-4125e68370b1", "sighting--29aba64b-1cc4-4ace-983a-949c00ddff69", "sighting--412c9a66-db8a-4830-a115-3a972dce2cad", "sighting--6e693a13-87f8-413a-9d52-cc93a4fd7626", "sighting--7afe0f35-0885-44bc-acdd-eb32ff652f71", "sighting--14e78714-5f64-4111-88ca-a516d2ce976c", "sighting--5b0025bc-6399-42aa-8793-05cc122e572a", "sighting--11942108-ccfc-472a-afc2-0b69b484f5d7", "sighting--68dd429a-0584-47f0-a4df-c7246aaebcaa", "sighting--29053844-ff10-4d55-8f27-612fe1de145c", "sighting--bfb33df9-f4bf-448b-83f8-736745b875ab", "sighting--1b8bec92-1b8a-498f-a9a0-84bdf9f97da1", "sighting--1bf2646e-91e0-4723-9439-c1e2e7155f77", "sighting--8e69d6af-577e-46fd-b499-e8e7612e892f", "sighting--412cc237-70cf-4c4a-bf7d-4f1e74e77feb", "sighting--bb8b9863-63ce-4cac-ae00-e26e7f8b6c09", "sighting--ad76abc5-9263-41c3-817b-97503db6362c", "sighting--87bf44a9-c050-4bd1-b699-8f11c142ea42", "sighting--59f16d29-1283-4475-8775-9d582d5c2b69", "sighting--13909e78-f52f-4491-bc15-5720b2af01d4", "sighting--ade1829a-ae07-44f5-9ad0-0a6ca5b20fcb", "sighting--5fb2f86b-7825-4023-aa30-97f046be7f2e", "sighting--17d57681-7ae0-43d6-93af-54b928efb87f", "sighting--2c5b4275-d407-4e93-b7c0-e8a7f7d130a0", "sighting--dc6fae64-af52-4345-805a-4b7b43f45ff0", "sighting--d5346495-7120-42d8-877a-d06495575503", "sighting--4198425f-d673-422c-b646-7b911e9492f0", "sighting--349b0f8e-4057-4218-affa-d4c53e3bda67", "sighting--f46d5fdc-6a63-4d67-a70e-9cfbdb2261e4", "sighting--577efb4b-29fe-4e3f-805a-f9b9f7aa355f", "sighting--6af79fa1-c897-4baa-8b94-d6ff3dde127e", "sighting--e65f5aa2-4dd0-4a65-8737-9f4b13bbbcc8", "sighting--9e496c4d-0509-4775-8f03-40ec556a4be4", "sighting--bcefe6ec-6143-4379-896c-26b521fd8d70", "sighting--2e359201-1c34-4a98-9866-e32f2c5e6dc7", "sighting--7a046d84-9fba-4120-85d3-7d30c819936c", "sighting--73573d45-344f-4817-a940-3714823cde1f", "sighting--e55cf5b3-86a4-4366-8f39-4f7ad1843105", "sighting--e1fa76dd-1756-41d2-8e15-14235c191ab8", "sighting--d203e1c8-2634-4737-b7cd-40c99cc6ad39", "sighting--b78d35d8-9868-4e90-aeb6-9969649f3fc3", "sighting--af0591f8-4531-47f1-90a1-14cabf144427", "sighting--f572f38e-54ca-43c8-b3b0-13d273052cd1", "sighting--419f2617-6910-4738-a0fd-067790ff0140", "sighting--bc50cf69-52b6-4638-8847-b7e602a20044", "sighting--445ec8e0-b8ed-415a-ba0f-5208d15bf554", "sighting--9cd3554f-6c88-4d46-bc27-b5a9a4c26a4f", "sighting--55f7a1fb-0f4e-4af5-abbd-6f7729f6aace", "sighting--641de927-785a-4ed3-af7a-03a3f8d8a427", "sighting--b17fe131-b687-4b87-8a32-5800d31bbcad", "sighting--0293b480-7be2-46de-b615-65554102c06f", "sighting--d207dece-140e-4853-87a8-ad84c58006ef", "sighting--ecaf2a57-633f-4f53-9b35-08a386a8893a", "sighting--ed593ac0-8c31-432a-9b5b-84adfa6ab605", "sighting--174626e1-500b-4fc5-b322-054ba9ce8ce0", "sighting--82bbdf48-d4dc-4bf2-9445-bf2f00b482f0", "sighting--96bf24e6-fa42-48f5-be00-8caf73869633", "sighting--8bf6b12e-f103-4217-be9d-5d887449fe04", "sighting--da52f328-116c-4169-88fe-2480fd9e7b52", "sighting--51c16d77-8482-4179-8132-26c3a5cac797", "sighting--1f409a0f-3a8f-4460-890b-aeebc5558428", "sighting--559fc877-2697-4dc1-8b01-a3130cb23f85", "sighting--8c15c7c1-7913-46e1-ae32-65ccc24ee3ec", "sighting--f5fe1a68-e4ca-46b9-bc7e-b732c2ed62cf", "sighting--70cbe862-a69d-406b-b83d-b93daede0353", "sighting--8181a53a-7fb6-475e-8e90-4c223622f9f3", "sighting--b0ce2fa7-44b8-45b0-a7c4-29287d43ccab", "sighting--51c09867-46c4-4c47-a19f-d97f4739978c", "sighting--fdf2fdb3-0ab7-4c47-8ba4-9b7ed399f94a", "sighting--4f42b550-3f13-47df-ae95-374d08da6be5", "sighting--cf048959-209a-406a-bc7f-b3b903ebd5de", "sighting--2c62b5cb-b1b9-4436-9529-d7f8fad591a8", "sighting--c0696c81-168b-4452-b5e7-17ca30ec9eeb", "sighting--ef733c7e-4438-4d85-90bd-16f182764f2c", "sighting--d8f0d054-1f3c-4b9d-bad0-e07c69860cf0", "sighting--09b99c12-ab13-44c3-abba-11f07251f24d", "sighting--8f43120f-0812-4549-86b5-2ea5aff268d2", "sighting--d4a5de7a-7f1f-489f-820a-c4a87fd168b0", "sighting--d75d71eb-707f-4da5-8bed-9ab26324279f", "sighting--d4c8d3ed-88bf-45d3-8d57-ccf157e0bc68", "sighting--2028b5b2-0450-4599-a7e1-7027c1f1b6b0", "sighting--b3775ef9-9015-43d9-b481-484a99d3edf4", "sighting--9ab95376-c0d3-4c7b-8a5a-37c45c2af3e1", "sighting--9eb38661-ac90-44d4-8c7d-6c2842a4db71", "sighting--4c62a07d-1659-4f39-8ba2-3624a02381b3", "sighting--991597a6-6c19-42a6-a2ba-0c8ce2ac8931", "sighting--5703d491-e1b2-4cc7-9578-2888c909fb03", "sighting--b4c411ef-9055-4ac3-a4e0-f0f70707ffc4", "sighting--20377723-1d14-4bb4-8d93-ab8a50cd983c", "sighting--9e5ebd16-3de4-45e8-9f87-9611a196e8f9", "sighting--db4ecf65-4978-4dcb-a087-a6cab51cfe9b", "sighting--2e5b4cb7-19b8-41a5-bb58-26a251c613dc", "sighting--66efec63-8863-4c03-bc03-cbfd91407bc0", "sighting--15245a74-13b8-4d0e-8073-e714019397d8", "sighting--be355052-cd4a-46a5-a068-4868b66b638a", "sighting--4422bf6f-9a75-4a57-a3bd-3dc8f628a62e", "sighting--ce2ce3b6-d88a-41b7-9688-f5ba15aea7e8", "sighting--d394d8f1-3071-47eb-b330-ca12f6a7598e", "sighting--45eadc72-3691-4969-a898-ad34e5f31572", "sighting--81fa3d03-e523-4f1f-91f2-1569ed25c310", "sighting--d894a9e0-a2a8-4e30-bb08-4598b81c828e", "sighting--d0c10633-a35c-4ccd-b7a6-8906a0af2330", "sighting--a26a1a2f-0e4b-46b0-b2c8-5a5f02b3644e", "sighting--970a0dcd-0fd0-41b5-b3ea-73bde21003ac", "sighting--4fb88c56-5b66-450f-8f64-153178b0e0a7", "sighting--4c736333-a358-4ca6-bf45-43194b76168a", "sighting--4a7623ff-f2a8-4d48-b05a-8ec8aada4e9c", "sighting--c48ddbea-27bb-4907-8a8e-dd1000a1a12a", "sighting--c5b5d271-81a7-4f67-b80e-ae022ff07cfd", "sighting--1321ad9f-ba35-47bb-b016-8f005af3524a", "sighting--4e553191-0076-4494-a37c-b42b493a0d25", "sighting--506a14b6-1e6e-4def-8545-2dab8b9f500b", "sighting--4a110b46-2920-4f5a-a434-e0c558ea392d", "sighting--ab52cf28-43e9-4579-abc9-88befa364943", "sighting--cc39467e-afe5-42aa-8cc1-2051b4d60712", "sighting--2765ed1d-232c-4ea5-be6e-02ced1a17278", "sighting--39f67a1e-88b1-4071-bf7a-9b22965437e4", "sighting--f450aa8f-e99d-457f-9466-736eb03207ac", "sighting--1c8ed0e9-4497-4896-ac5a-f305100ed8da", "sighting--71467b16-6c93-46f0-bfdd-c7436661c923", "sighting--b6db951e-9657-4ea7-ab64-c6b59df2f75a", "sighting--73e1bc42-d900-4e18-adf9-15015a84124e", "sighting--047ea131-303f-439b-9aac-07f8249e4e55", "sighting--4b8bdfdf-b494-48f1-9439-df82beae5d5c", "sighting--5870396d-6837-4feb-b594-c62a3d21052c", "sighting--4ba6fb4d-8fc9-4f33-9535-5733cdac30da", "sighting--48518643-a72c-4c7b-8a0d-1a0a7f42fc5f", "sighting--977ee7a8-aabd-4919-85b4-31395b81f336", "sighting--ffecdf8b-1553-47c8-a6dc-b240cdea01bb", "sighting--ea7a8c47-a190-457e-a822-06e8abe98310", "sighting--8fb3f145-1686-4678-b382-c2a0f0d9406e", "sighting--50788f4b-8be3-45fd-8e3a-453235940ac5", "sighting--cdc26ad2-ff7a-4e4e-a5da-5697e8bbe1bc", "sighting--9967bf19-cca7-481c-80bc-b852214a72e4", "sighting--3ef5c892-3aeb-4e89-8294-6224756781e0", "sighting--323d1eb3-a020-4b87-ab7c-6056ee431e86", "sighting--4a38dc88-95da-486d-be8a-7118141ab464", "sighting--e47a8e2d-48a0-4b22-9c8f-2119ea99b22c", "sighting--e5cb124c-a98e-434e-ab42-4ed494b20b54", "sighting--69c396ab-b1b1-448e-a922-d4a0866fb225", "sighting--dd00cb86-8fb3-41a8-b75c-10ddd52ec24a", "sighting--d78be1e5-fd63-466f-83bf-9a503f7625e1", "sighting--fb4b34ec-4bee-4c6e-a6fa-ab525ae79e63", "sighting--21fd046d-7ff5-4902-99c3-f5f834e8acdd", "sighting--79339788-fc00-4811-8943-73c7b77bb041", "sighting--4d7fa15b-2cb2-4818-b13b-4f8d6a0399f2", "sighting--42ad2e6e-8f16-4b45-850e-9c537ab5b0e8", "sighting--c4136583-9461-43da-a512-e610ee74a861", "sighting--15cee4f2-148b-4198-a9af-29694dc02a12", "sighting--a16693f0-dff7-48db-8993-4ce60319b607", "sighting--7127bd4c-2f84-4ab6-83cc-abe93ddb4dbf", "sighting--2bf69d27-b49e-4471-a9eb-a1185a5c92b1", "sighting--bc3dd01d-9f98-49d3-b86d-485a7bc78d91", "sighting--3fa78900-7b91-4db4-ae29-cabee4897d9f", "sighting--70aa40e8-52ff-4caf-911d-060bf8a9889e", "sighting--23713eab-e826-4733-9430-09eb545c9d7c", "sighting--744d0d6b-82f0-4d22-8633-3e8e935a01a7", "sighting--9235315a-7d43-403e-940b-81a345b2c1c4", "sighting--0d8ae3c3-7866-44b9-9e64-b78c99bbc70a", "sighting--1e0f0dd3-08ae-42c3-b838-e7ce3ce431d1", "sighting--dd063fba-19d5-44c9-a01b-db46d96abd69", "sighting--eea87255-91b0-467f-ae8b-8e186e33d5fe", "sighting--d6786b61-571e-4cf7-9e0e-ad5dceffdd24", "sighting--521f9863-1976-4431-8f65-ce39caa9601d", "sighting--0f6bfe60-37ff-47a8-b415-07b9595803fc", "sighting--d21ce1bb-b6b2-46ba-8bc3-0b317ef976c1", "sighting--a8961b02-5931-45a7-99d7-496a1fd9cd7f", "sighting--6e65358c-d1a0-4834-9be3-6bf46f31fb18", "sighting--5c7b2496-bfef-4e4d-bdae-2d00429ece1b", "sighting--4c1c6488-f3de-41ab-ae9a-dfa4d7ea3a6b", "sighting--abe67ddc-482d-4a17-8760-eb1c91174104", "sighting--a11cc173-5b17-4475-a990-5e6df950b053", "sighting--eeb131c7-abbc-457b-b4f6-ee639777f2de", "sighting--dc100f9b-b43b-47bd-aa48-a314afcb7a7e", "sighting--65f9e789-b378-4b31-83f5-828ac858f2a7", "sighting--70eee5fd-ac1e-46a9-8fc5-4e94723ea936", "sighting--3e57cf52-6177-4df4-9378-e56eab61ed8d", "sighting--d0cb70d4-7917-4e41-9d3a-63b8b72c1af5", "sighting--c99d2877-b516-4c69-a446-d7e6e701bf29", "sighting--aaff5008-2edf-4f52-b255-94633f46f3e2", "sighting--cc088acc-91e1-47e3-90d0-cb09f3e43a06", "sighting--28aec7a6-43fe-43a0-bc60-a61f08581170", "sighting--1f0f4b23-067c-486b-bea2-920d301f36a1", "sighting--c8868a38-3fed-49aa-8fae-393645e5a51c", "sighting--e8ccdd5f-2e53-4962-9157-ae0c429fef1f", "sighting--097a4238-088c-4f33-bb98-32af231d412e", "sighting--d39bd0ff-a646-44e7-a0b8-8c5b718f6d96", "sighting--bea8c8b4-500f-462e-85b6-0b20fa139a38", "sighting--220ea470-a22c-41ec-a231-d01cb55db536", "sighting--21308a0c-5071-428c-b073-fc9faae851eb", "sighting--29dbb563-7f06-41b2-90f3-e2dca44c3a02", "sighting--49b5189d-05fc-4093-88db-51bd7f678a2d", "sighting--41e5b267-41a0-4564-b447-abbba290397b", "sighting--649c413b-5199-4c5f-a6b1-c0802c7a6582", "sighting--bb9711a2-4b96-4533-81d4-aa0fe59dbf56", "sighting--8a29783c-8499-47ec-b187-3af074445906", "sighting--165156d2-8f82-412a-9ccd-f167c5866680", "sighting--39c99d6f-f75a-4006-a244-defbbee9cf54", "sighting--8d8357ce-5f86-4614-9096-bf9fa7935007", "sighting--51aed120-e6a4-4026-b872-d188b0090770", "sighting--f00da13d-3ef8-45a5-adc8-541b34bcf771", "sighting--a787a0eb-f53a-4817-931d-79542a644570", "sighting--f2db8b67-253a-4c69-9ff8-30980c58f228", "sighting--b5342896-857f-4374-b4d2-d768f9395729", "sighting--12eb9ad7-ebe6-4fcf-83fb-c9e605c451fe", "sighting--b9b1b296-cffc-42be-945d-e72f756484d4", "sighting--64ed6629-ae33-41e6-bff0-8302159e433f", "sighting--b245cad9-5e9c-4b4f-89ab-607aa4316efd", "sighting--84643707-61e2-4dc4-8df6-e6f88aa7afe0", "sighting--b9b30a2d-6745-4820-871c-e3f25893b5bb", "sighting--4a907928-9e26-4d80-a38e-751918682371", "sighting--6b28b178-cf9a-4578-a703-f8f1f5a19142", "sighting--f4d80457-a2a1-4dd1-a072-a99871e1f8b1", "sighting--0218c974-7a7a-4455-8d3d-d8886618f85d", "sighting--96dcb30c-b3f2-4e1b-a594-a42588963d86", "sighting--5bca9c9b-0983-4a5f-8804-0c79acc86a0a", "sighting--a58bf8c5-f4db-4df5-8799-07bedab35e3b", "sighting--08d9bf0f-3a99-46aa-a64c-ca1a30587d43", "sighting--3b45b261-6f4c-423a-b640-23dafe606ebc", "sighting--8ca942bf-a4be-447c-8211-65e882f95c87", "sighting--73c7252b-7422-49d8-b5b2-75fe0953375b", "sighting--e8ef4e67-5d20-499b-a2a1-8c67d04a7ef1", "sighting--19cf6bd2-08aa-4686-90e3-f57bd0df15bb", "sighting--bad879c3-e966-4732-9bed-2d9c96eb20af", "sighting--e3f70e72-803e-4d6a-8bf4-940469494e91", "sighting--4be315b4-30cb-4420-99e9-cfcf41770035", "sighting--92d551f2-74b7-46a2-90b2-46033ac6a12d", "sighting--98884a00-8510-48fb-bc78-36aa374fe3de", "sighting--a4eeaae0-6ad9-4552-aed6-56005719e01a", "sighting--0e7328d7-9315-4831-bf54-c2e0860b28ca", "sighting--65944ff6-5e0c-4bd7-800a-781b022db997", "sighting--779cf2e6-0581-405d-afee-5585fbc9ee3b", "sighting--57b02b5e-b3d0-4133-8003-de60563902b0", "sighting--c53aa1ef-6237-4ef5-807d-479d06221f32", "sighting--aef97e68-9216-465f-9937-283314804fd3", "sighting--5374ec16-2b42-47a1-8579-4578490c77c1", "sighting--d5de32b8-75c3-4a2c-b9ea-a5bde1ca0f0a", "sighting--d2e6031a-b3c1-4541-8f06-c808151a48c5", "sighting--0296520c-5c25-4bb8-93c2-021fe3a9b8a4", "sighting--057e74e8-7379-462c-bcb4-cafd2d249dcd", "sighting--f66d2794-367c-4b06-8d19-0e7b5783c278", "sighting--fc97153c-c910-4277-b975-6cc81eb4b4e8", "sighting--3495905e-b775-4a2f-ae0a-cda8a290e997", "sighting--1e9b5e00-a5e4-4ef7-86e7-0373c865768d", "sighting--ae6fd4c2-9861-496f-81fa-13b3d2e16980", "sighting--bdc9c859-ae01-4a77-b19e-7c6e85270663", "sighting--bc767674-efc5-4c34-a35a-40ac7e979eed", "sighting--ace5b4fd-96f4-4e8f-91b7-b7916a652a72", "sighting--8cd53004-daf4-4084-a2c6-998e4870afa8", "sighting--754347ab-009c-4c1e-b3de-2e5711a7de78", "sighting--8f2c67ea-d2ce-4935-a345-f7a906ed2841", "sighting--5a94f076-010e-492d-9c49-3e7e5540856c", "sighting--805348a6-323f-4f99-83b1-ee733a674a1f", "sighting--d82a1ee4-b756-4e03-bbee-39f6d75bbd5e", "sighting--4cd9398f-7771-48d2-942e-e2d33dae2ffe", "sighting--a61e5f44-b11f-46ba-aa40-68a2d542f7f1", "sighting--9bc38b6e-e5c3-4fb4-b30e-901c45afaf7c", "sighting--b540961a-ce55-486a-95e4-e81b409dec20", "sighting--f98b9e3f-0cd3-4f50-a4d7-4c007e8ff3a3", "sighting--9cb5702d-30d5-4fa4-91a2-ddad999968f4", "sighting--0be0b1dc-10e6-4167-8d74-e9c49bfe48cc", "sighting--d8fc6e1c-fb17-4a0d-9a63-d5f3ed949584", "sighting--46a5015c-7059-4427-b405-deb6188fada0", "sighting--a7f9aba3-78e2-49de-a2fd-3046a2fb23e6", "sighting--52fc7bf1-bf50-4f21-a547-b4822a8c44ca", "sighting--6eff4f5d-50e8-4d1d-b8c7-8a4c00dac9a2", "sighting--ea7de597-6d16-4c08-8465-a41b0ab742e4", "sighting--18ad8773-2de3-4196-a6db-72257375a15c", "sighting--371cd204-e6c5-4d7c-95c9-c179ced81630", "sighting--72b11789-533d-441f-acd0-07896b701f7a", "sighting--50bdc11a-6660-4783-a633-ed7dcc595dac", "sighting--29503412-486f-4e8d-b18b-8dce2ad6fa7c", "sighting--81788c6a-b65c-4137-92a9-d10b9471716f", "sighting--36daed41-73ff-47bc-b4c1-da801acbc864", "sighting--3b99c145-937f-4a6b-a8e7-c05129d2b070", "sighting--dddae9f8-33bd-465d-8362-efa3defbe2bb", "sighting--8c84095b-67ce-4c4f-87fa-b82a8b93b7f2", "sighting--a1a5aa46-1f7e-436a-8389-a75ba1a0aacd", "sighting--c9f4e645-bd00-49ed-8c47-1ce4826e1d8f", "sighting--d143a625-c905-4461-90f7-8fe7396c2b4e", "sighting--ac73b3c0-7423-4167-98ec-cc06a8c6a505", "sighting--b1486c14-616f-479b-a3ac-e5e13ce5b9db", "sighting--56c9279b-7ebb-4913-bad1-125162a6b09e", "sighting--44576f8b-4982-494c-a1e5-0171ae6301b5", "sighting--7dbdcd93-76e7-4628-b161-4d93f103cf65", "sighting--3de9fb9c-df04-427e-9791-75fa43084b54", "sighting--14fa5610-e3f2-4476-9b03-ba15a9b563e8", "sighting--0892d277-7e52-49a1-93d5-60b28e8dcfd6", "sighting--cedd5f94-0bbe-43e6-b81a-907c33b8d423", "sighting--cc683d8f-a880-4d6d-85de-3ff5718a9ffe", "sighting--d28442a2-a6c6-4912-bc5d-01d214e72fc2", "sighting--208432ef-6e0f-4a41-93e2-b54524d064b8", "sighting--15b380e3-0d9d-44a9-897f-57a0026f99e0", "sighting--182a8140-6f29-49b2-b95c-73dd2cb5fa18", "sighting--19134544-c007-4505-9326-fa3522f89f38", "sighting--fc276b34-cc36-4e47-9247-65c694fa1285", "sighting--2a853074-6f86-4f2e-b1b4-ccca0132063b", "sighting--ab0a9908-2f7c-44fd-865b-b1308a224cc2", "sighting--64685042-f832-43cb-9ad4-26756e3e3864", "sighting--91361013-595e-449a-a54d-1feafe1d8aa4", "sighting--bd92db27-544e-47c4-bbca-a6b19c5faed8", "sighting--14d88355-505a-42bc-8c11-193c5f9e0acd", "sighting--a7ec990b-d483-4bc3-8737-9bc52653642b", "sighting--ab69be47-f208-4c9d-95a7-44365341794d", "sighting--4d7f6d9b-b520-49a9-9a33-47e520d9ee8d", "sighting--14e9d041-036a-45f2-8143-b9dbb100621f", "sighting--be91d5bb-1059-4f53-a233-ee5138f95525", "sighting--bb559b66-eabd-49a1-824e-d7fe59bb5f8e", "sighting--5b64b89b-bdaa-4204-9f29-bb003be66544", "sighting--e47cd51f-1f5c-4e57-9ed3-128c78a1a53a", "sighting--154512bc-1035-4f98-b269-18c702e401ce", "sighting--321451f6-73cc-4110-a23b-2ca4fe7409b3", "sighting--60ffbee0-c682-487a-b645-c763c1065837", "sighting--bae55900-f72b-46a5-8092-3f10abe3f27a", "sighting--d00cd584-063a-47fa-ac57-d34f6865f697", "sighting--aee1e667-288c-4606-9ba1-bf52f60655fa", "sighting--fc85dff5-4ea5-442a-b255-825125172cfe", "sighting--30319d3f-6e93-4b0c-94d6-0018f8b7c82f", "sighting--6a01f14c-e696-4de1-bd25-616962b4e099", "sighting--8f3d3687-813b-4a07-83d7-e60d51def592", "sighting--21f15529-c04c-4ef2-86b5-0ff34e67691d", "sighting--eb3a9c90-4f02-4665-9e98-4ebf09590d04", "sighting--0c6e1120-acf6-4206-babe-ae2534a2174e", "sighting--86786aa2-6837-4c1f-a105-376980971604", "sighting--e1d74556-dfe6-49a6-8958-00f446cc0fb3", "sighting--46fcbc1e-10b5-4759-884a-275356d09a99", "sighting--3d646c3c-ba39-4c16-8ee1-fc07df20483c", "sighting--bb00d1a1-306b-4e3f-99a2-d1a177fd6c48", "sighting--a30c8d0e-1e0d-4ac0-94da-3cfe8e11a0c0", "sighting--4d6f9b44-7eb3-4e62-b6f8-2834b22e22b3", "sighting--fa6a478d-0ac2-40a6-9304-1250ebf5a4cb", "sighting--04625ae9-b2c8-4292-9c9d-01c1b17eeb5c", "sighting--4115ce4f-e6d7-4203-a7db-8c7dfcff900a", "sighting--519ccc0c-1bbb-4340-bc66-b51c94ab2608", "sighting--e1a7e8a5-4e21-4551-a346-25b10566f235", "sighting--b7dcace2-0dcb-4c4b-a6da-c4d6eeffe072", "sighting--b0d0cb25-dc7a-477a-9134-75203c43ab92", "sighting--41a1d19e-245a-487a-a51f-d4042c943931", "sighting--fc015114-4f3e-4f10-832c-0cd7e8bc435e", "sighting--541a143a-3086-4ce8-b14f-b1a1b478572e", "sighting--e873f538-6061-4850-8b70-ac2ea2ae556e", "sighting--de5b371e-9d2e-4fc8-abed-e10fa00d17c9", "sighting--560dd3ec-ebfa-4632-82a0-a1b48679b37e", "sighting--8396df9b-b496-4ac3-b4f3-5f6f50a96044", "sighting--1c8d843d-4c02-469b-be47-59020c693505", "sighting--04349e2c-4371-4c22-b2f9-ee9f461c00f0", "sighting--1a7ea560-3276-4eae-9ee7-695a7544086f", "sighting--ca983b7c-b21d-4f58-9666-4a498e7fdcb5", "sighting--d5e98a10-4db9-4caf-a3e2-7b4b0ea4971c", "sighting--725f0291-25f3-4659-8c0d-3990742bdb4b", "sighting--9fd6b279-8d8a-4658-bc76-effe5788bc9b", "sighting--e53c7eb1-51b8-4704-bfef-1efd3052afda", "sighting--0a7e8fab-e0dd-41bc-b6b2-19c5033eabf2", "sighting--c37771bc-b723-4dd5-93ee-cdce3ef1663d", "sighting--803e8e4b-1506-4f36-acbd-fdbe05b71f4e", "sighting--3d38585d-f45b-40d4-92cb-64ee2cb17eb1", "sighting--19cd0430-ceba-4b98-9689-ff1175c3720b", "sighting--1ff31324-046f-43f0-b08f-6ce25dd8e05b", "sighting--7891247b-c551-411f-adf6-af5824ee6ddd", "sighting--4d360a2c-1895-4b8b-b052-afb36c979fa0", "sighting--751de091-4921-4e57-afff-d91bc20e1c90", "sighting--11ab42a2-329d-49ea-a430-a314201a15c0", "sighting--e0faa94d-d5f0-4588-9a75-c1c5ac38eec6", "sighting--f1c0e9d3-a497-4edd-a276-c3bfa89e2300", "sighting--57a72ead-c68d-4d9f-a0b9-5aac753ff8c2", "sighting--cc418bf8-0db4-4787-b8d6-be69c70a2d36", "sighting--d15eff6e-2680-478e-b7d0-983e7e027b74", "sighting--c6b12247-3ee2-4dd0-a075-a71068dd0531", "sighting--0dd8fc95-5f92-4b73-b2cc-91c3cf484cda", "sighting--9fa7cf57-2e55-43c9-ab9e-cbbf4d23ff7b", "sighting--a575e004-c3a7-4e71-9ad3-fc1c2e3470ef", "sighting--15efd7a3-ad05-4164-9532-44f13105aae0", "sighting--ed1b0ec4-3942-48c2-9ae1-81e4a37fc90b", "sighting--ebc022a3-18eb-4051-b53b-16b618e9886b", "sighting--91daa0fa-5213-4048-b7fd-d9e80eae22e1", "sighting--11e61f6a-9681-46c5-ba59-3f7209bf63ad", "sighting--ab7bc703-888b-42e7-b0ca-1f37dae6f509", "sighting--6d7a56c1-f6e4-46d6-8990-457c80de756f", "sighting--ee03f5c2-aa02-42e0-8326-dc250add1d61", "sighting--00185bf7-f214-4000-b45c-c66e0be3a663", "sighting--b6445c3e-f95a-4164-abdd-6634801c68ab", "sighting--152da7b1-e6f4-4ff7-80a1-8088aa82b0f9", "sighting--abc0bb9a-76e2-4415-81cc-ce032c0988c1", "sighting--cc185ac9-61a9-48e1-825a-23afcbde98e8", "sighting--b30824fd-cd2b-41be-be90-1fa6500b88c0", "sighting--3de23769-586a-42ac-a911-57dd8cbe0a0e", "sighting--5328bfbc-f9cf-4720-a1cb-415b5172363e", "sighting--cf740f04-47de-4e63-a73a-a58d99812f73", "sighting--f5142947-7b4e-4833-b65b-08dab4e30ca3", "sighting--230d64b2-94f9-4c4b-8768-c44b18974e05", "sighting--252f93b5-b9a5-4aee-a76d-6c8ae6b69102", "sighting--130c42a1-ea33-4655-90a4-6fdfe640c63e", "sighting--57833191-59a7-47d3-ae07-79bbd0f01847", "sighting--2a7eaec2-0f50-4168-8567-df76088ce541", "sighting--576a9e18-7adb-4c72-b1d7-9486e07d5a4d", "sighting--cabe302c-afda-417d-b69c-efd925b4313e", "sighting--b88440dd-b473-42b8-b485-636ac3fa5672", "sighting--1a4685e3-18d1-4dea-b828-1803a1829f06", "sighting--04d8ac38-cc2a-4dc3-8bb0-f5b4435f1599", "sighting--65ac65b4-6e77-40ce-9175-2fab3ada6818", "sighting--40087b0d-3e64-4656-9c7e-bb52c725dc30", "sighting--930541a1-d6dd-4b38-be21-c6c42e4801ee", "sighting--d89ad846-3c60-4397-882f-338e41edce40", "sighting--b456be7d-060d-403f-8bd9-7015516fb1a0", "sighting--9351b045-fa70-4dd6-9d4c-33dc2ccfc92e", "sighting--0baefcac-6686-472d-bdea-dd748f38496c", "sighting--f3f5d2e3-7f59-4ecb-88f7-5371867fddb6", "sighting--633163cb-a144-4833-aecf-f609a735ee69", "sighting--7eadb5a4-c687-4719-a800-9b74b38fb74e", "sighting--988f9b50-1a37-47ea-bf7b-7665e439b6a6", "sighting--ba927ca2-cfb7-4fab-a3be-47cc47f1dcce", "sighting--2186a5ad-8825-4bab-b0f7-beaf28886000", "sighting--095a629a-d263-4e80-ae53-bbac40a654d3", "sighting--7075f06a-0796-4b77-9b13-65cb750a11cc", "sighting--3add7254-f1b3-4863-b05d-143db79f4e8b", "sighting--c3cb4086-008a-47ac-8dd8-e0d9a304bbf9", "sighting--082854ed-3b00-404b-98f7-0b9b3b68472d", "sighting--26786c9b-d15d-4d1f-9e72-3fdc1714fe4c", "sighting--5af6d2c2-d409-42b7-bbcb-69f867832cea", "sighting--45f89a46-bfef-4aec-be4d-3ec702e6f591", "sighting--d488d4bc-27dd-446e-b704-b8bb65fcba3a", "sighting--c4724940-0025-40aa-8b67-f0c26517f9dd", "sighting--9f476ce4-fa7f-466c-9570-30ca578194f7", "sighting--a38d8e54-02a3-4d1e-b107-dc0f18817972", "sighting--ea9115bb-8308-4a83-97aa-c3c0807651cc", "sighting--321eba13-cab8-48b4-8765-a270a2e2c232", "sighting--6ae163b1-e291-4428-a3ef-0db69e780356", "sighting--de7cf6c1-c221-4f50-ba6b-c92f42de785e", "sighting--59f58aec-5a0d-428f-8c48-18bd745d894e", "sighting--6257c421-d22c-4567-8cbc-a2817078687b", "sighting--7a9ee318-c555-4cb2-8c24-0db5f3702db1", "sighting--2538cdf9-c870-49cd-a0d6-f77005cac179", "sighting--09606a75-e2ee-4b77-8aad-2294c4afea86", "sighting--11096975-eaee-4bcd-b836-50c8f6043ec1", "sighting--2cfc663d-8d4e-44f2-ae24-4105cc47be85", "sighting--3f3a618c-c3cb-4434-b0a0-ba1d20ed42e2", "sighting--9af32de0-3ad4-4ed4-ac12-84cdd9a2c3ab", "sighting--37457a8e-a76e-4228-aaa5-5fb16210d6b7", "sighting--694381cb-0dfd-438a-9c2f-53de7db65bbc", "sighting--27e5a010-92c9-4400-9e70-ad26227da686", "sighting--71819b3c-16d8-49f2-8d87-09eadf139989", "sighting--b750ffaf-049c-4918-a28a-45d5971211c3", "sighting--b47b1aca-fe89-4b75-a3ed-cf81b737453f", "sighting--42370bd5-e587-4ec4-8e77-308bd9e0cbba", "sighting--b74133bd-0459-404c-a370-8b92eb14fc09", "sighting--1293f069-b2fd-485c-b1de-0ca82e31e690", "sighting--70479d1e-fd50-4989-9d73-84b6378147d8", "sighting--e48c4984-6f40-4495-8c3c-7f81a40f1d01", "sighting--e5e545f7-035a-4c76-ad60-4ec97537949d", "sighting--6bf0fc32-dae3-4824-9844-f73f51926940", "sighting--718727f8-58ef-40e7-a8ef-8a65945b946c", "sighting--c12081f6-ff10-42fb-a3b3-391e5dd123da", "sighting--cf651c9a-9db1-4d6f-80f1-3cfd2f3eaeab", "sighting--075496b3-468f-420a-9572-da82d43125cb", "sighting--b4c00a3b-b84b-40df-bd87-7ddb8516570e", "sighting--dbeb70b4-f17c-4d31-911d-14eaf4611697", "sighting--b75f62c0-2bb7-4e7a-b3c2-a07395950e37", "sighting--1997025c-495c-4b35-bf48-407a5cc5638c", "sighting--5ec91d74-a1e6-45ff-8daa-36da9f0fd31b", "sighting--e23f439c-cfc2-45c1-bfd1-ccffd3ed8f39", "sighting--e971d3e7-3a41-4180-b4cf-355ae68be0c2", "sighting--89305c56-5479-4b19-8091-d40ce4e770f6", "sighting--7550f5ac-7bbb-4724-91be-1a802ca2144c", "sighting--e32c5a28-cac7-4e8f-93e9-296a4ef39f98", "sighting--e00248d3-d38f-4998-bd57-b2d9b5111c58", "sighting--90fd4b56-3aa4-411e-8688-2579b2360c95", "sighting--b6a0af2e-7882-4eee-b1e3-2110946bb3ee", "sighting--4ff62122-d206-48a7-a04f-77dd6088046a", "sighting--47c79cbb-888a-4caa-a683-7e944fc20fb6", "sighting--d3c1ae7a-9b7b-4758-b291-35217f0f9f9a", "sighting--e4a9d1d3-2f1d-4319-b775-c98a584e1f9f", "sighting--f4ac95b7-6abf-48e5-9630-07879c315384", "sighting--2be73563-b6ff-4d58-afd7-ada99bbe5631", "sighting--542bf52e-d0d9-40db-bb40-ac1ff940d4a1", "sighting--582192b7-f554-4876-943b-6662f4d49017", "sighting--9ecf5c9b-ea00-4ec7-94c1-dd42569a950b", "sighting--c7bebf4e-5a51-4ab8-ae15-ed087e9a85c2", "sighting--772ef6a2-7096-427d-aa05-f1c4aac057ae", "sighting--eb706be2-2d01-4020-b439-ef83114410b7", "sighting--defabde6-b32c-4e8b-8015-4a471c1c3161", "sighting--9ab07968-9ec0-4964-a71f-6d27b30eaf34", "sighting--f6395bef-7b30-4191-ad31-b9c982592d5f", "sighting--31a0fbf4-ab7e-43ed-896a-bbe945e68357", "sighting--0cc8b659-432b-4454-ba89-3eb4ae707725", "sighting--65636e00-304b-43d8-a56e-8bdef5303c03", "sighting--1a9dc0fe-9d97-47bc-93b9-f47709e0e541", "sighting--0d6b7f5a-2907-4d50-a7b7-fccddca0f71c", "sighting--691add7c-3561-40c5-a7c0-b0f384830e2b", "sighting--d249a1fc-7bae-43c2-aad8-3d5426ad112d", "sighting--b01a5629-bade-44c4-9b17-c89427f87f1d", "sighting--7ad7c027-8509-41cd-ae1d-c7657677036c", "sighting--9ad9b31c-3d7c-4adc-b347-9bf17c9c134a", "sighting--6c60acfd-f463-4134-b332-1d3fc9bae3bd", "sighting--e76d9d3a-45bc-490d-be2c-30a4b9b723cf", "sighting--1f21d81e-fefb-4cee-b303-6ecbc2b79e0c", "sighting--39994654-5a8b-48d7-b858-2e5cc38a8047", "sighting--e561700f-d78d-4d0d-80b5-1979fa110498", "sighting--7cf830ee-4c86-4ead-a2d4-4e2750a59214", "sighting--cf4868fb-2a21-4dd8-8860-bfdfde50b3b1", "sighting--ca1a6c43-bc67-4fe6-bc08-fd9a735b88a5", "sighting--db587cfa-a963-45a1-8ec4-25fa9c8770fb", "sighting--ba89a91c-028d-41f1-a5db-09f5dba96613", "sighting--438398f2-3543-412e-a548-7a301f8054e0", "sighting--bc27035a-19ad-4512-9a16-54901d68f2d8", "sighting--aafdaf7d-6fbc-49fb-a57f-734f35a4fd38", "sighting--0d35e4cd-ec82-4176-8355-763dd74cf442", "sighting--8ad778cc-d4a1-4956-9030-8cb2f99bb5bf", "sighting--0ef6c2b9-9bb3-4fb0-9fd2-a986c3e68270", "sighting--4c05a039-aad2-448d-82e8-28bb4089b52e", "sighting--4336804f-ac2d-4a78-adbd-1f947fdc206e", "sighting--00c7de2d-8c01-4711-8ea2-7fbd09fa14a0", "sighting--4e2e9a4a-0a58-459c-aed3-92668b0ef6b8", "sighting--682bc917-323c-4aa9-8340-c998fe541f25", "sighting--ff2bccba-6d2c-45bf-8152-eb79dbc7abde", "sighting--fe79a7d7-dca9-432b-afd8-c904966d0f71", "sighting--f5083ba3-c766-4c01-a4e5-2dd4dcc63a46", "sighting--2801309f-e23c-40e3-9c01-d9260c58b337", "sighting--fcd776ab-f6ef-49cc-bbe3-cf5bd69b2e8f", "sighting--f621cbd5-3153-455b-81e9-fb7cdcc16188", "sighting--f5a22e9e-4548-46ab-815e-914907c942d4", "sighting--5ebe7cb9-1a50-492c-bccf-3c3886f78ffa", "sighting--904b82ef-fdf9-48cb-a5a0-de6584f38bc2", "sighting--24420a27-a070-413a-a993-f14a2210258e", "sighting--ed912a54-9f7e-4262-a6ba-041edc73cb33", "sighting--f4fcb50c-e163-4a9a-9b5e-6456584dbadd", "sighting--7d3c4c1e-cc92-465d-8e04-3eff272cc796", "sighting--e82e13c5-b7d6-4ea5-9ad9-244eb893db96", "sighting--cb4c3954-86ae-41c1-9090-951c6b5d048c", "sighting--b3638f50-0d80-4e20-a6a0-144cfa886a10", "sighting--2d89e95b-4fbf-40e5-a67b-33b827d91ace", "sighting--3f9ca069-7c06-4f59-861d-90c72b0bb451", "sighting--50325e80-be9c-4901-ae20-f4b21ea6b06b", "sighting--3e08d749-6473-47de-9400-7f9332bb43ad", "sighting--d9e14302-a91b-4fd3-aafb-77605f2b2c38", "sighting--2aff2521-c44f-4d7e-9ee5-528a59a0a50e", "sighting--8e7e219d-6a9a-465a-ae2c-61e79031d701", "sighting--5d3d4bb0-18e9-4308-b87b-3f843c7dd894", "sighting--91b6339e-6277-45ed-aabd-2c181d6f2c4c", "sighting--74898b63-58cc-4522-8895-43d713ef8438", "sighting--01c78e8c-e069-4364-be60-fc7f8f6aeae6", "sighting--bd8c32ed-3e88-4a8e-a81a-82d392ee2e97", "sighting--03ad7df2-62cf-474c-8d82-3ae60f3b8a64", "sighting--477b8e31-9ae3-4b39-9f41-c70cda1e4065", "sighting--34561f59-29d8-47ab-ae00-bcc0492f66ce", "sighting--c379af74-e941-4aad-b713-44e9f01279f7", "sighting--0090f1ce-8db4-49f8-8d46-c63f9d0ffb8d", "sighting--dcb65524-0fd6-4ebc-8e79-3ae60aa85a6a", "sighting--484bb3cd-3323-4855-ae2c-564ec8c9972b", "sighting--acc12af9-ba5e-41b6-aca2-09ef753d5821", "sighting--d787f360-7ea0-4b7e-b47e-16dc99e68046", "sighting--869ff384-4166-403f-a4c1-9e7bac5777cf", "sighting--504a4a31-7a33-460e-87f2-1b445ebe043e", "sighting--cddbedbd-1d4c-41db-b76c-2b468f1718e4", "sighting--89a92361-99da-4132-9e71-1f291ef5406b", "sighting--6d64dfb0-3cef-4df0-a2d9-e08723755023", "sighting--aa847357-f554-4e46-812c-1e4ef733ead9", "sighting--27b073d4-e077-4e29-825b-cf23281f6c31", "sighting--eb8c626e-3665-4479-b325-70b060d9d7e7", "sighting--285caf83-b28a-4525-b1b6-cf441cee3e24", "sighting--eab4f330-6ce7-48dc-b59b-8e5dde4caf87", "sighting--c32a3c10-d38f-4ce9-804f-ebb50751a52f", "sighting--5e34ef89-0d6b-4859-ab95-dc5aabe6fe18", "sighting--fcc2f8e4-5c86-4b96-bc7a-23a0ea8e21e2", "sighting--13bd68d6-314b-4373-b6dd-b885db68b69e", "sighting--5c79ec2d-2e34-401f-87c7-780d6b89f164", "sighting--ed662557-68ca-4eb1-88fa-d379c9069dd8", "sighting--6a74e30d-c23e-48dd-bc9b-43c6f4f485a3", "sighting--e7fd7abe-7fbb-41e7-aede-18db77f9a9fd", "sighting--f48dc7c5-f3c8-47dd-8ef3-29cd4985ae2a", "sighting--a2b6ce65-091c-42d7-b307-546e04a737d8", "sighting--ca69d6a1-dc48-4bf1-9fc3-7328ed372fbb", "sighting--88eccf2b-21f5-4357-b678-4dd0da1b66a7", "sighting--e363edfb-15ca-48d8-8deb-48c9061f006e", "sighting--3c54ca25-eb9e-49c6-8c69-08216b2c9ac2", "sighting--ae25760d-09a1-4979-bdd3-5f24b85ac427", "sighting--78a370f3-8d01-4b0c-87ec-0c240bbb50d0", "sighting--6deb43da-65b0-4246-9eaa-ad4b20b8e21d", "sighting--b1f95f3f-a3f1-4b01-9a17-a14e04690bcf", "sighting--eb85ff09-4654-41b3-9877-ae3ca2c364ec", "sighting--405312cc-c9f6-44d8-aa7d-ff0f641132f0", "sighting--07dfc1c7-e854-4fc5-a81f-0d987b70638f", "sighting--3cb48937-e741-4a95-8efd-1a913f3ffc39", "sighting--35fbe5fa-0f91-4208-887e-6459d8b1f982", "sighting--bd42b9d2-a6ee-46e1-aaa5-3eaba31d8f21", "sighting--b2751b88-5cd2-49a7-8bfe-0cafc96b39de", "sighting--2cd5e1ee-ca01-40a7-a841-a7136f59fba3", "sighting--d02b18d9-0aea-429e-9d86-af6d05429886", "sighting--73ca4ee6-7326-4932-8341-680de12be776", "sighting--58460999-f58a-4dcb-9e02-1a1019fb877e", "sighting--100c502e-bd03-49e6-9355-617724680aa9", "sighting--9c8dcb59-2201-498b-83be-eaceddacf263", "sighting--bc7da8be-f076-4041-95a3-a7cf8e8b1978", "sighting--0aab83c0-435f-4f29-b6f7-a2380f3e9d70", "sighting--28e7da68-9713-480f-8c68-3848fd138089", "sighting--e8179d90-479e-428f-a83a-02930c781634", "sighting--2bfd3395-bbed-4b80-8c6f-9576a8801902", "sighting--cdc04eac-9bef-43d6-9111-17c3b258571f", "sighting--3ee363e7-88b1-4145-90a2-b666796a8329", "sighting--9d9486a4-f127-4757-b0e4-94737ce6760e", "sighting--41475f76-5229-48fd-b3e5-5898621a1c6f", "sighting--c841c780-9afa-41a3-9497-d1f1acd192dc", "sighting--09f09143-56da-447b-92b7-5a3e31e7269b", "sighting--718fc47f-5e1b-4ed9-b411-245730497629", "sighting--f70a48b4-d753-42ba-a055-4013cdac5207", "sighting--a3de2978-43f3-470b-86b2-75a91c9c341c", "sighting--7bc4727e-5c7b-4de5-af46-fe0717916272", "sighting--c8333b45-c45a-4166-9f72-fb395e7e2dd3", "sighting--e0926577-60ab-4c74-9ac8-ab671d8d5c12", "sighting--b8929ab5-9bf1-4f6b-b90f-32042c56bb26", "sighting--af807af5-191f-409c-89d4-980a2fa36ad2", "sighting--8f54dd59-2780-4e5a-9eda-e054ee567a44", "sighting--319f9565-2281-4f55-9a3b-eb80cae38ec7", "sighting--16e21b6d-d7e8-4eb7-9aef-c67315aff1f1", "sighting--71b30dfc-9165-40b3-9002-f4ef36a4a6c1", "sighting--f6b6d30b-ee9b-4111-9c6c-3435659dc1a9", "sighting--c2d49940-1a34-4bc3-bc7d-6d42470e1768", "sighting--5d24d2ae-171c-4115-85b1-b3c5458a6ba8", "sighting--fa68acaa-5023-44c4-8352-40492e918b8c", "sighting--927a39c2-be93-4583-bd32-a9dd61b57fca", "sighting--2c270792-be8e-411d-82fc-687a9c2cec42", "sighting--66d7b86b-26c7-447b-8e34-889928d76879", "sighting--1423ad8f-8303-472f-babb-7e0f31d6330b", "sighting--aa305086-b5ac-4b60-82d2-e31277da0401", "sighting--d568238b-58f2-4f7f-b8c4-f6f190fffe6d", "sighting--4553f7cc-1a57-4d14-885e-230b5362790e", "sighting--ad7bb89a-efbe-4005-91ca-215b7d94d0b4", "sighting--2d6318c4-58b4-46fd-903a-188f2ede977f", "sighting--f5bec416-297c-4e5f-bbaa-690eda9fcc5c", "sighting--9b6bef04-61f6-4979-83e1-7fa438ad1b2b", "sighting--12d870a7-42ce-4692-be53-7e20d32af910", "sighting--e3d5cc49-4835-4ca0-b82b-8358d6b4298e", "sighting--c44b4153-57b9-42a5-97d3-2823bf9eae93", "sighting--1f9e81d2-2281-48fd-b301-5f6f44aef198", "sighting--83e459f6-45f9-4069-baaf-0abf37391167", "sighting--c4442dd2-a05e-4baa-b3ae-7ea0b46f8202", "sighting--a33894dd-af8f-4919-9583-017ae95426d9", "sighting--46b759f7-ce63-4bd4-922d-6aec945ff430", "sighting--0067ccee-7adf-4d8b-8c6e-430a6037d897", "sighting--e9eff8b9-860e-4cba-a690-523018dd2907", "sighting--9d051bc3-fed9-4594-bf20-ed4dfbc8fb42", "sighting--e72ad4db-a89f-4c8e-b327-1e4ada2a795e", "sighting--1de36866-abaa-41bb-93d7-a10ea60beb43", "sighting--066f4f82-0376-4026-8c91-6c9e45933363", "sighting--708ef74e-7873-4263-a513-7b388888dbd9", "sighting--d0fef7b5-0e06-4999-94be-fde3496b775d", "sighting--0cf3cdde-8200-4b16-936f-2678be5ce3fd", "sighting--027595d8-c1b9-4459-9e3f-fb1e9816e12b", "sighting--d83944c2-0a49-45f4-8e62-f2f195aa1b09", "sighting--4f5bd7a7-929c-450e-b335-929d2198f8be", "sighting--c0fda237-9288-4b2c-aa79-3b2cdd237925", "sighting--5b7b9961-de95-416e-a312-db0f0cf13d29", "sighting--7f172a8d-8785-4fe9-a89a-1557441fbd36", "sighting--baf2772e-006d-4d74-8d60-18a31f49258e", "sighting--99abee25-24f5-455e-8d1c-e8153fb7df4b", "sighting--ba58dc9c-d39b-44ba-b2c7-2ecca5f46d8b", "sighting--1a7f3e07-c974-4a22-ab3d-464d6a76261e", "sighting--938f7b69-a4f1-4a74-94db-704e01fe6317", "sighting--b15f527e-f3b9-44f2-a6be-edc78b9bb0fc", "sighting--41245a31-056d-42a8-a0c5-3bf7517503a3", "sighting--c73938d9-78f8-466b-9d0b-ea29fd62f10d", "sighting--1121f11c-c744-42fb-a4e3-fa5363906e64", "sighting--edea07b2-1464-4bfb-920b-e94465d372bb", "sighting--c03c2349-3b42-4796-b9fa-74ee3f64bb8e", "sighting--3ca7ab3d-e121-41df-8fcc-be3455995221", "sighting--5cd9effb-d336-4c3a-a301-9fae3516c475", "sighting--24ca225c-6544-403f-b3a4-6f7ae6d8cbf2", "sighting--8303b494-c72a-43f4-bc56-956c518138c7", "sighting--b8e61f06-515a-4d3d-9e15-6e5739600b41", "sighting--b1478f59-e1c0-41c9-ba69-50214d292571", "sighting--a4632f3c-c13f-4e04-bb7e-d0fc90037e3a", "sighting--0eb54196-537e-4cab-8372-01a6857adf1c", "sighting--15a6448c-7cb6-4644-a038-f7a7566a32da", "sighting--465d69d5-bc7c-4958-801a-c20a9f2d0c8a", "sighting--223e50bc-fb8d-4375-a269-8ac43f5a7590", "sighting--0a4672c4-d4aa-4b2b-9837-c4e049694a2d", "sighting--795e0bdd-256e-4205-986f-4bf5c8a084f3", "sighting--52514c73-32b6-47e6-a396-7e890dc4b278", "sighting--289a0c34-a478-4271-a059-ad83851aa952", "sighting--e9425c8a-5ba5-4e8f-bf52-d886ebbb6398", "sighting--9fab96b3-15b5-4060-939b-5e0e76f4e5d8", "sighting--e3bee17b-3de8-4422-8773-9a1355bd2fc4", "sighting--bd45384d-c84b-429c-bbe7-421a1b317845", "sighting--9b005036-9a40-4bff-b128-444ecb288320", "sighting--6c045d14-1ba3-4e59-8845-86aee63eb04f", "sighting--61d0376a-ba9c-4694-9281-832499208cd1", "sighting--f5f65294-1993-4894-be2b-13e539e04f71", "sighting--844c6be9-357e-41d4-8b19-fce892ca8821", "sighting--c015a4ae-f1ac-41ce-ae78-169e15e76a65", "sighting--2f272be6-fa28-465d-8a67-f66aef4e29e2", "sighting--cd43c18c-7305-4200-96d3-f5677bbcb76c", "sighting--26aa5ceb-94a6-42be-bf10-2fb85ab96c52", "sighting--0381a7dc-f316-4911-84f8-b7a66f299e2e", "sighting--b0097c82-3307-4886-9012-9bc02cecd593", "sighting--1f0486ce-7290-4657-9882-42fb5aaedb00", "sighting--2889483e-147e-4076-86af-fb47c2054623", "sighting--148337c2-87d7-4d10-a5ba-c6769f1e5cfb", "sighting--0708662a-a22e-49b8-be65-ff0461044e1c", "sighting--f59fdbdd-9425-41ac-b6f2-74b16a76718b", "sighting--a51f841f-cecf-4fc0-8e21-6febd3f79635", "sighting--4c94281c-1936-48df-9c28-8ae266028584", "sighting--30b423f5-9441-4e97-88b8-1d8bdbe27880", "sighting--cf6609a4-3c61-41b3-8177-b0ad0706f42a", "sighting--273ce52a-cbc4-419c-8150-1b2709a6882e", "sighting--609eaadf-1edf-4382-8dac-9118db319df7", "sighting--16eb80ec-24c2-4f5b-a643-1e0bcb41ddea", "sighting--b5164934-adeb-46ad-857e-005a41fda2a0", "sighting--209ec38f-d3e0-41c8-915e-18a6326911c0", "sighting--90724b97-4537-4cbc-9528-e79595b8b221", "sighting--eebb15ba-59e2-4f57-918f-498bb6ead223", "sighting--b606a8d0-e565-4c68-984a-9bc6603206b3", "sighting--c560a9da-944c-4642-9ff5-824503fa50f8", "sighting--576e1394-394f-49c6-b730-996e03916ffd", "sighting--da7a04d7-dc2c-4230-b184-316532bb1b88", "sighting--c2f5af4c-1eeb-4188-b97c-6ef012118519", "sighting--be409f00-71d1-4462-ace7-b2c6d9e34502", "sighting--89ed8de5-7611-4bad-b447-c6bb254258d6", "sighting--a771c7ad-9c78-4ac0-abf2-93f9c55b6b4e", "sighting--aba55cf3-8b88-4f43-9d66-52101b8c4349", "sighting--46e56d9f-e286-4c0b-9d61-5f54696c4a92", "sighting--8564ed56-ecd7-486e-8775-1db271b3c225", "sighting--06b038e2-f8b2-4d34-9d6c-47cb87440725", "sighting--c48f4d15-0db6-4257-9783-94340b023b2a", "sighting--5df9e656-acef-4db1-94c8-2dbc926c3442", "sighting--2482c29c-7338-4a52-b604-a058c694752c", "sighting--ad6dcfd8-b03b-459c-9e77-d62b914c7588", "sighting--03b10d88-eed1-4525-991d-453f2ae2c7de", "sighting--0135acd1-93ad-4741-a084-c8d6185cfa06", "sighting--9b4506aa-4832-458a-b1ad-d38607554ea5", "sighting--d1b210c1-7fe8-416a-86af-52cf4c13084b", "sighting--3346f57c-a0a4-4a64-b436-36e8d5805cb4", "sighting--87a3acad-0f77-4c07-8dbf-279892a238e1", "sighting--754c87e9-0775-4428-8512-eb9786556418", "sighting--d702e2fd-b1b5-40e1-95e2-4fabbcffc2c2", "sighting--912af0e8-4938-408c-a0f0-065f749c619c", "sighting--c5e27ad5-ede0-49ce-b3ec-64b66da55b48", "sighting--7d6b1ebb-51bf-41b9-8734-c9a7702f9d0f", "sighting--bc794550-afcf-4a47-9b7e-b16959167eee", "sighting--325bf969-1509-4384-98a2-27cf2d7c7f4d", "sighting--d42dbb6a-9500-4e44-9bc0-c87e31004c29", "sighting--fc92768f-363e-49f8-a2ca-3b1cfb546181", "sighting--c69fd0ab-5aa7-4eca-ac3b-92f216cac8f9", "sighting--17931604-6beb-4d14-866e-4e9026a3cf57", "sighting--0ad32419-3c8e-4882-893f-7c1639c27e6c", "sighting--be081892-501a-41ec-b275-d8fcea3af014", "sighting--ad58de88-6b96-45fe-b7d8-d60830961463", "sighting--99074d98-7e3e-4707-ab82-5ea2e9c4f327", "sighting--d52457a7-6b07-4753-9a8a-5c40fa3a1fa5", "sighting--5f9345a1-591d-4176-b40c-a4b9c804cad3", "sighting--926fbfdb-d9b6-45ba-82ea-4fb9ea242059", "sighting--4b8898c1-c4ff-4f13-b68f-7828f3b5254b", "sighting--cb88e15e-73a1-46b5-8b80-a8aeb3c933d3", "sighting--1ee44c0a-eec4-4945-996c-30dfb0f52c6e", "sighting--5b04f091-7a70-4768-a463-9bc9d25ecb49", "sighting--dd597b00-a85e-464e-8f6d-d78939589477", "sighting--d7414465-b2bf-4998-9394-65e17970d195", "sighting--a29e9e9f-1bd9-4baa-ac31-c02442cd55be", "sighting--7a742820-9ee1-41f0-80fa-08fa9786f6f3", "sighting--807d0dd9-f6de-4c75-a447-70224dba7ac6", "sighting--054c31ee-88b9-43f1-acc4-d1f01848c7c8", "sighting--0152f5d2-3711-45c5-b87b-0fb196068203", "sighting--dd46d59d-17a5-47e2-bcb2-12fe48a30f6d", "sighting--501d6e5a-fefe-4eea-91cd-1029bc98080e", "sighting--f0e12bd4-2b1d-40ca-b77f-a14013a67322", "sighting--8a1a23ad-0049-463b-96d0-90063458a475", "sighting--a60e3ef2-7ab5-42db-82e5-62826171b4d0", "sighting--411f4cdf-a9ed-4e2f-8e07-40b2f8d58890", "sighting--821a9c32-264e-4177-8b64-58bbd6957628", "sighting--fef25d54-ec75-4092-accd-f0bfe250d9f6", "sighting--99eb2ef6-f5b4-4c57-a899-2aa860400fb3", "sighting--eddf97d4-13f5-46b9-8348-581d27149523", "sighting--1ebfdda7-e33f-4bb0-a57e-7c52d280abd3", "sighting--2e80acca-a887-41a6-9dd4-48d11499efc2", "sighting--836b0501-77a9-4cb4-9732-21747372af8c", "sighting--4adf61c6-6870-4940-9342-9d4cd835d995", "sighting--af8fc67c-5861-47b5-8840-c37f9f9cd249", "sighting--4a6a6ab0-1ce6-492c-b0a7-6d8ceb75595a", "sighting--b1b95cd6-f019-4861-bdc2-871153f0ab55", "sighting--c124d5b7-60bd-4487-9553-65cce66bb4ba", "sighting--53449be8-bd0e-4642-8ec3-bed4f17bf2fa", "sighting--d2f2fcdc-f70a-4f4a-927b-05a12e8be2b9", "sighting--d37a2c9c-23db-4360-afaf-10bee8d3e316", "sighting--f6ed0e50-e9f4-4fca-8ac6-d77fb4d77a4c", "sighting--0ce429b8-b5d4-45ab-8bd4-741da2c6b9a1", "sighting--d5650e45-97fe-461c-883a-befbd1df3522", "sighting--e0402fe2-b70a-4b84-a847-265dc850d185", "sighting--0f25915f-df54-47f5-902f-598676f17d3a", "sighting--a96b48c4-cc5f-41ee-a755-df3d8a4e903a", "sighting--7df4e637-5e91-480e-917b-d1b01c83840e", "sighting--a8e0546e-d467-4f52-a1d8-bdcdc28da7e5", "sighting--372d2681-7cf2-41ec-bca8-760645e8d820", "sighting--49163e50-93b5-44ac-a708-46a2395ebdf4", "sighting--f046c2ac-a4b0-4a00-b8da-2a0a4b72909a", "sighting--7331300c-8256-4b95-9854-90418947c666", "sighting--9161065a-0759-422a-bf09-1d316da7e567", "sighting--26f45a84-8d58-41a4-93e4-a7f13d04a30c", "sighting--80a2e7b2-a273-49b1-a582-b0bfcbdab142", "sighting--c87f555e-04ab-4b5a-a522-cced75ca38f2", "sighting--a6ca20dc-43e5-4161-a12a-f7d4fc256dc5", "sighting--e5d66c29-b432-4d21-a09e-b851243a4330", "sighting--b1192898-dd17-4d13-aee5-bdceab44fe0c", "sighting--5870c0da-3690-4d87-aa45-92dde2766dbf", "sighting--6ac4cff4-3cb4-445d-8816-209508dd6cf3", "sighting--e5c0f8f4-ef02-4088-86cf-3d16b6813493", "sighting--16ba8978-bd98-4280-b40e-0501fe3135ab", "sighting--1263d915-d8b8-4a9c-a1ff-59cbdccedbc9", "sighting--946d1e18-2c6b-4933-887e-19592a38fe33", "sighting--3efce6de-9956-4d74-a6a5-20823ca39f17", "sighting--2448a570-1a53-4625-84dd-6cc205678c9b", "sighting--a5521ee5-91b9-43a0-8aee-2a4a4d622401", "sighting--8496a7b0-e96f-419c-89e8-b69c9475885a", "sighting--793756a5-b844-435a-9a9d-a8e92bcfbdf3", "sighting--c6bcf9c8-152b-4e7c-9a1a-1620d9905499", "sighting--8a13cb52-39dd-46f2-9f8e-12ae7e5ba524", "sighting--8d772b62-6c69-46b9-a41e-56862c8247bc", "sighting--8f74eef0-f2d2-4204-8770-90a5360daa7f", "sighting--ceb0ab20-73b7-487a-b1e5-94a198bcf6b3", "sighting--3de0180d-cc87-4ae1-b968-5c30ed622c3d", "sighting--862fe993-8366-4481-8ebf-90e3f24067fa", "sighting--37711c6b-5306-4fdf-ae2e-a3d4405f4822", "sighting--44d6a219-9cca-40e0-a91c-dab4a6229e9f", "sighting--c91b9545-9cf0-4af4-89c3-448f98ab2c65", "sighting--c15b0f63-37fc-4de7-8ef1-913e1e96b388", "sighting--d4f03cc1-c552-42b7-8aac-0b1c2d89ee4b", "sighting--86c16e47-d951-4159-8c51-51ab007b83f5", "sighting--1c582195-dc17-427f-8f56-282f0e1298f4", "sighting--8d07a744-5332-4082-a18f-356e10f5bf7d", "sighting--df3508c1-84b9-4746-8378-beaabc9cf524", "sighting--d7704c66-f15e-4e38-ad61-aadd4873d90a", "sighting--d04a9518-d7f8-44d8-b848-82642e5736be", "sighting--0b96cc2e-da6e-46b4-bc91-6f28bf2876cd", "sighting--9ad88d02-9459-48df-b490-1ba11b1fa55e", "sighting--7458937d-ca32-4de2-aaf3-67784c3d037c", "sighting--b4e88663-1a2e-408a-bd78-9ae9971b35c0", "sighting--64bf2f52-f1aa-429a-98cb-4221f344997f", "sighting--3cfceaab-243f-44e8-8e70-3123f03916fe", "sighting--44fef4e2-28f7-4146-b55b-29d3a17b9b97", "sighting--cc5d196a-5d79-4ded-a28c-6290c5649715", "sighting--bfe843ff-9e0e-4d2a-8ce1-c0ee7fc85429", "sighting--55e8ea3b-b3ee-4fb3-9f43-74129fac6101", "sighting--939e34ed-5c94-478d-80f5-697074d7730c", "sighting--b66a109b-1c9a-43b1-8272-612827269252", "sighting--02011d7c-3f5f-4a29-9ba8-ef0b6d7eeea6", "sighting--1945d80e-7723-4f6e-8073-94836c060cb9", "sighting--494587ba-b9cf-4d4f-a82f-9945ee5880d2", "sighting--ee8dfaf8-b5ce-4c04-b648-ddd18a9eceed", "sighting--55f9487c-b3ec-4fc2-88b1-c2f091b6f9a4", "sighting--6b3df5c6-82ef-477d-9c08-df5255bf5625", "sighting--17cf0274-09fe-42de-ba88-c02dd330796c", "sighting--20a68a60-654c-46ea-bb51-07691668ec71", "sighting--371f994d-e3d0-46c1-8723-392888a0224f", "sighting--f032a8af-8181-49cf-99da-0321066ddca6", "sighting--9e39fa36-e611-47a4-b471-80d55e885a6b", "sighting--3ec4ffbb-f538-440e-8919-5dc810cbecfc", "sighting--8eec6be9-a89c-4029-bc10-bfee7a57a772", "sighting--7f890b8d-5e70-4b9c-aa71-84c161047ae0", "sighting--0ac094ad-4078-435d-9237-daa3f6993d0e", "sighting--3e2d0952-0ae3-47af-9d82-d48dcd4c6c0f", "sighting--e00bde11-a94a-41de-bb24-e8a4ede94f9b", "sighting--31689e37-4fbb-4bca-9861-1170df241674", "sighting--fe389721-7d23-4e6c-be5b-040054538731", "sighting--5fea4de7-31fc-43ee-8589-8d2ebc95bf65", "sighting--7b72e38e-14b2-413d-9af8-d90c3d00542a", "sighting--8a3cd4f8-8c6c-4091-b888-bd41ce6dce90", "sighting--94cdd310-b8f0-4a2e-b28d-fb3797f22640", "sighting--671c0847-3a50-4c33-a6d0-75b9a95f7bf7", "sighting--6b2799e3-9b4f-4e7f-9f46-bdb91846d67d", "sighting--29cf361c-ae13-448f-9d23-4e9b7b06819f", "sighting--efce1806-8eb7-449d-82f9-e6058dc5ca02", "sighting--fcd25103-c90e-4386-a861-c416c4dbb91b", "sighting--f91b54f1-568d-4605-8991-6c00a86bbe31", "sighting--0f1cc4a7-4185-4b78-8bd4-3d02937cd25a", "sighting--19e9c477-36fc-4f7f-9fdf-842e21ff9483", "sighting--8453bf66-e9c1-4bbe-8404-af8a26aeede3", "sighting--2a7fc141-bd5d-4780-9bd7-f16b040cffae", "sighting--6a2d7272-9147-42a9-bf7e-474eaba2408a", "sighting--b51e0451-05e1-4c18-97e1-b470c1fcfad3", "sighting--58fa860f-0b2d-42c1-83fe-82c8a2f6904f", "sighting--3fbb4690-b618-498a-8df6-60ce6a75c8b5", "sighting--85f38c68-f630-4658-8225-ee4001a85769", "sighting--089d637c-e7f3-4df3-a5e3-00e28fcaf5bc", "sighting--9708b22e-fc75-4c16-bfb8-6b801e5e09a8", "sighting--f8d70fc8-6a21-460a-bbc9-7ddc0c8ab73c", "sighting--49e266be-4323-42ce-8b08-297d0a092c17", "sighting--cf31c20b-5047-4f11-85ab-6f77a8459ee2", "sighting--b0cafd86-19a2-4405-93d3-0dab40c1db0f", "sighting--57108527-c565-4776-9fbd-7591e8664d39", "sighting--23a962c0-d0a6-44f8-abd4-d24d1b9e0305", "sighting--446b76d6-ffbd-449c-bd9e-00eeddd6acb0", "sighting--93f6d6b1-d9db-4a68-bf94-2d0519a8015d", "sighting--c9dcde51-bc48-47d1-a8a5-e6821a2ef02a", "sighting--0cbbadca-b6b1-42b2-91a5-b55abab78c63", "sighting--e612fa01-f10c-48ff-b2ec-571c5c57a728", "sighting--20afbeeb-c455-468a-ae8a-c1fb085f6394", "sighting--21a4bdcd-6449-4a61-bac1-35df54a25822", "sighting--b5e2378c-6951-4000-a7e8-60695bf494e1", "sighting--ba2ac07c-e280-4855-99dd-e085a80e4ba5", "sighting--215b900a-b5cd-4eef-aaa5-05030f391518", "sighting--48b403fa-ba16-4f09-a9ac-fcb073a428bf", "sighting--80c4ec82-a0ca-49e8-b6d3-d9ff838f0ecf", "sighting--0d3d066c-f8e6-4dec-b46b-7157a2094ff6", "sighting--635ce5d9-d4ec-4440-b6aa-998e96fb66cc", "sighting--c0f2a93f-ff64-492f-8df7-0d498deea347", "sighting--dd9ae651-f4cd-461c-9336-963d818647c0", "sighting--1c086761-6a4e-4f93-8add-4183e6010285", "sighting--f2ffb3f2-c8e6-4e61-8689-c0e841dfdb4b", "sighting--4fd56491-b574-4eac-bb25-794c73a3b957", "sighting--5b0b86c4-3c33-4005-937c-e9b6d3af870b", "sighting--04df7db0-ab8e-4618-a61e-cac9191dfa0a", "sighting--4d4cf2c7-f58a-4994-9b98-d454a1c1011f", "sighting--cf196096-7a86-44d8-a4f4-227f5b465db8", "sighting--d93ece35-c892-464b-a61f-38b31f8d9c6b", "sighting--356a022b-d9d9-4f12-b2ad-98098a63e1c7", "sighting--169877d5-925a-4943-b8e5-654b176a5514", "sighting--d5f1f269-de6b-4355-9057-2e9dd2dc2327", "sighting--a36bd798-daf6-4004-ad43-87770c3c0b11", "sighting--b13875fd-3d57-4277-87d5-44be2c361dc1", "sighting--8973a4b9-9d16-4f9a-927c-b511a60fb554", "sighting--f1da4a33-8258-453e-b09f-7bcc891760ea", "sighting--33a0cc0e-805c-4a14-b5fe-fa39832d85bb", "sighting--8163385b-15a2-4e62-a00c-d927b9af1c41", "sighting--40ee37cd-c842-455b-874c-608446312976", "sighting--fd30526f-2803-4917-9056-8c8ad10436f1", "sighting--77a73173-73ce-4ab3-a126-d430ba8dd7a7", "sighting--648adffb-036a-4df0-bc35-5232fc1824e9", "sighting--ddd61ade-3d54-418b-a949-c2973d1af6f4", "sighting--5e799a5e-f139-42b8-90a6-eada48952d61", "sighting--e0f5d39e-2dd8-49b9-9932-077a3a01ce1b", "sighting--b29773b5-2348-4cd0-9416-b484fa06f869", "sighting--6ca209f3-4471-4fb0-9100-297139ba669c", "sighting--b4c6707a-aeed-423b-902c-fe5e174b890b", "sighting--dd61f9b1-b928-477e-9376-73e8671e19a1", "sighting--ee7b0b89-b97f-4e40-b29b-403081beb03b", "sighting--84369e94-b6a8-4df5-8994-f3beb827dfc8", "sighting--fafac0ad-d472-4eb7-a0bc-4d2e7e9982e4", "sighting--69f60dec-f540-452b-90e5-71195ca4a2b4", "sighting--282e478a-f41f-47dc-8f39-b25244382cf0", "sighting--6db3096f-a037-4bfe-ae97-cdc99bd5ef95", "sighting--30dcdfbe-47b9-428e-acb7-02dab1e81992", "sighting--fb03c0e2-9f81-4623-9dce-cc2f981784dc", "sighting--33b70f76-dbc8-4250-977e-5226d8585e44", "sighting--0cac59a9-2ae5-48ae-99bc-c6a67d46d45b", "sighting--26ca7ee9-36d8-4c1b-9709-4e15fd66e4e1", "sighting--2edb7c4a-c6a7-4932-9e01-a0603366de96", "sighting--6e2a91c7-378c-4b7e-8b59-3b086be416a3", "sighting--ff115ccc-01f1-49e7-a345-442378f9d7a8", "sighting--2fa3c7f5-c7a9-41d0-af15-924a82e5e60f", "sighting--2d41d54b-cb55-449e-b950-266e6f7076c5", "sighting--a9decaee-47ec-4e84-8c5f-4e71a8eb0e8b", "sighting--eac37697-c2af-4c94-b1e4-6cb7913f3975", "sighting--6c973d2b-8983-4662-9d29-ccb6e1789963", "sighting--79f261cd-5db9-4cfe-8d59-7bb18fdfc124", "sighting--f725b80b-b414-4349-a931-bd82a79a3d46", "sighting--2d3a066c-8be6-4985-95ec-7e38e9e7ef7e", "sighting--c687a103-324a-4854-8b51-94de2292d0ba", "sighting--00cdfae9-5136-4410-9751-9e2e2f7a48fe", "sighting--ce44188f-783d-4f2a-8802-98a1e09c1e3e", "sighting--e19e476d-ddcb-4080-b4ed-0af02fd0e844", "sighting--3e2d9f02-8f5c-4cf7-b69a-195f0c6c12a7", "sighting--b6e0047d-1f2c-4ba6-bd56-785a6d540890", "sighting--3663e77e-a408-4982-9758-993578921f98", "sighting--45fc0982-297f-4748-9606-3ff2f02d2b5b", "sighting--a80a6864-9264-4283-a6f9-58e1c3410f2d", "sighting--f618d8de-c05d-498d-8ef6-f704342706dc", "sighting--eb10451b-9a40-4332-959a-85da1e8c38a2", "sighting--be58e5b3-4804-4bc4-ac2f-477a17270b28", "sighting--205cbdaa-f79b-42fd-b022-1b47160de455", "sighting--5e39c3dc-954b-4e14-8149-3f7ca09cd8da", "sighting--3fcf723b-84ad-4747-98cc-b69cb3abba2a", "sighting--88529e30-372e-4d96-ae5b-fa522c242d52", "sighting--451d0fc3-a473-4cdd-a4aa-7a3fde7f0dfa", "sighting--2f2598ae-c1cd-4dc3-926e-05b378d20314", "sighting--d8f412b9-ed08-440a-9c9f-454e511e562f", "sighting--90d69c01-4acf-4384-9b3d-70f44e9f32b8", "sighting--2a6cfbb4-f7a4-4220-a0da-182a80cc4ff0", "sighting--7630d895-b378-43c5-8d13-55b32ae54750", "sighting--bfb74f2f-0e72-4f45-87eb-0a8b72b217fe", "sighting--a6b008fe-a1e2-43fe-8871-23e86afbab4e", "sighting--2c3ac373-ccb1-491c-89b8-f0acfe10a4c4", "sighting--0aaf72ea-64b3-4564-a4e9-a66de1c7e468", "sighting--bfee7737-c7ea-4db4-9d5f-7de667a222b0", "sighting--43eb7d6c-7f3c-484f-a5a1-a827f70ae6f6", "sighting--3688c1a3-f78c-428f-87b8-814099134000", "sighting--5be65dd9-8456-4289-8ba9-ecdf1fe709e1", "sighting--ccaf6234-237c-4bc0-9ae1-edc938fb59bc", "sighting--cd6b8e81-9d1b-49e4-93df-ec9783f0ea2c", "sighting--5bba35b8-0ea1-4445-ae82-baca0ca07ec0", "sighting--1df0a063-92e4-47c0-aafe-566fd95e5f33", "sighting--c4ae5df7-d0d8-45fe-bf83-ee73f2160843", "sighting--356c8da0-5b04-4be6-b1a9-c499b7e3e669", "sighting--ce54ddb1-b8f6-4e0e-b88b-8cac0651dcc8", "sighting--a9147a0c-f0c1-4cf7-81d6-f7bcda2b991f", "sighting--b8decc37-4c2a-4be5-9d53-151c068442ab", "sighting--94ec90f6-5489-4397-bf61-fb4f30581677", "sighting--c8c127a2-297e-4b5b-b867-8613c0384c21", "sighting--ed7d9c6a-af68-4476-8b54-cd3f03d114c4", "sighting--a2726d2d-9eff-4c23-ada7-a43d7604737b", "sighting--5459c42b-c941-42f7-be2a-b9ac91b401d0", "sighting--7ffa26fd-ce5c-4bac-b643-c7e7b5cf4967", "sighting--f86101a5-153a-4649-9a79-99285ce1c504", "sighting--c5fc4908-7498-4319-a39f-1f700b73c10c", "sighting--0bd6c91e-53b3-4b5e-9b5d-43eebbac953c", "sighting--c3ff1895-2b2c-4901-8d28-2b16b749767b", "sighting--5a12aa8c-8884-4f8e-8aaa-1cdb2ac55b33", "sighting--9e88a7f2-ba15-491a-8407-7894758de368", "sighting--fc1ac050-af9e-4a8d-8294-aac2736b4de4", "sighting--90a8e0f1-38a8-4aa5-8691-a9d1c766966e", "sighting--4da148d0-c74b-4ae5-8fc1-883dcae92b2b", "sighting--1d73127c-4755-4730-885e-c8d3c955b803", "sighting--9b834a85-374f-4850-90d1-eb4546afdaaf", "sighting--e4d3f911-9aa8-47ec-8e9e-4949aeb1d3f2", "sighting--34ba27af-b7ba-47c9-9bae-dc6bd17f7e8f", "sighting--87ddcdaf-4383-4b83-87e3-df72666d6e1b", "sighting--447ba57b-b4aa-4617-896e-bdb8d1b12d3c", "sighting--82199ea1-ce0a-499b-be32-028b40832ba8", "sighting--2c8e014b-bb89-4b45-a525-8c33e0cf26bd", "sighting--5461262a-3c9e-4713-947c-7e89151b29df", "sighting--85a401ab-bd25-44f9-aaaa-78a5e5ad6889", "sighting--dc7e8036-710e-4d6b-a472-853662414fa0", "sighting--7f0383e8-6d04-4b5c-8efe-0c1355bc6f2d", "sighting--9807d2f7-33a0-437d-b3f7-b927dfab2c6f", "sighting--2baba8fb-6bde-4e93-9788-5e51be09e3ca", "sighting--a421fdff-2686-4798-a4b6-11943e7dea96", "sighting--681cb97e-b9b9-4c23-8a6f-521d53b7699f", "sighting--07a5f623-4554-42b7-9778-941dfe8c5f72", "sighting--0c26a53b-5106-456a-866e-377138b92f1c", "sighting--446a6b27-d52f-437b-a505-02cd756866d8", "sighting--60fc7255-603c-4793-af57-48b5226c0e91", "sighting--2d251006-c4c8-42b4-828f-c5ea71778181", "sighting--6d76bc16-c7b8-4546-b931-79507f2572c7", "sighting--26d03336-2785-47a9-aaee-0a5f61a251e1", "sighting--3ce535e6-7a82-4ba3-97a1-1b5a2b6ecee3", "sighting--6171ef60-df5d-4dea-a67b-294806e7ca01", "sighting--be2d1ebd-e4f1-416b-a938-2f0cc8d8fcad", "sighting--667072e0-0e08-4826-8816-2457663344c2", "sighting--6d65cf95-fb37-46b1-89b0-a32af2d1b152", "sighting--20563e2e-96d1-4652-b660-2349647d5bfa", "sighting--dc4a06cc-8484-43a8-8130-78c94f5f06ec", "sighting--2d18f1ab-a74a-4afd-b035-55389e709499", "sighting--bac2e800-3e99-4ae5-b50a-aef40efaea03", "sighting--8edd45d2-3111-4bee-83c7-d3ed087f870a", "sighting--dfb0d6f3-80f2-4cdc-bf3d-050441237009", "sighting--5ea8cc57-8904-4a12-86d2-825eabbedea6", "sighting--f194331c-1a26-4a9d-8416-2a5d41644fea", "sighting--804a9810-b089-4421-a7e3-361619d6e388", "sighting--28e04dd8-78ee-4c85-b99b-e535ecd7179c", "sighting--880fd0f3-b12b-4894-995d-926cb658e189", "sighting--ad2cd399-45be-4911-9c91-9545625e3401", "sighting--67df6b3f-fe63-466b-99ed-17ae78dbc835", "sighting--1ec4946e-ae92-4fb1-b428-0827412393e3", "sighting--b7fff8f1-87ab-49be-b488-f821865d674a", "sighting--8eaa0129-7e76-486b-9533-f48eb570edf1", "sighting--f9c4ad7b-03c4-4037-8068-abcd717735d5", "sighting--476b24ff-de07-4d30-9066-589bdaff30d1", "sighting--6fe575c3-6a64-447d-89a3-e2b78330e815", "sighting--90e3aa62-f6be-4df7-b54b-dceffc3cb210", "sighting--fb66b470-7eb0-411c-a6b9-41f91f82aa68", "sighting--33b2dd75-a4cc-49b6-bd74-2a35a2fbda98", "sighting--6ffab988-232a-45b5-b3ea-9dcbc57b7530", "sighting--1a124854-5109-4770-b162-0ef2d736292b", "sighting--608f5290-0fec-44bb-aa1b-30310a17fc8d", "sighting--2848b136-d8f5-4fd7-ab78-71659e8151ac", "sighting--990ff539-277f-4042-8fe9-e5e04a84b047", "sighting--3af08ebc-28b6-4271-8fdb-2c318e589663", "sighting--63ccf7ad-ceab-4420-bc39-4788d20601d0", "sighting--9a939d92-7e95-46f4-a4df-3777272740d0", "sighting--10afe140-710e-476c-9072-371b9042f6d6", "sighting--91ad020b-9266-444b-b984-9834cfdea93c", "sighting--a18890ad-96f3-42f5-8b80-853f85719118", "sighting--b789aeca-6fd0-403a-a87b-c0d1f5e2e298", "sighting--012d5b42-6524-4350-9745-62b3b619905b", "sighting--61114dd3-c1dc-43a6-843c-2d5bb3856d5d", "sighting--26f747b6-b1ae-451a-9698-233f51063c60", "sighting--32f0f783-a4b9-487e-84c4-ac73f9bb19a6", "sighting--51618ac3-f353-44b5-95ae-6b8a8d42d52d", "sighting--c5997c42-8e08-4f10-b0f3-8935e62c2f3d", "sighting--59c89771-a1d9-4f30-b83c-4e9107ffeb75", "sighting--f695e196-6e93-4b58-b1cd-a52559f116b2", "sighting--f2fca549-f114-4d06-84ad-0ce75795833a", "sighting--111f5c81-0828-4e1d-a1f6-fa31507dca64", "sighting--120a1504-6d8b-4a6c-9461-d99f4d30aeaa", "sighting--637d0235-d44c-4fae-a5d6-54e621536835", "sighting--ebbe27c8-7f5b-4742-995b-74213391a161", "sighting--b3c98f08-d15c-4338-bbbe-a2ea41ab5d60", "sighting--922ea3d8-aac1-4215-8a2d-676d68dd4363", "sighting--28b1fda5-8e3b-48ae-a16e-8fa5e11d8d1d", "sighting--87026627-3639-4c48-b9c6-26c1b73ed16c", "sighting--b48a4afa-84f0-4712-9256-9d76bdcd6d91", "sighting--70fd5fd6-a07d-49a4-910e-f887d464d692", "sighting--8d872f6e-b813-4a27-9a36-da4967404bdd", "sighting--3f13396d-0bea-4901-955a-74553b8ef17e", "sighting--d9d74294-8687-4fde-b0be-3d5486f1d79e", "sighting--8f798437-5e0b-4eeb-8bc3-8a27f8caa793", "sighting--8e7f54e5-c271-44f5-9c04-90b350bc92d5", "sighting--11d772f6-ce55-4d78-a3a8-86a921613e6e", "sighting--3119474f-b3c0-4959-9e26-f854eb4fb536", "sighting--7a78911b-4ec8-453e-ab24-e8d7161c2465", "sighting--c337515b-b7af-429c-b509-cc1e4a1ae60d", "sighting--9ff1a7b0-7a9b-47ec-91c1-c2f574fe89e3", "sighting--27d229f1-ffb7-43e3-932f-338b64f4a225", "sighting--5df19161-c2ba-4d66-882c-c66b0779b183", "sighting--5471098e-1ace-4a55-a82e-da770d5e8e1e", "sighting--0d1fd782-08b4-4f0b-9632-1759234a084b", "sighting--77356e93-dcac-4bfa-a36d-fac231c08d40", "sighting--98e7d84f-b881-4d30-a7f5-711d5c025d58", "sighting--b09e56eb-a1e3-42e5-ae4a-e39bb6bd752d", "sighting--ffcb5ec7-53e8-4d50-9f2a-47ec80285581", "sighting--5a5791bc-849e-4376-a7bc-71f86e1ee079", "sighting--d4acf4a4-62d7-4034-9f03-d3db8ac01cc0", "sighting--7157eb9d-e2c4-4463-bd8e-e2ee359c4293", "sighting--c33d2cab-e376-4d4a-8840-076600b408c3", "sighting--7b8bcd59-0bfc-4391-9299-89107a6e40ae", "sighting--b50a0908-bb70-4545-8581-9ba979ffc646", "sighting--9d1aa633-62f7-46c7-8a63-8032e9e59e9c", "sighting--b0d7d6ec-7fd4-4ab2-aba4-43554cad240b", "sighting--5a4a00da-2c07-4537-ac4d-0b3faba80afe", "sighting--24411d70-9de9-4455-9fd3-78f4ca06345e", "sighting--0f6c22e3-7182-410f-8ce0-50d3c2e13253", "sighting--1648d479-0858-483a-ba88-9c3b9cc397dc", "sighting--5dbfc118-4b86-417c-accf-a04867b87c62", "sighting--300ca21b-8412-41f7-a5fb-836ea87a7109", "sighting--c901f539-57b8-4b36-a3ce-28c26e22647d", "sighting--2cd1497c-22bb-491f-856a-97cf21432200", "sighting--57a65dc5-1cda-4535-9153-bb5e5a4d164d", "sighting--be05ba93-3cca-4817-be88-d22e217905ca", "sighting--f68a77a3-3cba-4522-b89e-fa9f3405058e", "sighting--b4f0ea83-6474-4872-a03a-1c694f9c3482", "sighting--20cbb3d8-e052-44ab-a8f6-53b4481615f6", "sighting--50cde0b2-32d4-4168-b83a-34d02b856da1", "sighting--7a6eb4ff-7eb3-42cd-99aa-5a5a72fe9a37", "sighting--47ddb776-7591-4de5-8275-c087515f09d0", "sighting--75315585-9466-436c-8209-6b3a8f8cdfd3", "sighting--f4e5621e-e8f8-46b0-b8fd-fb65d290395a", "sighting--ac885a96-a23c-4f10-ae0b-fcfd01a500d9", "sighting--9f2b1a9e-0c37-4f42-8dc2-1677e29e39cb", "sighting--9c230d40-47cb-4a6d-bfe1-5aeeee6be721", "sighting--2bb8fd66-d6f3-410c-994a-9cd3e908678b", "sighting--b1130b98-ed62-4b07-8b3c-81e6e872d356", "sighting--b664b541-e033-4b1a-b9c6-4af92c70c703", "sighting--7df476e5-5f8c-46ea-a7a6-aec7a911f57b", "sighting--3a804113-2244-488b-81ba-1152203141c0", "sighting--91e15df0-8c5e-473f-a20c-1cd0e3c9bf86", "sighting--bfe0b493-56a7-46ee-9559-4d8a4858cf7c", "sighting--4c8b4c1d-4fbc-4aa3-a4e1-fe37dfdb16a1", "sighting--a2c1dea5-d15a-487c-83c5-1740a3ad662f", "sighting--a9b524d6-5891-4555-b24b-6da3b44f45f7", "sighting--9dab0d02-ff4f-47f0-a237-d723e17d8990", "sighting--fc97db75-c397-4573-aae1-578a7df01d4f", "sighting--898b9614-915d-4396-8a45-84a51e8c6834", "sighting--95ad026c-4f48-4cd9-870a-2a96c1f62e00", "sighting--4ca1d753-0a50-4e9c-85bb-1450e4b2c611", "sighting--c75160cf-11ac-42b3-82bb-b1c9108e3be2", "sighting--dcff2c2e-0288-466c-acd3-e95d47a7afbe", "sighting--47c72efc-48bc-4076-92db-50767a9b9a1e", "sighting--a6b1dd96-2b72-4f8d-8b14-943f76660bae", "sighting--8cc553d7-8105-42ee-abb0-cdda4f331144", "sighting--3d7f4111-6a21-4e09-91df-bbc9e1f5406e", "sighting--d32d8798-daac-48b1-98a9-e1927b9d18f5", "sighting--a756d8d9-1754-4b53-9ed0-a2ea4b8078b6", "sighting--35500f09-a281-4a2d-a016-4aea0f8474e8", "sighting--e7bb7637-5887-47eb-9026-fefb2cd56a8c", "sighting--4c5a09c3-4f06-4fcc-ba92-a418bc868b5a", "sighting--bc45468f-ac15-40b1-9934-0409d82be63d", "sighting--56607894-6e17-45a3-b4a4-811e401a2bbf", "sighting--eef31b53-ae08-4df8-b107-9a1f5e2436bb", "sighting--bb33e817-193b-453a-a6e7-44f22e07fb7a", "sighting--62544985-4e20-41f0-b1bc-89519a4afd7e", "sighting--fbb7f2ad-1e37-4de1-b84a-e1a21a421048", "sighting--a0ec598c-ab23-4a77-af5e-1885142c6f0e", "sighting--b0caada2-eeb7-4c5f-a887-80d91b614f0e", "sighting--cdd19aff-99b4-4ae5-8378-50eec5c4f814", "sighting--5d49c34d-1bc4-4378-86f1-e1d3c86f8d28", "sighting--b14bed08-54f6-403a-b603-ef051e049b84", "sighting--dfc5c5cb-87b7-4d83-825f-ae9a5132f990", "sighting--135243a1-a581-45ff-b83e-3186a384132e", "sighting--f446aa64-1c49-4ea7-846d-1523538f55a5", "sighting--30dd62b3-6f06-4ff6-9f2b-ee6f86527f50", "sighting--4294e40b-22a6-446e-9d56-49c07af9d655", "sighting--33782ab4-67d0-4741-8bbb-94c38ea8526f", "sighting--53f4a08b-8d54-40b8-b22b-493f2753348d", "sighting--b50a5866-fdc9-4311-a1e2-79d9a0bc7fa9", "sighting--29be7971-47cc-4ddc-821b-3d991beb15a4", "sighting--1b7d98c6-b379-44c8-bec0-4119b41c7e90", "sighting--cc5f1130-d168-446f-bd94-de6868b21ffe", "sighting--a2d33fa1-d06b-4d8a-8078-d971db96b448", "sighting--d57afb8d-fa2e-47aa-82a6-17ba8b92422d", "sighting--5e5e2df9-897e-48f1-a65e-7c0e53bdd88d", "sighting--05f996e3-782e-46a7-b0e6-0c2d1f3a5f62", "sighting--22527a92-a068-442b-a8f1-efdacd85fc96", "sighting--5303475c-682c-4e7f-9810-2a07a3af2396", "sighting--fdb10aaa-b5ed-4f53-bed3-b9c605d0d735", "sighting--a1a3848e-891e-4dde-8972-6a1558f374cc", "sighting--366ed279-2501-476c-bf67-61607ee1d52d", "sighting--b180ba72-c568-4fad-92bc-72a8dbd47c07", "sighting--4e599278-0213-4ddd-b412-db4f5fc33d50", "sighting--f4e4c0db-0047-4474-ab96-9e867507c264", "sighting--b106f93c-e6a6-4e6d-b882-0217332d6b91", "sighting--9a9a8995-c25f-4bf2-884c-bb98b9d08482", "sighting--79f16b66-5e11-43a6-844c-8974ae38213a", "sighting--6bce0e22-b941-4236-84db-641f37d0847c", "sighting--005baa69-b499-4883-be35-734b7267b20f", "sighting--167b8f86-7377-43cb-bee8-ea634c767ef4", "sighting--e8d8c9eb-ffd4-4403-ba25-bf2363da61cf", "sighting--bbe2ae90-a0b0-491c-a1a0-bd6c7a4f9f8e", "sighting--ebd95f62-da32-46e1-af15-2843b7ee1b79", "sighting--2090ab3c-adac-40e9-8a6c-a49dfc3d374a", "sighting--0e6ec3cb-dc1e-4a3b-bc54-098c732b5fad", "sighting--ff0bf448-d26c-46a3-9ccd-8d3b550bf78e", "sighting--b5f2d68a-b175-4ae6-9600-eb7337097fb7", "sighting--09c2b6ab-07c3-49e0-9234-51d94eee3bb4", "sighting--5e14f16b-b38c-412b-94e7-214a43c83544", "sighting--a4b0016d-e894-4998-9d32-d1f94c5dfdf8", "sighting--a79917a8-63fb-47ef-b328-baf3fbf52de4", "sighting--db8aaadc-426e-4a88-b7ea-4179b29d8b2a", "sighting--a4a0a35b-49f6-4e61-a5b6-318eede43b8b", "sighting--a34b02ae-bf00-426f-9c49-ca40d50ca83d", "sighting--f3a0ffd5-8bf9-4195-bebd-c37e9ddd2789", "sighting--e3da0019-4c95-4b52-be2e-84404e1a3a80", "sighting--bc99c971-83b6-4af7-aa3d-abaa3a9acbbe", "sighting--e636fbc0-76a6-4631-a605-8c300065a4d9", "sighting--1e17e243-47cd-4c75-9117-1b38f5fbddeb", "sighting--4e5c4d7d-4c6c-410d-bf37-fd156c7bdfcf", "sighting--b810b8ae-666e-4b04-85d3-0f4239b07761", "sighting--953522bf-1119-4172-a921-3a98bf2416ca", "sighting--ca62ea0b-854c-4203-aaaa-8a8111edd5ae", "sighting--84af99e5-a9ca-4d86-9aab-a3b53d7b75a1", "sighting--fa46a30b-7af5-44fc-b9df-1ceab6eec8bc", "sighting--33dfbbe4-0389-4565-b411-925f5995a749", "sighting--6b81de25-500f-4431-a678-ca13c0ac4f60", "sighting--d8a09257-f381-4b9a-adc6-756750aaa43e", "sighting--281175a1-f383-401c-bed7-de72d5554bb9", "sighting--b4de640e-972a-447b-a6e9-2f903e2d9559", "sighting--0e207b20-b2f6-4d6d-bafa-3ecc4f90325c", "sighting--018c950c-e0f4-4548-bad1-8ecf76b9d041", "sighting--bcd8de84-a414-43b6-ae8a-371661673984", "sighting--426f2c63-549b-4e06-8824-eecfcb394dc7", "sighting--c026935e-1c31-4e47-902c-be576fe40245", "sighting--9d6f8676-94d9-40ea-b9a7-2919ef604b92", "sighting--24b6a73c-0527-4141-a570-80a4ccb60278", "sighting--9fdecc13-bd3c-4c7e-a264-71c76bbcce8a", "sighting--11eacb81-8be1-41bc-a98f-af244efb89da", "sighting--eb85b09d-0504-430c-ba3d-719fe236342d", "sighting--7e71e7af-9b57-4900-ae21-df7b2bde00ea", "sighting--619bad89-60b6-4746-8f41-f04a4884234a", "sighting--8ce214d3-f56f-4c74-95a8-36e1eeab885a", "sighting--e34a1d2e-e99a-481e-824a-f66b6ef97663", "sighting--6635a8d4-83a9-4cb1-8a6d-68575d1748af", "sighting--4fc29d8b-e4e8-4cff-8de4-70dbc38a0956", "sighting--dd1805e7-529f-4759-8cbe-09919c20b83a", "sighting--1438c63c-e389-465d-93d6-c92f28d1d0b9", "sighting--1ccee90b-eedb-4507-9499-889cf8e42e1b", "sighting--0278372a-0d1c-465b-beb5-698d012bacaf", "sighting--9744470e-c5a5-4989-a2bd-d3855000acd4", "sighting--e29c3e49-7b1d-4dbb-91df-9b454c197eb6", "sighting--a6354d5b-c868-4669-be87-4e69a2d46764", "sighting--b6b25d95-251e-4a67-a255-571188f3d281", "sighting--5a165dc9-c813-429e-b272-e77a7506389c", "sighting--07714944-337a-408c-989f-83492a2b4a4a", "sighting--8665ca1a-e211-430f-9e85-636c0bc31538", "sighting--09ba1cc5-9874-42f7-9146-3c4ed97df16d", "sighting--675f9749-0080-4982-adc8-1b9bd0ba4411", "sighting--1c91b69b-bb07-4429-8046-8bdbc411aa5e", "sighting--5ae8a7c5-adee-4830-8ed8-ace3a761a32c", "sighting--9cd94077-5d61-424e-bfb1-06cb4fad3143", "sighting--64dd0f4e-92bb-41f8-b9d2-ff764863dec0", "sighting--c89edc77-bd39-4180-b6ce-5f777b15d217", "sighting--0a36987b-60de-455e-801f-87f9b91bf1e1", "sighting--18de2d5a-0110-4d36-93c9-495325adf487", "sighting--a18b6730-3ec4-4f35-ab23-eac5d8c52b56", "sighting--df32ef66-9420-44d9-a23a-7ed7dc9ff830", "sighting--a011ad09-84ba-4c9c-a9f0-4118c60a911c", "sighting--f89a60d9-5da0-4151-b8bb-5bad45be726d", "sighting--e9f9215d-5b9b-4f61-9407-300f652dc25d", "sighting--6e395306-83e7-46a1-a148-fa1859afe92d", "sighting--b800cbeb-3ad6-4c27-ba4d-d899b8ccf52c", "sighting--d05d5ef7-dcce-44eb-a414-d6637b1a7334", "sighting--b38fa5b9-d2cf-4bb9-a84d-7df1578bba43", "sighting--14948571-0e47-4e13-9911-dc2ac5d818f8", "sighting--d5045d31-43d5-4583-9802-41a89354162a", "sighting--06a2c15d-ab81-472c-9883-47a2939e15d1", "sighting--c6b23558-3b29-427f-8e96-1ae8ccd3264a", "sighting--34e31c7d-4b37-4b8c-a587-3475f703cf1c", "sighting--0f97ea24-4ea3-4518-a07f-39a6c31e2c68", "sighting--3a877b24-4f18-45b0-9324-43244381d132", "sighting--34bdc5f2-1272-4f4d-85ba-9a287594deff", "sighting--da943893-6b15-46ac-9d2f-c323bf2943b4", "sighting--9431e727-32ef-45f8-91d2-4d683ffb9c6e", "sighting--dfc4d3cc-03c4-48f1-8d5b-92b37c796b56", "sighting--bc464317-9d0e-49ab-a2aa-3c879201533b", "sighting--7028ac3a-7bc9-4f4e-9e88-8145f05cd95f", "sighting--6aa39a16-d1c5-4687-9c59-e4c76300f949", "sighting--388cd08a-bca4-492d-bf20-029a613cddaf", "sighting--7a5451a7-a47a-438b-9924-01ee52461b53", "sighting--7e15190a-3291-4f6b-a012-aac04f495080", "sighting--4646d549-b673-49cc-b4f1-fd254dae2538", "sighting--44916b98-feff-4b1b-a8da-5e6b5b71a06e", "sighting--02b6e567-8cf9-4f5b-b4ee-acd78a4f0c5a", "sighting--e24b5177-1128-475f-833c-c404fc4e40c7", "sighting--a62064c7-d464-4a29-843e-cf0ecc91fcb2", "sighting--7b67c46f-89ce-4a62-9802-e5da635a2649"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-06T11:00:01.504Z", "modified": "2026-09-06T11:00:01.504Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": {"tlp": "white"}}]}